@inerrata-corporation/errata 2.0.1-dev.99 → 2.0.2-dev.133

package/errata.mjs

@@ -183,7 +183,14 @@ var init_castalia = __esm({
       "SOLVED_BY",
       "MITIGATES",
       "REPORTED_FAILURE",
-      "CONTRADICTS"
+      "CONTRADICTS",
+      // Motif twin-faces (KN-twin-faces): failure-face motif → remedy-face motif
+      // across layers (AntiPattern/Weakness ↔ Technique/Pattern). Same
+      // problem→fix direction as FIXED_BY/SOLVED_BY. Minted by the nightly LLM
+      // twin-face pass — these are the near-identical cross-layer pairs the
+      // polarity gate (finding 5) correctly refuses to FUSE; the link carries
+      // what fusion can't.
+      "REMEDIED_BY"
     ];
     CONCEPTUAL_EDGES = [
       "INSTANCE_OF",
@@ -313,6 +320,10 @@ var init_castalia = __esm({
       CAUSED_BY: 3,
       FIXED_BY: 3,
       SOLVED_BY: 3,
+      // Twin-face link (failure motif → remedy motif, KN-twin-faces) — causal-grade
+      // but a notch below witnessed FIXED_BY/SOLVED_BY: the pairing is an LLM
+      // judgment over descriptions, not an agent-witnessed resolution.
+      REMEDIED_BY: 2.5,
       MANIFESTS_AS: 2,
       ESCALATES_TO: 1.5,
       AFFECTS: 1.2,
@@ -938,6 +949,12 @@ function packageCanonicalId(p) {
   const name2 = eco === "npm" ? p.name.toLowerCase() : p.name;
   return `pkg:${eco}/${name2}${p.version ? `@${p.version}` : ""}`;
 }
+function versionlessPurl(purl) {
+  if (!purl.startsWith("pkg:")) return null;
+  const lastSlash = purl.lastIndexOf("/");
+  const lastAt = purl.lastIndexOf("@");
+  return lastAt > lastSlash ? purl.slice(0, lastAt) : purl;
+}
 function parsePackageRef(ref) {
   let rest2 = ref.trim();
   if (rest2.startsWith("pkg:")) {
@@ -15363,7 +15380,10 @@ var init_edge_rules = __esm({
       // NOT ruled here — the type pre-exists with broader extractor senses, and a
       // new rule on an old type would reject legitimate live flows (reject-never-flip
       // cuts both ways: only rule types you introduce or senses that are documented).
-      CONCERNS: { from: ["Problem", "Solution", "RootCause", "Claim", "Pattern"], to: ["Tool"] },
+      // `Component` joined the target set with OM-agent-anchors: an agent-named
+      // component ("React Router") is the same knowledge→named-unit anchor shape as
+      // a Tool — the knowledge is ABOUT it, not dependent on it.
+      CONCERNS: { from: ["Problem", "Solution", "RootCause", "Claim", "Pattern"], to: ["Tool", "Component"] },
       OPERATES_ON: { from: ["Algorithm"], to: ["DataStructure"] },
       INVOLVES: { from: ["Problem", "Solution"], to: ["DataStructure"] },
       // ── Taxonomy (Track 4 Stream C: MITRE CWE `ChildOf` → `Weakness —IS_A→ Weakness`) ──
@@ -15596,13 +15616,27 @@ var init_wire = __esm({
       /** Canonical human-readable description (no raw paths — daemon scrubs; server rechecks). */
       description: external_exports.string().min(1).max(4e3),
       attrs: external_exports.record(external_exports.string(), external_exports.unknown()).default({}),
+      /** One-way origin key of the SESSION that minted this node (`ws_…`, a
+       *  truncated digest — never the raw session id). Stamped onto the created
+       *  node as `authoringSession`, which is the independence unit for the
+       *  evidence channels: the session that authored a claim may not corroborate
+       *  or refute it, while a DIFFERENT session on the same checkout may (alyssa,
+       *  2026-07-31 — the workspace key made every witness on a single-checkout
+       *  deployment a self-corroboration). Optional + additive: absent leaves the
+       *  gate fail-open for that node, exactly today's behaviour. */
+      originSession: external_exports.string().min(3).max(64).optional(),
       extractionSource: external_exports.enum(INGEST_EXTRACTION_SOURCES),
       validationSource: external_exports.enum(VALIDATION_SOURCES).optional(),
       /** Org-membrane (M2): the daemon's anchor tag — it owns the lockfile, so it
        *  knows which packages are private. The door does NOT trust a `public` claim
        *  blindly (it re-confirms on the spine); absent ⇒ unknown ⇒ fail-closed to
        *  org-private. Accepted-but-ignored until ORG_MEMBRANE_ENABLED flips. */
-      anchorVisibility: external_exports.enum(["public", "private"]).optional()
+      anchorVisibility: external_exports.enum(["public", "private"]).optional(),
+      /** The spine-resolvable anchor id backing a `public` tag (OM-anchor-tag): a
+       *  Package purl or `languageCanonicalId`. The door validates THIS on the
+       *  public spine (falling back to `canonicalId` when absent — context stubs
+       *  are self-anchored). Never trusted without spine confirmation. */
+      anchor: external_exports.string().min(1).max(300).optional()
     });
     RouteContextCountWireSchema = external_exports.object({
       confirmed: external_exports.number().int().min(0),
@@ -15706,6 +15740,9 @@ function projectSymbolId(projectSalt, projectId, relPath, qname, kind) {
   const path2 = normalizeSymbolPath(relPath);
   return `sym_${createHmac("sha256", projectSalt).update(`${projectId}:${path2}:${qname}:${kind}`).digest("hex").slice(0, 24)}`;
 }
+function isMembraneSaltedId(id) {
+  return typeof id === "string" && /^(orgn_|teamn_|projn_)/.test(id);
+}
 var init_project_symbol = __esm({
   "../../packages/shared/src/project-symbol.ts"() {
     "use strict";
@@ -15862,7 +15899,7 @@ var init_canonicalize = __esm({
 
 // ../../packages/shared/src/nlp/triage-canon.ts
 function canonicalizeToken(t) {
-  const base = t.trim().toLowerCase().replace(/[@\s].*$/, "");
+  const base = t.trim().toLowerCase().replace(/(?!^)@.*$|\s.*$/, "");
   if (!base) return "";
   return resolveCanonicalId(base) ?? base;
 }
@@ -15955,6 +15992,7 @@ __export(src_exports, {
   isCodeLabel: () => isCodeLabel,
   isContextLabel: () => isContextLabel,
   isInferredSource: () => isInferredSource,
+  isMembraneSaltedId: () => isMembraneSaltedId,
   isProjectOnlyEdgeType: () => isProjectOnlyEdgeType,
   isProjectOnlyNodeLabel: () => isProjectOnlyNodeLabel,
   isQuarantinedExtractionSource: () => isQuarantinedExtractionSource,
@@ -15993,6 +16031,7 @@ __export(src_exports, {
   toCloudAttrs: () => toCloudAttrs,
   toolCanonicalId: () => toolCanonicalId,
   validateCastaliaPayload: () => validateCastaliaPayload,
+  versionlessPurl: () => versionlessPurl,
   vetSidecarSummaries: () => vetSidecarSummaries
 });
 var init_src = __esm({
@@ -16249,6 +16288,9 @@ var init_profile = __esm({
 });
 
 // ../../packages/local-shared/src/daemon-wire.ts
+function formatDisposition(d) {
+  return `${d.recorded} recorded \xB7 ${d.unmatched} unmatched (queued) \xB7 ${d.duplicate} dup \xB7 ${d.selfGated} self`;
+}
 var init_daemon_wire = __esm({
   "../../packages/local-shared/src/daemon-wire.ts"() {
     "use strict";
@@ -16662,6 +16704,13 @@ CREATE INDEX IF NOT EXISTS nodes_relpath ON nodes(json_extract(attrs_json, '$.re
           findByLabel: this.db.prepare(
             "SELECT * FROM nodes WHERE label = ? AND valid_to IS NULL"
           ),
+          // Scalar count twin of findByLabel — same live-row semantics, no row
+          // hydration. Exists because status surfaces (daemon `/` + `/health`) used
+          // findNodesByLabel(...).length, materializing every row's attrs JSON and
+          // embedding blob per request — seconds of synchronous loop-hold per poll.
+          countByLabel: this.db.prepare(
+            "SELECT COUNT(*) AS n FROM nodes WHERE label = ? AND valid_to IS NULL"
+          ),
           // ALL versions of a label — incl frozen/closed (valid_to set). Used by the
           // clean-reindex purge so a true wipe removes history too, not just live rows.
           findByLabelAll: this.db.prepare("SELECT * FROM nodes WHERE label = ?"),
@@ -16915,6 +16964,13 @@ CREATE INDEX IF NOT EXISTS nodes_relpath ON nodes(json_extract(attrs_json, '$.re
         const rows = this.stmts.findByLabel.all(label);
         return rows.map(rowToNode);
       }
+      /** Live-row count for a label — `findNodesByLabel(label).length` without the
+       *  per-row hydration (attrs JSON + embedding blob). Status surfaces poll this
+       *  per project per request; the materializing form held the daemon's event
+       *  loop for seconds at scale. */
+      countNodesByLabel(label) {
+        return Number(this.stmts.countByLabel.get(label).n);
+      }
       findAllVersionsByLabel(label) {
         const rows = this.stmts.findByLabelAll.all(label);
         return rows.map(rowToNode);
@@ -18139,6 +18195,9 @@ var init_problem_package_link = __esm({
 });
 
 // ../../packages/local-graph/src/design-problem.ts
+function isConstraintProblem(node2) {
+  return node2.attrs["kind"] === "constraint";
+}
 function isPlaceholderStatement(statement) {
   const s = statement.trim();
   if (s.length < 8) return true;
@@ -18316,6 +18375,55 @@ function mintDomainNode(store, name2, ts) {
   }
   return id;
 }
+function mintCitedPackageNode(store, ref, ts) {
+  const cleaned = ref.replace(/\s+/g, " ").trim();
+  const slash = /^([a-z0-9-]+)\/(.+)$/i.exec(cleaned);
+  const hasEco = slash != null && !cleaned.startsWith("@");
+  const name2 = (hasEco ? slash[2] : cleaned).trim();
+  const nameLc = name2.toLowerCase();
+  const existing = store.findNodesByLabel("Package").find((n) => String(n.attrs["name"] ?? "").toLowerCase() === nameLc);
+  if (existing) return existing.id;
+  let eco = hasEco ? slash[1].toLowerCase() : "";
+  if (!eco && cleaned.startsWith("@")) eco = "npm";
+  if (!eco) {
+    const counts = /* @__PURE__ */ new Map();
+    for (const p of store.findNodesByLabel("Package")) {
+      const e = String(p.attrs["ecosystem"] ?? "").toLowerCase();
+      if (e) counts.set(e, (counts.get(e) ?? 0) + 1);
+    }
+    eco = [...counts.entries()].sort((a, b) => b[1] - a[1])[0]?.[0] ?? "npm";
+  }
+  const purlName = eco === "npm" ? nameLc : name2;
+  const purl = `pkg:${eco}/${purlName}`;
+  if (!store.getNode(purl)) {
+    store.mergeNode(
+      buildNode(purl, "Package", name2, ts, {
+        purl,
+        name: name2,
+        ecosystem: eco,
+        resolved: false,
+        // agent-cited, no lockfile resolution
+        source: "convo",
+        provisional: true
+      })
+    );
+  }
+  return purl;
+}
+function mintComponentNode(store, name2, ts) {
+  const display = name2.replace(/\s+/g, " ").trim();
+  const slug2 = display.toLowerCase();
+  if (!store.getNode(slug2)) {
+    store.mergeNode(
+      buildNode(slug2, "Component", display, ts, {
+        name: display,
+        source: "convo",
+        provisional: true
+      })
+    );
+  }
+  return slug2;
+}
 function resolveFileNode(store, path2, workspaceId2) {
   const want = path2.trim().replace(/^\.?\//, "");
   for (const n of store.findNodesByLabel("File")) {
@@ -18339,7 +18447,7 @@ function tokenJaccard(a, b) {
   for (const t of sa) if (sb.has(t)) inter++;
   return inter / (sa.size + sb.size - inter);
 }
-function reinforceSameAnchorProblem(store, relPath, workspaceId2, statement, source, ts) {
+function reinforceSameAnchorProblem(store, relPath, workspaceId2, statement, source, ts, kind = "problem") {
   const stmt = statement.trim();
   if (!ANCHORABLE_CODE.test(relPath)) return null;
   const file2 = resolveFileNode(store, relPath, workspaceId2);
@@ -18350,6 +18458,8 @@ function reinforceSameAnchorProblem(store, relPath, workspaceId2, statement, sou
     const cand = store.getNode(e.from);
     if (!cand || cand.label !== "Problem" || cand.attrs["resolvedAt"]) continue;
     if (cand.id === selfId) continue;
+    const candKind = cand.attrs["kind"] === "constraint" ? "constraint" : "problem";
+    if (candKind !== (kind === "constraint" ? "constraint" : "problem")) continue;
     const score2 = tokenJaccard(stmt, cand.description);
     if (score2 >= SAME_ANCHOR_DEDUP_JACCARD && (!best || score2 > best.score)) best = { node: cand, score: score2 };
   }
@@ -18384,6 +18494,7 @@ function priorsForFile(store, relPath) {
   }
   if (!file2) return null;
   const openProblems = [];
+  const constraints = [];
   const seenProblem = /* @__PURE__ */ new Set();
   const related = /* @__PURE__ */ new Map();
   for (const e of store.inEdges(file2.id, ["ANCHORED_AT"])) {
@@ -18392,14 +18503,14 @@ function priorsForFile(store, relPath) {
     if (n.label === "Problem") {
       if (!n.attrs["resolvedAt"] && !seenProblem.has(n.id)) {
         seenProblem.add(n.id);
-        openProblems.push(n);
+        (isConstraintProblem(n) ? constraints : openProblems).push(n);
       }
     } else if (CITABLE_PRIOR_LABELS.has(n.label)) {
       related.set(n.id, n);
     }
   }
   const solutionsByProblem = /* @__PURE__ */ new Map();
-  for (const p of openProblems) {
+  for (const p of [...openProblems, ...constraints]) {
     for (const e of store.outEdges(p.id, ["SOLVED_BY", "CAUSED_BY", "INSTANCE_OF"])) {
       const n = store.getNode(e.to);
       if (n && CITABLE_PRIOR_LABELS.has(n.label)) related.set(n.id, n);
@@ -18410,9 +18521,11 @@ function priorsForFile(store, relPath) {
       }
     }
   }
-  if (openProblems.length === 0 && related.size === 0) return null;
-  openProblems.sort((a, b) => (b.lastUpdatedAt ?? 0) - (a.lastUpdatedAt ?? 0));
-  return { file: file2, openProblems, related: [...related.values()], solutionsByProblem };
+  if (openProblems.length === 0 && constraints.length === 0 && related.size === 0) return null;
+  const recentFirst = (a, b) => (b.lastUpdatedAt ?? 0) - (a.lastUpdatedAt ?? 0);
+  openProblems.sort(recentFirst);
+  constraints.sort(recentFirst);
+  return { file: file2, openProblems, constraints, related: [...related.values()], solutionsByProblem };
 }
 function anchorProblemToDiff(store, problemId, changedPaths, workspaceId2, t, opts = {}) {
   return anchorNodeToDiff(store, problemId, "Problem", changedPaths, workspaceId2, t, opts);
@@ -18483,7 +18596,8 @@ function resolveDesignProblemById(store, id, fixNote, t) {
 }
 function closeDesignProblem(store, problemId, fixNote, t) {
   const p = store.getNode(problemId);
-  if (!p || p.label !== "Problem" || p.attrs["resolvedAt"]) return false;
+  if (!p || p.label !== "Problem") return false;
+  if (p.attrs["resolvedAs"]) return false;
   if (fixNote?.trim() && store.outEdges(problemId, ["SOLVED_BY"]).length === 0) {
     const solId = `dfix_${digest({ problemId, fix: fixNote })}`.slice(0, 56);
     store.mergeNode(
@@ -18491,6 +18605,7 @@ function closeDesignProblem(store, problemId, fixNote, t) {
     );
     mergeEdge(store, problemId, solId, "SOLVED_BY", t);
   }
+  if (p.attrs["resolvedAt"]) return false;
   store.updateNode(problemId, {
     attrs: { ...p.attrs, provisional: false, resolvedAt: t },
     lastUpdatedAt: t
@@ -18531,6 +18646,7 @@ function resolveDesignProblems(store, t) {
   for (const p of store.findNodesByLabel("Problem")) {
     if (!p.id.startsWith("dprob_")) continue;
     if (p.attrs["resolvedAt"]) continue;
+    if (isConstraintProblem(p)) continue;
     let symName = "";
     let symRelPath;
     let edited = false;
@@ -18548,7 +18664,7 @@ function resolveDesignProblems(store, t) {
     if (store.outEdges(p.id, ["SOLVED_BY"]).length === 0) {
       const solId = `dfix_${digest({ problemId: p.id, edit: t })}`.slice(0, 56);
       store.mergeNode(
-        buildNode(solId, "Solution", `addressed by an edit to ${symName}`, t, {
+        buildNode(solId, "Solution", `${AUTO_MINT_PREFIX}${symName}`, t, {
           source: "convo",
           provisional: false,
           // AC-resolution-attrs: the resolving symbol/file as STRUCTURED data, not
@@ -18569,7 +18685,7 @@ function resolveDesignProblems(store, t) {
   }
   return resolved;
 }
-var DESIGN_PROMOTE_AT, DEDUP_STOPWORDS, SAME_ANCHOR_DEDUP_JACCARD, CITABLE_PRIOR_LABELS, ANCHORABLE_CODE, MAX_ANCHOR_FILES;
+var DESIGN_PROMOTE_AT, DEDUP_STOPWORDS, SAME_ANCHOR_DEDUP_JACCARD, CITABLE_PRIOR_LABELS, ANCHORABLE_CODE, MAX_ANCHOR_FILES, AUTO_MINT_PREFIX;
 var init_design_problem = __esm({
   "../../packages/local-graph/src/design-problem.ts"() {
     "use strict";
@@ -18611,6 +18727,7 @@ var init_design_problem = __esm({
     ]);
     ANCHORABLE_CODE = /\.(ts|tsx|js|mjs|cjs|py|go|rs|java|rb|c|cpp|h)$/;
     MAX_ANCHOR_FILES = 5;
+    AUTO_MINT_PREFIX = "addressed by an edit to ";
   }
 });
 
@@ -18675,13 +18792,11 @@ function backfillLegacyAnchors(store, ts) {
   }
   return report;
 }
-var AUTO_MINT_PREFIX;
 var init_anchor_backfill = __esm({
   "../../packages/local-graph/src/anchor-backfill.ts"() {
     "use strict";
     init_justification();
     init_design_problem();
-    AUTO_MINT_PREFIX = "addressed by an edit to ";
   }
 });
 
@@ -20442,6 +20557,7 @@ function mergeDuplicateProblems(store, opts) {
         if (consumed.has(b.id)) continue;
         const tb = tokens.get(b.id);
         if (Math.min(ta.size, tb.size) < minTokens) continue;
+        if (isConstraintProblem(a) !== isConstraintProblem(b)) continue;
         if (overlap(ta, tb) >= minOverlap) {
           cluster.push(b);
           consumed.add(b.id);
@@ -20498,6 +20614,7 @@ var init_problem_dedup = __esm({
     "use strict";
     init_src();
     init_src();
+    init_design_problem();
     REDIRECT_EDGES = [
       "CAUSED_BY",
       "SOLVED_BY",
@@ -20704,6 +20821,7 @@ var init_principle_sync = __esm({
 // ../../packages/local-graph/src/index.ts
 var src_exports2 = {};
 __export(src_exports2, {
+  AUTO_MINT_PREFIX: () => AUTO_MINT_PREFIX,
   CAUSAL_FAMILY: () => CAUSAL_FAMILY,
   CITABLE_PRIOR_LABELS: () => CITABLE_PRIOR_LABELS,
   CODE_REACH_EDGES: () => CODE_REACH_EDGES,
@@ -20755,6 +20873,7 @@ __export(src_exports2, {
   induceAbstractions: () => induceAbstractions,
   induceTriage: () => induceTriage,
   ingestDesignProblem: () => ingestDesignProblem,
+  isConstraintProblem: () => isConstraintProblem,
   isPlaceholderStatement: () => isPlaceholderStatement,
   linkProblemToLanguages: () => linkProblemToLanguages,
   linkProblemToPackages: () => linkProblemToPackages,
@@ -20766,6 +20885,8 @@ __export(src_exports2, {
   matchSymbolsInText: () => matchSymbolsInText,
   mergeCloudCounts: () => mergeCloudCounts,
   mergeDuplicateProblems: () => mergeDuplicateProblems,
+  mintCitedPackageNode: () => mintCitedPackageNode,
+  mintComponentNode: () => mintComponentNode,
   mintDomainNode: () => mintDomainNode,
   mintPatternNode: () => mintPatternNode,
   openGraphStore: () => openGraphStore,
@@ -20838,12 +20959,14 @@ function isPassiveInjectable(node2) {
 }
 function buildSnapshot(opts) {
   const problems = opts.store.findNodesByLabel("Problem").filter((p) => p.attrs["mergedInto"] === void 0);
-  const allProblems = problems.filter((p) => p.attrs["resolvedAt"] == null);
+  const stillOpen = problems.filter((p) => p.attrs["resolvedAt"] == null);
+  const allProblems = stillOpen.filter((p) => !isConstraintProblem(p));
   allProblems.sort((a, b) => b.lastUpdatedAt - a.lastUpdatedAt);
   const recent = allProblems.slice(0, 8).map((p) => ({
     node: p,
     anchors: opts.store.outEdges(p.id, ["MANIFESTED_IN", "EVIDENCED_BY"])
   }));
+  const recentConstraints = stillOpen.filter((p) => isConstraintProblem(p)).sort((a, b) => b.lastUpdatedAt - a.lastUpdatedAt).slice(0, 3);
   const recentResolved = problems.filter((p) => p.attrs["resolvedAt"] != null && p.attrs["resolvedAs"] == null).sort((a, b) => Number(b.attrs["resolvedAt"] ?? 0) - Number(a.attrs["resolvedAt"] ?? 0)).slice(0, 4).map((p) => {
     const solEdge = opts.store.outEdges(p.id, ["SOLVED_BY"])[0];
     const solution = solEdge ? opts.store.getNode(solEdge.to) ?? void 0 : void 0;
@@ -20871,10 +20994,13 @@ function buildSnapshot(opts) {
     episodeId: episodeId2,
     problems: problems2
   }));
-  const needsRevisit = listNeedsRevisit(
-    opts.store,
-    (opts.now ?? /* @__PURE__ */ new Date()).getTime()
-  ).slice(0, 10);
+  const revisitSeen = /* @__PURE__ */ new Set();
+  const needsRevisit = listNeedsRevisit(opts.store, (opts.now ?? /* @__PURE__ */ new Date()).getTime()).filter((r) => {
+    const key = `${r.label}:${r.description.trim().toLowerCase()}`;
+    if (revisitSeen.has(key)) return false;
+    revisitSeen.add(key);
+    return true;
+  }).slice(0, 5);
   const norm = (x) => x.toLowerCase().replace(/[^a-z0-9]+/g, "");
   const pkgBase = (x) => {
     const at = x.lastIndexOf("@");
@@ -20910,6 +21036,7 @@ function buildSnapshot(opts) {
     profileContext,
     recentProblems: recent,
     recentResolved,
+    recentConstraints,
     ...causalNudge ? { causalNudge } : {},
     ...domainNudge ? { domainNudge } : {},
     motifs,
@@ -20962,6 +21089,7 @@ function sliceForFile(store, relPath) {
   const fp = priorsForFile(store, relPath);
   const priors = fp ? {
     openProblems: fp.openProblems.slice(0, 3).map((p) => ({ id: p.id, description: p.description })),
+    constraints: fp.constraints.slice(0, 2).map((c) => ({ id: c.id, description: c.description })),
     related: fp.related.slice(0, 4).map((n) => ({ id: n.id, label: n.label, description: n.description })),
     solutionsByProblem: Object.fromEntries(
       fp.openProblems.slice(0, 3).map((p) => [
@@ -21056,7 +21184,7 @@ function renderSnapshot(s) {
   }
   const tagOf = (n) => s.edgeElicitation ? ` \`[${priorHandle(n)}]\`` : "";
   lines.push("### Recently observed problems in this workspace");
-  if (s.recentProblems.length === 0 && s.recentResolved.length === 0) {
+  if (s.recentProblems.length === 0 && s.recentResolved.length === 0 && s.recentConstraints.length === 0) {
     lines.push("- _none yet \u2014 errata is still building its model_");
   } else {
     if (s.recentProblems.length > 0) {
@@ -21078,6 +21206,12 @@ function renderSnapshot(s) {
         );
       }
     }
+    if (s.recentConstraints.length > 0) {
+      lines.push("_Design tensions \u2014 constraints this work is shaped around, not defects to fix:_");
+      for (const c of s.recentConstraints) {
+        lines.push(`- \u2696 **${c.description}** \u2014 \`${c.id}\`${tagOf(c)}`);
+      }
+    }
     if (s.recentResolved.length > 0) {
       lines.push("_Recently resolved \u2014 solved here; jumping-off points, not live defects:_");
       for (const r of s.recentResolved) {
@@ -21145,6 +21279,14 @@ function renderSnapshot(s) {
         }
       }
     }
+    if (w.priors?.constraints.length) {
+      lines.push(
+        "- **Design tensions here** \u2014 standing constraints this code is shaped around. They are NOT open work and a change does not resolve one, so there is no `(fix:)` token; cite one you worked within with `([id])`:"
+      );
+      for (const c of w.priors.constraints) {
+        lines.push(`  - ${c.description} \u2192 \`([${c.id}])\``);
+      }
+    }
     if (w.priors?.related.length) {
       lines.push("- **Related priors** (cite with `([id])` where you lean on one):");
       for (const n of w.priors.related) {
@@ -21182,6 +21324,9 @@ function dropLowestUnit(s) {
       case "pendingEnrichment":
         if (s.pendingEnrichment.length) return s.pendingEnrichment.pop(), true;
         break;
+      case "recentConstraints":
+        if (s.recentConstraints.length) return s.recentConstraints.pop(), true;
+        break;
       case "recentProblems":
         if (s.recentProblems.length) return s.recentProblems.pop(), true;
         break;
@@ -21253,8 +21398,19 @@ ${RECALL_FIRST_BODY}`;
       // budget they drop before anything open/actionable.
       "recentResolved",
       "pendingEnrichment",
-      "recentProblems",
-      "needsRevisit"
+      // A standing design tension outranks an enrichment nudge (it prevents a wrong
+      // decision) but yields to a live defect (which is actionable now).
+      "recentConstraints",
+      // `needsRevisit` used to sit LAST — the most protected band in the block. That
+      // inverted the block's whole purpose once the link-elicitation instruction (4,942
+      // chars, 55% of the budget, non-evictable) started competing for room: the
+      // budgeter drained all 8 Problems and all 4 Solutions and kept nine stale
+      // auto-close notices, so the agent was handed an instruction to cite `[handles]`
+      // with zero problem handles left to cite. A revisit flag is a maintenance nudge
+      // about something ALREADY closed; a live prior is the substrate every link verb
+      // needs. Problems outrank it now.
+      "needsRevisit",
+      "recentProblems"
     ];
     DEFAULT_AGENT_CONTEXT_BUDGET = 9e3;
   }
@@ -21487,6 +21643,7 @@ var init_oauth = __esm({
 
 // ../../packages/cloud-client/src/client.ts
 import { randomUUID } from "node:crypto";
+import { gzipSync } from "node:zlib";
 function wirePerContext(value) {
   if (!value || typeof value !== "object" || Array.isArray(value)) return null;
   const out2 = {};
@@ -21530,7 +21687,12 @@ function toWirePayload(batch, runId) {
     // attrs travel; node-level bookkeeping (embedding, momentum counters,
     // bi-temporal fields) is local-stratum and never crosses.
     attrs: n.attrs ?? {},
-    extractionSource: n.extractionSource
+    extractionSource: n.extractionSource,
+    // Org-membrane anchor tag (OM-anchor-tag): the batch builders set these
+    // on wire-bound projections only; the door re-validates the claim on the
+    // public spine, so lifting them is routing input, not a grant.
+    ...n.anchorVisibility ? { anchorVisibility: n.anchorVisibility } : {},
+    ...n.anchor ? { anchor: n.anchor } : {}
   }));
   const edges = batch.edges.filter((e) => !droppedNodeIds.has(e.from) && !droppedNodeIds.has(e.to)).map((e) => {
     const perContext = wirePerContext(e.attrs?.["perContext"]);
@@ -21679,6 +21841,11 @@ function normalizeSolution(input) {
     validationSource: input.validationSource
   };
 }
+function isIntermediaryRejection(err2) {
+  if (!(err2 instanceof CloudError)) return false;
+  if (err2.status < 400 || err2.status >= 500) return false;
+  return /<!DOCTYPE html|<html/i.test(err2.message);
+}
 function chunkArray(items, size) {
   if (items.length <= size) return items.length ? [[...items]] : [];
   const out2 = [];
@@ -21696,14 +21863,15 @@ function provenanceHeaders(provenance) {
     ...provenance.agentModel ? { "x-inerrata-agent-model": provenance.agentModel } : {}
   };
 }
-var asWireCount, INGEST_NODE_CHUNK, CloudClient, CloudError;
+var asWireCount, INGEST_NODE_CHUNK, COMPRESS_MIN_BYTES, CloudClient, CloudError;
 var init_client = __esm({
   "../../packages/cloud-client/src/client.ts"() {
     "use strict";
     init_oauth();
     init_src();
     asWireCount = (n) => typeof n === "number" && Number.isFinite(n) && n >= 0 ? Math.floor(n) : null;
-    INGEST_NODE_CHUNK = 25;
+    INGEST_NODE_CHUNK = 8;
+    COMPRESS_MIN_BYTES = 4096;
     CloudClient = class {
       baseUrl;
       apiKey;
@@ -21718,6 +21886,8 @@ var init_client = __esm({
       daemonVersion;
       daemonChannel;
       provenance;
+      /** Cleared for the process once a server proves it cannot inflate (see `json`). */
+      compressRequests;
       constructor(opts) {
         this.baseUrl = opts.baseUrl.replace(/\/+$/, "");
         if (opts.apiKey !== void 0) this.apiKey = opts.apiKey;
@@ -21731,6 +21901,7 @@ var init_client = __esm({
         this.timeoutMs = opts.timeoutMs ?? 15e3;
         this.daemonVersion = opts.daemonVersion;
         this.daemonChannel = opts.daemonChannel;
+        this.compressRequests = opts.compressRequests ?? true;
         this.provenance = opts.provenance ?? {
           clientProduct: "inerrata_cloud_client",
           clientKind: "sdk",
@@ -21851,20 +22022,48 @@ var init_client = __esm({
        *  the per-decision response into flush accounting.
        *
        *  The v1 door caps a payload at `MAX_NODES_PER_PAYLOAD` / `MAX_EDGES_PER_PAYLOAD`
-       *  (413 over). A batch above the cap is split and drained across calls under ONE
-       *  runId: every NODE chunk first (edges empty), then EDGE chunks (nodes empty).
+       *  (413 over). A batch above the cap is split and drained across calls, every
+       *  NODE chunk first (edges empty), then EDGE chunks (nodes empty). Each chunk
+       *  gets its OWN runId: the door's durable idempotency claim is keyed on
+       *  (agent, org, runId) with the payload digest, so reusing one runId across
+       *  different chunk payloads 409s "runId was already used with a different
+       *  payload" on the second chunk — exactly how the first real >25-node drain
+       *  died (2026-07-22). The runId never grouped anything server-side; it exists
+       *  for duplicate-POST protection, which is per-request by nature.
        *  Recognition resolves an edge's endpoints against nodes already ingested this
        *  drain (endpoint-label validation is deferred to the service when an endpoint
        *  isn't in-payload), so the split never orphans an edge. Sub-results concat into
        *  one. (fix: an un-chunked >200-node backlog 413'd forever and never drained.) */
-      async ingest(batch) {
+      async ingest(batch, opts = {}) {
         const runId = randomUUID();
+        const startedAt = Date.now();
+        const totalChunks = Math.max(1, Math.ceil(batch.nodes.length / INGEST_NODE_CHUNK)) + Math.ceil(Math.max(0, batch.edges.length - MAX_EDGES_PER_PAYLOAD) / MAX_EDGES_PER_PAYLOAD);
+        let chunkIndex = 0;
+        const blocked = [];
+        const emit = (nodeIds, accepted) => {
+          chunkIndex++;
+          const refused = blocked.splice(0, blocked.length);
+          const refusedSet = new Set(refused);
+          opts.onChunk?.({
+            chunkIndex,
+            totalChunks,
+            // Watermark only what actually landed — a blocked node never reached the
+            // door, and marking it contributed would lose it permanently and silently.
+            nodeIds: refusedSet.size ? nodeIds.filter((id) => !refusedSet.has(id)) : nodeIds,
+            accepted,
+            elapsedMs: Date.now() - startedAt,
+            ...refused.length ? { blockedNodeIds: refused } : {}
+          });
+        };
         if (batch.nodes.length <= INGEST_NODE_CHUNK && batch.edges.length <= MAX_EDGES_PER_PAYLOAD) {
-          const result = await this.ingestWire(toWirePayload(batch, runId));
-          return { ...summarizeIngestResult(result), result };
+          const result = await this.ingestWithSplit(batch, batch.nodes, batch.edges, blocked);
+          const summary = summarizeIngestResult(result);
+          emit(batch.nodes.map((n) => n.id), summary.accepted);
+          return { ...summary, result };
         }
         const merged = { runId, nodes: [], edges: [] };
         let pendingEdges = [...batch.edges];
+        const echoedCloudId = /* @__PURE__ */ new Map();
         for (const nodeChunk of chunkArray(batch.nodes, INGEST_NODE_CHUNK)) {
           const ids = new Set(nodeChunk.map((n) => n.id));
           const inChunk = pendingEdges.filter((e) => ids.has(e.from) && ids.has(e.to)).slice(0, MAX_EDGES_PER_PAYLOAD);
@@ -21872,15 +22071,27 @@ var init_client = __esm({
             const shipped = new Set(inChunk);
             pendingEdges = pendingEdges.filter((e) => !shipped.has(e));
           }
-          const r = await this.ingestWire(toWirePayload({ ...batch, nodes: nodeChunk, edges: inChunk }, runId));
+          const r = await this.ingestWithSplit(batch, nodeChunk, inChunk, blocked);
+          emit(nodeChunk.map((n) => n.id), summarizeIngestResult(r).accepted);
           merged.nodes.push(...r.nodes);
           merged.edges.push(...r.edges);
+          for (const rn of r.nodes) {
+            if (rn.nodeId && rn.nodeId !== rn.canonicalId && isMembraneSaltedId(rn.nodeId)) {
+              echoedCloudId.set(rn.canonicalId, rn.nodeId);
+            }
+          }
           if (r.patternReconciliation) {
             merged.patternReconciliation = { ...merged.patternReconciliation, ...r.patternReconciliation };
           }
         }
         for (const edgeChunk of chunkArray(pendingEdges, MAX_EDGES_PER_PAYLOAD)) {
-          const r = await this.ingestWire(toWirePayload({ ...batch, nodes: [], edges: edgeChunk }, runId));
+          const rewritten = edgeChunk.map((e) => ({
+            ...e,
+            from: echoedCloudId.get(e.from) ?? e.from,
+            to: echoedCloudId.get(e.to) ?? e.to
+          }));
+          const r = await this.ingestWire(toWirePayload({ ...batch, nodes: [], edges: rewritten }, randomUUID()));
+          emit([], summarizeIngestResult(r).accepted);
           merged.edges.push(...r.edges);
         }
         return { ...summarizeIngestResult(merged), result: merged };
@@ -21889,6 +22100,43 @@ var init_client = __esm({
       async ingestWire(payload) {
         return this.json("POST", "/v2/ingest", payload);
       }
+      /**
+       * Ship a node chunk, and on an EDGE TIMEOUT split it and retry the halves.
+       *
+       * `INGEST_NODE_CHUNK` is a guess about how long the server takes per node, and
+       * that number moves with the size of the graph — so any fixed value eventually
+       * drifts into the proxy's timeout and the lane dies silently (the 2026-07-31
+       * three-day instances-lane outage). This makes the client self-correcting
+       * instead: a chunk that times out is halved and retried, down to a single node,
+       * so the drain degrades to slower rather than to stopped.
+       *
+       * ONLY on timeout-shaped failures (502/504/408, or a transport abort). A 4xx is
+       * a verdict about the payload — splitting it would just re-send a rejected batch
+       * N more times — and a 409/413 has its own handling upstream.
+       */
+      async ingestWithSplit(batch, nodes, edges, blocked) {
+        try {
+          return await this.ingestWire(toWirePayload({ ...batch, nodes, edges }, randomUUID()));
+        } catch (err2) {
+          const status = err2 instanceof CloudError ? err2.status : 0;
+          const timedOut = status === 502 || status === 504 || status === 408 || status === 0;
+          const refusedAtEdge = blocked !== void 0 && isIntermediaryRejection(err2);
+          if (refusedAtEdge && nodes.length === 1 && nodes[0]) {
+            blocked.push(nodes[0].id);
+            return { runId: randomUUID(), nodes: [], edges: [] };
+          }
+          if (!timedOut && !refusedAtEdge || nodes.length <= 1) throw err2;
+          const mid = Math.ceil(nodes.length / 2);
+          const a = await this.ingestWithSplit(batch, nodes.slice(0, mid), edges, blocked);
+          const b = await this.ingestWithSplit(batch, nodes.slice(mid), [], blocked);
+          return {
+            runId: a.runId,
+            nodes: [...a.nodes, ...b.nodes],
+            edges: [...a.edges, ...b.edges],
+            ...a.patternReconciliation || b.patternReconciliation ? { patternReconciliation: { ...a.patternReconciliation, ...b.patternReconciliation } } : {}
+          };
+        }
+      }
       /**
        * SDK v2 graph-native write. It remembers a typed diagnostic spine through
        * `/v2/ingest` instead of the legacy forum question/answer routes:
@@ -22090,10 +22338,13 @@ var init_client = __esm({
       }
       /** Pull cloud-induced skills + the session-bootstrap prime payload. `seed` is the
        *  canonical ids of the agent's recent problems — the cloud ranks the skills whose
-       *  motifs those problems match first (the rest are baseline). */
-      async getSkills(context = "daemon skill sync", seed) {
+       *  motifs those problems match first (the rest are baseline). `techSeed`
+       *  (CL-tech-bridge) is the workspace's spine tech ids (`lang:<slug>`, purls) —
+       *  a secondary relevance signal that also covers the zero-problem cold start. */
+      async getSkills(context = "daemon skill sync", seed, techSeed) {
         const qs = new URLSearchParams({ context });
         if (seed && seed.length > 0) qs.set("seed", seed.join(","));
+        if (techSeed && techSeed.length > 0) qs.set("techSeed", techSeed.join(","));
         if (this.daemonVersion) qs.set("daemonVersion", this.daemonVersion);
         if (this.daemonChannel) qs.set("daemonChannel", this.daemonChannel);
         return this.json("GET", `/v2/skills?${qs.toString()}`);
@@ -22179,15 +22430,43 @@ var init_client = __esm({
           const token = opts?.bearerToken ?? await this.authToken();
           if (token) headers["authorization"] = `Bearer ${token}`;
         }
+        let payload;
+        if (body2 !== void 0) {
+          const raw2 = JSON.stringify(body2);
+          if (this.compressRequests && Buffer.byteLength(raw2) >= COMPRESS_MIN_BYTES) {
+            payload = gzipSync(Buffer.from(raw2));
+            headers["content-encoding"] = "gzip";
+          } else {
+            payload = raw2;
+          }
+        }
         const ac = new AbortController();
         const tid = setTimeout(() => ac.abort(), this.timeoutMs);
         try {
           const res = await this.fetchFn(url2, {
             method,
             headers,
-            body: body2 === void 0 ? void 0 : JSON.stringify(body2),
+            body: payload,
             signal: ac.signal
           });
+          if (res.status === 400 && headers["content-encoding"] === "gzip") {
+            delete headers["content-encoding"];
+            const retry = await this.fetchFn(url2, {
+              method,
+              headers,
+              body: JSON.stringify(body2),
+              signal: ac.signal
+            });
+            if (!retry.ok) {
+              const text = await retry.text();
+              throw new CloudError(
+                `${method} ${path2} failed: HTTP ${retry.status} ${text.slice(0, 200)}`,
+                retry.status
+              );
+            }
+            this.compressRequests = false;
+            return await retry.json();
+          }
           if (!res.ok) {
             const text = await res.text();
             throw new CloudError(
@@ -25101,15 +25380,22 @@ function triageBullet(ref) {
 }
 function linkBullet(ref) {
   return [
-    "  \u2022 a problem you flagged resembles prior knowledge \u2014 LINK it to the canonical priors, not just one:",
+    // Lead-in states the trigger without the old "resembles prior knowledge"
+    // conditional (which gated the whole bullet on recognising a prior). Kept to ONE
+    // line on purpose: Cycle 13 measured this instruction at 55% of the 9,000-char
+    // passive-context budget, and every char here is paid for by evicting a prior the
+    // agent could have cited — so unproven framing is a net loss, however good it reads.
+    "  \u2022 you flagged a problem \u2014 LINK it, ESPECIALLY when the finding feels novel to here:",
     `    \xB7 (instance:[${ref}],[another-prior],\u2026) \u2014 the priors this problem is an instance of.`,
     "      Aim for ~3 DIFFERENT relevant priors; one link is weak, three triangulate it.",
     `    \xB7 ${TAG_EXAMPLE.pattern()} \u2014 name the general shape it instantiates (e.g. (pattern: unbounded`,
     "      queue growth under backpressure)) \u2014 this works with NO code anchor, and two agents naming",
     "      the same pattern converge on one node. Cite a shown Pattern by handle: (pattern:[handle]).",
-    `    \xB7 ${TAG_EXAMPLE.domain()} \u2014 name the ABSTRACT AREA it's about (e.g. (domain: Observability),`,
-    "      (domain: Community Detection)). An abstract problem with no code anchor NEEDS this or it's",
-    "      an invisible island: the Domain is the topic other problems in the area cluster on. Title Case.",
+    `    \xB7 ${TAG_EXAMPLE.package()} \u2014 the PUBLIC PACKAGE the problem is about, even when this`,
+    "      workspace doesn't depend on it (e.g. (package: chokidar), (package: pypi/requests)) \u2014 a",
+    "      public-registry anchor lets the knowledge cross to the collective; internal names stay private.",
+    `    \xB7 ${TAG_EXAMPLE.component()} \u2014 the framework/product-level UNIT it concerns when it's not a`,
+    "      package or a language (e.g. (component: React Router), (component: V8 Isolate)).",
     `    \xB7 (aids:[${ref}],\u2026) \u2014 your FIX could also help these other, even unrelated, problems.`,
     "      A hypothesis, not a claim \u2014 it's recorded as may-resolve and checked by whoever tries it.",
     `    \xB7 when your fix relates to a PRIOR solution you were primed with (a problem's`,
@@ -25128,9 +25414,9 @@ function attemptBullet() {
   ].join("\n");
 }
 function buildAgentInstruction(opts = {}) {
-  const signals = opts.signals ?? ["prior", "problem", "fix", "constraint", "triage", "attempt", "link"];
+  const signals = opts.signals ?? ["prior", "problem", "domain", "fix", "constraint", "triage", "attempt", "link"];
   const ref = opts.referent ?? "its-handle";
-  const token = (s) => s === "problem" ? TAG_EXAMPLE.problem() : s === "constraint" ? TAG_EXAMPLE.constraint() : s === "attempt" ? TAG_EXAMPLE.tried() : s === "link" ? TAG_EXAMPLE.pattern() : TAG_EXAMPLE[s](ref);
+  const token = (s) => s === "problem" ? TAG_EXAMPLE.problem() : s === "constraint" ? TAG_EXAMPLE.constraint() : s === "attempt" ? TAG_EXAMPLE.tried() : s === "domain" ? TAG_EXAMPLE.domain() : s === "link" ? TAG_EXAMPLE.pattern() : TAG_EXAMPLE[s](ref);
   const head2 = `We tag the priors we show you with a short handle like [${opts.handleExample ?? "chokidar-glob"}]. This is a capture protocol, not optional notes: what you DON'T tag is silently lost \u2014 the tag is the ONLY thing recorded. Whenever one of these is true, wrap it inline in your prose (no fences, no extra calls). Tag every one you state; we filter downstream, so don't self-censor or batch:`;
   const tail = "Mid-turn text (between tool calls) can be dropped by the harness \u2014 if a tag above appeared only mid-turn, RESTATE it in your final message of the turn; the final message always survives.";
   return [
@@ -25181,6 +25467,12 @@ var init_agent_signals = __esm({
       // DOMAIN — the abstract area a problem is about; the concept layer an
       // anchor-less problem clusters on. Mints/resolves a Domain by name.
       domain: () => `(domain: The Area)`,
+      // PACKAGE/COMPONENT — agent-named public anchors (OM-agent-anchors): the
+      // package a problem is ABOUT (even when not a dependency) and the
+      // framework/product-level unit it concerns. Public spine anchors → the
+      // knowledge can cross to the collective.
+      package: () => `(package: the-package-name)`,
+      component: () => `(component: The Component)`,
       aids: (ref) => `(aids:[${ref}])`
     };
     GLOSS = {
@@ -25190,6 +25482,22 @@ var init_agent_signals = __esm({
       constraint: "you made a design decision because requirements conflict or something's constrained \u2014 tag the tension, ESPECIALLY when your fix makes it 'only look' contradictory (a clean solution still hides a real trap the next agent needs)",
       triage: "you diagnosed a bug \u2014 SPLIT the symptom (what breaks \u2192 [!\u2026]) from the cause (the mechanism you'd change \u2192 (cause:\u2026)); if the line says WHY it breaks, it's a cause, not a problem",
       attempt: "you're attempting an approach, or an attempt didn't pan out \u2014 (tried: \u2026) / (failed: \u2026); a failed attempt rules out a path for the next agent",
+      // DOMAIN — promoted to a FIRST-CLASS signal (was nested inside linkBullet, whose
+      // lead-in gates on "a problem you flagged resembles prior knowledge"). Naming the
+      // area a problem is about is unconditional and has nothing to do with recognizing
+      // a prior, so that gate silently suppressed it: field census 2026-07-30 across 387
+      // sessions — `domain` in 10/194 tag-emitting sessions (5%) against `problem` in
+      // 124/194 (64%), and bimodal (the 10 that do emit average ~7 each), i.e. the
+      // syntax is fine and the trigger was never reached.
+      //
+      // The gloss carries the anti-performance framing Cycles 9–11 proved is the actual
+      // lever (the tag alone scored 0 = control; naming the bias and inverting it is
+      // what lifted capture). The bias here is the mirror of the constraint one: an
+      // agent that has just named a problem *precisely* feels the precision IS the
+      // contribution, so stating the general area reads as vague restatement — exactly
+      // when it matters most, because precise wording is what makes a problem
+      // unfindable to anyone who doesn't already share it.
+      domain: "you flagged a problem that isn't about one specific file \u2014 name the AREA it's about. The sharper your wording, the LESS anyone else will search for it; an abstract problem with no area is an invisible island. Title Case",
       link: "the problem you flagged is an instance of priors/abstractions you can name \u2014 (instance:[h1],[h2],\u2026) / (pattern: \u2026) / (aids:[h]); rendered whole via linkBullet"
     };
   }
@@ -25792,6 +26100,33 @@ function federationHint(status) {
       return void 0;
   }
 }
+function hasCloudNodeShape(id) {
+  return CANONICAL_KNOWLEDGE_ID.test(id) || UUID_ID.test(id) || id.startsWith("pkg:");
+}
+async function collectiveDrilldown(cloud, seedId, limit) {
+  try {
+    const res = await cloud.search({ stack: [], domains: [], kinds: [], seed: [seedId], limit });
+    if (res.nodes.length === 0) return null;
+    return {
+      seed: seedId,
+      nodes: res.nodes.map((n) => ({
+        id: n.id,
+        label: n.label,
+        name: n.description,
+        score: Number((n.extractionConfidence ?? 0.5).toFixed(4)),
+        hops: 1,
+        provenance: "collective"
+      })),
+      edges: res.edges.map((e) => ({ from: e.from, to: e.to, type: e.type }))
+    };
+  } catch (err2) {
+    console.error(
+      "[errata] collectiveDrilldown: cloud fallback failed \u2014",
+      err2 instanceof Error ? err2.message : err2
+    );
+    return null;
+  }
+}
 function formatDualNodes(merged) {
   return merged.nodes.map((n) => ({
     id: n.id,
@@ -25811,7 +26146,7 @@ function formatDualNodes(merged) {
     } : {}
   }));
 }
-var BRIDGE_LABELS;
+var BRIDGE_LABELS, CANONICAL_KNOWLEDGE_ID, UUID_ID;
 var init_dual_augment = __esm({
   "src/dual-augment.ts"() {
     "use strict";
@@ -25819,6 +26154,8 @@ var init_dual_augment = __esm({
     init_generalize_graph();
     init_dual_burst();
     BRIDGE_LABELS = new Set(SEMANTIC_NODE_LABELS);
+    CANONICAL_KNOWLEDGE_ID = /^[a-z][a-z0-9]*_[0-9a-f]{8,}$/;
+    UUID_ID = /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i;
   }
 });
 
@@ -26313,6 +26650,7 @@ function mergeProblemsByEmbedding(store, opts) {
         if (b.id === a.id || consumed.has(b.id)) continue;
         if (b.embedding.length !== a.embedding.length) continue;
         if ((a.attrs["embeddingVersion"] ?? "") !== (b.attrs["embeddingVersion"] ?? "")) continue;
+        if (isConstraintProblem(a) !== isConstraintProblem(b)) continue;
         if (cosine(a.embedding, b.embedding) >= minCosine) {
           cluster.push(b);
           consumed.add(b.id);
@@ -36734,6 +37072,12 @@ function cosine3(a, b) {
   for (let i2 = 0; i2 < a.length; i2++) dot += a[i2] * b[i2];
   return dot;
 }
+async function collectiveSeedFallback(args2, ctx, defaultLimit) {
+  const seedId = typeof args2["nodeId"] === "string" ? args2["nodeId"] : null;
+  if (!seedId || !ctx.cloud || !hasCloudNodeShape(seedId)) return null;
+  const limit = Math.max(1, Math.min(100, Number(args2["limit"] ?? defaultLimit)));
+  return collectiveDrilldown(ctx.cloud, seedId, limit);
+}
 function resolveSymbol2(store, args2) {
   const id = args2["nodeId"];
   if (typeof id === "string" && store.getNode(id)) return id;
@@ -37084,7 +37428,7 @@ var init_mcp = __esm({
       },
       {
         name: "errata.neighbors",
-        description: "Return direct in/out edges of a node. Pass either a nodeId or a qname (e.g. ClassName.method) \u2014 resolved like the other nav verbs. Use after errata.search or errata.locate to walk the graph.",
+        description: "Return direct in/out edges of a node. Pass either a nodeId or a qname (e.g. ClassName.method) \u2014 resolved like the other nav verbs. Use after errata.search or errata.locate to walk the graph. A cloud id from search's collective blend (e.g. dprob_\u2026) that isn't in the local graph falls back to its collective neighborhood, tagged provenance:collective.",
         inputSchema: {
           type: "object",
           properties: {
@@ -37093,9 +37437,27 @@ var init_mcp = __esm({
             limit: { type: "number", description: "Max edges per direction (default 30)" }
           }
         },
-        handler: (args2, store) => {
+        handler: async (args2, store, ctx) => {
           const id = resolveSymbol2(store, args2);
-          if (!id) return unresolved(args2);
+          if (!id) {
+            const cn = await collectiveSeedFallback(args2, ctx, 30);
+            if (cn) {
+              return {
+                found: true,
+                node: { id: cn.seed, provenance: "collective" },
+                collectiveReachable: true,
+                collectiveStatus: "cloud-seed",
+                // Seed-touching edge types aren't on the wire (the server's seed
+                // burst excludes the seed itself, and edges to nodes outside the
+                // result set are dropped), so the collective fallback reports the
+                // 1-hop neighborhood + its internal topology instead of the local
+                // contract's typed out/in lists.
+                nearby: cn.nodes,
+                edges: cn.edges
+              };
+            }
+            return unresolved(args2);
+          }
           const limit = Math.max(1, Math.min(200, Number(args2["limit"] ?? 30)));
           const node2 = store.getNode(id);
           if (!node2) return { found: false, reason: "not-found" };
@@ -37142,32 +37504,17 @@ var init_mcp = __esm({
         handler: async (args2, store, ctx) => {
           const id = resolveSymbol2(store, args2);
           if (!id) {
-            const seedId = typeof args2["nodeId"] === "string" ? args2["nodeId"] : null;
-            if (seedId && ctx.cloud) {
-              const res = await ctx.cloud.search({
-                stack: [],
-                domains: [],
-                kinds: [],
-                seed: [seedId],
-                limit: args2["limit"] != null ? Number(args2["limit"]) : 20
-              }).catch(() => null);
-              if (res && res.nodes.length > 0) {
-                return {
-                  seed: seedId,
-                  seedProvenance: "collective",
-                  collectiveReachable: true,
-                  collectiveStatus: "cloud-seed",
-                  count: res.nodes.length,
-                  results: res.nodes.map((n) => ({
-                    id: n.id,
-                    label: n.label,
-                    name: n.description,
-                    score: Number((n.extractionConfidence ?? 0.5).toFixed(4)),
-                    hops: 1,
-                    provenance: "collective"
-                  }))
-                };
-              }
+            const cn = await collectiveSeedFallback(args2, ctx, 20);
+            if (cn) {
+              return {
+                seed: cn.seed,
+                seedProvenance: "collective",
+                collectiveReachable: true,
+                collectiveStatus: "cloud-seed",
+                count: cn.nodes.length,
+                results: cn.nodes,
+                edges: cn.edges
+              };
             }
             return unresolved(args2);
           }
@@ -37324,7 +37671,7 @@ var init_mcp = __esm({
       },
       {
         name: "errata.why",
-        description: "Causal/resolution neighborhood along the causal edge families (CAUSED_BY, MANIFESTS_AS, FIXED_BY, SOLVED_BY, \u2026), walked in both directions. For a Problem this surfaces its root causes AND solutions; for a Solution, the problems it resolves. Ranked by accumulated conductance. Pass nodeId or qname. Returns {seedId, nodes:[{id,label,description,hops,edgeType,relevance}]}.",
+        description: "Causal/resolution neighborhood along the causal edge families (CAUSED_BY, MANIFESTS_AS, FIXED_BY, SOLVED_BY, \u2026), walked in both directions. For a Problem this surfaces its root causes AND solutions; for a Solution, the problems it resolves. Merges the machine-wide shared store's triage layer (cause chains from inline `<-` diagnoses land there, keyed by the same content-derived problem id). Ranked by accumulated conductance. Pass nodeId or qname. Returns {seedId, nodes:[{id,label,description,hops,edgeType,relevance}]}. A cloud id from search's collective blend (e.g. dprob_\u2026) that isn't in the local graph falls back to its collective causal neighborhood, tagged provenance:collective.",
         inputSchema: {
           type: "object",
           properties: {
@@ -37334,12 +37681,52 @@ var init_mcp = __esm({
             limit: { type: "number", description: "Default 30" }
           }
         },
-        handler: (args2, store) => {
+        handler: async (args2, store, ctx) => {
           const id = resolveSymbol2(store, args2);
-          if (!id) return unresolved(args2);
+          if (!id) {
+            const cn = await collectiveSeedFallback(args2, ctx, 30);
+            if (cn) {
+              return {
+                found: true,
+                seedId: cn.seed,
+                seedProvenance: "collective",
+                collectiveReachable: true,
+                collectiveStatus: "cloud-seed",
+                nodes: cn.nodes.map((n) => ({
+                  id: n.id,
+                  label: n.label,
+                  description: n.name,
+                  hops: n.hops,
+                  relevance: n.score,
+                  provenance: n.provenance
+                })),
+                edges: cn.edges
+              };
+            }
+            return unresolved(args2);
+          }
           const maxHops = Math.max(1, Math.min(8, Number(args2["maxHops"] ?? 4)));
           const limit = Math.max(1, Math.min(100, Number(args2["limit"] ?? 30)));
-          return { found: true, ...causalChain(store, { seedId: id, direction: "both", maxHops, limit }) };
+          const local = causalChain(store, { seedId: id, direction: "both", maxHops, limit });
+          try {
+            const path2 = sharedStorePath();
+            if (!existsSync10(path2)) return { found: true, ...local };
+            const shared = openGraphStore({ path: path2 });
+            try {
+              if (!shared.getNode(id)) return { found: true, ...local };
+              const l2 = causalChain(shared, { seedId: id, direction: "both", maxHops, limit });
+              const seen = new Set(local.nodes.map((n) => n.id));
+              const merged = [
+                ...local.nodes,
+                ...l2.nodes.filter((n) => !seen.has(n.id)).map((n) => ({ ...n, store: "shared" }))
+              ].sort((a, b) => (b.relevance ?? 0) - (a.relevance ?? 0)).slice(0, limit);
+              return { found: true, seedId: local.seedId, nodes: merged };
+            } finally {
+              shared.close();
+            }
+          } catch {
+            return { found: true, ...local };
+          }
         }
       },
       {
@@ -37500,11 +37887,11 @@ var init_mcp = __esm({
       },
       {
         name: "errata.problems",
-        description: "List the workspace's Problem backlog \u2014 the triage view that search/why/impact can't give because they need a seed. status: 'open' (default) | 'resolved' (a real fix) | 'retracted' (false alarms \u2014 false_positive/dissolution) | 'all'. Also returns a `retracted` breakdown so the false-positive rate stays visible.",
+        description: "List the workspace's Problem backlog \u2014 the triage view that search/why/impact can't give because they need a seed. status: 'open' (default) | 'resolved' (a real fix) | 'retracted' (false alarms \u2014 false_positive/dissolution) | 'constraint' (design TENSIONS captured via `(constraint: \u2026)` \u2014 standing context, not open work, so they're excluded from 'open') | 'all'. Also returns a `retracted` breakdown so the false-positive rate stays visible.",
         inputSchema: {
           type: "object",
           properties: {
-            status: { type: "string", description: "open | resolved | retracted | all (default open)" },
+            status: { type: "string", description: "open | resolved | retracted | constraint | all (default open)" },
             limit: { type: "number" }
           }
         },
@@ -37514,7 +37901,7 @@ var init_mcp = __esm({
           const RETRACTIONS = /* @__PURE__ */ new Set(["false_positive", "invalid", "duplicate"]);
           const rows = store.findAllVersionsByLabel("Problem").map((p) => {
             const ra = p.attrs["resolvedAs"];
-            const status = ra && RETRACTIONS.has(ra) ? ra : p.attrs["resolvedAt"] != null ? "resolved" : "open";
+            const status = ra && RETRACTIONS.has(ra) ? ra : p.attrs["resolvedAt"] != null ? "resolved" : isConstraintProblem(p) ? "constraint" : "open";
             const anchorEdge = store.outEdges(p.id, ["ANCHORED_AT"])[0];
             const anchor = anchorEdge ? store.getNode(anchorEdge.to)?.description : void 0;
             return {
@@ -37522,17 +37909,21 @@ var init_mcp = __esm({
               problem: p.description,
               status,
               createdAt: p.createdAt,
+              // Surfaced even when `status` is resolved/retracted, so a caller can tell
+              // an explicitly-discharged TENSION from a fixed defect.
+              ...isConstraintProblem(p) ? { kind: "constraint" } : {},
               ...p.attrs["provisional"] ? { provisional: true } : {},
               ...p.attrs["resolvedReason"] ? { reason: String(p.attrs["resolvedReason"]) } : {},
               ...anchor ? { anchor } : {}
             };
           });
-          const inScope = (s) => want === "all" ? true : want === "resolved" ? s === "resolved" : want === "retracted" ? RETRACTIONS.has(s) : s === "open";
+          const inScope = (s) => want === "all" ? true : want === "resolved" ? s === "resolved" : want === "retracted" ? RETRACTIONS.has(s) : want === "constraint" ? s === "constraint" : s === "open";
           const items = rows.filter((r) => inScope(r.status)).sort((a, b) => b.createdAt - a.createdAt).slice(0, limit);
           const countBy = (s) => rows.filter((r) => r.status === s).length;
           return {
             open: countBy("open"),
             resolved: countBy("resolved"),
+            constraints: countBy("constraint"),
             retracted: {
               falsePositive: countBy("false_positive"),
               dissolution: countBy("invalid"),
@@ -37621,7 +38012,8 @@ var init_mcp = __esm({
         inputSchema: { type: "object", properties: {} },
         handler: (_args, store) => {
           const problems = store.findNodesByLabel("Problem");
-          const open2 = problems.filter((p) => p.attrs["resolvedAt"] == null);
+          const open2 = problems.filter((p) => p.attrs["resolvedAt"] == null && !isConstraintProblem(p));
+          const constraints = problems.filter((p) => p.attrs["resolvedAt"] == null && isConstraintProblem(p));
           const noFix = open2.filter((p) => store.outEdges(p.id, ["SOLVED_BY"]).length === 0);
           const allProblems = store.findAllVersionsByLabel("Problem");
           const ungroundedDerived = store.findNodesByLabel("Claim").filter((c) => c.attrs["crystallized"] === "derived" && Number(c.attrs["groundedSupport"] ?? 0) === 0);
@@ -37631,6 +38023,7 @@ var init_mcp = __esm({
             strandedSymbols: findStrandedSymbols(store).length,
             openProblems: open2.length,
             openProblemsWithoutFix: noFix.length,
+            designConstraints: constraints.length,
             retractedFalsePositive: allProblems.filter((p) => p.attrs["resolvedAs"] === "false_positive").length,
             retractedDissolution: allProblems.filter((p) => p.attrs["resolvedAs"] === "invalid").length,
             ungroundedDerivedClaims: ungroundedDerived.length,
@@ -38202,7 +38595,7 @@ function formatProblemsMd(r) {
   const lines = [head("problems")];
   const ret = r.retracted ?? { falsePositive: 0, dissolution: 0, duplicate: 0 };
   lines.push(
-    `open ${r.open} \xB7 resolved ${r.resolved} \xB7 retracted: ${ret.falsePositive} fp / ${ret.dissolution} dissolution / ${ret.duplicate} dup`
+    `open ${r.open} \xB7 resolved ${r.resolved}` + (r.constraints ? ` \xB7 constraints ${r.constraints}` : "") + ` \xB7 retracted: ${ret.falsePositive} fp / ${ret.dissolution} dissolution / ${ret.duplicate} dup`
   );
   lines.push(`showing ${r.count}`);
   lines.push("");
@@ -45940,10 +46333,13 @@ function recallForFile(store, relPath) {
       recallLine(p, `${TAG_EXAMPLE.fix(p.id)} if you resolved it \xB7 ${TAG_EXAMPLE.prior(p.id)} to cite${causeCue}`)
     );
   }
+  for (const c of priors.constraints.slice(0, 2)) {
+    lines.push(recallLine(c, `design tension \u2014 hold it, don't "fix" it \xB7 ${TAG_EXAMPLE.prior(c.id)} to cite`));
+  }
   for (const n of priors.related.slice(0, 4)) {
     lines.push(recallLine(n, `cite with ${TAG_EXAMPLE.prior(n.id)}`));
   }
-  const total = priors.openProblems.length + priors.related.length;
+  const total = priors.openProblems.length + priors.constraints.length + priors.related.length;
   return `errata \u2014 ${total} prior(s) recorded on this file (act only if relevant):
 ${lines.join("\n")}
 ` + buildFileRecallInstruction();
@@ -46915,12 +47311,12 @@ var init_report_render = __esm({
 
 // src/cli.ts
 init_src5();
-import { closeSync as closeSync2, existsSync as existsSync24, openSync as openSync2, readFileSync as readFileSync22, renameSync as renameSync3, statSync as statSync6 } from "node:fs";
-import { join as join26 } from "node:path";
+import { closeSync as closeSync2, existsSync as existsSync25, openSync as openSync2, readFileSync as readFileSync24, renameSync as renameSync4, statSync as statSync6 } from "node:fs";
+import { join as join28 } from "node:path";
 import { spawn as spawn3 } from "node:child_process";
 
 // src/daemon.ts
-import { existsSync as existsSync19, writeFileSync as writeFileSync15 } from "node:fs";
+import { existsSync as existsSync20, writeFileSync as writeFileSync17 } from "node:fs";
 
 // ../../node_modules/.pnpm/@hono+node-server@1.19.11_hono@4.12.8/node_modules/@hono/node-server/dist/index.mjs
 import { createServer as createServerHTTP } from "http";
@@ -47500,8 +47896,8 @@ init_config();
 
 // src/engine.ts
 import { execFileSync as execFileSync3 } from "node:child_process";
-import { existsSync as existsSync18, statSync as statSync5, appendFileSync as appendFileSync2, readdirSync as readdirSync8, renameSync as renameSync2, readFileSync as readFileSync17, writeFileSync as writeFileSync14 } from "node:fs";
-import { join as join22, relative as relative6, sep as sep4 } from "node:path";
+import { existsSync as existsSync19, statSync as statSync5, appendFileSync as appendFileSync2, readdirSync as readdirSync9, renameSync as renameSync3, readFileSync as readFileSync19, writeFileSync as writeFileSync16 } from "node:fs";
+import { join as join24, relative as relative6, sep as sep4 } from "node:path";
 
 // ../../node_modules/.pnpm/chokidar@4.0.3/node_modules/chokidar/esm/index.js
 import { stat as statcb } from "fs";
@@ -48232,9 +48628,9 @@ var NodeFsHandler = class {
     if (this.fsw.closed) {
       return;
     }
-    const dirname10 = sysPath.dirname(file2);
+    const dirname11 = sysPath.dirname(file2);
     const basename5 = sysPath.basename(file2);
-    const parent = this.fsw._getWatchedDir(dirname10);
+    const parent = this.fsw._getWatchedDir(dirname11);
     let prevStats = stats;
     if (parent.has(basename5))
       return;
@@ -48261,7 +48657,7 @@ var NodeFsHandler = class {
             prevStats = newStats2;
           }
         } catch (error48) {
-          this.fsw._remove(dirname10, basename5);
+          this.fsw._remove(dirname11, basename5);
         }
       } else if (parent.has(basename5)) {
         const at = newStats.atimeMs;
@@ -49366,6 +49762,39 @@ init_review2();
 import { closeSync, existsSync as existsSync12, fstatSync, openSync, readdirSync as readdirSync5, readSync, statSync as statSync3 } from "node:fs";
 import { basename as basename3, dirname as dirname8, join as join15 } from "node:path";
 import { homedir as homedir3 } from "node:os";
+function readFrom(path2, fromByte) {
+  let fd;
+  try {
+    fd = openSync(path2, "r");
+  } catch {
+    return { text: "", nextOffset: fromByte };
+  }
+  try {
+    const size = fstatSync(fd).size;
+    const start2 = fromByte > 0 && fromByte <= size ? fromByte : 0;
+    const len = size - start2;
+    if (len <= 0) return { text: "", nextOffset: size };
+    const buf = Buffer.allocUnsafe(len);
+    readSync(fd, buf, 0, len, start2);
+    return { text: buf.toString("utf8"), nextOffset: size };
+  } catch {
+    return { text: "", nextOffset: fromByte };
+  } finally {
+    closeSync(fd);
+  }
+}
+function transcriptSize(path2) {
+  try {
+    const fd = openSync(path2, "r");
+    try {
+      return fstatSync(fd).size;
+    } finally {
+      closeSync(fd);
+    }
+  } catch {
+    return 0;
+  }
+}
 function readTail(path2, maxBytes) {
   let fd;
   try {
@@ -49443,7 +49872,13 @@ function isUserTurnBoundary(obj) {
   return blocks.some((b) => b["type"] === "text");
 }
 function readAssistantTurns(transcriptPath, includeThinking = true, maxBytes = 2e6) {
-  const raw2 = readTail(transcriptPath, maxBytes);
+  return parseAssistantTurns(readTail(transcriptPath, maxBytes), includeThinking);
+}
+function readAssistantTurnsFrom(transcriptPath, fromByte, includeThinking = true) {
+  const { text, nextOffset } = readFrom(transcriptPath, fromByte);
+  return { turns: parseAssistantTurns(text, includeThinking), nextOffset };
+}
+function parseAssistantTurns(raw2, includeThinking) {
   if (!raw2) return [];
   const turns = [];
   const lines = raw2.split(/\r?\n/);
@@ -49566,10 +50001,13 @@ init_src4();
 import { readFileSync as readFileSync10, writeFileSync as writeFileSync10 } from "node:fs";
 var NEG = /n['']t|\b(?:not|never|no|none|neither|nor|unrelated|irrelevant|would|might|could|if)\b/i;
 var CITE_GROUP_RE = /\(((?:[^()\n]|\([^()\n]*\)){1,200})\)/g;
-var HANDLE_RE = /\[([a-z0-9][\w-]{0,40})\]|((?:pat|sol|drc|dcause|dfix|dprob|prob|claim|err)_[0-9a-f]{6,})/gi;
+var HANDLE_RE = /\[([a-z0-9][\w-]{0,80})\]|((?:pat|sol|drc|dcause|dfix|dprob|prob|claim|err)_[0-9a-f]{6,})/gi;
 var FIX_PREFIX = /^\s*fix:(?:#([a-z][\w-]{0,63}))?\s*/i;
 var CONSTRAINT_RE = /\(\s*constraint:\s*([^()\n]{8,}?)\s*\)/gi;
 var CAUSE_PREFIX = /^\s*cause:(?:#([a-z][\w-]{0,63}))?\s*/i;
+var NEST2_UNIT = String.raw`(?:[^()\n]|\((?:[^()\n]|\([^()\n]*\))*\))`;
+var FIX_LONG_RE = new RegExp(String.raw`\(\s*fix:(?:#([a-z][\w-]{0,63}))?\s*(${NEST2_UNIT}{12,}?)\s*\)`, "gi");
+var CAUSE_LONG_RE = new RegExp(String.raw`\(\s*cause:(?:#([a-z][\w-]{0,63}))?\s*(${NEST2_UNIT}{8,}?)\s*\)`, "gi");
 var CAUSE_ARROW = /\s+(?:<-|←)\s+/;
 var ATTEMPT_RE = /\(\s*(tried|failed):(?:#([a-z][\w-]{0,63}))?\s*((?:[^()\n]|\([^()\n]*\)){8,}?)\s*\)/gi;
 var AIDS_PREFIX = /^\s*aids:(?:#([a-z][\w-]{0,63}))?\s*/i;
@@ -49579,8 +50017,10 @@ var ALTERNATIVE_PREFIX = /^\s*alternative:(?:#([a-z][\w-]{0,63}))?\s*/i;
 var INSTANCE_PREFIX = /^\s*instance:\s*/i;
 var PATTERN_RE = /\(\s*pattern:\s*([^()\n]{3,}?)\s*\)/gi;
 var DOMAIN_RE = /\(\s*domain:\s*([^()\n]{3,}?)\s*\)/gi;
+var PACKAGE_RE = /\(\s*package:\s*([^()\n]{2,}?)\s*\)/gi;
+var COMPONENT_RE = /\(\s*component:\s*([^()\n]{2,}?)\s*\)/gi;
 var CAUSE_TEXT_MIN = 8;
-var FLAG_RE = /\[([!?])(?:#([a-z][\w-]{0,63})\s+)?\s*([^\]\n]{8,}?)\s*(?:@\s*([^\s\]]+?)(?::(\d+))?\s*)?\]/g;
+var FLAG_RE = /\[([!?])(?:#([a-z][\w-]{0,63})\s+)?\s*((?:\[[^\]\n]*\]|[^\]\n]){8,}?)\s*(?:@\s*([^\s\]]+?)(?::(\d+))?\s*)?\]/g;
 var CONSTRAINT_MIN = 8;
 function clauseBefore(sentence, idx) {
   const win = sentence.slice(Math.max(0, idx - 80), idx);
@@ -49595,6 +50035,17 @@ function fixRationaleBefore(sentence, idx) {
   const clause = m ? win.slice(m.index + 1) : win;
   return clause.replace(/\s+/g, " ").trim();
 }
+function fixRationaleAfter(sentence, endIdx) {
+  const win = sentence.slice(endIdx, endIdx + FIX_RATIONALE_WINDOW).replace(new RegExp(CITE_GROUP_RE.source, "g"), " ").replace(new RegExp(FLAG_RE.source, "g"), " ");
+  const stripped = win.replace(/^[\s—:–,-]+/, "");
+  const m = /^[^.;!?—]*/.exec(stripped);
+  return (m ? m[0] : stripped).replace(/\s+/g, " ").trim();
+}
+function deriveFixRationale(sentence, startIdx, endIdx) {
+  const before = fixRationaleBefore(sentence, startIdx);
+  if (before.length >= FIX_RATIONALE_MIN) return before;
+  return fixRationaleAfter(sentence, endIdx);
+}
 function parseInlineTags(text) {
   const out2 = [];
   const deFenced = text.replace(/```[\s\S]*?```/g, " ");
@@ -49608,9 +50059,11 @@ function parseInlineTags(text) {
       (m) => /\[[!?]|\((?:fix|cause|constraint|tried|failed):|\(\[/.test(m) ? " " : m
     );
     const sfield = sentence.replace(/\s+/g, " ").trim().slice(0, 160);
+    const citeMatched = /* @__PURE__ */ new Set();
     CITE_GROUP_RE.lastIndex = 0;
     let g;
     while ((g = CITE_GROUP_RE.exec(sentence)) !== null) {
+      citeMatched.add(g.index);
       let content = g[1];
       if (/^\s*pattern:/i.test(content)) continue;
       const fixM = FIX_PREFIX.exec(content);
@@ -49664,7 +50117,7 @@ function parseInlineTags(text) {
       if (!isFix && NEG.test(clauseBefore(sentence, g.index))) continue;
       let fixRationale;
       if (isFix) {
-        const r = fixRationaleBefore(sentence, g.index);
+        const r = deriveFixRationale(sentence, g.index, g.index + g[0].length);
         if (r.length >= FIX_RATIONALE_MIN) fixRationale = r;
       }
       HANDLE_RE.lastIndex = 0;
@@ -49689,6 +50142,55 @@ function parseInlineTags(text) {
           out2.push({ kind: "fix", fixRationale: note, sentence: sfield, ...verbThread ? { threadId: verbThread } : {} });
       }
     }
+    for (const pass of [
+      { re: FIX_LONG_RE, isFix: true },
+      { re: CAUSE_LONG_RE, isFix: false }
+    ]) {
+      pass.re.lastIndex = 0;
+      let lm;
+      while ((lm = pass.re.exec(sentence)) !== null) {
+        if (citeMatched.has(lm.index)) continue;
+        const verbThread = lm[1] ?? void 0;
+        const content = lm[2];
+        HANDLE_RE.lastIndex = 0;
+        const h = HANDLE_RE.exec(content);
+        const handle2 = h ? h[1] ?? h[2] : void 0;
+        if (!pass.isFix) {
+          if (handle2) {
+            out2.push({ kind: "triage", handle: handle2, sentence: sfield, ...verbThread ? { threadId: verbThread } : {} });
+          } else {
+            const causeText = content.replace(/\s+/g, " ").trim();
+            if (causeText.length >= CAUSE_TEXT_MIN)
+              out2.push({ kind: "triage", causeText, sentence: sfield, ...verbThread ? { threadId: verbThread } : {} });
+          }
+          continue;
+        }
+        if (handle2) {
+          const inGroup = content.replace(new RegExp(HANDLE_RE.source, "gi"), " ").replace(/\s+/g, " ").trim();
+          const r = inGroup.length >= FIX_RATIONALE_MIN ? inGroup : deriveFixRationale(sentence, lm.index, lm.index + lm[0].length);
+          let emitted = false;
+          HANDLE_RE.lastIndex = 0;
+          let hh;
+          while ((hh = HANDLE_RE.exec(content)) !== null) {
+            const hcap = hh[1] ?? hh[2];
+            if (hcap) {
+              emitted = true;
+              out2.push({
+                kind: "fix",
+                handle: hcap,
+                sentence: sfield,
+                ...r.length >= FIX_RATIONALE_MIN ? { fixRationale: r } : {},
+                ...verbThread ? { threadId: verbThread } : {}
+              });
+            }
+          }
+          if (emitted) continue;
+        }
+        const note = content.replace(/\s+/g, " ").trim();
+        if (note.length >= FIX_RATIONALE_MIN)
+          out2.push({ kind: "fix", fixRationale: note, sentence: sfield, ...verbThread ? { threadId: verbThread } : {} });
+      }
+    }
     FLAG_RE.lastIndex = 0;
     let f;
     while ((f = FLAG_RE.exec(sentence)) !== null) {
@@ -49774,6 +50276,18 @@ function parseInlineTags(text) {
       const raw3 = dm[1].replace(/\s+/g, " ").trim();
       if (raw3.length >= 3) out2.push({ kind: "domain", domainText: raw3, sentence: sfield });
     }
+    PACKAGE_RE.lastIndex = 0;
+    let pk;
+    while ((pk = PACKAGE_RE.exec(sentence)) !== null) {
+      const raw3 = pk[1].replace(/\s+/g, " ").trim();
+      if (raw3.length >= 2) out2.push({ kind: "package", packageText: raw3, sentence: sfield });
+    }
+    COMPONENT_RE.lastIndex = 0;
+    let cm;
+    while ((cm = COMPONENT_RE.exec(sentence)) !== null) {
+      const raw3 = cm[1].replace(/\s+/g, " ").trim();
+      if (raw3.length >= 2) out2.push({ kind: "component", componentText: raw3, sentence: sfield });
+    }
     CONSTRAINT_RE.lastIndex = 0;
     let c;
     while ((c = CONSTRAINT_RE.exec(sentence)) !== null) {
@@ -49808,7 +50322,12 @@ var LABEL_PAIR = {
   // EDGE_RULES-clean by construction: CONCERNS allows exactly these sources.
   "Problem>Tool": "CONCERNS",
   "Solution>Tool": "CONCERNS",
-  "RootCause>Tool": "CONCERNS"
+  "RootCause>Tool": "CONCERNS",
+  // Agent-named component anchors (OM-agent-anchors): a Component is a
+  // framework/product-level unit the knowledge is ABOUT — CONCERNS, like Tool.
+  "Problem>Component": "CONCERNS",
+  "Solution>Component": "CONCERNS",
+  "RootCause>Component": "CONCERNS"
 };
 var STACK_GROUNDING_EDGES = ["WRITTEN_IN", "DEPENDS_ON", "OCCURS_IN"];
 var TIEBREAK = [
@@ -49907,9 +50426,9 @@ function harvestInlineTags(store, text, opts) {
   const source = opts.sourceId ? store.getNode(opts.sourceId) : null;
   const mintPriors = opts.mintPriors ?? true;
   const touched = opts.sessionTouchedIds ?? /* @__PURE__ */ new Set();
-  const plan = { priorEdges: 0, problems: [], fixes: [], triages: [], attempts: [], unresolvedFixes: [], transfers: [], solutionLinks: [], instances: [], patterns: [], domains: [], refutes: [], corroborations: [] };
+  const plan = { priorEdges: 0, problems: [], fixes: [], triages: [], attempts: [], unresolvedFixes: [], transfers: [], solutionLinks: [], instances: [], patterns: [], domains: [], packages: [], components: [], refutes: [], corroborations: [] };
   const tags = parseInlineTags(text);
-  const symptomSeqs = tags.filter((t) => (t.kind === "problem" || t.kind === "todo" || t.kind === "constraint") && t.statement).map((t) => ({ seq: t.seq ?? -1, statement: t.statement, threadId: t.threadId })).sort((a, b) => a.seq - b.seq);
+  const symptomSeqs = tags.filter((t) => (t.kind === "problem" || t.kind === "todo") && t.statement).map((t) => ({ seq: t.seq ?? -1, statement: t.statement, threadId: t.threadId })).sort((a, b) => a.seq - b.seq);
   const bindSymptom = (seq, threadId) => {
     if (threadId) {
       const hit = symptomSeqs.find((s) => s.threadId === threadId);
@@ -49939,7 +50458,7 @@ function harvestInlineTags(store, text, opts) {
         ...tag.threadId ? { threadId: tag.threadId } : {}
       });
     } else if (tag.kind === "constraint") {
-      plan.problems.push({ statement: tag.statement, kind: "problem" });
+      plan.problems.push({ statement: tag.statement, kind: "constraint" });
     } else if (tag.kind === "fix") {
       if (tag.handle) {
         const problemId = resolveHandle(store, tag.handle, opts.handleMap);
@@ -50047,6 +50566,16 @@ function harvestInlineTags(store, text, opts) {
         ...tag.threadId ? { threadId: tag.threadId } : {},
         evidence: b.evidence
       });
+    } else if (tag.kind === "package" || tag.kind === "component") {
+      const b = bindSymptom(tag.seq, tag.threadId);
+      const bound = {
+        ...b.statement ? { boundStatement: b.statement } : {},
+        ...b.problemId ? { problemId: b.problemId } : {},
+        ...tag.threadId ? { threadId: tag.threadId } : {},
+        evidence: b.evidence
+      };
+      if (tag.kind === "package") plan.packages.push({ packageText: tag.packageText, ...bound });
+      else plan.components.push({ componentText: tag.componentText, ...bound });
     } else if (tag.kind === "attempt" || tag.kind === "failure") {
       for (const h of tag.refuteHandles ?? []) {
         const nodeId = resolveHandle(store, h, opts.handleMap);
@@ -50071,6 +50600,17 @@ function harvestInlineTags(store, text, opts) {
           boundStatement: b.statement
         });
       }
+    } else if (tag.kind === "prior") {
+      const targetId = resolveHandle(store, tag.handle, opts.handleMap);
+      const target = targetId ? store.getNode(targetId) : null;
+      const citedLabel = target?.label ?? opts.handleMap[tag.handle]?.label;
+      if (targetId && citedLabel && CORROBORATABLE_LABELS.has(citedLabel)) {
+        const witnessKey = `corrob:${targetId}:lean:${digest({ h: tag.handle })}`.slice(0, 72);
+        if (!plan.corroborations.some((c) => c.witnessKey === witnessKey)) {
+          plan.corroborations.push({ nodeId: targetId, witnessKey });
+        }
+      }
+      if (mintPriors && source && target && mintPriorEdge(store, source, target, tag.sentence, touched, opts.ts)) plan.priorEdges++;
     } else if (mintPriors && source) {
       const targetId = resolveHandle(store, tag.handle, opts.handleMap);
       const target = targetId ? store.getNode(targetId) : null;
@@ -50079,6 +50619,20 @@ function harvestInlineTags(store, text, opts) {
   }
   return plan;
 }
+var CORROBORATABLE_LABELS = /* @__PURE__ */ new Set([
+  "Problem",
+  "Solution",
+  "RootCause",
+  "Pattern",
+  "AntiPattern",
+  "Technique",
+  "Weakness"
+]);
+function stampWitnessOrigin(items, origin) {
+  if (!origin) return [...items];
+  const o = digest({ p: origin }).slice(0, 12);
+  return items.map((i2) => ({ ...i2, witnessKey: `${i2.witnessKey}:o:${o}` }));
+}
 
 // src/rollup.ts
 function readConversation(transcriptPath, includeThinking = true, maxChars = 6e4) {
@@ -50124,7 +50678,10 @@ function parseRollupJson(text) {
       ...str("cause") ? { cause: str("cause") } : {},
       ...str("fix") ? { fix: str("fix") } : {},
       ...str("anchor") ? { anchor: str("anchor") } : {},
-      kind: o["kind"] === "todo" ? "todo" : "problem"
+      // Preserve `constraint` (GH-constraint-kind) — collapsing it to `problem`
+      // here would re-arm the auto-close and the inferred fix-binding on a design
+      // tension that arrived through the rollup path instead of the inline tag.
+      kind: o["kind"] === "todo" ? "todo" : o["kind"] === "constraint" ? "constraint" : "problem"
     });
   }
   return flags2.slice(0, 12);
@@ -50162,6 +50719,174 @@ ${conversation}` }]
   };
 }
 
+// src/constraint-backfill.ts
+init_src4();
+init_src2();
+import { existsSync as existsSync13, readFileSync as readFileSync11, readdirSync as readdirSync6, writeFileSync as writeFileSync11 } from "node:fs";
+import { join as join16 } from "node:path";
+import { homedir as homedir4 } from "node:os";
+var BACKFILL_VERSION = 1;
+var EMPTY = {
+  skipped: true,
+  stamped: 0,
+  detached: 0,
+  reopened: 0,
+  witnessed: 0,
+  cloudTwins: [],
+  reminted: 0,
+  recoverable: 0
+};
+function markerPath(configDir) {
+  return join16(configDir, "constraint-backfill.json");
+}
+function alreadyDone(configDir) {
+  const p = markerPath(configDir);
+  if (!existsSync13(p)) return false;
+  try {
+    const raw2 = JSON.parse(readFileSync11(p, "utf8"));
+    return raw2?.version === BACKFILL_VERSION;
+  } catch {
+    return false;
+  }
+}
+function replay(root) {
+  const statements = /* @__PURE__ */ new Set();
+  const citedByFix = /* @__PURE__ */ new Set();
+  const dir = claudeProjectDir(root, homedir4());
+  if (!existsSync13(dir)) return { statements, citedByFix };
+  let names;
+  try {
+    names = readdirSync6(dir).filter((n) => n.endsWith(".jsonl"));
+  } catch {
+    return { statements, citedByFix };
+  }
+  for (const f of names) {
+    let lines;
+    try {
+      lines = readFileSync11(join16(dir, f), "utf8").split("\n");
+    } catch {
+      continue;
+    }
+    for (const line of lines) {
+      if (!line.trim()) continue;
+      let rec;
+      try {
+        rec = JSON.parse(line);
+      } catch {
+        continue;
+      }
+      if (rec.type !== "assistant" || !Array.isArray(rec.message?.content)) continue;
+      for (const b of rec.message.content) {
+        if (b?.type !== "text" || typeof b.text !== "string") continue;
+        for (const tag of parseInlineTags(b.text)) {
+          if (tag.kind === "constraint" && tag.statement) statements.add(tag.statement);
+          if (tag.kind === "fix") {
+            const t = tag;
+            if (t.handle) citedByFix.add(t.handle);
+            if (t.threadId) citedByFix.add(t.threadId);
+          }
+        }
+      }
+    }
+  }
+  return { statements, citedByFix };
+}
+function backfillConstraintKind(store, opts) {
+  if (!opts.force && !opts.dryRun && alreadyDone(opts.configDir)) return EMPTY;
+  const { statements, citedByFix } = replay(opts.root);
+  const report = {
+    skipped: false,
+    stamped: 0,
+    detached: 0,
+    reopened: 0,
+    witnessed: 0,
+    cloudTwins: [],
+    reminted: 0,
+    recoverable: 0
+  };
+  const missing = [];
+  const seen = /* @__PURE__ */ new Set();
+  const work = [];
+  for (const statement of statements) {
+    const id = designProblemId(statement);
+    if (seen.has(id)) continue;
+    seen.add(id);
+    const node2 = store.getNode(id);
+    if (!node2 || node2.label !== "Problem") {
+      missing.push(statement);
+      continue;
+    }
+    const isWitnessed = citedByFix.has(priorHandle(node2)) || citedByFix.has(id) || [...citedByFix].some((c) => c && id.startsWith(c));
+    const fabricated = [];
+    for (const e of store.outEdges(id, ["SOLVED_BY"])) {
+      const sol = store.getNode(e.to);
+      if (!sol) continue;
+      const auto = sol.description.startsWith(AUTO_MINT_PREFIX);
+      if (!auto && isWitnessed) report.witnessed++;
+      else fabricated.push(sol.id);
+    }
+    const stamp = node2.attrs["kind"] !== "constraint";
+    if (stamp) report.stamped++;
+    if (fabricated.length > 0) {
+      report.detached += fabricated.length;
+      report.reopened++;
+    }
+    const cloudNodeId = node2.attrs["cloudNodeId"];
+    if (typeof cloudNodeId === "string" && (stamp || fabricated.length > 0)) {
+      report.cloudTwins.push(cloudNodeId);
+    }
+    if (stamp || fabricated.length > 0) work.push({ id, fabricated, stamp });
+  }
+  report.recoverable = opts.remint ? 0 : missing.length;
+  if (opts.dryRun) {
+    report.reminted = opts.remint ? missing.length : 0;
+    return report;
+  }
+  if (opts.remint && missing.length > 0) {
+    store.transaction(() => {
+      for (const statement of missing) {
+        try {
+          const r = ingestDesignProblem(
+            store,
+            { problem: statement, kind: "constraint" },
+            { workspaceId: "", source: `constraint-remint:v${BACKFILL_VERSION}`, ts: opts.now }
+          );
+          if (r.created) report.reminted++;
+        } catch {
+        }
+      }
+    });
+  }
+  store.transaction(() => {
+    for (const w of work) {
+      const node2 = store.getNode(w.id);
+      if (!node2) continue;
+      const attrs = { ...node2.attrs, kind: "constraint" };
+      if (w.fabricated.length > 0) {
+        delete attrs["resolvedAt"];
+        delete attrs["resolvedReason"];
+      }
+      store.updateNode(w.id, { attrs, lastUpdatedAt: opts.now });
+      for (const solId of w.fabricated) {
+        for (const e of store.outEdges(w.id, ["SOLVED_BY"])) {
+          if (e.to === solId) store.closeEdge(e.id, opts.now);
+        }
+        const sol = store.getNode(solId);
+        if (sol?.description.startsWith(AUTO_MINT_PREFIX)) store.closeNode(solId, opts.now);
+      }
+    }
+  });
+  try {
+    writeFileSync11(
+      markerPath(opts.configDir),
+      JSON.stringify({ version: BACKFILL_VERSION, at: opts.now, ...report, cloudTwins: report.cloudTwins.length }, null, 2),
+      "utf8"
+    );
+  } catch {
+  }
+  return report;
+}
+
 // src/engine.ts
 init_symbol_summaries();
 init_reconcile();
@@ -50360,11 +51085,11 @@ init_outbox();
 init_src8();
 init_src();
 init_src2();
-import { readFileSync as readFileSync11 } from "node:fs";
-import { join as join16 } from "node:path";
+import { readFileSync as readFileSync12 } from "node:fs";
+import { join as join17 } from "node:path";
 function loadClaimIgnorePatterns(workspaceRoot) {
   try {
-    return readFileSync11(join16(workspaceRoot, ".errataignore"), "utf8").split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith("#")).map((l) => l.toLowerCase());
+    return readFileSync12(join17(workspaceRoot, ".errataignore"), "utf8").split(/\r?\n/).map((l) => l.trim()).filter((l) => l.length > 0 && !l.startsWith("#")).map((l) => l.toLowerCase());
   } catch {
     return [];
   }
@@ -50496,14 +51221,16 @@ function generalizePrincipleForSync(principle, level = 2) {
   delete node2.logicalId;
   return node2;
 }
-function buildPrincipleIngest(sharedStore, daemonVersion, ignorePatterns = [], level = 2) {
+function buildPrincipleIngest(sharedStore, daemonVersion, ignorePatterns = [], level = 2, opts = {}) {
+  const lang = opts.primaryLanguage?.trim().toLowerCase();
+  const claim = lang ? { anchorVisibility: "public", anchor: `lang:${lang}` } : {};
   const selected = sharedStore.findNodesByLabel("Claim").filter((n) => isSyncablePrinciple(n, ignorePatterns));
   for (const n of selected) {
     if (Number(n.attrs["abstractionLevel"] ?? ABSTRACTION_LEVEL.CONCRETE) !== ABSTRACTION_LEVEL.PRINCIPLE || n.attrs["provisional"] !== false) {
       throw new Error(`buildPrincipleIngest: refusing to sync non-canonical-principle ${n.id} \u2014 C7 invariant violated`);
     }
   }
-  const nodes = selected.map((n) => generalizePrincipleForSync(n, level));
+  const nodes = selected.map((n) => ({ ...generalizePrincipleForSync(n, level), ...claim }));
   if (nodes.length === 0) return null;
   const base = {
     daemonVersion,
@@ -50556,11 +51283,17 @@ function isSyncableRoute(edge2, shared, triage, ignorePatterns = []) {
   ].join(" ").toLowerCase();
   return !ignorePatterns.some((p) => blob.includes(p));
 }
-function generalizeRouteForSync(edge2, level) {
+var isScopedBucket = (bucket) => bucket.startsWith("stack:@");
+function filterScopedBucketKeys(rec, includeScopedBuckets) {
+  if (includeScopedBuckets) return rec;
+  return Object.fromEntries(Object.entries(rec).filter(([k]) => !isScopedBucket(k)));
+}
+function generalizeRouteForSync(edge2, level, includeScopedBuckets = false) {
   const disc = edge2.attrs["discriminator"];
   const local = edge2.attrs["perContext"] ?? {};
   const perContext = {};
   for (const [b, c] of Object.entries(local)) {
+    if (!includeScopedBuckets && isScopedBucket(b)) continue;
     const independent = c.independent ?? c.contributors?.length;
     const inferredIndependent = c.inferredIndependent ?? c.inferredContributors?.length;
     perContext[b] = {
@@ -50581,11 +51314,52 @@ function generalizeRouteForSync(edge2, level) {
     navFailures: 0
   };
 }
-function buildTriageIngest(shared, daemonVersion, ignorePatterns = [], level = 2) {
+function buildBucketTokenAnchors(languages, packages = []) {
+  const anchors = {};
+  const langTokens = /* @__PURE__ */ new Set();
+  for (const l of languages) {
+    const t = canonicalizeToken(String(l));
+    if (!t || t.includes(":") && !t.startsWith("lang:")) continue;
+    langTokens.add(t);
+    anchors[t] = t.startsWith("lang:") ? t : `lang:${t}`;
+  }
+  const versionless = (purl) => purl.replace(/@[^/@]+$/, "");
+  const conflicted = /* @__PURE__ */ new Set();
+  for (const p of packages) {
+    const t = canonicalizeToken(p.name);
+    if (!t || !p.purl || langTokens.has(t) || conflicted.has(t)) continue;
+    const existing = anchors[t];
+    if (existing === void 0) {
+      anchors[t] = p.purl;
+    } else if (versionless(existing) !== versionless(p.purl)) {
+      delete anchors[t];
+      conflicted.add(t);
+    }
+  }
+  return anchors;
+}
+function witnessedAnchor(routes, tokenAnchors) {
+  const weight = /* @__PURE__ */ new Map();
+  for (const e of routes) {
+    const perContext = e.attrs["perContext"] ?? {};
+    for (const [bucket, c] of Object.entries(perContext)) {
+      if (!bucket.startsWith("stack:") || !c || !(c.confirmed > 0)) continue;
+      const anchor = tokenAnchors[bucket.slice("stack:".length)];
+      if (anchor) weight.set(anchor, (weight.get(anchor) ?? 0) + c.confirmed);
+    }
+  }
+  return [...weight.entries()].sort((a, b) => b[1] - a[1] || (a[0] < b[0] ? -1 : 1))[0]?.[0];
+}
+function buildTriageIngest(shared, daemonVersion, ignorePatterns = [], level = 2, opts = {}) {
+  const lang = opts.primaryLanguage?.trim().toLowerCase();
+  const fallbackAnchor = lang ? `lang:${lang}` : void 0;
+  const tokenAnchors = opts.tokenAnchors ?? {};
+  const includeScopedBuckets = opts.includeScopedBuckets === true;
+  const claimOf = (anchor) => anchor ? { anchorVisibility: "public", anchor } : {};
   const nodes = [];
   const edges = [];
   const seenIds = /* @__PURE__ */ new Set();
-  const shareEndpoint = (id) => {
+  const shareEndpoint = (id, anchor) => {
     if (seenIds.has(id)) return;
     const n = shared.getNode(id);
     if (!n) return;
@@ -50594,12 +51368,14 @@ function buildTriageIngest(shared, daemonVersion, ignorePatterns = [], level = 2
       ...n,
       description: generalize(n.description, { level }).text,
       embedding: [],
-      attrs: { scope: {} }
+      attrs: { scope: {} },
+      ...claimOf(anchor ?? fallbackAnchor)
     });
   };
   for (const tri of shared.findNodesByLabel("Triage")) {
     const routes = shared.outEdges(tri.id, ["CONFIRMS", "INDICATES", "ROUTES_TO"]).filter((e) => isSyncableRoute(e, shared, tri, ignorePatterns));
     if (routes.length === 0) continue;
+    const triAnchor = witnessedAnchor(routes, tokenAnchors);
     if (!seenIds.has(tri.id)) {
       seenIds.add(tri.id);
       const statement = String(tri.attrs["statement"] ?? "");
@@ -50609,20 +51385,26 @@ function buildTriageIngest(shared, daemonVersion, ignorePatterns = [], level = 2
         embedding: [],
         attrs: {
           ...statement ? { statement: generalize(statement, { level }).text } : {},
-          ...tri.attrs["perContextSeen"] ? { perContextSeen: tri.attrs["perContextSeen"] } : {}
-        }
+          ...tri.attrs["perContextSeen"] ? {
+            perContextSeen: filterScopedBucketKeys(
+              tri.attrs["perContextSeen"],
+              includeScopedBuckets
+            )
+          } : {}
+        },
+        ...claimOf(triAnchor ?? fallbackAnchor)
       });
     }
     for (const tb of shared.inEdges(tri.id, ["TRIAGED_BY"])) {
-      shareEndpoint(tb.from);
+      shareEndpoint(tb.from, triAnchor);
       edges.push({ ...tb, navSuccesses: 0, navFailures: 0 });
     }
     for (const e of routes) {
       if (!(e.type === "CONFIRMS" || e.type === "ROUTES_TO" && e.attrs["provisional"] === false)) {
         throw new Error(`buildTriageIngest: refusing to sync non-router route ${e.id} \u2014 C7 invariant violated`);
       }
-      shareEndpoint(e.to);
-      edges.push(generalizeRouteForSync(e, level));
+      shareEndpoint(e.to, witnessedAnchor([e], tokenAnchors));
+      edges.push(generalizeRouteForSync(e, level, includeScopedBuckets));
     }
   }
   if (edges.length === 0) return null;
@@ -50668,22 +51450,22 @@ async function pullCloudTriage(shared, cloud, profile, limit = 50) {
 }
 
 // src/git-sensor.ts
-import { existsSync as existsSync13, readFileSync as readFileSync12, watch as fsWatch } from "node:fs";
-import { join as join17 } from "node:path";
+import { existsSync as existsSync14, readFileSync as readFileSync13, watch as fsWatch } from "node:fs";
+import { join as join18 } from "node:path";
 function readFirstLine(path2) {
   try {
-    return readFileSync12(path2, "utf8").split(/\r?\n/, 1)[0].trim();
+    return readFileSync13(path2, "utf8").split(/\r?\n/, 1)[0].trim();
   } catch {
     return null;
   }
 }
 function readGitRefState(gitDir) {
-  const head2 = readFirstLine(join17(gitDir, "HEAD"));
+  const head2 = readFirstLine(join18(gitDir, "HEAD"));
   const m = head2 ? /^ref:\s*refs\/heads\/(.+)$/.exec(head2) : null;
   const branch = m ? m[1] : null;
   let sha2 = null;
   if (branch) {
-    sha2 = readFirstLine(join17(gitDir, "refs", "heads", branch));
+    sha2 = readFirstLine(join18(gitDir, "refs", "heads", branch));
     if (!sha2) sha2 = shaFromPackedRefs(gitDir, `refs/heads/${branch}`);
   } else if (head2 && /^[0-9a-f]{7,40}$/i.test(head2)) {
     sha2 = head2;
@@ -50691,13 +51473,13 @@ function readGitRefState(gitDir) {
   return {
     branch,
     sha: sha2,
-    mergeHeadExists: existsSync13(join17(gitDir, "MERGE_HEAD")),
-    origHeadExists: existsSync13(join17(gitDir, "ORIG_HEAD"))
+    mergeHeadExists: existsSync14(join18(gitDir, "MERGE_HEAD")),
+    origHeadExists: existsSync14(join18(gitDir, "ORIG_HEAD"))
   };
 }
 function shaFromPackedRefs(gitDir, ref) {
   try {
-    for (const line of readFileSync12(join17(gitDir, "packed-refs"), "utf8").split(/\r?\n/)) {
+    for (const line of readFileSync13(join18(gitDir, "packed-refs"), "utf8").split(/\r?\n/)) {
       const [sha2, name2] = line.split(/\s+/);
       if (name2 === ref && sha2) return sha2;
     }
@@ -50731,7 +51513,7 @@ function startGitSensor(gitDir, onEvent, opts = {}) {
   const settle = () => {
     if (timer) clearTimeout(timer);
     timer = setTimeout(() => {
-      if (existsSync13(join17(gitDir, "index.lock"))) {
+      if (existsSync14(join18(gitDir, "index.lock"))) {
         settle();
         return;
       }
@@ -50742,7 +51524,7 @@ function startGitSensor(gitDir, onEvent, opts = {}) {
     }, debounceMs);
   };
   for (const sub of ["HEAD", "logs/HEAD", "MERGE_HEAD", "ORIG_HEAD"]) {
-    const p = join17(gitDir, sub);
+    const p = join18(gitDir, sub);
     try {
       watchers.push(fsWatch(p, settle));
     } catch {
@@ -50967,21 +51749,21 @@ var TelemetryRecorder = class {
 
 // src/skills.ts
 import {
-  existsSync as existsSync14,
+  existsSync as existsSync15,
   mkdirSync as mkdirSync6,
-  readFileSync as readFileSync13,
-  readdirSync as readdirSync6,
+  readFileSync as readFileSync14,
+  readdirSync as readdirSync7,
   unlinkSync as unlinkSync2,
-  writeFileSync as writeFileSync11
+  writeFileSync as writeFileSync12
 } from "node:fs";
-import { basename as basename4, join as join18 } from "node:path";
+import { basename as basename4, join as join19 } from "node:path";
 function skillFileName(id) {
   return `${id.replace(/[^A-Za-z0-9_.-]/g, "_")}.md`;
 }
 function readSkillManifest(manifestPath) {
-  if (!existsSync14(manifestPath)) return [];
+  if (!existsSync15(manifestPath)) return [];
   try {
-    const parsed = JSON.parse(readFileSync13(manifestPath, "utf8"));
+    const parsed = JSON.parse(readFileSync14(manifestPath, "utf8"));
     return (parsed.skills ?? []).map((s) => ({
       title: s.title ?? "",
       layer: s.layer ?? "technique",
@@ -50992,12 +51774,12 @@ function readSkillManifest(manifestPath) {
     return [];
   }
 }
-async function syncSkills(paths, client, seed, pins = []) {
-  const res = await client.getSkills(void 0, seed);
+async function syncSkills(paths, client, seed, pins = [], techSeed) {
+  const res = await client.getSkills(void 0, seed, techSeed);
   const staleDaemon = res.staleDaemon && res.latestDaemonVersion ? { latest: res.latestDaemonVersion } : void 0;
   mkdirSync6(paths.skillsDir, { recursive: true });
   if (res.skills.length === 0 && pins.length === 0) {
-    const existing = readdirSync6(paths.skillsDir).filter((f) => f.endsWith(".md"));
+    const existing = readdirSync7(paths.skillsDir).filter((f) => f.endsWith(".md"));
     if (existing.length > 0) return { written: 0, pruned: 0, ...staleDaemon ? { staleDaemon } : {} };
   }
   const rows = [];
@@ -51005,7 +51787,7 @@ async function syncSkills(paths, client, seed, pins = []) {
   for (const s of res.skills) {
     const fileName = skillFileName(s.id);
     keep.add(fileName);
-    writeFileSync11(join18(paths.skillsDir, fileName), s.markdown, "utf8");
+    writeFileSync12(join19(paths.skillsDir, fileName), s.markdown, "utf8");
     rows.push({
       id: s.id,
       title: s.title,
@@ -51018,7 +51800,7 @@ async function syncSkills(paths, client, seed, pins = []) {
     const fileName = skillFileName(p.id);
     if (keep.has(fileName)) continue;
     keep.add(fileName);
-    writeFileSync11(join18(paths.skillsDir, fileName), p.markdown, "utf8");
+    writeFileSync12(join19(paths.skillsDir, fileName), p.markdown, "utf8");
     rows.push({
       id: p.id,
       title: p.title,
@@ -51028,17 +51810,17 @@ async function syncSkills(paths, client, seed, pins = []) {
     });
   }
   let pruned = 0;
-  for (const f of readdirSync6(paths.skillsDir)) {
+  for (const f of readdirSync7(paths.skillsDir)) {
     if (!f.endsWith(".md")) continue;
     if (keep.has(basename4(f))) continue;
     try {
-      unlinkSync2(join18(paths.skillsDir, f));
+      unlinkSync2(join19(paths.skillsDir, f));
       pruned++;
     } catch {
     }
   }
   rows.sort((a, b) => a.id.localeCompare(b.id));
-  writeFileSync11(
+  writeFileSync12(
     paths.skillsManifest,
     JSON.stringify({ generatedAt: Date.now(), skills: rows }, null, 2),
     "utf8"
@@ -51047,24 +51829,25 @@ async function syncSkills(paths, client, seed, pins = []) {
 }
 
 // src/agent-skills.ts
+init_src2();
 import {
   cpSync,
-  existsSync as existsSync15,
+  existsSync as existsSync16,
   lstatSync,
   mkdirSync as mkdirSync7,
-  readFileSync as readFileSync14,
-  readdirSync as readdirSync7,
+  readFileSync as readFileSync15,
+  readdirSync as readdirSync8,
   rmSync as rmSync2,
   symlinkSync,
-  writeFileSync as writeFileSync12
+  writeFileSync as writeFileSync13
 } from "node:fs";
-import { join as join19 } from "node:path";
+import { join as join20 } from "node:path";
 var SKILL_NS = "errata-";
 var HARNESS_SKILL_DIRS = [
-  { configDir: ".claude", skillsDir: join19(".claude", "skills") },
+  { configDir: ".claude", skillsDir: join20(".claude", "skills") },
   // Cursor adopted the standard; its exact project dir is still moving — kept
   // best-effort and gated on `.cursor/` presence so we never create it blind.
-  { configDir: ".cursor", skillsDir: join19(".cursor", "skills") }
+  { configDir: ".cursor", skillsDir: join20(".cursor", "skills") }
 ];
 function skillSlug(title, id) {
   const base = title.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || id.toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "skill";
@@ -51079,22 +51862,42 @@ function deriveDescription(title, layer, body2) {
   const when = ` Apply when working on ${layer === "antipattern" ? "code that risks this pitfall" : "problems in this area"}.`;
   return `${lead}${lead.endsWith(".") ? "" : "."}${when}`.slice(0, 1024);
 }
-function renderSkillMd(name2, description, body2) {
+function renderSkillMd(name2, description, body2, citeHandle) {
+  const footer = citeHandle ? `
+
+---
+When this skill actually helps you, witness it inline in your reply: \`([${citeHandle}])\` \u2014 the citation is recorded and feeds this skill's reliability, so it keeps being served. Untagged help is invisible.
+` : "\n";
   return `---
 name: ${name2}
 description: ${yamlScalar(description)}
 ---
 
-${body2.trimEnd()}
-`;
+${body2.trimEnd()}${footer}`;
+}
+var LAYER_TO_LABEL = {
+  pattern: "Pattern",
+  antipattern: "AntiPattern",
+  technique: "Technique",
+  weakness: "Weakness"
+};
+function skillHandleNodes(skills) {
+  return skills.map((s) => ({
+    id: s.id,
+    label: LAYER_TO_LABEL[s.layer.toLowerCase()] ?? "Pattern",
+    description: s.title
+  }));
+}
+function skillCiteHandle(s) {
+  return priorHandle({ id: s.id, description: s.title });
 }
 function reconcileNamespaced(dir, keep) {
-  if (!existsSync15(dir)) return 0;
+  if (!existsSync16(dir)) return 0;
   let pruned = 0;
-  for (const name2 of readdirSync7(dir)) {
+  for (const name2 of readdirSync8(dir)) {
     if (!name2.startsWith(SKILL_NS) || keep.has(name2)) continue;
     try {
-      rmSync2(join19(dir, name2), { recursive: true, force: true });
+      rmSync2(join20(dir, name2), { recursive: true, force: true });
       pruned++;
     } catch {
     }
@@ -51103,7 +51906,7 @@ function reconcileNamespaced(dir, keep) {
 }
 function linkOrCopy(linkPath, target) {
   try {
-    if (existsSync15(linkPath) || safeLstat(linkPath)) rmSync2(linkPath, { recursive: true, force: true });
+    if (existsSync16(linkPath) || safeLstat(linkPath)) rmSync2(linkPath, { recursive: true, force: true });
   } catch {
   }
   try {
@@ -51124,7 +51927,7 @@ function safeLstat(p) {
   }
 }
 function emitAndProjectSkills(root, skills) {
-  const agentsSkillsDir = join19(root, ".agents", "skills");
+  const agentsSkillsDir = join20(root, ".agents", "skills");
   mkdirSync7(agentsSkillsDir, { recursive: true });
   const slugs = [];
   const keep = /* @__PURE__ */ new Set();
@@ -51132,7 +51935,7 @@ function emitAndProjectSkills(root, skills) {
   for (const s of skills) {
     let body2;
     try {
-      body2 = readFileSync14(s.bodyPath, "utf8");
+      body2 = readFileSync15(s.bodyPath, "utf8");
     } catch {
       continue;
     }
@@ -51141,10 +51944,10 @@ function emitAndProjectSkills(root, skills) {
     keep.add(slug2);
     slugs.push(slug2);
     const description = deriveDescription(s.title, s.layer, body2);
-    mkdirSync7(join19(agentsSkillsDir, slug2), { recursive: true });
-    writeFileSync12(
-      join19(agentsSkillsDir, slug2, "SKILL.md"),
-      renderSkillMd(slug2, description, body2),
+    mkdirSync7(join20(agentsSkillsDir, slug2), { recursive: true });
+    writeFileSync13(
+      join20(agentsSkillsDir, slug2, "SKILL.md"),
+      renderSkillMd(slug2, description, body2, skillCiteHandle(s)),
       "utf8"
     );
     emitted++;
@@ -51152,11 +51955,11 @@ function emitAndProjectSkills(root, skills) {
   reconcileNamespaced(agentsSkillsDir, keep);
   let projected = 0;
   for (const h of HARNESS_SKILL_DIRS) {
-    if (!existsSync15(join19(root, h.configDir))) continue;
-    const dir = join19(root, h.skillsDir);
+    if (!existsSync16(join20(root, h.configDir))) continue;
+    const dir = join20(root, h.skillsDir);
     mkdirSync7(dir, { recursive: true });
     for (const slug2 of slugs) {
-      linkOrCopy(join19(dir, slug2), join19(agentsSkillsDir, slug2));
+      linkOrCopy(join20(dir, slug2), join20(agentsSkillsDir, slug2));
       projected++;
     }
     reconcileNamespaced(dir, keep);
@@ -51165,15 +51968,15 @@ function emitAndProjectSkills(root, skills) {
   return { slugs, emitted, projected };
 }
 function emitInputsFromManifest(erretaDir, manifestPath) {
-  if (!existsSync15(manifestPath)) return [];
+  if (!existsSync16(manifestPath)) return [];
   try {
-    const parsed = JSON.parse(readFileSync14(manifestPath, "utf8"));
+    const parsed = JSON.parse(readFileSync15(manifestPath, "utf8"));
     return (parsed.skills ?? []).filter((s) => Boolean(s.id && s.file)).map((s) => ({
       id: s.id,
       title: s.title ?? s.id,
       layer: s.layer ?? "technique",
       confidence: s.confidence ?? 0,
-      bodyPath: join19(erretaDir, s.file)
+      bodyPath: join20(erretaDir, s.file)
     }));
   } catch {
     return [];
@@ -51187,17 +51990,17 @@ var GITIGNORE_LINES = [
   ".cursor/skills/errata-*/"
 ];
 function ensureSkillGitignore(root) {
-  const path2 = join19(root, ".gitignore");
+  const path2 = join20(root, ".gitignore");
   let current = "";
   try {
-    current = existsSync15(path2) ? readFileSync14(path2, "utf8") : "";
+    current = existsSync16(path2) ? readFileSync15(path2, "utf8") : "";
   } catch {
     return;
   }
   if (current.includes(GITIGNORE_MARK)) return;
   const prefix = current.length > 0 && !current.endsWith("\n") ? "\n" : "";
   try {
-    writeFileSync12(path2, `${current}${prefix}
+    writeFileSync13(path2, `${current}${prefix}
 ${GITIGNORE_LINES.join("\n")}
 `, "utf8");
   } catch {
@@ -51255,6 +52058,203 @@ function createToolRunState() {
 // src/engine.ts
 init_paths();
 
+// src/profile.ts
+init_src2();
+init_paths();
+import { existsSync as existsSync18, readFileSync as readFileSync17, writeFileSync as writeFileSync14 } from "node:fs";
+import { createHash as createHash12 } from "node:crypto";
+import { join as join22 } from "node:path";
+
+// src/git-remote.ts
+init_src();
+import { existsSync as existsSync17, readFileSync as readFileSync16, statSync as statSync4 } from "node:fs";
+import { isAbsolute as isAbsolute3, join as join21, resolve as resolve5 } from "node:path";
+function resolveGitDir(root) {
+  const dotGit = join21(root, ".git");
+  try {
+    const st = statSync4(dotGit);
+    if (st.isDirectory()) return dotGit;
+    const m = /^gitdir:\s*(.+?)\s*$/m.exec(readFileSync16(dotGit, "utf8"));
+    if (!m) return null;
+    const dir = m[1];
+    return isAbsolute3(dir) ? dir : resolve5(root, dir);
+  } catch {
+    return null;
+  }
+}
+function gitConfigPath(gitDir) {
+  const commondirFile = join21(gitDir, "commondir");
+  if (existsSync17(commondirFile)) {
+    const common = readFileSync16(commondirFile, "utf8").trim();
+    const commonDir = isAbsolute3(common) ? common : resolve5(gitDir, common);
+    return join21(commonDir, "config");
+  }
+  return join21(gitDir, "config");
+}
+function readRemotes(root) {
+  const gitDir = resolveGitDir(root);
+  if (!gitDir) return [];
+  const cfgPath = gitConfigPath(gitDir);
+  if (!existsSync17(cfgPath)) return [];
+  let txt;
+  try {
+    txt = readFileSync16(cfgPath, "utf8");
+  } catch {
+    return [];
+  }
+  const out2 = [];
+  const sectionRe = /^\s*\[remote "([^"]+)"\]\s*$([\s\S]*?)(?=^\s*\[|\s*$(?![\s\S]))/gm;
+  for (const m of txt.matchAll(sectionRe)) {
+    const url2 = /^\s*url\s*=\s*(.+?)\s*$/m.exec(m[2])?.[1];
+    if (url2) out2.push({ name: m[1], url: url2 });
+  }
+  return out2;
+}
+function detectRepoLocator(root, remote) {
+  const remotes = readRemotes(root);
+  if (remotes.length === 0) return null;
+  const pick2 = remote ? remotes.find((r) => r.name === remote) ?? null : remotes.find((r) => r.name === "origin") ?? (remotes.length === 1 ? remotes[0] : null);
+  return pick2 ? normalizeRepoLocator(pick2.url) : null;
+}
+
+// src/profile.ts
+function workspaceId(root) {
+  return "wp_" + createHash12("sha256").update(root).digest("hex").slice(0, 12);
+}
+function sessionOriginKey(sessionId) {
+  if (!sessionId) return void 0;
+  return "ws_" + createHash12("sha256").update(sessionId).digest("hex").slice(0, 12);
+}
+function refreshRepoLocator(root, profile) {
+  const detected = detectRepoLocator(root, profile.repoRemote);
+  if (!detected || detected === profile.repoLocator) return false;
+  profile.repoLocator = detected;
+  saveProfile(root, profile);
+  return true;
+}
+function loadProfile(root) {
+  const p = workspacePaths(root);
+  if (!existsSync18(p.workspaceJson)) return null;
+  return JSON.parse(readFileSync17(p.workspaceJson, "utf8"));
+}
+function saveProfile(root, profile) {
+  const p = workspacePaths(root);
+  ensureDir(p.configDir);
+  writeFileSync14(p.workspaceJson, JSON.stringify(profile, null, 2), "utf8");
+}
+function autodetectProfile(root) {
+  const id = workspaceId(root);
+  const name2 = root.split(/[\\/]/).filter(Boolean).pop() ?? "workspace";
+  const p = emptyProfile(id, name2);
+  const locator = detectRepoLocator(root);
+  if (locator) p.repoLocator = locator;
+  const pkgPath = join22(root, "package.json");
+  if (existsSync18(pkgPath)) {
+    try {
+      const pkg = JSON.parse(readFileSync17(pkgPath, "utf8"));
+      p.languages.push("typescript", "javascript");
+      const nodeVer = pkg.engines?.node ?? "node";
+      p.stack.push(`node@${nodeVer}`);
+      const deps = { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
+      const interesting = [
+        "next",
+        "react",
+        "vue",
+        "svelte",
+        "express",
+        "hono",
+        "fastify",
+        "@modelcontextprotocol/sdk"
+      ];
+      for (const k of interesting) {
+        if (deps[k]) p.stack.push(k);
+      }
+    } catch {
+    }
+  }
+  const pyproject = join22(root, "pyproject.toml");
+  if (existsSync18(pyproject)) {
+    try {
+      const txt = readFileSync17(pyproject, "utf8");
+      const py = /python\s*=\s*"([^"]+)"/.exec(txt)?.[1];
+      p.languages.push("python");
+      p.stack.push(`python@${py ?? "3"}`);
+      const candidates = ["fastapi", "django", "flask", "mcp", "pytest"];
+      for (const k of candidates) {
+        if (new RegExp(`\\b${k}\\b`, "i").test(txt)) p.stack.push(k);
+      }
+    } catch {
+    }
+  }
+  const reqs = join22(root, "requirements.txt");
+  if (existsSync18(reqs)) {
+    if (!p.languages.includes("python")) p.languages.push("python");
+    if (!p.stack.includes("python@3")) p.stack.push("python@3");
+  }
+  if (existsSync18(join22(root, "go.mod"))) {
+    p.languages.push("go");
+    p.stack.push("go");
+  }
+  if (existsSync18(join22(root, "Cargo.toml"))) {
+    p.languages.push("rust");
+    p.stack.push("rust");
+  }
+  p.languages = [...new Set(p.languages)];
+  p.stack = [...new Set(p.stack)];
+  return p;
+}
+
+// src/witness-queue.ts
+import { readFileSync as readFileSync18, renameSync as renameSync2, writeFileSync as writeFileSync15 } from "node:fs";
+import { dirname as dirname9, join as join23 } from "node:path";
+var WITNESS_QUEUE_CAP = 500;
+var WITNESS_TTL_MS = 14 * 24 * 60 * 60 * 1e3;
+var WITNESS_MAX_ATTEMPTS = 5;
+function witnessQueuePath(workspaceConfigDir) {
+  return join23(workspaceConfigDir, "witness-queue.json");
+}
+function loadWitnessQueue(path2) {
+  try {
+    const raw2 = JSON.parse(readFileSync18(path2, "utf8"));
+    if (!Array.isArray(raw2)) return [];
+    return raw2.filter(
+      (w) => !!w && typeof w === "object" && typeof w.nodeId === "string" && typeof w.witnessKey === "string"
+    );
+  } catch {
+    return [];
+  }
+}
+function saveWitnessQueue(path2, queue) {
+  try {
+    const tmp = join23(dirname9(path2), `.${Date.now()}.witness-queue.tmp`);
+    writeFileSync15(tmp, JSON.stringify(queue), "utf8");
+    renameSync2(tmp, path2);
+  } catch {
+  }
+}
+function pruneWitnessQueue(queue, now) {
+  const live = queue.filter(
+    (w) => now - w.ts < WITNESS_TTL_MS && w.attempts < WITNESS_MAX_ATTEMPTS
+  );
+  return live.length > WITNESS_QUEUE_CAP ? live.slice(live.length - WITNESS_QUEUE_CAP) : live;
+}
+function enqueueWitnesses(queue, fresh, now) {
+  const byKey = new Map(queue.map((w) => [`${w.channel}:${w.witnessKey}`, w]));
+  for (const f of fresh) {
+    const k = `${f.channel}:${f.witnessKey}`;
+    const existing = byKey.get(k);
+    if (existing) existing.attempts += 1;
+    else byKey.set(k, { ...f, ts: now, attempts: 1 });
+  }
+  return pruneWitnessQueue([...byKey.values()], now);
+}
+function pendingFor(queue, channel) {
+  return queue.filter((w) => w.channel === channel);
+}
+function retireWitnesses(queue, channel, settledKeys) {
+  return queue.filter((w) => !(w.channel === channel && settledKeys.has(w.witnessKey)));
+}
+
 // src/causal.ts
 var SUPPRESSORS = [
   { kind: "ts-nocheck", re: /@ts-nocheck\b/g },
@@ -51358,148 +52358,6 @@ var CausalBuffer = class {
   }
 };
 
-// src/profile.ts
-init_src2();
-init_paths();
-import { existsSync as existsSync17, readFileSync as readFileSync16, writeFileSync as writeFileSync13 } from "node:fs";
-import { createHash as createHash12 } from "node:crypto";
-import { join as join21 } from "node:path";
-
-// src/git-remote.ts
-init_src();
-import { existsSync as existsSync16, readFileSync as readFileSync15, statSync as statSync4 } from "node:fs";
-import { isAbsolute as isAbsolute3, join as join20, resolve as resolve5 } from "node:path";
-function resolveGitDir(root) {
-  const dotGit = join20(root, ".git");
-  try {
-    const st = statSync4(dotGit);
-    if (st.isDirectory()) return dotGit;
-    const m = /^gitdir:\s*(.+?)\s*$/m.exec(readFileSync15(dotGit, "utf8"));
-    if (!m) return null;
-    const dir = m[1];
-    return isAbsolute3(dir) ? dir : resolve5(root, dir);
-  } catch {
-    return null;
-  }
-}
-function gitConfigPath(gitDir) {
-  const commondirFile = join20(gitDir, "commondir");
-  if (existsSync16(commondirFile)) {
-    const common = readFileSync15(commondirFile, "utf8").trim();
-    const commonDir = isAbsolute3(common) ? common : resolve5(gitDir, common);
-    return join20(commonDir, "config");
-  }
-  return join20(gitDir, "config");
-}
-function readRemotes(root) {
-  const gitDir = resolveGitDir(root);
-  if (!gitDir) return [];
-  const cfgPath = gitConfigPath(gitDir);
-  if (!existsSync16(cfgPath)) return [];
-  let txt;
-  try {
-    txt = readFileSync15(cfgPath, "utf8");
-  } catch {
-    return [];
-  }
-  const out2 = [];
-  const sectionRe = /^\s*\[remote "([^"]+)"\]\s*$([\s\S]*?)(?=^\s*\[|\s*$(?![\s\S]))/gm;
-  for (const m of txt.matchAll(sectionRe)) {
-    const url2 = /^\s*url\s*=\s*(.+?)\s*$/m.exec(m[2])?.[1];
-    if (url2) out2.push({ name: m[1], url: url2 });
-  }
-  return out2;
-}
-function detectRepoLocator(root, remote) {
-  const remotes = readRemotes(root);
-  if (remotes.length === 0) return null;
-  const pick2 = remote ? remotes.find((r) => r.name === remote) ?? null : remotes.find((r) => r.name === "origin") ?? (remotes.length === 1 ? remotes[0] : null);
-  return pick2 ? normalizeRepoLocator(pick2.url) : null;
-}
-
-// src/profile.ts
-function workspaceId(root) {
-  return "wp_" + createHash12("sha256").update(root).digest("hex").slice(0, 12);
-}
-function refreshRepoLocator(root, profile) {
-  const detected = detectRepoLocator(root, profile.repoRemote);
-  if (!detected || detected === profile.repoLocator) return false;
-  profile.repoLocator = detected;
-  saveProfile(root, profile);
-  return true;
-}
-function loadProfile(root) {
-  const p = workspacePaths(root);
-  if (!existsSync17(p.workspaceJson)) return null;
-  return JSON.parse(readFileSync16(p.workspaceJson, "utf8"));
-}
-function saveProfile(root, profile) {
-  const p = workspacePaths(root);
-  ensureDir(p.configDir);
-  writeFileSync13(p.workspaceJson, JSON.stringify(profile, null, 2), "utf8");
-}
-function autodetectProfile(root) {
-  const id = workspaceId(root);
-  const name2 = root.split(/[\\/]/).filter(Boolean).pop() ?? "workspace";
-  const p = emptyProfile(id, name2);
-  const locator = detectRepoLocator(root);
-  if (locator) p.repoLocator = locator;
-  const pkgPath = join21(root, "package.json");
-  if (existsSync17(pkgPath)) {
-    try {
-      const pkg = JSON.parse(readFileSync16(pkgPath, "utf8"));
-      p.languages.push("typescript", "javascript");
-      const nodeVer = pkg.engines?.node ?? "node";
-      p.stack.push(`node@${nodeVer}`);
-      const deps = { ...pkg.dependencies ?? {}, ...pkg.devDependencies ?? {} };
-      const interesting = [
-        "next",
-        "react",
-        "vue",
-        "svelte",
-        "express",
-        "hono",
-        "fastify",
-        "@modelcontextprotocol/sdk"
-      ];
-      for (const k of interesting) {
-        if (deps[k]) p.stack.push(k);
-      }
-    } catch {
-    }
-  }
-  const pyproject = join21(root, "pyproject.toml");
-  if (existsSync17(pyproject)) {
-    try {
-      const txt = readFileSync16(pyproject, "utf8");
-      const py = /python\s*=\s*"([^"]+)"/.exec(txt)?.[1];
-      p.languages.push("python");
-      p.stack.push(`python@${py ?? "3"}`);
-      const candidates = ["fastapi", "django", "flask", "mcp", "pytest"];
-      for (const k of candidates) {
-        if (new RegExp(`\\b${k}\\b`, "i").test(txt)) p.stack.push(k);
-      }
-    } catch {
-    }
-  }
-  const reqs = join21(root, "requirements.txt");
-  if (existsSync17(reqs)) {
-    if (!p.languages.includes("python")) p.languages.push("python");
-    if (!p.stack.includes("python@3")) p.stack.push("python@3");
-  }
-  if (existsSync17(join21(root, "go.mod"))) {
-    p.languages.push("go");
-    p.stack.push("go");
-  }
-  if (existsSync17(join21(root, "Cargo.toml"))) {
-    p.languages.push("rust");
-    p.stack.push("rust");
-  }
-  p.languages = [...new Set(p.languages)];
-  p.stack = [...new Set(p.stack)];
-  return p;
-}
-
 // src/engine.ts
 init_config();
 init_cloud_auth();
@@ -51649,7 +52507,7 @@ function startLoopLagMonitor(thresholdMs = 1e3) {
 }
 
 // src/engine.ts
-var DAEMON_VERSION = true ? "2.0.1-dev.99" : "2.0.0-alpha.0";
+var DAEMON_VERSION = true ? "2.0.2-dev.133" : "2.0.0-alpha.0";
 var IGNORED_PATH = /[\\/](?:\.git|node_modules|\.errata|\.claude|\.codex|\.cursor|\.turbo|\.next|dist|coverage|test-results|playwright-report|__pycache__)(?:[\\/]|$)/;
 var IGNORED_NOISE = /castalia\.db|eventlog\.sqlite|turn-cursors/;
 var GIT_OP_MUTE_MS = 4e3;
@@ -51659,8 +52517,8 @@ var TURN_REPLAY_LOOKBACK_MS = 7 * 24 * 60 * 6e4;
 function appendIdentityAudit(path2, record2, line) {
   if (!record2.accepted && record2.score <= 0) return;
   try {
-    if (existsSync18(path2) && statSync5(path2).size >= IDENTITY_AUDIT_MAX_BYTES) {
-      renameSync2(path2, `${path2}.1`);
+    if (existsSync19(path2) && statSync5(path2).size >= IDENTITY_AUDIT_MAX_BYTES) {
+      renameSync3(path2, `${path2}.1`);
     }
     appendFileSync2(path2, line);
   } catch {
@@ -51669,14 +52527,33 @@ function appendIdentityAudit(path2, record2, line) {
 var yieldToLoop = () => new Promise((r) => setImmediate(r));
 function loadTurnCursors(path2) {
   try {
-    return new Map(Object.entries(JSON.parse(readFileSync17(path2, "utf8"))));
+    const raw2 = JSON.parse(readFileSync19(path2, "utf8"));
+    return new Map(
+      Object.entries(raw2).map(([k, v]) => [k, typeof v === "string" ? v : String(v?.uuid ?? "")])
+    );
+  } catch {
+    return /* @__PURE__ */ new Map();
+  }
+}
+function loadTurnOffsets(path2) {
+  try {
+    const raw2 = JSON.parse(readFileSync19(path2, "utf8"));
+    const out2 = /* @__PURE__ */ new Map();
+    for (const [k, v] of Object.entries(raw2)) {
+      const off = typeof v === "object" && v !== null ? v.offset : void 0;
+      if (typeof off === "number" && off >= 0) out2.set(k, off);
+    }
+    return out2;
   } catch {
     return /* @__PURE__ */ new Map();
   }
 }
-function saveTurnCursors(path2, cursors) {
+function saveTurnCursors(path2, cursors, offsets) {
   try {
-    writeFileSync14(path2, JSON.stringify(Object.fromEntries(cursors)), "utf8");
+    const merged = {};
+    for (const [k, uuid3] of cursors) merged[k] = { uuid: uuid3, offset: offsets.get(k) ?? 0 };
+    for (const [k, offset] of offsets) if (!merged[k]) merged[k] = { uuid: "", offset };
+    writeFileSync16(path2, JSON.stringify(merged), "utf8");
   } catch {
   }
 }
@@ -51698,7 +52575,7 @@ function gitSourceWatchTargets(root) {
         ["-C", root, "ls-files", "--others", "--ignored", "--exclude-standard", "--directory", "-z"],
         { encoding: "utf8", maxBuffer: 256 * 1024 * 1024, windowsHide: true, stdio: ["ignore", "pipe", "ignore"] }
       );
-      ignoredDirs = igOut.split("\0").filter(Boolean).map((d) => d.replace(/\/+$/, "")).filter((d) => !IGNORED_PATH.test(join22(root, d) + sep4));
+      ignoredDirs = igOut.split("\0").filter(Boolean).map((d) => d.replace(/\/+$/, "")).filter((d) => !IGNORED_PATH.test(join24(root, d) + sep4));
     } catch {
     }
     const hasIgnoredChild = (dir) => ignoredDirs.some((ig) => ig.startsWith(dir + "/"));
@@ -51710,19 +52587,19 @@ function gitSourceWatchTargets(root) {
         if (!f.startsWith(prefix)) continue;
         const rest2 = f.slice(prefix.length);
         if (rest2.includes("/")) children.add(dir === "" ? rest2.slice(0, rest2.indexOf("/")) : dir + "/" + rest2.slice(0, rest2.indexOf("/")));
-        else targets.add(join22(root, f));
+        else targets.add(join24(root, f));
       }
       for (const c of children) {
-        if (IGNORED_PATH.test(join22(root, c) + sep4)) continue;
+        if (IGNORED_PATH.test(join24(root, c) + sep4)) continue;
         if (hasIgnoredChild(c)) addUnder(c);
-        else targets.add(join22(root, c));
+        else targets.add(join24(root, c));
       }
     };
     addUnder("");
     if (targets.size > 0) return [...targets];
   } catch {
   }
-  return readdirSync8(root, { withFileTypes: true }).filter((e) => e.isDirectory() && !IGNORED_PATH.test(join22(root, String(e.name)) + sep4)).map((e) => join22(root, String(e.name)));
+  return readdirSync9(root, { withFileTypes: true }).filter((e) => e.isDirectory() && !IGNORED_PATH.test(join24(root, String(e.name)) + sep4)).map((e) => join24(root, String(e.name)));
 }
 function createWorkspaceEngine(opts) {
   const paths = workspacePaths(opts.workspaceRoot);
@@ -51737,6 +52614,10 @@ function createWorkspaceEngine(opts) {
     refreshRepoLocator(opts.workspaceRoot, profile);
   }
   const store = openGraphStore({ path: paths.castalia });
+  let witnessQueue = pruneWitnessQueue(
+    loadWitnessQueue(witnessQueuePath(paths.configDir)),
+    Date.now()
+  );
   const log = openEventLog({ path: paths.eventLog });
   const bundled = import.meta.url.endsWith(".mjs");
   const passWorker = bundled && paths.castalia !== ":memory:" ? new PassWorker({
@@ -51876,7 +52757,7 @@ function createWorkspaceEngine(opts) {
       const srcPaths = diff.changedPaths.filter((p) => /\.(ts|tsx|js|jsx|mjs|cjs|py)$/i.test(p));
       let episodeId2;
       if (srcPaths.length > 0) {
-        const abs = srcPaths.map((p) => join22(opts.workspaceRoot, p));
+        const abs = srcPaths.map((p) => join24(opts.workspaceRoot, p));
         try {
           const r = await runReindexPass(
             `git-reindex:${profile.name} (${abs.length} files)`,
@@ -51912,8 +52793,8 @@ function createWorkspaceEngine(opts) {
         `[errata] git: ${ev.kind} ${ev.newSha.slice(0, 7)} by ${meta3.authorName} \u2014 ${diff.changedPaths.length} file(s), ${diff.renames.length} rename(s)`
       );
     };
-    const gitDir = join22(opts.workspaceRoot, ".git");
-    if (existsSync18(gitDir)) {
+    const gitDir = join24(opts.workspaceRoot, ".git");
+    if (existsSync19(gitDir)) {
       stopGit = startGitSensor(gitDir, (ev) => {
         void handleGitEvent(ev).catch((err2) => {
           console.warn("[errata] git event handler failed:", err2);
@@ -51983,10 +52864,10 @@ function createWorkspaceEngine(opts) {
     });
     doneRender?.();
     writeContextFile(opts.workspaceRoot, body2);
-    const target = join22(opts.workspaceRoot, "AGENTS.md");
+    const target = join24(opts.workspaceRoot, "AGENTS.md");
     writeManagedBlock(target, { body: AGENTS_POINTER_BODY, stable: true, force: true });
     if (elicit) {
-      writePrimingHandles(join22(paths.configDir, "priming-handles.json"), [
+      writePrimingHandles(join24(paths.configDir, "priming-handles.json"), [
         ...snapshot.recentProblems.map((r) => r.node),
         // Resolved-band handles: the ✓ problem AND its Solution are citable
         // (a fix tag on an already-resolved problem no-ops idempotently; the
@@ -52077,6 +52958,21 @@ function createWorkspaceEngine(opts) {
     } catch (err2) {
       console.warn("[errata] anchor backfill failed:", err2);
     }
+    try {
+      const c = backfillConstraintKind(store, {
+        root: opts.workspaceRoot,
+        configDir: paths.configDir,
+        now: Date.now()
+      });
+      if (!c.skipped && (c.stamped > 0 || c.detached > 0)) {
+        console.log(
+          `[errata] constraint backfill: ${c.stamped} design tension(s) marked` + (c.detached > 0 ? `; ${c.detached} fabricated resolution(s) detached, ${c.reopened} reopened` : "") + (c.witnessed > 0 ? `; ${c.witnessed} cited discharge(s) kept` : "") + (c.cloudTwins.length > 0 ? ` \u2014 ${c.cloudTwins.length} already contributed; run scripts/repair-cloud-constraints.ts to repair the cloud twins` : "")
+        );
+        refreshContextNow();
+      }
+    } catch (err2) {
+      console.warn("[errata] constraint backfill failed:", err2);
+    }
     const report = runNightlyPipeline(store);
     try {
       const m = mergeDuplicateProblems(store, { ts: Date.now() });
@@ -52176,8 +53072,9 @@ function createWorkspaceEngine(opts) {
       resultSummary: { exitCode: e.exitCode ?? 1, errorTokens: e.errorTokens }
     });
   };
-  const turnCursorPath = join22(paths.configDir, "turn-cursors.json");
+  const turnCursorPath = join24(paths.configDir, "turn-cursors.json");
   const lastTurnUuid = loadTurnCursors(turnCursorPath);
+  const turnOffset = loadTurnOffsets(turnCursorPath);
   const sessionLastProblem = /* @__PURE__ */ new Map();
   const sessionThreads = /* @__PURE__ */ new Map();
   const harvestTexts = async (sessionId, items) => {
@@ -52199,7 +53096,7 @@ function createWorkspaceEngine(opts) {
     const t = Date.now();
     let processedTurns = 0;
     const elicit = isEdgeElicitationEnabled();
-    const handleMap = elicit ? readPrimingHandles(join22(paths.configDir, "priming-handles.json")) : {};
+    const handleMap = elicit ? readPrimingHandles(join24(paths.configDir, "priming-handles.json")) : {};
     const wsRoot = (opts.workspaceRoot ?? "").replace(/\\/g, "/");
     const toRel = (abs) => {
       const p = abs.replace(/\\/g, "/");
@@ -52241,7 +53138,7 @@ function createWorkspaceEngine(opts) {
             ts: t
           });
           if (r.created || r.corroborated) minted++;
-          sessionLastProblem.set(sessionId, designProblemId(flag.problem));
+          if (flag.kind !== "constraint") sessionLastProblem.set(sessionId, designProblemId(flag.problem));
           if (r.created || r.corroborated) {
             try {
               if (editedTurnFile) {
@@ -52321,11 +53218,13 @@ function createWorkspaceEngine(opts) {
           const dedupPath = anchorPath ?? hintPath;
           if (dedupPath) {
             try {
-              const dupId = reinforceSameAnchorProblem(store, dedupPath, profile.id, p.statement, sessionId, t);
+              const dupId = reinforceSameAnchorProblem(store, dedupPath, profile.id, p.statement, sessionId, t, p.kind);
               if (dupId) {
                 minted++;
-                sessionLastProblem.set(sessionId, dupId);
-                inScopeProblemId = dupId;
+                if (p.kind !== "constraint") {
+                  sessionLastProblem.set(sessionId, dupId);
+                  inScopeProblemId = dupId;
+                }
                 if (p.threadId) threads.set(p.threadId, dupId);
                 continue;
               }
@@ -52339,8 +53238,10 @@ function createWorkspaceEngine(opts) {
           });
           if (r.created || r.corroborated) {
             minted++;
-            sessionLastProblem.set(sessionId, designProblemId(p.statement));
-            inScopeProblemId = designProblemId(p.statement);
+            if (p.kind !== "constraint") {
+              sessionLastProblem.set(sessionId, designProblemId(p.statement));
+              inScopeProblemId = designProblemId(p.statement);
+            }
             if (p.threadId) threads.set(p.threadId, designProblemId(p.statement));
             try {
               if (anchorPath) {
@@ -52483,6 +53384,20 @@ function createWorkspaceEngine(opts) {
           if (domainId === pid) continue;
           mintCiteEdge(pid, domainId, "PERTAIN_TO", d.evidence === "witnessed" ? 0.4 : 0.3, { domainCite: true, evidence: d.evidence });
         }
+        for (const p of plan.packages) {
+          const pid = bindPid(p);
+          if (!pid) continue;
+          const pkgId = mintCitedPackageNode(store, p.packageText, t);
+          if (pkgId === pid) continue;
+          mintCiteEdge(pid, pkgId, "DEPENDS_ON", p.evidence === "witnessed" ? 0.4 : 0.3, { packageCite: true, evidence: p.evidence });
+        }
+        for (const cpt of plan.components) {
+          const pid = bindPid(cpt);
+          if (!pid) continue;
+          const componentId = mintComponentNode(store, cpt.componentText, t);
+          if (componentId === pid) continue;
+          mintCiteEdge(pid, componentId, "CONCERNS", cpt.evidence === "witnessed" ? 0.4 : 0.3, { componentCite: true, evidence: cpt.evidence });
+        }
         for (const inst of plan.instances) {
           const pid = bindPid(inst);
           if (!pid) continue;
@@ -52523,18 +53438,83 @@ function createWorkspaceEngine(opts) {
             mintCiteEdge(solId, targetId, sl.relation, 0.4, { solutionStructure: true, hypothesis: true });
           }
         }
-        if (plan.refutes.length > 0 && typeof cloud.reportContradictions === "function") {
-          void cloud.reportContradictions({ daemonVersion: DAEMON_VERSION, projectId: profile.id, items: plan.refutes }).then((r) => {
-            if (r?.recorded) console.log(`[errata] refute: ${r.recorded} contradiction(s) recorded`);
-          }).catch(
-            (err2) => console.warn("[errata] refute transport failed (continuing):", err2 instanceof Error ? err2.message : err2)
+        const citingSession = sessionOriginKey(sessionId);
+        const mintedHere = (nodeId) => store.getNode(nodeId)?.attrs["sources"]?.[0] === sessionId;
+        const sendWitnesses = async (channel, fresh, send) => {
+          const queued = pendingFor(witnessQueue, channel);
+          if (fresh.length === 0 && queued.length === 0) return;
+          const groups = /* @__PURE__ */ new Map();
+          for (const q of queued) {
+            const g = groups.get(q.sessionKey) ?? [];
+            g.push({ nodeId: q.nodeId, witnessKey: q.witnessKey });
+            groups.set(q.sessionKey, g);
+          }
+          const freshGroup = groups.get(citingSession) ?? [];
+          for (const f of fresh) {
+            if (freshGroup.some((x) => x.witnessKey === f.witnessKey)) continue;
+            freshGroup.push(f);
+          }
+          groups.set(citingSession, freshGroup);
+          const settled = /* @__PURE__ */ new Set();
+          const stillUnmatched = [];
+          let recorded = 0, unmatched = 0, duplicate = 0, selfGated = 0;
+          for (const [session, items2] of groups) {
+            if (items2.length === 0) continue;
+            try {
+              const raw2 = await send(items2, session);
+              const d = {
+                recorded: raw2?.recorded ?? 0,
+                unmatched: raw2?.unmatched ?? 0,
+                duplicate: raw2?.duplicate ?? 0,
+                selfGated: raw2?.selfGated ?? 0,
+                unmatchedIds: raw2?.unmatchedIds ?? []
+              };
+              recorded += d.recorded;
+              unmatched += d.unmatched;
+              duplicate += d.duplicate;
+              selfGated += d.selfGated;
+              const missing = new Set(d.unmatchedIds);
+              for (const it of items2) {
+                if (missing.has(it.nodeId)) stillUnmatched.push({ channel, ...it, sessionKey: session });
+                else settled.add(it.witnessKey);
+              }
+            } catch (err2) {
+              console.warn(`[errata] ${channel} transport failed (witnesses kept for retry):`, err2 instanceof Error ? err2.message : err2);
+              for (const it of items2) stillUnmatched.push({ channel, ...it, sessionKey: session });
+            }
+          }
+          witnessQueue = retireWitnesses(witnessQueue, channel, settled);
+          witnessQueue = enqueueWitnesses(witnessQueue, stillUnmatched, Date.now());
+          saveWitnessQueue(witnessQueuePath(paths.configDir), witnessQueue);
+          console.log(
+            `[errata] ${channel}: ${formatDisposition({ recorded, unmatched, duplicate, selfGated })}` + (queued.length > 0 ? ` (incl. ${queued.length} replayed)` : "")
+          );
+        };
+        if (typeof cloud.reportContradictions === "function") {
+          await sendWitnesses(
+            "contradict",
+            plan.refutes,
+            (items2, session) => cloud.reportContradictions({
+              daemonVersion: DAEMON_VERSION,
+              projectId: profile.id,
+              ...session ? { sessionId: session } : {},
+              items: stampWitnessOrigin(items2, profile.id)
+            })
           );
         }
-        if (plan.corroborations.length > 0 && typeof cloud.reportCorroborations === "function") {
-          void cloud.reportCorroborations({ daemonVersion: DAEMON_VERSION, projectId: profile.id, items: plan.corroborations }).then((r) => {
-            if (r?.recorded) console.log(`[errata] corroborate: ${r.recorded} corroboration(s) recorded`);
-          }).catch(
-            (err2) => console.warn("[errata] corroboration transport failed (continuing):", err2 instanceof Error ? err2.message : err2)
+        if (typeof cloud.reportCorroborations === "function") {
+          const emit = plan.corroborations.filter((c) => !mintedHere(c.nodeId));
+          const skipped = plan.corroborations.length - emit.length;
+          if (skipped > 0) console.log(`[errata] corroborate: ${skipped} skipped (this session authored the node)`);
+          await sendWitnesses(
+            "corroborate",
+            emit,
+            (items2, session) => cloud.reportCorroborations({
+              daemonVersion: DAEMON_VERSION,
+              projectId: profile.id,
+              ...session ? { sessionId: session } : {},
+              items: stampWitnessOrigin(items2, profile.id)
+            })
           );
         }
       } catch (err2) {
@@ -52563,17 +53543,28 @@ function createWorkspaceEngine(opts) {
     }
   };
   const harvestTurns = async (sessionId, transcriptPath) => {
+    const known = turnOffset.get(sessionId);
     let turns;
+    let nextOffset;
     try {
-      turns = readAssistantTurns(transcriptPath);
+      if (known === void 0) {
+        turns = readAssistantTurns(transcriptPath);
+        nextOffset = transcriptSize(transcriptPath);
+      } else {
+        ({ turns, nextOffset } = readAssistantTurnsFrom(transcriptPath, known));
+      }
     } catch {
       return;
     }
     const fresh = turnsSince(turns, lastTurnUuid.get(sessionId));
-    if (fresh.length === 0) return;
+    turnOffset.set(sessionId, nextOffset);
+    if (fresh.length === 0) {
+      saveTurnCursors(turnCursorPath, lastTurnUuid, turnOffset);
+      return;
+    }
     lastTurnUuid.set(sessionId, turns[turns.length - 1].uuid);
     await harvestTexts(sessionId, fresh);
-    saveTurnCursors(turnCursorPath, lastTurnUuid);
+    saveTurnCursors(turnCursorPath, lastTurnUuid, turnOffset);
   };
   const seenMessageIds = /* @__PURE__ */ new Set();
   const onMessage = (e) => {
@@ -52699,9 +53690,24 @@ function createWorkspaceEngine(opts) {
       return typeof cloudId === "string" && cloudId !== p.id ? [p.id, cloudId] : [p.id];
     });
     const pins = profile?.projectId ? await cloud.getSkillPins(profile.projectId).then((r) => r.pins).catch(() => []) : [];
-    const result = await syncSkills(paths, cloud, skillSeed, pins);
+    const anchorMap = buildBucketTokenAnchors(
+      profile.languages ?? [],
+      loadConfig().consent.contributePackages ? store.findNodesByLabel("Package").map((p) => ({
+        name: String(p.attrs["name"] ?? ""),
+        purl: String(p.attrs["purl"] ?? p.id)
+      })) : []
+    );
+    const stackTokens = new Set((profile.stack ?? []).map((t) => canonicalizeToken(String(t))).filter(Boolean));
+    const techSeed = [
+      ...new Set(
+        Object.entries(anchorMap).filter(([tok, a]) => a.startsWith("lang:") || stackTokens.has(tok)).map(([, a]) => a)
+      )
+    ].slice(0, 24);
+    const result = await syncSkills(paths, cloud, skillSeed, pins, techSeed);
     try {
-      emitAndProjectSkills(opts.workspaceRoot, emitInputsFromManifest(paths.configDir, paths.skillsManifest));
+      const inputs = emitInputsFromManifest(paths.configDir, paths.skillsManifest);
+      emitAndProjectSkills(opts.workspaceRoot, inputs);
+      writePrimingHandles(join24(paths.configDir, "priming-handles.json"), skillHandleNodes(inputs));
     } catch (err2) {
       console.warn("[skills] agent-skills projection failed (non-fatal):", err2 instanceof Error ? err2.message : err2);
     }
@@ -52888,7 +53894,7 @@ function createWorkspaceEngine(opts) {
         console.log(
           "[errata] sync skipped \u2014 cloud sync consent is off (enable with `errata consent sync on`)"
         );
-        const pending = existsSync18(paths.outbox) ? readdirSync8(paths.outbox).filter((f) => f.endsWith(".json")).length : 0;
+        const pending = existsSync19(paths.outbox) ? readdirSync9(paths.outbox).filter((f) => f.endsWith(".json")).length : 0;
         return { uploaded: 0, failed: 0, remaining: pending };
       }
       try {
@@ -52975,7 +53981,7 @@ async function startDaemon(opts) {
     reviewUrl: () => webUiUrl + "/review"
   });
   const writeLockFile = (url2) => {
-    writeFileSync15(
+    writeFileSync17(
       engine.paths.daemonLock,
       JSON.stringify({ pid: process.pid, webUiUrl: url2, startedAt: Date.now() }),
       "utf8"
@@ -53018,7 +54024,7 @@ async function startDaemon(opts) {
       );
       await engine.stop();
       try {
-        if (existsSync19(engine.paths.daemonLock)) {
+        if (existsSync20(engine.paths.daemonLock)) {
         }
       } catch {
       }
@@ -53035,16 +54041,16 @@ async function listenServer(fetchFn, port) {
 
 // src/registry.ts
 init_paths();
-import { existsSync as existsSync20, readFileSync as readFileSync18, writeFileSync as writeFileSync16 } from "node:fs";
-import { join as join23 } from "node:path";
+import { existsSync as existsSync21, readFileSync as readFileSync20, writeFileSync as writeFileSync18 } from "node:fs";
+import { join as join25 } from "node:path";
 function registryPath() {
-  return process.env["ERRATA_REGISTRY_PATH"] ?? join23(globalDir(), "workspaces.json");
+  return process.env["ERRATA_REGISTRY_PATH"] ?? join25(globalDir(), "workspaces.json");
 }
 function read() {
   const p = registryPath();
-  if (!existsSync20(p)) return { version: 1, workspaces: {} };
+  if (!existsSync21(p)) return { version: 1, workspaces: {} };
   try {
-    const parsed = JSON.parse(readFileSync18(p, "utf8"));
+    const parsed = JSON.parse(readFileSync20(p, "utf8"));
     return { version: 1, workspaces: parsed.workspaces ?? {} };
   } catch {
     return { version: 1, workspaces: {} };
@@ -53052,7 +54058,7 @@ function read() {
 }
 function write(reg) {
   ensureDir(globalDir());
-  writeFileSync16(registryPath(), JSON.stringify(reg, null, 2), "utf8");
+  writeFileSync18(registryPath(), JSON.stringify(reg, null, 2), "utf8");
 }
 function registerWorkspace(profile, root, now = Date.now()) {
   const reg = read();
@@ -53069,7 +54075,7 @@ function pruneMissingWorkspaces() {
   const reg = read();
   const removed = [];
   for (const [id, entry] of Object.entries(reg.workspaces)) {
-    if (!existsSync20(entry.path)) {
+    if (!existsSync21(entry.path)) {
       removed.push(entry);
       delete reg.workspaces[id];
     }
@@ -53078,13 +54084,13 @@ function pruneMissingWorkspaces() {
   return removed;
 }
 function workspaceStatus(entry) {
-  const missing = !existsSync20(entry.path);
+  const missing = !existsSync21(entry.path);
   const lockPath = workspacePaths(entry.path).daemonLock;
   let running = false;
   let webUiUrl = null;
-  if (existsSync20(lockPath)) {
+  if (existsSync21(lockPath)) {
     try {
-      const lock = JSON.parse(readFileSync18(lockPath, "utf8"));
+      const lock = JSON.parse(readFileSync20(lockPath, "utf8"));
       if (lock.pid && lock.webUiUrl && pidAlive(lock.pid)) {
         running = true;
         webUiUrl = lock.webUiUrl;
@@ -53112,7 +54118,7 @@ function pidAlive(pid) {
 // src/multi.ts
 init_dist();
 init_src4();
-import { readFileSync as readFileSync21, unlinkSync as unlinkSync3, writeFileSync as writeFileSync17 } from "node:fs";
+import { readFileSync as readFileSync23, unlinkSync as unlinkSync3, writeFileSync as writeFileSync19 } from "node:fs";
 
 // src/principle-sync.ts
 init_src4();
@@ -53140,8 +54146,8 @@ init_reconcile();
 
 // src/lockfile-auto.ts
 init_src();
-import { existsSync as existsSync21, readFileSync as readFileSync19 } from "node:fs";
-import { join as join24 } from "node:path";
+import { existsSync as existsSync22, readFileSync as readFileSync21 } from "node:fs";
+import { join as join26 } from "node:path";
 
 // src/package-index.ts
 init_src();
@@ -53227,10 +54233,12 @@ function buildContextIngest(store, profile, daemonVersion, ignorePatterns = [],
   const ignored = (s) => ignorePatterns.length > 0 && ignorePatterns.some((p) => s.toLowerCase().includes(p));
   const nodes = [];
   const seen = /* @__PURE__ */ new Set();
+  const localIdByWireId = {};
   for (const label of labels) {
     for (const n of store.findNodesByLabel(label)) {
       if (n.attrs["source"] === "cloud") continue;
       if (ignored(n.description) || ignored(String(n.attrs["name"] ?? ""))) continue;
+      if (typeof n.attrs["contributedAtSeq"] === "number") continue;
       nodes.push({
         ...n,
         // Language wire id = the shared `languageCanonicalId` (warming-spine
@@ -53238,15 +54246,24 @@ function buildContextIngest(store, profile, daemonVersion, ignorePatterns = [],
         // Package ids are already the purl (= the cross-stratum canonicalId).
         id: label === "Language" ? languageCanonicalId(String(n.attrs["name"] ?? "").trim() || n.description) : n.id,
         embedding: [],
+        // No `version` attr on the wire: the purl already encodes the resolved
+        // version, and the door's temporal guard rejects ANY `attrs.version` as
+        // bi-temporal bookkeeping (ingest-temporal-guard.ts) — shipping it 422s
+        // the whole batch. `resolved` still travels (range-vs-lockfile signal).
         attrs: label === "Package" ? {
           purl: n.attrs["purl"],
           name: n.attrs["name"],
-          version: n.attrs["version"],
           ecosystem: n.attrs["ecosystem"],
           resolved: n.attrs["resolved"]
-        } : { name: n.attrs["name"] }
+        } : { name: n.attrs["name"] },
+        // OM-anchor-tag: context stubs are self-anchored — the wire id IS the
+        // spine key (purl / languageCanonicalId). The door re-confirms on the
+        // public spine; a private-registry or workspace package never confirms
+        // and fails closed to org, exactly as an untagged one would.
+        anchorVisibility: "public"
       });
       seen.add(n.id);
+      localIdByWireId[nodes[nodes.length - 1].id] = n.id;
     }
   }
   if (nodes.length === 0) return null;
@@ -53258,11 +54275,15 @@ function buildContextIngest(store, profile, daemonVersion, ignorePatterns = [],
   }
   const base = {
     daemonVersion,
+    // Origin key (= project, the salted `wp_…`) — the door stamps it onto created
+    // nodes as `authoringProject`, arming the evidence channels' cross-origin gate
+    // (EE-corrob-live: without it every node is fail-open to self-corroboration).
+    ...profile.id ? { originProject: profile.id } : {},
     profile: { stack: profile.stack, languages: profile.languages, domains: profile.domains },
     nodes,
     edges
   };
-  return { ...base, payloadDigest: digest(base) };
+  return { ...base, payloadDigest: digest(base), localIds: [...seen], localIdByWireId };
 }
 
 // src/lockfile-auto.ts
@@ -53275,11 +54296,11 @@ function runLockfilePass(opts) {
     { file: "package-lock.json", parse: parsePackageLockJson }
   ];
   for (const c of candidates) {
-    const p = join24(opts.root, c.file);
-    if (!existsSync21(p)) continue;
+    const p = join26(opts.root, c.file);
+    if (!existsSync22(p)) continue;
     let sbom;
     try {
-      sbom = c.parse(readFileSync19(p, "utf8"));
+      sbom = c.parse(readFileSync21(p, "utf8"));
     } catch {
       continue;
     }
@@ -53294,6 +54315,7 @@ function runLockfilePass(opts) {
 // src/instance-ingest.ts
 init_src();
 init_src2();
+init_src4();
 init_src8();
 init_src();
 
@@ -53337,13 +54359,17 @@ function noveltyAgainst(node2, neighbors, opts = {}) {
 // src/instance-ingest.ts
 var INSTANCE_LABELS = ["Problem", "Solution", "RootCause"];
 var INSTANCE_EDGES = ["CAUSED_BY", "SOLVED_BY"];
-var ANCHOR_EDGES = ["OCCURS_IN", "DEPENDS_ON", "PERTAIN_TO"];
-var ANCHOR_TARGET_LABELS = ["Language", "Package", "Domain"];
+var ANCHOR_EDGES = ["OCCURS_IN", "DEPENDS_ON", "PERTAIN_TO", "CONCERNS"];
+var ANCHOR_TARGET_LABELS = ["Language", "Package", "Domain", "Component"];
 function stripCodebaseScope(scope) {
   const s = { ...scope ?? {} };
   delete s["codebase"];
   return s;
 }
+function contributedWireId(n) {
+  const cloudId = n.attrs["cloudNodeId"];
+  return isMembraneSaltedId(cloudId) ? cloudId : n.id;
+}
 function wireContextId(n) {
   if (n.label === "Language" && n.attrs["source"] !== "cloud") {
     const name2 = String(n.attrs["name"] ?? "").trim() || n.description.trim() || n.id.replace(/^lang:/, "");
@@ -53354,24 +54380,45 @@ function wireContextId(n) {
   }
   return n.id;
 }
+function langAnchor(t) {
+  const name2 = String(t.attrs["name"] ?? "").trim() || t.description.trim() || t.id.replace(/^lang:/, "").trim();
+  return name2 ? `lang:${name2.toLowerCase()}` : void 0;
+}
 function shareableContext(n, wireId) {
   const attrs = n.label === "Package" ? {
+    // No `version` attr: the purl encodes it, and the door's temporal
+    // guard 422s any `attrs.version` (mirrors buildContextIngest).
     purl: n.attrs["purl"],
     name: n.attrs["name"],
-    version: n.attrs["version"],
     ecosystem: n.attrs["ecosystem"],
     resolved: n.attrs["resolved"]
   } : n.label === "Domain" ? { name: n.description, canonicalId: n.attrs["canonicalId"] } : { name: n.attrs["name"] };
-  return { ...n, id: wireId, embedding: [], attrs };
+  return {
+    ...n,
+    id: wireId,
+    embedding: [],
+    attrs,
+    ...n.label === "Package" ? { anchorVisibility: "public" } : {},
+    ...n.label === "Language" && langAnchor(n) ? { anchorVisibility: "public", anchor: langAnchor(n) } : {},
+    // A Component stub claims itself by slug (OM-agent-anchors) — the door
+    // confirms only against an EXISTING public Component of that slug, so an
+    // org-internal component name never crosses (fails closed to org).
+    ...n.label === "Component" ? { anchorVisibility: "public", anchor: `component:${wireId}` } : {}
+  };
 }
 function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [], opts = {}) {
   const level = opts.level ?? 1;
   const noveltyOpts = opts.dedupCosine != null ? { dedupCosine: opts.dedupCosine } : {};
   const ignored = (text) => ignorePatterns.length > 0 && ignorePatterns.some((p) => text.toLowerCase().includes(p));
+  const originSessionOf = (n) => {
+    const key = sessionOriginKey(n.attrs["sources"]?.[0]);
+    return key ? { originSession: key } : {};
+  };
   const shareable = (n) => ({
     ...n,
     description: generalize(n.description, { level }).text,
     embedding: [],
+    ...originSessionOf(n),
     attrs: {
       scope: stripCodebaseScope(n.attrs["scope"]),
       ...n.attrs["kind"] ? { kind: n.attrs["kind"] } : {},
@@ -53380,7 +54427,9 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
   });
   const nodes = [];
   const seen = /* @__PURE__ */ new Set();
+  const shippedById = /* @__PURE__ */ new Map();
   const anchorSources = /* @__PURE__ */ new Set();
+  const semanticEndpoints = /* @__PURE__ */ new Map();
   const includedByLabel = /* @__PURE__ */ new Map();
   for (const label of INSTANCE_LABELS) {
     const ref = [];
@@ -53393,13 +54442,24 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       const contributedAtSeq = n.attrs["contributedAtSeq"];
       if (typeof contributedAtSeq === "number" && (n.lastReinforcedAtSeq ?? 0) <= contributedAtSeq) {
         anchorSources.add(n.id);
+        semanticEndpoints.set(n.id, contributedWireId(n));
         continue;
       }
+      if (label === "Solution" && n.description.startsWith(AUTO_MINT_PREFIX)) {
+        const problemShippable = store.inEdges(n.id, ["SOLVED_BY"]).some((e) => {
+          const p = store.getNode(e.from);
+          return p?.label === "Problem" && (seen.has(p.id) || typeof p.attrs["contributedAtSeq"] === "number");
+        });
+        if (!problemShippable) continue;
+      }
       if (!noveltyAgainst(n, ref, noveltyOpts).ready) continue;
       ref.push(n);
-      nodes.push(shareable(n));
+      const wireNode = shareable(n);
+      nodes.push(wireNode);
+      shippedById.set(n.id, wireNode);
       seen.add(n.id);
       anchorSources.add(n.id);
+      semanticEndpoints.set(n.id, n.id);
     }
   }
   for (const n of nodes) {
@@ -53419,27 +54479,66 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
       if (e.type === "OCCURS_IN" && t.label !== "Language") continue;
       if (e.type === "DEPENDS_ON" && t.label !== "Package") continue;
       if (e.type === "PERTAIN_TO" && t.label !== "Domain") continue;
-      if (t.label === "Package" && opts.includePackages !== true) continue;
+      if (e.type === "CONCERNS" && t.label !== "Component") continue;
+      if ((t.label === "Package" || t.label === "Component") && opts.includePackages !== true) continue;
       if (ignored(t.description) || ignored(String(t.attrs["name"] ?? ""))) continue;
       targets.push({ e, t, wireId: wireContextId(t) });
     }
     if (targets.length === 0) continue;
+    const shipped = shippedById.get(sourceId);
+    if (shipped) {
+      const anchors = (label) => targets.filter((x) => x.t.label === label).map(
+        (x) => label === "Language" ? langAnchor(x.t) : label === "Component" ? `component:${x.wireId}` : x.wireId
+      ).filter((a) => a != null).sort();
+      const anchor = anchors("Package")[0] ?? anchors("Component")[0] ?? anchors("Language")[0];
+      if (anchor) {
+        shipped.anchorVisibility = "public";
+        shipped.anchor = anchor;
+      }
+    }
     const dg = digest(targets.map(({ e, wireId }) => `${e.type}>${wireId}`).sort());
-    if (store.getNode(sourceId)?.attrs["anchorsContributedDigest"] === dg) continue;
+    const sourceNode = store.getNode(sourceId);
+    if (sourceNode?.attrs["anchorsContributedDigest"] === dg) continue;
     anchorDigests[sourceId] = dg;
+    const wireFrom = seen.has(sourceId) || !sourceNode ? sourceId : contributedWireId(sourceNode);
     for (const { e, t, wireId } of targets) {
-      anchorEdges.push({ ...e, to: wireId, attrs: {} });
+      anchorEdges.push({ ...e, from: wireFrom, to: wireId, attrs: {} });
       if (t.attrs["source"] === "cloud" || contextSeen.has(wireId)) continue;
       contextSeen.add(wireId);
       contextNodes.push(shareableContext(t, wireId));
     }
   }
+  const primaryLang = (profile.languages ?? []).map((l) => String(l).trim().toLowerCase()).filter(Boolean)[0];
+  if (primaryLang) {
+    for (const shipped of shippedById.values()) {
+      if (!shipped.anchorVisibility) {
+        shipped.anchorVisibility = "public";
+        shipped.anchor = `lang:${primaryLang}`;
+      }
+    }
+  }
+  for (const [localId, shipped] of shippedById) {
+    const local = store.getNode(localId);
+    if (!local || local.label !== "Solution" || !local.description.startsWith(AUTO_MINT_PREFIX)) continue;
+    const problem = store.inEdges(localId, ["SOLVED_BY"]).map((e) => store.getNode(e.from)).find((p) => p?.label === "Problem");
+    if (!problem) continue;
+    const inBatch = shippedById.get(problem.id);
+    if (inBatch) {
+      if (inBatch.anchorVisibility) shipped.anchorVisibility = inBatch.anchorVisibility;
+      if (inBatch.anchor != null) shipped.anchor = inBatch.anchor;
+      else delete shipped.anchor;
+    } else if (isMembraneSaltedId(problem.attrs["cloudNodeId"])) {
+      shipped.anchorVisibility = "private";
+      delete shipped.anchor;
+    }
+  }
   const project = opts.project;
   if (project) {
     const now = Date.now();
     for (const sourceId of anchorSources) {
       const source = store.getNode(sourceId);
       if (!source) continue;
+      const wireFrom = seen.has(sourceId) ? sourceId : contributedWireId(source);
       for (const e of store.outEdges(sourceId, ["ANCHORED_AT"])) {
         const target = store.getNode(e.to);
         if (!target) continue;
@@ -53474,11 +54573,21 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
             stability: "unstable"
           });
         }
-        anchorEdges.push({ ...e, to: symId, attrs: {} });
+        anchorEdges.push({ ...e, from: wireFrom, to: symId, attrs: {} });
       }
     }
   }
-  if (nodes.length === 0 && anchorEdges.length === 0) return null;
+  const edges = [];
+  const semanticEdgeDigests = {};
+  for (const [sourceId, wireFrom] of semanticEndpoints) {
+    const outs = store.outEdges(sourceId, [...INSTANCE_EDGES]).map((e) => ({ e, wireTo: semanticEndpoints.get(e.to) })).filter((x) => x.wireTo != null);
+    if (outs.length === 0) continue;
+    const dg = digest(outs.map(({ e, wireTo }) => `${e.type}>${wireTo}`).sort());
+    if (store.getNode(sourceId)?.attrs["semanticEdgesContributedDigest"] === dg) continue;
+    semanticEdgeDigests[sourceId] = dg;
+    for (const { e, wireTo } of outs) edges.push({ ...e, from: wireFrom, to: wireTo, attrs: {} });
+  }
+  if (nodes.length === 0 && anchorEdges.length === 0 && edges.length === 0) return null;
   let symbolSummaries;
   if (opts.lexicon && opts.lexicon.size > 0 && nodes.length > 0) {
     const lexicon = opts.lexicon;
@@ -53500,15 +54609,14 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     }
     if (count > 0) symbolSummaries = sidecar;
   }
-  const edges = [];
-  for (const id of seen) {
-    for (const e of store.outEdges(id, [...INSTANCE_EDGES])) {
-      if (seen.has(e.to)) edges.push({ ...e, attrs: {} });
-    }
-  }
   edges.push(...anchorEdges);
   const base = {
     daemonVersion,
+    // Origin key (= project, the salted `wp_…`) — the door stamps it onto created
+    // nodes as `authoringProject`, arming the evidence channels' cross-origin gate
+    // (EE-corrob-live: this is the MAIN semantic drain; without the stamp every
+    // Problem/Solution lands fail-open to self-corroboration).
+    ...profile.id ? { originProject: profile.id } : {},
     profile: { stack: profile.stack, languages: profile.languages, domains: profile.domains },
     // Context nodes FIRST: a chunked drain (cloud-client, 25-node chunks) then
     // co-locates the few Language/Package stubs with the first instance chunk,
@@ -53519,7 +54627,47 @@ function buildInstanceIngest(store, profile, daemonVersion, ignorePatterns = [],
     // payloadDigest — byte-identical to the pre-sidecar batch (backward compat).
     ...symbolSummaries ? { symbolSummaries } : {}
   };
-  return { ...base, payloadDigest: digest(base), anchorDigests };
+  return { ...base, payloadDigest: digest(base), anchorDigests, semanticEdgeDigests };
+}
+
+// src/backfill-edges.ts
+init_src();
+init_src2();
+var CAUSAL_LABELS = ["Problem", "Solution", "RootCause"];
+var CAUSAL_EDGES2 = ["SOLVED_BY", "CAUSED_BY", "FIXED_BY"];
+function cloudWireId(store, id) {
+  const n = store.getNode(id);
+  if (!n || !CAUSAL_LABELS.includes(n.label)) return null;
+  if (n.label === "Problem" && n.attrs["resolvedAs"] === PROBLEM_RESOLUTION.FALSE_POSITIVE) return null;
+  const cloudNodeId = n.attrs["cloudNodeId"];
+  if (typeof cloudNodeId === "string" && cloudNodeId.length > 0) return cloudNodeId;
+  if (n.attrs["source"] === "cloud") return n.id;
+  return typeof n.attrs["contributedAtSeq"] === "number" ? n.id : null;
+}
+function buildCausalEdgeBackfill(store, profile, daemonVersion) {
+  const edges = [];
+  const seenEdge = /* @__PURE__ */ new Set();
+  for (const label of CAUSAL_LABELS) {
+    for (const n of store.findNodesByLabel(label)) {
+      for (const e of store.outEdges(n.id, [...CAUSAL_EDGES2])) {
+        if (seenEdge.has(e.id)) continue;
+        seenEdge.add(e.id);
+        const from = cloudWireId(store, e.from);
+        const to = cloudWireId(store, e.to);
+        if (!from || !to) continue;
+        edges.push({ ...e, from, to, attrs: {} });
+      }
+    }
+  }
+  if (edges.length === 0) return null;
+  const base = {
+    daemonVersion,
+    profile: { stack: profile.stack, languages: profile.languages, domains: profile.domains },
+    originProject: profile.id,
+    nodes: [],
+    edges
+  };
+  return { ...base, payloadDigest: digest(base) };
 }
 
 // src/multi.ts
@@ -53600,7 +54748,7 @@ var ConsolidateWorker = class {
 init_paths();
 
 // src/lock.ts
-import { existsSync as existsSync22, readFileSync as readFileSync20 } from "node:fs";
+import { existsSync as existsSync23, readFileSync as readFileSync22 } from "node:fs";
 function isProcessAlive(pid) {
   if (!pid || pid <= 0) return false;
   try {
@@ -53611,9 +54759,9 @@ function isProcessAlive(pid) {
   }
 }
 function readDaemonLock(lockPath) {
-  if (!existsSync22(lockPath)) return null;
+  if (!existsSync23(lockPath)) return null;
   try {
-    const lock = JSON.parse(readFileSync20(lockPath, "utf8"));
+    const lock = JSON.parse(readFileSync22(lockPath, "utf8"));
     return typeof lock.pid === "number" ? lock : null;
   } catch {
     return null;
@@ -53855,13 +55003,13 @@ async function reanchorProject(opts) {
 }
 
 // src/adopt.ts
-import { existsSync as existsSync23 } from "node:fs";
-import { dirname as dirname9, join as join25 } from "node:path";
+import { existsSync as existsSync24 } from "node:fs";
+import { dirname as dirname10, join as join27 } from "node:path";
 function findGitRoot(absPath) {
   let dir = absPath;
   for (let depth = 0; depth < 64; depth++) {
-    if (existsSync23(join25(dir, ".git"))) return dir;
-    const parent = dirname9(dir);
+    if (existsSync24(join27(dir, ".git"))) return dir;
+    const parent = dirname10(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -53969,6 +55117,18 @@ async function startMultiDaemon(opts = {}) {
   startLoopLagMonitor();
   let baseUrl = "";
   const records = [];
+  const machineDominantLanguage = () => {
+    const langCounts = /* @__PURE__ */ new Map();
+    for (const r of records) {
+      for (const l of r.engine.profile.languages ?? []) {
+        const k = String(l).trim().toLowerCase();
+        if (k) langCounts.set(k, (langCounts.get(k) ?? 0) + 1);
+      }
+    }
+    return [...langCounts.entries()].sort(
+      (a, b) => b[1] - a[1] || (a[0] < b[0] ? -1 : 1)
+    )[0]?.[0];
+  };
   const updatePoller = opts.updateCheck ? startUpdatePoller({
     channel: loadConfig().updateChannel,
     onChange: (pending) => {
@@ -53981,6 +55141,47 @@ async function startMultiDaemon(opts = {}) {
   let serverPending = null;
   const boundaryListeners = [];
   let boundaryFlushing = false;
+  let boundaryFlushStartedAt = 0;
+  let boundaryFlushStage = "";
+  let boundaryFlushUnits = 0;
+  let boundaryFlushLastAdvanceAt = 0;
+  let boundaryFlushBatches = 0;
+  const beginFlush = (stage) => {
+    boundaryFlushing = true;
+    boundaryFlushStartedAt = Date.now();
+    boundaryFlushLastAdvanceAt = Date.now();
+    boundaryFlushUnits = 0;
+    boundaryFlushBatches = 0;
+    boundaryFlushItems = 0;
+    boundaryFlushDetail = "";
+    boundaryFlushStage = stage;
+  };
+  const flushStage = (stage) => {
+    boundaryFlushStage = stage;
+  };
+  let boundaryFlushItems = 0;
+  let boundaryFlushDetail = "";
+  const noteFlushProgress = (units, items = 0, detail = "") => {
+    boundaryFlushBatches++;
+    boundaryFlushUnits += Math.max(0, units);
+    boundaryFlushItems += Math.max(0, items);
+    if (detail) boundaryFlushDetail = detail;
+    if (units > 0 || items > 0) boundaryFlushLastAdvanceAt = Date.now();
+  };
+  const flushSnapshot = () => ({
+    running: boundaryFlushing,
+    stage: boundaryFlushStage,
+    detail: boundaryFlushDetail,
+    ageMs: boundaryFlushStartedAt ? Date.now() - boundaryFlushStartedAt : 0,
+    units: boundaryFlushUnits,
+    items: boundaryFlushItems,
+    chunks: boundaryFlushBatches,
+    stalledMs: boundaryFlushLastAdvanceAt ? Date.now() - boundaryFlushLastAdvanceAt : 0
+  });
+  const endFlush = () => {
+    boundaryFlushing = false;
+    boundaryFlushStage = "";
+  };
   const fireBoundary = () => {
     for (const l of boundaryListeners) {
       try {
@@ -54056,7 +55257,7 @@ async function startMultiDaemon(opts = {}) {
     void ambientLinkAll();
     app.route(`/ws/${rec.id}`, rec.webApp);
     try {
-      writeFileSync17(
+      writeFileSync19(
         rec.engine.paths.daemonLock,
         JSON.stringify({ pid: process.pid, webUiUrl: `${baseUrl}/ws/${rec.id}`, startedAt: Date.now() }),
         "utf8"
@@ -54095,8 +55296,10 @@ async function startMultiDaemon(opts = {}) {
         path: r.root,
         stack: r.entry.stack,
         nodes: r.engine.store.nodeCount(),
-        problems: r.engine.store.findNodesByLabel("Problem").length,
-        solutions: r.engine.store.findNodesByLabel("Solution").length,
+        // COUNT(*) — the materializing findNodesByLabel(...).length form held
+        // the event loop for seconds per poll once stores grew (HZ-index-hydrate).
+        problems: r.engine.store.countNodesByLabel("Problem"),
+        solutions: r.engine.store.countNodesByLabel("Solution"),
         endpoints: `/ws/${r.id}/`
       })),
       humanView: "run `errata report` \u2014 the dashboard was retired (GRAFT 4e)"
@@ -54152,8 +55355,9 @@ async function startMultiDaemon(opts = {}) {
         name: r.entry.name,
         path: r.root,
         nodes: r.engine.store.nodeCount(),
-        problems: r.engine.store.findNodesByLabel("Problem").length,
-        solutions: r.engine.store.findNodesByLabel("Solution").length,
+        // COUNT(*) — same hydration hazard as `/` (HZ-index-hydrate).
+        problems: r.engine.store.countNodesByLabel("Problem"),
+        solutions: r.engine.store.countNodesByLabel("Solution"),
         stranded: strandedCount(r)
       }))
     })
@@ -54242,7 +55446,7 @@ async function startMultiDaemon(opts = {}) {
   baseUrl = `http://127.0.0.1:${port}`;
   try {
     ensureDir(globalDir());
-    writeFileSync17(
+    writeFileSync19(
       lockPath,
       JSON.stringify({ pid: process.pid, webUiUrl: baseUrl, startedAt: Date.now() }),
       "utf8"
@@ -54251,7 +55455,7 @@ async function startMultiDaemon(opts = {}) {
   }
   for (const r of records) {
     try {
-      writeFileSync17(
+      writeFileSync19(
         r.engine.paths.daemonLock,
         JSON.stringify({ pid: process.pid, webUiUrl: `${baseUrl}/ws/${r.id}`, startedAt: Date.now() }),
         "utf8"
@@ -54514,15 +55718,33 @@ async function startMultiDaemon(opts = {}) {
     async syncPrinciplesPublic() {
       if (!loadConfig().consent.sync) return { uploaded: 0, skipped: "consent-off" };
       const ignore = loadClaimIgnorePatterns(globalDir());
-      const payload = buildPrincipleIngest(sharedStore, DAEMON_VERSION, ignore);
+      const primaryLanguage = machineDominantLanguage();
+      const payload = buildPrincipleIngest(sharedStore, DAEMON_VERSION, ignore, 2, {
+        ...primaryLanguage ? { primaryLanguage } : {}
+      });
       if (!payload) return { uploaded: 0 };
       const res = await cloudNow().ingest(payload);
       return { uploaded: res.accepted };
     },
     async syncTriagePublic() {
-      if (!loadConfig().consent.sync) return { uploaded: 0, skipped: "consent-off" };
+      const cfg2 = loadConfig();
+      if (!cfg2.consent.sync) return { uploaded: 0, skipped: "consent-off" };
       const ignore = loadClaimIgnorePatterns(globalDir());
-      const payload = buildTriageIngest(sharedStore, DAEMON_VERSION, ignore);
+      const primaryLanguage = machineDominantLanguage();
+      const languages = records.flatMap((r) => r.engine.profile.languages ?? []);
+      const packages = cfg2.consent.contributePackages ? records.flatMap(
+        (r) => r.engine.store.findNodesByLabel("Package").map((p) => ({
+          name: String(p.attrs["name"] ?? ""),
+          purl: String(p.attrs["purl"] ?? p.id)
+        }))
+      ) : [];
+      const tokenAnchors = buildBucketTokenAnchors(languages, packages);
+      const payload = buildTriageIngest(sharedStore, DAEMON_VERSION, ignore, 2, {
+        ...primaryLanguage ? { primaryLanguage } : {},
+        tokenAnchors,
+        // Scoped bucket keys carry package names — same consent as the purls.
+        includeScopedBuckets: cfg2.consent.contributePackages
+      });
       if (!payload) return { uploaded: 0 };
       const res = await cloudNow().ingest(payload);
       return { uploaded: res.accepted };
@@ -54533,14 +55755,44 @@ async function startMultiDaemon(opts = {}) {
       const ignore = loadClaimIgnorePatterns(globalDir());
       const client = cloudNow();
       let uploaded = 0;
+      const errors = [];
+      const lane = async (name2, projectName, run3) => {
+        try {
+          await run3();
+        } catch (err2) {
+          const msg = `[${projectName}] ${name2}: ${err2 instanceof Error ? err2.message : String(err2)}`;
+          errors.push(msg);
+          console.error(`[sync\u2192cloud] ${msg}`);
+        }
+      };
       for (const r of records) {
         const store = r.engine.store;
+        const projectName = r.engine.profile.name ?? r.engine.profile.id;
         const context = buildContextIngest(store, r.engine.profile, DAEMON_VERSION, ignore, {
           includePackages: cfg2.consent.contributePackages
         });
         if (context) {
-          const res = await client.ingest(context);
-          uploaded += res.accepted;
+          await lane("context", projectName, async () => {
+            const res = await client.ingest(context, {
+              onChunk: (p) => {
+                const seq = store.currentIngestSeq();
+                for (const wireId of p.nodeIds) {
+                  const localId = context.localIdByWireId[wireId] ?? wireId;
+                  const local = store.getNode(localId);
+                  if (!local) continue;
+                  store.updateNode(localId, { attrs: { ...local.attrs, contributedAtSeq: seq } });
+                }
+                if (p.blockedNodeIds?.length) {
+                  console.log(
+                    `[sync\u2192cloud] [${projectName}] context: ${p.blockedNodeIds.length} node(s) refused by an edge/CDN filter on content \u2014 left pending, will retry`
+                  );
+                }
+                noteFlushProgress(p.accepted, p.nodeIds.length, `context ${p.chunkIndex}/${p.totalChunks}`);
+              }
+            });
+            uploaded += res.accepted;
+            return res.accepted;
+          });
         }
         let lexicon;
         try {
@@ -54563,34 +55815,78 @@ async function startMultiDaemon(opts = {}) {
         });
         if (instances) {
           if (project) instances.projectId = project.projectId;
-          const res = await client.ingest(instances);
-          uploaded += res.accepted;
-          const seq = store.currentIngestSeq();
-          const cloudIdByLocal = new Map(
-            res.result.nodes.filter((rn) => rn.nodeId).map((rn) => [rn.canonicalId, rn.nodeId])
-          );
-          for (const n of instances.nodes) {
-            const local = store.getNode(n.id);
-            if (!local || !["Problem", "Solution", "RootCause"].includes(local.label)) continue;
-            const cloudNodeId = cloudIdByLocal.get(n.id);
-            store.updateNode(n.id, {
-              attrs: {
-                ...local.attrs,
-                contributedAtSeq: seq,
-                ...cloudNodeId && cloudNodeId !== n.id ? { cloudNodeId } : {}
+          await lane("instances", projectName, async () => {
+            const blocked = /* @__PURE__ */ new Set();
+            const res = await client.ingest(instances, {
+              onChunk: (p) => {
+                for (const id of p.blockedNodeIds ?? []) blocked.add(id);
+                noteFlushProgress(p.accepted, p.nodeIds.length, `instances ${p.chunkIndex}/${p.totalChunks}`);
               }
             });
-          }
-          for (const [localId, dg] of Object.entries(instances.anchorDigests)) {
-            const local = store.getNode(localId);
-            if (!local) continue;
-            store.updateNode(localId, {
-              attrs: { ...local.attrs, anchorsContributedDigest: dg }
-            });
-          }
+            if (blocked.size > 0) {
+              console.log(
+                `[sync\u2192cloud] [${projectName}] instances: ${blocked.size} node(s) refused by an edge/CDN filter on content \u2014 left pending, will retry. First: ${store.getNode([...blocked][0])?.description.slice(0, 120) ?? [...blocked][0]}`
+              );
+            }
+            uploaded += res.accepted;
+            const seq = store.currentIngestSeq();
+            const cloudIdByLocal = new Map(
+              res.result.nodes.filter((rn) => rn.nodeId).map((rn) => [rn.canonicalId, rn.nodeId])
+            );
+            for (const n of instances.nodes) {
+              const local = store.getNode(n.id);
+              if (!local || !["Problem", "Solution", "RootCause"].includes(local.label)) continue;
+              if (blocked.has(n.id)) continue;
+              const cloudNodeId = cloudIdByLocal.get(n.id);
+              store.updateNode(n.id, {
+                attrs: {
+                  ...local.attrs,
+                  contributedAtSeq: seq,
+                  ...cloudNodeId && cloudNodeId !== n.id ? { cloudNodeId } : {}
+                }
+              });
+            }
+            for (const [localId, dg] of Object.entries(instances.anchorDigests)) {
+              const local = store.getNode(localId);
+              if (!local) continue;
+              store.updateNode(localId, {
+                attrs: { ...local.attrs, anchorsContributedDigest: dg }
+              });
+            }
+            for (const [localId, dg] of Object.entries(instances.semanticEdgeDigests)) {
+              const local = store.getNode(localId);
+              if (!local) continue;
+              store.updateNode(localId, {
+                attrs: { ...local.attrs, semanticEdgesContributedDigest: dg }
+              });
+            }
+            return res.accepted;
+          });
         }
       }
-      return { uploaded };
+      return { uploaded, ...errors.length > 0 ? { errors } : {} };
+    },
+    async backfillCausalEdges() {
+      if (!loadConfig().consent.sync) return { accepted: 0, rejected: 0, skipped: "consent-off" };
+      const client = cloudNow();
+      let accepted = 0;
+      let rejected = 0;
+      const errors = [];
+      for (const r of records) {
+        const payload = buildCausalEdgeBackfill(r.engine.store, r.engine.profile, DAEMON_VERSION);
+        if (!payload) continue;
+        try {
+          const res = await client.ingest(payload);
+          accepted += res.accepted;
+          rejected += res.rejected;
+          if (res.rejected > 0) errors.push(...res.violations.slice(0, 5));
+        } catch (err2) {
+          errors.push(
+            `[${r.engine.profile.name ?? r.engine.profile.id}] backfill: ${err2 instanceof Error ? err2.message : String(err2)}`
+          );
+        }
+      }
+      return { accepted, rejected, ...errors.length > 0 ? { errors } : {} };
     },
     async pullTriagePublic() {
       if (!loadConfig().consent.sync) return { merged: 0, skipped: "consent-off" };
@@ -54633,16 +55929,23 @@ async function startMultiDaemon(opts = {}) {
     },
     async sessionBoundaryFlush() {
       if (boundaryFlushing) return { uploaded: 0, written: 0, pruned: 0, skipped: "in-flight" };
-      boundaryFlushing = true;
+      beginFlush("embed");
       try {
         for (const r of records) {
           await r.engine.embedSettled();
         }
+        flushStage("instances");
         const inst = await daemon.syncInstancesPublic();
+        flushStage("skills");
         const skills = await daemon.syncSkillsAll();
-        return { uploaded: inst.uploaded, written: skills.written, pruned: skills.pruned };
+        return {
+          uploaded: inst.uploaded,
+          written: skills.written,
+          pruned: skills.pruned,
+          ...inst.errors ? { errors: inst.errors } : {}
+        };
       } finally {
-        boundaryFlushing = false;
+        endFlush();
       }
     },
     onSessionBoundary(cb) {
@@ -54650,7 +55953,7 @@ async function startMultiDaemon(opts = {}) {
     },
     async stop() {
       try {
-        const cur = readFileSync21(lockPath, "utf8");
+        const cur = readFileSync23(lockPath, "utf8");
         if (JSON.parse(cur).pid === process.pid) unlinkSync3(lockPath);
       } catch {
       }
@@ -54667,15 +55970,24 @@ async function startMultiDaemon(opts = {}) {
     }
   };
   app.post("/api/sync", async (c) => {
+    if (boundaryFlushing) return c.json({ skipped: "in-flight", ...flushSnapshot() }, 409);
+    beginFlush("principles");
     try {
       const principles = await daemon.syncPrinciplesPublic();
+      flushStage("triage");
       const triage = await daemon.syncTriagePublic();
+      flushStage("instances");
       const instances = await daemon.syncInstancesPublic();
-      return c.json({ principles, triage, instances });
+      flushStage("edge-backfill");
+      const edgeBackfill = await daemon.backfillCausalEdges();
+      return c.json({ principles, triage, instances, edgeBackfill });
     } catch (err2) {
       return c.json({ error: err2 instanceof Error ? err2.message : String(err2) }, 500);
+    } finally {
+      endFlush();
     }
   });
+  app.get("/api/sync", (c) => c.json(flushSnapshot()));
   app.post("/api/tick", async (c) => {
     try {
       return c.json({ reports: Object.fromEntries(await daemon.tickAll()) });
@@ -55658,21 +56970,21 @@ async function cmdInit() {
   if (!skipHooks) {
     console.log("");
     console.log("installing harness hooks...");
-    const { existsSync: existsSync25 } = await import("node:fs");
-    const { join: join27 } = await import("node:path");
+    const { existsSync: existsSync26 } = await import("node:fs");
+    const { join: join29 } = await import("node:path");
     try {
       await installClaudeHooks(port);
     } catch (err2) {
       console.warn(`  \u26A0\uFE0F  Claude hook install failed: ${err2 instanceof Error ? err2.message : err2}`);
     }
-    if (existsSync25(join27(ROOT, ".cursor"))) {
+    if (existsSync26(join29(ROOT, ".cursor"))) {
       try {
         await installCursorMcpConfig();
       } catch (err2) {
         console.warn(`  \u26A0\uFE0F  Cursor MCP config failed: ${err2 instanceof Error ? err2.message : err2}`);
       }
     }
-    if (existsSync25(join27(ROOT, ".codex"))) {
+    if (existsSync26(join29(ROOT, ".codex"))) {
       try {
         await installCodexHooks(port);
       } catch (err2) {
@@ -55829,8 +57141,30 @@ async function cmdStatus() {
     console.log(`    stack:     ${profile.stack.join(", ") || "(none)"}`);
     console.log(`    languages: ${profile.languages.join(", ") || "(none)"}`);
   }
-  console.log(`  graph db:  ${existsSync24(paths.castalia) ? "yes" : "no"} (${paths.castalia})`);
-  console.log(`  event log: ${existsSync24(paths.eventLog) ? "yes" : "no"} (${paths.eventLog})`);
+  console.log(`  graph db:  ${existsSync25(paths.castalia) ? "yes" : "no"} (${paths.castalia})`);
+  console.log(`  event log: ${existsSync25(paths.eventLog) ? "yes" : "no"} (${paths.eventLog})`);
+  if (existsSync25(paths.castalia)) {
+    try {
+      const { openGraphStore: openGraphStore2 } = await Promise.resolve().then(() => (init_src4(), src_exports2));
+      const store = openGraphStore2({ path: paths.castalia });
+      try {
+        let pending = 0;
+        let total = 0;
+        for (const label of ["Problem", "Solution", "RootCause"]) {
+          for (const n of store.findNodesByLabel(label)) {
+            if (n.attrs["source"] === "cloud") continue;
+            total++;
+            const c = n.attrs["contributedAtSeq"];
+            if (typeof c !== "number" || (n.lastReinforcedAtSeq ?? 0) > c) pending++;
+          }
+        }
+        console.log(`  contribute: ${pending} pending of ${total} instance node(s)`);
+      } finally {
+        store.close();
+      }
+    } catch {
+    }
+  }
   const lockPath = globalDaemonLock();
   const running = isDaemonAlive(lockPath) ? readDaemonLock(lockPath) : null;
   console.log(
@@ -56460,11 +57794,11 @@ function cmdInstallationProfile(args2) {
 }
 async function cmdReview() {
   const paths = workspacePaths(ROOT);
-  if (!existsSync24(paths.reviewQueue)) {
+  if (!existsSync25(paths.reviewQueue)) {
     console.log("(review queue empty)");
     return;
   }
-  const queue = JSON.parse(readFileSync22(paths.reviewQueue, "utf8"));
+  const queue = JSON.parse(readFileSync24(paths.reviewQueue, "utf8"));
   if (queue.length === 0) {
     console.log("(review queue empty)");
     return;
@@ -56883,8 +58217,8 @@ async function cmdSimilar(args2) {
   const limitIdx = args2.indexOf("--limit");
   const limit = limitIdx >= 0 && args2[limitIdx + 1] ? Number(args2[limitIdx + 1]) : 5;
   const { runTool: runTool2 } = await Promise.resolve().then(() => (init_mcp(), mcp_exports));
-  await withStore((store) => {
-    const r = runTool2("errata.similar", { nodeId: seed, qname: seed, limit }, store);
+  await withStore(async (store) => {
+    const r = await runTool2("errata.similar", { nodeId: seed, qname: seed, limit }, store);
     if (!r.found) {
       console.log("seed not found");
       return;
@@ -57135,7 +58469,7 @@ async function gatherRepo(store, ws) {
   };
 }
 async function gatherReportData(generatedAt) {
-  const { existsSync: existsSync25 } = await import("node:fs");
+  const { existsSync: existsSync26 } = await import("node:fs");
   const { openGraphStore: openGraphStore2 } = await Promise.resolve().then(() => (init_src4(), src_exports2));
   const cfg = loadConfig();
   const outbound = cfg.consent.sync ? "auto" : "off";
@@ -57143,7 +58477,7 @@ async function gatherReportData(generatedAt) {
   for (const ws of listWorkspaces()) {
     if (ws.missing) continue;
     const dbPath = workspacePaths(ws.path).castalia;
-    if (!existsSync25(dbPath)) continue;
+    if (!existsSync26(dbPath)) continue;
     let store = null;
     try {
       store = openGraphStore2({ path: dbPath });
@@ -57174,7 +58508,7 @@ async function gatherReportData(generatedAt) {
   };
 }
 async function cmdReport(args2) {
-  const { mkdirSync: mkdirSync8, writeFileSync: writeFileSync18 } = await import("node:fs");
+  const { mkdirSync: mkdirSync8, writeFileSync: writeFileSync20 } = await import("node:fs");
   const { renderReport: renderReport2 } = await Promise.resolve().then(() => (init_report_render(), report_render_exports));
   const includeFutureVerbs = args2.includes("--future-verbs");
   const now = /* @__PURE__ */ new Date();
@@ -57187,8 +58521,8 @@ async function cmdReport(args2) {
   const outDir = workspacePaths(ROOT).configDir;
   mkdirSync8(outDir, { recursive: true });
   const files = renderReport2(data, { includeFutureVerbs });
-  for (const f of files) writeFileSync18(join26(outDir, f.name), f.html, "utf8");
-  const indexPath = join26(outDir, "report.html");
+  for (const f of files) writeFileSync20(join28(outDir, f.name), f.html, "utf8");
+  const indexPath = join28(outDir, "report.html");
   console.log(`report \u2192 ${indexPath}`);
   console.log(
     `  ${data.repos.length} repo(s) \xB7 ${files.length} file(s) \xB7 ${data.rollup.nodes.toLocaleString("en-US")} nodes`
@@ -57240,7 +58574,7 @@ function spawnDaemonDetached() {
   try {
     const logPath = daemonLogPath();
     try {
-      if (statSync6(logPath).size > 5 * 1024 * 1024) renameSync3(logPath, `${logPath}.1`);
+      if (statSync6(logPath).size > 5 * 1024 * 1024) renameSync4(logPath, `${logPath}.1`);
     } catch {
     }
     out2 = openSync2(logPath, "a");
@@ -57306,15 +58640,15 @@ function hookRelayCommand(port, path2) {
   return process.platform === "win32" ? `cmd //c "curl -s --connect-timeout 1 --max-time 2 -X POST -H \\"Content-Type: application/json\\" --data-binary @- ${url2} 2>NUL || echo {}"` : `curl -s --connect-timeout 1 --max-time 2 -X POST -H 'Content-Type: application/json' --data-binary @- ${url2} 2>/dev/null || echo '{}'`;
 }
 async function installClaudeHooks(port) {
-  const { mkdirSync: mkdirSync8, existsSync: existsSync25, readFileSync: readFileSync23, writeFileSync: writeFileSync18 } = await import("node:fs");
-  const { join: join27 } = await import("node:path");
-  const dir = join27(ROOT, ".claude");
-  if (!existsSync25(dir)) mkdirSync8(dir, { recursive: true });
-  const file2 = join27(dir, "settings.json");
+  const { mkdirSync: mkdirSync8, existsSync: existsSync26, readFileSync: readFileSync25, writeFileSync: writeFileSync20 } = await import("node:fs");
+  const { join: join29 } = await import("node:path");
+  const dir = join29(ROOT, ".claude");
+  if (!existsSync26(dir)) mkdirSync8(dir, { recursive: true });
+  const file2 = join29(dir, "settings.json");
   let settings = {};
-  if (existsSync25(file2)) {
+  if (existsSync26(file2)) {
     try {
-      settings = JSON.parse(readFileSync23(file2, "utf8"));
+      settings = JSON.parse(readFileSync25(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -57360,10 +58694,10 @@ async function installClaudeHooks(port) {
     dropErrata(list);
     list.push({ hooks: [{ type: "command", command: injectCmd }] });
   }
-  writeFileSync18(file2, JSON.stringify(settings, null, 2) + "\n", "utf8");
+  writeFileSync20(file2, JSON.stringify(settings, null, 2) + "\n", "utf8");
   console.log(`installed Claude Code hooks \u2192 ${file2}`);
   await installClaudeMcpConfig();
-  const claudeMd = join27(ROOT, "CLAUDE.md");
+  const claudeMd = join29(ROOT, "CLAUDE.md");
   const recall = writeManagedBlock(claudeMd, { body: RECALL_FIRST_BLOCK });
   if (recall.kind === "collision") {
     console.warn(
@@ -57375,15 +58709,15 @@ async function installClaudeHooks(port) {
   console.log(`  endpoint: http://127.0.0.1:${port}/api/hook`);
 }
 async function installClaudeMcpConfig() {
-  const { mkdirSync: mkdirSync8, existsSync: existsSync25, readFileSync: readFileSync23, writeFileSync: writeFileSync18 } = await import("node:fs");
-  const { join: join27, dirname: dirname10 } = await import("node:path");
-  const file2 = join27(ROOT, ".mcp.json");
-  const dir = dirname10(file2);
-  if (!existsSync25(dir)) mkdirSync8(dir, { recursive: true });
+  const { mkdirSync: mkdirSync8, existsSync: existsSync26, readFileSync: readFileSync25, writeFileSync: writeFileSync20 } = await import("node:fs");
+  const { join: join29, dirname: dirname11 } = await import("node:path");
+  const file2 = join29(ROOT, ".mcp.json");
+  const dir = dirname11(file2);
+  if (!existsSync26(dir)) mkdirSync8(dir, { recursive: true });
   let cfg = {};
-  if (existsSync25(file2)) {
+  if (existsSync26(file2)) {
     try {
-      cfg = JSON.parse(readFileSync23(file2, "utf8"));
+      cfg = JSON.parse(readFileSync25(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -57391,21 +58725,21 @@ async function installClaudeMcpConfig() {
   }
   cfg.mcpServers ??= {};
   cfg.mcpServers["errata"] = errataMcpInvocation();
-  writeFileSync18(file2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
+  writeFileSync20(file2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
   console.log(`installed Claude Code MCP server config \u2192 ${file2}`);
   console.log(`  Claude Code will spawn \`errata mcp\` on workspace open.`);
   console.log(`  Tools: errata.search / locate / neighbors / callers_of / what_uses / show / similar`);
 }
 async function installCursorMcpConfig() {
-  const { mkdirSync: mkdirSync8, existsSync: existsSync25, readFileSync: readFileSync23, writeFileSync: writeFileSync18 } = await import("node:fs");
-  const { join: join27 } = await import("node:path");
-  const dir = join27(ROOT, ".cursor");
-  if (!existsSync25(dir)) mkdirSync8(dir, { recursive: true });
-  const file2 = join27(dir, "mcp.json");
+  const { mkdirSync: mkdirSync8, existsSync: existsSync26, readFileSync: readFileSync25, writeFileSync: writeFileSync20 } = await import("node:fs");
+  const { join: join29 } = await import("node:path");
+  const dir = join29(ROOT, ".cursor");
+  if (!existsSync26(dir)) mkdirSync8(dir, { recursive: true });
+  const file2 = join29(dir, "mcp.json");
   let cfg = {};
-  if (existsSync25(file2)) {
+  if (existsSync26(file2)) {
     try {
-      cfg = JSON.parse(readFileSync23(file2, "utf8"));
+      cfg = JSON.parse(readFileSync25(file2, "utf8"));
     } catch {
       console.error(`refusing to overwrite invalid JSON at ${file2}`);
       process.exit(2);
@@ -57413,7 +58747,7 @@ async function installCursorMcpConfig() {
   }
   cfg.mcpServers ??= {};
   cfg.mcpServers["errata"] = errataMcpInvocation();
-  writeFileSync18(file2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
+  writeFileSync20(file2, JSON.stringify(cfg, null, 2) + "\n", "utf8");
   console.log(`installed Cursor MCP server config \u2192 ${file2}`);
   console.log(`  Cursor will spawn \`errata mcp\` on workspace open.`);
   console.log(`  Tools: errata.search / locate / neighbors / callers_of / what_uses`);
@@ -57421,16 +58755,16 @@ async function installCursorMcpConfig() {
   console.log(`  \u26A0\uFE0F  reload Cursor (Cmd/Ctrl-Shift-P \u2192 "Reload Window") to pick it up.`);
 }
 async function installCodexHooks(port) {
-  const { mkdirSync: mkdirSync8, existsSync: existsSync25, readFileSync: readFileSync23, writeFileSync: writeFileSync18 } = await import("node:fs");
-  const { join: join27 } = await import("node:path");
-  const dir = join27(ROOT, ".codex");
-  if (!existsSync25(dir)) mkdirSync8(dir, { recursive: true });
-  const file2 = join27(dir, "config.toml");
+  const { mkdirSync: mkdirSync8, existsSync: existsSync26, readFileSync: readFileSync25, writeFileSync: writeFileSync20 } = await import("node:fs");
+  const { join: join29 } = await import("node:path");
+  const dir = join29(ROOT, ".codex");
+  if (!existsSync26(dir)) mkdirSync8(dir, { recursive: true });
+  const file2 = join29(dir, "config.toml");
   const BEGIN = `# >>> errata hooks (errata-managed)`;
   const END = `# <<< errata hooks`;
   let existing = "";
-  if (existsSync25(file2)) {
-    existing = readFileSync23(file2, "utf8");
+  if (existsSync26(file2)) {
+    existing = readFileSync25(file2, "utf8");
     const beginIdx = existing.indexOf(BEGIN);
     const endIdx = existing.indexOf(END);
     if (beginIdx >= 0 && endIdx > beginIdx) {
@@ -57459,7 +58793,7 @@ ${END}
   const final = existing.length > 0 && !existing.endsWith("\n") ? `${existing}
 
 ${block}` : existing + (existing.endsWith("\n\n") ? "" : "\n") + block;
-  writeFileSync18(file2, final, "utf8");
+  writeFileSync20(file2, final, "utf8");
   console.log(`installed Codex hooks \u2192 ${file2}`);
   console.log(`  endpoint: http://127.0.0.1:${port}/api/hook`);
   console.log("");
@@ -57497,8 +58831,35 @@ async function cmdSync(arg) {
     try {
       const res = await fetch(`${lock.webUiUrl}/api/sync`, {
         method: "POST",
-        signal: AbortSignal.timeout(3e4)
+        signal: AbortSignal.timeout(15 * 6e4)
       });
+      if (res.status === 409) {
+        const body2 = await res.json().catch(() => null);
+        const ageMs = typeof body2?.ageMs === "number" ? body2.ageMs : 0;
+        const dur = ageMs >= 6e4 ? `${Math.floor(ageMs / 6e4)}m` : `${Math.max(1, Math.round(ageMs / 1e3))}s`;
+        const stage = body2?.stage ? ` \u2014 stage: ${body2.stage}` : "";
+        const units = typeof body2?.units === "number" ? body2.units : 0;
+        const items = typeof body2?.items === "number" ? body2.items : 0;
+        const chunks = typeof body2?.chunks === "number" ? body2.chunks : 0;
+        const stalledMs = typeof body2?.stalledMs === "number" ? body2.stalledMs : 0;
+        const where = body2?.detail ? ` [${body2.detail}]` : "";
+        const moved = chunks > 0 ? ` \xB7 ${chunks} chunk(s), ${items} shipped, ${units} accepted${where}` : "";
+        console.log(
+          ageMs > 0 ? `sync already running: the daemon has been draining for ${dur}${stage}${moved}. It will finish on its own; nothing new was started.` : "sync already running: the daemon is mid-drain \u2014 it will finish on its own. Nothing new was started."
+        );
+        if (stalledMs > 12e4 && chunks > 0) {
+          const stalledMin = Math.floor(stalledMs / 6e4);
+          console.log(
+            `  \u26A0 STALLED: ${chunks} chunk(s) shipped but nothing has moved for ${stalledMin}m \u2014 the lane is looping, not draining. Check \`errata status\` for the backlog depth and daemon.log for the failing lane.`
+          );
+        }
+        if (ageMs > 30 * 6e4) {
+          console.log(
+            "  \u26A0 this pass has run past 30 min \u2014 if daemon.log shows no upload progress it may be stranded (a sleep/resume can do this). Restart with: errata stop && errata start"
+          );
+        }
+        return;
+      }
       if (!res.ok) {
         const detail = await res.text().catch(() => "");
         console.error(`sync failed: daemon at ${lock.webUiUrl} returned ${res.status}${detail ? ` \u2014 ${detail}` : ""}`);
@@ -57509,7 +58870,7 @@ async function cmdSync(arg) {
     } catch (err2) {
       const timedOut = err2 instanceof Error && err2.name === "TimeoutError";
       console.error(
-        timedOut ? `sync failed: the running daemon at ${lock.webUiUrl} didn't respond within 30s \u2014 it may be mid-reindex. Retry shortly.` : `sync failed: could not reach the running daemon at ${lock.webUiUrl} (${err2 instanceof Error ? err2.message : err2})`
+        timedOut ? `sync gave up waiting after 15 min \u2014 the daemon's pass may STILL be running (aborting this request does not cancel it). Check daemon.log before retrying; a retry while it runs answers 409.` : `sync failed: could not reach the running daemon at ${lock.webUiUrl} (${err2 instanceof Error ? err2.message : err2})`
       );
       process.exit(1);
     }
@@ -57572,7 +58933,19 @@ async function cmdConsent(args2) {
     console.log("  note: run `errata login` to actually upload (no cloud credential yet).");
   }
 }
+function installLogTimestamps() {
+  const ISO_AT_START = /^\[?\d{4}-\d{2}-\d{2}T\d{2}:\d{2}:\d{2}/;
+  for (const level of ["log", "warn", "error"]) {
+    const original = console[level].bind(console);
+    console[level] = (...args2) => {
+      const first = args2[0];
+      if (typeof first === "string" && ISO_AT_START.test(first)) return original(...args2);
+      original(`[${(/* @__PURE__ */ new Date()).toISOString()}]`, ...args2);
+    };
+  }
+}
 async function cmdDash(args2) {
+  installLogTimestamps();
   const portIdx = args2.indexOf("--port");
   const port = portIdx >= 0 && args2[portIdx + 1] ? Number(args2[portIdx + 1]) : 7891;
   const reindexOnStart = !args2.includes("--no-reindex");
@@ -57734,7 +59107,7 @@ async function cmdDash(args2) {
       await yieldToLoop2();
       try {
         const items = selectDurableMemory(handle2.sharedStore, r.engine.profile);
-        const res = bleedRules(join26(r.root, ".claude", "rules"), items);
+        const res = bleedRules(join28(r.root, ".claude", "rules"), items);
         if (res.written || res.pruned) {
           console.log(
             `[rules:${r.entry.name}] ${res.written} collective principle(s) \u2192 .claude/rules` + (res.pruned ? `, ${res.pruned} pruned` : "")