<!-- Thanks for the PR. A few quick checks: -->

## What's in this PR

<!-- One-paragraph summary of the change. Why is it valuable? -->

## Type of change

- [ ] Bug fix (non-breaking)
- [ ] New feature (non-breaking)
- [ ] Breaking change
- [ ] Docs / chore

## Testing

<!-- How did you verify this? Note any new tests added under tests/. -->

- [ ] `npm test` passes locally
- [ ] `npm run build` passes locally
- [ ] Smoke-tested against a real vault: `node scripts/smoke.mjs <vault>`

## Checklist

- [ ] CHANGELOG.md updated under the upcoming release section
- [ ] docs/api.md updated if the tool surface changed
- [ ] No new runtime dependencies added (or strong justification provided)
- [ ] Conventional commit message: `feat:` / `fix:` / `docs:` / `chore:` / `refactor:` / `test:`
