@cleocode/cleo 2026.10.21 → 2026.10.22

package/dist/cli/{nexus-IRYPIFMK.js → nexus-BDLNXC46.js}

@@ -16,10 +16,14 @@
 import {
   negatedFlag
 } from "./chunk-47JYZAMS.js";
+import {
+  warnConduitDeprecated
+} from "./chunk-IGM44F43.js";
 import {
   dispatchFromCli,
-  dispatchRaw
-} from "./chunk-L3W2NVWA.js";
+  dispatchRaw,
+  reportRawError
+} from "./chunk-VBTCULVY.js";
 import "./chunk-6N6WGLXE.js";
 import "./chunk-4VASFLUW.js";
 import {
@@ -36,13 +40,13 @@ import {
   cliOutput,
   humanInfo,
   humanWarn
-} from "./chunk-4RGSNUUP.js";
+} from "./chunk-6UGBRRKY.js";
 import {
   getFormatContext,
   setFormatContext
 } from "./chunk-6JSJNYH2.js";
 import "./chunk-D7BAQNV2.js";
-import "./chunk-GAMCDPPS.js";
+import "./chunk-BFRYJSL5.js";
 
 // packages/cleo/src/cli/commands/nexus.ts
 import { statSync } from "node:fs";
@@ -61,11 +65,14 @@ import {
 } from "@cleocode/core/nexus/assessment-projection.js";
 import { exportNexusGraph } from "@cleocode/core/nexus/export.js";
 import {
+  answerFreshness,
   assessNexusFreshnessForQuery,
   assessNexusIndexFreshness,
   discloseNexusFreshness,
   judgeSymbolFiles,
   querySymbolFiles,
+  readNexusStalePolicy,
+  staleIndexRefusal,
   withNexusFreshnessMeta
 } from "@cleocode/core/nexus/freshness.js";
 import { KnowledgeSymbolAmbiguityError } from "@cleocode/core/nexus/knowledge.js";
@@ -343,6 +350,9 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
       const projected = summary && projectAssessmentFiles(summary, filesRequest);
       const referencePage = projected && referencesRequest ? await readKnowledgeIndexReferencePage(currentRoot, referencesRequest) : null;
       const assessment = projected && referencePage ? withReferencePage(projected, referencePage) : projected;
+      const { summarizeRegistryHealth } = await import("@cleocode/core/nexus/registry");
+      const registry = await summarizeRegistryHealth().catch(() => void 0);
+      const { readReindexOnMergeOutcome } = await import("@cleocode/core/nexus/reindex-on-merge");
       const durationMs = Date.now() - startTime;
       cliOutput(
         {
@@ -351,7 +361,10 @@ The code-intelligence graph is project-scoped (ADR-090 \xB7 T11648): one store p
           ...stats,
           ...freshness.status === "unknown" ? {} : { staleFileCount: freshness.staleFileCount },
           freshness,
-          assessment
+          assessment,
+          ...registry ? { registry } : {},
+          // T14010: what the last background reindex after a merge did.
+          reindexOnMerge: readReindexOnMergeOutcome(currentRoot)
         },
         {
           command: "nexus-status",
@@ -864,14 +877,7 @@ var clustersCommand = defineCommand({
     const response = await dispatchRaw("query", "nexus", "clusters", { projectId, repoPath });
     const durationMs = Date.now() - startTime;
     if (!response.success) {
-      const msg = response.error?.message ?? "Unknown error";
-      cliError(
-        msg,
-        1,
-        { name: response.error?.code ?? "E_CLUSTERS_FAILED", details: response.error?.details },
-        { operation: "nexus.clusters", duration_ms: durationMs }
-      );
-      process.exitCode = 1;
+      reportRawError(response, { operation: "nexus.clusters", fallbackCode: "E_CLUSTERS_FAILED" });
       return;
     }
     cliOutput(response.data, {
@@ -908,14 +914,7 @@ var flowsCommand = defineCommand({
     const response = await dispatchRaw("query", "nexus", "flows", { projectId, repoPath });
     const durationMs = Date.now() - startTime;
     if (!response.success) {
-      const msg = response.error?.message ?? "Unknown error";
-      cliError(
-        msg,
-        1,
-        { name: response.error?.code ?? "E_FLOWS_FAILED", details: response.error?.details },
-        { operation: "nexus.flows", duration_ms: durationMs }
-      );
-      process.exitCode = 1;
+      reportRawError(response, { operation: "nexus.flows", fallbackCode: "E_FLOWS_FAILED" });
       return;
     }
     cliOutput(response.data, {
@@ -944,6 +943,11 @@ var contextCommand = defineCommand({
       type: "boolean",
       description: "Answer from the index as it stands, without an inline refresh (T13523)",
       default: false
+    },
+    "allow-stale": {
+      type: "boolean",
+      description: "Answer even when the index is more than nexus.freshness.maxCommitsBehind commits behind the checked-out HEAD (T14008)",
+      default: false
     }
   },
   async run({ args }) {
@@ -962,18 +966,24 @@ var contextCommand = defineCommand({
       limit,
       content: showContent,
       ...negatedFlag(args, "refresh") ? { noRefresh: true } : {},
+      ...args["allow-stale"] ? { allowStale: true } : {},
       _legacyAliasFor: "cleo graph context"
     });
     const durationMs = Date.now() - startTime;
     if (!response.success) {
       const msg = response.error?.message ?? "Unknown error";
+      const exitCode = response.error?.code === "E_NEXUS_INDEX_STALE" ? ExitCode.NEXUS_INDEX_STALE : 1;
       cliError(
         msg,
-        1,
-        { name: response.error?.code ?? "E_CONTEXT_FAILED", details: response.error?.details },
+        exitCode,
+        {
+          name: response.error?.code ?? "E_CONTEXT_FAILED",
+          details: response.error?.details,
+          ...response.error?.fix ? { fix: response.error.fix } : {}
+        },
         { operation: "nexus.context", duration_ms: durationMs }
       );
-      process.exitCode = 1;
+      process.exitCode = exitCode;
       return;
     }
     const result = response.data;
@@ -995,6 +1005,15 @@ var contextCommand = defineCommand({
     });
   }
 });
+function refuseStaleImpact(refusal, startTime) {
+  cliError(
+    refusal.message,
+    ExitCode.NEXUS_INDEX_STALE,
+    { name: refusal.code, fix: refusal.fix, details: { ...refusal.details } },
+    { operation: "nexus.impact", duration_ms: Date.now() - startTime }
+  );
+  process.exitCode = ExitCode.NEXUS_INDEX_STALE;
+}
 var impactCommand = defineCommand({
   meta: {
     name: "impact",
@@ -1013,6 +1032,11 @@ var impactCommand = defineCommand({
       type: "boolean",
       description: "Answer from the index as it stands, without an inline refresh (T13523)",
       default: false
+    },
+    "allow-stale": {
+      type: "boolean",
+      description: "Answer even when the index is more than nexus.freshness.maxCommitsBehind commits behind the checked-out HEAD (T14008)",
+      default: false
     }
   },
   async run({ args }) {
@@ -1024,28 +1048,57 @@ var impactCommand = defineCommand({
     const projectId = await resolveNexusQueryProjectId(repoPath, projectIdOverride);
     const maxDepth = Math.min(parseInt(args.depth, 10), 5);
     const symbolName = args.symbol;
+    let stalePolicy;
+    let staleAssessment;
+    const refusedAsMissing = () => {
+      if (!stalePolicy || !staleAssessment) return false;
+      const missing = staleIndexRefusal(staleAssessment, stalePolicy, {
+        projectRoot: repoPath,
+        targetMissing: true
+      });
+      if (missing) refuseStaleImpact(missing, startTime);
+      return missing !== null;
+    };
     try {
       const assessment = await assessNexusFreshnessForQuery(repoPath, {
         refresh: !negatedFlag(args, "refresh")
       });
+      stalePolicy = await readNexusStalePolicy(repoPath, { allowStale: !!args["allow-stale"] });
+      staleAssessment = assessment.freshness;
+      const tooStale = staleIndexRefusal(assessment.freshness, stalePolicy, {
+        projectRoot: repoPath
+      });
+      if (tooStale) {
+        refuseStaleImpact(tooStale, startTime);
+        return;
+      }
       const result = await getSymbolImpact(symbolName, projectId, repoPath, {
         maxDepth,
         why: whyFlag
       });
+      if (result.targetNodeId === null && refusedAsMissing()) return;
       const freshness = judgeSymbolFiles(assessment, querySymbolFiles(result));
       discloseNexusFreshness("nexus impact", freshness);
       const durationMs = Date.now() - startTime;
-      cliOutput({ ...result, _symbolName: symbolName, _why: whyFlag }, {
-        command: "nexus-impact",
-        operation: "nexus.impact",
-        extensions: withNexusFreshnessMeta(
-          {
-            duration_ms: durationMs,
-            ...buildNexusMetaExtensions("impact", { symbol: symbolName, projectId })
-          },
-          freshness
-        )
-      });
+      cliOutput(
+        {
+          ...result,
+          freshness: answerFreshness(freshness),
+          _symbolName: symbolName,
+          _why: whyFlag
+        },
+        {
+          command: "nexus-impact",
+          operation: "nexus.impact",
+          extensions: withNexusFreshnessMeta(
+            {
+              duration_ms: durationMs,
+              ...buildNexusMetaExtensions("impact", { symbol: symbolName, projectId })
+            },
+            freshness
+          )
+        }
+      );
     } catch (err) {
       const code = err instanceof Error && "code" in err ? err.code : void 0;
       const msg = err instanceof Error ? err.message : String(err);
@@ -1065,6 +1118,7 @@ var impactCommand = defineCommand({
         return;
       }
       if (code === "E_NOT_FOUND") {
+        if (refusedAsMissing()) return;
         cliError(
           msg,
           4,
@@ -1084,6 +1138,40 @@ var impactCommand = defineCommand({
     }
   }
 });
+var reindexOnMergeCommand = defineCommand({
+  meta: {
+    name: "reindex-on-merge",
+    description: "Reindex after a merge into the base branch (run by the post-merge hook). Off until --enable"
+  },
+  args: {
+    json: { type: "boolean", description: "Output result as JSON (LAFS envelope format)" },
+    enable: {
+      type: "boolean",
+      description: "Turn it on: set nexus.reindexOnMerge.enabled and the git marker the post-merge hook checks"
+    },
+    disable: { type: "boolean", description: "Turn it off (config and git marker)" }
+  },
+  async run({ args }) {
+    applyJsonFlag(args.json);
+    const { runReindexOnMerge, setReindexOnMerge } = await import("@cleocode/core/nexus/reindex-on-merge");
+    if (args.enable || args.disable) {
+      await setReindexOnMerge(getProjectRoot(), !!args.enable);
+      cliOutput(
+        { reindexOnMerge: !!args.enable },
+        { command: "nexus-reindex-on-merge", operation: "nexus.reindex-on-merge" }
+      );
+      return;
+    }
+    const outcome = await runReindexOnMerge(getProjectRoot());
+    cliOutput(
+      { ...outcome },
+      {
+        command: "nexus-reindex-on-merge",
+        operation: "nexus.reindex-on-merge"
+      }
+    );
+  }
+});
 var analyzeCommand = defineCommand({
   meta: {
     name: "analyze",
@@ -1420,7 +1508,7 @@ var projectsCleanCommand = defineCommand({
     },
     unhealthy: {
       type: "boolean",
-      description: 'Also match rows where health_status is "unhealthy"'
+      description: "Also match rows recorded unreachable whose path no longer answers (moved or unreadable rows are kept)"
     },
     "never-indexed": {
       type: "boolean",
@@ -1498,7 +1586,8 @@ var projectsCleanCommand = defineCommand({
             classification,
             ...preview.relocated ? { relocated: preview.relocated } : {},
             ...preview.unreadable ? { unreadable: preview.unreadable } : {},
-            ...preview.idMismatch ? { idMismatch: preview.idMismatch } : {}
+            ...preview.idMismatch ? { idMismatch: preview.idMismatch } : {},
+            ...preview.otherHost ? { otherHost: preview.otherHost } : {}
           },
           {
             command: "nexus-projects-clean-preview",
@@ -1520,7 +1609,8 @@ var projectsCleanCommand = defineCommand({
             matchedByReason,
             ...preview.relocated ? { relocated: preview.relocated } : {},
             ...preview.unreadable ? { unreadable: preview.unreadable } : {},
-            ...preview.idMismatch ? { idMismatch: preview.idMismatch } : {}
+            ...preview.idMismatch ? { idMismatch: preview.idMismatch } : {},
+            ...preview.otherHost ? { otherHost: preview.otherHost } : {}
           },
           {
             command: "nexus-projects-clean",
@@ -1586,7 +1676,8 @@ var projectsCleanCommand = defineCommand({
           receipt: result.receipt,
           ...result.relocated ? { relocated: result.relocated } : {},
           ...result.unreadable ? { unreadable: result.unreadable } : {},
-          ...result.idMismatch ? { idMismatch: result.idMismatch } : {}
+          ...result.idMismatch ? { idMismatch: result.idMismatch } : {},
+          ...result.otherHost ? { otherHost: result.otherHost } : {}
         },
         {
           command: "nexus-projects-clean",
@@ -1943,6 +2034,10 @@ var queryCommand = defineCommand({
       params
     });
     const durationMs = Date.now() - startTime;
+    if (!response.success && response.error?.code === "E_NEXUS_INDEX_STALE") {
+      reportRawError(response, { operation: "nexus.query-cte" });
+      return;
+    }
     if (!response.success) {
       const code = response.error?.code;
       const msg = response.error?.message ?? "Unknown error";
@@ -2009,14 +2104,10 @@ var routeMapCommand = defineCommand({
     const response = await dispatchRaw("query", "nexus", "route-map", { projectId });
     const durationMs = Date.now() - startTime;
     if (!response.success) {
-      const msg = response.error?.message ?? "Unknown error";
-      cliError(
-        msg,
-        1,
-        { name: response.error?.code ?? "E_ROUTE_MAP_FAILED", details: response.error?.details },
-        { operation: "nexus.route-map", duration_ms: durationMs }
-      );
-      process.exitCode = 1;
+      reportRawError(response, {
+        operation: "nexus.route-map",
+        fallbackCode: "E_ROUTE_MAP_FAILED"
+      });
       return;
     }
     cliOutput(
@@ -2065,14 +2156,10 @@ var shapeCheckCommand = defineCommand({
     const response = await dispatchRaw("query", "nexus", "shape-check", { routeSymbol, projectId });
     const durationMs = Date.now() - startTime;
     if (!response.success) {
-      const msg = response.error?.message ?? "Unknown error";
-      cliError(
-        msg,
-        1,
-        { name: response.error?.code ?? "E_SHAPE_CHECK_FAILED", details: response.error?.details },
-        { operation: "nexus.shape-check", duration_ms: durationMs }
-      );
-      process.exitCode = 1;
+      reportRawError(response, {
+        operation: "nexus.shape-check",
+        fallbackCode: "E_SHAPE_CHECK_FAILED"
+      });
       return;
     }
     cliOutput(
@@ -2108,13 +2195,10 @@ var fullContextCommand = defineCommand({
     const symbolId = args.symbol;
     const response = await dispatchRaw("query", "nexus", "full-context", { symbol: symbolId });
     if (!response.success) {
-      cliError(
-        response.error?.message ?? "Unknown error",
-        1,
-        { name: response.error?.code ?? "E_FULL_CONTEXT_FAILED", details: response.error?.details },
-        { operation: "nexus.full-context" }
-      );
-      process.exitCode = 1;
+      reportRawError(response, {
+        operation: "nexus.full-context",
+        fallbackCode: "E_FULL_CONTEXT_FAILED"
+      });
       return;
     }
     const durationMs = Date.now() - startTime;
@@ -2151,16 +2235,10 @@ var taskFootprintCommand = defineCommand({
     const taskId = args.taskId;
     const response = await dispatchRaw("query", "nexus", "task-footprint", { taskId });
     if (!response.success) {
-      cliError(
-        response.error?.message ?? "Unknown error",
-        1,
-        {
-          name: response.error?.code ?? "E_TASK_FOOTPRINT_FAILED",
-          details: response.error?.details
-        },
-        { operation: "nexus.task-footprint" }
-      );
-      process.exitCode = 1;
+      reportRawError(response, {
+        operation: "nexus.task-footprint",
+        fallbackCode: "E_TASK_FOOTPRINT_FAILED"
+      });
       return;
     }
     const durationMs = Date.now() - startTime;
@@ -2197,16 +2275,10 @@ var brainAnchorsCommand = defineCommand({
     const entryId = args.entryId;
     const response = await dispatchRaw("query", "nexus", "brain-anchors", { entryId });
     if (!response.success) {
-      cliError(
-        response.error?.message ?? "Unknown error",
-        1,
-        {
-          name: response.error?.code ?? "E_BRAIN_ANCHORS_FAILED",
-          details: response.error?.details
-        },
-        { operation: "nexus.brain-anchors" }
-      );
-      process.exitCode = 1;
+      reportRawError(response, {
+        operation: "nexus.brain-anchors",
+        fallbackCode: "E_BRAIN_ANCHORS_FAILED"
+      });
       return;
     }
     const durationMs = Date.now() - startTime;
@@ -2243,13 +2315,7 @@ var whyCommand = defineCommand({
     const symbolId = args.symbol;
     const response = await dispatchRaw("query", "nexus", "why", { symbol: symbolId });
     if (!response.success) {
-      cliError(
-        response.error?.message ?? "Unknown error",
-        1,
-        { name: response.error?.code ?? "E_WHY_FAILED", details: response.error?.details },
-        { operation: "nexus.why" }
-      );
-      process.exitCode = 1;
+      reportRawError(response, { operation: "nexus.why", fallbackCode: "E_WHY_FAILED" });
       return;
     }
     const durationMs = Date.now() - startTime;
@@ -2286,13 +2352,10 @@ var impactFullCommand = defineCommand({
     const symbolId = args.symbol;
     const response = await dispatchRaw("query", "nexus", "impact-full", { symbol: symbolId });
     if (!response.success) {
-      cliError(
-        response.error?.message ?? "Unknown error",
-        1,
-        { name: response.error?.code ?? "E_IMPACT_FULL_FAILED", details: response.error?.details },
-        { operation: "nexus.impact-full" }
-      );
-      process.exitCode = 1;
+      reportRawError(response, {
+        operation: "nexus.impact-full",
+        fallbackCode: "E_IMPACT_FULL_FAILED"
+      });
       return;
     }
     const durationMs = Date.now() - startTime;
@@ -2319,6 +2382,7 @@ var conduitScanCommand = defineCommand({
     }
   },
   async run({ args }) {
+    warnConduitDeprecated("nexus conduit-scan");
     applyJsonFlag(args.json);
     const startTime = Date.now();
     const response = await dispatchRaw("mutate", "nexus", "conduit-scan", {});
@@ -2368,14 +2432,10 @@ var taskSymbolsCommand = defineCommand({
     const response = await dispatchRaw("query", "nexus", "task-symbols", { taskId });
     const durationMs = Date.now() - startTime;
     if (!response.success) {
-      const msg = response.error?.message ?? "Unknown error";
-      cliError(
-        msg,
-        1,
-        { name: response.error?.code ?? "E_TASK_SYMBOLS_FAILED", details: response.error?.details },
-        { operation: "nexus.task-symbols", duration_ms: durationMs }
-      );
-      process.exitCode = 1;
+      reportRawError(response, {
+        operation: "nexus.task-symbols",
+        fallbackCode: "E_TASK_SYMBOLS_FAILED"
+      });
       return;
     }
     const data = response.data;
@@ -2709,13 +2769,10 @@ var hotPathsCommand = defineCommand({
     const response = await dispatchRaw("query", "nexus", "hot-paths", { limit });
     const durationMs = Date.now() - startTime;
     if (!response.success) {
-      cliError(
-        response.error?.message ?? "Unknown error",
-        1,
-        { name: response.error?.code ?? "E_HOT_PATHS_FAILED", details: response.error?.details },
-        { operation: "nexus.hot-paths", duration_ms: durationMs }
-      );
-      process.exitCode = 1;
+      reportRawError(response, {
+        operation: "nexus.hot-paths",
+        fallbackCode: "E_HOT_PATHS_FAILED"
+      });
       return;
     }
     cliOutput(response.data, {
@@ -2750,13 +2807,10 @@ var hotNodesCommand = defineCommand({
     const response = await dispatchRaw("query", "nexus", "hot-nodes", { limit });
     const durationMs = Date.now() - startTime;
     if (!response.success) {
-      cliError(
-        response.error?.message ?? "Unknown error",
-        1,
-        { name: response.error?.code ?? "E_HOT_NODES_FAILED", details: response.error?.details },
-        { operation: "nexus.hot-nodes", duration_ms: durationMs }
-      );
-      process.exitCode = 1;
+      reportRawError(response, {
+        operation: "nexus.hot-nodes",
+        fallbackCode: "E_HOT_NODES_FAILED"
+      });
       return;
     }
     cliOutput(response.data, {
@@ -2791,13 +2845,10 @@ var coldSymbolsCommand = defineCommand({
     const response = await dispatchRaw("query", "nexus", "cold-symbols", { days: thresholdDays });
     const durationMs = Date.now() - startTime;
     if (!response.success) {
-      cliError(
-        response.error?.message ?? "Unknown error",
-        1,
-        { name: response.error?.code ?? "E_COLD_SYMBOLS_FAILED", details: response.error?.details },
-        { operation: "nexus.cold-symbols", duration_ms: durationMs }
-      );
-      process.exitCode = 1;
+      reportRawError(response, {
+        operation: "nexus.cold-symbols",
+        fallbackCode: "E_COLD_SYMBOLS_FAILED"
+      });
       return;
     }
     cliOutput(response.data, {
@@ -2918,6 +2969,7 @@ var nexusCommand = defineCommand({
     context: contextCommand,
     impact: impactCommand,
     analyze: analyzeCommand,
+    "reindex-on-merge": reindexOnMergeCommand,
     query: queryCommand,
     projects: projectsCommand,
     "refresh-bridge": refreshBridgeCommand,
@@ -2960,4 +3012,4 @@ var nexusCommand = defineCommand({
 export {
   nexusCommand
 };
-//# sourceMappingURL=nexus-IRYPIFMK.js.map
+//# sourceMappingURL=nexus-BDLNXC46.js.map

package/dist/cli/{nexus-E46KEPJZ.js → nexus-SAELNTDV.js}

@@ -15,7 +15,7 @@
 })();
 import {
   lazyOperation
-} from "./chunk-GAMCDPPS.js";
+} from "./chunk-BFRYJSL5.js";
 import {
   defineTypedHandler,
   lafsError,
@@ -38,9 +38,12 @@ import {
 } from "@cleocode/contracts/operations/nexus-scope-map.js";
 import { getLogger } from "@cleocode/core/logger";
 import {
+  answerFreshness,
   discloseNexusFreshness,
   judgeSymbolFiles,
   querySymbolFiles,
+  readNexusStalePolicy,
+  staleIndexRefusal,
   withNexusFreshnessMeta
 } from "@cleocode/core/nexus/freshness";
 import { resolveNexusQueryProjectId } from "@cleocode/core/nexus/registry.js";
@@ -803,11 +806,38 @@ function answersFromGraph(operation) {
 function withFreshness(response, operation, assessment) {
   const freshness = judgeSymbolFiles(assessment, querySymbolFiles(response.data));
   discloseNexusFreshness(`nexus ${operation}`, freshness);
+  const data = response.success && response.data && typeof response.data === "object" && !Array.isArray(response.data) ? { ...response.data, freshness: answerFreshness(freshness) } : response.data;
   return {
     ...response,
+    ...data !== void 0 ? { data } : {},
     meta: { ...response.meta, ...withNexusFreshnessMeta(response.meta, freshness) }
   };
 }
+function targetMissing(response) {
+  if (!response.success) return response.error?.code === "E_NOT_FOUND";
+  const data = response.data;
+  return !!data && typeof data === "object" && !Array.isArray(data) && data["matchCount"] === 0;
+}
+function staleRefusalResponse(operation, refusal, startTime) {
+  const refused = errorResult(
+    "query",
+    "nexus",
+    operation,
+    refusal.code,
+    refusal.message,
+    startTime
+  );
+  return {
+    ...refused,
+    error: {
+      // @sync-invariant none:local-only a refused read; nothing is written
+      code: refusal.code,
+      message: refusal.message,
+      fix: refusal.fix,
+      details: { ...refusal.details }
+    }
+  };
+}
 var NexusHandler = class {
   /**
    * Execute a read-only nexus query operation.
@@ -821,10 +851,26 @@ var NexusHandler = class {
       return unsupportedOp("query", "nexus", operation, startTime);
     }
     if (answersFromGraph(operation)) {
-      const assessment = await assessNexusFreshnessForQuery(getProjectRoot(), {
+      const graphRoot = getProjectRoot();
+      const assessment = await assessNexusFreshnessForQuery(graphRoot, {
         refresh: params?.["noRefresh"] !== true
       });
-      return withFreshness(await this.answer(operation, params, startTime), operation, assessment);
+      const stalePolicy = await readNexusStalePolicy(graphRoot, {
+        allowStale: params?.["allowStale"] === true
+      });
+      const tooStale = staleIndexRefusal(assessment.freshness, stalePolicy, {
+        projectRoot: graphRoot
+      });
+      if (tooStale) return staleRefusalResponse(operation, tooStale, startTime);
+      const graphAnswer = await this.answer(operation, params, startTime);
+      if (targetMissing(graphAnswer)) {
+        const missingFromStale = staleIndexRefusal(assessment.freshness, stalePolicy, {
+          projectRoot: graphRoot,
+          targetMissing: true
+        });
+        if (missingFromStale) return staleRefusalResponse(operation, missingFromStale, startTime);
+      }
+      return withFreshness(graphAnswer, operation, assessment);
     }
     return this.answer(operation, params, startTime);
   }
@@ -1058,4 +1104,4 @@ async function handleImpact(operation, params, startTime) {
 export {
   NexusHandler
 };
-//# sourceMappingURL=nexus-E46KEPJZ.js.map
+//# sourceMappingURL=nexus-SAELNTDV.js.map

package/dist/cli/{nexus-vault-cli-H3NIWJDV.js → nexus-vault-cli-PDCIZ7YS.js}

@@ -27,10 +27,10 @@ import {
   runCloudVault,
   runCloudVerify,
   runSyncEnablePush
-} from "./chunk-ZEJB6GAB.js";
-import "./chunk-CGOF3GJE.js";
+} from "./chunk-FKVXKYD3.js";
+import "./chunk-6MYVSVE5.js";
 import "./chunk-47JYZAMS.js";
-import "./chunk-4RGSNUUP.js";
+import "./chunk-6UGBRRKY.js";
 import "./chunk-6JSJNYH2.js";
 export {
   cloudRestoreSummary,
@@ -47,4 +47,4 @@ export {
   runCloudVerify,
   runSyncEnablePush
 };
-//# sourceMappingURL=nexus-vault-cli-H3NIWJDV.js.map
+//# sourceMappingURL=nexus-vault-cli-PDCIZ7YS.js.map