code-context-control 2.145.2__py3-none-any.whl → 2.146.0__py3-none-any.whl

cli/c3.py

@@ -91,7 +91,7 @@ console = Console() if HAS_RICH else None
 # Config
 CONFIG_DIR = ".c3"
 CONFIG_FILE = ".c3/config.json"
-__version__ = "2.145.2"
+__version__ = "2.146.0"
 
 # The PreToolUse matcher for native subagent calls (installer and hub migration).
 AGENT_MATCHER = "Agent|Task"
@@ -6685,10 +6685,10 @@ def _creds_cmd_list(args, project_path: str) -> None:
               "(add --global for all projects).")
         return
     print(f"{len(entries)} credential(s) — project scope shadows global:")
+    present = cred_store.presence_for(entries, project_path)
     missing = 0
     for name, entry in entries.items():
-        gone = not cred_store.is_resolvable(
-            name, project_path=project_path, scope=entry["scope"])
+        gone = not present[name]
         missing += gone
         print("  " + _creds_entry_line(name, entry, gone))
     if missing:

cli/hub_server.py

@@ -1804,7 +1804,7 @@ def api_projects_browse():
         return jsonify({"error": str(e)}), 400
     if not resolved.is_dir():
         return jsonify({"error": f"Not a directory: {resolved}"}), 404
-    registered = {os.path.normcase(p.get("path", "")) for p in _pm()._read_projects()}
+    registered = {os.path.normcase(p.get("path", "")) for p in _pm().list_registered()}
     dirs = []
     try:
         for child in sorted(resolved.iterdir(), key=lambda c: c.name.lower()):
@@ -1913,7 +1913,7 @@ def api_search_global():
                    if wanted else None)
 
     candidates, skipped = [], []
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = p.get("path") or ""
         if wanted_norm is not None and os.path.normcase(ppath) not in wanted_norm:
             continue
@@ -2138,14 +2138,15 @@ def api_projects_credentials():
     usage = cred_store.read_usage_state(str(resolved))
     home = cred_store.global_base()
     global_names = set(cred_store.list_entries(str(home))) if home else set()
+    listed = cred_store.list_entries(str(resolved))
+    present = cred_store.presence_for(listed, str(resolved))
     entries = []
-    for name, entry in cred_store.list_entries(str(resolved)).items():
+    for name, entry in listed.items():
         entries.append(_cred_entry_public(
             name, entry, usage=usage,
             shadows_global=(entry.get("scope") == "project"
                             and name in global_names),
-            value_ok=cred_store.is_resolvable(
-                name, project_path=str(resolved), scope=entry["scope"])))
+            value_ok=present[name]))
     return jsonify({"path": str(resolved), "entries": entries})
 
 
@@ -2360,7 +2361,7 @@ def api_hub_credentials_audit():
     only_global = (request.args.get("scope") or "").strip().lower() == "global"
 
     events, errors = [], []
-    for p in ([] if only_global else _pm().list_projects()):
+    for p in ([] if only_global else _pm().list_registered()):
         ppath = str(p.get("path") or "")
         if not (Path(ppath) / ".c3").is_dir():
             continue
@@ -2417,9 +2418,12 @@ def api_hub_credentials_overview():
     from services import credential_store as cred_store
     home = cred_store.global_base()
     global_entries = cred_store.list_entries(str(home)) if home else {}
+    # realm -> {name: value decodes}, probed once per vault and shared with
+    # the backup banner, which asks the same question of the same entries.
+    present = {"global": cred_store.value_presence("global", str(home))} if home else {}
     shadowed_in = {name: [] for name in global_entries}
     projects_out = []
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = str(p.get("path") or "")
         row = {"name": p.get("name") or "", "path": ppath,
                "initialized": True, "error": None, "entries": []}
@@ -2428,14 +2432,15 @@ def api_hub_credentials_overview():
                 row["initialized"] = False
             else:
                 usage = cred_store.read_usage_state(ppath)
+                ok = cred_store.value_presence("project", ppath)
+                present[cred_store.realm("project", ppath)] = ok
                 for name, entry in cred_store.list_entries(ppath).items():
                     if entry.get("scope") != "project":
                         continue
                     row["entries"].append(_cred_entry_public(
                         name, entry, usage=usage,
                         shadows_global=name in global_entries,
-                        value_ok=cred_store.is_resolvable(
-                            name, project_path=ppath, scope="project")))
+                        value_ok=ok.get(name, False)))
                     if name in shadowed_in:
                         shadowed_in[name].append(
                             {"name": row["name"], "path": ppath})
@@ -2446,21 +2451,21 @@ def api_hub_credentials_overview():
     global_out = [
         {**_cred_entry_public(
             name, entry, usage=global_usage,
-            value_ok=cred_store.is_resolvable(
-                name, project_path=str(home), scope="global")),
+            value_ok=present.get("global", {}).get(name, False)),
          "shadowed_in": shadowed_in.get(name, [])}
         for name, entry in global_entries.items()
     ]
     return jsonify({"global": {"entries": global_out}, "projects": projects_out,
                     "backup": _cred_backup_summary(
-                        [row["path"] for row in projects_out if row["initialized"]])})
+                        [row["path"] for row in projects_out if row["initialized"]],
+                        present)})
 
 
-def _cred_backup_summary(project_paths) -> dict:
+def _cred_backup_summary(project_paths, present) -> dict:
     """Backup state as counts for the Hub banner; a broken file reports its error."""
     from services import credential_backup
     try:
-        st = credential_backup.status(project_paths)
+        st = credential_backup.status(project_paths, presence=present)
     except credential_backup.BackupError as exc:
         return {"enabled": True, "error": str(exc), "restorable": 0, "lost": 0}
     return {"enabled": st["enabled"], "restorable": len(st["restorable"]),
@@ -2612,7 +2617,7 @@ def api_hub_tokens_overview():
     days = _hub_tokens_days(request.args.get("days"))
     rows, totals = [], {"tool_calls": 0, "tool_tokens": 0,
                         "session_tokens": 0, "saved": 0}
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = str(p.get("path") or "")
         row = {"name": p.get("name") or "", "path": ppath, "initialized": True,
                "error": None, "tool_calls": 0, "tool_tokens": 0,
@@ -2662,7 +2667,7 @@ def api_hub_locks_overview():
     from services import agent_locks as al
 
     rows, total = [], 0
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = str(p.get("path") or "")
         row = {"name": p.get("name") or "", "path": ppath, "initialized": True,
                "error": None, "enabled": True, "mode": "advisory",
@@ -2752,7 +2757,7 @@ def api_hub_enforcement_overview():
 
     rows = []
     totals = {"discipline": 0, "access": 0}
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = str(p.get("path") or "")
         row = {"name": p.get("name") or "", "path": ppath, "initialized": True,
                "error": None, "mode": None, "scope": "", "set_by": "",
@@ -3428,7 +3433,7 @@ def api_hub_override_policy_overview():
     from services import override_policy as opol
 
     rows = []
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = str(p.get("path") or "")
         row = {"name": p.get("name") or Path(ppath).name, "path": ppath,
                "initialized": True, "error": None, "policy": None,
@@ -3740,7 +3745,7 @@ def api_hub_access_overview():
     empty = {"deny": [], "read_only": [], "confirm": [], "mask": 0,
              "corrupt": False}
     rows = []
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         ppath = str(p.get("path") or "")
         row = {"name": p.get("name") or Path(ppath).name, "path": ppath,
                "initialized": True, "error": None, "rules": dict(empty)}
@@ -4268,7 +4273,7 @@ def api_pm_global():
     from services.task_store import TaskStore
 
     tasks, skipped, by_project = [], [], {}
-    entries = _pm()._read_projects()
+    entries = _pm().list_registered()
     for p in entries:
         ppath = p.get("path") or ""
         if not Path(ppath).is_dir():
@@ -4808,7 +4813,7 @@ def _session_project(raw: str):
     if not raw:
         return None
     want = os.path.normcase(os.path.normpath(raw))
-    for p in _pm().list_projects():
+    for p in _pm().list_registered():
         path = str(p.get("path") or "")
         if path and os.path.normcase(os.path.normpath(path)) == want:
             return {"name": str(p.get("name") or Path(path).name), "path": path}
@@ -4847,7 +4852,7 @@ def api_hub_sessions_overview():
         return row
 
     with ThreadPoolExecutor(max_workers=8) as pool:
-        rows = list(pool.map(one, _pm().list_projects()))
+        rows = list(pool.map(one, _pm().list_registered()))
     rows.sort(key=lambda r: r.get("last_active") or "", reverse=True)
     return jsonify({"projects": rows, "features": _SESSIONS_FEATURES})
 
@@ -4876,7 +4881,7 @@ def api_hub_sessions_list():
             res["errors"] = []
         else:
             projects = [{"name": str(p.get("name") or ""), "path": str(p.get("path") or "")}
-                        for p in _pm().list_projects()]
+                        for p in _pm().list_registered()]
             res = sc.list_many(projects, stale=stale, q=q, limit=limit, before=before)
         return jsonify(res)
     except Exception as e:

cli/hub_ui/app.js

@@ -50,7 +50,10 @@ function App() {
   }, []);
 
   useEffect(() => { loadConfig(); loadProjects(); }, []);
-  usePoll(loadProjects, 5000);
+  // Live status matters on the project list and in a drill-in. Elsewhere it
+  // only refreshes the sidebar and top-bar counts, which may lag 30 s, and
+  // each poll reads every project's activity log.
+  usePoll(loadProjects, mainView === 'projects' || drill ? 5000 : 30000);
 
   // Persisted preferences
   const toggleTheme = () => {

cli/hub_ui/components/hub_credentials.js

@@ -1381,7 +1381,10 @@ function CredSourcesStrip({ sources, onResync, busy }) {
 
 // path=null → the global vault (~/.c3): scope locked to 'global'.
 // path=string → that project's merged view (global entries + project shadows).
-function CredsManager({ path, projectName, onChanged, bindSlash }) {
+// Global vault (path null): rows arrive as `globalEntries` (null while the
+// page's overview loads) and `onChanged` refills them; loading the overview
+// here as well fetched the whole cross-project index twice.
+function CredsManager({ path, projectName, onChanged, bindSlash, globalEntries }) {
   const isGlobal = !path;
   const [entries, setEntries] = useState([]);
   const [loading, setLoading] = useState(true);
@@ -1408,14 +1411,10 @@ function CredsManager({ path, projectName, onChanged, bindSlash }) {
   const withPath = (obj) => (path ? Object.assign({ path }, obj) : obj);
 
   const load = useCallback(async () => {
+    if (!path) return;
     try {
-      if (path) {
-        const data = await api.get('/api/projects/credentials?path=' + encodeURIComponent(path));
-        setEntries((data && data.entries) || []);
-      } else {
-        const data = await api.get('/api/hub/credentials/overview');
-        setEntries((((data || {}).global) || {}).entries || []);
-      }
+      const data = await credApi.listProject(path);
+      setEntries((data && data.entries) || []);
       setError('');
     } catch (e) { setError(String(e)); }
     setLoading(false);
@@ -1426,6 +1425,14 @@ function CredsManager({ path, projectName, onChanged, bindSlash }) {
     load();
   }, [load]);
 
+  useEffect(() => {
+    if (path) return;
+    setEntries(globalEntries || []);
+    setLoading(globalEntries == null);
+  }, [path, globalEntries]);
+
+  const refresh = () => { load(); if (onChanged) onChanged(); };
+
   // `/` focuses the filter, as it does on every other hub board — but only
   // where nothing above already claims the key. The hub Credentials page owns
   // `/` for its cross-project search, so the manager binds it solely when
@@ -1447,7 +1454,7 @@ function CredsManager({ path, projectName, onChanged, bindSlash }) {
     return () => window.removeEventListener('keydown', onKey);
   }, [bindSlash, drawer, menu, confirm]);
 
-  const done = (msg) => { notify(msg); load(); if (onChanged) onChanged(); };
+  const done = (msg) => { notify(msg); refresh(); };
 
   const saveForm = async () => {
     if (!form || !form.name.trim()) return;
@@ -1507,8 +1514,7 @@ function CredsManager({ path, projectName, onChanged, bindSlash }) {
       if (resp && resp.error) setError(resp.error);
       else {
         notify(`${field === 'inject' ? 'Auto-inject' : 'Agent access'} ${next ? 'enabled' : 'disabled'} for '${entry.name}'`);
-        load();
-        if (onChanged) onChanged();
+        refresh();
       }
     } catch (e) { setError(apiErr(e)); }
   };
@@ -1619,7 +1625,7 @@ function CredsManager({ path, projectName, onChanged, bindSlash }) {
       } else {
         notify(`${label}: ${ok} ${ok === 1 ? 'entry' : 'entries'}`);
       }
-      if (action !== 'check') { exitSelect(); load(); if (onChanged) onChanged(); }
+      if (action !== 'check') { exitSelect(); refresh(); }
     } catch (e) { notify(apiErr(e), 'err'); }
     setBulkBusy(false);
   };
@@ -2012,7 +2018,7 @@ function CredsManager({ path, projectName, onChanged, bindSlash }) {
         <CredDrawer entry={drawer} path={path} projectName={projectName}
           initialReplace={replaceOnOpen}
           onClose={() => { setDrawer(null); setReplaceOnOpen(false); }}
-          onChanged={() => { load(); if (onChanged) onChanged(); }} />
+          onChanged={refresh} />
       )}
       {confirm && <CredConfirm spec={confirm} onClose={() => setConfirm(null)} />}
     </div>
@@ -2420,7 +2426,8 @@ function HubCredentials({ projects, onOpenDrill }) {
         <CredAuditView path={null} initialName={auditName}
           onOpenDrill={onOpenDrill} />
       ) : sub === 'global' ? (
-        <CredsManager path={null} onChanged={loadOverview} />
+        <CredsManager path={null} onChanged={loadOverview}
+          globalEntries={ov ? ((ov.global || {}).entries || []) : null} />
       ) : !ov ? (
         <div style={{ color: T.textMuted, fontSize: 13 }}>Loading…</div>
       ) : (ov.projects || []).length === 0 ? (

cli/hub_ui/state.js

@@ -24,11 +24,15 @@ const IDE_OPTIONS = [
 
 const ideLabel = (ide) => IDE_LABELS[ide] || ide || 'unknown';
 
-// Repeating poll that pauses while the tab is hidden.
+// Repeating poll that pauses while the tab is hidden and skips a tick while
+// the previous call is still running, so a slow route never stacks requests.
 const usePoll = (fn, ms) => {
   React.useEffect(() => {
-    const iv = setInterval(() => {
-      if (!document.hidden) fn();
+    let running = false;
+    const iv = setInterval(async () => {
+      if (document.hidden || running) return;
+      running = true;
+      try { await fn(); } finally { running = false; }
     }, ms);
     return () => clearInterval(iv);
   }, [fn, ms]);

cli/hub_ui.html

@@ -137,7 +137,7 @@
 
 <body>
   <div id="root"></div>
-  <script type="text/babel">
+  <script type="text/babel" data-presets="react">
     /* __C3_HUB_SCRIPTS__ */
   </script>
 </body>

cli/server.py

@@ -2764,12 +2764,12 @@ def api_credentials_list():
     from services import credential_store as cred_store
     pp = str(PROJECT_PATH)
     usage = cred_store.read_usage_state(pp)
+    listed = cred_store.list_entries(pp)
+    present = cred_store.presence_for(listed, pp)
     out = []
-    for name, entry in cred_store.list_entries(pp).items():
+    for name, entry in listed.items():
         out.append(cred_store.public_entry(
-            name, entry, usage=usage,
-            value_ok=cred_store.is_resolvable(
-                name, project_path=pp, scope=entry["scope"])))
+            name, entry, usage=usage, value_ok=present[name]))
     return jsonify({"entries": out})
 
 

cli/tools/credentials.py

@@ -98,8 +98,7 @@ def _act_list(project_path: str) -> str:
             "The user manages them via the Credentials UI tab or `c3 creds set`."
         )
     usage = cs.read_usage_state(project_path)
-    missing = {n for n, e in entries.items() if not cs.is_resolvable(
-        n, project_path=project_path, scope=e["scope"])}
+    missing = {n for n, ok in cs.presence_for(entries, project_path).items() if not ok}
     lines = [f"[creds] {len(entries)} entries (project scope shadows global):"]
     lines += [_format_entry_line(n, e, usage, n in missing)
               for n, e in entries.items()]

cli/ui.html

@@ -160,7 +160,7 @@
 
 <body>
   <div id="root"></div>
-  <script type="text/babel">
+  <script type="text/babel" data-presets="react">
     /* __C3_UI_SCRIPTS__ */
   </script>
 </body>

{code_context_control-2.145.2.dist-info → code_context_control-2.146.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-context-control
-Version: 2.145.2
+Version: 2.146.0
 Summary: Local MCP code-intelligence for AI coding tools: surgical search/read/edit, agent-config version history, path-level access + masking guards, and a multi-project hub.
 Author-email: Dimitri Tselenchuk <dtselenc@gmail.com>
 License-Expression: Apache-2.0

{code_context_control-2.145.2.dist-info → code_context_control-2.146.0.dist-info}/RECORD

@@ -1,7 +1,7 @@
 cli/__init__.py,sha256=ec66drCZGNMRU4V6ov0zVhYZph1us12Vn8OvG_LJyRY,22
 cli/_hook_utils.py,sha256=RhfS2WS5VMSi2w2Jxcts1wg5WC-UFp89JOQvcO5Jjb8,23002
 cli/_shell_writes.py,sha256=XzUNlUDljmg-wZxK03xHnRe36WeQxe4tpO9HKVFwP5o,5090
-cli/c3.py,sha256=Thn44zRVOuNqg22oafbPECYSXzQCBYZycF377xu1zIE,431828
+cli/c3.py,sha256=AashzO8-7Jfq2V61RXFh2z5KfF5Oux5INUY-2s6IQVk,431810
 cli/docs.html,sha256=pPxcP5ieY0DcfEDvegwIcRxbz1woLZoKLVSF-4JVy0Q,146784
 cli/edits.html,sha256=UjAhoCmBmQ89cklGvJqzC6eyNP2tc8H6T-e01DVkLvE,43418
 cli/hook_access_guard.py,sha256=Mjrrt3agYCWPqSjdzk_Sw4ooMrizO8Um-nQjgGfXck4,27896
@@ -23,13 +23,13 @@ cli/hook_session_end.py,sha256=toFEPDKRoutDuVOmuOgHmQ8CM0o7tF7yALhMxJz7VEM,3482
 cli/hook_session_open.py,sha256=Badeikv37D7b6inSHbVjAxtfdH4xiJKFT1O52fgreGs,7443
 cli/hook_session_stats.py,sha256=I-2NeLlV1NxeqKtTM2JH9haSpFU7r4qG0u8pfCJ80YU,8725
 cli/hook_terse_advisor.py,sha256=W_zaTfX2akgX-ifuUTsLu2H1atM8XmWt6jpPoeU7Pm0,6252
-cli/hub_server.py,sha256=pA8AH-Y2vZDwT8F5Fb6sYPURI-seI1fysU8RYM3-SIA,217816
-cli/hub_ui.html,sha256=nnGqWhWGCLfNisGUnoAlQFcBr6wPNsq-AEOR7uFtVkE,2942
+cli/hub_server.py,sha256=of3Auy9HFPSa1gDqrRITOfv29wz6uqi62Afb0iFW7uE,218145
+cli/hub_ui.html,sha256=v41R_JAH4Jwodpy3tbeBUel-80FbNmffBrey-QH5Q64,2963
 cli/mcp_proxy.py,sha256=r-Qhlie7gCtotex8yQUudCyBLRUK-IW6cNIW5RhBW0o,17648
 cli/mcp_server.py,sha256=5y_oaJvvGq6p1C4L-4MamudyAhpJYeIjDJcXSeB9dsM,73775
 cli/progress.py,sha256=qTkNy0howOD3hXraMo4ok3dYTpBW5yG_tenKfF4UDM0,1470
-cli/server.py,sha256=TBuQi03jfHMeTIr9O27zlFMLA6AGCPiU0vNb319tfhw,173203
-cli/ui.html,sha256=xcdt74nlFEXx-0Bx6-Okw-WSVZPAXL0iukxU0ytI6CA,5694
+cli/server.py,sha256=dJOOXYU1zmN-UBuMmHhv8XlnknSyO8xj7mXWSDAGIBY,173188
+cli/ui.html,sha256=uuPwIJNKDQH_fsaR3xNB2AKky9WzKfaXnKr_k3aTtxo,5715
 cli/ui_legacy.html,sha256=cI8tC6RKmE2NIJOcsu7CY-zT4VznjcbD6NTjxb_fvUY,378460
 cli/ui_nano.html,sha256=UAwQ6bbTOXAoGq191AZ7slhngR9edJSa3IhqpynveDg,27740
 cli/commands/__init__.py,sha256=0Z8MABNzwSFJGT4Xv9R5AJVR8XxraTsuVTz5b0bShmo,38
@@ -49,8 +49,8 @@ cli/guide/sessions.html,sha256=fBcbX61mvy2T5fX9Lkojb8Gw7n2RZ4Oo95EE_SC5Q6A,31707
 cli/guide/shared.css,sha256=Mmm7W6aYxrkDq2RPOcyXiQFYGR-yB3auwX1uIWi6C74,15967
 cli/guide/tools.html,sha256=8Kup2WXvZg2drI9vzG3ZxPKifN5VJuaC3ljd5oUbho8,133248
 cli/guide/workflow.html,sha256=T_5HW4YOPng02vrxBWknz4LYSx2vC9Iogdwb81YlWqA,78604
-cli/hub_ui/app.js,sha256=lA6HxB1XjB5VZXqw-wyDkDQnh5F2NC8GATnozzXpAt8,7115
-cli/hub_ui/state.js,sha256=QIRs_ooO8ODgdU0mwiwvIAz7IbiTs17fqLyolXbCeCI,7373
+cli/hub_ui/app.js,sha256=AWzlFht1Fmn4559KfooKC03CvoG2I6AXbYUEZ2w8ZfU,7362
+cli/hub_ui/state.js,sha256=OrIQ_kx_wUdyiyXlKmMKC8bbKzMPve1ZuFClRXOrDEw,7593
 cli/hub_ui/components/add_project.js,sha256=j5m0mX0gePcEYQW_0vodJkw5v8Vn2lQqPAI0miIGdv4,3182
 cli/hub_ui/components/config_editor.js,sha256=xew4RoxFt3j3r0UTkVc3-7y2Z1cOjx3dgRZMKSsCFhg,18211
 cli/hub_ui/components/drill_artifacts.js,sha256=cSD_Ph2HUoURI893i-JdfftsO9AKz_0TFH51s76B6x4,9468
@@ -63,7 +63,7 @@ cli/hub_ui/components/global_search.js,sha256=GPfq1EsZa73vXBNCVn4VhT3a7gYkaUblbc
 cli/hub_ui/components/hub_access.js,sha256=AF00OgOGak4ASPE2OvxOsBqjS_KKd5QKCZZ6Kp3zGXw,34339
 cli/hub_ui/components/hub_ci.js,sha256=KrdzALpgFTFcPEMN1R-OU0tyl8irsj91HECRlGsQLjQ,17873
 cli/hub_ui/components/hub_cred_audit.js,sha256=fUmAPTOa75gdxAsw6cNHPYenu7jDTljSbFX9GYJnW14,11662
-cli/hub_ui/components/hub_credentials.js,sha256=SH5_0fd-yKbqKkZzh9RV5KEGjMKDZqRc6DpSbOqX9KU,119449
+cli/hub_ui/components/hub_credentials.js,sha256=xDqxDb0a0yaJQgTE-hEtx0PTOo4x9j__5GhdlxGd9mo,119643
 cli/hub_ui/components/hub_enforcement.js,sha256=NuHl49KvKUjrYtfV6FAvfWiaFGq020wEHjHCx9AYhf4,48839
 cli/hub_ui/components/hub_locks.js,sha256=v1yv7JH5anfC_kZo26I1Dyt1_ytamGOaBpCIWGziuVk,10321
 cli/hub_ui/components/hub_sessions.js,sha256=Uo-U3T9ZIqSgiBkfNIWB3K2c-J-WBJApUU2IPSi5BZk,21401
@@ -87,7 +87,7 @@ cli/tools/artifacts.py,sha256=SjazShDFIzOpAZW7uMv9itBktXnc6pqQKZeaen8GgzI,9379
 cli/tools/bitbucket.py,sha256=cni8Y1EoiNm9jcHEpzi2dgKFIT1-4ct0WOhpTs7ac3k,35812
 cli/tools/ci.py,sha256=1--Ak18ikHkO7q4HWlDCVac-U969eEFejkd-24T0xuY,20057
 cli/tools/compress.py,sha256=PcgxEw7KfofmJsTLfRf3mjWMxyNlqkcSNzMTlT27SW0,12534
-cli/tools/credentials.py,sha256=DKa6rTzEO_XTzeIVUBT8z9vCgjbeiXPR_TFg9_Y3dQQ,20078
+cli/tools/credentials.py,sha256=NczO0KT3LTJlD3ZedXWRAtH_8YTPhya0Txja3ystdzE,20039
 cli/tools/delegate.py,sha256=TrHPXEyufQh0in3Ay7XcOG5wQwCYbnbz9r4naIuhbN8,126990
 cli/tools/edit.py,sha256=xnRRM2UUybvGvfSzXzIjWmt6_zNaCbkupiK1z-8K4jE,30127
 cli/tools/edit_verify.py,sha256=L1a6U9Z-pAOQz0Ur9SFTNfmCl0OP9_4VdkyxlXOyHDM,11910
@@ -131,7 +131,7 @@ cli/ui/components/sessions.js,sha256=FIKtil76B8tCkAmcFV7hlj6GQ_DCJK2jCzvEmdK7NBE
 cli/ui/components/settings.js,sha256=FXcn-UQE2mXC6HFsLeEas-wAUFKt0OJaLySroZQMhGA,84095
 cli/ui/components/sidebar.js,sha256=K2ym2kUgpbyG-EBA_wBIIiqQY8qTatsiBZwzseMWuIQ,9939
 cli/ui/components/tasks.js,sha256=vyKQ3uwoppMwvdEaHlhWXW4oWcAisx4NveqzMhsYqHo,38438
-code_context_control-2.145.2.dist-info/licenses/LICENSE,sha256=l8Kh5QCNWNvR6kIt8L0BUZvc2LAFiHv2c-FnsGnUZf4,11301
+code_context_control-2.146.0.dist-info/licenses/LICENSE,sha256=l8Kh5QCNWNvR6kIt8L0BUZvc2LAFiHv2c-FnsGnUZf4,11301
 core/__init__.py,sha256=TSDCEcM4V7gcZVM3w2ykJaqEUch4Dkon-rivV17T73s,2501
 core/codex_patch.py,sha256=CxvT_rQIwPNTRJZj9EHJmx0ZdOeSLxjiixuLI3Z7lPc,2107
 core/config.py,sha256=wCjrZKXRywUbR6WRcO7optyOirAQ2DeRNdPCU0X5zIY,23762
@@ -190,7 +190,7 @@ oracle/ui/chat/toolbar.js,sha256=ZDexIIpGwsQ6XsY4Tyo082rJoofdD_JBTV97-mLQUVM,120
 services/__init__.py,sha256=3Kn4cZweLm7at8wFdBdZ-Zwo8hHcnVIsmY5f29nzi2Y,116
 services/access_guard.py,sha256=tj-rWVlEzLIviIEXMRAYCWRlcgLPUwJ1qqQfmIA5t7Q,79074
 services/access_telemetry.py,sha256=9pOCLS9LgDtM7Z4cCEyl7osxhj-m3wsPubcXolBKuV4,9568
-services/activity_log.py,sha256=n7iso1YmH_WLrNdpUViECv_zJEh2dtFejDMcYnJrP3Y,6752
+services/activity_log.py,sha256=c_jTOsR-d1d5B3u67eg8mRA7LZhtP6H1-6leeGa0Go4,7990
 services/agent_base.py,sha256=a-gdSd_jtZtbjXo1WS8CnWCagXgKaGZd5ShcG6s0kT4,4809
 services/agent_downshift.py,sha256=hGFg-knqa6NUqmZUijyTDV82Fz88ieh1YjN_mG5tz8U,8444
 services/agent_locks.py,sha256=nRAPuRSoet7BG9oOsNyA5WhlNy-UMhpsq6z5ggIPmLA,22421
@@ -204,7 +204,7 @@ services/background_service.py,sha256=Hn-vjAUq_wPm0cUiwwzyr-D7Xxkygjuy7s3_9XuLaO
 services/benchmark_dashboard.py,sha256=iR-DnqnoKbqHMJ4d-ZkIvJBYfzwTa7r-jzO6j2BYDfQ,27711
 services/bitbucket_client.py,sha256=2RehoyVP4vc52zjQi3Gdlt2WRAUpFv8zVMn12xx1yHE,22338
 services/bitbucket_credentials.py,sha256=2qLA9pQMol4y95y4DJMNBsBBPUsJQCKbLFo2iiCnfvI,7364
-services/ci_act.py,sha256=SS0urrIScwthfWHB5qFCk6cTY5Wa9kV20M3v8xgCWAI,23358
+services/ci_act.py,sha256=82i5aa1wgQvc8Xq_pQ9-k1_57LBQ0-mWSUT9xV-q7Tk,24070
 services/ci_cache.py,sha256=Too3XyeE-oeiqQm4IJ10giFvhIEr29YfDLUpZDl8SBU,13256
 services/ci_expr.py,sha256=BsCUoL4ZN1Q8KjYJ07xWsPynV04Q8dg-ryIIKNOYk70,15641
 services/ci_failures.py,sha256=32aJ_R5S-JE4fErhzs06ZQzhBVLawZ4brtXtdoJrnE0,8087
@@ -212,7 +212,7 @@ services/ci_github.py,sha256=2yXsVAiWMIvhxH7xsMJIO_3DxCvZbKJcSWt4zXyyWxE,6699
 services/ci_impact.py,sha256=9_CJv2sNza0_qW7cSsMnxhJy_AGflDONjL9jKQeoWmc,10966
 services/ci_intel.py,sha256=frr1jL-FXU_JNUoRW8TwnZo04fqUElAGGEsDEvgIeUs,7161
 services/ci_runner.py,sha256=S4xJakKb8ZNojtMKjmcqOkTL1NPEV8b_jThJEFR4mFs,51001
-services/ci_workflow.py,sha256=Y671yZhCfFyv_7fW5Vox6WfQ_VUzejwscLGDfK9pDf4,34920
+services/ci_workflow.py,sha256=vqUysN2d7-SHDLP3l8E1Z8xPdkVezd-GuxxmvRRUiC8,34996
 services/circuit_breaker.py,sha256=ES6PpjL40gfDhtK88GeS6GFzsz5EOEEkZsB-DzX_tbw,3179
 services/claude_md.py,sha256=fhRyJ1ueDKVbhNI-6U3W6Py5NAXngaBzxO4mTxvqEOo,62495
 services/codex_integration.py,sha256=Zuyvb-nAMahZkNxl8oKA7bXs07xbQshG8HGY68ml2cg,7526
@@ -222,8 +222,8 @@ services/context_snapshot.py,sha256=2f_bxY3xX4ZC653ncYno8YSeSTFSavwBjrorytHA0Ns,
 services/conversation_store.py,sha256=RKA0nk09VAI8Ip935kSVlQdF-cQEzFLrgHbZiEJ7G1E,37518
 services/cred_audit.py,sha256=tdxnRzbB0c8nJ7dqA9HOJrcOeRWivEzq6yhwu6ksmZI,10240
 services/cred_telemetry.py,sha256=LwDd4x0Mu6YXeDUrgICHnX9o1Ym_4hoouRp98qx0zlI,10926
-services/credential_backup.py,sha256=f34AkUbVDm95jAbsBUkQs1bhRIzEC1TfHJ9axgl8HYU,12960
-services/credential_store.py,sha256=ttjE5Dwa9Rf32VIDR65UIG9tIui-U5eMFHlomLb9dBI,72126
+services/credential_backup.py,sha256=TeOAwDAEG-BLnpO0E861m3AeFSbD8tQ_q3ydNYcMDds,13223
+services/credential_store.py,sha256=S5WnwPmaCJdo3wIZlWh7BRuT057pHPf1cdlzZOWPOgc,74627
 services/delegate_agents.py,sha256=dIQAWepQgtDdV6s8WoCLvf7qAjlwMZHcVWWzsSO3qjE,4745
 services/delegate_hints.py,sha256=h65rOfY7PJDl5C8Z4b-L4vGcGri0h4J7canL0QWYQ28,8341
 services/delegate_write.py,sha256=6pKu6QTQ7JxRsOGoXPL_dMqDhbmEl5z-i42KI9Vpl2M,10164
@@ -274,7 +274,7 @@ services/override_policy.py,sha256=TehVPxfQ8LZWIOUzCnnioIdMUPZZ7JZa1ja77smpW2c,3
 services/override_requests.py,sha256=H9lSUbfOjkjE1muztaQ58InqqsqhtnKIT-pF2VzvWkg,31148
 services/override_wake.py,sha256=HjSOXQTDi0irgeMyrTqngL7xLcSOOIgYsVW9yxod4ps,10363
 services/parser.py,sha256=S_YoKLS3r1xCUVHApXb3BTEfoRAzFhuo1_8XsG0qxVE,63505
-services/project_manager.py,sha256=FkNCddjMU2qywuJ3RWK4fU3xg3SA-F2CteR2rix4iUY,47990
+services/project_manager.py,sha256=ibgNOqmNQBjdr_dXkbcsUdsnOriroYKW87wMnGZCovk,48376
 services/project_runtime.py,sha256=yyftX48BFjq4B2KcR4KGszDAAa4xR6gn6j0SgTyro1s,11603
 services/protocol.py,sha256=CWZ0BWWd-jPui-11hZlvGgkNk18gMFhhLWbp-BP35Kk,12861
 services/proxy_state.py,sha256=u5rd0k6CrOsywZA8FpRu_hMLwhR0TAJhZjy5MdWbCGc,6107
@@ -288,7 +288,7 @@ services/router.py,sha256=Cz10nx2fKTbaGn14mSBePWIDrw5rdcs_1JFYXeik084,15626
 services/runtime.py,sha256=931eux-zdsXh0M6i6RmXEGAKiXLfa9aDra9V12Q5Z_Y,13767
 services/scanner.py,sha256=lH0aiDCdCRruKS-VTAD_LsF4zrhMLpMRhFlOZZlw4VM,9613
 services/session_benchmark.py,sha256=KUcWWC5X088p_ao6DgglUMwj7jCzdecPKxJ7XiGKob0,106255
-services/session_catalog.py,sha256=dPs2tp93G71iL-CxjnFZ4NmoX10DbSjOymikliJYZig,44700
+services/session_catalog.py,sha256=H0TrxFQERg26B1Jgx_rwXHTO4lhXhAshj2oIvWHYqZg,46661
 services/session_live.py,sha256=JixvsUdmcKGsuZGgWj-iRFJZbQDfQTWoVeIy1-M90A0,5146
 services/session_manager.py,sha256=IBE71TORRlNuRBhswobD5KzXhfFAijy6KrnmaP1lnuc,57391
 services/session_preloader.py,sha256=DsTAXMKVtrX9yu1sEFojYDi9-jkSAj1Ylt9JTy57Dow,9883
@@ -333,8 +333,8 @@ tui/screens/search_view.py,sha256=MMHjVdlk3HZSuDBSvq8IGrqv_Mh5Us6YqXQ80bcWSMk,19
 tui/screens/session_view.py,sha256=eZ1eDwHTvPOck1wCCviixtOaCxIkBT_95ytNNNriGNA,5991
 tui/screens/stats.py,sha256=p81PjzdaIv7hllb8f45-rlVe4lJZwSdIMqu7e86_u5s,6223
 tui/screens/ui_view.py,sha256=1QJCgLh2YfgWIpvzRG1KOGXYEaOYX6ojN61Azjf2oX0,2125
-code_context_control-2.145.2.dist-info/METADATA,sha256=bHhi9gHWwyOe6v9kxLBSGBFgB_jEEtfWVQomsR91rss,28902
-code_context_control-2.145.2.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
-code_context_control-2.145.2.dist-info/entry_points.txt,sha256=7kX_WUsDCF2hbXzvbNyscyaBb9AeA-DJY5v_5hN0DlU,93
-code_context_control-2.145.2.dist-info/top_level.txt,sha256=wRt41zBybVF3qAiNXHz9BURbkKvUvfhmWWtKMhaw6eE,29
-code_context_control-2.145.2.dist-info/RECORD,,
+code_context_control-2.146.0.dist-info/METADATA,sha256=qMaA5mgjHH8SPwuUFvut1k-KVaWK3DuHawvK8axeKNs,28902
+code_context_control-2.146.0.dist-info/WHEEL,sha256=YVMoNqKzERt-wjUZwJ33xBGAwnFl-4cqbYkTtWa4itE,91
+code_context_control-2.146.0.dist-info/entry_points.txt,sha256=7kX_WUsDCF2hbXzvbNyscyaBb9AeA-DJY5v_5hN0DlU,93
+code_context_control-2.146.0.dist-info/top_level.txt,sha256=wRt41zBybVF3qAiNXHz9BURbkKvUvfhmWWtKMhaw6eE,29
+code_context_control-2.146.0.dist-info/RECORD,,

services/activity_log.py

@@ -1,6 +1,6 @@
 """ActivityLog — Append-only JSONL activity log for C3 events."""
 import json
-from collections import Counter, deque
+from collections import Counter
 from datetime import datetime, timezone
 from pathlib import Path
 
@@ -75,6 +75,9 @@ class ActivityLog:
         """
         if not self.log_file.exists():
             return []
+        # A row of this type holds its JSON-encoded name, so a chunk or line
+        # without those bytes cannot match and is skipped unparsed.
+        needle = json.dumps(event_type).encode("utf-8")
         events: list = []
         try:
             with open(self.log_file, "rb") as handle:
@@ -86,12 +89,19 @@ class ActivityLog:
                     position -= step
                     handle.seek(position)
                     block = handle.read(step) + tail
-                    lines = block.split(b"\n")
-                    # The first element may be a partial line: keep it for the
-                    # next (earlier) chunk unless we are at the file start.
-                    tail = lines.pop(0) if position > 0 else b""
-                    for raw in reversed(lines):
-                        if not raw.strip():
+                    # The first line may be partial: keep it for the next
+                    # (earlier) chunk unless we are at the file start.
+                    tail = b""
+                    if position > 0:
+                        cut = block.find(b"\n")
+                        if cut < 0:
+                            tail = block
+                            continue
+                        tail, block = block[:cut], block[cut + 1:]
+                    if needle not in block:
+                        continue
+                    for raw in reversed(block.split(b"\n")):
+                        if needle not in raw:
                             continue
                         try:
                             entry = json.loads(raw.decode("utf-8", "replace"))
@@ -119,15 +129,13 @@ class ActivityLog:
         # far back in the log behind many tool_call entries.  Use a larger scan
         # window so they aren't missed.
         scan_factor = 100 if event_type else 5
-        tail = deque(maxlen=max(1, limit * scan_factor))
-        with open(self.log_file, encoding="utf-8") as handle:
-            for line in handle:
-                if line.strip():
-                    tail.append(line)
-        for line in reversed(tail):
+        needle = json.dumps(event_type).encode("utf-8") if event_type else b""
+        for raw in self._tail_lines(max(1, limit * scan_factor)):
+            if needle not in raw:
+                continue
             try:
-                entry = json.loads(line)
-            except json.JSONDecodeError:
+                entry = json.loads(raw)
+            except ValueError:
                 continue
             if event_type and entry.get("type") != event_type:
                 continue
@@ -141,6 +149,26 @@ class ActivityLog:
                 break
         return events
 
+    def _tail_lines(self, count: int, chunk_bytes: int = 64 * 1024) -> list:
+        """The last ``count`` non-blank lines as bytes, newest first."""
+        lines: list = []
+        with open(self.log_file, "rb") as handle:
+            handle.seek(0, 2)
+            position = handle.tell()
+            tail = b""
+            while position > 0 and len(lines) < count:
+                step = min(chunk_bytes, position)
+                position -= step
+                handle.seek(position)
+                parts = (handle.read(step) + tail).split(b"\n")
+                tail = parts.pop(0) if position > 0 else b""
+                for raw in reversed(parts):
+                    if raw.strip():
+                        lines.append(raw)
+                        if len(lines) >= count:
+                            break
+        return lines
+
     def get_stats(self) -> dict:
         """Counts by event type, total events, time range."""
         if not self.log_file.exists():

services/ci_act.py

@@ -88,12 +88,33 @@ def _probe(cmd: list, timeout: int = 30) -> tuple:
         return 127, f"{type(exc).__name__}: {exc}"
 
 
-def availability() -> dict:
+#: How old an engine probe a display surface may reuse. The hub CI tab
+#: re-inspects every 2-10 s, and each fresh probe spawns act and docker.
+DISPLAY_PROBE_TTL_S = 30.0
+_display_probe: tuple = (0.0, None)
+
+
+def availability(max_age: float = 0.0) -> dict:
     """Can this engine run at all? Reports WHY not, never just False.
 
     Both halves are checked because they fail independently and a user with
     act installed but Docker stopped deserves to be told which one to fix.
+
+    ``max_age`` > 0 reuses a result at most that many seconds old from an
+    earlier call that also passed it; the default always probes, which is
+    what a run and ``doctor`` need.
     """
+    global _display_probe
+    if max_age <= 0:
+        return _probe_engine()
+    at, info = _display_probe
+    if info is None or time.monotonic() - at > max_age:
+        info = _probe_engine()
+        _display_probe = (time.monotonic(), info)
+    return dict(info)
+
+
+def _probe_engine() -> dict:
     act = find_act()
     info: dict = {"ok": False, "act": act, "act_version": "",
                   "docker": False, "docker_version": "", "reason": ""}

services/ci_workflow.py

@@ -800,8 +800,11 @@ def inspect_project(project_path, event: str = "", engine: str = "auto") -> dict
     # Lazy: keeps parsing independent of the execution engines, and avoids
     # paying for a `docker version` probe on every import.
     from services import ci_act
-    engines = ci_act.availability() if engine in ("auto", "act") else {
-        "ok": False, "reason": "engine='native' — containers not considered"}
+    if engine in ("auto", "act"):
+        engines = ci_act.availability(max_age=ci_act.DISPLAY_PROBE_TTL_S)
+    else:
+        engines = {"ok": False,
+                   "reason": "engine='native' — containers not considered"}
     act_ok = bool(engines.get("ok"))
 
     native, container, foreign, unsupported = [], [], [], []

services/credential_backup.py

@@ -310,20 +310,26 @@ def sync(project_paths=()) -> dict:
     return out
 
 
-def status(project_paths=()) -> dict:
+def status(project_paths=(), presence=None) -> dict:
     """Counts only — never a value. ``not_backed_up`` lists registered entries
     with a live value but no sealed copy; ``restorable`` lists entries whose
-    value is gone but whose copy is here."""
+    value is gone but whose copy is here.
+
+    ``presence`` maps realm to a ``credential_store.value_presence`` result
+    the caller already holds; any other vault is probed here, once."""
     data = _load()
     records = data.get("records", {}) if data else {}
     out: dict = {"enabled": bool(data), "path": str(backup_path() or ""),
                  "created": data.get("created", "") if data else "",
                  "backed_up": sum(len(r) for r in records.values()),
                  "restorable": [], "lost": [], "not_backed_up": []}
+    known = dict(presence or {})
     for scope, pp, realm_s, name in _realm_entries(project_paths):
         label = name if scope == "global" else f"{name} ({pp})"
         has_copy = name in records.get(realm_s, {})
-        if cs.is_resolvable(name, project_path=pp, scope=scope):
+        if realm_s not in known:
+            known[realm_s] = cs.value_presence(scope, pp)
+        if known[realm_s].get(name, False):
             if not has_copy:
                 out["not_backed_up"].append(label)
         elif has_copy:

services/credential_store.py

@@ -388,12 +388,14 @@ def _file_get(scope: str, project_path: str, realm_s: str, name: str) -> Optiona
     token = _load_sidecar(path).get(name)
     if not token:
         return None
-    key = _master_key(realm_s, create=False)
-    if key is None:
+    return _decrypt(_master_key(realm_s, create=False), token)
+
+
+def _decrypt(key: Optional[bytes], token) -> Optional[str]:
+    if not key or not token:
         return None
     try:
-        fernet = _crypto_module()(key)
-        return fernet.decrypt(token.encode("ascii")).decode("utf-8")
+        return _crypto_module()(key).decrypt(token.encode("ascii")).decode("utf-8")
     except Exception:
         return None
 
@@ -1136,15 +1138,75 @@ def is_resolvable(name: str, *, project_path: str = ".", scope: str = "") -> boo
     gateway) can answer "is this credential still good?" without importing
     get_value at all. That absence is what the source-grep invariant test
     asserts, which is a stronger guarantee than reviewing call sites."""
-    raw = _get_raw(name, project_path=project_path, scope=scope)
-    if raw is None:
+    owning = _norm_scope(scope, project_path) if scope else _owning_scope(name, project_path)
+    if not owning:
         return False
-    if structured_type(name, project_path=project_path, scope=scope):
+    return value_presence(owning, project_path, names=[name]).get(name, False)
+
+
+def value_presence(scope: str, project_path: str = ".", names=None) -> dict:
+    """``{name: bool}`` for one scope's registered entries (or only ``names``):
+    whether each stored value can still be decoded. Never a value.
+
+    A structured entry counts only when its payload is a JSON object. The
+    registry, realm, sidecar and master key are read once for the batch, so a
+    listing costs one keyring read per entry plus the structured attestation
+    for values that are not JSON objects.
+    """
+    scope = _norm_scope(scope, project_path)
+    entries = _read_entries(scope, project_path)
+    if names is not None:
+        entries = {n: entries[n] for n in names if n in entries}
+    if not entries:
+        return {}
+    try:
+        keyring = _keyring_module()
+    except RuntimeError:
+        return dict.fromkeys(entries, False)
+    realm_s = realm(scope, project_path)
+    sidecar, key = None, None
+    out = {}
+    for name, entry in entries.items():
+        if entry.get("storage") == "file":
+            if sidecar is None:
+                path = _secrets_path(scope, project_path)
+                sidecar = _load_sidecar(path) if path is not None else {}
+                key = _master_key(realm_s, create=False) if sidecar else None
+            raw = _decrypt(key, sidecar.get(name))
+        else:
+            try:
+                raw = keyring.get_password(KEYRING_SERVICE, _account(realm_s, name))
+            except Exception:
+                raw = None
+        if raw is None:
+            out[name] = False
+            continue
         try:
-            return isinstance(json.loads(raw), dict)
+            is_object = isinstance(json.loads(raw), dict)
+        except (ValueError, RecursionError):
+            is_object = False
+        if is_object or entry.get("type") in STRUCTURED_TYPES:
+            out[name] = is_object
+            continue
+        try:
+            attested = keyring.get_password(
+                KEYRING_SERVICE, _struct_account(realm_s, name)) or ""
         except Exception:
-            return False
-    return True
+            attested = ""
+        out[name] = attested not in STRUCTURED_TYPES
+    return out
+
+
+def presence_for(entries: dict, project_path: str = ".") -> dict:
+    """``{name: bool}`` for a :func:`list_entries` view, each name probed in
+    the realm that owns it."""
+    by_scope: dict = {}
+    for name, entry in entries.items():
+        by_scope.setdefault(entry["scope"], []).append(name)
+    out = dict.fromkeys(entries, False)
+    for scope, names in by_scope.items():
+        out.update(value_presence(scope, project_path, names=names))
+    return out
 
 
 def _get_raw(name: str, *, project_path: str = ".", scope: str = "") -> Optional[str]:

services/project_manager.py

@@ -533,6 +533,15 @@ class ProjectManager:
         return {"dropped": len(registry) - len(valid) - len(reaped),
                 "reaped": reaped}
 
+    def list_registered(self) -> list:
+        """The stored project rows (name, path, parent_path, ...) as registered.
+
+        No liveness, session or config enrichment, so it touches one file.
+        Callers that only iterate projects use this; ``list_projects`` reads
+        every project's activity log and probes session ports.
+        """
+        return self._read_projects()
+
     def list_projects(self) -> list:
         projects = self._read_projects()
         registry = self._read_registry()

services/session_catalog.py

@@ -112,7 +112,7 @@ def _bare(text: str) -> str:
     return re.sub(r"[^a-z0-9]", "", text.lower())
 
 
-def claude_transcript_dir(project) -> Path | None:
+def claude_transcript_dir(project, index: _RootIndex | None = None) -> Path | None:
     """The transcript folder Claude Code uses for ``project``, or None.
 
     Exact slug first (every non-alphanumeric becomes ``-``), then the same slug
@@ -131,21 +131,62 @@ def claude_transcript_dir(project) -> Path | None:
         if name and cand.is_dir():
             return cand
     target = _bare(project_str)
-    try:
-        for d in root.iterdir():
-            if d.is_dir() and _bare(d.name) == target:
-                return d
-    except OSError:
-        return None
+    if index is None or index.root != root:
+        index = _RootIndex(root)
+    for d in index.dirs():
+        if _bare(d.name) == target:
+            return d
     return None
 
 
-def _same_dir(a: str, b) -> bool:
+class _RootIndex:
+    """One listing of the transcript root and, on first use, of which folder
+    holds each transcript id — shared by every project one request builds.
+
+    Request-scoped on purpose: Windows does not refresh a folder's mtime in
+    its parent's listing when a file is created inside it, so a listing kept
+    across requests cannot tell that a new transcript appeared.
+    """
+
+    def __init__(self, root: Path):
+        self.root = root
+        self._dirs: list[Path] | None = None
+        self._owners: dict[str, Path] | None = None
+        self._lock = threading.Lock()
+
+    def dirs(self) -> list[Path]:
+        with self._lock:
+            if self._dirs is None:
+                try:
+                    with os.scandir(self.root) as it:
+                        self._dirs = [Path(e.path) for e in it if e.is_dir()]
+                except OSError:
+                    self._dirs = []
+            return self._dirs
+
+    def owner(self, stem: str) -> Path | None:
+        dirs = self.dirs()
+        with self._lock:
+            if self._owners is None:
+                owners: dict[str, Path] = {}
+                for d in dirs:
+                    try:
+                        with os.scandir(d) as it:
+                            for e in it:
+                                if e.name.endswith(".jsonl") and e.is_file():
+                                    owners.setdefault(e.name[:-6], Path(e.path))
+                    except OSError:
+                        continue
+                self._owners = owners
+        return self._owners.get(stem)
+
+
+def _dir_key(path) -> str:
     try:
-        ra, rb = os.path.realpath(a), os.path.realpath(str(b))
-    except Exception:
-        ra, rb = str(a), str(b)
-    return os.path.normcase(os.path.normpath(ra)) == os.path.normcase(os.path.normpath(rb))
+        real = os.path.realpath(str(path))
+    except (OSError, ValueError):
+        real = str(path)
+    return os.path.normcase(os.path.normpath(real))
 
 
 # ── Reading one transcript ─────────────────────────────────────────────────
@@ -569,36 +610,39 @@ def _transcript_files(tdir: Path | None, limit: int | None = MAX_TRANSCRIPTS) ->
     return files if limit is None else files[:limit]
 
 
-def _find_elsewhere(host_id: str) -> Path | None:
+def _find_elsewhere(host_id: str, index: _RootIndex) -> Path | None:
     """A Claude transcript for ``host_id`` in ANY project folder — a session
     run from a worktree lives under the worktree's slug, not the project's."""
     if not UUID_RE.match(host_id or ""):
         return None
-    root = claude_projects_root()
-    try:
-        for d in root.iterdir():
-            cand = d / f"{host_id}.jsonl"
-            if cand.is_file():
-                return cand
-    except OSError:
-        return None
-    return None
+    return index.owner(host_id)
+
 
+def _build(project, name: str = "", index: _RootIndex | None = None) -> tuple[list[dict], dict]:
+    """Every row for one project (unfiltered) plus a lookup context.
 
-def _build(project, name: str = "") -> tuple[list[dict], dict]:
-    """Every row for one project (unfiltered) plus a lookup context."""
+    ``index``: a transcript-root listing shared across one request's builds.
+    """
     project = Path(project)
     name = name or project.name
+    root = claude_projects_root()
+    if index is None or index.root != root:
+        index = _RootIndex(root)
     with _project_lock(project):
         cache = _load_cache(project)
         dirty: list = []
-        tdir = claude_transcript_dir(project)
+        tdir = claude_transcript_dir(project, index)
         metas = {}
+        own_dir = _dir_key(project)
+        cwd_keys: dict[str, str] = {}
         for f in _transcript_files(tdir):
             meta = _cached(cache["transcripts"], f, scan_transcript, dirty)
             if not meta:
                 continue
-            if meta.get("cwd") and not _same_dir(meta["cwd"], project):
+            cwd = meta.get("cwd")
+            if cwd and cwd not in cwd_keys:
+                cwd_keys[cwd] = _dir_key(cwd)
+            if cwd and cwd_keys[cwd] != own_dir:
                 continue  # a folder that only looks like ours
             metas[meta["id"]] = dict(meta, _path=str(f))
         records = []
@@ -617,6 +661,7 @@ def _build(project, name: str = "") -> tuple[list[dict], dict]:
                     snaps.append(snap)
         if dirty:
             _save_cache(project, cache)
+            dirty.clear()
 
     # C3 id → host id, from every place that states it.
     c3_to_host: dict[str, str] = {}
@@ -669,14 +714,16 @@ def _build(project, name: str = "") -> tuple[list[dict], dict]:
             continue
         rec0 = recs[0]
         if _provider(rec0["source_system"]) == "claude" and UUID_RE.match(rid):
-            found = _find_elsewhere(rid)
-            if found is not None:
-                try:
-                    metas[rid] = dict(scan_transcript(found), _path=str(found), _elsewhere=True)
-                    continue
-                except Exception:
-                    pass
+            found = _find_elsewhere(rid, index)
+            meta = _cached(cache["transcripts"], found, scan_transcript, dirty) \
+                if found is not None else None
+            if meta:
+                metas[rid] = dict(meta, _path=str(found), _elsewhere=True)
+                continue
         metas[rid] = {"id": rid, "_c3_only": True, "provider": _provider(rec0["source_system"])}
+    if dirty:
+        with _project_lock(project):
+            _save_cache(project, cache)
 
     marks = _fold_marks(_read_marks(project))
     cleared, pred, succ = _lifecycle(project)
@@ -818,11 +865,12 @@ def list_many(projects: list[dict], *, stale: str = "hide", q: str = "",
         if not path or not (Path(path) / ".c3").is_dir():
             return path, [], ""
         try:
-            rows, _ = _build(path, str(p.get("name") or ""))
+            rows, _ = _build(path, str(p.get("name") or ""), index)
             return path, rows, ""
         except Exception as exc:  # pragma: no cover - defensive
             return path, [], str(exc)
 
+    index = _RootIndex(claude_projects_root())
     merged, errors = [], []
     with ThreadPoolExecutor(max_workers=max(1, workers)) as pool:
         for path, rows, err in pool.map(one, projects):