Syncs first (fails if that sync fails, unless discard_unsynced), ends the session best effort and wipes the local store, keeping the device identity. Refused for a vault with no server, which would be lost. Test: unsynced item survives sign-out and returns after signing in again. Co-Authored-By: Claude Opus 5.5 <[email protected]>