@appchy/jarvis 0.1.95 → 0.1.97

package/dist/bin.js

@@ -129,7 +129,7 @@ import { execSync as execSync4 } from "child_process";
 import { createInterface as createInterface3 } from "readline";
 import fs10 from "fs";
 import os6 from "os";
-import path10 from "path";
+import path11 from "path";
 
 // src/env.ts
 import fs7 from "fs";
@@ -1246,9 +1246,9 @@ function runnable(bin, spawn4) {
   const probe = spawn4(bin, ["--help"], { stdio: "ignore" });
   return probe.error?.code !== "ENOENT";
 }
-function isExecutable(path22) {
+function isExecutable(path23) {
   try {
-    accessSync(path22, constants.X_OK);
+    accessSync(path23, constants.X_OK);
     return true;
   } catch {
     return false;
@@ -1387,10 +1387,57 @@ async function ensureGraphify(options = {}) {
   );
 }
 
+// src/graph/hook.ts
+import { existsSync, mkdirSync, readFileSync, writeFileSync, chmodSync } from "fs";
+import path7 from "path";
+var SIGNATURE = "# managed by jarvis";
+var SCRIPT = `#!/bin/sh
+${SIGNATURE} \u2014 keeps this repo's map current, so what an agent plans against is what is here.
+# Detached and silenced: git waits for a hook's output streams to close, so a build left on stdout
+# would hold up every commit by the length of a build. Never fails a commit.
+command -v jarvis >/dev/null 2>&1 || exit 0
+(jarvis build graph >/dev/null 2>&1 &) >/dev/null 2>&1
+exit 0
+`;
+function installCommitHook(repoRoot) {
+  const dir = path7.join(repoRoot, ".git", "hooks");
+  const file = path7.join(dir, "post-commit");
+  if (!existsSync(path7.join(repoRoot, ".git")) || !existsSync(path7.join(repoRoot, ".git", "HEAD"))) {
+    return { installed: false, reason: "not-a-repo" };
+  }
+  if (existsSync(file)) {
+    try {
+      if (!readFileSync(file, "utf8").includes(SIGNATURE))
+        return { installed: false, reason: "foreign-hook", path: file };
+    } catch {
+      return { installed: false, reason: "unwritable", path: file };
+    }
+  }
+  try {
+    mkdirSync(dir, { recursive: true });
+    writeFileSync(file, SCRIPT, "utf8");
+    chmodSync(file, 493);
+    return { installed: true, path: file };
+  } catch {
+    return { installed: false, reason: "unwritable", path: file };
+  }
+}
+function describeCommitHook(outcome, repoRoot) {
+  if (outcome.installed)
+    return `    the map rebuilds itself on every commit here \u2713  (${path7.relative(repoRoot, outcome.path) || outcome.path})`;
+  if (outcome.reason === "not-a-repo")
+    return `    not a git repo, so there is no commit to rebuild on.
+    Run 'jarvis init' inside one, or rebuild by hand with 'jarvis build graph'.`;
+  if (outcome.reason === "foreign-hook")
+    return `    a post-commit hook is already here and it is not ours \u2014 left untouched.
+    Add this line to it to keep the map current:  jarvis build graph >/dev/null 2>&1 &`;
+  return `    could not write the hook \u2014 the map still builds, by hand, with 'jarvis build graph'.`;
+}
+
 // src/machine.ts
 import crypto2 from "crypto";
 import fs8 from "fs";
-import path7 from "path";
+import path8 from "path";
 var cached = null;
 function getMachine() {
   if (cached) return cached;
@@ -1405,7 +1452,7 @@ function getMachine() {
     createdAt: (/* @__PURE__ */ new Date()).toISOString(),
     schemaVersion: 1
   };
-  fs8.mkdirSync(path7.dirname(file), { recursive: true });
+  fs8.mkdirSync(path8.dirname(file), { recursive: true });
   fs8.writeFileSync(file, JSON.stringify(fresh, null, 2));
   return cached = fresh;
 }
@@ -1413,13 +1460,13 @@ function getMachine() {
 // src/service.ts
 import { execSync as execSync3, spawn } from "child_process";
 import fs9 from "fs";
-import path8 from "path";
+import path9 from "path";
 import os4 from "os";
 function serviceSuffix() {
   const dir = getConfigDir();
-  const base = path8.join(os4.homedir(), ".jarvis");
+  const base = path9.join(os4.homedir(), ".jarvis");
   if (dir === base) return "";
-  const name = dir.startsWith(base + path8.sep) ? dir.slice(base.length + 1) : path8.basename(dir);
+  const name = dir.startsWith(base + path9.sep) ? dir.slice(base.length + 1) : path9.basename(dir);
   return name.replace(/[^a-zA-Z0-9]+/g, "-").replace(/^-|-$/g, "");
 }
 var SERVICE_SUFFIX = serviceSuffix();
@@ -1430,8 +1477,8 @@ function createServiceManager() {
   return new FallbackService();
 }
 var PLIST_LABEL = `com.appchy.jarvis${SERVICE_SUFFIX ? `.${SERVICE_SUFFIX}` : ""}`;
-var PLIST_DIR = path8.join(os4.homedir(), "Library", "LaunchAgents");
-var PLIST_PATH = path8.join(PLIST_DIR, `${PLIST_LABEL}.plist`);
+var PLIST_DIR = path9.join(os4.homedir(), "Library", "LaunchAgents");
+var PLIST_PATH = path9.join(PLIST_DIR, `${PLIST_LABEL}.plist`);
 function escapeXml(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&apos;");
 }
@@ -1585,7 +1632,7 @@ ${Object.entries(opts.env ?? {}).map(([k, v]) => `    <key>${escapeXml(k)}</key>
 </plist>
 `;
     fs9.mkdirSync(PLIST_DIR, { recursive: true });
-    fs9.mkdirSync(path8.dirname(logFile), { recursive: true });
+    fs9.mkdirSync(path9.dirname(logFile), { recursive: true });
     unloadAgent();
     fs9.writeFileSync(PLIST_PATH, plist);
     loadAgent();
@@ -1687,7 +1734,7 @@ var WindowsService = class {
 </Task>
 `;
     const tmpDir = os4.tmpdir();
-    const tmpFile = path8.join(tmpDir, `jarvis-task-${Date.now()}.xml`);
+    const tmpFile = path9.join(tmpDir, `jarvis-task-${Date.now()}.xml`);
     fs9.writeFileSync(tmpFile, xml, { encoding: "utf-16le" });
     try {
       execSync3(`schtasks /Create /TN "${TASK_NAME}" /XML "${tmpFile}" /F`, {
@@ -1733,9 +1780,9 @@ var WindowsService = class {
     }
   }
 };
-var SYSTEMD_DIR = path8.join(os4.homedir(), ".config", "systemd", "user");
+var SYSTEMD_DIR = path9.join(os4.homedir(), ".config", "systemd", "user");
 var UNIT_NAME = `jarvis${SERVICE_SUFFIX ? `-${SERVICE_SUFFIX}` : ""}.service`;
-var UNIT_PATH = path8.join(SYSTEMD_DIR, UNIT_NAME);
+var UNIT_PATH = path9.join(SYSTEMD_DIR, UNIT_NAME);
 var LinuxService = class {
   install(opts) {
     const args = [opts.entryPath, "start", "--foreground", "--workspace", opts.workspacePath];
@@ -1764,7 +1811,7 @@ StandardError=append:${logFile}
 WantedBy=default.target
 `;
     fs9.mkdirSync(SYSTEMD_DIR, { recursive: true });
-    fs9.mkdirSync(path8.dirname(logFile), { recursive: true });
+    fs9.mkdirSync(path9.dirname(logFile), { recursive: true });
     if (this.isInstalled()) {
       try {
         execSync3(`systemctl --user stop ${UNIT_NAME}`, { stdio: "ignore" });
@@ -1844,9 +1891,9 @@ WantedBy=default.target
 };
 var FallbackService = class {
   baseDir = getJarvisDir();
-  pidFile = path8.join(this.baseDir, "agent.pid");
-  logFile = path8.join(this.baseDir, "agent.log");
-  markerFile = path8.join(this.baseDir, "service-installed");
+  pidFile = path9.join(this.baseDir, "agent.pid");
+  logFile = path9.join(this.baseDir, "agent.log");
+  markerFile = path9.join(this.baseDir, "service-installed");
   install(opts) {
     fs9.mkdirSync(this.baseDir, { recursive: true });
     this.stop();
@@ -1921,11 +1968,11 @@ var FallbackService = class {
 };
 
 // src/hooks/install.ts
-import { existsSync, mkdirSync, readFileSync, realpathSync, writeFileSync } from "fs";
+import { existsSync as existsSync2, mkdirSync as mkdirSync2, readFileSync as readFileSync2, realpathSync, writeFileSync as writeFileSync2 } from "fs";
 import os5 from "os";
-import path9 from "path";
-var SETTINGS_DIR = path9.join(os5.homedir(), ".claude");
-var SETTINGS_FILE = path9.join(SETTINGS_DIR, "settings.json");
+import path10 from "path";
+var SETTINGS_DIR = path10.join(os5.homedir(), ".claude");
+var SETTINGS_FILE = path10.join(SETTINGS_DIR, "settings.json");
 var HOOK_STEMS = [
   "pre-tool-use",
   "session-start",
@@ -1943,7 +1990,7 @@ function jarvisHooks() {
   ];
 }
 function isJarvisCommand(command) {
-  const name = path9.basename(command);
+  const name = path10.basename(command);
   return HOOK_STEMS.some((stem) => name === `${stem}.mjs` || name === `${stem}.dev.mjs`);
 }
 function getCliRoot() {
@@ -1956,22 +2003,22 @@ function getCliRoot() {
     entry = realpathSync(binPath);
   } catch {
   }
-  return path9.resolve(path9.dirname(entry), "..");
+  return path10.resolve(path10.dirname(entry), "..");
 }
 function resolveHooks() {
   const cliRoot = getCliRoot();
   return jarvisHooks().map((h) => ({
     ...h,
-    binAbsPath: path9.join(cliRoot, "bin", h.binBasename)
+    binAbsPath: path10.join(cliRoot, "bin", h.binBasename)
   }));
 }
 function ownsClaudeCode() {
-  return getConfigDir() === path9.join(os5.homedir(), ".jarvis");
+  return getConfigDir() === path10.join(os5.homedir(), ".jarvis");
 }
 function readSettings() {
-  if (!existsSync(SETTINGS_FILE)) return {};
+  if (!existsSync2(SETTINGS_FILE)) return {};
   try {
-    const raw = readFileSync(SETTINGS_FILE, "utf-8");
+    const raw = readFileSync2(SETTINGS_FILE, "utf-8");
     return raw.trim() ? JSON.parse(raw) : {};
   } catch (err) {
     logger.sys.warn("[hooks.install] settings.json unreadable", {
@@ -1982,8 +2029,8 @@ function readSettings() {
 }
 function writeSettings(s) {
   try {
-    mkdirSync(SETTINGS_DIR, { recursive: true });
-    writeFileSync(SETTINGS_FILE, JSON.stringify(s, null, 2) + "\n");
+    mkdirSync2(SETTINGS_DIR, { recursive: true });
+    writeFileSync2(SETTINGS_FILE, JSON.stringify(s, null, 2) + "\n");
     return true;
   } catch (err) {
     logger.sys.warn("[hooks.install] settings.json unwritable", {
@@ -2028,7 +2075,7 @@ function claudeCodeHooksState() {
     return {
       type: hook.type,
       bin: hook.binAbsPath,
-      exists: existsSync(hook.binAbsPath),
+      exists: existsSync2(hook.binAbsPath),
       ...command ? { command } : {}
     };
   });
@@ -2050,10 +2097,10 @@ function installClaudeCodeHooks() {
     expected: resolved.map((h) => ({
       type: h.type,
       bin: h.binAbsPath,
-      exists: existsSync(h.binAbsPath)
+      exists: existsSync2(h.binAbsPath)
     }))
   });
-  const missing = resolved.filter((h) => !existsSync(h.binAbsPath));
+  const missing = resolved.filter((h) => !existsSync2(h.binAbsPath));
   if (missing.length === resolved.length) {
     logger.sys.warn("[hooks.install] no bin shims found, skipping", {
       configDir: configDir2,
@@ -2064,7 +2111,7 @@ function installClaudeCodeHooks() {
   let settings = readSettings();
   const installed = [];
   for (const hook of resolved) {
-    if (!existsSync(hook.binAbsPath)) {
+    if (!existsSync2(hook.binAbsPath)) {
       logger.sys.warn("[hooks.install] bin shim missing, skipping hook", {
         configDir: configDir2,
         type: hook.type,
@@ -2318,6 +2365,7 @@ async function setUpThisMachine(prompts) {
   console.log("  \u25B8 Wiring this machine's Claude Code to jarvis");
   installHooks();
   console.log();
+  setUpMapRebuild();
   await setUpMapTool(prompts);
   console.log("  \u25B8 The model key the map embeds with");
   const key = loadConfig()?.openaiApiKey;
@@ -2328,6 +2376,12 @@ async function setUpThisMachine(prompts) {
 `
   );
 }
+function setUpMapRebuild() {
+  const repoRoot = process.cwd();
+  console.log("  \u25B8 Keeping this repo's map current");
+  console.log(`${describeCommitHook(installCommitHook(repoRoot), repoRoot)}
+`);
+}
 async function setUpMapTool(prompts) {
   console.log("  \u25B8 The tool the map's code half is built from");
   const state2 = resolveGraphify();
@@ -2338,7 +2392,7 @@ async function setUpMapTool(prompts) {
   if (state2.strayDir) {
     console.log(
       `    graphify is INSTALLED but not on PATH \u2014 it is at
-    ${path10.join(state2.strayDir, "graphify")}, and your shell cannot see it.
+    ${path11.join(state2.strayDir, "graphify")}, and your shell cannot see it.
     'jarvis build graph' finds it anyway; nothing else will.
 ` + putItOnPath(state2.strayDir)
     );
@@ -2401,7 +2455,7 @@ function discoverCandidateRoots() {
   const names = ["Code", "code", "work", "src", "Projects", "projects", "dev", "Developer"];
   const out = [];
   for (const name of names) {
-    const p = path10.join(home, name);
+    const p = path11.join(home, name);
     let exists = false;
     try {
       exists = fs10.statSync(p).isDirectory();
@@ -2518,7 +2572,7 @@ async function readlineQuestion2(question) {
   });
 }
 function normalizePath(p) {
-  const resolved = path10.resolve(p.trim());
+  const resolved = path11.resolve(p.trim());
   try {
     return fs10.realpathSync.native(resolved);
   } catch {
@@ -2569,7 +2623,7 @@ function mergeRootCandidates(saved, discovered) {
 }
 function readLocalRoots() {
   try {
-    const raw = fs10.readFileSync(path10.join(getConfigDir(), "env.json"), "utf-8");
+    const raw = fs10.readFileSync(path11.join(getConfigDir(), "env.json"), "utf-8");
     const parsed = JSON.parse(raw);
     return Array.isArray(parsed.roots) ? parsed.roots : [];
   } catch {
@@ -2644,26 +2698,26 @@ import { createInterface as createInterface4 } from "readline";
 
 // src/mcp.ts
 import { execFile } from "child_process";
-import { existsSync as existsSync2, readdirSync } from "fs";
+import { existsSync as existsSync3, readdirSync } from "fs";
 import os7 from "os";
-import path11 from "path";
+import path12 from "path";
 import { promisify } from "util";
 var run = promisify(execFile);
 var SERVER_NAME = "jarvis";
 function candidatePaths() {
   const home = os7.homedir();
   return [
-    path11.join(home, ".local", "bin", "claude"),
-    path11.join(home, ".claude", "local", "claude"),
+    path12.join(home, ".local", "bin", "claude"),
+    path12.join(home, ".claude", "local", "claude"),
     "/opt/homebrew/bin/claude",
     "/usr/local/bin/claude",
     ...bundledWithEditor(home)
   ];
 }
 function bundledWithEditor(home) {
-  const extensions = path11.join(home, ".vscode", "extensions");
+  const extensions = path12.join(home, ".vscode", "extensions");
   try {
-    return readdirSync(extensions).filter((name) => name.startsWith("anthropic.claude-code-")).sort().reverse().map((name) => path11.join(extensions, name, "resources", "native-binary", "claude"));
+    return readdirSync(extensions).filter((name) => name.startsWith("anthropic.claude-code-")).sort().reverse().map((name) => path12.join(extensions, name, "resources", "native-binary", "claude"));
   } catch {
     return [];
   }
@@ -2676,7 +2730,7 @@ async function findClaude() {
   } catch {
   }
   for (const candidate of candidatePaths()) {
-    if (existsSync2(candidate)) return candidate;
+    if (existsSync3(candidate)) return candidate;
   }
   return null;
 }
@@ -2757,11 +2811,11 @@ async function confirm(question) {
 
 // src/commands/roots.ts
 import fs11 from "fs";
-import path12 from "path";
+import path13 from "path";
 function readConfig() {
   try {
     return JSON.parse(
-      fs11.readFileSync(path12.join(getConfigDir(), "env.json"), "utf-8")
+      fs11.readFileSync(path13.join(getConfigDir(), "env.json"), "utf-8")
     );
   } catch {
     return {};
@@ -2782,7 +2836,7 @@ function register6(program) {
     for (const r of roots) console.log(`  ${r}`);
   });
   cmd.command("add <path>").description("Add a root directory").action(async (rawPath) => {
-    const abs = path12.resolve(rawPath);
+    const abs = path13.resolve(rawPath);
     const roots = getRoots();
     if (roots.includes(abs)) {
       console.log(`Already added: ${abs}`);
@@ -2792,7 +2846,7 @@ function register6(program) {
     console.log(`Added: ${abs}`);
   });
   cmd.command("remove <path>").description("Remove a root directory").action(async (rawPath) => {
-    const abs = path12.resolve(rawPath);
+    const abs = path13.resolve(rawPath);
     const roots = getRoots();
     const next = roots.filter((r) => r !== abs);
     if (next.length === roots.length) {
@@ -2806,11 +2860,11 @@ function register6(program) {
 
 // src/commands/settings.ts
 import fs12 from "fs";
-import path13 from "path";
+import path14 from "path";
 function readLocalConfig() {
   try {
     return JSON.parse(
-      fs12.readFileSync(path13.join(getConfigDir(), "env.json"), "utf-8")
+      fs12.readFileSync(path14.join(getConfigDir(), "env.json"), "utf-8")
     );
   } catch {
     return {};
@@ -2935,16 +2989,16 @@ function resolveRepo(repo) {
   loadEnvFile(resolve(homedir2(), ".jarvis", "data.env"));
   return cwd;
 }
-function loadEnvFile(path22) {
+function loadEnvFile(path23) {
   try {
-    process.loadEnvFile(path22);
+    process.loadEnvFile(path23);
   } catch {
   }
 }
 
 // ../../providers/anthropic/src/anthropic.agent.provider.ts
 import { execFile as execFile2 } from "child_process";
-import { chmodSync, existsSync as existsSync3, readFileSync as readFileSync2, readdirSync as readdirSync2, statSync } from "fs";
+import { chmodSync as chmodSync2, existsSync as existsSync4, readFileSync as readFileSync3, readdirSync as readdirSync2, statSync } from "fs";
 import { createRequire } from "module";
 import { randomUUID } from "crypto";
 import { homedir as homedir3 } from "os";
@@ -3003,19 +3057,19 @@ function ensureSpawnHelperIsExecutable() {
       `${process.platform}-${process.arch}`,
       "spawn-helper"
     );
-    if (!existsSync3(helper)) return;
+    if (!existsSync4(helper)) return;
     const mode = statSync(helper).mode;
     if (mode & 73) return;
-    chmodSync(helper, mode | 493);
+    chmodSync2(helper, mode | 493);
   } catch {
   }
 }
 async function idOf(term) {
   const entry = join2(homedir3(), ".claude", "sessions", `${term.pid}.json`);
   for (let attempt = 0; attempt < 60; attempt++) {
-    if (existsSync3(entry)) {
+    if (existsSync4(entry)) {
       try {
-        const { sessionId } = JSON.parse(readFileSync2(entry, "utf8"));
+        const { sessionId } = JSON.parse(readFileSync3(entry, "utf8"));
         if (sessionId) return sessionId;
       } catch {
       }
@@ -3050,7 +3104,7 @@ async function findExecutable() {
   } catch {
   }
   for (const candidate of candidatePaths2()) {
-    if (existsSync3(candidate)) return candidate;
+    if (existsSync4(candidate)) return candidate;
   }
   return null;
 }
@@ -3106,7 +3160,7 @@ function endedAs(exitCode, signal) {
 
 // ../../providers/anthropic/src/anthropic.session.provider.ts
 import { stat as fsStat } from "fs/promises";
-import { createReadStream, readdirSync as readdirSync3, readFileSync as readFileSync3 } from "fs";
+import { createReadStream, readdirSync as readdirSync3, readFileSync as readFileSync4 } from "fs";
 import { homedir as homedir4 } from "os";
 import { join as join3 } from "path";
 import readline from "readline";
@@ -3121,7 +3175,7 @@ function listLiveSessions() {
     for (const name of readdirSync3(LIVE)) {
       if (!name.endsWith(".json")) continue;
       try {
-        const record = JSON.parse(readFileSync3(join3(LIVE, name), "utf-8"));
+        const record = JSON.parse(readFileSync4(join3(LIVE, name), "utf-8"));
         if (typeof record.sessionId === "string") ids.add(record.sessionId);
       } catch {
       }
@@ -3431,22 +3485,22 @@ import chokidar from "chokidar";
 import fs14 from "fs/promises";
 import { execFile as execFile3 } from "child_process";
 import os8 from "os";
-import path15 from "path";
+import path16 from "path";
 import { promisify as promisify3 } from "util";
 
 // src/cache.ts
 import crypto3 from "crypto";
 import fs13 from "fs/promises";
 import { constants as fsConstants } from "fs/promises";
-import path14 from "path";
+import path15 from "path";
 function getCacheRoot() {
-  return path14.join(getJarvisDir(), "cache");
+  return path15.join(getJarvisDir(), "cache");
 }
 function getNamespaceDir(req) {
-  return path14.join(getCacheRoot(), req.namespace);
+  return path15.join(getCacheRoot(), req.namespace);
 }
 function getEntryPath(req) {
-  return path14.join(getNamespaceDir({ namespace: req.namespace }), `${req.key}.json`);
+  return path15.join(getNamespaceDir({ namespace: req.namespace }), `${req.key}.json`);
 }
 async function ensureNamespaceDir(req) {
   await fs13.mkdir(getNamespaceDir({ namespace: req.namespace }), { recursive: true });
@@ -3539,7 +3593,7 @@ async function sweepExpiredCacheEntries(req) {
     }
     for (const name of names) {
       if (!name.endsWith(".json") || name.endsWith(".tmp")) continue;
-      const file = path14.join(dir, name);
+      const file = path15.join(dir, name);
       let raw;
       try {
         raw = await fs13.readFile(file, "utf-8");
@@ -3584,16 +3638,16 @@ var execFileAsync = promisify3(execFile3);
 function getSessionRoots() {
   const home = process.env.JARVIS_CC_PROJECTS_HOME ?? os8.homedir();
   return [
-    { provider: "claude-code", dir: path15.join(home, ".claude", "projects") }
+    { provider: "claude-code", dir: path16.join(home, ".claude", "projects") }
     // { provider: "codex", dir: path.join(home, ".codex", "sessions") },
     // { provider: "cursor", dir: path.join(home, ".cursor", "sessions") },
   ];
 }
 function getSessionProvider(req) {
-  const abs = path15.resolve(req.path);
+  const abs = path16.resolve(req.path);
   for (const root of getSessionRoots()) {
-    const rel = path15.relative(root.dir, abs);
-    if (!rel.startsWith("..") && !path15.isAbsolute(rel)) return root.provider;
+    const rel = path16.relative(root.dir, abs);
+    if (!rel.startsWith("..") && !path16.isAbsolute(rel)) return root.provider;
   }
   return null;
 }
@@ -3607,7 +3661,7 @@ async function walkRoot(req) {
   }
   for (const entry of entries) {
     if (entry.startsWith(".")) continue;
-    const projectDir = path15.join(req.root.dir, entry);
+    const projectDir = path16.join(req.root.dir, entry);
     let stat4;
     try {
       stat4 = await fs14.stat(projectDir);
@@ -3624,7 +3678,7 @@ async function walkRoot(req) {
     for (const name of files2) {
       if (name.startsWith(".")) continue;
       if (!name.endsWith(".jsonl") && !name.endsWith(".json")) continue;
-      const filePath = path15.join(projectDir, name);
+      const filePath = path16.join(projectDir, name);
       let fstat;
       try {
         fstat = await fs14.stat(filePath);
@@ -3650,7 +3704,7 @@ async function walkAllSessions(req = {}) {
 }
 async function listLocalSessionIds(req = {}) {
   const files2 = await walkAllSessions(req);
-  return files2.map((f) => path15.basename(f.filePath, path15.extname(f.filePath)));
+  return files2.map((f) => path16.basename(f.filePath, path16.extname(f.filePath)));
 }
 async function getSessionFile(req) {
   const provider2 = getSessionProvider({ path: req.path });
@@ -3665,7 +3719,7 @@ async function getSessionFile(req) {
   return {
     provider: provider2,
     filePath: req.path,
-    projectDir: path15.dirname(req.path),
+    projectDir: path16.dirname(req.path),
     mtimeMs: stat4.mtimeMs
   };
 }
@@ -3743,8 +3797,8 @@ function toStatus(req) {
 }
 async function buildSession(req) {
   const { file, rollup } = req;
-  const sessionId = path15.basename(file.filePath, path15.extname(file.filePath));
-  const folderCwd = decodeProjectFolder({ folder: path15.basename(file.projectDir) });
+  const sessionId = path16.basename(file.filePath, path16.extname(file.filePath));
+  const folderCwd = decodeProjectFolder({ folder: path16.basename(file.projectDir) });
   const cwd = rollup.cwd ?? folderCwd ?? null;
   const repo = cwd ? await getRepo({ cwd, cache: req.repoCache }).catch(() => null) : null;
   const status2 = toStatus({
@@ -3979,7 +4033,7 @@ async function reconcileSessions(req, options) {
   for (const file of onDisk) {
     if (seen.has(file.filePath)) continue;
     try {
-      const newcomerSessionId = path15.basename(file.filePath, path15.extname(file.filePath));
+      const newcomerSessionId = path16.basename(file.filePath, path16.extname(file.filePath));
       const { entry: stub } = await readSessionCacheEntry({ sessionId: newcomerSessionId });
       const { entry, task } = await parseSession(
         { file },
@@ -4002,7 +4056,7 @@ function watchSessions(ctx, req, options) {
     roots.map((r) => r.dir),
     {
       ignoreInitial: true,
-      ignored: (p) => path15.basename(p).startsWith("."),
+      ignored: (p) => path16.basename(p).startsWith("."),
       depth: 2,
       // Coalesce a burst of writes (CC streams line-by-line) into one event.
       awaitWriteFinish: { stabilityThreshold: 500, pollInterval: 100 }
@@ -4027,7 +4081,7 @@ function watchSessions(ctx, req, options) {
     if (!isSessionFile(p)) return;
     const file = await getSessionFile({ path: p });
     if (!file) return;
-    const sessionId = path15.basename(p, path15.extname(p));
+    const sessionId = path16.basename(p, path16.extname(p));
     await withSessionLock(sessionId, async () => {
       try {
         const { entry: priorEntry } = await readSessionCacheEntry({ sessionId });
@@ -4050,7 +4104,7 @@ function watchSessions(ctx, req, options) {
     if (!isSessionFile(p)) return;
     const file = await getSessionFile({ path: p });
     if (!file) return;
-    const sessionId = path15.basename(p, path15.extname(p));
+    const sessionId = path16.basename(p, path16.extname(p));
     await withSessionLock(sessionId, async () => {
       try {
         const { entry: priorEntry } = await readSessionCacheEntry({ sessionId });
@@ -4077,7 +4131,7 @@ function watchSessions(ctx, req, options) {
   }
   async function handleUnlink(p) {
     if (!isSessionFile(p)) return;
-    const sessionId = path15.basename(p, path15.extname(p));
+    const sessionId = path16.basename(p, path16.extname(p));
     await withSessionLock(sessionId, async () => {
       await clearSessionCacheEntry({ sessionId });
       await options.onSessionDeleted({ taskId: sessionId, reason: "removed" });
@@ -4089,11 +4143,11 @@ function watchSessions(ctx, req, options) {
   const hooksDir = getHooksDir();
   const hooksWatcher = chokidar.watch(`${hooksDir}/*.jsonl`, {
     ignoreInitial: false,
-    ignored: (p) => path15.basename(p).startsWith(".")
+    ignored: (p) => path16.basename(p).startsWith(".")
   });
   async function handleHookFile(filePath) {
     if (!filePath.endsWith(".jsonl")) return;
-    const sessionId = path15.basename(filePath, ".jsonl");
+    const sessionId = path16.basename(filePath, ".jsonl");
     if (!sessionId) return;
     await withSessionLock(sessionId, async () => {
       try {
@@ -4352,12 +4406,12 @@ async function listSessions(req) {
 async function getSession(req) {
   const all = await walkAllSessions();
   const file = all.find(
-    (candidate) => path15.basename(candidate.filePath, path15.extname(candidate.filePath)) === req.id
+    (candidate) => path16.basename(candidate.filePath, path16.extname(candidate.filePath)) === req.id
   );
   return file ? toSession(file) : null;
 }
 async function toSession(file) {
-  const sessionId = path15.basename(file.filePath, path15.extname(file.filePath));
+  const sessionId = path16.basename(file.filePath, path16.extname(file.filePath));
   const [{ rollup }, { entry }] = await Promise.all([
     projectSession2({ file }).catch(() => ({ rollup: createEmptyRollup() })),
     readSessionCacheEntry({ sessionId })
@@ -4733,8 +4787,8 @@ async function listWorkItems(_ctx, req, options) {
 async function findWorkItem(_ctx, req, options) {
   const work = join4(options.root, "work");
   for (const file of await walk(join4(work, "versions"))) {
-    const path22 = pathIn(work, file);
-    if (path22.split("/").at(-2) === req.id) return readItem(work, file);
+    const path23 = pathIn(work, file);
+    if (path23.split("/").at(-2) === req.id) return readItem(work, file);
   }
   return null;
 }
@@ -4883,8 +4937,8 @@ async function readTree(root) {
   const work = join4(root, "work");
   const items = [];
   for (const file of await walk(join4(work, "versions"))) {
-    const path22 = pathIn(work, file);
-    if (LEFT_THE_BOARD.some((home) => path22.startsWith(`versions/${home}/`))) continue;
+    const path23 = pathIn(work, file);
+    if (LEFT_THE_BOARD.some((home) => path23.startsWith(`versions/${home}/`))) continue;
     const item2 = await readItem(work, file);
     if (item2) items.push(item2);
   }
@@ -5025,7 +5079,7 @@ async function createWorkItem2(ctx, req, options) {
 
 // src/harness.ts
 import { spawnSync as spawnSync2 } from "child_process";
-import { existsSync as existsSync4 } from "fs";
+import { existsSync as existsSync5 } from "fs";
 import { dirname as dirname3, join as join5 } from "path";
 import { fileURLToPath as fileURLToPath2 } from "url";
 var ENTRY = join5("harness", "work.py");
@@ -5035,7 +5089,7 @@ var INSTALLED = ["jarvis", "work"];
 function payload() {
   let dir = dirname3(fileURLToPath2(import.meta.url));
   for (let up = 0; up < 6; up++) {
-    if (existsSync4(join5(dir, ENTRY))) return join5(dir, ENTRY);
+    if (existsSync5(join5(dir, ENTRY))) return join5(dir, ENTRY);
     const parent = dirname3(dir);
     if (parent === dir) break;
     dir = parent;
@@ -5870,8 +5924,8 @@ function reason(err) {
 }
 function issueText(issues) {
   return issues.slice(0, 3).map((issue) => {
-    const path22 = (issue.path ?? []).map((step) => String(typeof step === "object" ? step.key : step)).join(".");
-    return path22 ? `${path22}: ${issue.message}` : issue.message;
+    const path23 = (issue.path ?? []).map((step) => String(typeof step === "object" ? step.key : step)).join(".");
+    return path23 ? `${path23}: ${issue.message}` : issue.message;
   }).join("; ");
 }
 function keyText(data) {
@@ -6126,7 +6180,7 @@ function edgeMatchesConfidence(edge, backendName, confidence) {
 }
 
 // ../../packages/data/src/config.ts
-import { existsSync as existsSync5, readFileSync as readFileSync4 } from "fs";
+import { existsSync as existsSync6, readFileSync as readFileSync5 } from "fs";
 import { readFile as readFile4 } from "fs/promises";
 import { dirname as dirname5, resolve as resolve4 } from "path";
 import { fileURLToPath as fileURLToPath3 } from "url";
@@ -6159,9 +6213,9 @@ function localFiles(options = {}) {
       }
     },
     save: async (ctx, key, bytes) => {
-      const path22 = pathOf(ctx, key);
-      await mkdir(dirname4(path22), { recursive: true });
-      await writeFile(path22, bytes, "utf8");
+      const path23 = pathOf(ctx, key);
+      await mkdir(dirname4(path23), { recursive: true });
+      await writeFile(path23, bytes, "utf8");
     },
     locate: (ctx, key) => pathOf(ctx, key)
   });
@@ -6179,10 +6233,10 @@ async function loadConfig2(cwd) {
   let dir = resolve4(cwd);
   for (; ; ) {
     for (const name of CONFIG_NAMES) {
-      const path22 = resolve4(dir, name);
-      if (existsSync5(path22)) {
-        const config2 = await importConfig(path22);
-        validateConfig(config2, path22);
+      const path23 = resolve4(dir, name);
+      if (existsSync6(path23)) {
+        const config2 = await importConfig(path23);
+        validateConfig(config2, path23);
         return {
           ...config2,
           persistence: config2.persistence ?? localFiles(),
@@ -6198,9 +6252,9 @@ async function loadConfig2(cwd) {
     `No jarvis.config.{ts,js,mjs} found from ${cwd}. A repo maps its world in one, at its root.`
   );
 }
-async function importConfig(path22) {
+async function importConfig(path23) {
   const jiti = createJiti(import.meta.url, { moduleCache: false, alias: selfAlias() });
-  const mod = await jiti.import(path22);
+  const mod = await jiti.import(path23);
   const config2 = mod.default ?? mod;
   return config2;
 }
@@ -6208,7 +6262,7 @@ var PACKAGE_NAME = "@jarvis/data";
 function packageRoot() {
   let dir = dirname5(fileURLToPath3(import.meta.url));
   for (; ; ) {
-    if (existsSync5(resolve4(dir, "package.json"))) return dir;
+    if (existsSync6(resolve4(dir, "package.json"))) return dir;
     const parent = dirname5(dir);
     if (parent === dir) return dir;
     dir = parent;
@@ -6216,7 +6270,7 @@ function packageRoot() {
 }
 function selfAlias() {
   const root = packageRoot();
-  const pkg = JSON.parse(readFileSync4(resolve4(root, "package.json"), "utf8"));
+  const pkg = JSON.parse(readFileSync5(resolve4(root, "package.json"), "utf8"));
   if (pkg.name !== PACKAGE_NAME) {
     const vendored = process.env[VENDOR_ENV];
     if (!vendored) {
@@ -6253,9 +6307,9 @@ function toVendorAlias(dir) {
 function toSpecifier(subpath) {
   return subpath === "." ? PACKAGE_NAME : `${PACKAGE_NAME}/${subpath.replace(/^\.\//, "")}`;
 }
-function validateConfig(value, path22) {
+function validateConfig(value, path23) {
   const fail = (msg) => {
-    throw new Error(`${path22}: ${msg}`);
+    throw new Error(`${path23}: ${msg}`);
   };
   if (typeof value !== "object" || value === null) fail("config must export an object");
   const c = value;
@@ -6992,10 +7046,10 @@ async function git3(root, argv, timeout = 5e3) {
   }
 }
 async function fetchHeadIso(root) {
-  const path22 = await git3(root, ["rev-parse", "--git-path", "FETCH_HEAD"]);
-  if (!path22) return void 0;
+  const path23 = await git3(root, ["rev-parse", "--git-path", "FETCH_HEAD"]);
+  if (!path23) return void 0;
   try {
-    return (await stat2(resolve5(root, path22))).mtime.toISOString();
+    return (await stat2(resolve5(root, path23))).mtime.toISOString();
   } catch {
     return void 0;
   }
@@ -7042,6 +7096,14 @@ async function freshness(ctx) {
   const builtMs = Date.parse(ctx.builtAt);
   let behindHead;
   if (head && mtimeMs) behindHead = mtimeMs < head.committedMs;
+  let behindHeadBy;
+  let behindHeadForMs;
+  if (behindHead && head && mtimeMs) {
+    behindHeadForMs = head.committedMs - mtimeMs;
+    const since = new Date(mtimeMs).toISOString();
+    const count2 = Number(await git3(root, ["rev-list", "--count", `--since=${since}`, "HEAD"]));
+    if (Number.isFinite(count2)) behindHeadBy = count2;
+  }
   const replacedMs = Math.max(mtimeMs ?? 0, await snapshotMtimeMs(ctx) ?? 0);
   const rebuiltOnDisk = Boolean(
     replacedMs && Number.isFinite(builtMs) && replacedMs > builtMs + 1e3
@@ -7050,32 +7112,52 @@ async function freshness(ctx) {
   const behindOrigin = Boolean(origin?.reachable && (origin.behindBy ?? 0) > 0);
   const originUnknown = Boolean(origin && !origin.reachable);
   let reason2;
-  if (behindOrigin)
+  let verdict;
+  if (behindOrigin) {
+    verdict = "stale";
     reason2 = `this checkout is ${origin?.behindBy} commit(s) behind ${origin?.ref} \u2014 the map and the board both describe an older world than the origin's. Pull, then \`jarvis build graph\`.`;
-  else if (originUnknown)
-    reason2 = `cannot reach ${origin?.ref}, so I cannot tell whether this is current${origin?.lastSyncedIso ? ` \u2014 last synced at ${origin.lastSyncedIso}` : " and this clone has never fetched"}.`;
-  else if (behindHead)
-    reason2 = `${graphRel} is older than HEAD \u2014 the code graph is stale; run \`jarvis build graph\` (the incremental update \u2014 it re-extracts in place), then traces and impact are trustworthy again. \`--rebuild\` re-extracts from scratch and relabels; it is for a graph still wrong after a plain build, not for ordinary drift.`;
-  else if (rebuiltOnDisk)
+  } else if (originUnknown) {
+    verdict = "unknown";
+    reason2 = `cannot reach ${origin?.ref}, so whether this is current is UNKNOWN rather than bad \u2014 rebuilding cannot answer it${origin?.lastSyncedIso ? `. Last heard from a remote at ${origin.lastSyncedIso}` : ", and this clone has never fetched"}.`;
+  } else if (behindHead) {
+    verdict = "stale";
+    reason2 = `${graphRel} is ${describeBehind(behindHeadBy, behindHeadForMs)} \u2014 run \`jarvis build graph\` (the incremental update \u2014 it re-extracts in place), then traces and impact are trustworthy again. \`--rebuild\` re-extracts from scratch and relabels; it is for a graph still wrong after a plain build, not for ordinary drift.`;
+  } else if (rebuiltOnDisk) {
+    verdict = "stale";
     reason2 = `${graphRel} was rebuilt after this MCP server loaded it \u2014 reloading automatically.`;
+  }
   return {
     graphPath: graphRel,
     ...mtimeIso ? { mtimeIso } : {},
     ...head ? { head: { commit: head.commit, dirty: head.dirty } } : {},
     ...behindHead !== void 0 ? { behindHead } : {},
+    ...behindHeadBy !== void 0 ? { behindHeadBy } : {},
+    ...behindHeadForMs !== void 0 ? { behindHeadForMs } : {},
     ...rebuiltOnDisk ? { rebuiltOnDisk } : {},
     ...origin ? { origin } : {},
     ...behindOrigin ? { behindOrigin } : {},
     ...originUnknown ? { originUnknown } : {},
     stale: Boolean(behindHead) || rebuiltOnDisk || behindOrigin || originUnknown,
+    ...verdict ? { verdict } : {},
     ...reason2 ? { reason: reason2 } : {}
   };
 }
+function describeBehind(commits, forMs) {
+  const age = forMs !== void 0 && forMs >= 60 * 60 * 1e3 ? describeAge2(forMs) : void 0;
+  if (commits === void 0) return `older than HEAD${age ? ` by ${age}` : ""}`;
+  const plural = commits === 1 ? "commit" : "commits";
+  return `${commits} ${plural} behind HEAD${age ? `, built ${age} ago` : ""}`;
+}
+function describeAge2(ms) {
+  const hours = Math.round(ms / (60 * 60 * 1e3));
+  if (hours < 48) return `${hours} hour(s)`;
+  return `${Math.round(hours / 24)} day(s)`;
+}
 async function snapshotMtimeMs(ctx) {
-  const path22 = ctx.config.persistence?.locate?.({ repoRoot: ctx.config.repoRoot }, "snapshot");
-  if (!path22) return void 0;
+  const path23 = ctx.config.persistence?.locate?.({ repoRoot: ctx.config.repoRoot }, "snapshot");
+  if (!path23) return void 0;
   try {
-    return (await stat2(path22)).mtimeMs;
+    return (await stat2(path23)).mtimeMs;
   } catch {
     return void 0;
   }
@@ -7497,10 +7579,10 @@ async function cachedEnforcerDiags(ctx, freshPaths) {
 }
 function isFresh(snapshot, repoRoot, freshPaths) {
   if (!freshPaths || freshPaths.length === 0) return true;
-  for (const path22 of freshPaths) {
+  for (const path23 of freshPaths) {
     let mtimeMs;
     try {
-      mtimeMs = statSync2(resolve6(repoRoot, path22)).mtimeMs;
+      mtimeMs = statSync2(resolve6(repoRoot, path23)).mtimeMs;
     } catch {
       return false;
     }
@@ -7701,11 +7783,13 @@ async function brief(ctx, req) {
   const areas = [...communityCounts.entries()].map(([name, size]) => ({ name, size })).sort((a, b) => b.size - a.size).slice(0, listCap);
   const inProgressCount = byCategory["in-progress"] ?? 0;
   return {
-    summary: `${leaves.length} work item(s) \u2014 ${inProgressCount} in flight, ${byCategory["open"] ?? 0} open, ${byCategory["done"] ?? 0} done. ${artifacts} knowledge artifact(s); health: ${health.counts.error} error(s), ${health.counts.warn} warning(s)${f.stale ? " \u2014 GRAPH IS STALE, run `jarvis build graph` (incremental) before trusting details" : ""}${staleOrigins.length ? ` \u2014 ${staleOrigins.map((o) => o.origin).join(", ")} behind their own HEAD (re-run \`jarvis build graph\` there, then re-merge)` : ""}.`,
+    summary: `${leaves.length} work item(s) \u2014 ${inProgressCount} in flight, ${byCategory["open"] ?? 0} open, ${byCategory["done"] ?? 0} done. ${artifacts} knowledge artifact(s); health: ${health.counts.error} error(s), ${health.counts.warn} warning(s)${f.stale ? ` \u2014 ${describeFreshness(f)}` : ""}${staleOrigins.length ? ` \u2014 ${staleOrigins.map((o) => o.origin).join(", ")} behind their own HEAD (re-run \`jarvis build graph\` there, then re-merge)` : ""}.`,
     freshness: {
       builtAt: ctx.builtAt,
       ...f.head ? { head: { commit: f.head.commit, dirty: f.head.dirty } } : {},
       ...f.stale !== void 0 ? { stale: f.stale } : {},
+      ...f.verdict ? { verdict: f.verdict } : {},
+      ...f.behindHeadBy !== void 0 ? { behindHeadBy: f.behindHeadBy } : {},
       ...originsFresh.length ? { federated: originsFresh } : {}
     },
     graph: { nodes: ctx.graph.nodes().length, artifacts, edges: ctx.graph.edges().length },
@@ -7747,6 +7831,15 @@ function renderWorkItem(ctx, item2, home) {
     ...home !== void 0 ? { belongsTo: home } : {}
   };
 }
+function describeFreshness(f) {
+  if (f.verdict === "unknown")
+    return "FRESHNESS UNKNOWN \u2014 cannot reach the origin, so nothing below is confirmed current; rebuilding cannot answer it";
+  if (f.behindOrigin)
+    return `THIS CHECKOUT IS BEHIND ITS ORIGIN by ${f.origin?.behindBy} commit(s) \u2014 pull, then run \`jarvis build graph\``;
+  if (f.behindHead)
+    return `GRAPH IS STALE by ${f.behindHeadBy ?? "an unknown number of"} commit(s), run \`jarvis build graph\` (incremental) before trusting details`;
+  return "GRAPH IS STALE, run `jarvis build graph` (incremental) before trusting details";
+}
 
 // ../../packages/data/src/resolve.ts
 function resolveTarget(ctx, input) {
@@ -8153,15 +8246,15 @@ import { readFile as readFile5 } from "fs/promises";
 import { resolve as resolve7 } from "path";
 
 // ../../packages/data/src/meta.ts
-function stringMeta(metadata, path22) {
-  const value = metaValue(metadata, path22);
+function stringMeta(metadata, path23) {
+  const value = metaValue(metadata, path23);
   return typeof value === "string" ? value : void 0;
 }
-function metaValue(metadata, path22) {
+function metaValue(metadata, path23) {
   if (!metadata) return void 0;
-  if (Object.prototype.hasOwnProperty.call(metadata, path22)) return metadata[path22];
+  if (Object.prototype.hasOwnProperty.call(metadata, path23)) return metadata[path23];
   let current = metadata;
-  for (const part of path22.split(".")) {
+  for (const part of path23.split(".")) {
     if (!current || typeof current !== "object" || !Object.prototype.hasOwnProperty.call(current, part))
       return void 0;
     current = current[part];
@@ -8272,8 +8365,8 @@ function resolveScopeGovernance(ctx, members, codeNodes) {
   }
   return [...out.values()];
 }
-function resolveDirectoryGovernance(ctx, path22) {
-  let dir = path22.includes("/") ? path22.slice(0, path22.lastIndexOf("/")) : "";
+function resolveDirectoryGovernance(ctx, path23) {
+  let dir = path23.includes("/") ? path23.slice(0, path23.lastIndexOf("/")) : "";
   for (; ; ) {
     const siblings = codeNodesInDir(ctx, dir);
     if (siblings.length > 0) return resolveScopeGovernance(ctx, [], siblings);
@@ -8869,15 +8962,15 @@ async function review(ctx, req) {
       cites: []
     });
   }
-  for (const path22 of unresolved) {
-    const dirGov = resolveDirectoryGovernance(ctx, path22).filter((n) => !isWorkItem(n)).map((g) => g.id).filter((id) => !cites.has(id)).slice(0, 3);
+  for (const path23 of unresolved) {
+    const dirGov = resolveDirectoryGovernance(ctx, path23).filter((n) => !isWorkItem(n)).map((g) => g.id).filter((id) => !cites.has(id)).slice(0, 3);
     const hint = dirGov.length ? ` Files in its directory are governed by ${dirGov.join(", ")} \u2014 cite if it applies.` : "";
     findings.push({
       code: "unresolved-edit",
       severity: "info",
       confidence: "precise",
-      subject: path22,
-      message: `${path22} isn't in the graph yet (a new file, or a path that doesn't match).${hint || " No governed siblings to assess it by."}`,
+      subject: path23,
+      message: `${path23} isn't in the graph yet (a new file, or a path that doesn't match).${hint || " No governed siblings to assess it by."}`,
       cites: dirGov
     });
   }
@@ -9352,15 +9445,11 @@ function createServer(ctx, hosted = [], prompts = []) {
     );
   }
   for (const p of prompts) {
-    server.registerPrompt(
-      p.name,
-      { title: p.title, description: p.description },
-      async () => ({
-        messages: [
-          { role: "user", content: { type: "text", text: await p.read() } }
-        ]
-      })
-    );
+    server.registerPrompt(p.name, { title: p.title, description: p.description }, async () => ({
+      messages: [
+        { role: "user", content: { type: "text", text: await p.read() } }
+      ]
+    }));
   }
   return server;
 }
@@ -9391,14 +9480,23 @@ function buildInstructions(req = {}) {
 }
 async function result(ctx, structured) {
   const f = await freshness(ctx);
-  const summary = f.stale && !/stale/i.test(structured.summary) ? `${STALE_PREFIX}${structured.summary}` : structured.summary;
+  const summary = f.stale && !/stale/i.test(structured.summary) ? `${f.verdict === "unknown" ? UNKNOWN_PREFIX : STALE_PREFIX}${structured.summary}` : structured.summary;
   return {
     content: [{ type: "text", text: summary }],
     structuredContent: { ...structured, summary },
-    ...f.stale ? { _meta: { data: { stale: true, ...f.reason ? { reason: f.reason } : {} } } } : {}
+    ...f.stale ? {
+      _meta: {
+        data: {
+          stale: true,
+          ...f.verdict ? { verdict: f.verdict } : {},
+          ...f.reason ? { reason: f.reason } : {}
+        }
+      }
+    } : {}
   };
 }
 var STALE_PREFIX = "\u26A0 STALE GRAPH \u2014 results may be wrong; run `jarvis build graph` (the incremental update \u2014 not --rebuild). ";
+var UNKNOWN_PREFIX = "\u26A0 FRESHNESS UNKNOWN \u2014 this clone cannot reach its origin, so it cannot tell whether these results are current. ";
 
 // ../../packages/data/src/mcp/snapshot.ts
 async function loadSnapshot(config2) {
@@ -9551,7 +9649,7 @@ router.method("env.updateConfig", parseUpdateConfig, updateConfig);
 import { execFile as execFile8 } from "child_process";
 import crypto4 from "crypto";
 import { promisify as promisify8 } from "util";
-import path16 from "path";
+import path17 from "path";
 import fs15 from "fs/promises";
 var execFileAsync3 = promisify8(execFile8);
 var MAX_SEARCH_RESULTS = 50;
@@ -9571,10 +9669,10 @@ async function searchFiles(workspacePath2, query4) {
     const allEntries = [
       ...[...dirSet].map((d) => ({
         path: d,
-        name: path16.basename(d),
+        name: path17.basename(d),
         type: "directory"
       })),
-      ...allFiles.map((f) => ({ path: f, name: path16.basename(f), type: "file" }))
+      ...allFiles.map((f) => ({ path: f, name: path17.basename(f), type: "file" }))
     ];
     if (!query4.trim()) {
       const sorted = [...allEntries].sort((a, b) => {
@@ -9608,7 +9706,7 @@ async function fallbackSearch(workspacePath2, query4) {
       for (const entry of entries) {
         if (results.length >= MAX_SEARCH_RESULTS) break;
         if (entry.name.startsWith(".") || entry.name === "node_modules") continue;
-        const rel = path16.relative(workspacePath2, path16.join(dir, entry.name));
+        const rel = path17.relative(workspacePath2, path17.join(dir, entry.name));
         if (rel.toLowerCase().includes(q)) {
           results.push({
             path: rel,
@@ -9616,7 +9714,7 @@ async function fallbackSearch(workspacePath2, query4) {
             type: entry.isDirectory() ? "directory" : "file"
           });
         }
-        if (entry.isDirectory()) await walk2(path16.join(dir, entry.name), depth + 1);
+        if (entry.isDirectory()) await walk2(path17.join(dir, entry.name), depth + 1);
       }
     } catch {
     }
@@ -9703,8 +9801,8 @@ async function walkTree(req) {
   });
   const nodes = [];
   for (const entry of entries) {
-    const childAbs = path16.join(absPath, entry.name);
-    const rel = path16.relative(rootPath, childAbs);
+    const childAbs = path17.join(absPath, entry.name);
+    const rel = path17.relative(rootPath, childAbs);
     if (entry.isDirectory) {
       const children = await walkTree({ absPath: childAbs, rootPath, depth: depth + 1 });
       nodes.push({ name: entry.name, path: rel, type: "directory", children });
@@ -9715,9 +9813,9 @@ async function walkTree(req) {
   return nodes;
 }
 async function readFileContent(workdir, relPath) {
-  const absPath = path16.resolve(workdir, relPath);
-  const resolvedRoot = path16.resolve(workdir);
-  if (!absPath.startsWith(resolvedRoot + path16.sep) && absPath !== resolvedRoot) {
+  const absPath = path17.resolve(workdir, relPath);
+  const resolvedRoot = path17.resolve(workdir);
+  if (!absPath.startsWith(resolvedRoot + path17.sep) && absPath !== resolvedRoot) {
     throw new FileReadError("path_outside_workdir", "path_outside_workdir");
   }
   const stat4 = await fs15.stat(absPath);
@@ -9733,8 +9831,8 @@ async function readFileContent(workdir, relPath) {
 
 // src/workspace.ts
 var workspacePath = null;
-function setWorkspacePath(path22) {
-  workspacePath = path22;
+function setWorkspacePath(path23) {
+  workspacePath = path23;
 }
 function getWorkspacePath() {
   if (!workspacePath) {
@@ -10144,7 +10242,7 @@ async function scanHandler(_ctx, req) {
 router.method("workdir.scan", parseScan2, scanHandler);
 
 // src/start.ts
-import path17 from "path";
+import path18 from "path";
 
 // src/upstream.ts
 import WebSocket from "ws";
@@ -10154,7 +10252,7 @@ import { createRequire as createRequire2 } from "module";
 var _require = createRequire2(import.meta.url);
 var VERSION2 = _require("../package.json").version ?? "0.0.0";
 var IS_DEV = String(_require("../package.json").name ?? "").endsWith("-dev");
-var SHA = "20f7aad";
+var SHA = "8686d75";
 var BUILT = "2026-09-11";
 var BUILD = SHA ?? "source";
 var BUILD_LABEL = `${SHA ? `${VERSION2} (${SHA}${BUILT ? ` ${BUILT}` : ""})` : `${VERSION2} (source)`}${IS_DEV ? " \u2014 development build" : ""}`;
@@ -10522,7 +10620,7 @@ async function startAgent(options) {
     }, 3e4);
     void (async () => {
       const cloudRoots = await fetchRoots(options.upstream.hubUrl, envId, options.token);
-      env = startEnv({ configPath: path17.join(getConfigDir(), "env.json") });
+      env = startEnv({ configPath: path18.join(getConfigDir(), "env.json") });
       if (env.getConfig().roots.length === 0 && cloudRoots.length > 0) {
         env.updateConfig({ roots: cloudRoots });
       }
@@ -11007,7 +11105,7 @@ function register13(program) {
 
 // src/commands/uninstall.ts
 import fs17 from "fs";
-import path18 from "path";
+import path19 from "path";
 import { createInterface as createInterface5 } from "readline";
 function register14(program) {
   program.command("uninstall").description("Stop the agent, remove the OS service, and wipe local config + identity").option("--keep-data", "Skip the data-wipe prompt; preserve skills/prompts/cache/settings").option("--purge", "Skip the prompt and wipe ALL local data (skills, prompts, cache, settings)").action(async (opts) => {
@@ -11042,9 +11140,9 @@ async function runUninstall(opts) {
     wipeData = await confirm2("Also remove local data (skills, prompts, cache, settings)? [y/N] ");
   if (wipeData) {
     const root = getJarvisDir();
-    removeDir(path18.join(root, "skills"));
-    removeDir(path18.join(root, "prompts"));
-    removeDir(path18.join(root, "cache"));
+    removeDir(path19.join(root, "skills"));
+    removeDir(path19.join(root, "prompts"));
+    removeDir(path19.join(root, "cache"));
     removeFile({ path: getSettingsFile() });
     console.log("Uninstalled. Config, identity, logs, OS service, and local data removed.");
   } else {
@@ -11084,12 +11182,12 @@ function instanceUrl() {
   if (!url) throw new Error("not connected \u2014 run `jarvis connect` first");
   return url;
 }
-async function call(path22, method, body) {
+async function call(path23, method, body) {
   const config2 = loadConfig();
   if (!config2?.token) {
     throw new Error("not connected \u2014 run `jarvis connect` first");
   }
-  const resp = await fetch(new URL(path22, instanceUrl()), {
+  const resp = await fetch(new URL(path23, instanceUrl()), {
     method,
     headers: {
       authorization: `Bearer ${config2.token}`,
@@ -11098,7 +11196,7 @@ async function call(path22, method, body) {
     ...body === void 0 ? {} : { body: JSON.stringify(body) }
   });
   if (!resp.ok) {
-    throw new Error(`${method} ${path22} failed: ${resp.status} ${await resp.text()}`);
+    throw new Error(`${method} ${path23} failed: ${resp.status} ${await resp.text()}`);
   }
   return await resp.json();
 }
@@ -11183,12 +11281,12 @@ function register17(program) {
 }
 
 // src/graph/build.ts
-import { mkdirSync as mkdirSync2, readFileSync as readFileSync6, rmSync, statSync as statSync3, writeFileSync as writeFileSync3 } from "fs";
+import { mkdirSync as mkdirSync3, readFileSync as readFileSync7, rmSync, statSync as statSync3, writeFileSync as writeFileSync4 } from "fs";
 import { dirname as dirname6, resolve as resolve8 } from "path";
 
 // src/graph/ratchet.ts
 import { execFileSync as execFileSync3 } from "child_process";
-import { readFileSync as readFileSync5, writeFileSync as writeFileSync2 } from "fs";
+import { readFileSync as readFileSync6, writeFileSync as writeFileSync3 } from "fs";
 import { join as join8 } from "path";
 var BASELINE = join8(".claude", "governance.baseline.json");
 var GOVERNS = (finding) => finding.severity !== "error" && finding.code !== "PLUGIN_ERROR";
@@ -11201,7 +11299,7 @@ function countByRule(findings) {
 }
 function readBaseline(repo) {
   try {
-    const parsed = JSON.parse(readFileSync5(join8(repo, BASELINE), "utf-8"));
+    const parsed = JSON.parse(readFileSync6(join8(repo, BASELINE), "utf-8"));
     const allowed = parsed?.allowed;
     return { allowed: allowed && typeof allowed === "object" ? allowed : {}, adopted: true };
   } catch {
@@ -11238,7 +11336,7 @@ function writeBaseline(repo, baseline) {
   const ordered = Object.fromEntries(
     Object.entries(baseline.allowed).filter(([, count2]) => count2 > 0).sort(([left], [right]) => left.localeCompare(right))
   );
-  writeFileSync2(join8(repo, BASELINE), `${JSON.stringify({ allowed: ordered }, null, 2)}
+  writeFileSync3(join8(repo, BASELINE), `${JSON.stringify({ allowed: ordered }, null, 2)}
 `);
 }
 var NAMED = 5;
@@ -11360,8 +11458,8 @@ var DEFAULT_STALE_MS = 10 * 60 * 1e3;
 function acquireBuildLock(repoRoot, options = {}) {
   const staleMs = options.staleMs ?? DEFAULT_STALE_MS;
   const lockPath = options.lockPath ?? resolve8(repoRoot, ".data", "build.lock");
-  mkdirSync2(dirname6(lockPath), { recursive: true });
-  const stamp = () => writeFileSync3(lockPath, `${process.pid}
+  mkdirSync3(dirname6(lockPath), { recursive: true });
+  const stamp = () => writeFileSync4(lockPath, `${process.pid}
 `, { flag: "wx" });
   try {
     stamp();
@@ -11381,7 +11479,7 @@ function acquireBuildLock(repoRoot, options = {}) {
       if (released) return;
       released = true;
       try {
-        if (readFileSync6(lockPath, "utf8").trim() !== String(process.pid)) return;
+        if (readFileSync7(lockPath, "utf8").trim() !== String(process.pid)) return;
       } catch {
         return;
       }
@@ -11411,13 +11509,13 @@ function register18(program) {
 }
 
 // src/commands/dev.ts
-import path20 from "path";
+import path21 from "path";
 
 // src/dev.ts
 import fs18 from "fs";
-import path19 from "path";
+import path20 from "path";
 function redirectFile() {
-  return path19.join(getConfigDir(), "dev.json");
+  return path20.join(getConfigDir(), "dev.json");
 }
 function readDevRedirect() {
   try {
@@ -11452,8 +11550,8 @@ function isRedirected(req) {
   if (req.redirect.all) return true;
   const cwd = realPath(req.cwd);
   return req.redirect.repos.some((repo) => {
-    const rel = path19.relative(realPath(repo), cwd);
-    return rel === "" || !rel.startsWith("..") && !path19.isAbsolute(rel);
+    const rel = path20.relative(realPath(repo), cwd);
+    return rel === "" || !rel.startsWith("..") && !path20.isAbsolute(rel);
   });
 }
 
@@ -11462,7 +11560,7 @@ function register19(program) {
   const dev = program.command("dev").description("Run a development build in a repo, without replacing the installed jarvis");
   dev.command("use").argument("[where]", "'here' for the working directory, 'all' for every repo", "here").option("--root <path>", "The checkout to run. Default: the one already recorded").description("Point a repo at the development build").action((where, opts) => {
     const current = readDevRedirect();
-    const root = path20.resolve(opts.root ?? current?.root ?? process.cwd());
+    const root = path21.resolve(opts.root ?? current?.root ?? process.cwd());
     if (where !== "here" && where !== "all") {
       console.error(`Unknown target '${where}' \u2014 say 'here' or 'all'.`);
       process.exitCode = 1;
@@ -12044,9 +12142,9 @@ function describeStart(response) {
 }
 
 // src/serve/approvals.ts
-import { readFileSync as readFileSync7 } from "fs";
+import { readFileSync as readFileSync8 } from "fs";
 import os10 from "os";
-import path21 from "path";
+import path22 from "path";
 function pendingApproval(cwd) {
   const unapproved = unapprovedServers(cwd);
   const reasons = [
@@ -12057,15 +12155,15 @@ function pendingApproval(cwd) {
   return `it will HOLD at a prompt and take no turn, because ${reasons.join(" and ")}. Nothing will appear in Claude Code's history or in the app until somebody opens ${cwd} in Claude Code once and answers. This is a one-time gate per folder.`;
 }
 function untrustedFolder(cwd) {
-  const state2 = readJson2(path21.join(os10.homedir(), ".claude.json"));
+  const state2 = readJson2(path22.join(os10.homedir(), ".claude.json"));
   const project = state2?.projects?.[cwd];
   if (!state2) return false;
   return project?.hasTrustDialogAccepted !== true;
 }
 function unapprovedServers(cwd) {
-  const declared = readJson2(path21.join(cwd, ".mcp.json"));
+  const declared = readJson2(path22.join(cwd, ".mcp.json"));
   if (!declared?.mcpServers) return [];
-  const settings = readJson2(path21.join(cwd, ".claude", "settings.local.json"));
+  const settings = readJson2(path22.join(cwd, ".claude", "settings.local.json"));
   if (settings?.enableAllProjectMcpServers === true) return [];
   const answered = /* @__PURE__ */ new Set([
     ...settings?.enabledMcpjsonServers ?? [],
@@ -12075,7 +12173,7 @@ function unapprovedServers(cwd) {
 }
 function readJson2(file) {
   try {
-    return JSON.parse(readFileSync7(file, "utf-8"));
+    return JSON.parse(readFileSync8(file, "utf-8"));
   } catch {
     return null;
   }
@@ -12266,16 +12364,16 @@ async function item(repo, id, res) {
 }
 async function asset(repo, assets, url, res) {
   const wanted = url.pathname === "/" || !extname(url.pathname) ? "/index.html" : url.pathname;
-  const path22 = join9(assets, wanted);
-  if (!path22.startsWith(assets)) {
+  const path23 = join9(assets, wanted);
+  if (!path23.startsWith(assets)) {
     res.writeHead(403).end("no");
     return;
   }
   try {
-    const raw = await readFile7(path22);
-    const body = extname(path22) === ".html" ? Buffer.from(named(raw.toString("utf-8"), repo)) : raw;
+    const raw = await readFile7(path23);
+    const body = extname(path23) === ".html" ? Buffer.from(named(raw.toString("utf-8"), repo)) : raw;
     res.writeHead(200, {
-      "content-type": TYPES[extname(path22)] ?? "application/octet-stream",
+      "content-type": TYPES[extname(path23)] ?? "application/octet-stream",
       "content-length": body.byteLength,
       // The bundle's name never changes, so a cached copy is indistinguishable from the current
       // one and a browser will happily keep running the build you just replaced. That is the
@@ -12352,7 +12450,7 @@ function serveUi(repo, port, options = {}) {
 
 // src/ui/source.ts
 import { spawn as spawn3 } from "child_process";
-import { existsSync as existsSync6, readFileSync as readFileSync8, watch } from "fs";
+import { existsSync as existsSync7, readFileSync as readFileSync9, watch } from "fs";
 import { stat as stat3 } from "fs/promises";
 import { dirname as dirname8, join as join10, resolve as resolve10 } from "path";
 import { fileURLToPath as fileURLToPath5 } from "url";
@@ -12372,7 +12470,7 @@ function sourceCheckout() {
 function builtFrom() {
   try {
     const manifest = join10(dirname8(fileURLToPath5(import.meta.url)), "..", "package.json");
-    const read3 = JSON.parse(readFileSync8(manifest, "utf-8"));
+    const read3 = JSON.parse(readFileSync9(manifest, "utf-8"));
     return typeof read3.jarvis?.source === "string" ? read3.jarvis.source : null;
   } catch {
     return null;
@@ -12383,7 +12481,7 @@ function usable(root) {
     join10(root, "apps", "cli", "src", "ui", "browser", "App.tsx"),
     join10(root, "apps", "cli", "tsup.ui.config.ts")
   ];
-  const present = files2.every((path22) => existsSync6(path22)) && tool(root, "tsup") && tool(root, "tsx");
+  const present = files2.every((path23) => existsSync7(path23)) && tool(root, "tsup") && tool(root, "tsx");
   return present ? root : null;
 }
 function tool(root, name) {
@@ -12391,7 +12489,7 @@ function tool(root, name) {
     join10(root, "apps", "cli", "node_modules", ".bin", name),
     join10(root, "node_modules", ".bin", name)
   ];
-  return places.find((path22) => existsSync6(path22)) ?? null;
+  return places.find((path23) => existsSync7(path23)) ?? null;
 }
 function runFromCheckout(req) {
   const child = spawn3(
@@ -12597,15 +12695,15 @@ function createCli() {
 if (isRunningFromSource()) {
   const dotenv = await import("dotenv");
   const fs19 = await import("fs");
-  const path22 = await import("path");
+  const path23 = await import("path");
   let dir = process.cwd();
-  while (dir !== path22.dirname(dir)) {
-    const envPath = path22.join(dir, ".env");
+  while (dir !== path23.dirname(dir)) {
+    const envPath = path23.join(dir, ".env");
     if (fs19.existsSync(envPath)) {
       dotenv.config({ path: envPath });
       break;
     }
-    dir = path22.dirname(dir);
+    dir = path23.dirname(dir);
   }
 }
 createCli().parse();