v4.3.11

Added

• tokensave doctor now reports stale entries in the global DB and offers to purge them. Projects registered in ~/.tokensave/global.db whose .tokensave/ directory is gone are listed under the "Global database" section (preview capped at 10 with an "… and N more" tail). When run interactively, the doctor prompts Purge N stale row(s) from the global DB? [Y/n]; on confirmation each stale row is deleted. In non-interactive contexts (CI, piped) the list is shown as a warning with a hint to re-run interactively.

Fixed

• tokensave reinstall now refreshes every detected agent, not just the first one ever installed. migrate_installed_agents previously returned early as soon as installed_agents was non-empty, so a user who installed Copilot first and Claude later would have only Copilot tracked — reinstall silently skipped Claude and its tool permissions never got refreshed when new tools shipped. The migration now scans every agent on each call and additively appends any whose tokensave config is on disk but missing from the tracked list. Detection logic is extracted into a pure detect_missing_installed_agents helper covered by a regression test.
• tokensave wipe warning banner now reaches full width. The colored title row was 49 visual columns while the ═ rules above and below were 64, producing a short red strip between long horizontal lines. The title is now centered and padded with red-background spaces, sandwiched between two blank red rows so the warning reads as a single fixed-width block.