@launchsecure/launch-kit 0.0.5 → 0.0.7

package/dist/server/graph-mcp-entry.js

@@ -29,17 +29,39 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
   isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
   mod
 ));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
 
 // src/server/lockfile.ts
-function lockDir() {
+function lockDir(projectRoot) {
+  if (projectRoot) {
+    return (0, import_node_path.join)(projectRoot, ".launchsecure");
+  }
   return (0, import_node_path.join)((0, import_node_os.homedir)(), ".launchsecure");
 }
-function lockPath() {
-  return (0, import_node_path.join)(lockDir(), "launch-chart.lock");
+function lockPath(projectRoot) {
+  return (0, import_node_path.join)(lockDir(projectRoot), "launch-chart.lock");
+}
+function setProjectRoot(root) {
+  _activeProjectRoot = root;
 }
-function readLock() {
-  const p = lockPath();
-  if (!(0, import_node_fs.existsSync)(p)) return null;
+function readLock(projectRoot) {
+  const root = projectRoot ?? _activeProjectRoot;
+  const p = lockPath(root);
+  if (!(0, import_node_fs.existsSync)(p)) {
+    if (root) {
+      const globalP = lockPath();
+      if ((0, import_node_fs.existsSync)(globalP)) {
+        try {
+          const data = JSON.parse((0, import_node_fs.readFileSync)(globalP, "utf-8"));
+          if (typeof data.pid === "number" && typeof data.port === "number" && data.cwd === root) {
+            return data;
+          }
+        } catch {
+        }
+      }
+    }
+    return null;
+  }
   try {
     const data = JSON.parse((0, import_node_fs.readFileSync)(p, "utf-8"));
     if (typeof data.pid !== "number" || typeof data.port !== "number") return null;
@@ -70,31 +92,35 @@ function getListenerPid(port) {
     return null;
   }
 }
-function getLiveLock() {
-  const lock = readLock();
+function getLiveLock(projectRoot) {
+  const root = projectRoot ?? _activeProjectRoot;
+  const lock = readLock(root);
   if (!lock) return null;
   const listenerPid = getListenerPid(lock.port);
   const live = listenerPid !== null ? listenerPid === lock.pid : isPidAlive(lock.pid);
   if (!live) {
     try {
-      (0, import_node_fs.unlinkSync)(lockPath());
+      (0, import_node_fs.unlinkSync)(lockPath(root));
     } catch {
     }
     return null;
   }
   return lock;
 }
-function writeLock(data) {
-  (0, import_node_fs.mkdirSync)(lockDir(), { recursive: true });
-  (0, import_node_fs.writeFileSync)(lockPath(), JSON.stringify(data, null, 2) + "\n", "utf-8");
+function writeLock(data, projectRoot) {
+  const root = projectRoot ?? _activeProjectRoot;
+  (0, import_node_fs.mkdirSync)(lockDir(root), { recursive: true });
+  (0, import_node_fs.writeFileSync)(lockPath(root), JSON.stringify(data, null, 2) + "\n", "utf-8");
+  if (root) _activeProjectRoot = root;
 }
-function clearLock() {
+function clearLock(projectRoot) {
+  const root = projectRoot ?? _activeProjectRoot;
   try {
-    (0, import_node_fs.unlinkSync)(lockPath());
+    (0, import_node_fs.unlinkSync)(lockPath(root));
   } catch {
   }
 }
-var import_node_child_process, import_node_fs, import_node_os, import_node_path;
+var import_node_child_process, import_node_fs, import_node_os, import_node_path, _activeProjectRoot;
 var init_lockfile = __esm({
   "src/server/lockfile.ts"() {
     "use strict";
@@ -106,6 +132,10 @@ var init_lockfile = __esm({
 });
 
 // src/server/graph/core/config.ts
+var config_exports = {};
+__export(config_exports, {
+  loadConfig: () => loadConfig
+});
 function loadConfig(rootDir) {
   const configPath = (0, import_node_path2.join)(rootDir, CONFIG_FILENAME);
   if (!(0, import_node_fs2.existsSync)(configPath)) return {};
@@ -586,34 +616,6 @@ function classifyType(id) {
   if (id.startsWith("lib/") || id.startsWith("config/")) return "lib";
   return "component";
 }
-function classifyModule(id) {
-  if (/app\/\(auth\)\//.test(id)) return "auth";
-  if (/app\/\(admin\)\//.test(id)) return "admin";
-  if (/app\/\(settings\)\//.test(id)) return "settings";
-  if (/app\/\(app\)\/\[orgSlug\]\/\(project-pages\)\//.test(id)) return "project";
-  if (/app\/\(app\)\/\[orgSlug\]\/\(org-pages\)\//.test(id)) return "org";
-  if (/app\/\(app\)\/\[orgSlug\]\//.test(id)) return "org";
-  if (id.startsWith("app/integrations/")) return "integrations";
-  if (id.startsWith("app/docs/")) return "admin";
-  if (id.startsWith("client/components/ui/")) return "shared-ui";
-  if (id.startsWith("client/components/layout/") || /client\/lib\/navigation/.test(id)) return "layout";
-  if (/client\/components\/auth\//.test(id) || /client\/lib\/auth-/.test(id) || /client\/lib\/github-oauth/.test(id) || /client\/lib\/permission-service/.test(id) || /client\/hooks\/use-permissions/.test(id)) return "auth";
-  if (/client\/components\/prd-/.test(id) || /client\/hooks\/use-admin/.test(id)) return "admin";
-  if (/client\/components\/org-/.test(id) || /client\/hooks\/use-org-/.test(id) || /client\/hooks\/use-provider-def/.test(id)) return "org";
-  if (/client\/components\/project/.test(id) || /client\/hooks\/use-project-/.test(id) || /client\/hooks\/use-pipeline/.test(id) || /client\/hooks\/use-databases/.test(id) || /client\/hooks\/use-provider-env/.test(id) || /client\/hooks\/use-role-assign/.test(id) || /client\/components\/pipeline/.test(id) || /client\/components\/deployments/.test(id)) return "project";
-  if (/client\/hooks\/use-(profile|sessions|organizations|notification)/.test(id)) return "settings";
-  if (id.startsWith("server/auth/")) return "auth";
-  if (id.startsWith("server/mcp/")) return "mcp";
-  if (id.startsWith("server/lib/")) return "server-lib";
-  if (id.startsWith("server/middleware")) return "middleware";
-  if (id.startsWith("server/services/")) return "services";
-  if (id.startsWith("server/db")) return "db";
-  if (id.startsWith("server/errors")) return "errors";
-  if (id.startsWith("server/")) return "server-lib";
-  if (id.startsWith("config/")) return "config";
-  if (id.startsWith("lib/")) return "lib";
-  return "root";
-}
 function extractRoute(id) {
   if (!id.endsWith("/page.tsx")) return null;
   let route = id.replace(/^app\//, "/").replace(/\/page\.tsx$/, "");
@@ -834,8 +836,7 @@ function generate(rootDir) {
     const parsed = parsedByPath.get(absPath);
     const name = parsed.name || nameFromFilename(absPath);
     const route = extractRoute(id);
-    const module_ = classifyModule(id);
-    nodes.push({ id, type, name, route, module: module_, exports: parsed.exports });
+    nodes.push({ id, type, name, route, exports: parsed.exports });
     nodeIdSet.add(id);
     nodeTypeMap.set(id, type);
     if (route) routeToNodeId.set(route, id);
@@ -939,7 +940,6 @@ function generate(rootDir) {
       type: "external",
       name: parsed.name || nameFromFilename(absPath),
       route: null,
-      module: "external",
       exports: parsed.exports
     });
     nodeIdSet.add(externalId);
@@ -2031,29 +2031,443 @@ var init_graph_builder = __esm({
   }
 });
 
+// src/server/graph/taggers/module-tagger.ts
+function matchGlob(pattern, id) {
+  const patParts = pattern.split("/");
+  const idParts = id.split("/");
+  return matchParts(patParts, 0, idParts, 0);
+}
+function matchParts(pat, pi, id, ii) {
+  while (pi < pat.length && ii < id.length) {
+    const p = pat[pi];
+    if (p === "**") {
+      for (let skip = ii; skip <= id.length; skip++) {
+        if (matchParts(pat, pi + 1, id, skip)) return true;
+      }
+      return false;
+    }
+    if (p === "*") {
+      pi++;
+      ii++;
+      continue;
+    }
+    if (p !== id[ii]) return false;
+    pi++;
+    ii++;
+  }
+  while (pi < pat.length && pat[pi] === "**") pi++;
+  return pi === pat.length && ii === id.length;
+}
+function detectConventionDirs(rootDir) {
+  const result = /* @__PURE__ */ new Map();
+  const searchDirs = [
+    rootDir,
+    (0, import_node_path11.join)(rootDir, "src"),
+    (0, import_node_path11.join)(rootDir, "app"),
+    (0, import_node_path11.join)(rootDir, "lib")
+  ];
+  for (const base of searchDirs) {
+    for (const convention of CONVENTION_DIRS) {
+      const dir = (0, import_node_path11.join)(base, convention);
+      if (!(0, import_node_fs10.existsSync)(dir)) continue;
+      try {
+        const stat = (0, import_node_fs10.statSync)(dir);
+        if (!stat.isDirectory()) continue;
+        const entries = (0, import_node_fs10.readdirSync)(dir, { withFileTypes: true }).filter((e) => e.isDirectory() && !e.name.startsWith(".")).map((e) => e.name);
+        if (entries.length > 0) {
+          const relPath = dir.replace(rootDir + "/", "").replace(rootDir + "\\", "");
+          result.set(relPath, entries);
+        }
+      } catch {
+      }
+    }
+  }
+  return result;
+}
+function extractRouteGroups(id) {
+  const groups = [];
+  const re = /\(([^)]+)\)/g;
+  let m;
+  while ((m = re.exec(id)) !== null) {
+    groups.push(m[1]);
+  }
+  return groups;
+}
+function isRouteGroup(segment) {
+  return segment.startsWith("(") && segment.endsWith(")");
+}
+function isDynamicSegment(segment) {
+  return segment.startsWith("[") || segment.startsWith(":");
+}
+function isDomainDir(segment) {
+  return segment.includes(".") && !segment.endsWith(".tsx") && !segment.endsWith(".ts") && !segment.endsWith(".js") && !segment.endsWith(".jsx") && !segment.endsWith(".vue");
+}
+function isTrivialGroup(name, extraTrivial) {
+  if (TRIVIAL_GROUPS.has(name)) return true;
+  if (extraTrivial?.has(name)) return true;
+  const lower = name.toLowerCase();
+  const wrapperPatterns = [
+    /^.*-?wrapper$/,
+    // "page-wrapper", "use-page-wrapper"
+    /^.*-?layout$/,
+    // "admin-layout", "settings-layout"
+    /^use-/,
+    // "use-page-wrapper"
+    /^default$/
+  ];
+  return wrapperPatterns.some((p) => p.test(lower));
+}
+function normalizeGroupName(name) {
+  return name.replace(/-pages?$/, "").replace(/-layout$/, "").replace(/-wrapper$/, "");
+}
+function extractModuleFromPath(id, extraTrivial) {
+  const segments = id.split("/");
+  const routeGroups = extractRouteGroups(id);
+  const moduleGroups = routeGroups.filter((g) => !isTrivialGroup(g, extraTrivial)).map(normalizeGroupName);
+  if (moduleGroups.length > 0) {
+    return moduleGroups[moduleGroups.length - 1];
+  }
+  const meaningful = [];
+  for (const seg of segments) {
+    if (seg.includes(".")) continue;
+    if (isRouteGroup(seg)) continue;
+    if (isDynamicSegment(seg)) continue;
+    if (isDomainDir(seg)) continue;
+    if (SKIP_SEGMENTS.has(seg)) continue;
+    meaningful.push(seg);
+  }
+  if (meaningful.length > 0) {
+    return meaningful[0];
+  }
+  return "root";
+}
+var import_node_fs10, import_node_path11, CONVENTION_DIRS, SKIP_SEGMENTS, TRIVIAL_GROUPS, cachedRootDir, cachedConventionDirs, moduleTagger;
+var init_module_tagger = __esm({
+  "src/server/graph/taggers/module-tagger.ts"() {
+    "use strict";
+    import_node_fs10 = require("node:fs");
+    import_node_path11 = require("node:path");
+    CONVENTION_DIRS = ["features", "modules", "domains", "areas"];
+    SKIP_SEGMENTS = /* @__PURE__ */ new Set([
+      "src",
+      "app",
+      "client",
+      "server",
+      "lib",
+      "config"
+    ]);
+    TRIVIAL_GROUPS = /* @__PURE__ */ new Set([
+      // Generic app wrappers
+      "app",
+      "all",
+      "ee",
+      "home",
+      "root",
+      "main",
+      "site",
+      // Auth/access boundary wrappers — protect routes, not feature modules
+      "protected",
+      "authenticated",
+      "authed",
+      "private",
+      "public",
+      "logged-in",
+      "logged-out",
+      "unprotected",
+      "unauthenticated",
+      "auth-required",
+      "no-auth",
+      "guest-only"
+    ]);
+    cachedRootDir = null;
+    cachedConventionDirs = /* @__PURE__ */ new Map();
+    moduleTagger = {
+      id: "module",
+      tagKey: "module",
+      trackUntagged: true,
+      layers: null,
+      // applies to all layers
+      tag(nodes, layer, rootDir) {
+        if (cachedRootDir !== rootDir) {
+          cachedConventionDirs = detectConventionDirs(rootDir);
+          cachedRootDir = rootDir;
+        }
+        let configRules = [];
+        let extraTrivial;
+        try {
+          const { loadConfig: loadConfig2 } = (init_config(), __toCommonJS(config_exports));
+          const config = loadConfig2(rootDir);
+          configRules = config.taggers?.module?.rules ?? [];
+          const trivialFromConfig = config.taggers?.module?.trivialGroups;
+          if (trivialFromConfig?.length) {
+            extraTrivial = new Set(trivialFromConfig);
+          }
+        } catch {
+        }
+        const result = /* @__PURE__ */ new Map();
+        for (const node of nodes) {
+          const id = node.id;
+          let matched = false;
+          for (const rule of configRules) {
+            if (matchGlob(rule.match, id)) {
+              result.set(id, rule.module);
+              matched = true;
+              break;
+            }
+          }
+          if (matched) continue;
+          matched = false;
+          for (const [convDir, moduleNames] of cachedConventionDirs) {
+            if (id.startsWith(convDir + "/")) {
+              const rest = id.slice(convDir.length + 1);
+              const firstSeg = rest.split("/")[0];
+              if (moduleNames.includes(firstSeg)) {
+                result.set(id, firstSeg);
+                matched = true;
+                break;
+              }
+            }
+          }
+          if (matched) continue;
+          const module2 = extractModuleFromPath(id, extraTrivial);
+          result.set(id, module2);
+        }
+        return result;
+      }
+    };
+  }
+});
+
+// src/server/graph/taggers/screen-tagger.ts
+var SCREEN_TYPES, screenTagger;
+var init_screen_tagger = __esm({
+  "src/server/graph/taggers/screen-tagger.ts"() {
+    "use strict";
+    SCREEN_TYPES = /* @__PURE__ */ new Set(["page", "layout"]);
+    screenTagger = {
+      id: "screen",
+      tagKey: "screen",
+      trackUntagged: true,
+      layers: ["ui"],
+      tag(nodes, layer) {
+        if (layer !== "ui") return /* @__PURE__ */ new Map();
+        const result = /* @__PURE__ */ new Map();
+        for (const node of nodes) {
+          if (SCREEN_TYPES.has(node.type)) {
+            result.set(node.id, "true");
+          }
+        }
+        return result;
+      }
+    };
+  }
+});
+
+// src/server/graph/core/tagger-registry.ts
+function registerBuiltins2(registry, disabled, config) {
+  for (const tagger of BUILTIN_TAGGERS) {
+    if (disabled.has(tagger.id)) continue;
+    const override = config.taggers?.trackUntagged?.[tagger.id];
+    if (override !== void 0) {
+      tagger.trackUntagged = override;
+    }
+    registry.register(tagger);
+  }
+}
+function loadCustomTaggers(registry, config, rootDir, disabled) {
+  for (const entry of config.taggers?.custom ?? []) {
+    if (disabled.has(entry.id)) continue;
+    try {
+      const absPath = (0, import_node_path12.resolve)(rootDir, entry.path);
+      const mod = require(absPath);
+      const tagger = "default" in mod ? mod.default : mod;
+      const override = config.taggers?.trackUntagged?.[tagger.id];
+      if (override !== void 0) {
+        tagger.trackUntagged = override;
+      }
+      registry.register(tagger);
+    } catch (err2) {
+      process.stderr.write(`[launch-chart] failed to load custom tagger from ${entry.path}: ${err2}
+`);
+    }
+  }
+}
+function createTaggerRegistry(config, rootDir) {
+  const registry = new TaggerRegistry();
+  const disabled = new Set(config.taggers?.disabled ?? []);
+  registerBuiltins2(registry, disabled, config);
+  loadCustomTaggers(registry, config, rootDir, disabled);
+  return registry;
+}
+var import_node_path12, TaggerRegistry, BUILTIN_TAGGERS;
+var init_tagger_registry = __esm({
+  "src/server/graph/core/tagger-registry.ts"() {
+    "use strict";
+    import_node_path12 = require("node:path");
+    init_module_tagger();
+    init_screen_tagger();
+    TaggerRegistry = class {
+      constructor() {
+        this.taggers = [];
+        this.ids = /* @__PURE__ */ new Set();
+      }
+      register(tagger) {
+        if (this.ids.has(tagger.id)) {
+          throw new Error(`Duplicate tagger id: ${tagger.id}`);
+        }
+        this.ids.add(tagger.id);
+        this.taggers.push(tagger);
+      }
+      getAll() {
+        return this.taggers;
+      }
+      getForLayer(layer) {
+        return this.taggers.filter((t) => t.layers === null || t.layers.includes(layer));
+      }
+    };
+    BUILTIN_TAGGERS = [moduleTagger, screenTagger];
+  }
+});
+
+// src/server/graph/core/tag-store.ts
+function tagsFilePath(rootDir) {
+  return (0, import_node_path13.join)(rootDir, GRAPHS_DIR, TAGS_FILENAME);
+}
+function readTagStore(rootDir) {
+  const filePath = tagsFilePath(rootDir);
+  if (!(0, import_node_fs11.existsSync)(filePath)) return {};
+  const stat = (0, import_node_fs11.statSync)(filePath);
+  const cached = tagCache.get(filePath);
+  if (cached && cached.mtimeMs === stat.mtimeMs) {
+    return cached.store;
+  }
+  try {
+    const content = (0, import_node_fs11.readFileSync)(filePath, "utf-8");
+    const store = JSON.parse(content);
+    tagCache.set(filePath, { mtimeMs: stat.mtimeMs, store });
+    return store;
+  } catch {
+    return {};
+  }
+}
+function writeTagStore(rootDir, store) {
+  const filePath = tagsFilePath(rootDir);
+  const dir = (0, import_node_path13.dirname)(filePath);
+  (0, import_node_fs11.mkdirSync)(dir, { recursive: true });
+  const cleaned = {};
+  for (const [nodeId, tags] of Object.entries(store)) {
+    if (Object.keys(tags).length > 0) {
+      cleaned[nodeId] = tags;
+    }
+  }
+  (0, import_node_fs11.writeFileSync)(filePath, JSON.stringify(cleaned, null, 2) + "\n", "utf-8");
+  tagCache.delete(filePath);
+}
+function setTag(rootDir, nodeId, key, value) {
+  const store = readTagStore(rootDir);
+  if (!store[nodeId]) store[nodeId] = {};
+  store[nodeId][key] = value;
+  writeTagStore(rootDir, store);
+}
+function removeTag(rootDir, nodeId, key) {
+  const store = readTagStore(rootDir);
+  if (!store[nodeId]) return;
+  delete store[nodeId][key];
+  if (Object.keys(store[nodeId]).length === 0) {
+    delete store[nodeId];
+  }
+  writeTagStore(rootDir, store);
+}
+var import_node_fs11, import_node_path13, TAGS_FILENAME, GRAPHS_DIR, tagCache;
+var init_tag_store = __esm({
+  "src/server/graph/core/tag-store.ts"() {
+    "use strict";
+    import_node_fs11 = require("node:fs");
+    import_node_path13 = require("node:path");
+    TAGS_FILENAME = "tags.json";
+    GRAPHS_DIR = ".launchsecure/graphs";
+    tagCache = /* @__PURE__ */ new Map();
+  }
+});
+
 // src/server/graph/index.ts
 function graphsDir(rootDir) {
-  return (0, import_node_path11.join)(rootDir, GRAPHS_DIR);
+  return (0, import_node_path14.join)(rootDir, GRAPHS_DIR2);
 }
 function graphFilePath(rootDir, layer) {
-  return (0, import_node_path11.join)(graphsDir(rootDir), `${layer}.json`);
+  return (0, import_node_path14.join)(graphsDir(rootDir), `${layer}.json`);
+}
+function tagsFilePath2(rootDir) {
+  return (0, import_node_path14.join)(graphsDir(rootDir), "tags.json");
+}
+function getMtimeMs(filePath) {
+  if (!(0, import_node_fs12.existsSync)(filePath)) return 0;
+  return (0, import_node_fs12.statSync)(filePath).mtimeMs;
 }
 function invalidateCache(filePath) {
   graphCache.delete(filePath);
 }
-function readGraph(rootDir, layer) {
+function invalidateTaggedCache(rootDir, layer) {
+  taggedCache.delete(`${rootDir}:${layer}`);
+}
+function applyTags(graph, layer, rootDir) {
+  const config = loadConfig(rootDir);
+  const registry = createTaggerRegistry(config, rootDir);
+  const manualTags = readTagStore(rootDir);
+  const taggedNodes = graph.nodes.map((n) => ({ ...n }));
+  const taggers = registry.getForLayer(layer);
+  for (const tagger of taggers) {
+    const assignments = tagger.tag(taggedNodes, layer, rootDir);
+    for (const node of taggedNodes) {
+      if (!node.tags) node.tags = {};
+      const tags = node.tags;
+      const value = assignments.get(node.id);
+      if (value !== void 0) {
+        tags[tagger.tagKey] = value;
+      } else if (tagger.trackUntagged) {
+        tags[tagger.tagKey] = "untagged";
+      }
+    }
+  }
+  for (const node of taggedNodes) {
+    const manual = manualTags[node.id];
+    if (manual) {
+      if (!node.tags) node.tags = {};
+      const tags = node.tags;
+      Object.assign(tags, manual);
+    }
+  }
+  return { ...graph, nodes: taggedNodes };
+}
+function readGraphRaw(rootDir, layer) {
   const filePath = graphFilePath(rootDir, layer);
-  if (!(0, import_node_fs10.existsSync)(filePath)) return null;
-  const stat = (0, import_node_fs10.statSync)(filePath);
+  if (!(0, import_node_fs12.existsSync)(filePath)) return null;
+  const stat = (0, import_node_fs12.statSync)(filePath);
   const cached = graphCache.get(filePath);
   if (cached && cached.mtimeMs === stat.mtimeMs) {
     return cached.graph;
   }
-  const content = (0, import_node_fs10.readFileSync)(filePath, "utf-8");
+  const content = (0, import_node_fs12.readFileSync)(filePath, "utf-8");
   const graph = JSON.parse(content);
   graphCache.set(filePath, { mtimeMs: stat.mtimeMs, graph });
   return graph;
 }
+function readGraph(rootDir, layer) {
+  const rawFilePath = graphFilePath(rootDir, layer);
+  if (!(0, import_node_fs12.existsSync)(rawFilePath)) return null;
+  const rawMtime = getMtimeMs(rawFilePath);
+  const tagsMtime = getMtimeMs(tagsFilePath2(rootDir));
+  const cacheKey = `${rootDir}:${layer}`;
+  const cached = taggedCache.get(cacheKey);
+  if (cached && cached.rawMtimeMs === rawMtime && cached.tagsMtimeMs === tagsMtime) {
+    return cached.graph;
+  }
+  const raw = readGraphRaw(rootDir, layer);
+  if (!raw) return null;
+  const tagged = applyTags(raw, layer, rootDir);
+  taggedCache.set(cacheKey, { rawMtimeMs: rawMtime, tagsMtimeMs: tagsMtime, graph: tagged });
+  return tagged;
+}
 function readAllGraphs(rootDir) {
   const result = {};
   for (const layer of LAYERS) {
@@ -2064,25 +2478,31 @@ function readAllGraphs(rootDir) {
 }
 function generateGraph(rootDir, layer) {
   const dir = graphsDir(rootDir);
-  (0, import_node_fs10.mkdirSync)(dir, { recursive: true });
+  (0, import_node_fs12.mkdirSync)(dir, { recursive: true });
   const results = layer ? [generateLayer(rootDir, layer)].filter((r) => r !== null) : generateAll(rootDir);
   for (const result of results) {
     const filePath = graphFilePath(rootDir, result.layer);
-    (0, import_node_fs10.writeFileSync)(filePath, JSON.stringify(result.output, null, 2) + "\n", "utf-8");
+    (0, import_node_fs12.writeFileSync)(filePath, JSON.stringify(result.output, null, 2) + "\n", "utf-8");
     invalidateCache(filePath);
+    invalidateTaggedCache(rootDir, result.layer);
   }
   return results;
 }
-var import_node_fs10, import_node_path11, GRAPHS_DIR, LAYERS, graphCache;
+var import_node_fs12, import_node_path14, GRAPHS_DIR2, LAYERS, graphCache, taggedCache;
 var init_graph = __esm({
   "src/server/graph/index.ts"() {
     "use strict";
-    import_node_fs10 = require("node:fs");
-    import_node_path11 = require("node:path");
+    import_node_fs12 = require("node:fs");
+    import_node_path14 = require("node:path");
     init_graph_builder();
-    GRAPHS_DIR = ".launchsecure/graphs";
+    init_config();
+    init_tagger_registry();
+    init_tag_store();
+    init_tag_store();
+    GRAPHS_DIR2 = ".launchsecure/graphs";
     LAYERS = ["ui", "api", "db"];
     graphCache = /* @__PURE__ */ new Map();
+    taggedCache = /* @__PURE__ */ new Map();
   }
 });
 
@@ -2092,19 +2512,22 @@ __export(chart_serve_exports, {
   runServeCli: () => runServeCli,
   startChartServer: () => startChartServer
 });
-function findProjectRoot2(startDir) {
+function randomPort() {
+  return 49152 + Math.floor(Math.random() * (65535 - 49152));
+}
+function findProjectRoot(startDir) {
   let dir = startDir;
   for (let i = 0; i < 8; i++) {
-    const graphsDir2 = import_node_path12.default.join(dir, ".launchsecure", "graphs");
-    if (import_node_fs11.default.existsSync(import_node_path12.default.join(graphsDir2, "ui.json")) || import_node_fs11.default.existsSync(import_node_path12.default.join(graphsDir2, "api.json")) || import_node_fs11.default.existsSync(import_node_path12.default.join(graphsDir2, "db.json"))) return dir;
-    const parent = import_node_path12.default.dirname(dir);
+    const graphsDir2 = import_node_path15.default.join(dir, ".launchsecure", "graphs");
+    if (import_node_fs13.default.existsSync(import_node_path15.default.join(graphsDir2, "ui.json")) || import_node_fs13.default.existsSync(import_node_path15.default.join(graphsDir2, "api.json")) || import_node_fs13.default.existsSync(import_node_path15.default.join(graphsDir2, "db.json"))) return dir;
+    const parent = import_node_path15.default.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
   dir = startDir;
   for (let i = 0; i < 8; i++) {
-    if (import_node_fs11.default.existsSync(import_node_path12.default.join(dir, ".git"))) return dir;
-    const parent = import_node_path12.default.dirname(dir);
+    if (import_node_fs13.default.existsSync(import_node_path15.default.join(dir, ".git"))) return dir;
+    const parent = import_node_path15.default.dirname(dir);
     if (parent === dir) break;
     dir = parent;
   }
@@ -2156,16 +2579,16 @@ function buildMergedGraph(projectRoot) {
   };
 }
 function serveStatic(res, filePath) {
-  if (!import_node_fs11.default.existsSync(filePath) || !import_node_fs11.default.statSync(filePath).isFile()) return false;
-  const ext = import_node_path12.default.extname(filePath).toLowerCase();
+  if (!import_node_fs13.default.existsSync(filePath) || !import_node_fs13.default.statSync(filePath).isFile()) return false;
+  const ext = import_node_path15.default.extname(filePath).toLowerCase();
   const mime = MIME_TYPES[ext] ?? "application/octet-stream";
   res.writeHead(200, { "Content-Type": mime, "Cache-Control": "no-cache" });
-  import_node_fs11.default.createReadStream(filePath).pipe(res);
+  import_node_fs13.default.createReadStream(filePath).pipe(res);
   return true;
 }
 function serveIndex(res, clientDir) {
-  const indexPath = import_node_path12.default.join(clientDir, "index.html");
-  if (!import_node_fs11.default.existsSync(indexPath)) {
+  const indexPath = import_node_path15.default.join(clientDir, "index.html");
+  if (!import_node_fs13.default.existsSync(indexPath)) {
     res.writeHead(500, { "Content-Type": "text/plain" });
     res.end(`LaunchChart client bundle not found at ${clientDir}. Run 'npm run build:chart-client'.`);
     return;
@@ -2173,14 +2596,14 @@ function serveIndex(res, clientDir) {
   serveStatic(res, indexPath);
 }
 function tryListen(server, port) {
-  return new Promise((resolve2, reject) => {
+  return new Promise((resolve3, reject) => {
     const onError = (err2) => {
       server.off("listening", onListening);
       reject(err2);
     };
     const onListening = () => {
       server.off("error", onError);
-      resolve2(port);
+      resolve3(port);
     };
     server.once("error", onError);
     server.once("listening", onListening);
@@ -2206,8 +2629,8 @@ async function bindWithFallback(server, startPort) {
 }
 async function startChartServer(opts = {}) {
   const cwd = opts.cwd ?? process.cwd();
-  const projectRoot = findProjectRoot2(cwd);
-  const existing = getLiveLock();
+  const projectRoot = findProjectRoot(cwd);
+  const existing = getLiveLock(projectRoot);
   if (existing) {
     if (!opts.quiet) {
       process.stderr.write(
@@ -2217,7 +2640,7 @@ async function startChartServer(opts = {}) {
     }
     return { port: existing.port, url: existing.url };
   }
-  const clientDir = opts.clientDir ?? import_node_path12.default.join(__dirname, "..", "chart-client");
+  const clientDir = opts.clientDir ?? import_node_path15.default.join(__dirname, "..", "chart-client");
   const server = import_node_http.default.createServer((req, res) => {
     try {
       const url2 = new URL(req.url ?? "/", `http://${req.headers.host}`);
@@ -2255,6 +2678,26 @@ async function startChartServer(opts = {}) {
         }
         return;
       }
+      if (req.method === "GET" && url2.pathname === "/api/file-content") {
+        const relPath = url2.searchParams.get("path");
+        if (!relPath || relPath.includes("..") || import_node_path15.default.isAbsolute(relPath)) {
+          res.writeHead(400, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ error: "Invalid path" }));
+          return;
+        }
+        const filePath = import_node_path15.default.join(projectRoot, relPath);
+        if (!filePath.startsWith(projectRoot) || !import_node_fs13.default.existsSync(filePath) || !import_node_fs13.default.statSync(filePath).isFile()) {
+          res.writeHead(404, { "Content-Type": "application/json" });
+          res.end(JSON.stringify({ error: "File not found" }));
+          return;
+        }
+        const ext = import_node_path15.default.extname(filePath).toLowerCase();
+        const langMap = { ".ts": "typescript", ".tsx": "tsx", ".js": "javascript", ".jsx": "jsx", ".prisma": "prisma", ".json": "json", ".css": "css" };
+        const content = import_node_fs13.default.readFileSync(filePath, "utf-8");
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ content, language: langMap[ext] ?? "text", path: relPath }));
+        return;
+      }
       if (req.method === "GET" && url2.pathname === "/api/health") {
         res.writeHead(200, { "Content-Type": "application/json" });
         res.end(JSON.stringify({ ok: true, projectRoot }));
@@ -2284,8 +2727,94 @@ async function startChartServer(opts = {}) {
         req.on("end", () => {
           try {
             const newConfig = JSON.parse(body);
-            const configPath = import_node_path12.default.join(projectRoot, ".launchchart.json");
-            import_node_fs11.default.writeFileSync(configPath, JSON.stringify(newConfig, null, 2) + "\n", "utf-8");
+            const configPath = import_node_path15.default.join(projectRoot, ".launchchart.json");
+            import_node_fs13.default.writeFileSync(configPath, JSON.stringify(newConfig, null, 2) + "\n", "utf-8");
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: true }));
+          } catch (err2) {
+            res.writeHead(400, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: false, error: String(err2) }));
+          }
+        });
+        return;
+      }
+      if (req.method === "GET" && url2.pathname === "/api/tagger-config") {
+        const config = loadConfig(projectRoot);
+        const builtinTaggers = [
+          { id: "module", tagKey: "module", trackUntagged: config.taggers?.trackUntagged?.module ?? true },
+          { id: "screen", tagKey: "screen", trackUntagged: config.taggers?.trackUntagged?.screen ?? true }
+        ];
+        const disabled = config.taggers?.disabled ?? [];
+        const customTaggers = config.taggers?.custom ?? [];
+        const moduleRules = config.taggers?.module?.rules ?? [];
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify({ builtinTaggers, disabled, customTaggers, moduleRules }));
+        return;
+      }
+      if (req.method === "POST" && url2.pathname === "/api/tagger-config") {
+        let body = "";
+        req.on("data", (chunk) => {
+          body += chunk.toString();
+        });
+        req.on("end", () => {
+          try {
+            const taggerConfig = JSON.parse(body);
+            const config = loadConfig(projectRoot);
+            config.taggers = taggerConfig;
+            const configPath = import_node_path15.default.join(projectRoot, ".launchchart.json");
+            import_node_fs13.default.writeFileSync(configPath, JSON.stringify(config, null, 2) + "\n", "utf-8");
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: true }));
+          } catch (err2) {
+            res.writeHead(400, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: false, error: String(err2) }));
+          }
+        });
+        return;
+      }
+      if (req.method === "GET" && url2.pathname === "/api/tags") {
+        const store = readTagStore(projectRoot);
+        res.writeHead(200, { "Content-Type": "application/json" });
+        res.end(JSON.stringify(store));
+        return;
+      }
+      if (req.method === "POST" && url2.pathname === "/api/tags") {
+        let body = "";
+        req.on("data", (chunk) => {
+          body += chunk.toString();
+        });
+        req.on("end", () => {
+          try {
+            const { nodeId, key, value } = JSON.parse(body);
+            if (!nodeId || !key || !value) {
+              res.writeHead(400, { "Content-Type": "application/json" });
+              res.end(JSON.stringify({ ok: false, error: "nodeId, key, and value are required" }));
+              return;
+            }
+            setTag(projectRoot, nodeId, key, value);
+            res.writeHead(200, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: true }));
+          } catch (err2) {
+            res.writeHead(400, { "Content-Type": "application/json" });
+            res.end(JSON.stringify({ ok: false, error: String(err2) }));
+          }
+        });
+        return;
+      }
+      if (req.method === "DELETE" && url2.pathname === "/api/tags") {
+        let body = "";
+        req.on("data", (chunk) => {
+          body += chunk.toString();
+        });
+        req.on("end", () => {
+          try {
+            const { nodeId, key } = JSON.parse(body);
+            if (!nodeId || !key) {
+              res.writeHead(400, { "Content-Type": "application/json" });
+              res.end(JSON.stringify({ ok: false, error: "nodeId and key are required" }));
+              return;
+            }
+            removeTag(projectRoot, nodeId, key);
             res.writeHead(200, { "Content-Type": "application/json" });
             res.end(JSON.stringify({ ok: true }));
           } catch (err2) {
@@ -2296,7 +2825,7 @@ async function startChartServer(opts = {}) {
         return;
       }
       if (url2.pathname !== "/") {
-        const staticPath = import_node_path12.default.join(clientDir, url2.pathname);
+        const staticPath = import_node_path15.default.join(clientDir, url2.pathname);
         if (serveStatic(res, staticPath)) return;
       }
       serveIndex(res, clientDir);
@@ -2305,7 +2834,8 @@ async function startChartServer(opts = {}) {
       res.end(JSON.stringify({ error: String(err2) }));
     }
   });
-  const port = await bindWithFallback(server, opts.port ?? DEFAULT_PORT);
+  const startPort = opts.port ?? randomPort();
+  const port = await bindWithFallback(server, startPort);
   const url = `http://localhost:${port}`;
   writeLock({
     pid: process.pid,
@@ -2313,9 +2843,9 @@ async function startChartServer(opts = {}) {
     cwd,
     url,
     startedAt: (/* @__PURE__ */ new Date()).toISOString()
-  });
+  }, projectRoot);
   const cleanup = () => {
-    clearLock();
+    clearLock(projectRoot);
     server.close();
   };
   process.once("SIGINT", () => {
@@ -2350,21 +2880,20 @@ function runServeCli(argv) {
     process.exit(1);
   });
 }
-var import_node_http, import_node_fs11, import_node_path12, DEFAULT_PORT, MAX_PORT_SCAN, MIME_TYPES;
+var import_node_http, import_node_fs13, import_node_path15, MAX_PORT_SCAN, MIME_TYPES;
 var init_chart_serve = __esm({
   "src/server/chart-serve.ts"() {
     "use strict";
     import_node_http = __toESM(require("node:http"));
-    import_node_fs11 = __toESM(require("node:fs"));
-    import_node_path12 = __toESM(require("node:path"));
+    import_node_fs13 = __toESM(require("node:fs"));
+    import_node_path15 = __toESM(require("node:path"));
     init_graph();
     init_lockfile();
     init_config();
     init_react_nextjs();
     init_nextjs_routes();
     init_prisma_schema();
-    DEFAULT_PORT = 52819;
-    MAX_PORT_SCAN = 20;
+    MAX_PORT_SCAN = 3;
     MIME_TYPES = {
       ".html": "text/html; charset=utf-8",
       ".js": "application/javascript; charset=utf-8",
@@ -2395,7 +2924,7 @@ function matchesSearch(node, query) {
 function toMinimal(nodes) {
   return nodes.map((n) => {
     const out = { id: n.id, type: n.type, name: n.name };
-    if (n.module != null) out.module = n.module;
+    if (n.tags != null) out.tags = n.tags;
     if (n.route != null) out.route = n.route;
     if (n.methods != null) out.methods = n.methods;
     return out;
@@ -2403,11 +2932,13 @@ function toMinimal(nodes) {
 }
 function toCompactNode(n) {
   const out = { i: n.id, t: n.type, n: n.name };
-  if (n.module != null) out.m = n.module;
+  const tags = n.tags;
+  if (tags?.module) out.m = tags.module;
   if (n.route != null) out.r = n.route;
   if (n.methods != null) out.mt = n.methods;
   if (n.exports != null) out.x = n.exports;
   if (n.columns != null) out.c = n.columns;
+  if (tags != null) out.tg = tags;
   for (const k of Object.keys(n)) {
     if (!COMPACT_NODE_KNOWN_KEYS.has(k) && n[k] != null) out[k] = n[k];
   }
@@ -2483,7 +3014,8 @@ function layerSummary(graph) {
   const moduleCounts = {};
   for (const n of graph.nodes) {
     typeCounts[n.type] = (typeCounts[n.type] ?? 0) + 1;
-    const mod = n.module;
+    const tags = n.tags;
+    const mod = tags?.module;
     if (mod) moduleCounts[mod] = (moduleCounts[mod] ?? 0) + 1;
   }
   const edgeTypeCounts = {};
@@ -2540,12 +3072,14 @@ function runReadGraphQueryRaw(rootDir, args) {
   const search = args.search;
   const type = args.type;
   const module_ = args.module;
+  const tagKey = args.tag_key;
+  const tagValue = args.tag_value;
   const nodeId = args.node_id;
   const hops = args.hops ?? 1;
   const layerIsDb = args.layer === "db";
   const minimal = args.minimal ?? layerIsDb;
   const includeEdges = args.include_edges;
-  const hasFilter = !!(search || type || module_ || nodeId);
+  const hasFilter = !!(search || type || module_ || nodeId || tagKey && tagValue);
   if (layer && !["ui", "api", "db"].includes(layer)) {
     return { error: `Invalid layer "${layer}". Must be one of: ui, api, db` };
   }
@@ -2601,7 +3135,9 @@ function runReadGraphQueryRaw(rootDir, args) {
   const matched = graph.nodes.filter((n) => {
     if (search && !matchesSearch(n, search)) return false;
     if (type && n.type !== type) return false;
-    if (module_ && n.module !== module_) return false;
+    const nodeTags = n.tags;
+    if (module_ && nodeTags?.module !== module_) return false;
+    if (tagKey && tagValue && nodeTags?.[tagKey] !== tagValue) return false;
     return true;
   });
   const matchedIds = new Set(matched.map((n) => n.id));
@@ -2688,9 +3224,9 @@ function handleReadGraph(args) {
   return okJson(result);
 }
 function nodeToFilePath(rootDir, layer, nodeId) {
-  if (layer === "ui") return (0, import_node_path13.join)(rootDir, "src", nodeId);
-  if (layer === "api") return (0, import_node_path13.join)(rootDir, nodeId);
-  if (layer === "db") return (0, import_node_path13.join)(rootDir, "prisma", "schema.prisma");
+  if (layer === "ui") return (0, import_node_path16.join)(rootDir, "src", nodeId);
+  if (layer === "api") return (0, import_node_path16.join)(rootDir, nodeId);
+  if (layer === "db") return (0, import_node_path16.join)(rootDir, "prisma", "schema.prisma");
   return null;
 }
 function handleGrepNodes(args) {
@@ -2750,11 +3286,11 @@ function handleGrepNodes(args) {
   let filesSearched = 0;
   let truncated = false;
   for (const [filePath, nodeId] of filePaths) {
-    if (!(0, import_node_fs12.existsSync)(filePath)) continue;
+    if (!(0, import_node_fs14.existsSync)(filePath)) continue;
     filesSearched++;
     let content;
     try {
-      content = (0, import_node_fs12.readFileSync)(filePath, "utf-8");
+      content = (0, import_node_fs14.readFileSync)(filePath, "utf-8");
     } catch {
       continue;
     }
@@ -2792,7 +3328,8 @@ function handleGrepNodes(args) {
   });
 }
 function handleChartServerStatus() {
-  const lock = getLiveLock();
+  const rootDir = process.cwd();
+  const lock = getLiveLock(rootDir);
   if (!lock) {
     return okJson({ running: false });
   }
@@ -2806,7 +3343,8 @@ function handleChartServerStatus() {
   });
 }
 function handleStartChartServer(args) {
-  const lock = getLiveLock();
+  const rootDir = process.cwd();
+  const lock = getLiveLock(rootDir);
   if (lock) {
     return okJson({
       started: false,
@@ -2817,11 +3355,11 @@ function handleStartChartServer(args) {
     });
   }
   const entryPath = process.argv[1];
-  const logDir = (0, import_node_path13.join)((0, import_node_os2.homedir)(), ".launchsecure");
-  (0, import_node_fs12.mkdirSync)(logDir, { recursive: true });
-  const logPath = (0, import_node_path13.join)(logDir, "launch-chart.log");
-  const out = (0, import_node_fs12.openSync)(logPath, "a");
-  const err2 = (0, import_node_fs12.openSync)(logPath, "a");
+  const logDir = (0, import_node_path16.join)((0, import_node_os2.homedir)(), ".launchsecure");
+  (0, import_node_fs14.mkdirSync)(logDir, { recursive: true });
+  const logPath = (0, import_node_path16.join)(logDir, "launch-chart.log");
+  const out = (0, import_node_fs14.openSync)(logPath, "a");
+  const err2 = (0, import_node_fs14.openSync)(logPath, "a");
   const portArgs = args.port ? ["--port", String(args.port)] : [];
   const child = (0, import_node_child_process2.spawn)(process.execPath, [entryPath, "serve", ...portArgs], {
     detached: true,
@@ -2836,7 +3374,8 @@ function handleStartChartServer(args) {
   });
 }
 function handleStopChartServer() {
-  const lock = getLiveLock();
+  const rootDir = process.cwd();
+  const lock = getLiveLock(rootDir);
   if (!lock) {
     return okJson({ stopped: false, reason: "not_running" });
   }
@@ -2846,14 +3385,45 @@ function handleStopChartServer() {
   } catch (e) {
     const code = e.code;
     if (code === "ESRCH") {
-      clearLock();
+      clearLock(rootDir);
       return okJson({ stopped: true, pid: lock.pid, note: "process was already gone, lock cleaned up" });
     }
     return okJson({ stopped: false, reason: `kill failed: ${code ?? e}` });
   }
 }
+function handleAddTag(args) {
+  const rootDir = process.cwd();
+  const nodeId = args.node_id;
+  const key = args.key;
+  const value = args.value;
+  if (!nodeId) return err("node_id is required");
+  if (!key) return err("key is required");
+  if (!value) return err("value is required");
+  const graphs = readAllGraphs(rootDir);
+  let found = false;
+  for (const graph of Object.values(graphs)) {
+    if (graph && graph.nodes.some((n) => n.id === nodeId)) {
+      found = true;
+      break;
+    }
+  }
+  if (!found) {
+    return err(`Node "${nodeId}" not found in any graph layer. Check the node_id.`);
+  }
+  setTag(rootDir, nodeId, key, value);
+  return okJson({ ok: true, node_id: nodeId, tag: { [key]: value } });
+}
+function handleRemoveTag(args) {
+  const rootDir = process.cwd();
+  const nodeId = args.node_id;
+  const key = args.key;
+  if (!nodeId) return err("node_id is required");
+  if (!key) return err("key is required");
+  removeTag(rootDir, nodeId, key);
+  return okJson({ ok: true, node_id: nodeId, removed_key: key });
+}
 function handleDetectProjectStack() {
-  const rootDir = findProjectRoot(process.cwd());
+  const rootDir = process.cwd();
   const parsers = [
     { id: "react-nextjs", layer: "ui", detected: reactNextjsParser.detect(rootDir) },
     { id: "nextjs-routes", layer: "api", detected: nextjsRoutesParser.detect(rootDir) },
@@ -2871,20 +3441,20 @@ function handleDetectProjectStack() {
       if (f.type === "out_of_pattern") stats.out_of_pattern++;
     }
   }
-  const srcDir = (0, import_node_path13.join)(rootDir, "src");
-  if ((0, import_node_fs12.existsSync)(srcDir)) {
+  const srcDir = (0, import_node_path16.join)(rootDir, "src");
+  if ((0, import_node_fs14.existsSync)(srcDir)) {
     const scanDir = (dir) => {
-      if (!(0, import_node_fs12.existsSync)(dir)) return;
-      for (const entry of (0, import_node_fs12.readdirSync)(dir, { withFileTypes: true })) {
+      if (!(0, import_node_fs14.existsSync)(dir)) return;
+      for (const entry of (0, import_node_fs14.readdirSync)(dir, { withFileTypes: true })) {
         if (entry.name.startsWith(".") || entry.name === "node_modules") continue;
-        const full = (0, import_node_path13.join)(dir, entry.name);
+        const full = (0, import_node_path16.join)(dir, entry.name);
         if (entry.isDirectory()) {
           scanDir(full);
           continue;
         }
-        if (![".ts", ".tsx"].includes((0, import_node_path13.extname)(entry.name))) continue;
+        if (![".ts", ".tsx"].includes((0, import_node_path16.extname)(entry.name))) continue;
         try {
-          const content = (0, import_node_fs12.readFileSync)(full, "utf-8");
+          const content = (0, import_node_fs14.readFileSync)(full, "utf-8");
           const matches = content.match(/@api\s+(GET|POST|PUT|DELETE|PATCH)\s+\/\S+/g);
           if (matches) stats.annotations += matches.length;
         } catch {
@@ -2971,6 +3541,14 @@ function handleMessage(msg) {
       respond(id ?? null, handleDetectProjectStack());
       return;
     }
+    if (toolName === "add_tag") {
+      respond(id ?? null, handleAddTag(args));
+      return;
+    }
+    if (toolName === "remove_tag") {
+      respond(id ?? null, handleRemoveTag(args));
+      return;
+    }
     respondError(id ?? null, -32601, `Unknown tool: ${toolName}`);
     return;
   }
@@ -3006,12 +3584,12 @@ function startGraphMcpServer() {
   process.stderr.write(`[launchsecure-graph] MCP server started (cwd: ${process.cwd()})
 `);
 }
-var import_node_fs12, import_node_path13, import_node_child_process2, import_node_os2, SERVER_INFO, TOOLS, COMPACT_SCHEMA, COMPACT_NODE_KNOWN_KEYS, EST_CHARS_PER_NODE_FULL, EST_CHARS_PER_NODE_MIN, EST_CHARS_PER_EDGE, NEIGHBORHOOD_BUDGET_CHARS, BATCH_BUDGET_CHARS;
+var import_node_fs14, import_node_path16, import_node_child_process2, import_node_os2, SERVER_INFO, TOOLS, COMPACT_SCHEMA, COMPACT_NODE_KNOWN_KEYS, EST_CHARS_PER_NODE_FULL, EST_CHARS_PER_NODE_MIN, EST_CHARS_PER_EDGE, NEIGHBORHOOD_BUDGET_CHARS, BATCH_BUDGET_CHARS;
 var init_graph_mcp = __esm({
   "src/server/graph-mcp.ts"() {
     "use strict";
-    import_node_fs12 = require("node:fs");
-    import_node_path13 = require("node:path");
+    import_node_fs14 = require("node:fs");
+    import_node_path16 = require("node:path");
     import_node_child_process2 = require("node:child_process");
     import_node_os2 = require("node:os");
     init_graph();
@@ -3041,7 +3619,7 @@ var init_graph_mcp = __esm({
       },
       {
         name: "read_graph",
-        description: 'Query the structural project graph \u2014 a smart Glob replacement that locates files by type/module/name and returns structural metadata (imports, renders, routes, relations). \n\nUSE THIS FOR: "where is X", "what files are in module Y", "what pages exist under /admin", "what components does Z render", "what tables relate to User", "list all hooks in auth module". \n\nDO NOT USE FOR: finding text/code content (use Grep), reading actual source code (use Read), understanding behavior/logic/patterns (graph has no code semantics \u2014 only names and edges). \n\nQUERY PARAMS (at least one required for node data \u2014 unfiltered calls return summary only to stay in context):\n- search: substring match on node id, name, or route\n- type: filter by node type (ui layer: page, layout, component, ui, hook, context, config, util; api layer: endpoint; db layer: table, enum)\n- module: filter by module (ui layer only: auth, admin, project, org, settings, integrations, shared-ui, layout, root)\n- node_id: return this node + its neighborhood (incoming+outgoing edges within `hops`)\n- hops: neighborhood radius when node_id is set (default 1)\n- minimal: return only id/type/name/module/route per node (skip heavy fields like columns, exports)\n- include_edges: return the actual edge list. Default: TRUE for neighborhood queries (node_id), FALSE for filter queries (search/type/module). Filter responses always include `edge_count`; only pass include_edges:true when you actually need to inspect individual edges (e.g. "which components render X"). This default cuts typical filter responses in half.\n\nBATCH MODE: pass `queries` (array of query objects) to run multiple independent queries in a single call. Each query object uses the same params (layer/search/type/module/node_id/hops/minimal). Returns { batch: true, count, results: [{index, query, result}, ...] }. Use this when you need multiple graph views up-front (e.g. scoping a feature across ui+api+db layers) to save round-trips. When batch mode is used, top-level params are ignored.\n\nReturns: filtered nodes + edges between them. If no filter given, returns per-layer counts and type breakdown only.\n\nWIRE FORMAT (compact): responses that include nodes/edges use short keys and edge-by-index refs to cut payload ~40-60%. Every such response carries a `_schema` legend. Quick reference:\n  nodes[]: { i: id, t: type, n: name, m: module, r: route, mt: methods, x: exports, c: columns }\n  edges[]: { s: source_node_index, d: target_node_index, t: type, l: label }\nedges.s / edges.d are 0-based indices into THIS response\'s nodes array. If a referenced node is not in the response (boundary case), s/d may instead contain the full node id string \u2014 always check the type.\n\nBUDGET GUARDS:\n- Neighborhood queries stop expanding when the projected response exceeds budget. The response then contains `budget_exceeded: true` plus `hops_traversed < hops_requested`. When this happens, drill into a specific neighbor with another node_id call rather than retrying with larger hops \u2014 it will just truncate again.\n- Batch mode caps total response size. Once the budget is hit, later queries return `{skipped: true, reason: "batch_budget_exhausted"}` and you must re-run them individually.',
+        description: 'Query the structural project graph \u2014 a smart Glob replacement that locates files by type/module/name and returns structural metadata (imports, renders, routes, relations). \n\nUSE THIS FOR: "where is X", "what files are in module Y", "what pages exist under /admin", "what components does Z render", "what tables relate to User", "list all hooks in auth module". \n\nDO NOT USE FOR: finding text/code content (use Grep), reading actual source code (use Read), understanding behavior/logic/patterns (graph has no code semantics \u2014 only names and edges). \n\nQUERY PARAMS (at least one required for node data \u2014 unfiltered calls return summary only to stay in context):\n- search: substring match on node id, name, or route\n- type: filter by node type (ui layer: page, layout, component, ui, hook, context, config, util; api layer: endpoint; db layer: table, enum)\n- module: filter by module tag (computed from directory structure, e.g. "auth", "admin", "settings")\n- node_id: return this node + its neighborhood (incoming+outgoing edges within `hops`)\n- hops: neighborhood radius when node_id is set (default 1)\n- minimal: return only id/type/name/module/route per node (skip heavy fields like columns, exports)\n- include_edges: return the actual edge list. Default: TRUE for neighborhood queries (node_id), FALSE for filter queries (search/type/module). Filter responses always include `edge_count`; only pass include_edges:true when you actually need to inspect individual edges (e.g. "which components render X"). This default cuts typical filter responses in half.\n\nBATCH MODE: pass `queries` (array of query objects) to run multiple independent queries in a single call. Each query object uses the same params (layer/search/type/module/node_id/hops/minimal). Returns { batch: true, count, results: [{index, query, result}, ...] }. Use this when you need multiple graph views up-front (e.g. scoping a feature across ui+api+db layers) to save round-trips. When batch mode is used, top-level params are ignored.\n\nReturns: filtered nodes + edges between them. If no filter given, returns per-layer counts and type breakdown only.\n\nWIRE FORMAT (compact): responses that include nodes/edges use short keys and edge-by-index refs to cut payload ~40-60%. Every such response carries a `_schema` legend. Quick reference:\n  nodes[]: { i: id, t: type, n: name, m: module, r: route, mt: methods, x: exports, c: columns }\n  edges[]: { s: source_node_index, d: target_node_index, t: type, l: label }\nedges.s / edges.d are 0-based indices into THIS response\'s nodes array. If a referenced node is not in the response (boundary case), s/d may instead contain the full node id string \u2014 always check the type.\n\nBUDGET GUARDS:\n- Neighborhood queries stop expanding when the projected response exceeds budget. The response then contains `budget_exceeded: true` plus `hops_traversed < hops_requested`. When this happens, drill into a specific neighbor with another node_id call rather than retrying with larger hops \u2014 it will just truncate again.\n- Batch mode caps total response size. Once the budget is hit, later queries return `{skipped: true, reason: "batch_budget_exhausted"}` and you must re-run them individually.',
         inputSchema: {
           type: "object",
           properties: {
@@ -3060,7 +3638,15 @@ var init_graph_mcp = __esm({
             },
             module: {
               type: "string",
-              description: 'UI layer only \u2014 filter by module (e.g. "auth", "admin", "project", "org").'
+              description: 'Filter by module tag (e.g. "auth", "admin", "settings"). Works across all layers.'
+            },
+            tag_key: {
+              type: "string",
+              description: "Filter by arbitrary tag key. Must be used with tag_value."
+            },
+            tag_value: {
+              type: "string",
+              description: "Filter by tag value for the given tag_key."
             },
             node_id: {
               type: "string",
@@ -3184,6 +3770,46 @@ Use this when the user asks "is the chart running", "show me the project graph U
           type: "object",
           properties: {}
         }
+      },
+      {
+        name: "add_tag",
+        description: 'Tag a graph node with a key-value pair. Tags persist in .launchsecure/graphs/tags.json and survive graph regeneration. Use for annotating nodes with arbitrary metadata (e.g. "refactor_later", "owner", "priority"). Manual tags override computed tags (like module and screen) for the same key.',
+        inputSchema: {
+          type: "object",
+          properties: {
+            node_id: {
+              type: "string",
+              description: 'The node id to tag (e.g. "app/(auth)/login/page.tsx").'
+            },
+            key: {
+              type: "string",
+              description: 'Tag key (e.g. "module", "owner", "refactor_later").'
+            },
+            value: {
+              type: "string",
+              description: 'Tag value (e.g. "auth", "alice", "true").'
+            }
+          },
+          required: ["node_id", "key", "value"]
+        }
+      },
+      {
+        name: "remove_tag",
+        description: "Remove a manual tag from a graph node. Only removes tags from tags.json \u2014 computed tags (module, screen) cannot be removed (they are re-derived at read time).",
+        inputSchema: {
+          type: "object",
+          properties: {
+            node_id: {
+              type: "string",
+              description: "The node id to remove the tag from."
+            },
+            key: {
+              type: "string",
+              description: "Tag key to remove."
+            }
+          },
+          required: ["node_id", "key"]
+        }
       }
     ];
     COMPACT_SCHEMA = {
@@ -3191,11 +3817,12 @@ Use this when the user asks "is the chart running", "show me the project graph U
         i: "id",
         t: "type",
         n: "name",
-        m: "module",
+        m: "module (from tags)",
         r: "route",
         mt: "methods",
         x: "exports",
-        c: "columns"
+        c: "columns",
+        tg: "tags"
       },
       edges: {
         s: "source_node_index",
@@ -3213,7 +3840,8 @@ Use this when the user asks "is the chart running", "show me the project graph U
       "route",
       "methods",
       "exports",
-      "columns"
+      "columns",
+      "tags"
     ]);
     EST_CHARS_PER_NODE_FULL = {
       ui: 300,
@@ -3237,10 +3865,10 @@ Use this when the user asks "is the chart running", "show me the project graph U
 
 // src/server/graph-mcp-entry.ts
 var import_node_child_process3 = require("node:child_process");
-var import_node_fs13 = require("node:fs");
-var import_node_path14 = __toESM(require("node:path"));
+var import_node_fs15 = require("node:fs");
+var import_node_path17 = __toESM(require("node:path"));
 var import_node_os3 = require("node:os");
-var import_node_fs14 = require("node:fs");
+var import_node_fs16 = require("node:fs");
 init_lockfile();
 function logStderr(msg) {
   process.stderr.write(`[launch-chart] ${msg}
@@ -3248,17 +3876,19 @@ function logStderr(msg) {
 }
 function maybeAutoServe() {
   if (process.env.LAUNCH_CHART_AUTOSERVE !== "1") return;
-  const existing = getLiveLock();
+  const rootDir = process.cwd();
+  setProjectRoot(rootDir);
+  const existing = getLiveLock(rootDir);
   if (existing) {
     logStderr(`autoserve: reusing existing server at ${existing.url}`);
     return;
   }
   try {
-    const logDir = import_node_path14.default.join((0, import_node_os3.homedir)(), ".launchsecure");
-    (0, import_node_fs14.mkdirSync)(logDir, { recursive: true });
-    const logPath = import_node_path14.default.join(logDir, "launch-chart.log");
-    const out = (0, import_node_fs13.openSync)(logPath, "a");
-    const err2 = (0, import_node_fs13.openSync)(logPath, "a");
+    const logDir = import_node_path17.default.join((0, import_node_os3.homedir)(), ".launchsecure");
+    (0, import_node_fs16.mkdirSync)(logDir, { recursive: true });
+    const logPath = import_node_path17.default.join(logDir, "launch-chart.log");
+    const out = (0, import_node_fs15.openSync)(logPath, "a");
+    const err2 = (0, import_node_fs15.openSync)(logPath, "a");
     const entryPath = process.argv[1];
     const child = (0, import_node_child_process3.spawn)(process.execPath, [entryPath, "serve"], {
       detached: true,
@@ -3272,6 +3902,7 @@ function maybeAutoServe() {
   }
 }
 async function main() {
+  setProjectRoot(process.cwd());
   const argv = process.argv.slice(2);
   const subcommand = argv[0];
   if (subcommand === "serve") {