@merittdev/horus 0.1.2 → 0.1.3

package/dist/index.cjs

@@ -16235,9 +16235,9 @@ var require_common2 = __commonJS({
     };
     exports2.Batch = Batch;
     var BulkWriteResult = class _BulkWriteResult {
-      static generateIdMap(ids) {
+      static generateIdMap(ids2) {
         const idMap = {};
-        for (const doc of ids) {
+        for (const doc of ids2) {
           idMap[doc.index] = doc._id;
         }
         return idMap;
@@ -50314,7 +50314,7 @@ init_cjs_shims();
 
 // ../../packages/core/src/version.ts
 init_cjs_shims();
-var HORUS_VERSION = "0.1.2";
+var HORUS_VERSION = true ? "0.1.3" : "dev";
 var PINNED_AXON_VERSION = "1.0.1";
 var PINNED_SOURCE_VERSION = PINNED_AXON_VERSION;
 
@@ -54530,7 +54530,9 @@ var repositorySchema = external_exports.object({
 });
 var connectorsSchema = external_exports.object({
   elasticsearch: external_exports.object({
-    indexPattern: external_exports.string(),
+    indexPattern: external_exports.string().optional(),
+    /** Multiple index patterns — joined with ',' when resolving. Takes precedence over indexPattern. */
+    indexPatterns: external_exports.array(external_exports.string()).optional(),
     serviceName: external_exports.string().optional(),
     /**
      * Log schema preset. Controls which Elasticsearch field names Horus
@@ -54585,6 +54587,8 @@ var connectorsSchema = external_exports.object({
   }).optional(),
   grafana: external_exports.object({
     dashboard: external_exports.string().optional(),
+    /** Multiple dashboard UIDs to fetch. Takes precedence over `dashboard` when set. */
+    dashboards: external_exports.array(external_exports.string()).optional(),
     /** Direct URL value (takes priority over urlEnv). */
     url: external_exports.string().optional(),
     /** Name of the env var holding the Grafana base URL. Defaults to "GRAFANA_URL". */
@@ -54713,11 +54717,13 @@ function resolveEnvironment(config, opts) {
   if (c.elasticsearch !== void 0) {
     const es = c.elasticsearch;
     const url = es.url ?? process.env[es.urlEnv ?? "ES_URL"] ?? "";
+    const effectivePattern = es.indexPatterns?.join(",") ?? es.indexPattern ?? "";
     resolved.elasticsearch = {
       url,
       username: es.username ?? process.env[es.usernameEnv ?? "ES_USERNAME"],
       password: es.password ?? process.env[es.passwordEnv ?? "ES_PASSWORD"],
-      indexPattern: es.indexPattern,
+      indexPattern: effectivePattern,
+      ...es.indexPatterns !== void 0 ? { indexPatterns: es.indexPatterns } : {},
       serviceName: es.serviceName,
       preset: es.preset,
       ...es.fields !== void 0 ? { fields: es.fields } : {}
@@ -54737,7 +54743,8 @@ function resolveEnvironment(config, opts) {
       url: g.url ?? process.env[g.urlEnv ?? "GRAFANA_URL"],
       username: g.username ?? process.env[g.usernameEnv ?? "GRAFANA_USER"],
       password: g.password ?? process.env[g.passwordEnv ?? "GRAFANA_PASSWORD"],
-      dashboard: g.dashboard
+      dashboard: g.dashboard,
+      ...g.dashboards !== void 0 ? { dashboards: g.dashboards } : {}
     };
   }
   if (c.redis !== void 0) {
@@ -54763,7 +54770,7 @@ var CONFIG_EXAMPLES = {
   "projects.*.repositories": 'e.g. [{ name: "my-api", path: "/path/to/repo" }]',
   "projects.*.repositories.*.name": 'e.g. name: "my-api"',
   "projects.*.repositories.*.path": 'e.g. path: "/absolute/path/to/repo"',
-  "projects.*.repositories.*.source.hostUrl": 'e.g. "http://127.0.0.1:8420"  (start one with: axon host --port 8420)',
+  "projects.*.repositories.*.source.hostUrl": 'e.g. "http://127.0.0.1:8420"  (start one with: horus index)',
   "projects.*.repositories.*.axon.hostUrl": 'e.g. "http://127.0.0.1:8420"  (deprecated: use source.hostUrl instead)',
   "projects.*.environments": 'e.g. [{ name: "production", connectors: {} }]',
   "projects.*.environments.*.name": 'e.g. name: "production"',
@@ -55046,17 +55053,21 @@ var import_node_fs3 = require("fs");
 var import_node_path3 = require("path");
 var import_node_net = require("net");
 var exec = (0, import_node_util.promisify)(import_node_child_process2.execFile);
-async function axonAvailable() {
+var SOURCE_BINARY = "horus-source";
+async function resolveSourceBin() {
   try {
-    await exec("axon", ["--version"], { timeout: 5e3 });
-    return true;
+    await exec(SOURCE_BINARY, ["--version"], { timeout: 5e3 });
+    return SOURCE_BINARY;
   } catch {
-    return false;
+    return null;
   }
 }
+async function axonAvailable() {
+  return await resolveSourceBin() !== null;
+}
 async function getAxonVersion() {
   try {
-    const { stdout } = await exec("axon", ["--version"], { timeout: 5e3 });
+    const { stdout } = await exec(SOURCE_BINARY, ["--version"], { timeout: 5e3 });
     const match = stdout.trim().match(/(\d+\.\d+\.\d+)/);
     return match?.[1] ?? null;
   } catch {
@@ -55064,10 +55075,12 @@ async function getAxonVersion() {
   }
 }
 function isAnalyzed(root) {
-  return (0, import_node_fs3.existsSync)((0, import_node_path3.join)(root, ".axon"));
+  return (0, import_node_fs3.existsSync)((0, import_node_path3.join)(root, ".horus", "source")) || (0, import_node_fs3.existsSync)((0, import_node_path3.join)(root, ".axon"));
 }
 async function analyzeRepo(root) {
-  await exec("axon", ["analyze", "."], {
+  const bin = await resolveSourceBin();
+  if (!bin) throw new Error("horus-source not found on PATH. Install it: pip install horus-source");
+  await exec(bin, ["analyze", "."], {
     cwd: root,
     timeout: 9e5,
     maxBuffer: 64 * 1024 * 1024
@@ -55119,11 +55132,18 @@ function startHost(root, port) {
   (0, import_node_fs3.mkdirSync)((0, import_node_path3.join)(root, ".horus"), { recursive: true });
   const logPath = (0, import_node_path3.join)(root, ".horus", "source-host.log");
   const fd = (0, import_node_fs3.openSync)(logPath, "a");
-  const child = (0, import_node_child_process2.spawn)("axon", ["host", "--port", String(port)], {
+  const child = (0, import_node_child_process2.spawn)(SOURCE_BINARY, ["host", "--port", String(port)], {
     cwd: root,
     detached: true,
     stdio: ["ignore", fd, fd]
   });
+  child.on("error", (err) => {
+    if (err.code === "ENOENT") {
+      process.stderr.write(
+        "\nhorus-source not found on PATH. Install it: pip install horus-source\n"
+      );
+    }
+  });
   if (child.pid !== void 0) {
     const record = {
       pid: child.pid,
@@ -55202,12 +55222,37 @@ var AxonCodeProvider = class {
     const h = await this.client.health();
     return {
       ok: h.ok,
-      detail: h.ok ? "Axon host responded " + h.status : "Axon host unreachable"
+      detail: h.ok ? "Source intelligence host responded " + h.status : "Source intelligence host unreachable"
     };
   }
   async searchSymbols(query, limit = 10) {
-    const res = await this.client.search(query, limit);
-    return res.map((r) => ({ id: r.nodeId, name: r.name, filePath: r.filePath }));
+    const E = this.escapeId(query);
+    const exactQuery = `MATCH (n) WHERE toLower(n.name) = toLower("${E}") AND NOT n:File RETURN n.id, n.name, n.file_path LIMIT ${limit}`;
+    const [exactRows, semanticRes] = await Promise.all([
+      this.rows(exactQuery).catch(() => []),
+      this.client.search(query, limit)
+    ]);
+    const exactSymbols = exactRows.map((row) => ({
+      id: String(row[0] ?? ""),
+      name: String(row[1] ?? ""),
+      filePath: String(row[2] ?? "")
+    }));
+    const exactIds = new Set(exactSymbols.map((s) => s.id));
+    const ql = query.toLowerCase();
+    const semantic = semanticRes.filter((r) => !exactIds.has(r.nodeId)).map((r) => {
+      const nl = r.name.toLowerCase();
+      const isFile = r.label === "File";
+      let rank = 0;
+      if (!isFile && (nl.includes(ql) || ql.includes(nl))) rank = 2;
+      else if (isFile && (nl.includes(ql) || ql.includes(nl))) rank = 1;
+      return { r, rank };
+    });
+    semantic.sort((a, b2) => b2.rank - a.rank || b2.r.score - a.r.score);
+    const combined = [
+      ...exactSymbols,
+      ...semantic.map(({ r }) => ({ id: r.nodeId, name: r.name, filePath: r.filePath }))
+    ];
+    return combined.slice(0, limit);
   }
   async context(symbolId) {
     const E = this.escapeId(symbolId);
@@ -55406,6 +55451,61 @@ var ElasticsearchClient = class {
       return { ok: false, detail: err.message };
     }
   }
+  /**
+   * Discover available index names. Resolution order:
+   *   1. Data streams (modern ILM — clean names without date suffixes)
+   *   2. Aliases (user-defined names mapping to one or more indices)
+   *   3. Raw concrete indices (fallback for legacy clusters)
+   * System entries (starting with '.') are always filtered out.
+   * Returns [] on any error so callers can gracefully fall back.
+   */
+  async listIndices(signal) {
+    const results = /* @__PURE__ */ new Set();
+    try {
+      const dsRes = await this.request("GET", "/_data_stream", void 0, signal);
+      const streams = dsRes["data_streams"];
+      if (Array.isArray(streams)) {
+        for (const s of streams) {
+          const name = String(s["name"] ?? "");
+          if (name && !name.startsWith(".")) results.add(name);
+        }
+      }
+    } catch {
+    }
+    try {
+      const aliasRes = await this.request(
+        "GET",
+        "/_cat/aliases?format=json&h=alias&s=alias",
+        void 0,
+        signal
+      );
+      if (Array.isArray(aliasRes)) {
+        for (const a of aliasRes) {
+          const alias = String(a["alias"] ?? "");
+          if (alias && !alias.startsWith(".")) results.add(alias);
+        }
+      }
+    } catch {
+    }
+    if (results.size === 0) {
+      try {
+        const idxRes = await this.request(
+          "GET",
+          "/_cat/indices?format=json&h=index&s=index&expand_wildcards=open",
+          void 0,
+          signal
+        );
+        if (Array.isArray(idxRes)) {
+          for (const r of idxRes) {
+            const name = String(r["index"] ?? "");
+            if (name && !name.startsWith(".")) results.add(name);
+          }
+        }
+      } catch {
+      }
+    }
+    return [...results].sort();
+  }
 };
 
 // ../../packages/connectors/src/elasticsearch/provider.ts
@@ -56380,13 +56480,34 @@ function sanitizeExpr(expr) {
   if (replaced.includes("$")) return null;
   return replaced;
 }
+function extractHintTokens(hint) {
+  const camelSplit = hint.replace(/([a-z])([A-Z])/g, "$1 $2");
+  const acronymSplit = camelSplit.replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2");
+  return acronymSplit.toLowerCase().split(/[^a-z0-9]+/).filter((t) => t.length >= 3);
+}
 function panelMatchesHint(p, hint) {
   if (hint === "") return true;
-  const tokens = hint.toLowerCase().split(/[^a-z0-9]+/).filter((t) => t.length > 0);
+  const tokens = extractHintTokens(hint);
   if (tokens.length === 0) return true;
   const haystack = p.title.toLowerCase() + " " + p.exprs.map((e) => e.toLowerCase()).join(" ");
   return tokens.some((tok) => haystack.includes(tok));
 }
+function findMatchSource(p, hint) {
+  if (hint === "") return null;
+  const tokens = extractHintTokens(hint);
+  if (tokens.length === 0) return null;
+  if (tokens.some((tok) => p.title.toLowerCase().includes(tok))) return "panel-title";
+  if (tokens.some((tok) => p.exprs.some((e) => e.toLowerCase().includes(tok)))) {
+    return "query-text";
+  }
+  return null;
+}
+function findingLabelsMatchHint(labels, hint) {
+  const tokens = extractHintTokens(hint);
+  if (tokens.length === 0) return true;
+  const haystack = Object.values(labels).join(" ").toLowerCase();
+  return tokens.some((tok) => haystack.includes(tok));
+}
 
 // ../../packages/connectors/src/grafana/analyze.ts
 init_cjs_shims();
@@ -56498,7 +56619,8 @@ var GrafanaMetricsProvider = class {
    * Each panel is tagged with the dashboardUid it came from.
    */
   async findPanels(hint, signal) {
-    const dashboards = await this.client.searchDashboards(void 0, signal);
+    const uids = this.opts.dashboardUids;
+    const dashboards = uids !== void 0 && uids.length > 0 ? uids.map((uid2) => ({ uid: uid2, title: uid2 })) : await this.client.searchDashboards(void 0, signal);
     const allPanels = [];
     for (const dash of dashboards) {
       signal?.throwIfAborted();
@@ -56521,48 +56643,63 @@ var GrafanaMetricsProvider = class {
   /**
    * Discover relevant panels, query current + baseline windows for each expr,
    * and return MetricFindings (including "none" anomalies for completeness).
+   *
+   * Two-pass hint matching:
+   * 1. Filter panels by title / PromQL expression (fast, cheap).
+   * 2. If no panels match on pass 1, query ALL panels and filter the returned
+   *    series by their label values (source, topic, queue, etc.).
    */
   async analyze(opts) {
     const { signal } = opts;
     const step = opts.step ?? this.opts.defaultStep;
     const windowSecs = opts.to - opts.from;
-    const panels = await this.findPanels(opts.hint, signal);
-    const allFindings = [];
-    for (const panel of panels) {
-      signal?.throwIfAborted();
-      for (const rawExpr of panel.exprs) {
+    const hint = opts.hint;
+    const queryPanels = async (panels) => {
+      const results = [];
+      for (const panel of panels) {
         signal?.throwIfAborted();
-        const expr = sanitizeExpr(rawExpr);
-        if (expr === null) continue;
-        try {
-          const [currentResp, baselineResp] = await Promise.all([
-            this.client.datasourceRange(panel.datasourceUid, expr, opts.from, opts.to, step, signal),
-            this.client.datasourceRange(
-              panel.datasourceUid,
-              expr,
-              opts.from - windowSecs,
-              opts.from,
-              step,
-              signal
-            )
-          ]);
-          const current = parseRange(currentResp);
-          const baseline = parseRange(baselineResp);
-          const findings2 = buildFindings(
-            panel.dashboardUid ?? "",
-            panel.title,
-            panel.kind,
-            baseline,
-            current
-          );
-          allFindings.push(...findings2);
-        } catch (err) {
-          if (signal?.aborted) throw signal.reason ?? err;
-          continue;
+        const panelMatchSrc = hint !== void 0 && hint !== "" ? findMatchSource(panel, hint) : null;
+        for (const rawExpr of panel.exprs) {
+          signal?.throwIfAborted();
+          const expr = sanitizeExpr(rawExpr);
+          if (expr === null) continue;
+          try {
+            const [currentResp, baselineResp] = await Promise.all([
+              this.client.datasourceRange(panel.datasourceUid, expr, opts.from, opts.to, step, signal),
+              this.client.datasourceRange(
+                panel.datasourceUid,
+                expr,
+                opts.from - windowSecs,
+                opts.from,
+                step,
+                signal
+              )
+            ]);
+            const current = parseRange(currentResp);
+            const baseline = parseRange(baselineResp);
+            const findings2 = buildFindings(
+              panel.dashboardUid ?? "",
+              panel.title,
+              panel.kind,
+              baseline,
+              current
+            ).map((f) => ({ ...f, matchSource: panelMatchSrc }));
+            results.push(...findings2);
+          } catch (err) {
+            if (signal?.aborted) throw signal.reason ?? err;
+            continue;
+          }
         }
       }
+      return results;
+    };
+    const matchedPanels = await this.findPanels(hint, signal);
+    if (matchedPanels.length > 0 || hint === void 0 || hint === "") {
+      return queryPanels(matchedPanels);
     }
-    return allFindings;
+    const allPanels = await this.findPanels(void 0, signal);
+    const allFindings = await queryPanels(allPanels);
+    return allFindings.filter((f) => findingLabelsMatchHint(f.labels, hint)).map((f) => ({ ...f, matchSource: "series-labels" }));
   }
   /**
    * Raw escape hatch: execute a single PromQL expression against the default
@@ -56603,12 +56740,19 @@ var MongoStateClient = class {
   opts;
   client = null;
   assertAllowed(collection) {
+    if (this.opts.allowlist.length === 0) return;
     if (!this.opts.allowlist.includes(collection)) {
       throw new Error(
         `Collection "${collection}" is not allowlisted for ${this.opts.database}`
       );
     }
   }
+  /** List all collection names in the configured database (for auto-discovery). */
+  async listCollections() {
+    const db = await this.db();
+    const cols = await db.listCollections({}, { nameOnly: true }).toArray();
+    return cols.map((c) => c["name"]).filter(Boolean);
+  }
   async db() {
     if (this.client === null) {
       this.client = new import_mongodb.MongoClient(this.opts.url, {
@@ -56806,7 +56950,13 @@ var MongoStateProvider = class {
     const legacyHours = opts.legacyHours ?? DEFAULT_LEGACY_HOURS;
     const nowMs = Date.now();
     const collections = [];
-    for (const coll of this.opts.collections) {
+    let targetCollections = this.opts.collections;
+    let autoDiscovered = false;
+    if (targetCollections.length === 0) {
+      targetCollections = await this.client.listCollections();
+      autoDiscovered = true;
+    }
+    for (const coll of targetCollections) {
       try {
         const count = await this.client.count(coll);
         const fields = await this.client.sampleFields(coll);
@@ -56838,7 +56988,13 @@ var MongoStateProvider = class {
       } catch {
       }
     }
-    return { database: this.opts.database, staleHours, legacyHours, collections };
+    return {
+      database: this.opts.database,
+      staleHours,
+      legacyHours,
+      collections,
+      autoDiscovered
+    };
   }
   toEvidence(analysis) {
     return stateToEvidence(analysis, "mongo.analyzeState", (/* @__PURE__ */ new Date()).toISOString());
@@ -56846,6 +57002,9 @@ var MongoStateProvider = class {
   async health() {
     return this.client.health();
   }
+  async listCollections() {
+    return this.client.listCollections();
+  }
   async close() {
     await this.client.close();
   }
@@ -57206,7 +57365,7 @@ function metricsForEnv(renv) {
   if (!g || !g.url) return null;
   return new GrafanaMetricsProvider(
     new GrafanaClient({ baseUrl: g.url, username: g.username, password: g.password }),
-    { defaultStep: 60 }
+    { defaultStep: 60, dashboardUids: g.dashboards }
   );
 }
 function queueForEnv(renv) {
@@ -57328,23 +57487,28 @@ function parseFileContributors(stdout) {
   for (const line2 of stdout.split("\n")) {
     const trimmed = line2.trim();
     if (!trimmed) continue;
-    const sepIdx = trimmed.indexOf("");
-    if (sepIdx === -1) continue;
-    const author = trimmed.slice(0, sepIdx).trim();
-    const date2 = trimmed.slice(sepIdx + 1).trim();
-    if (!author || !date2) continue;
-    const existing = tally.get(author);
+    const parts = trimmed.split("");
+    if (parts.length < 3) continue;
+    const name = parts[0].trim();
+    const email = parts[1].trim();
+    const date2 = parts[2].trim();
+    if (!name || !date2) continue;
+    const key = email || name;
+    const existing = tally.get(key);
     if (existing === void 0) {
-      tally.set(author, { commits: 1, firstDate: date2, lastDate: date2 });
+      tally.set(key, { name, commits: 1, firstDate: date2, lastDate: date2 });
     } else {
       existing.commits += 1;
       if (date2 < existing.firstDate) existing.firstDate = date2;
-      if (date2 > existing.lastDate) existing.lastDate = date2;
+      if (date2 > existing.lastDate) {
+        existing.lastDate = date2;
+        existing.name = name;
+      }
     }
   }
   const result = [];
-  for (const [author, stats] of tally.entries()) {
-    result.push({ author, ...stats });
+  for (const [, stats] of tally.entries()) {
+    result.push({ author: stats.name, commits: stats.commits, firstDate: stats.firstDate, lastDate: stats.lastDate });
   }
   result.sort((a, b2) => {
     if (b2.commits !== a.commits) return b2.commits - a.commits;
@@ -57356,7 +57520,7 @@ async function gitFileContributors(repoPath, file) {
   try {
     const { stdout } = await exec2(
       "git",
-      ["-C", repoPath, "log", "--follow", "--format=%an%x1f%aI", "--", file],
+      ["-C", repoPath, "log", "--follow", "--format=%an%x1f%ae%x1f%aI", "--", file],
       { maxBuffer: 10 * 1024 * 1024 }
     );
     return parseFileContributors(stdout);
@@ -66366,6 +66530,9 @@ async function listQueueEdges(db, opts = {}) {
 
 // ../../packages/db/src/investigations.ts
 init_cjs_shims();
+async function updateInvestigationReport(db, id, report) {
+  await db.update(investigations).set({ report }).where(eq(investigations.id, id));
+}
 async function getInvestigation(db, id) {
   const rows = await db.select().from(investigations).where(eq(investigations.id, id)).limit(1);
   return rows[0] ?? null;
@@ -66511,12 +66678,14 @@ function mark(ok) {
   if (ok === "pending") return import_picocolors.default.yellow("\u25CB");
   return ok ? import_picocolors.default.green("\u25CF") : import_picocolors.default.red("\u25CF");
 }
-async function checkEnv(renv) {
+async function checkEnv(renv, deps) {
   const header = `  ${import_picocolors.default.bold(renv.project)} / ${import_picocolors.default.bold(renv.env)}` + (renv.readOnly ? import_picocolors.default.dim("  (read-only)") : "");
   console.log(header);
   let allOk = true;
   if (renv.repositories.length === 0) {
-    console.log(`    ${mark("pending")} ${import_picocolors.default.bold("Source")}          ${import_picocolors.default.dim("no repositories configured")}`);
+    console.log(
+      `    ${mark("pending")} ${import_picocolors.default.bold("Source")}          ${import_picocolors.default.dim("no repositories configured")}`
+    );
   }
   for (const repo of renv.repositories) {
     const axonHostUrl = repo.sourceHostUrl ?? repo.axonHostUrl;
@@ -66540,7 +66709,9 @@ async function checkEnv(renv) {
       versionPart = `v${compat.version} (pinned ${compat.pinned} \u2014 MISMATCH)`;
     }
     const axonDetail = health.ok ? `${repo.name} \xB7 responded ${health.status} \xB7 ${versionPart} at ${axonHostUrl}` : `${repo.name} \xB7 unreachable at ${axonHostUrl}`;
-    console.log(`    ${mark(health.ok)} ${import_picocolors.default.bold("Source")}          ${import_picocolors.default.dim(axonDetail)}`);
+    console.log(
+      `    ${mark(health.ok)} ${import_picocolors.default.bold("Source")}          ${import_picocolors.default.dim(axonDetail)}`
+    );
     if (!health.ok) allOk = false;
   }
   const esCfg = renv.connectors.elasticsearch;
@@ -66548,12 +66719,14 @@ async function checkEnv(renv) {
     const logsProvider = logsForEnv(renv);
     if (logsProvider) {
       const h = await logsProvider.health();
-      const detail = h.ok ? `reachable \xB7 index ${esCfg.indexPattern}` : `unreachable \xB7 index ${esCfg.indexPattern}`;
+      const idxDisplay = esCfg.indexPatterns ? esCfg.indexPatterns.join(", ") : esCfg.indexPattern;
+      const detail = h.ok ? `reachable \xB7 index ${idxDisplay}` : `unreachable \xB7 index ${idxDisplay}`;
       console.log(`    ${mark(h.ok)} ${import_picocolors.default.bold("Elasticsearch")}   ${import_picocolors.default.dim(detail)}`);
       if (!h.ok) allOk = false;
     } else {
+      const idxDisplay = esCfg.indexPatterns ? esCfg.indexPatterns.join(", ") : esCfg.indexPattern;
       console.log(
-        `    ${mark(false)} ${import_picocolors.default.bold("Elasticsearch")}   ${import_picocolors.default.dim(`configured (index ${esCfg.indexPattern}) but ES_URL not set`)}`
+        `    ${mark(false)} ${import_picocolors.default.bold("Elasticsearch")}   ${import_picocolors.default.dim(`configured (index ${idxDisplay}) but ES_URL not set`)}`
       );
     }
   } else {
@@ -66566,7 +66739,8 @@ async function checkEnv(renv) {
     const metricsProvider = metricsForEnv(renv);
     if (metricsProvider) {
       const h = await metricsProvider.health();
-      const dashSuffix = grafanaCfg.dashboard ? ` \xB7 dashboard ${grafanaCfg.dashboard}` : "";
+      const dashDisplay = grafanaCfg.dashboards ? grafanaCfg.dashboards.join(", ") : grafanaCfg.dashboard;
+      const dashSuffix = dashDisplay ? ` \xB7 dashboards: ${dashDisplay}` : "";
       const detail = h.ok ? `reachable${dashSuffix}` : `unreachable${dashSuffix}`;
       console.log(`    ${mark(h.ok)} ${import_picocolors.default.bold("Grafana")}         ${import_picocolors.default.dim(detail)}`);
       if (!h.ok) allOk = false;
@@ -66582,20 +66756,73 @@ async function checkEnv(renv) {
   }
   const mongoCfg = renv.connectors.mongodb;
   if (mongoCfg) {
-    const collCount = mongoCfg.collections.length;
-    const detail = `configured: db ${mongoCfg.database}, ${collCount} collection(s)` + import_picocolors.default.dim(" (provider: HOR-33)");
-    console.log(`    ${mark("pending")} ${import_picocolors.default.bold("MongoDB")}         ${import_picocolors.default.dim(detail)}`);
+    const mongo = (deps?.mongoFactory ?? mongoForEnv)(renv);
+    if (mongo) {
+      try {
+        const h = await mongo.health();
+        if (!h.ok) {
+          console.log(
+            `    ${mark(false)} ${import_picocolors.default.bold("MongoDB")}        ${import_picocolors.default.dim(`unreachable \xB7 db ${mongoCfg.database}`)}`
+          );
+          allOk = false;
+        } else {
+          const allowlist = mongoCfg.collections;
+          const allowlistPart = allowlist.length === 0 ? "allowlist: all" : `allowlist: ${allowlist.length}`;
+          const discovered = mongo.listCollections ? await mongo.listCollections() : void 0;
+          const discoveredPart = discovered ? ` \xB7 discovered: ${discovered.length} collection(s)` : "";
+          const detail = `reachable \xB7 db ${mongoCfg.database} \xB7 ${allowlistPart}${discoveredPart}`;
+          console.log(
+            `    ${mark(true)} ${import_picocolors.default.bold("MongoDB")}         ${import_picocolors.default.dim(detail)}`
+          );
+        }
+      } finally {
+        await mongo.close();
+      }
+    } else {
+      console.log(
+        `    ${mark(false)} ${import_picocolors.default.bold("MongoDB")}        ${import_picocolors.default.dim(`configured (db ${mongoCfg.database}) but Mongo URL not set`)}`
+      );
+    }
+  } else {
+    console.log(
+      `    ${mark("pending")} ${import_picocolors.default.bold("MongoDB")}         ${import_picocolors.default.dim("not configured")}`
+    );
+  }
+  const redisCfg = renv.connectors.redis;
+  if (redisCfg?.url) {
+    const safeUrl = redactRedisUrl(redisCfg.url);
+    console.log(
+      `    ${mark("pending")} ${import_picocolors.default.bold("Redis")}           ${import_picocolors.default.dim(`configured \xB7 ${safeUrl}`)}`
+    );
   } else {
-    console.log(`    ${mark("pending")} ${import_picocolors.default.bold("MongoDB")}         ${import_picocolors.default.dim("not configured")}`);
+    console.log(
+      `    ${mark("pending")} ${import_picocolors.default.bold("Redis")}           ${import_picocolors.default.dim("not configured")}`
+    );
   }
   console.log("");
   return allOk;
 }
+function redactRedisUrl(raw) {
+  try {
+    const u = new URL(raw);
+    if (u.password) {
+      u.password = "***";
+    }
+    if (u.username) {
+      u.username = u.username === "" ? "" : "***";
+    }
+    return u.toString();
+  } catch {
+    return raw.replace(/\/\/:?[^@]*@/, "//:***@");
+  }
+}
 async function runStatus(configPath, opts) {
   console.log(import_picocolors.default.bold(`
 Horus ${HORUS_VERSION}`));
-  console.log(import_picocolors.default.dim(`pinned backend: ${PINNED_SOURCE_VERSION} \xB7 transport: HTTP/MCP only
-`));
+  console.log(
+    import_picocolors.default.dim(`pinned backend: ${PINNED_SOURCE_VERSION} \xB7 transport: HTTP/MCP only
+`)
+  );
   let config;
   const checks = [];
   try {
@@ -66618,8 +66845,12 @@ Horus ${HORUS_VERSION}`));
   }
   const dbUrl = config.database.url;
   const h = await checkDatabase(dbUrl);
-  console.log(`  ${mark(h.reachable)} ${import_picocolors.default.bold("Postgres")}  ${import_picocolors.default.dim(h.reachableDetail)}`);
-  console.log(`  ${mark(h.schemaReady)} ${import_picocolors.default.bold("Schema")}    ${import_picocolors.default.dim(h.schemaDetail)}`);
+  console.log(
+    `  ${mark(h.reachable)} ${import_picocolors.default.bold("Postgres")}  ${import_picocolors.default.dim(h.reachableDetail)}`
+  );
+  console.log(
+    `  ${mark(h.schemaReady)} ${import_picocolors.default.bold("Schema")}    ${import_picocolors.default.dim(h.schemaDetail)}`
+  );
   console.log("");
   const envList = listEnvironments(config);
   if (envList.length === 0) {
@@ -66634,7 +66865,7 @@ Horus ${HORUS_VERSION}`));
       console.error(import_picocolors.default.red(err.message));
       return 1;
     }
-    const ok = await checkEnv(renv);
+    const ok = await checkEnv(renv, { mongoFactory: opts?._mongoFactory });
     return ok ? 0 : 1;
   }
   let allHealthy = true;
@@ -66647,7 +66878,7 @@ Horus ${HORUS_VERSION}`));
       allHealthy = false;
       continue;
     }
-    const ok = await checkEnv(renv);
+    const ok = await checkEnv(renv, { mongoFactory: opts?._mongoFactory });
     if (!ok) allHealthy = false;
   }
   return checks.some((c) => c.ok === false && c.fatal) ? 1 : 0;
@@ -66666,11 +66897,32 @@ async function runExplain(query, opts) {
   }
   const symbols = await code.searchSymbols(query, 5);
   if (symbols.length === 0) {
-    console.log("No symbol found for: " + query);
+    if (await isQueueBoundary(config, query)) {
+      console.log(`No symbol found for: ${import_picocolors2.default.bold(query)}`);
+      console.log(
+        import_picocolors2.default.dim(`  "${query}" matches an async boundary \u2014 try: `) + import_picocolors2.default.bold(`horus queues ${query}`)
+      );
+      return 1;
+    }
+    console.log(`No symbol found for: ${query}`);
+    console.log(import_picocolors2.default.dim(`  Tip: use an exact class or function name, e.g. "MyService" or "processOrder"`));
     return 1;
   }
   const top = symbols[0];
   if (!top) return 1;
+  const isExactMatch = top.name.toLowerCase() === query.toLowerCase();
+  if (!isExactMatch) {
+    if (await isQueueBoundary(config, query)) {
+      console.log(`No exact symbol match for: ${import_picocolors2.default.bold(query)}`);
+      console.log(
+        import_picocolors2.default.dim(`  "${query}" matches an async boundary \u2014 try: `) + import_picocolors2.default.bold(`horus queues ${query}`)
+      );
+      return 1;
+    }
+    console.log(
+      import_picocolors2.default.yellow(`  No exact match for "${query}"`) + import_picocolors2.default.dim(` \u2014 showing closest: "${top.name}" (fuzzy match)`)
+    );
+  }
   const siblings = symbols.filter((s) => s.name === top.name && s.id !== top.id);
   const [ctx, impact, flows] = await Promise.all([
     code.context(top.id),
@@ -66698,6 +66950,20 @@ async function runExplain(query, opts) {
   renderReport(top, ctx, impact, flows, siblings);
   return 0;
 }
+async function isQueueBoundary(config, query) {
+  try {
+    const { db, sql: sql2 } = createDb(config.database.url);
+    try {
+      const edges = await listQueueEdges(db, { queueName: query });
+      return edges.length > 0;
+    } finally {
+      await sql2.end().catch(() => {
+      });
+    }
+  } catch {
+    return false;
+  }
+}
 function renderReport(top, ctx, impact, flows, siblings) {
   const kind = top.id.includes(":") ? top.id.substring(0, top.id.indexOf(":")) : top.id;
   const sym = ctx.symbol;
@@ -66798,22 +67064,22 @@ function extractQueueGraph(input) {
     }
   }
   const producers = [];
-  for (const pc33 of input.producerClasses) {
-    for (const m of pc33.content.matchAll(INJECT_QUEUE_RE)) {
+  for (const pc34 of input.producerClasses) {
+    for (const m of pc34.content.matchAll(INJECT_QUEUE_RE)) {
       const queue = m[1] ?? "";
-      if (queue) producers.push({ queue, symbol: pc33.name, file: pc33.filePath });
+      if (queue) producers.push({ queue, symbol: pc34.name, file: pc34.filePath });
     }
-    for (const m of pc33.content.matchAll(NEW_BULL_RE)) {
+    for (const m of pc34.content.matchAll(NEW_BULL_RE)) {
       if (m[2] !== "Queue") continue;
       const queue = resolveArg(m[3] ?? "", constMap);
       if (queue) {
-        producers.push({ queue, symbol: (m[1] ?? pc33.name) || baseName(pc33.filePath), file: pc33.filePath });
+        producers.push({ queue, symbol: (m[1] ?? pc34.name) || baseName(pc34.filePath), file: pc34.filePath });
       }
     }
-    for (const m of pc33.content.matchAll(QUEUE_NAME_CONST_RE)) {
+    for (const m of pc34.content.matchAll(QUEUE_NAME_CONST_RE)) {
       const ident = m[1] ?? "";
       const queue = m[2] ?? "";
-      if (queue) producers.push({ queue, symbol: ident || baseName(pc33.filePath), file: pc33.filePath });
+      if (queue) producers.push({ queue, symbol: ident || baseName(pc34.filePath), file: pc34.filePath });
     }
   }
   const workers = [];
@@ -66995,7 +67261,7 @@ async function runIndex(opts) {
       spawned = true;
       console.log(import_picocolors3.default.bold(`Indexing ${label}`) + import_picocolors3.default.dim(`  (${root})`));
       if (!await sourceAvailable()) {
-        console.error(import_picocolors3.default.red("Source-intelligence backend not found on PATH. Install it (see `horus setup`) and retry."));
+        console.error(import_picocolors3.default.red("horus-source not found on PATH. Install it: pip install horus-source"));
         return 1;
       }
       if (!isAnalyzed(root)) {
@@ -67073,64 +67339,29 @@ init_cjs_shims();
 var import_picocolors4 = __toESM(require_picocolors(), 1);
 async function runQueues(name, opts) {
   try {
-    const config = await loadConfig(opts.config);
+    const config = await loadConfig(opts.config, { name: opts.name });
     const { db, sql: sql2 } = createDb(config.database.url);
     try {
       const rows = await listQueueEdges(db, { project: opts.project, queueName: name });
+      console.log(
+        import_picocolors4.default.bold("Queue topology") + import_picocolors4.default.dim("  \xB7  source: code / source intelligence  \xB7  static (run horus index to refresh)")
+      );
+      console.log("");
       if (rows.length === 0) {
-        console.log("No queue edges. Run: horus index");
-        return 0;
+        console.log(import_picocolors4.default.dim("  No queue edges indexed. Run: horus index"));
+      } else {
+        const byQueue = buildQueueMap(rows);
+        printTopology(byQueue);
       }
-      const byQueue = /* @__PURE__ */ new Map();
-      for (const row of rows) {
-        const existing = byQueue.get(row.queueName);
-        if (existing) {
-          existing.push(row);
-        } else {
-          byQueue.set(row.queueName, [row]);
-        }
-      }
-      for (const [queueName, edges] of byQueue) {
-        console.log(import_picocolors4.default.bold(queueName));
-        const producerSet = /* @__PURE__ */ new Set();
-        const producerDetails = /* @__PURE__ */ new Map();
-        for (const edge of edges) {
-          if (edge.producerSymbol) {
-            producerSet.add(edge.producerSymbol);
-            if (edge.producerFile) {
-              producerDetails.set(edge.producerSymbol, edge.producerFile);
-            }
-          }
-        }
-        if (producerSet.size === 0) {
-          console.log("  producers: " + import_picocolors4.default.dim("none"));
-        } else {
-          const producerList = Array.from(producerSet).map((sym) => {
-            const file = producerDetails.get(sym);
-            return file ? `${sym} (${file})` : sym;
-          }).join(", ");
-          console.log("  producers: " + producerList);
-        }
-        const workerSet = /* @__PURE__ */ new Set();
-        const workerDetails = /* @__PURE__ */ new Map();
-        for (const edge of edges) {
-          if (edge.workerSymbol) {
-            workerSet.add(edge.workerSymbol);
-            if (edge.workerFile) {
-              workerDetails.set(edge.workerSymbol, edge.workerFile);
-            }
-          }
-        }
-        if (workerSet.size === 0) {
-          console.log("  workers: " + import_picocolors4.default.dim("none"));
-        } else {
-          const workerList = Array.from(workerSet).map((sym) => {
-            const file = workerDetails.get(sym);
-            return file ? `${sym} (${file})` : sym;
-          }).join(", ");
-          console.log("  workers: " + workerList);
-        }
-        console.log("");
+      console.log("");
+      if (opts.live) {
+        await runLiveMode(config, rows, name);
+      } else {
+        console.log(
+          import_picocolors4.default.dim(
+            "  Tip: run horus queues --live to show real-time Redis/BullMQ depths and failed-job counts."
+          )
+        );
       }
     } finally {
       await sql2.end();
@@ -67141,6 +67372,141 @@ async function runQueues(name, opts) {
     return 1;
   }
 }
+function buildQueueMap(rows) {
+  const byQueue = /* @__PURE__ */ new Map();
+  for (const row of rows) {
+    const existing = byQueue.get(row.queueName);
+    if (existing) {
+      existing.push(row);
+    } else {
+      byQueue.set(row.queueName, [row]);
+    }
+  }
+  return byQueue;
+}
+function printTopology(byQueue) {
+  for (const [queueName, edges] of byQueue) {
+    console.log(import_picocolors4.default.bold(queueName));
+    const producerSet = /* @__PURE__ */ new Set();
+    const producerDetails = /* @__PURE__ */ new Map();
+    for (const edge of edges) {
+      if (edge.producerSymbol) {
+        producerSet.add(edge.producerSymbol);
+        if (edge.producerFile) producerDetails.set(edge.producerSymbol, edge.producerFile);
+      }
+    }
+    if (producerSet.size === 0) {
+      console.log("  producers: " + import_picocolors4.default.dim("none"));
+    } else {
+      const list = Array.from(producerSet).map((sym) => {
+        const file = producerDetails.get(sym);
+        return file ? `${sym} (${file})` : sym;
+      }).join(", ");
+      console.log("  producers: " + list);
+    }
+    const workerSet = /* @__PURE__ */ new Set();
+    const workerDetails = /* @__PURE__ */ new Map();
+    for (const edge of edges) {
+      if (edge.workerSymbol) {
+        workerSet.add(edge.workerSymbol);
+        if (edge.workerFile) workerDetails.set(edge.workerSymbol, edge.workerFile);
+      }
+    }
+    if (workerSet.size === 0) {
+      console.log("  workers: " + import_picocolors4.default.dim("none"));
+    } else {
+      const list = Array.from(workerSet).map((sym) => {
+        const file = workerDetails.get(sym);
+        return file ? `${sym} (${file})` : sym;
+      }).join(", ");
+      console.log("  workers: " + list);
+    }
+    console.log("");
+  }
+}
+async function runLiveMode(config, rows, nameFilter) {
+  let renv;
+  try {
+    renv = resolveEnvironment(config);
+  } catch (err) {
+    console.log(import_picocolors4.default.bold("Live queue state") + import_picocolors4.default.dim("  \xB7  source: Redis/BullMQ"));
+    console.log(import_picocolors4.default.yellow(`  \u26A0 Cannot resolve environment: ${err.message}`));
+    return;
+  }
+  const queueProvider = queueForEnv(renv);
+  if (!queueProvider) {
+    console.log(import_picocolors4.default.bold("Live queue state") + import_picocolors4.default.dim("  \xB7  source: Redis/BullMQ"));
+    console.log(
+      import_picocolors4.default.yellow("  \u25CB Redis not configured \u2014 run: ") + import_picocolors4.default.bold("horus connect redis")
+    );
+    return;
+  }
+  let headerPrinted = false;
+  try {
+    const health = await queueProvider.health();
+    if (!health.ok) {
+      console.log(import_picocolors4.default.bold("Live queue state") + import_picocolors4.default.dim("  \xB7  source: Redis/BullMQ"));
+      console.log(import_picocolors4.default.red(`  \u2717 Redis unreachable: ${health.detail}`));
+      return;
+    }
+    const topologyNames = [...buildQueueMap(rows).keys()];
+    const queueNames = nameFilter !== void 0 ? [nameFilter] : topologyNames.length > 0 ? topologyNames : void 0;
+    const state = await queueProvider.analyzeQueues({ queueNames });
+    const collectedAt = new Date(state.collectedAt).toLocaleTimeString();
+    console.log(
+      import_picocolors4.default.bold("Live queue state") + import_picocolors4.default.dim(`  \xB7  source: Redis/BullMQ (prefix: ${state.prefix})  \xB7  collected: ${collectedAt}`)
+    );
+    headerPrinted = true;
+    console.log("");
+    if (state.queues.length === 0) {
+      console.log(import_picocolors4.default.dim("  No queues found in Redis."));
+      console.log(
+        import_picocolors4.default.dim(
+          "  If queues exist under a custom prefix, set the BullMQ prefix in your connector config."
+        )
+      );
+      return;
+    }
+    printLiveTable(state.queues);
+  } catch (err) {
+    if (!headerPrinted) {
+      console.log(import_picocolors4.default.bold("Live queue state") + import_picocolors4.default.dim("  \xB7  source: Redis/BullMQ"));
+    }
+    console.log(import_picocolors4.default.red(`  \u2717 ${err.message}`));
+  } finally {
+    await queueProvider.close().catch(() => {
+    });
+  }
+}
+function printLiveTable(queues) {
+  const nameWidth = Math.max(10, ...queues.map((q) => q.queueName.length));
+  const numWidth = 7;
+  const header = "  " + "queue".padEnd(nameWidth) + "  " + "waiting".padStart(numWidth) + "  " + "active".padStart(numWidth) + "  " + "failed".padStart(numWidth) + "  " + "delayed".padStart(numWidth) + "  " + "paused".padStart(numWidth);
+  console.log(import_picocolors4.default.dim(header));
+  console.log(import_picocolors4.default.dim("  " + "\u2500".repeat(header.length - 2)));
+  for (const q of queues) {
+    const hasIssue = q.failed > 0 || q.waiting > 100 || q.delayed > 50 || q.isPaused;
+    const color = hasIssue ? import_picocolors4.default.yellow : (s) => s;
+    const row = "  " + q.queueName.padEnd(nameWidth) + "  " + String(q.waiting).padStart(numWidth) + "  " + String(q.active).padStart(numWidth) + "  " + String(q.failed).padStart(numWidth) + "  " + String(q.delayed).padStart(numWidth) + "  " + (q.isPaused ? import_picocolors4.default.yellow("paused") : String(q.paused).padStart(numWidth));
+    console.log(color(row));
+    if (q.oldestWaitingMs !== void 0) {
+      const age = formatAge(q.oldestWaitingMs);
+      console.log(import_picocolors4.default.dim(`    oldest waiting: ${age}`));
+    }
+    if (q.failedBreakdown && q.failedBreakdown.length > 0) {
+      for (const { reason, count } of q.failedBreakdown.slice(0, 3)) {
+        console.log(import_picocolors4.default.red(`    \u2717 [${count}x] ${reason}`));
+      }
+    }
+  }
+  console.log("");
+}
+function formatAge(ms) {
+  if (ms < 6e4) return `${Math.round(ms / 1e3)}s`;
+  if (ms < 36e5) return `${Math.round(ms / 6e4)}m`;
+  if (ms < 864e5) return `${Math.round(ms / 36e5)}h`;
+  return `${Math.round(ms / 864e5)}d`;
+}
 
 // ../../packages/cli/src/commands/investigate.ts
 init_cjs_shims();
@@ -67157,8 +67523,96 @@ init_cjs_shims();
 
 // ../../packages/engine/src/ownership.ts
 init_cjs_shims();
+var CODE_EXTENSIONS = /* @__PURE__ */ new Set([
+  "ts",
+  "tsx",
+  "js",
+  "jsx",
+  "mjs",
+  "cjs",
+  "py",
+  "rb",
+  "go",
+  "rs",
+  "java",
+  "kt",
+  "swift",
+  "cs",
+  "cpp",
+  "c",
+  "h",
+  "hpp",
+  "cc",
+  "vue",
+  "svelte",
+  "astro",
+  "php",
+  "scala",
+  "clj",
+  "ex",
+  "exs",
+  "hs",
+  "sh",
+  "bash",
+  "zsh",
+  "json",
+  "yaml",
+  "yml",
+  "toml",
+  "sql",
+  "graphql",
+  "proto",
+  "html",
+  "css",
+  "scss",
+  "sass",
+  "less",
+  "md",
+  "mdx"
+]);
+function looksLikeFilePath(query) {
+  const base2 = query.split("/").pop() ?? "";
+  const dotIdx = base2.lastIndexOf(".");
+  if (dotIdx <= 0) return false;
+  return CODE_EXTENSIONS.has(base2.slice(dotIdx + 1).toLowerCase());
+}
 async function estimateOwnership(query, deps) {
-  const top = deps.symbol ?? (await deps.code.searchSymbols(query, 5))[0] ?? null;
+  let top = deps.symbol ?? null;
+  const needsSearch = deps.symbol === void 0 || deps.symbol === null;
+  if (needsSearch) {
+    if (looksLikeFilePath(query)) {
+      const queryBase = query.split("/").pop() ?? query;
+      const broad = await deps.code.searchSymbols(query, 20);
+      const byFile = /* @__PURE__ */ new Map();
+      for (const sym of broad) {
+        const fp = sym.filePath;
+        if (fp === query || fp.endsWith("/" + query) || fp.split("/").pop() === queryBase) {
+          if (!byFile.has(fp)) byFile.set(fp, sym);
+        }
+      }
+      if (byFile.size === 1) {
+        top = [...byFile.values()][0] ?? null;
+      } else if (byFile.size > 1) {
+        return {
+          query,
+          symbol: null,
+          file: null,
+          contributors: [],
+          likelyMaintainer: null,
+          maintainerShare: 0,
+          mostActiveRecent: null,
+          confidence: 0,
+          evidence: [],
+          candidates: [...byFile.keys()],
+          note: "Ambiguous: " + byFile.size + ' files match "' + query + '". Use a more specific path to disambiguate.'
+        };
+      } else {
+        top = (await deps.code.searchSymbols(query, 5))[0] ?? null;
+      }
+    } else {
+      top = (await deps.code.searchSymbols(query, 5))[0] ?? null;
+    }
+  }
   const file = top?.filePath ?? null;
   if (file === null) {
     return {
@@ -67282,7 +67736,48 @@ function processEvidence(ev, nodes, edges) {
       addEdge(edges, "observed_in", evId, deployId, ev.id);
       return;
     }
-    // symbol, flow, impact, redis-key, metric: evidence node only, no infra derived
+    case "symbol": {
+      const p = ev.payload;
+      const sym = p.symbol ?? {};
+      const name = sym.name ?? "";
+      if (!name) return;
+      const symbolId = `symbol:${name}`;
+      upsertNode(nodes, symbolId, "symbol", name, ev.id);
+      addEdge(edges, "observed_in", evId, symbolId, ev.id);
+      const filePath = sym.filePath ?? p.filePath ?? ev.links.file;
+      if (filePath) {
+        const fileId = `file:${filePath}`;
+        upsertNode(nodes, fileId, "file", filePath, ev.id);
+        addEdge(edges, "in-file", symbolId, fileId, ev.id);
+      }
+      return;
+    }
+    case "flow": {
+      const p = ev.payload;
+      const name = p.name ?? ev.title;
+      const flowNodeId = `flow:${p.flowId ?? name}`;
+      upsertNode(nodes, flowNodeId, "flow", name, ev.id);
+      addEdge(edges, "observed_in", evId, flowNodeId, ev.id);
+      for (const stepName of p.steps ?? []) {
+        if (!stepName) continue;
+        const stepSymbolId = `symbol:${stepName}`;
+        upsertNode(nodes, stepSymbolId, "symbol", stepName);
+        addEdge(edges, "symbol-in-flow", stepSymbolId, flowNodeId, ev.id);
+      }
+      return;
+    }
+    case "metric": {
+      const p = ev.payload;
+      const labels = p.labels ?? {};
+      const svc = labels["service"] ?? labels["job"] ?? labels["instance"];
+      if (svc) {
+        const serviceId = `service:${svc}`;
+        upsertNode(nodes, serviceId, "service", svc, ev.id);
+        addEdge(edges, "metric-from", evId, serviceId, ev.id);
+      }
+      return;
+    }
+    // impact, redis-key: evidence node only, no infra derived
     default:
       return;
   }
@@ -67303,18 +67798,28 @@ function scoreImplication(nodes, edges, evidence2) {
   const evById = new Map(evidence2.map((e) => [e.id, e]));
   for (const node of nodes.values()) {
     if (node.type === "evidence") continue;
+    if (node.type === "symbol" || node.type === "file" || node.type === "flow") continue;
     node.implicationScore = node.evidenceIds.reduce((max, eid) => {
       const ev = evById.get(eid);
       if (!ev || isExcludedFromImplication(ev)) return max;
       return Math.max(max, ev.relevance);
     }, 0);
   }
+  const CODE_TOPOLOGY_NODE_TYPES = /* @__PURE__ */ new Set([
+    "evidence",
+    "symbol",
+    "file",
+    "flow"
+  ]);
   const adj = /* @__PURE__ */ new Map();
   for (const edge of edges.values()) {
     if (edge.type === "observed_in") continue;
+    if (edge.type === "in-file") continue;
+    if (edge.type === "symbol-in-flow") continue;
+    if (edge.type === "metric-from") continue;
     const f = nodes.get(edge.from);
     const t = nodes.get(edge.to);
-    if (!f || !t || f.type === "evidence" || t.type === "evidence") continue;
+    if (!f || !t || CODE_TOPOLOGY_NODE_TYPES.has(f.type) || CODE_TOPOLOGY_NODE_TYPES.has(t.type)) continue;
     const fs3 = adj.get(edge.from) ?? /* @__PURE__ */ new Set();
     const ts = adj.get(edge.to) ?? /* @__PURE__ */ new Set();
     fs3.add(edge.to);
@@ -67339,6 +67844,7 @@ function scoreImplication(nodes, edges, evidence2) {
   }
   for (const node of nodes.values()) {
     if (node.type === "evidence") continue;
+    if (node.type === "symbol" || node.type === "file" || node.type === "flow") continue;
     node.implicated = node.implicationScore >= IMPLICATION_THRESHOLD;
   }
 }
@@ -67370,6 +67876,302 @@ function implicatedNodeIds(graph, evidenceIds) {
     (n) => n.type !== "evidence" && n.implicated && n.evidenceIds.some((eid) => idSet.has(eid))
   ).map((n) => n.id);
 }
+function implicatedEvidenceIdsByNodeType(graph, nodeType) {
+  const ids2 = [];
+  for (const node of graph.nodes) {
+    if (node.type !== nodeType || !node.implicated) continue;
+    for (const eid of node.evidenceIds) {
+      if (!ids2.includes(eid)) ids2.push(eid);
+    }
+  }
+  return ids2;
+}
+
+// ../../packages/engine/src/cause-chain.ts
+init_cjs_shims();
+function groupByKind(ids2, evById) {
+  const map2 = /* @__PURE__ */ new Map();
+  for (const id of ids2) {
+    const ev = evById.get(id);
+    if (!ev) continue;
+    const list = map2.get(ev.kind) ?? [];
+    list.push(ev);
+    map2.set(ev.kind, list);
+  }
+  return map2;
+}
+function ids(evs) {
+  return evs.map((e) => e.id);
+}
+function firstImplicatedNode(graph, type) {
+  return graph.nodes.find((n) => n.type === type && n.implicated)?.id;
+}
+function chainForDeploymentRegression(hyp, byKind, graph, seedLabel) {
+  const commitEvs = byKind.get("commit") ?? [];
+  const symbolEvs = byKind.get("symbol") ?? [];
+  const logEvs = byKind.get("log") ?? [];
+  const metricEvs = byKind.get("metric") ?? [];
+  const impactEvs = byKind.get("impact") ?? [];
+  const runtimeEvIds = [...ids(logEvs), ...ids(metricEvs)];
+  const steps = [];
+  steps.push({
+    role: "trigger",
+    label: commitEvs.length > 0 ? `Recent change: ${commitEvs[0]?.title ?? "commit"}` : "Recent change (commit range not captured)",
+    evidenceIds: ids(commitEvs),
+    graphNodeId: graph.nodes.find((n) => n.type === "deployment")?.id
+  });
+  steps.push({
+    role: "propagation",
+    label: `Affected code path: ${seedLabel}` + (impactEvs.length > 0 ? ` (${impactEvs[0]?.payload?.affected ?? "?"} downstream symbol(s))` : ""),
+    evidenceIds: [...ids(symbolEvs), ...ids(impactEvs)],
+    graphNodeId: graph.nodes.find((n) => n.type === "symbol")?.id
+  });
+  if (runtimeEvIds.length > 0) {
+    steps.push({
+      role: "symptom",
+      label: logEvs.length > 0 ? `Runtime error signatures observed (${logEvs.length} signature(s))` : `Metric anomalies observed (${metricEvs.length} signal(s))`,
+      evidenceIds: runtimeEvIds,
+      graphNodeId: firstImplicatedNode(graph, "service")
+    });
+  }
+  const nonEmpty = steps.filter((s) => s.evidenceIds.length > 0 || s.role === "trigger");
+  const summary = `Change to ${seedLabel} \u2192 affected code path` + (runtimeEvIds.length > 0 ? " \u2192 runtime symptoms observed" : "");
+  return { hypothesisId: hyp.id, category: hyp.category, confidence: hyp.confidence, steps: nonEmpty, summary };
+}
+function chainForQueueBacklog(hyp, byKind, graph, queueName) {
+  const queueEdgeEvs = byKind.get("queue-edge") ?? [];
+  const queueStateEvs = byKind.get("queue-state") ?? [];
+  const logEvs = byKind.get("log") ?? [];
+  const metricEvs = byKind.get("metric") ?? [];
+  const queueNodeId = queueName ? graph.nodes.find((n) => n.id === `queue:${queueName}`)?.id : firstImplicatedNode(graph, "queue");
+  const steps = [];
+  steps.push({
+    role: "trigger",
+    label: queueName ? `Producer enqueuing to "${queueName}" faster than consumer drains` : "Producer enqueuing faster than consumer drains",
+    evidenceIds: ids(queueEdgeEvs),
+    graphNodeId: queueNodeId
+  });
+  if (queueStateEvs.length > 0) {
+    steps.push({
+      role: "propagation",
+      label: `Queue depth growing${queueName ? ` on "${queueName}"` : ""}`,
+      evidenceIds: ids(queueStateEvs),
+      graphNodeId: queueNodeId
+    });
+  }
+  const symptomEvIds = [...ids(logEvs), ...ids(metricEvs)];
+  if (symptomEvIds.length > 0) {
+    steps.push({
+      role: "symptom",
+      label: "Worker throughput degraded \u2014 downstream delays observable",
+      evidenceIds: symptomEvIds,
+      graphNodeId: firstImplicatedNode(graph, "worker") ?? firstImplicatedNode(graph, "service")
+    });
+  }
+  const summary = (queueName ? `"${queueName}" queue` : "Queue") + " backed up \u2014 producers outpacing consumers" + (symptomEvIds.length > 0 ? " \u2192 downstream delays" : "");
+  return { hypothesisId: hyp.id, category: hyp.category, confidence: hyp.confidence, steps, summary };
+}
+function chainForWorkerSlowdown(hyp, byKind, graph, queueName) {
+  const queueStateEvs = byKind.get("queue-state") ?? [];
+  const metricEvs = byKind.get("metric") ?? [];
+  const logEvs = byKind.get("log") ?? [];
+  const workerNodeId = firstImplicatedNode(graph, "worker");
+  const queueNodeId = queueName ? graph.nodes.find((n) => n.id === `queue:${queueName}`)?.id : firstImplicatedNode(graph, "queue");
+  const steps = [];
+  const triggerEvIds = [...ids(queueStateEvs.filter((e) => {
+    const p = e.payload;
+    return p?.isPaused === true || p?.active === 0;
+  })), ...ids(metricEvs)];
+  steps.push({
+    role: "trigger",
+    label: queueName ? `Workers consuming "${queueName}" stalled or processing slowly` : "Workers stalled or processing slowly",
+    evidenceIds: triggerEvIds.length > 0 ? triggerEvIds : ids(queueStateEvs),
+    graphNodeId: workerNodeId
+  });
+  if (queueStateEvs.length > 0) {
+    steps.push({
+      role: "propagation",
+      label: `Queue depth accumulating${queueName ? ` on "${queueName}"` : ""}`,
+      evidenceIds: ids(queueStateEvs),
+      graphNodeId: queueNodeId
+    });
+  }
+  if (logEvs.length > 0) {
+    steps.push({
+      role: "symptom",
+      label: "Downstream latency and error signatures observed",
+      evidenceIds: ids(logEvs),
+      graphNodeId: firstImplicatedNode(graph, "service")
+    });
+  }
+  const summary = "Worker stall on " + (queueName ? `"${queueName}"` : "queue") + " \u2192 queue depth growing" + (logEvs.length > 0 ? " \u2192 downstream errors" : "");
+  return { hypothesisId: hyp.id, category: hyp.category, confidence: hyp.confidence, steps, summary };
+}
+function chainForExternalApiLatency(hyp, byKind, graph) {
+  const metricEvs = byKind.get("metric") ?? [];
+  const logEvs = byKind.get("log") ?? [];
+  const queueStateEvs = byKind.get("queue-state") ?? [];
+  const steps = [];
+  steps.push({
+    role: "trigger",
+    label: `External or upstream dependency latency spike (${metricEvs.length} metric signal(s))`,
+    evidenceIds: ids(metricEvs),
+    graphNodeId: firstImplicatedNode(graph, "service")
+  });
+  if (logEvs.length > 0) {
+    steps.push({
+      role: "propagation",
+      label: "Calls to upstream timing out or returning errors",
+      evidenceIds: ids(logEvs),
+      graphNodeId: firstImplicatedNode(graph, "service")
+    });
+  }
+  if (queueStateEvs.length > 0) {
+    steps.push({
+      role: "symptom",
+      label: "Queue backlog accumulating from stalled downstream workers",
+      evidenceIds: ids(queueStateEvs),
+      graphNodeId: firstImplicatedNode(graph, "queue")
+    });
+  }
+  const summary = "External API latency spike" + (logEvs.length > 0 ? " \u2192 timeout errors propagating" : "") + (queueStateEvs.length > 0 ? " \u2192 queue backlog" : "");
+  return { hypothesisId: hyp.id, category: hyp.category, confidence: hyp.confidence, steps, summary };
+}
+function chainForInfrastructure(hyp, byKind, graph) {
+  const stateEvs = byKind.get("state") ?? [];
+  const queueStateEvs = byKind.get("queue-state") ?? [];
+  const logEvs = byKind.get("log") ?? [];
+  const metricEvs = byKind.get("metric") ?? [];
+  const triggerEvIds = [...ids(stateEvs), ...ids(metricEvs)];
+  const propagationEvIds = [...ids(queueStateEvs)];
+  const symptomEvIds = ids(logEvs);
+  const steps = [];
+  steps.push({
+    role: "trigger",
+    label: "Infrastructure component degraded (database, network, or cache)",
+    evidenceIds: triggerEvIds.length > 0 ? triggerEvIds : ids(queueStateEvs),
+    graphNodeId: firstImplicatedNode(graph, "collection") ?? firstImplicatedNode(graph, "database") ?? firstImplicatedNode(graph, "queue")
+  });
+  if (propagationEvIds.length > 0) {
+    steps.push({
+      role: "propagation",
+      label: "Dependent services / workers lost access to the degraded component",
+      evidenceIds: propagationEvIds,
+      graphNodeId: firstImplicatedNode(graph, "worker") ?? firstImplicatedNode(graph, "service")
+    });
+  }
+  if (symptomEvIds.length > 0) {
+    steps.push({
+      role: "symptom",
+      label: "Processing failures and error signatures observed",
+      evidenceIds: symptomEvIds,
+      graphNodeId: firstImplicatedNode(graph, "service")
+    });
+  }
+  const summary = "Infrastructure degradation \u2192 services/workers affected" + (symptomEvIds.length > 0 ? " \u2192 processing failures" : "");
+  return { hypothesisId: hyp.id, category: hyp.category, confidence: hyp.confidence, steps, summary };
+}
+function chainForRetryStorm(hyp, byKind, graph) {
+  const logEvs = byKind.get("log") ?? [];
+  const queueStateEvs = byKind.get("queue-state") ?? [];
+  const metricEvs = byKind.get("metric") ?? [];
+  const steps = [];
+  steps.push({
+    role: "trigger",
+    label: `Initial failure with automatic retry enabled (${logEvs.length} log signature(s) spiking)`,
+    evidenceIds: ids(logEvs),
+    graphNodeId: firstImplicatedNode(graph, "service")
+  });
+  if (queueStateEvs.length > 0) {
+    steps.push({
+      role: "propagation",
+      label: "Retry amplification growing queue depth and error volume",
+      evidenceIds: ids(queueStateEvs),
+      graphNodeId: firstImplicatedNode(graph, "queue")
+    });
+  }
+  if (metricEvs.length > 0) {
+    steps.push({
+      role: "symptom",
+      label: "Cascading load visible in metric anomalies",
+      evidenceIds: ids(metricEvs),
+      graphNodeId: firstImplicatedNode(graph, "service")
+    });
+  }
+  const summary = "Initial failure + retry \u2192 amplified load" + (metricEvs.length > 0 ? " \u2192 cascading metric anomalies" : "");
+  return { hypothesisId: hyp.id, category: hyp.category, confidence: hyp.confidence, steps, summary };
+}
+function chainGeneric(hyp, byKind, graph) {
+  const allEvIds = hyp.supportingEvidenceIds;
+  const logOrMetric = [
+    ...byKind.get("log") ?? [],
+    ...byKind.get("metric") ?? []
+  ];
+  const steps = [
+    {
+      role: "trigger",
+      label: hyp.statement,
+      evidenceIds: allEvIds,
+      graphNodeId: firstImplicatedNode(graph, "service") ?? firstImplicatedNode(graph, "queue")
+    }
+  ];
+  if (logOrMetric.length > 0) {
+    steps.push({
+      role: "symptom",
+      label: "Observable symptoms in logs / metrics",
+      evidenceIds: ids(logOrMetric),
+      graphNodeId: firstImplicatedNode(graph, "service")
+    });
+  }
+  return {
+    hypothesisId: hyp.id,
+    category: hyp.category,
+    confidence: hyp.confidence,
+    steps,
+    summary: hyp.statement
+  };
+}
+function buildCauseChains(hypotheses2, evidence2, graph, seedLabel) {
+  const evById = new Map(evidence2.map((e) => [e.id, e]));
+  const chains = [];
+  for (const hyp of hypotheses2) {
+    if (hyp.verdict !== "supported" && hyp.verdict !== "weakened") continue;
+    const byKind = groupByKind(hyp.supportingEvidenceIds, evById);
+    let chain;
+    switch (hyp.category) {
+      case "deployment-regression":
+        chain = chainForDeploymentRegression(hyp, byKind, graph, seedLabel);
+        break;
+      case "queue-backlog": {
+        const queueName = extractQueueName(hyp.statement);
+        chain = chainForQueueBacklog(hyp, byKind, graph, queueName);
+        break;
+      }
+      case "worker-slowdown": {
+        const queueName = extractQueueName(hyp.statement);
+        chain = chainForWorkerSlowdown(hyp, byKind, graph, queueName);
+        break;
+      }
+      case "external-api-latency":
+        chain = chainForExternalApiLatency(hyp, byKind, graph);
+        break;
+      case "infrastructure":
+        chain = chainForInfrastructure(hyp, byKind, graph);
+        break;
+      case "retry-storm":
+        chain = chainForRetryStorm(hyp, byKind, graph);
+        break;
+      default:
+        chain = chainGeneric(hyp, byKind, graph);
+    }
+    chains.push(chain);
+  }
+  return chains;
+}
+function extractQueueName(statement) {
+  const m = /\bon ([a-zA-Z0-9_-]+)/.exec(statement) ?? /consuming ([a-zA-Z0-9_-]+)/.exec(statement);
+  return m?.[1];
+}
 
 // ../../packages/engine/src/score-cause.ts
 init_cjs_shims();
@@ -67632,6 +68434,15 @@ function generateHypotheses(evidence2, _correlation, ctx) {
   const queueEvs = evidence2.filter((e) => e.kind === "queue-edge");
   const hasCommit = commitEvs.length > 0;
   const { queues } = ctx;
+  const logSpikeEvIds = evidence2.filter((e) => e.kind === "log" && e.ratio !== void 0 && e.ratio >= 2).map((e) => e.id);
+  const stateEvIds = evidence2.filter((e) => e.kind === "state").map((e) => e.id);
+  const allQueueBacklogEvIds = [
+    ...ctx.queueBacklogEvIdsByQueue?.values() ?? []
+  ].flat();
+  const allQueueStarvationEvIds = [
+    ...ctx.queueStarvationEvIdsByQueue?.values() ?? []
+  ].flat();
+  const graphImplicatedCollectionEvIds = ctx.graph ? implicatedEvidenceIdsByNodeType(ctx.graph, "collection") : [];
   const hyps = [];
   hyps.push({
     id: globalThis.crypto.randomUUID(),
@@ -67640,9 +68451,7 @@ function generateHypotheses(evidence2, _correlation, ctx) {
     confidence: hasCommit ? 0.5 : 0.15,
     supportingEvidenceIds: commitEvs.map((e) => e.id),
     contradictingEvidenceIds: [],
-    missingEvidence: hasCommit ? [] : [
-      "A change/deployment range \u2014 re-run with --since <ref> to diff what shipped"
-    ]
+    missingEvidence: hasCommit ? [] : ctx.sinceProvided ? ["No git changes found in the specified range \u2014 verify the ref is accessible or use HEAD~N for exact commit ranges"] : ["A change/deployment range \u2014 re-run with --since <ref> to diff what shipped"]
   });
   for (const queueName of queues) {
     const backlogEvIds = ctx.queueBacklogEvIdsByQueue?.get(queueName) ?? [];
@@ -67678,25 +68487,32 @@ function generateHypotheses(evidence2, _correlation, ctx) {
     contradictingEvidenceIds: [],
     missingEvidence: latencyMetricEvIds.length > 0 ? [] : ["Request latency metrics (Grafana) + error logs (Elasticsearch)"]
   });
+  const retryStormSupport = [.../* @__PURE__ */ new Set([...logSpikeEvIds, ...allQueueBacklogEvIds])];
   hyps.push({
     id: globalThis.crypto.randomUUID(),
     category: "retry-storm",
     statement: "A retry storm is amplifying load on the failing path.",
-    confidence: 0.15,
-    supportingEvidenceIds: [],
-    contradictingEvidenceIds: [],
-    missingEvidence: [
-      "Retry/error logs + queue retry statistics (Elasticsearch + BullMQ)"
-    ]
+    confidence: retryStormSupport.length > 0 ? 0.35 : 0.15,
+    supportingEvidenceIds: retryStormSupport,
+    contradictingEvidenceIds: allQueueStarvationEvIds,
+    missingEvidence: retryStormSupport.length > 0 ? [] : ["Retry/error logs + queue retry statistics (Elasticsearch + BullMQ)"]
   });
+  const infraSupport = [
+    .../* @__PURE__ */ new Set([
+      ...stateEvIds,
+      ...allQueueStarvationEvIds,
+      ...ctx.latencyMetricEvIds ?? [],
+      ...graphImplicatedCollectionEvIds
+    ])
+  ];
   hyps.push({
     id: globalThis.crypto.randomUUID(),
     category: "infrastructure",
     statement: "An infrastructure issue (database, Redis, or network) is degrading processing.",
-    confidence: 0.15,
-    supportingEvidenceIds: [],
+    confidence: infraSupport.length > 0 ? 0.35 : 0.15,
+    supportingEvidenceIds: infraSupport,
     contradictingEvidenceIds: [],
-    missingEvidence: ["Infra/Redis metrics (Grafana) + Redis state"]
+    missingEvidence: infraSupport.length > 0 ? [] : ["Infra/Redis metrics (Grafana) + Redis state"]
   });
   hyps.sort((a, b2) => b2.confidence - a.confidence);
   return hyps;
@@ -67917,7 +68733,8 @@ function detectMissingEvidence(r, connectors = {}) {
     blindSpots.push("Cannot see the real error.");
   }
   if (!hasMetric && !(connectors.grafana && connectors.metricsCollected)) {
-    const metricsWhy = !connectors.grafana ? "No Grafana connector configured \u2014 cannot see latency/error-rate trends." : "Grafana metrics collection failed or timed out \u2014 metric trends unavailable for this investigation.";
+    const failureDetail = connectors.metricsFailureReason ? ` (${connectors.metricsFailureReason})` : "";
+    const metricsWhy = !connectors.grafana ? "No Grafana connector configured \u2014 cannot see latency/error-rate trends." : `Grafana metrics collection failed or timed out${failureDetail} \u2014 metric trends unavailable for this investigation.`;
     const metricsNextSource = !connectors.grafana ? "Add a `grafana` connector to the environment" : 'Check Grafana connectivity, then run `horus metrics "<hint>"` manually';
     gaps.push({
       dimension: "metrics",
@@ -67931,7 +68748,7 @@ function detectMissingEvidence(r, connectors = {}) {
     gaps.push({
       dimension: "queue runtime state",
       why: connectors.redis ? "Queue topology is known but live depth + failed/delayed counts were not collected." : "Queue topology is known but there is no Redis/BullMQ connector for live depth/failures.",
-      nextSource: connectors.redis ? "Inspect `horus queues`" : "Add a `redis` connector to read live BullMQ state",
+      nextSource: connectors.redis ? "Run `horus queues --live` to see real-time queue depths and failed-job counts" : "Add a `redis` connector to read live BullMQ state",
       confidenceImpact: 0.1
     });
     blindSpots.push("Cannot determine if the queue is actually backed up.");
@@ -67939,8 +68756,8 @@ function detectMissingEvidence(r, connectors = {}) {
   if (!hasCommit) {
     gaps.push({
       dimension: "deployment records",
-      why: "No deployment/change data in scope \u2014 cannot tell what shipped before the incident.",
-      nextSource: "Re-run with --since <ref>, or `horus what-changed <service>`",
+      why: connectors.sinceProvided ? "No git changes found in the specified range \u2014 the ref may not be diffable or no commits fall in this window." : "No deployment/change data in scope \u2014 cannot tell what shipped before the incident.",
+      nextSource: connectors.sinceProvided ? "Use HEAD~N or a specific SHA/branch for git diff ranges (e.g. --since HEAD~5)" : "Re-run with --since <ref>, or `horus what-changed <service>`",
       confidenceImpact: 0.08
     });
     blindSpots.push("Cannot correlate with a recent change.");
@@ -68117,33 +68934,33 @@ function buildGroups(evidence2) {
     }
   }
   const raw = [];
-  for (const [key, ids] of symbolMap) {
-    if (ids.length >= 2) {
+  for (const [key, ids2] of symbolMap) {
+    if (ids2.length >= 2) {
       raw.push({
         key,
         dimension: "symbol",
         reason: `Share symbol ${key}`,
-        evidenceIds: [...ids]
+        evidenceIds: [...ids2]
       });
     }
   }
-  for (const [key, ids] of fileMap) {
-    if (ids.length >= 2) {
+  for (const [key, ids2] of fileMap) {
+    if (ids2.length >= 2) {
       raw.push({
         key,
         dimension: "file",
         reason: `Share file ${key}`,
-        evidenceIds: [...ids]
+        evidenceIds: [...ids2]
       });
     }
   }
-  for (const [key, ids] of queueMap) {
-    if (ids.length >= 2) {
+  for (const [key, ids2] of queueMap) {
+    if (ids2.length >= 2) {
       raw.push({
         key,
         dimension: "queue",
         reason: `Share queue ${key}`,
-        evidenceIds: [...ids]
+        evidenceIds: [...ids2]
       });
     }
   }
@@ -68167,13 +68984,13 @@ function buildChains(evidence2) {
   const commitEvs = evidence2.filter((e) => e.kind === "commit");
   const symbolEvs = evidence2.filter((e) => e.kind === "symbol");
   const relevanceById = new Map(evidence2.map((e) => [e.id, e.relevance]));
-  function avgRelevance(ids) {
-    if (ids.length === 0) return 0;
+  function avgRelevance(ids2) {
+    if (ids2.length === 0) return 0;
     let sum = 0;
-    for (const id of ids) {
+    for (const id of ids2) {
       sum += relevanceById.get(id) ?? 0;
     }
-    return sum / ids.length;
+    return sum / ids2.length;
   }
   const chains = [];
   if (queueEdges2.length > 0) {
@@ -68277,7 +69094,7 @@ function seedRole(s) {
   if (/util|helper/i.test(hay)) return "util";
   return "code";
 }
-function scoreSeed(s, index2) {
+function scoreSeed(s, index2, hintTokens) {
   const hay = `${s.name} ${s.filePath}`.toLowerCase();
   let score = 0;
   if (PREFER.test(hay)) score += 3;
@@ -68285,10 +69102,20 @@ function scoreSeed(s, index2) {
   if (/\.(resolver|controller|service)\.[jt]sx?$/i.test(s.filePath)) score += 2;
   if (/(^|\/)scripts?\//i.test(s.filePath)) score -= 2;
   score += Math.max(0, 5 - index2) * 0.1;
+  if (hintTokens !== void 0 && hintTokens.length > 0) {
+    let hintBoost = 0;
+    for (const tok of hintTokens) {
+      if (hay.includes(tok)) {
+        hintBoost += 2;
+        if (hintBoost >= 6) break;
+      }
+    }
+    score += hintBoost;
+  }
   return score;
 }
-function rankSeeds(seeds) {
-  return seeds.map((symbol, i) => ({ symbol, score: scoreSeed(symbol, i), role: seedRole(symbol), i })).sort((a, b2) => b2.score === a.score ? a.i - b2.i : b2.score - a.score).map(({ symbol, score, role }) => ({ symbol, score, role }));
+function rankSeeds(seeds, hintTokens) {
+  return seeds.map((symbol, i) => ({ symbol, score: scoreSeed(symbol, i, hintTokens), role: seedRole(symbol), i })).sort((a, b2) => b2.score === a.score ? a.i - b2.i : b2.score - a.score).map(({ symbol, score, role }) => ({ symbol, score, role }));
 }
 
 // ../../packages/engine/src/normalize.ts
@@ -68348,6 +69175,7 @@ var RUNTIME_KINDS2 = /* @__PURE__ */ new Set([
 ]);
 var MAX_RUNTIME_CONTRIBUTION = 2;
 var MAX_STRUCTURAL_CONTRIBUTION = 0.6;
+var MAX_AMBIENT_RUNTIME_CONTRIBUTION = 0.6;
 var NORMALIZATION = 6;
 function clamp014(n) {
   if (Number.isNaN(n)) return 0;
@@ -68355,13 +69183,18 @@ function clamp014(n) {
   if (n > 1) return 1;
   return n;
 }
-function computeWeightedEvidenceConfidence(evidence2) {
+function computeWeightedEvidenceConfidence(evidence2, ambientEvidenceIds) {
   const runtimeBySource = /* @__PURE__ */ new Map();
+  const ambientBySource = /* @__PURE__ */ new Map();
   const structuralBySource = /* @__PURE__ */ new Map();
   for (const e of evidence2) {
     const r = clamp014(e.relevance);
     if (RUNTIME_KINDS2.has(e.kind)) {
-      runtimeBySource.set(e.source, (runtimeBySource.get(e.source) ?? 0) + 1.5 * r);
+      if (ambientEvidenceIds?.has(e.id)) {
+        ambientBySource.set(e.source, (ambientBySource.get(e.source) ?? 0) + 0.5 * r);
+      } else {
+        runtimeBySource.set(e.source, (runtimeBySource.get(e.source) ?? 0) + 1.5 * r);
+      }
     } else {
       structuralBySource.set(e.source, (structuralBySource.get(e.source) ?? 0) + 0.5 * r);
     }
@@ -68370,11 +69203,15 @@ function computeWeightedEvidenceConfidence(evidence2) {
     (acc, w) => acc + Math.min(w, MAX_RUNTIME_CONTRIBUTION),
     0
   );
+  const ambientSum = [...ambientBySource.values()].reduce(
+    (acc, w) => acc + Math.min(w, MAX_AMBIENT_RUNTIME_CONTRIBUTION),
+    0
+  );
   const structuralSum = [...structuralBySource.values()].reduce(
     (acc, w) => acc + Math.min(w, MAX_STRUCTURAL_CONTRIBUTION),
     0
   );
-  return clamp014((runtimeSum + structuralSum) / NORMALIZATION);
+  return clamp014((runtimeSum + ambientSum + structuralSum) / NORMALIZATION);
 }
 
 // ../../packages/engine/src/git-collector.ts
@@ -68390,8 +69227,9 @@ function isRefLike(s) {
   if (t.startsWith("-")) return false;
   if (t.includes("..")) return false;
   if (/\s|:|ago|yesterday|week|month|year|=/i.test(t)) return false;
+  if (/^\d+[smhd]$/i.test(t)) return false;
   if (/^[0-9a-f]{7,40}$/i.test(t)) return true;
-  if (/^[a-zA-Z0-9_./-]{1,200}$/.test(t) && !/^\d{4}-\d{2}-\d{2}$/.test(t)) return true;
+  if (/^[a-zA-Z0-9_.~^/-]{1,200}$/.test(t) && !/^\d{4}-\d{2}-\d{2}$/.test(t)) return true;
   return false;
 }
 function parseDiffStat(stdout) {
@@ -68610,6 +69448,33 @@ function logWindowFrom(since) {
   }
   return new Date(now - 7 * 864e5).toISOString();
 }
+function classifyLogRelevance(sigKey, sigServices, seedTerms, inputService) {
+  if (seedTerms.length === 0) {
+    return { relevanceClass: "direct", relevanceReason: "no seed context \u2014 included by default" };
+  }
+  const keyTokens = tokenize(sigKey);
+  const serviceTokens = sigServices.flatMap((s) => tokenize(s));
+  const combined = [...keyTokens, ...serviceTokens];
+  const matchingTerms = seedTerms.filter(
+    (t) => combined.some((c) => c.includes(t) || t.includes(c))
+  );
+  if (matchingTerms.length > 0) {
+    return {
+      relevanceClass: "direct",
+      relevanceReason: `matches seed terms: ${matchingTerms.slice(0, 3).join(", ")}`
+    };
+  }
+  if (inputService && sigServices.some((s) => s.toLowerCase().includes(inputService.toLowerCase()))) {
+    return {
+      relevanceClass: "direct",
+      relevanceReason: `from configured service: ${inputService}`
+    };
+  }
+  return {
+    relevanceClass: "ambient",
+    relevanceReason: "no structural link to seed \u2014 ambient runtime noise"
+  };
+}
 function queueFindingConfidence(opts) {
   const { starvedCount, backloggedCount, failingCount } = opts;
   return starvedCount > 0 && backloggedCount === 0 && failingCount === 0 ? 0.65 : 0.85;
@@ -68618,7 +69483,8 @@ function looksDiffable(since) {
   const s = since.trim();
   if (s.length === 0) return false;
   if (s.includes("..")) return true;
-  return /^[A-Za-z0-9._/-]+$/.test(s);
+  if (/^\d+[smhd]$/i.test(s)) return false;
+  return /^[A-Za-z0-9._/~^-]+$/.test(s);
 }
 async function investigate(input, deps) {
   const { code, db } = deps;
@@ -68641,7 +69507,8 @@ async function investigate(input, deps) {
     return ev;
   }
   const rawSeeds = await code.searchSymbols(hint, 5);
-  const ranked = rankSeeds(rawSeeds);
+  const hintTokens = [...new Set(tokenize(hint))];
+  const ranked = rankSeeds(rawSeeds, hintTokens);
   const seeds = ranked.map((r) => r.symbol);
   const top = seeds[0];
   if (!top) {
@@ -68693,6 +69560,13 @@ async function investigate(input, deps) {
       changes = null;
     }
   }
+  let recentChanges;
+  if (deps.repoPath && input.since) {
+    try {
+      recentChanges = await collectGitChanges({ repoPath: deps.repoPath, since: input.since });
+    } catch {
+    }
+  }
   const seedLine = top.startLine ?? 0;
   const seedEv = mkEv(
     "symbol",
@@ -68750,8 +69624,20 @@ async function investigate(input, deps) {
     );
     changeEvId = ev.id;
   }
+  if (changes === null && recentChanges !== void 0 && recentChanges.commits.length > 0) {
+    const { commits, changedFiles, totalInsertions, totalDeletions } = recentChanges;
+    const ev = mkEv(
+      "commit",
+      `Git history ${input.since}..HEAD: ${commits.length} commit(s), ${changedFiles.length} file(s) changed (+${totalInsertions} -${totalDeletions})`,
+      { commits: commits.slice(0, 10), changedFiles: changedFiles.slice(0, 30), totalInsertions, totalDeletions, source: "git" },
+      {}
+    );
+    changeEvId = ev.id;
+  }
   let analysis = null;
   const logEvIds = [];
+  const directLogEvIds = [];
+  const ambientLogEvIds = [];
   let logsCollected = false;
   let logsCompatibilityError;
   if (deps.logs) {
@@ -68768,8 +69654,19 @@ async function investigate(input, deps) {
         const from = logWindowFrom(input.since);
         analysis = await deps.logs.analyzeErrors({ service: input.service, from });
         logsCollected = true;
+        const seedBase = top.filePath.split("/").pop() ?? "";
+        const logSeedTerms = [
+          .../* @__PURE__ */ new Set([...tokenize(hint), ...tokenize(top.name), ...tokenize(seedBase)])
+        ];
         for (const s of analysis.signatures.slice(0, 15)) {
+          const { relevanceClass, relevanceReason } = classifyLogRelevance(
+            s.key,
+            s.services,
+            logSeedTerms,
+            input.service
+          );
           const tags = [];
+          if (relevanceClass === "ambient") tags.push("ambient");
           if (s.isNew) tags.push("NEW");
           else if (s.ratio !== void 0 && Number.isFinite(s.ratio) && s.ratio >= 1.5) {
             tags.push(`spike x${s.ratio.toFixed(1)}`);
@@ -68790,15 +69687,21 @@ async function investigate(input, deps) {
               services: s.services,
               isNew: s.isNew ?? false,
               ratio: s.ratio ?? null,
-              sampleMessage: s.sampleMessage ?? null
+              sampleMessage: s.sampleMessage ?? null,
+              relevanceClass,
+              relevanceReason
             },
             {},
             s.lastSeen || void 0,
-            s.isNew ? 0.95 : s.ratio !== void 0 && s.ratio >= 1.5 ? 0.9 : 0.8
+            // Direct evidence: full recurrence weight. Ambient: demoted baseline.
+            // This prevents unrelated high-volume errors from inflating confidence.
+            relevanceClass === "direct" ? s.isNew ? 0.95 : s.ratio !== void 0 && s.ratio >= 1.5 ? 0.9 : 0.85 : s.isNew ? 0.7 : s.ratio !== void 0 && s.ratio >= 1.5 ? 0.55 : 0.35
           );
           if (s.isNew) ev.isNew = s.isNew;
           if (typeof s.ratio === "number" && Number.isFinite(s.ratio)) ev.ratio = s.ratio;
           logEvIds.push(ev.id);
+          if (relevanceClass === "direct") directLogEvIds.push(ev.id);
+          else ambientLogEvIds.push(ev.id);
         }
       }
     } catch {
@@ -68811,11 +69714,8 @@ async function investigate(input, deps) {
   if (deps.mongo) {
     try {
       stateAnalysis = await deps.mongo.analyzeState();
-      const seedBase = top.filePath.split("/").pop() ?? "";
-      const terms = [
-        .../* @__PURE__ */ new Set([...tokenize(hint), ...tokenize(top.name), ...tokenize(seedBase)])
-      ];
-      for (const s of selectStateSignals(stateAnalysis, terms)) {
+      const stateTerms = [...new Set(tokenize(hint))];
+      for (const s of selectStateSignals(stateAnalysis, stateTerms)) {
         const ev = mkEv("state", s.title, s.payload, {}, s.timestamp, s.relevance);
         stateEvIds.push(ev.id);
         stateCollections.add(s.collection);
@@ -68853,12 +69753,13 @@ async function investigate(input, deps) {
       queueRuntimeState = null;
     }
   }
-  const METRICS_TIMEOUT_MS = 1e4;
+  const METRICS_TIMEOUT_MS = 3e4;
   const metricEvIds = [];
   const latencyMetricEvIds = [];
   const queueMetricEvIds = [];
   const queueMetricEvIdsByQueue = /* @__PURE__ */ new Map();
   let metricsCollected = false;
+  let metricsFailureReason;
   if (deps.metrics) {
     const ac = new AbortController();
     let metricsTimerId;
@@ -68919,7 +69820,8 @@ async function investigate(input, deps) {
         }
       }
       metricsCollected = true;
-    } catch {
+    } catch (metricsErr) {
+      metricsFailureReason = metricsErr?.message?.slice(0, 120) ?? "unknown error";
     } finally {
       if (metricsTimerId !== void 0) clearTimeout(metricsTimerId);
     }
@@ -68947,9 +69849,12 @@ async function investigate(input, deps) {
     latencyMetricEvIds,
     queueBacklogEvIdsByQueue,
     queueStarvationEvIdsByQueue,
-    queueMetricEvIdsByQueue
+    queueMetricEvIdsByQueue,
+    sinceProvided: input.since !== void 0,
+    graph
   });
   const validated = validateHypotheses(hyps, evidence2);
+  const causeChains = buildCauseChains(validated, evidence2, graph, label);
   const findings2 = [];
   findings2.push({
     kind: "observation",
@@ -69004,24 +69909,43 @@ async function investigate(input, deps) {
       confidence: clamp015(0.4 + Math.min(m, 20) / 40),
       evidenceIds: [changeEvId]
     });
+  } else if (!changes && changeEvId && recentChanges) {
+    findings2.push({
+      kind: "observation",
+      title: `${recentChanges.commits.length} commit(s) in ${input.since}..HEAD touching ${recentChanges.changedFiles.length} file(s)`,
+      confidence: clamp015(0.3 + Math.min(recentChanges.commits.length, 10) / 20),
+      evidenceIds: [changeEvId]
+    });
   }
   if (analysis !== null && analysis.signatures.length > 0) {
     const newN = analysis.newSignatures.length;
     const affected = analysis.affectedServices.length > 0 ? analysis.affectedServices.join(", ") : input.service ?? "the service";
+    const hasDirectEvidence = directLogEvIds.length > 0;
+    const ambientCount = ambientLogEvIds.length;
+    const ambientSuffix = !hasDirectEvidence && ambientCount > 0 ? ` (${ambientCount} ambient \u2014 no direct link to seed established)` : ambientCount > 0 ? ` (${directLogEvIds.length} direct, ${ambientCount} ambient)` : "";
     findings2.push({
       kind: "observation",
-      title: `${analysis.signatures.length} error signature(s) (${newN} new, ${analysis.totalErrors} error(s)) \u2014 affected: ${affected}`,
-      confidence: 0.65,
+      title: `${analysis.signatures.length} error signature(s) (${newN} new, ${analysis.totalErrors} error(s)) \u2014 affected: ${affected}${ambientSuffix}`,
+      confidence: hasDirectEvidence ? 0.65 : 0.4,
       evidenceIds: logEvIds
     });
-    const top2 = analysis.signatures[0];
-    if (top2 !== void 0) {
-      const flag = top2.isNew ? " (NEW)" : top2.ratio !== void 0 && Number.isFinite(top2.ratio) && top2.ratio >= 1.5 ? ` (spike x${top2.ratio.toFixed(1)})` : "";
+    const topDirectId = directLogEvIds[0];
+    const topSig = analysis.signatures[0];
+    if (topDirectId !== void 0 && topSig !== void 0) {
+      const flag = topSig.isNew ? " (NEW)" : topSig.ratio !== void 0 && Number.isFinite(topSig.ratio) && topSig.ratio >= 1.5 ? ` (spike x${topSig.ratio.toFixed(1)})` : "";
       findings2.push({
         kind: "anomaly",
-        title: `Top error signature: ${top2.key} \u2014 ${top2.count}x${flag}, last ${shortTs(top2.lastSeen)}`,
+        title: `Top error signature: ${topSig.key} \u2014 ${topSig.count}x${flag}, last ${shortTs(topSig.lastSeen)}`,
         confidence: 0.7,
-        evidenceIds: logEvIds.slice(0, 1)
+        evidenceIds: [topDirectId]
+      });
+    } else if (topSig !== void 0 && ambientCount > 0) {
+      const flag = topSig.isNew ? " (NEW)" : topSig.ratio !== void 0 && Number.isFinite(topSig.ratio) && topSig.ratio >= 1.5 ? ` (spike x${topSig.ratio.toFixed(1)})` : "";
+      findings2.push({
+        kind: "observation",
+        title: `Top error signature (ambient): ${topSig.key} \u2014 ${topSig.count}x${flag} \u2014 no structural link to seed`,
+        confidence: 0.35,
+        evidenceIds: ambientLogEvIds.slice(0, 1)
       });
     }
   }
@@ -69119,13 +70043,17 @@ async function investigate(input, deps) {
       metadata: { blastRadius }
     });
   }
-  if (changes && changeEvId) {
+  if (changeEvId) {
+    const gitChangedFiles = recentChanges?.changedFiles ?? [];
+    const seedInChanges = gitChangedFiles.length > 0 && gitChangedFiles.some(
+      (f) => f === top.filePath || top.filePath.endsWith(f) || f.endsWith(top.filePath)
+    );
     causeInputs.push({
       id: "cause:deployment-regression",
       title: `Recent change to ${top.name} in ${input.since}..HEAD may have introduced the regression`,
       category: "deployment-regression",
       sourceEvidenceIds: [changeEvId, seedEv.id],
-      baseScore: clamp015(0.25 + (queueHits.length > 0 ? 0.05 : 0)),
+      baseScore: clamp015((seedInChanges ? 0.45 : 0.25) + (queueHits.length > 0 ? 0.05 : 0)),
       metadata: { blastRadius }
     });
   }
@@ -69139,7 +70067,7 @@ async function investigate(input, deps) {
       metadata: { blastRadius }
     });
   }
-  if (analysis !== null && analysis.signatures.length > 0 && queueHits.length > 0) {
+  if (analysis !== null && analysis.signatures.length > 0 && queueHits.length > 0 && directLogEvIds.length > 0) {
     const firstQueue = queueHits[0];
     const queueLabel = firstQueue !== void 0 ? `"${firstQueue.queueName}" (${firstQueue.producerSymbol ?? "unknown"} -> ${firstQueue.workerSymbol ?? "unknown"})` : "the queue path";
     const topSig = analysis.signatures[0];
@@ -69147,7 +70075,7 @@ async function investigate(input, deps) {
       id: "cause:error-correlation",
       title: `Runtime errors (${analysis.totalErrors}${topSig ? `, top ${topSig.key}` : ""}) correlate with the implicated queue path ${queueLabel}`,
       category: "error-correlation",
-      sourceEvidenceIds: logEvIds.slice(0, 3),
+      sourceEvidenceIds: directLogEvIds.slice(0, 3),
       baseScore: 0.3,
       metadata: { blastRadius }
     });
@@ -69186,19 +70114,15 @@ async function investigate(input, deps) {
     providerReliability,
     request: { hint: input.hint, service: input.service }
   });
-  const evidenceConfidence = computeWeightedEvidenceConfidence(evidence2);
+  const evidenceConfidence = computeWeightedEvidenceConfidence(
+    evidence2,
+    ambientLogEvIds.length > 0 ? new Set(ambientLogEvIds) : void 0
+  );
   const seedResolved = seeds.length > 0 ? 1 : 0;
   const confidence = clamp015(0.5 * evidenceConfidence + 0.5 * seedResolved);
   const area = ctx.community?.name ?? top.filePath;
   const topCause = rankedCauses[0];
   const summary = topCause ? `Investigation of "${hint}" resolved to ${label} (${area}). Top suspected cause: ${topCause.title}.` : `Investigation of "${hint}" resolved to ${label} (${area}). No dominant suspected cause emerged from the available structural evidence.`;
-  let recentChanges;
-  if (deps.repoPath && input.since) {
-    try {
-      recentChanges = await collectGitChanges({ repoPath: deps.repoPath, since: input.since });
-    } catch {
-    }
-  }
   const nextActions = buildNextActions(top, ctx, impact, queueHits, changes, input);
   if (ownershipEstimate?.likelyMaintainer) {
     nextActions.unshift(
@@ -69222,15 +70146,18 @@ async function investigate(input, deps) {
     confidence,
     nextActions,
     ownership: ownershipEstimate,
+    causeChains: causeChains.length > 0 ? causeChains : void 0,
     ...recentChanges !== void 0 ? { recentChanges } : {}
   };
-  const connectorFlags = deps.connectors ? { ...deps.connectors, metricsCollected, logsCollected, logsCompatibilityError } : {
+  const connectorFlags = deps.connectors ? { ...deps.connectors, metricsCollected, metricsFailureReason, logsCollected, logsCompatibilityError, sinceProvided: input.since !== void 0 } : {
     elasticsearch: deps.logs != null,
     mongodb: deps.mongo != null,
     grafana: deps.metrics != null,
     metricsCollected,
+    metricsFailureReason,
     logsCollected,
-    logsCompatibilityError
+    logsCompatibilityError,
+    sinceProvided: input.since !== void 0
   };
   const gapAnalysis = detectMissingEvidence(report, connectorFlags);
   report.gapAnalysis = gapAnalysis;
@@ -69374,11 +70301,11 @@ function groupQueueEvidence(evidence2) {
   return map2;
 }
 function queueEvidenceIds(evidence2) {
-  const ids = /* @__PURE__ */ new Set();
+  const ids2 = /* @__PURE__ */ new Set();
   for (const e of evidence2) {
-    if (e.source === "queue" && e.kind === "queue-state") ids.add(e.id);
+    if (e.source === "queue" && e.kind === "queue-state") ids2.add(e.id);
   }
-  return ids;
+  return ids2;
 }
 var CONFIDENCE_EXPLAIN_THRESHOLD = 0.8;
 function explainLowConfidence(r) {
@@ -69541,6 +70468,12 @@ function renderReport2(r) {
   }
   lines.push("");
   lines.push("## Hypotheses");
+  const allUnconfirmed = r.hypotheses.length > 0 && r.hypotheses.every((h) => h.verdict === "unconfirmed");
+  if (allUnconfirmed) {
+    lines.push(
+      "_All hypotheses below are unconfirmed placeholders \u2014 runtime evidence is required to validate them._"
+    );
+  }
   if (r.hypotheses.length === 0) {
     lines.push("(none)");
   } else {
@@ -69555,6 +70488,19 @@ function renderReport2(r) {
     }
   }
   lines.push("");
+  if (r.causeChains !== void 0 && r.causeChains.length > 0) {
+    lines.push("## Cause chains");
+    for (const chain of r.causeChains) {
+      lines.push(`  [${chain.confidence.toFixed(2)}] ${chain.category}: ${chain.summary}`);
+      for (let i = 0; i < chain.steps.length; i++) {
+        const step = chain.steps[i];
+        const prefix = i === chain.steps.length - 1 ? "    \u2514\u2500" : "    \u251C\u2500";
+        const evCite = step.evidenceIds.length > 0 ? ` (evidence: ${step.evidenceIds.map(shortId).join(", ")})` : "";
+        lines.push(`${prefix} [${step.role}] ${step.label}${evCite}`);
+      }
+    }
+    lines.push("");
+  }
   lines.push("## Evidence gaps (what we don't know)");
   if (r.gapAnalysis.gaps.length === 0) {
     lines.push("(no major evidence gaps)");
@@ -69685,6 +70631,12 @@ function reportToMarkdown(r) {
   }
   out.push("");
   out.push("## Hypotheses");
+  const mdAllUnconfirmed = r.hypotheses.length > 0 && r.hypotheses.every((h) => h.verdict === "unconfirmed");
+  if (mdAllUnconfirmed) {
+    out.push(
+      "_All hypotheses below are unconfirmed placeholders \u2014 runtime evidence is required to validate them._"
+    );
+  }
   if (r.hypotheses.length === 0) {
     out.push("_none_");
   } else {
@@ -69900,7 +70852,8 @@ async function reconstructChangeTimeline(input, deps) {
       }
     }
   }
-  const summary = commits.length + " commit(s)" + (service !== void 0 ? " touching " + service : "") + " in window" + (input.since !== void 0 ? " since " + input.since : "") + (impact !== null ? "; " + impact.summary : "") + ".";
+  const impactPart = impact !== null ? "; " + (impact.summary.endsWith(".") ? impact.summary.slice(0, -1) : impact.summary) : "";
+  const summary = commits.length + " commit(s)" + (service !== void 0 ? " touching " + service : "") + " in window" + (input.since !== void 0 ? " since " + input.since : "") + impactPart + ".";
   const note = "Changes are evidence, not conclusions \u2014 a change in this window is not automatically the cause.";
   return {
     window: {
@@ -69923,6 +70876,9 @@ function renderChangeTimeline(t) {
   lines.push("# Change Timeline");
   lines.push("");
   lines.push("## Summary");
+  const sinceLabel = t.window.since ?? "(all history)";
+  const untilLabel = t.window.until ?? "HEAD";
+  lines.push("Range: " + sinceLabel + " \u2192 " + untilLabel);
   lines.push(t.summary);
   lines.push("");
   lines.push("> " + t.note);
@@ -69945,9 +70901,13 @@ function renderChangeTimeline(t) {
   if (t.changeImpact !== null) {
     lines.push("");
     lines.push("## Change impact");
-    lines.push(
-      t.changeImpact.summary + " Affected flows: " + t.changeImpact.affectedFlows.length + "."
-    );
+    lines.push("Git range: " + t.changeImpact.base + ".." + t.changeImpact.compare);
+    lines.push(t.changeImpact.summary);
+    if (t.changeImpact.affectedFlows.length > 0) {
+      for (const f of t.changeImpact.affectedFlows) {
+        lines.push("  - " + f.flowName);
+      }
+    }
   }
   return lines.join("\n");
 }
@@ -70007,6 +70967,9 @@ function renderWhatChanged(r) {
   const lines = [];
   lines.push("# What changed");
   lines.push("");
+  const sinceLabel = r.window.since ?? "(all history)";
+  const untilLabel = r.window.until ?? "HEAD";
+  lines.push("Range: " + sinceLabel + " \u2192 " + untilLabel);
   lines.push(r.summary);
   lines.push("");
   lines.push("> " + r.note);
@@ -70036,6 +70999,11 @@ function renderWhatChanged(r) {
     lines.push(
       "## Affected flows: " + r.changeImpact.affectedFlows.length + " execution flow(s) affected"
     );
+    if (r.changeImpact.affectedFlows.length > 0) {
+      for (const f of r.changeImpact.affectedFlows) {
+        lines.push("  - " + f.flowName);
+      }
+    }
   }
   return lines.join("\n");
 }
@@ -70166,7 +71134,7 @@ async function discoverArchitecture(deps) {
   })();
   const largestSubsystem = subsystems[0];
   const largestDesc = largestSubsystem != null ? `${largestSubsystem.name} with ${largestSubsystem.members} symbols` : "none";
-  const summary = `${subsystems.length} subsystems (largest: ${largestDesc}), ${asyncBoundaries.length} async queue boundaries, ${externalSystems.length} external systems, ${deadCode} dead-code symbols.`;
+  const summary = `${subsystems.length} subsystems (largest: ${largestDesc}), ${asyncBoundaries.length} async queue boundaries, ${externalSystems.length} external systems, ${deadCode} unreferenced symbols.`;
   return {
     nodeStats,
     subsystems,
@@ -70234,7 +71202,7 @@ function renderArchitecture(m) {
   }
   lines.push("");
   lines.push("## Fragility");
-  lines.push(`- Dead-code symbols: ${m.fragile.deadCode}`);
+  lines.push(`- Unreferenced symbols: ${m.fragile.deadCode}`);
   lines.push(`- High-coupling pairs (co-changes \u2265 3): ${m.fragile.highCouplingPairs}`);
   return lines.join("\n");
 }
@@ -70425,6 +71393,13 @@ function renderOwnership(o) {
   lines.push("");
   if (o.file === null) {
     lines.push(o.note);
+    if (o.candidates !== void 0 && o.candidates.length > 0) {
+      lines.push("");
+      lines.push("Candidates:");
+      for (const c of o.candidates) {
+        lines.push("  " + c);
+      }
+    }
     return lines.join("\n");
   }
   if (o.symbol !== null) {
@@ -70550,17 +71525,35 @@ function generatePostmortem(r) {
       );
     }
   } else {
-    if (supportedHypotheses.length > 0) {
-      lines.push("The following factors are supported by the collected evidence:");
+    if (r.causeChains !== void 0 && r.causeChains.length > 0) {
+      lines.push("The following causal sequences are supported by the collected evidence:");
       lines.push("");
-      for (const h of supportedHypotheses) {
-        lines.push(
-          `- **${h.category}:** ${h.statement} _(confidence ${h.confidence.toFixed(2)})_`
-        );
+      for (const chain of r.causeChains) {
+        lines.push(`### ${chain.category} _(confidence ${chain.confidence.toFixed(2)})_`);
+        lines.push("");
+        lines.push(chain.summary);
+        lines.push("");
+        for (let i = 0; i < chain.steps.length; i++) {
+          const step = chain.steps[i];
+          const num = i + 1;
+          const evCite = step.evidenceIds.length > 0 ? ` \u2014 evidence: ${step.evidenceIds.map((id) => `\`${shortId2(id)}\``).join(", ")}` : "";
+          lines.push(`${num}. **[${step.role}]** ${step.label}${evCite}`);
+        }
+        lines.push("");
+      }
+    } else {
+      if (supportedHypotheses.length > 0) {
+        lines.push("The following factors are supported by the collected evidence:");
+        lines.push("");
+        for (const h of supportedHypotheses) {
+          lines.push(
+            `- **${h.category}:** ${h.statement} _(confidence ${h.confidence.toFixed(2)})_`
+          );
+        }
       }
     }
     if (commitEvidence.length > 0) {
-      if (supportedHypotheses.length > 0) lines.push("");
+      if (supportedHypotheses.length > 0 || (r.causeChains?.length ?? 0) > 0) lines.push("");
       lines.push("Recent changes (commit evidence) present during this incident:");
       lines.push("");
       for (const e of commitEvidence) {
@@ -70621,19 +71614,29 @@ function generatePostmortem(r) {
   lines.push("");
   lines.push("## Follow-up actions");
   lines.push("");
-  const seen = /* @__PURE__ */ new Set();
   const checkboxItems = [];
+  const seen = /* @__PURE__ */ new Set();
   for (const action of r.nextActions) {
     if (!seen.has(action)) {
       seen.add(action);
       checkboxItems.push(action);
     }
   }
+  const seenGapSources = /* @__PURE__ */ new Set();
   for (const gap of r.gapAnalysis.gaps) {
-    const wireAction = `Wire ${gap.nextSource} to close the '${gap.dimension}' evidence gap`;
-    if (!seen.has(wireAction)) {
-      seen.add(wireAction);
-      checkboxItems.push(wireAction);
+    if (seenGapSources.has(gap.nextSource)) continue;
+    seenGapSources.add(gap.nextSource);
+    const cleanGapAction = `${gap.nextSource} to close the '${gap.dimension}' evidence gap`;
+    if (seen.has(gap.nextSource)) {
+      const idx = checkboxItems.indexOf(gap.nextSource);
+      if (idx !== -1 && !seen.has(cleanGapAction)) {
+        checkboxItems[idx] = cleanGapAction;
+        seen.delete(gap.nextSource);
+        seen.add(cleanGapAction);
+      }
+    } else if (!seen.has(cleanGapAction)) {
+      seen.add(cleanGapAction);
+      checkboxItems.push(cleanGapAction);
     }
   }
   if (checkboxItems.length === 0) {
@@ -70765,11 +71768,113 @@ var TOPIC_MAP = {
   }
 };
 var ALL_TOPICS = Object.keys(TOPIC_MAP);
+var STOP_WORDS = /* @__PURE__ */ new Set([
+  "on",
+  "the",
+  "a",
+  "an",
+  "at",
+  "in",
+  "of",
+  "and",
+  "or",
+  "for",
+  "with",
+  "by",
+  "to",
+  "from",
+  "that",
+  "this",
+  "is",
+  "are",
+  "was",
+  "were",
+  "it",
+  "be",
+  "about",
+  "focus",
+  "ignore",
+  "exclude",
+  "only",
+  "just",
+  "concentrate",
+  "look",
+  "without",
+  "skip",
+  "drop"
+]);
+function hasFocusVerb(d) {
+  return /\b(focus|only|just|concentrate|look at)\b/.test(d);
+}
+function hasIgnoreVerb(d) {
+  return /\b(ignore|exclude|without|skip|drop)\b/.test(d);
+}
 function detectMode(d) {
   if (/\b(ignore|exclude|without|skip|drop)\b/.test(d)) return "ignore";
   if (/\b(focus|only|just|concentrate|look at)\b/.test(d)) return "focus";
   return "none";
 }
+function splitIntoClauses(d) {
+  const parts = d.split(/\s+and\s+|\s*,\s*/);
+  const clauses = [];
+  for (const part of parts) {
+    const trimmed = part.trim();
+    if (hasFocusVerb(trimmed)) clauses.push({ clause: trimmed, mode: "focus" });
+    else if (hasIgnoreVerb(trimmed)) clauses.push({ clause: trimmed, mode: "ignore" });
+  }
+  return clauses;
+}
+function applyMixedDirective(r, directive, d) {
+  const clauses = splitIntoClauses(d);
+  const focusClauses = clauses.filter((c) => c.mode === "focus");
+  const ignoreClauses = clauses.filter((c) => c.mode === "ignore");
+  const focusTopics = [...new Set(focusClauses.flatMap((c) => matchedTopics(c.clause)))];
+  const ignoreTopics = [...new Set(ignoreClauses.flatMap((c) => matchedTopics(c.clause)))];
+  const focusTerms = focusClauses.filter((c) => matchedTopics(c.clause).length === 0).flatMap((c) => extractSignificantTerms(c.clause));
+  const ignoreTerms = ignoreClauses.filter((c) => matchedTopics(c.clause).length === 0).flatMap((c) => extractSignificantTerms(c.clause));
+  let hypotheses2 = r.hypotheses;
+  let evidence2 = r.evidence;
+  let suspectedCauses = r.suspectedCauses;
+  if (focusTopics.length > 0) {
+    const focusCategories = unionCategories(focusTopics);
+    const focusKinds = unionKinds(focusTopics);
+    const focusKeywords = topicKeywords(focusTopics);
+    hypotheses2 = hypotheses2.filter((h) => focusCategories.includes(h.category));
+    evidence2 = evidence2.filter((e) => focusKinds.includes(e.kind) || e.kind === "symbol");
+    const filtered = suspectedCauses.filter(
+      (c) => focusKeywords.some((k) => c.title.toLowerCase().includes(k))
+    );
+    suspectedCauses = filtered.length > 0 ? filtered : suspectedCauses;
+  } else if (focusTerms.length > 0) {
+    const matchesFocus = (text2) => focusTerms.some((t) => text2.toLowerCase().includes(t));
+    hypotheses2 = hypotheses2.filter((h) => matchesFocus(h.statement) || matchesFocus(h.category));
+    evidence2 = evidence2.filter((e) => matchesFocus(e.title) || matchesFocus(e.kind));
+    const filtered = suspectedCauses.filter((c) => matchesFocus(c.title));
+    suspectedCauses = filtered.length > 0 ? filtered : suspectedCauses;
+  }
+  if (ignoreTopics.length > 0) {
+    const ignoreCategories = unionCategories(ignoreTopics);
+    const ignoreKinds = unionKinds(ignoreTopics);
+    const ignoreKeywords = topicKeywords(ignoreTopics);
+    hypotheses2 = hypotheses2.filter((h) => !ignoreCategories.includes(h.category));
+    evidence2 = evidence2.filter((e) => !ignoreKinds.includes(e.kind));
+    suspectedCauses = suspectedCauses.filter(
+      (c) => !ignoreKeywords.some((k) => c.title.toLowerCase().includes(k))
+    );
+  }
+  if (ignoreTerms.length > 0) {
+    const matchesIgnore = (text2) => ignoreTerms.some((t) => text2.toLowerCase().includes(t));
+    hypotheses2 = hypotheses2.filter((h) => !matchesIgnore(h.statement) && !matchesIgnore(h.category));
+    evidence2 = evidence2.filter((e) => !matchesIgnore(e.title) && !matchesIgnore(e.kind));
+    suspectedCauses = suspectedCauses.filter((c) => !matchesIgnore(c.title));
+  }
+  const allTopics = [.../* @__PURE__ */ new Set([...focusTopics, ...ignoreTopics])];
+  const focusDesc = focusTopics.length > 0 ? `focus: ${focusTopics.join(", ")}` : focusTerms.length > 0 ? `focus on: ${focusTerms.join(", ")}` : null;
+  const ignoreDesc = ignoreTopics.length > 0 ? `ignore: ${ignoreTopics.join(", ")}` : ignoreTerms.length > 0 ? `ignore: ${ignoreTerms.join(", ")}` : null;
+  const modeDesc = [focusDesc, ignoreDesc].filter(Boolean).join("; ");
+  const note = modeDesc + ". Reused the saved investigation's evidence \u2014 no re-query of production.";
+  return { directive, mode: "mixed", topics: allTopics, hypotheses: hypotheses2, suspectedCauses, evidence: evidence2, note };
+}
 function matchedTopics(d) {
   return ALL_TOPICS.filter((t) => {
     const entry2 = TOPIC_MAP[t];
@@ -70810,11 +71915,54 @@ function topicKeywords(topics) {
   }
   return kws;
 }
+function extractSignificantTerms(directive) {
+  return directive.toLowerCase().replace(/[^\w\s]/g, " ").split(/\s+/).filter((w) => w.length > 2 && !STOP_WORDS.has(w));
+}
+function applyTextFilter(r, directive, mode, terms) {
+  const matches = (text2) => terms.some((t) => text2.toLowerCase().includes(t));
+  const note = (mode === "focus" ? "Focused on" : "Excluding") + " terms: " + terms.join(", ") + ". No predefined topic matched; filtered by text search. Reused the saved investigation's evidence \u2014 no re-query of production.";
+  if (mode === "focus") {
+    const hypotheses2 = r.hypotheses.filter(
+      (h) => matches(h.statement) || matches(h.category)
+    );
+    const evidence2 = r.evidence.filter((e) => matches(e.title) || matches(e.kind));
+    const suspectedCauses = r.suspectedCauses.filter((c) => matches(c.title));
+    return {
+      directive,
+      mode: "focus",
+      topics: [],
+      hypotheses: hypotheses2,
+      evidence: evidence2,
+      suspectedCauses: suspectedCauses.length > 0 ? suspectedCauses : r.suspectedCauses,
+      note
+    };
+  }
+  return {
+    directive,
+    mode: "ignore",
+    topics: [],
+    hypotheses: r.hypotheses.filter(
+      (h) => !matches(h.statement) && !matches(h.category)
+    ),
+    evidence: r.evidence.filter((e) => !matches(e.title) && !matches(e.kind)),
+    suspectedCauses: r.suspectedCauses.filter((c) => !matches(c.title)),
+    note
+  };
+}
 function refineInvestigation(r, directive) {
   const d = directive.toLowerCase();
+  if (hasFocusVerb(d) && hasIgnoreVerb(d)) {
+    return applyMixedDirective(r, directive, d);
+  }
   const mode = detectMode(d);
   const topics = matchedTopics(d);
   if (mode === "none" || topics.length === 0) {
+    if (mode !== "none" && topics.length === 0) {
+      const terms = extractSignificantTerms(d);
+      if (terms.length > 0) {
+        return applyTextFilter(r, directive, mode, terms);
+      }
+    }
     const recognizedList = ALL_TOPICS.join(", ");
     const note2 = "No specific topic directive recognized. Recognized topics: " + recognizedList + '. Example usage: "focus on queue behavior", "ignore deployment changes".';
     return {
@@ -70862,7 +72010,7 @@ function renderRefined(r, v) {
   const lines = [];
   lines.push("# Refined investigation \u2014 " + r.input.hint);
   lines.push("");
-  const modeLabel = v.mode === "focus" ? "focus: " + v.topics.join(", ") : v.mode === "ignore" ? "ignore: " + v.topics.join(", ") : "none (all evidence returned)";
+  const modeLabel = v.mode === "focus" ? "focus: " + v.topics.join(", ") : v.mode === "ignore" ? "ignore: " + v.topics.join(", ") : v.mode === "mixed" ? "focus+ignore" + (v.topics.length > 0 ? ": " + v.topics.join(", ") : "") : "none (all evidence returned)";
   lines.push("  [mode: " + modeLabel + "] reusing saved evidence, no re-query");
   lines.push("");
   lines.push("## Hypotheses");
@@ -70917,20 +72065,175 @@ function refinedToJSON(r, v) {
 
 // ../../packages/engine/src/onboard.ts
 init_cjs_shims();
+function tokenize2(text2) {
+  const withSpaces = text2.replace(/[^a-zA-Z0-9/_.-]+/g, " ").replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2");
+  const parts = withSpaces.toLowerCase().split(/[\s/_.-]+/).filter((t) => t.length > 0);
+  return [...new Set(parts)];
+}
+var GENERIC_PATH_TOKENS = /* @__PURE__ */ new Set([
+  "src",
+  "lib",
+  "app",
+  "test",
+  "tests",
+  "spec",
+  "dist",
+  "node",
+  "modules",
+  "common",
+  "shared",
+  "public",
+  "private",
+  "types",
+  "interfaces",
+  "constants",
+  "config",
+  "index",
+  "main",
+  "server",
+  "client",
+  "api",
+  "http",
+  "db",
+  "database",
+  "model",
+  "models",
+  "schema",
+  "migration",
+  "seed",
+  "fixture",
+  "mock",
+  "hook",
+  "context",
+  "provider",
+  "factory",
+  "middleware",
+  "route",
+  "router",
+  "routes",
+  "service",
+  "services",
+  "controller",
+  "controllers",
+  "resolver",
+  "resolvers",
+  "worker",
+  "workers",
+  "helper",
+  "helpers",
+  "util",
+  "utils"
+]);
+function buildAreaTokens(area, symbols) {
+  const tokens = new Set(tokenize2(area));
+  for (const sym of symbols) {
+    for (const t of tokenize2(sym.name)) {
+      if (t.length >= 3 && !GENERIC_PATH_TOKENS.has(t)) tokens.add(t);
+    }
+    for (const t of tokenize2(sym.filePath)) {
+      if (t.length >= 3 && !GENERIC_PATH_TOKENS.has(t)) tokens.add(t);
+    }
+  }
+  return tokens;
+}
+function matchesArea(text2, tokens) {
+  const textTokens = new Set(tokenize2(text2));
+  for (const t of tokens) {
+    if (textTokens.has(t)) return true;
+  }
+  return false;
+}
+function areaMatchScore(symbol, tokens) {
+  let score = 0;
+  const nameTokens = tokenize2(symbol.name);
+  const pathTokens = tokenize2(symbol.filePath);
+  for (const t of tokens) {
+    if (nameTokens.includes(t)) score += 2;
+    if (pathTokens.includes(t)) score += 1;
+  }
+  return score;
+}
+function bestAreaSymbol(area, symbols) {
+  if (symbols.length === 0) return null;
+  const areaOnlyTokens = new Set(tokenize2(area));
+  let best = null;
+  let bestScore = -1;
+  for (const sym of symbols) {
+    const score = areaMatchScore(sym, areaOnlyTokens);
+    if (score > bestScore) {
+      bestScore = score;
+      best = sym;
+    }
+  }
+  return best;
+}
+function filterArchitecture(architecture, tokens) {
+  return {
+    ...architecture,
+    subsystems: architecture.subsystems.filter((s) => matchesArea(s.name, tokens)),
+    asyncBoundaries: architecture.asyncBoundaries.filter(
+      (b2) => matchesArea(b2.queueName, tokens) || b2.producers.some((p) => matchesArea(p, tokens)) || b2.workers.some((w) => matchesArea(w, tokens))
+    ),
+    keyFlows: architecture.keyFlows.filter((f) => matchesArea(f, tokens)),
+    externalSystems: architecture.externalSystems.filter((e) => matchesArea(e.name, tokens))
+  };
+}
 async function buildOnboarding(input, deps) {
   const architecture = await discoverArchitecture({ code: deps.code, db: deps.db });
-  const invs = await listInvestigations(deps.db, 8);
-  const pastIncidents = invs.map((i) => ({
-    id: i.id,
-    title: i.title,
-    createdAt: i.createdAt != null ? new Date(i.createdAt).toISOString() : null
-  }));
-  const ownership = input.area != null ? await estimateOwnership(input.area, { code: deps.code, repoPath: deps.repoPath }) : null;
-  const largestName = architecture.subsystems[0]?.name ?? "n/a";
-  const summary = (input.area != null ? 'Onboarding for "' + input.area + '": ' : "System onboarding: ") + architecture.subsystems.length + " subsystems (largest " + largestName + "), " + architecture.asyncBoundaries.length + " async queue boundaries, " + architecture.externalSystems.length + " external systems, " + pastIncidents.length + " past investigation(s) on record.";
+  const area = input.area?.trim();
+  let filteredArchitecture = architecture;
+  let pastIncidents = [];
+  let areaSymbol = null;
+  if (area != null && area !== "") {
+    const symbols = await deps.code.searchSymbols(area, 20);
+    const tokens = buildAreaTokens(area, symbols);
+    areaSymbol = bestAreaSymbol(area, symbols);
+    filteredArchitecture = filterArchitecture(architecture, tokens);
+    const invs = await listInvestigationsWithReports(deps.db, 50);
+    const areaTokenArray = [...tokens];
+    const seenIds = /* @__PURE__ */ new Set();
+    for (const inv of invs) {
+      if (!inv.report || seenIds.has(inv.id)) continue;
+      seenIds.add(inv.id);
+      let relevant = false;
+      try {
+        const report = inv.report;
+        const tags = deriveTags(report);
+        const tagSet = new Set(tags.map((t) => t.toLowerCase()));
+        relevant = areaTokenArray.some((t) => tagSet.has(t.toLowerCase()));
+      } catch {
+        relevant = false;
+      }
+      if (!relevant && inv.title != null) {
+        relevant = matchesArea(inv.title, tokens);
+      }
+      if (relevant) {
+        pastIncidents.push({
+          id: inv.id,
+          title: inv.title,
+          createdAt: inv.createdAt != null ? new Date(inv.createdAt).toISOString() : null
+        });
+      }
+    }
+    pastIncidents = pastIncidents.slice(0, 8);
+  } else {
+    const invs = await listInvestigations(deps.db, 8);
+    pastIncidents = invs.map((i) => ({
+      id: i.id,
+      title: i.title,
+      createdAt: i.createdAt != null ? new Date(i.createdAt).toISOString() : null
+    }));
+  }
+  const ownership = area != null && area !== "" ? await estimateOwnership(area, {
+    code: deps.code,
+    repoPath: deps.repoPath,
+    symbol: areaSymbol
+  }) : null;
+  const largestName = filteredArchitecture.subsystems[0]?.name ?? "n/a";
+  const summary = (area != null ? 'Onboarding for "' + area + '": ' : "System onboarding: ") + filteredArchitecture.subsystems.length + " subsystems (largest " + largestName + "), " + filteredArchitecture.asyncBoundaries.length + " async queue boundaries, " + filteredArchitecture.externalSystems.length + " external systems, " + pastIncidents.length + " past investigation(s) on record." + (area != null ? ' Filtered toward "' + area + '".' : "");
   return {
-    area: input.area ?? null,
-    architecture,
+    area: area ?? null,
+    architecture: filteredArchitecture,
     ownership,
     pastIncidents,
     summary
@@ -70989,7 +72292,7 @@ function renderOnboarding(g) {
   lines.push("");
   lines.push("## What usually breaks");
   lines.push("");
-  lines.push(`- Dead-code symbols: ${g.architecture.fragile.deadCode}`);
+  lines.push(`- Unreferenced symbols: ${g.architecture.fragile.deadCode}`);
   lines.push(
     `- High-coupling pairs (co-changes \u2265 3): ${g.architecture.fragile.highCouplingPairs}`
   );
@@ -71083,6 +72386,7 @@ var SCENARIOS = [
     since: "HEAD~10",
     expectedSignals: [
       { key: "seed", label: "Seed symbols resolved" },
+      { key: "commit", label: "Recent change evidence found" },
       { key: "hyp:deployment-regression", label: "deployment-regression hypothesis present" },
       { key: "actions", label: "Next actions generated" }
     ],
@@ -71138,6 +72442,8 @@ function evaluateScenario(scenario, report) {
       ok = report.gapAnalysis.gaps.length > 0;
     } else if (signal.key === "actions") {
       ok = report.nextActions.length > 0;
+    } else if (signal.key === "commit") {
+      ok = report.evidence.some((e) => e.kind === "commit");
     } else if (signal.key.startsWith("hyp:")) {
       const category = signal.key.slice(4);
       ok = report.hypotheses.some((h) => h.category === category);
@@ -71178,6 +72484,16 @@ function renderSimulation(scenario, report, evaluation) {
     "Form your own hypothesis before reading on \u2014 then compare it with what Horus found."
   );
   lines.push("");
+  const isWeak = evaluation.passed < evaluation.total;
+  if (isWeak) {
+    lines.push(
+      "> **Weak investigation** \u2014 Horus did not surface all expected signals for this scenario."
+    );
+    lines.push(
+      "> This can happen when the hint resolves to a symbol that is not directly connected to the expected runtime/change evidence."
+    );
+    lines.push("");
+  }
   lines.push("## Horus investigation");
   lines.push("");
   lines.push(report.summary);
@@ -71209,6 +72525,28 @@ function renderSimulation(scenario, report, evaluation) {
   for (const tip of scenario.coachingTips) {
     lines.push(`- ${tip}`);
   }
+  if (scenario.category === "queue") {
+    const queueBoundaryCheck = evaluation.checks.find(
+      (c) => c.label === "Queue boundary crossing detected"
+    );
+    if (queueBoundaryCheck && !queueBoundaryCheck.ok) {
+      lines.push("");
+      lines.push(
+        "_No queue boundary was detected. The hint likely resolved to a symbol that is not directly connected to a known queue producer or worker. Try re-running with a hint that names a queue worker, producer, or the queue itself._"
+      );
+    }
+  }
+  if (scenario.category === "change") {
+    const commitCheck = evaluation.checks.find(
+      (c) => c.label === "Recent change evidence found"
+    );
+    if (commitCheck && !commitCheck.ok) {
+      lines.push("");
+      lines.push(
+        "_No recent change evidence was found. The deployment-regression scenario needs a diffable git range (`--since`) with commits touching the resolved symbol. Try a more specific hint or a different `--since` range._"
+      );
+    }
+  }
   return lines.join("\n");
 }
 
@@ -71380,6 +72718,54 @@ function validateNarrative(output, input) {
       }
     }
   }
+  if (output.hypothesisJudgments !== void 0) {
+    const knownHypIds = new Set(input.hypotheses?.map((h) => h.id) ?? []);
+    const validVerdicts = /* @__PURE__ */ new Set(["supported", "weakened", "eliminated", "unconfirmed"]);
+    for (const j of output.hypothesisJudgments) {
+      if (input.hypotheses && !knownHypIds.has(j.hypothesisId)) {
+        errors2.push(
+          `hypothesisJudgment references unknown hypothesis ID "${j.hypothesisId}"`
+        );
+      }
+      if (!validVerdicts.has(j.verdict)) {
+        errors2.push(
+          `hypothesisJudgment "${j.hypothesisId}" has invalid verdict "${j.verdict}"`
+        );
+      }
+      if (!j.rationale || j.rationale.trim().length === 0) {
+        errors2.push(`hypothesisJudgment "${j.hypothesisId}" has empty rationale`);
+      }
+      for (const eid of j.citedEvidenceIds) {
+        if (!knownIds.has(eid)) {
+          errors2.push(
+            `hypothesisJudgment "${j.hypothesisId}" cites unknown evidence ID "${eid}"`
+          );
+        }
+      }
+      if (j.confidence < 0 || j.confidence > 1) {
+        errors2.push(
+          `hypothesisJudgment "${j.hypothesisId}" confidence must be between 0 and 1`
+        );
+      }
+    }
+  }
+  if (output.rootCauseAssessment !== void 0) {
+    const rca = output.rootCauseAssessment;
+    if (!rca.summary || rca.summary.trim().length === 0) {
+      errors2.push("rootCauseAssessment.summary must be non-empty");
+    }
+    for (const eid of rca.citedEvidenceIds) {
+      if (!knownIds.has(eid)) {
+        errors2.push(`rootCauseAssessment cites unknown evidence ID "${eid}"`);
+      }
+    }
+    const validUncertainty = /* @__PURE__ */ new Set(["low", "medium", "high"]);
+    if (!validUncertainty.has(rca.uncertainty)) {
+      errors2.push(
+        `rootCauseAssessment.uncertainty must be 'low', 'medium', or 'high' (got "${rca.uncertainty}")`
+      );
+    }
+  }
   return { valid: errors2.length === 0, errors: errors2 };
 }
 async function renderNarrative(input, opts = {}) {
@@ -71397,11 +72783,11 @@ async function renderNarrative(input, opts = {}) {
         fromProvider: false,
         validationErrors: validation.errors
       };
-    } catch {
+    } catch (err) {
       return {
         output: deterministicFallback(input),
         fromProvider: false,
-        validationErrors: ["Provider threw an error"]
+        validationErrors: [err instanceof Error ? err.message : "Provider threw an error"]
       };
     }
   }
@@ -71468,7 +72854,26 @@ function buildPrompt(input, ceiling) {
     (e) => `- [${e.id}] (${e.kind}) ${e.title}${e.excerpt ? `: ${e.excerpt}` : ""}`
   ).join("\n");
   const causeLines = input.suspectedCauses.map((c) => `- ${c.label} (score: ${c.score})`).join("\n");
-  return `You are an incident analysis assistant. Analyze this investigation and return a JSON narrative.
+  const hypothesisLines = input.hypotheses && input.hypotheses.length > 0 ? input.hypotheses.map(
+    (h) => `- [${h.id}] (${h.category}) [deterministic: ${h.deterministicVerdict} @ ${h.deterministicConfidence.toFixed(2)}] ${h.statement}`
+  ).join("\n") : null;
+  const hypothesisJudgmentSchema = hypothesisLines ? `  "hypothesisJudgments": [
+    {
+      "hypothesisId": "<id from hypotheses list above>",
+      "category": "<category from hypotheses list>",
+      "verdict": "<supported|weakened|eliminated|unconfirmed>",
+      "rationale": "<one paragraph grounded in evidence IDs>",
+      "citedEvidenceIds": ["<evidence IDs from the list>"],
+      "confidence": <0\u2013${ceiling}>
+    }
+  ],
+  "rootCauseAssessment": {
+    "summary": "<one paragraph root cause grounded in evidence>",
+    "primaryHypothesisId": "<id of the hypothesis you consider the primary driver, or omit>",
+    "citedEvidenceIds": ["<evidence IDs from the list>"],
+    "uncertainty": "<low|medium|high>"
+  },` : "";
+  return `You are an incident analysis assistant. Analyze this investigation and return a JSON judgment.
 
 Investigation hint: ${input.hint}
 Deterministic summary: ${input.deterministicSummary}
@@ -71478,23 +72883,30 @@ ${evidenceLines}
 
 Suspected causes:
 ${causeLines}
+${hypothesisLines ? `
+Deterministic hypotheses (provide a second-pass judgment for each):
+${hypothesisLines}` : ""}
 
 Known services: ${input.knownServices.join(", ")}
 
 Return ONLY valid JSON with this exact shape:
 {
   "what": "<what happened \u2014 one concise paragraph>",
-  "why": "<root cause analysis grounded in the evidence above>",
+  "why": "<root cause narrative grounded in the evidence above>",
   "whereNext": ["<action 1>", "<action 2>"],
   "citations": [{"evidenceId": "<id from the evidence list>", "rationale": "<why this supports the claim>"}],
   "confidence": <number between 0 and ${ceiling}>,
-  "mentionedServices": ["<service name from known list only>"]
+  "mentionedServices": ["<service name from known list only>"],
+${hypothesisJudgmentSchema}
 }
 
 Hard rules:
 - confidence must not exceed ${ceiling}
 - only cite evidence IDs from the list above \u2014 any other ID is a hallucination
-- only include services from: ${input.knownServices.join(", ")}`;
+- only include services from: ${input.knownServices.join(", ")}
+- hypothesisJudgments must only reference hypothesis IDs from the hypotheses list above
+- verdict must be exactly one of: supported, weakened, eliminated, unconfirmed
+- uncertainty must be exactly one of: low, medium, high`;
 }
 function parseOutput(raw, input, ceiling) {
   let parsed;
@@ -71508,21 +72920,52 @@ function parseOutput(raw, input, ceiling) {
     parsed = JSON.parse(jsonMatch[0]);
   }
   const confidence = Math.min(
-    typeof parsed.confidence === "number" ? parsed.confidence : input.reportConfidence,
+    typeof parsed["confidence"] === "number" ? parsed["confidence"] : input.reportConfidence,
     ceiling
   );
+  const citations = Array.isArray(parsed["citations"]) ? parsed["citations"] : [];
   const output = {
-    what: typeof parsed.what === "string" ? parsed.what : "",
-    why: typeof parsed.why === "string" ? parsed.why : "",
-    whereNext: Array.isArray(parsed.whereNext) ? parsed.whereNext.map(String) : [],
-    citations: Array.isArray(parsed.citations) ? parsed.citations : [],
+    what: typeof parsed["what"] === "string" ? parsed["what"] : "",
+    why: typeof parsed["why"] === "string" ? parsed["why"] : "",
+    whereNext: Array.isArray(parsed["whereNext"]) ? parsed["whereNext"].map(String) : [],
+    citations,
     confidence
   };
-  if (Array.isArray(parsed.mentionedServices)) {
-    output.mentionedServices = parsed.mentionedServices.map(String);
+  if (Array.isArray(parsed["mentionedServices"])) {
+    output.mentionedServices = parsed["mentionedServices"].map(String);
+  }
+  if (Array.isArray(parsed["hypothesisJudgments"])) {
+    output.hypothesisJudgments = parsed["hypothesisJudgments"].map(
+      (j) => ({
+        hypothesisId: typeof j["hypothesisId"] === "string" ? j["hypothesisId"] : "",
+        category: typeof j["category"] === "string" ? j["category"] : "",
+        verdict: isValidVerdict(j["verdict"]) ? j["verdict"] : "unconfirmed",
+        rationale: typeof j["rationale"] === "string" ? j["rationale"] : "",
+        citedEvidenceIds: Array.isArray(j["citedEvidenceIds"]) ? j["citedEvidenceIds"].map(String) : [],
+        confidence: Math.min(
+          typeof j["confidence"] === "number" ? j["confidence"] : 0,
+          ceiling
+        )
+      })
+    );
+  }
+  if (parsed["rootCauseAssessment"] && typeof parsed["rootCauseAssessment"] === "object") {
+    const rca = parsed["rootCauseAssessment"];
+    output.rootCauseAssessment = {
+      summary: typeof rca["summary"] === "string" ? rca["summary"] : "",
+      primaryHypothesisId: typeof rca["primaryHypothesisId"] === "string" ? rca["primaryHypothesisId"] : void 0,
+      citedEvidenceIds: Array.isArray(rca["citedEvidenceIds"]) ? rca["citedEvidenceIds"].map(String) : [],
+      uncertainty: isValidUncertainty(rca["uncertainty"]) ? rca["uncertainty"] : "high"
+    };
   }
   return output;
 }
+function isValidVerdict(v) {
+  return v === "supported" || v === "weakened" || v === "eliminated" || v === "unconfirmed";
+}
+function isValidUncertainty(v) {
+  return v === "low" || v === "medium" || v === "high";
+}
 
 // ../../packages/ai/src/fake-provider.ts
 init_cjs_shims();
@@ -71562,6 +73005,12 @@ init_cjs_shims();
 init_cjs_shims();
 
 // ../../packages/cli/src/commands/investigate.ts
+function extractEvidenceExcerpt(e) {
+  if (!e.payload || typeof e.payload !== "object") return void 0;
+  const p = e.payload;
+  const candidate = (typeof p["pattern"] === "string" ? p["pattern"] : null) ?? (typeof p["message"] === "string" ? p["message"] : null) ?? (typeof p["label"] === "string" ? p["label"] : null) ?? (typeof p["summary"] === "string" ? p["summary"] : null) ?? (typeof p["valueLabel"] === "string" ? p["valueLabel"] : null);
+  return candidate ? candidate.slice(0, 120) : void 0;
+}
 function buildNarrativeInput(report) {
   return {
     investigationId: report.id,
@@ -71570,7 +73019,8 @@ function buildNarrativeInput(report) {
     evidence: report.evidence.map((e) => ({
       id: e.id,
       kind: e.kind,
-      title: e.title
+      title: e.title,
+      excerpt: extractEvidenceExcerpt(e)
     })),
     knownServices: report.input.service ? [report.input.service] : [],
     suspectedCauses: report.suspectedCauses.map((c) => ({
@@ -71582,9 +73032,83 @@ function buildNarrativeInput(report) {
     findings: report.findings.map((f) => ({
       title: f.title,
       evidenceIds: f.evidenceIds
+    })),
+    hypotheses: report.hypotheses.map((h) => ({
+      id: h.id,
+      category: h.category,
+      statement: h.statement,
+      deterministicVerdict: h.verdict,
+      deterministicConfidence: h.confidence,
+      supportingEvidenceIds: h.supportingEvidenceIds
     }))
   };
 }
+function narrativeOutputToStoredJudgment(output, provider) {
+  const judgment = {
+    what: output.what,
+    why: output.why,
+    whereNext: output.whereNext,
+    citations: output.citations,
+    confidence: output.confidence,
+    provider,
+    generatedAt: (/* @__PURE__ */ new Date()).toISOString()
+  };
+  if (output.mentionedServices) judgment.mentionedServices = output.mentionedServices;
+  if (output.hypothesisJudgments) judgment.hypothesisJudgments = output.hypothesisJudgments;
+  if (output.rootCauseAssessment) judgment.rootCauseAssessment = output.rootCauseAssessment;
+  return judgment;
+}
+function renderStoredAIJudgment(judgment, write = (l) => console.log(l)) {
+  const sep = "\u2500".repeat(60);
+  write(`
+${sep}`);
+  write(import_picocolors5.default.bold("AI Judgment") + import_picocolors5.default.dim(` (confidence: ${(judgment.confidence * 100).toFixed(0)}%, provider: ${judgment.provider})`));
+  write(sep);
+  if (judgment.hypothesisJudgments && judgment.hypothesisJudgments.length > 0) {
+    write(import_picocolors5.default.bold("Hypothesis verdicts:"));
+    for (const j of judgment.hypothesisJudgments) {
+      const verdictColor = j.verdict === "supported" ? import_picocolors5.default.green : j.verdict === "weakened" ? import_picocolors5.default.yellow : j.verdict === "eliminated" ? import_picocolors5.default.red : import_picocolors5.default.dim;
+      write(`  ${verdictColor(`[${j.verdict}]`)} ${j.category}` + import_picocolors5.default.dim(` (${(j.confidence * 100).toFixed(0)}%)`));
+      write(import_picocolors5.default.dim(`    ${j.rationale}`));
+    }
+    write("");
+  }
+  if (judgment.rootCauseAssessment) {
+    const rca = judgment.rootCauseAssessment;
+    const uncertaintyColor = rca.uncertainty === "low" ? import_picocolors5.default.green : rca.uncertainty === "medium" ? import_picocolors5.default.yellow : import_picocolors5.default.red;
+    write(import_picocolors5.default.bold("Root cause assessment:") + import_picocolors5.default.dim(` uncertainty: ${uncertaintyColor(rca.uncertainty)}`));
+    write(rca.summary);
+    if (rca.citedEvidenceIds.length > 0) {
+      write(import_picocolors5.default.dim(`  Cited: ${rca.citedEvidenceIds.join(", ")}`));
+    }
+    write("");
+  }
+  write(import_picocolors5.default.bold("What:") + " " + judgment.what);
+  write(import_picocolors5.default.bold("Why:") + " " + judgment.why);
+  if (judgment.whereNext.length > 0) {
+    write(import_picocolors5.default.bold("Next steps:"));
+    for (const step of judgment.whereNext) {
+      write(`  \u2022 ${step}`);
+    }
+  }
+  if (judgment.citations.length > 0) {
+    write(import_picocolors5.default.dim(`
+Cited evidence: ${judgment.citations.map((c) => c.evidenceId).join(", ")}`));
+  }
+}
+function classifyAIFailure(firstError) {
+  if (!firstError) return "provider unavailable";
+  if (/401|unauthorized|api.key|api key/i.test(firstError)) {
+    return "missing or invalid API key \u2014 set ANTHROPIC_API_KEY";
+  }
+  if (/invalid.request|model|not.found/i.test(firstError)) {
+    return `invalid model or request \u2014 ${firstError}`;
+  }
+  if (/econnrefused|enotfound|network|fetch|abort/i.test(firstError)) {
+    return "network error \u2014 check connectivity";
+  }
+  return firstError;
+}
 async function runInvestigate(hint, opts) {
   try {
     const config = await loadConfig(opts.config, { name: opts.name });
@@ -71644,33 +73168,22 @@ async function runInvestigate(hint, opts) {
       const rendered = format === "json" ? reportToJSON(report) : format === "markdown" || format === "md" ? reportToMarkdown(report) : renderReport2(report);
       console.log(rendered);
       if (opts.ai && format !== "json") {
+        const model = opts.aiModel ?? "claude-opus-4-8";
+        const provider = opts._aiProvider ?? new AnthropicNarrativeProvider({ model });
+        console.log(import_picocolors5.default.dim(`[ai] model: ${model}`));
         const narrativeInput = buildNarrativeInput(report);
-        const provider = new AnthropicNarrativeProvider({ model: opts.aiModel });
         const { output, fromProvider, validationErrors } = await renderNarrative(narrativeInput, { provider });
         if (!fromProvider) {
-          console.error(import_picocolors5.default.yellow(`[ai] Provider unavailable \u2014 deterministic output shown above.`));
-          if (validationErrors?.length) {
-            console.error(import_picocolors5.default.dim(`    ${validationErrors[0]}`));
-          }
+          const reason = classifyAIFailure(validationErrors?.[0]);
+          console.error(import_picocolors5.default.yellow(`[ai] fallback to deterministic \u2014 ${reason}`));
         } else {
-          const sep = "\u2500".repeat(60);
-          console.log(`
-${sep}`);
-          console.log(import_picocolors5.default.bold("AI Narrative"));
-          console.log(sep);
-          console.log(import_picocolors5.default.bold("What:"), output.what);
-          console.log(import_picocolors5.default.bold("Why:"), output.why);
-          if (output.whereNext.length > 0) {
-            console.log(import_picocolors5.default.bold("Next steps:"));
-            for (const step of output.whereNext) {
-              console.log(`  \u2022 ${step}`);
-            }
-          }
-          if (output.citations.length > 0) {
-            console.log(import_picocolors5.default.dim(`
-Cited evidence: ${output.citations.map((c) => c.evidenceId).join(", ")}`));
+          const stored = narrativeOutputToStoredJudgment(output, "anthropic");
+          report.aiJudgment = stored;
+          try {
+            await updateInvestigationReport(db, report.id, report);
+          } catch {
           }
-          console.log(import_picocolors5.default.dim(`AI confidence: ${(output.confidence * 100).toFixed(0)}%`));
+          renderStoredAIJudgment(stored);
         }
       }
     } finally {
@@ -71806,9 +73319,15 @@ async function runBlastRadius(query, opts) {
     try {
       const r = await analyzeBlastRadius(query, { code, db }, opts.depth ?? 3);
       if (!r) {
-        console.log("No symbol found for: " + query);
+        console.log(`No symbol found for: ${query}`);
+        console.log(import_picocolors10.default.dim(`  Tip: use an exact class or function name, e.g. "MyService"`));
         return 1;
       }
+      if (r.seed.name.toLowerCase() !== query.toLowerCase()) {
+        console.log(
+          import_picocolors10.default.yellow(`  No exact match for "${query}"`) + import_picocolors10.default.dim(` \u2014 showing closest: "${r.seed.name}" (fuzzy match)`)
+        );
+      }
       console.log(opts.json ? blastRadiusToJSON(r) : renderBlastRadius(r));
     } finally {
       await sql2.end();
@@ -71881,6 +73400,26 @@ async function runSearch(query, opts) {
 
 // ../../packages/cli/src/commands/investigations.ts
 init_cjs_shims();
+
+// ../../packages/cli/src/lib/format.ts
+init_cjs_shims();
+function formatDateTime(date2) {
+  if (date2 == null) return "";
+  const d = date2 instanceof Date ? date2 : new Date(date2);
+  if (Number.isNaN(d.getTime())) return String(date2);
+  const tzOffset = -d.getTimezoneOffset();
+  const sign = tzOffset >= 0 ? "+" : "-";
+  const offsetHours = String(Math.floor(Math.abs(tzOffset) / 60)).padStart(2, "0");
+  const offsetMins = String(Math.abs(tzOffset) % 60).padStart(2, "0");
+  const y = String(d.getFullYear());
+  const m = String(d.getMonth() + 1).padStart(2, "0");
+  const day = String(d.getDate()).padStart(2, "0");
+  const h = String(d.getHours()).padStart(2, "0");
+  const min = String(d.getMinutes()).padStart(2, "0");
+  return `${y}-${m}-${day} ${h}:${min} (UTC${sign}${offsetHours}:${offsetMins})`;
+}
+
+// ../../packages/cli/src/commands/investigations.ts
 async function runInvestigations(opts) {
   const config = await loadConfig(opts.config);
   const { db, sql: sql2 } = createDb(config.database.url);
@@ -71890,7 +73429,7 @@ async function runInvestigations(opts) {
       console.log('No investigations yet. Run: horus investigate "<hint>"');
     } else {
       for (const row of rows) {
-        const ts = row.createdAt.toISOString();
+        const ts = formatDateTime(row.createdAt);
         const title = (row.title ?? "").length > 60 ? (row.title ?? "").slice(0, 57) + "..." : row.title ?? "";
         console.log(`${row.id}  ${ts}  ${title}`);
       }
@@ -71926,33 +73465,27 @@ async function runReplay(id, opts) {
     const out = fmt === "json" ? reportToJSON(report) : fmt === "markdown" || fmt === "md" ? reportToMarkdown(report) : renderReport2(report);
     console.log(out);
     if (opts.ai && fmt !== "json") {
-      const narrativeInput = buildNarrativeInput(report);
-      const provider = new AnthropicNarrativeProvider({ model: opts.aiModel });
-      const { output, fromProvider, validationErrors } = await renderNarrative(narrativeInput, { provider });
-      if (!fromProvider) {
-        console.error(import_picocolors13.default.yellow("[ai] Provider unavailable \u2014 deterministic output shown above."));
-        if (validationErrors?.length) {
-          console.error(import_picocolors13.default.dim(`    ${validationErrors[0]}`));
-        }
+      if (report.aiJudgment && !opts.refreshAi) {
+        renderStoredAIJudgment(report.aiJudgment);
+        console.log(import_picocolors13.default.dim("[ai] Stored judgment replayed. Use --refresh-ai to regenerate."));
       } else {
-        const sep = "\u2500".repeat(60);
-        console.log(`
-${sep}`);
-        console.log(import_picocolors13.default.bold("AI Narrative"));
-        console.log(sep);
-        console.log(import_picocolors13.default.bold("What:"), output.what);
-        console.log(import_picocolors13.default.bold("Why:"), output.why);
-        if (output.whereNext.length > 0) {
-          console.log(import_picocolors13.default.bold("Next steps:"));
-          for (const step of output.whereNext) {
-            console.log(`  \u2022 ${step}`);
+        const narrativeInput = buildNarrativeInput(report);
+        const provider = new AnthropicNarrativeProvider({ model: opts.aiModel });
+        const { output, fromProvider, validationErrors } = await renderNarrative(narrativeInput, { provider });
+        if (!fromProvider) {
+          console.error(import_picocolors13.default.yellow("[ai] Provider unavailable \u2014 deterministic output shown above."));
+          if (validationErrors?.length) {
+            console.error(import_picocolors13.default.dim(`    ${validationErrors[0]}`));
           }
+        } else {
+          const stored = narrativeOutputToStoredJudgment(output, "anthropic");
+          report.aiJudgment = stored;
+          try {
+            await updateInvestigationReport(db, report.id, report);
+          } catch {
+          }
+          renderStoredAIJudgment(stored);
         }
-        if (output.citations.length > 0) {
-          console.log(import_picocolors13.default.dim(`
-Cited evidence: ${output.citations.map((c) => c.evidenceId).join(", ")}`));
-        }
-        console.log(import_picocolors13.default.dim(`AI confidence: ${(output.confidence * 100).toFixed(0)}%`));
       }
     }
   } finally {
@@ -72014,34 +73547,74 @@ async function runPostmortem(id, opts) {
     }
     let content = generatePostmortem(report);
     if (opts.aiSummary) {
-      const narrativeInput = buildNarrativeInput(report);
-      const provider = new AnthropicNarrativeProvider({ model: opts.aiModel });
-      const { output, fromProvider, validationErrors } = await renderNarrative(narrativeInput, { provider });
-      if (!fromProvider) {
-        content += `
-
-## AI Summary
+      const storedJudgment = report.aiJudgment;
+      if (storedJudgment && !opts.refreshAi) {
+        content += "\n\n## AI Summary\n\n";
+        content += `_Stored AI judgment (provider: ${storedJudgment.provider}, generated: ${storedJudgment.generatedAt})_
 
-_AI summary unavailable: ${validationErrors?.[0] ?? "provider error"}_
 `;
-      } else {
-        content += "\n\n## AI Summary\n\n";
-        content += `**What happened:** ${output.what}
+        content += `**What happened:** ${storedJudgment.what}
 
 `;
-        content += `**Why:** ${output.why}
+        content += `**Why:** ${storedJudgment.why}
+`;
+        if (storedJudgment.rootCauseAssessment) {
+          content += `
+**Root cause (AI):** ${storedJudgment.rootCauseAssessment.summary}
+`;
+          content += `_(uncertainty: ${storedJudgment.rootCauseAssessment.uncertainty})_
 `;
-        if (output.whereNext.length > 0) {
+        }
+        if (storedJudgment.whereNext.length > 0) {
           content += "\n**Next steps:**\n";
-          for (const step of output.whereNext) {
+          for (const step of storedJudgment.whereNext) {
             content += `- ${step}
 `;
           }
         }
-        if (output.citations.length > 0) {
+        if (storedJudgment.citations.length > 0) {
+          content += `
+**Cited evidence:** ${storedJudgment.citations.map((c) => c.evidenceId).join(", ")}
+`;
+        }
+      } else {
+        const narrativeInput = buildNarrativeInput(report);
+        const provider = new AnthropicNarrativeProvider({ model: opts.aiModel });
+        const { output, fromProvider, validationErrors } = await renderNarrative(narrativeInput, { provider });
+        if (!fromProvider) {
           content += `
+
+## AI Summary
+
+_AI summary unavailable: ${validationErrors?.[0] ?? "provider error"}_
+`;
+        } else {
+          content += "\n\n## AI Summary\n\n";
+          content += `**What happened:** ${output.what}
+
+`;
+          content += `**Why:** ${output.why}
+`;
+          if (output.rootCauseAssessment) {
+            content += `
+**Root cause (AI):** ${output.rootCauseAssessment.summary}
+`;
+            content += `_(uncertainty: ${output.rootCauseAssessment.uncertainty})_
+`;
+          }
+          if (output.whereNext.length > 0) {
+            content += "\n**Next steps:**\n";
+            for (const step of output.whereNext) {
+              content += `- ${step}
+`;
+            }
+          }
+          if (output.citations.length > 0) {
+            content += `
 **Cited evidence:** ${output.citations.map((c) => c.evidenceId).join(", ")}
 `;
+          }
+          report.aiJudgment = narrativeOutputToStoredJudgment(output, "anthropic");
         }
       }
     }
@@ -72114,7 +73687,7 @@ async function runScores(opts) {
     }
     for (const s of scored) {
       console.log(
-        "  " + String(s.score).padStart(3) + "/100  " + (s.createdAt ? new Date(s.createdAt).toISOString() : "") + "  " + s.id + "  " + (s.title ?? "")
+        "  " + String(s.score).padStart(3) + "/100  " + formatDateTime(s.createdAt) + "  " + s.id + "  " + (s.title ?? "")
       );
     }
     const avg = Math.round(
@@ -72146,6 +73719,18 @@ async function runAsk(id, directive, opts) {
     const report = migrateReport(row.report);
     const v = refineInvestigation(report, directive);
     console.log(opts.json ? refinedToJSON(report, v) : renderRefined(report, v));
+    if (!opts.json && report.aiJudgment) {
+      const j = report.aiJudgment;
+      console.log("");
+      console.log(import_picocolors17.default.dim("\u2500".repeat(60)));
+      console.log(import_picocolors17.default.dim(`Stored AI judgment (${j.provider}, ${j.generatedAt}):`));
+      if (j.rootCauseAssessment) {
+        console.log(import_picocolors17.default.bold("Root cause (AI):"), j.rootCauseAssessment.summary);
+        console.log(import_picocolors17.default.dim(`Uncertainty: ${j.rootCauseAssessment.uncertainty}`));
+      } else {
+        console.log(import_picocolors17.default.bold("AI Why:"), j.why);
+      }
+    }
   } catch (err) {
     const code = typeof err === "object" && err !== null && "code" in err ? String(err.code) : void 0;
     if (code === "22P02") {
@@ -72290,6 +73875,7 @@ async function runLogs(service, opts) {
       return 1;
     }
     const resolvedService = service ?? renv.connectors.elasticsearch?.serviceName;
+    const indexPattern = renv.connectors.elasticsearch?.indexPattern ?? "*";
     try {
       const compat = await logs.checkCompatibility({
         requiresService: resolvedService !== void 0,
@@ -72315,7 +73901,8 @@ async function runLogs(service, opts) {
     } catch {
       console.warn(import_picocolors20.default.dim("[warn] Elasticsearch compatibility check unavailable \u2014 proceeding."));
     }
-    const from = sinceToIso(opts.since);
+    const from = sinceToIso(opts.since) ?? new Date(Date.now() - 7 * 864e5).toISOString();
+    const fromDisplay = from.slice(0, 16).replace("T", " ");
     if (opts.raw === true) {
       const records = await logs.searchLogs({
         service: resolvedService,
@@ -72337,22 +73924,42 @@ async function runLogs(service, opts) {
       }
       return 0;
     }
-    const analysis = await logs.analyzeErrors({
+    let analysis = await logs.analyzeErrors({
       service: resolvedService,
       from,
       text: opts.grep
     });
+    let scopeService = resolvedService;
+    let broadeningNote;
+    if (analysis.signatures.length === 0 && resolvedService !== void 0) {
+      const broader = await logs.analyzeErrors({ from, text: opts.grep });
+      if (broader.signatures.length > 0) {
+        analysis = broader;
+        broadeningNote = `No errors found for service "${resolvedService}" \u2014 showing all services`;
+        scopeService = void 0;
+      }
+    }
     console.log(
       import_picocolors20.default.bold(`Error analysis`) + import_picocolors20.default.dim(
-        ` \u2014 ${renv.project}/${renv.env}` + (resolvedService ? ` \xB7 service ${resolvedService}` : "") + (opts.grep ? ` \xB7 grep "${opts.grep}"` : "")
+        ` \u2014 ${renv.project}/${renv.env}` + (scopeService ? ` \xB7 service ${scopeService}` : "") + (opts.grep ? ` \xB7 grep "${opts.grep}"` : "")
       )
     );
+    console.log(import_picocolors20.default.dim(`  index: ${indexPattern} \xB7 from: ${fromDisplay} UTC \xB7 severity: error+`));
+    if (broadeningNote) {
+      console.log(import_picocolors20.default.yellow(`  ${broadeningNote}`));
+    }
     console.log(
       `  ${analysis.totalErrors} error(s) \xB7 ${analysis.signatures.length} signature(s) \xB7 ${import_picocolors20.default.yellow(String(analysis.newSignatures.length))} new`
     );
     console.log("");
     if (analysis.signatures.length === 0) {
       console.log(import_picocolors20.default.dim("  No error-level logs in the window."));
+      console.log(
+        import_picocolors20.default.dim(
+          `  Searched: ${scopeService ? `service "${scopeService}"` : "all services"} \xB7 index: ${indexPattern} \xB7 from: ${fromDisplay} UTC`
+        )
+      );
+      console.log(import_picocolors20.default.dim(`  Tip: use --since to widen the window (e.g. --since 30d).`));
       return 0;
     }
     for (const s of analysis.signatures) {
@@ -72477,18 +74084,29 @@ async function runMetrics(hint, opts) {
     const flagged = findings2.filter((f) => f.anomaly !== "none");
     const ok = findings2.filter((f) => f.anomaly === "none");
     if (findings2.length === 0) {
-      console.log(
-        import_picocolors21.default.dim(
-          hint !== void 0 ? `No panels matched hint "${hint}".` : "No panels found in configured Grafana dashboards."
-        )
-      );
+      if (hint !== void 0) {
+        const tokens = extractHintTokens(hint);
+        console.log(import_picocolors21.default.dim(`No panels matched hint "${hint}".`));
+        if (tokens.length > 0) {
+          console.log(import_picocolors21.default.dim(`  Searched for panels containing: ${tokens.join(", ")}`));
+        }
+        console.log(
+          import_picocolors21.default.dim(
+            `  Tip: run ${import_picocolors21.default.bold("horus metrics")} (no hint) to see all available panels, then use a panel title or keyword directly.`
+          )
+        );
+      } else {
+        console.log(import_picocolors21.default.dim("No panels found in configured Grafana dashboards."));
+      }
       return 0;
     }
     const hintSuffix = hint !== void 0 ? ` (hint: "${hint}")` : "";
+    const matchSources = hint !== void 0 ? [...new Set(findings2.map((f) => f.matchSource).filter(Boolean))] : [];
+    const matchSuffix = matchSources.length > 0 ? import_picocolors21.default.dim(` [matched via ${matchSources.join(", ")}]`) : "";
     console.log(
       import_picocolors21.default.bold(
         `Grafana metrics${hintSuffix} \u2014 ${findings2.length} series across panels`
-      )
+      ) + matchSuffix
     );
     console.log(
       import_picocolors21.default.dim(
@@ -72555,8 +74173,9 @@ async function runState(opts) {
       const analysis = await mongo.analyzeState(
         staleHours !== void 0 ? { staleHours } : {}
       );
+      const discoveryNote = analysis.autoDiscovered ? import_picocolors22.default.dim(` (${analysis.collections.length} collections, auto-discovered)`) : "";
       console.log(
-        import_picocolors22.default.bold("State analysis") + import_picocolors22.default.dim(` \u2014 ${renv.project}/${renv.env} \xB7 db ${analysis.database}`)
+        import_picocolors22.default.bold("State analysis") + import_picocolors22.default.dim(` \u2014 ${renv.project}/${renv.env} \xB7 db ${analysis.database}`) + discoveryNote
       );
       console.log("");
       let signals = 0;
@@ -72574,9 +74193,23 @@ async function runState(opts) {
         console.log(flags.length > 0 ? `${head}   ${flags.join("  ")}` : import_picocolors22.default.dim(head));
       }
       console.log("");
-      console.log(
-        signals > 0 ? `  ${import_picocolors22.default.bold(String(signals))} state signal(s) across ${analysis.collections.length} allowlisted collection(s)` : import_picocolors22.default.dim(`  No state anomalies across ${analysis.collections.length} collection(s).`)
-      );
+      if (analysis.collections.length === 0) {
+        console.log(
+          import_picocolors22.default.yellow("  No collections discovered in this database.") + import_picocolors22.default.dim(" Verify the database name in your MongoDB connector config.")
+        );
+      } else {
+        const scope = analysis.autoDiscovered ? "collection(s)" : "allowlisted collection(s)";
+        console.log(
+          signals > 0 ? `  ${import_picocolors22.default.bold(String(signals))} state signal(s) across ${analysis.collections.length} ${scope}` : import_picocolors22.default.dim(`  No state anomalies across ${analysis.collections.length} ${scope}.`)
+        );
+        if (analysis.autoDiscovered) {
+          console.log(
+            import_picocolors22.default.dim(
+              `  Tip: add a "collections" list to your MongoDB connector config to restrict analysis.`
+            )
+          );
+        }
+      }
       return 0;
     } finally {
       await mongo.close();
@@ -72669,8 +74302,7 @@ async function runSetup(opts) {
     write(
       import_picocolors25.default.dim(
         `      install it (Python 3.11+ required):
-        uv tool install axoniq==${PINNED_SOURCE_VERSION}
-      or: pip install axoniq==${PINNED_SOURCE_VERSION}
+        pip install horus-source
       ensure ~/.local/bin is on your PATH`
       )
     );
@@ -72682,8 +74314,7 @@ async function runSetup(opts) {
     write(
       import_picocolors25.default.dim(
         `      update it:
-        uv tool install axoniq==${PINNED_SOURCE_VERSION}
-      or: pip install axoniq==${PINNED_SOURCE_VERSION}`
+        pip install --upgrade horus-source`
       )
     );
   } else {
@@ -72787,12 +74418,192 @@ async function runSetup(opts) {
 init_cjs_shims();
 var import_node_readline = require("readline");
 var import_node_child_process5 = require("child_process");
+var import_picocolors27 = __toESM(require_picocolors(), 1);
+
+// ../../packages/cli/src/lib/tty-selector.ts
+init_cjs_shims();
+var import_node_tty = require("tty");
 var import_picocolors26 = __toESM(require_picocolors(), 1);
+var ExitPromptError = class extends Error {
+  constructor(message = "Prompt was cancelled") {
+    super(message);
+    this.name = "ExitPromptError";
+  }
+};
+function isInteractive(input) {
+  const stream = input ?? process.stdin;
+  return stream.isTTY === true && typeof stream.setRawMode === "function";
+}
+async function checkboxSearch(opts) {
+  const { message, choices } = opts;
+  const pageSize = opts.pageSize ?? 10;
+  const input = opts.input ?? process.stdin;
+  const output = opts.output ?? process.stdout;
+  if (!isInteractive(input)) {
+    throw new Error("checkboxSearch requires an interactive TTY");
+  }
+  if (choices.length === 0) {
+    return [];
+  }
+  return new Promise((resolve8, reject) => {
+    let filter = "";
+    const selected = /* @__PURE__ */ new Set();
+    let cursor = 0;
+    let filtered = choices;
+    let visibleOffset = 0;
+    let lastRenderLines = 0;
+    const wasRaw = input.isRaw;
+    function updateFiltered() {
+      const f = filter.toLowerCase();
+      filtered = f ? choices.filter((c) => c.toLowerCase().includes(f)) : choices;
+      cursor = Math.min(cursor, Math.max(0, filtered.length - 1));
+      updateVisibleOffset();
+    }
+    function updateVisibleOffset() {
+      if (cursor < visibleOffset) {
+        visibleOffset = cursor;
+      } else if (cursor >= visibleOffset + pageSize) {
+        visibleOffset = cursor - pageSize + 1;
+      }
+      const maxOffset = Math.max(0, filtered.length - pageSize);
+      visibleOffset = Math.max(0, Math.min(visibleOffset, maxOffset));
+    }
+    function clear() {
+      output.write("\x1B[?25l");
+      if (lastRenderLines > 0) {
+        output.write(`\x1B[${lastRenderLines}A`);
+        output.write("\x1B[0J");
+      }
+    }
+    function render() {
+      clear();
+      const lines = [];
+      lines.push(
+        `? ${import_picocolors26.default.bold(message)} ${import_picocolors26.default.dim("(\u2191\u2193 navigate \u2022 space toggle \u2022 enter confirm \u2022 type filter)")}`
+      );
+      const visible = filtered.slice(visibleOffset, visibleOffset + pageSize);
+      for (let i = 0; i < visible.length; i++) {
+        const idx = visibleOffset + i;
+        const choice = visible[i];
+        const isCursor = idx === cursor;
+        const isSelected = selected.has(choice);
+        const marker = isSelected ? import_picocolors26.default.green("\u25CF") : " ";
+        const prefix = `[${marker}]`;
+        const label = isCursor ? import_picocolors26.default.cyan(choice) : choice;
+        const pointer = isCursor ? import_picocolors26.default.cyan("\u276F") : " ";
+        lines.push(`  ${pointer} ${prefix} ${label}`);
+      }
+      if (filtered.length === 0) {
+        lines.push(import_picocolors26.default.dim("  No matches"));
+      }
+      const statusParts = [
+        `${selected.size} selected`,
+        `${filtered.length}/${choices.length} matches`
+      ];
+      if (filter) statusParts.push(`filter: ${filter}`);
+      lines.push(import_picocolors26.default.dim(`  ${statusParts.join(" \xB7 ")}`));
+      output.write(lines.join("\n"));
+      lastRenderLines = lines.length;
+    }
+    function finish(values2) {
+      cleanup();
+      const summary = values2.length > 0 ? values2.join(", ") : import_picocolors26.default.dim("none");
+      output.write(`
+? ${import_picocolors26.default.bold(message)} ${summary}
+`);
+      resolve8(values2);
+    }
+    function cancel() {
+      cleanup();
+      reject(new ExitPromptError());
+    }
+    function cleanup() {
+      input.setRawMode(wasRaw);
+      input.pause();
+      input.removeListener("data", onData);
+      output.write("\x1B[?25h");
+    }
+    function toggleCurrent() {
+      const choice = filtered[cursor];
+      if (choice === void 0) return;
+      if (selected.has(choice)) {
+        selected.delete(choice);
+      } else {
+        selected.add(choice);
+      }
+    }
+    function onData(chunk) {
+      const s = chunk.toString();
+      if (s === "") {
+        cancel();
+        return;
+      }
+      if (s === "\x1B") {
+        if (filter) {
+          filter = "";
+          cursor = 0;
+          updateFiltered();
+        } else {
+          cancel();
+        }
+        render();
+        return;
+      }
+      if (s === "\r" || s === "\n") {
+        finish(Array.from(selected));
+        return;
+      }
+      if (s === " ") {
+        toggleCurrent();
+        render();
+        return;
+      }
+      if (s === "\x7F" || s === "\b") {
+        if (filter.length > 0) {
+          filter = filter.slice(0, -1);
+          cursor = 0;
+          updateFiltered();
+        }
+        render();
+        return;
+      }
+      if (s === "\x1B[A") {
+        if (cursor > 0) {
+          cursor -= 1;
+          updateVisibleOffset();
+        }
+        render();
+        return;
+      }
+      if (s === "\x1B[B") {
+        if (cursor < filtered.length - 1) {
+          cursor += 1;
+          updateVisibleOffset();
+        }
+        render();
+        return;
+      }
+      if (s.length === 1 && s.charCodeAt(0) >= 32 && s.charCodeAt(0) <= 126) {
+        filter += s;
+        cursor = 0;
+        updateFiltered();
+        render();
+      }
+    }
+    input.setRawMode(true);
+    input.resume();
+    input.on("data", onData);
+    updateFiltered();
+    render();
+  });
+}
+
+// ../../packages/cli/src/commands/connect.ts
 var SUPPORTED = ["elasticsearch", "mongodb", "grafana", "redis"];
 async function runConnect(type, opts) {
   if (!SUPPORTED.includes(type)) {
     console.error(
-      import_picocolors26.default.red(`Unknown connector type: ${type}`) + import_picocolors26.default.dim(`
+      import_picocolors27.default.red(`Unknown connector type: ${type}`) + import_picocolors27.default.dim(`
   supported: ${SUPPORTED.join(", ")}`)
     );
     return 1;
@@ -72823,18 +74634,20 @@ async function runConnect(type, opts) {
       if (!probeResult.ok) {
         console.error(
           `
-${import_picocolors26.default.red(`\u2717 Could not reach ${connectorType}:`)} ${probeResult.detail}` + import_picocolors26.default.dim("\n  Fix the connection and retry, or pass --no-test to skip.")
+${import_picocolors27.default.red(`\u2717 Could not reach ${connectorType}:`)} ${probeResult.detail}` + import_picocolors27.default.dim("\n  Fix the connection and retry, or pass --no-test to skip.")
         );
         return 1;
       }
-      console.log(`
-${import_picocolors26.default.green("\u2713")} ${connectorType} reachable ${import_picocolors26.default.dim(`(${probeResult.detail})`)}`);
+      console.log(
+        `
+${import_picocolors27.default.green("\u2713")} ${connectorType} reachable ${import_picocolors27.default.dim(`(${probeResult.detail})`)}`
+      );
     }
     const hasLiteralCredentials = filled.url !== void 0 || filled.password !== void 0 || filled.username !== void 0;
     if (hasLiteralCredentials) {
       if (isGitTracked(configPath, root)) {
         console.error(
-          import_picocolors26.default.red(".horus/config.json is already tracked by Git.") + "\nStoring credentials here would expose them in the repository.\n" + import_picocolors26.default.dim(
+          import_picocolors27.default.red(".horus/config.json is already tracked by Git.") + "\nStoring credentials here would expose them in the repository.\n" + import_picocolors27.default.dim(
             "  Option A \u2014 remove from Git index then re-run:\n    git rm --cached .horus/config.json\n    horus connect " + type + " ...\n\n  Option B \u2014 keep credentials in the environment and reference them:\n    export ES_URL=https://...\n    export ES_USERNAME=...\n    export ES_PASSWORD=...\n  Then edit .horus/config.json manually to use urlEnv/usernameEnv/passwordEnv."
           )
         );
@@ -72843,29 +74656,52 @@ ${import_picocolors26.default.green("\u2713")} ${connectorType} reachable ${impo
       ensureCredentialGitignore(root);
     }
     patchLocalConnector(configPath, connectorType, patch, filled.env);
-    console.log(`${import_picocolors26.default.green("\u2713")} ${import_picocolors26.default.bold(connectorType)} connector saved \u2192 ${import_picocolors26.default.dim(configPath)}`);
+    console.log(
+      `${import_picocolors27.default.green("\u2713")} ${import_picocolors27.default.bold(connectorType)} connector saved \u2192 ${import_picocolors27.default.dim(configPath)}`
+    );
     printSummary(connectorType, filled);
-    console.log(import_picocolors26.default.dim(`
+    console.log(import_picocolors27.default.dim(`
   run: horus investigate "<hint>"`));
     return 0;
   } catch (err) {
-    console.error(import_picocolors26.default.red(err.message));
+    if (err instanceof ExitPromptError) {
+      console.error(import_picocolors27.default.red("Cancelled."));
+      return 1;
+    }
+    console.error(import_picocolors27.default.red(err.message));
     return 1;
   }
 }
 async function fillInteractive(type, opts) {
   const needsInteraction = missingRequired(type, opts);
   if (!needsInteraction) return opts;
-  console.log(`
-${import_picocolors26.default.bold(`Connect ${type}`)} ${import_picocolors26.default.dim("(press Enter to skip optional fields)")}
-`);
+  console.log(
+    `
+${import_picocolors27.default.bold(`Connect ${type}`)} ${import_picocolors27.default.dim("(press Enter to skip optional fields)")}
+`
+  );
   const filled = { ...opts };
   switch (type) {
     case "elasticsearch":
       filled.url = filled.url ?? await ask("URL", "https://elastic.example.com");
       filled.username = filled.username ?? (await ask("Username", "", false) || void 0);
       filled.password = filled.password ?? (await askPassword("Password") || void 0);
-      filled.indexPattern = filled.indexPattern ?? await ask("Index pattern", "logs-*");
+      if (filled.indexPattern === void 0 && filled.indexPatterns === void 0) {
+        const discovered = await discoverEsIndices(
+          filled.url,
+          filled.username,
+          filled.password
+        );
+        if (discovered.length > 0) {
+          const selected = await askIndexSelection(discovered);
+          if (selected.length > 0) {
+            filled.indexPatterns = selected;
+          }
+        }
+        if (filled.indexPatterns === void 0) {
+          filled.indexPattern = await ask("Index pattern", "logs-*");
+        }
+      }
       filled.service = filled.service ?? (await ask("Service name", "") || void 0);
       break;
     case "mongodb":
@@ -72877,18 +74713,45 @@ ${import_picocolors26.default.bold(`Connect ${type}`)} ${import_picocolors26.def
       filled.url = filled.url ?? await ask("URL", "https://grafana.example.com");
       filled.username = filled.username ?? (await ask("Username", "", false) || void 0);
       filled.password = filled.password ?? (await askPassword("Password") || void 0);
-      filled.dashboard = filled.dashboard ?? (await ask("Default dashboard uid", "") || void 0);
+      if (filled.dashboard === void 0 && filled.dashboardUids === void 0) {
+        const discovered = await discoverGrafanaDashboards(
+          filled.url,
+          filled.username,
+          filled.password
+        );
+        if (discovered.length > 0) {
+          const selected = await askDashboardSelection(discovered);
+          if (selected.length > 0) {
+            filled.dashboardUids = selected.map((d) => d.uid);
+          }
+        }
+        if (filled.dashboardUids === void 0) {
+          filled.dashboard = await ask("Default dashboard uid", "", false) || void 0;
+        }
+      }
       break;
-    case "redis":
+    case "redis": {
+      console.log(
+        import_picocolors27.default.dim(
+          "  Tip: embed credentials directly in the URL \u2014 redis://:password@host:6379\n       or enter the URL and password separately below."
+        )
+      );
       filled.url = filled.url ?? await ask("URL", "redis://localhost:6379");
+      if (!redisUrlHasPassword(filled.url)) {
+        const pw = await askPassword("Password") || void 0;
+        if (pw !== void 0 && filled.url !== void 0) {
+          filled.url = injectRedisPassword(filled.url, pw);
+        }
+      }
       break;
+    }
   }
   return filled;
 }
 function missingRequired(type, opts) {
   switch (type) {
     case "elasticsearch":
-      return !opts.url || !opts.indexPattern;
+      return !opts.url || !opts.indexPattern && !opts.indexPatterns?.length;
     case "mongodb":
       return !opts.url || !opts.database;
     case "grafana":
@@ -72899,10 +74762,14 @@ function missingRequired(type, opts) {
 }
 function ask(label, placeholder = "", required = true) {
   return new Promise((resolve8) => {
-    const hint = placeholder ? import_picocolors26.default.dim(` (${placeholder})`) : "";
-    const suffix = required ? "" : import_picocolors26.default.dim(" [optional]");
+    const hint = placeholder ? import_picocolors27.default.dim(` (${placeholder})`) : "";
+    const suffix = required ? "" : import_picocolors27.default.dim(" [optional]");
     process.stdout.write(`  ${label}${suffix}${hint}: `);
-    const rl = (0, import_node_readline.createInterface)({ input: process.stdin, output: process.stdout, terminal: false });
+    const rl = (0, import_node_readline.createInterface)({
+      input: process.stdin,
+      output: process.stdout,
+      terminal: false
+    });
     rl.once("line", (line2) => {
       rl.close();
       resolve8(line2.trim() || (required ? placeholder : ""));
@@ -72913,7 +74780,7 @@ function askPassword(label) {
   return new Promise((resolve8) => {
     const stdin = process.stdin;
     if (typeof stdin.setRawMode === "function") {
-      process.stdout.write(`  ${label}${import_picocolors26.default.dim(" [optional]")}: `);
+      process.stdout.write(`  ${label}${import_picocolors27.default.dim(" [optional]")}: `);
       stdin.setRawMode(true);
       stdin.resume();
       let value = "";
@@ -72944,8 +74811,15 @@ function askPassword(label) {
   });
 }
 function buildEsPatch(opts) {
-  if (!opts.indexPattern) throw new Error("Index pattern is required for elasticsearch");
-  const patch = { indexPattern: opts.indexPattern };
+  if (!opts.indexPattern && !opts.indexPatterns?.length) {
+    throw new Error("Index pattern is required for elasticsearch");
+  }
+  const patch = {};
+  if (opts.indexPatterns && opts.indexPatterns.length > 0) {
+    patch["indexPatterns"] = opts.indexPatterns;
+  } else {
+    patch["indexPattern"] = opts.indexPattern;
+  }
   if (opts.url) patch["url"] = opts.url;
   if (opts.username) patch["username"] = opts.username;
   if (opts.password) patch["password"] = opts.password;
@@ -72966,7 +74840,11 @@ function buildGrafanaPatch(opts) {
   if (opts.url) patch["url"] = opts.url;
   if (opts.username) patch["username"] = opts.username;
   if (opts.password) patch["password"] = opts.password;
-  if (opts.dashboard) patch["dashboard"] = opts.dashboard;
+  if (opts.dashboardUids && opts.dashboardUids.length > 0) {
+    patch["dashboards"] = opts.dashboardUids;
+  } else if (opts.dashboard) {
+    patch["dashboard"] = opts.dashboard;
+  }
   return patch;
 }
 function buildRedisPatch(opts) {
@@ -72985,7 +74863,10 @@ async function probe(type, opts) {
           password: opts.password
         });
         const controller = new AbortController();
-        const timer2 = setTimeout(() => controller.abort(new Error("timed out after 8s")), 8e3);
+        const timer2 = setTimeout(
+          () => controller.abort(new Error("timed out after 8s")),
+          8e3
+        );
         try {
           return await client.health(controller.signal);
         } catch (err) {
@@ -73012,7 +74893,9 @@ async function probe(type, opts) {
         if (!opts.url) return { ok: true, detail: "skipped (no URL)" };
         const headers = { "Content-Type": "application/json" };
         if (opts.username && opts.password) {
-          const encoded = Buffer.from(`${opts.username}:${opts.password}`).toString("base64");
+          const encoded = Buffer.from(`${opts.username}:${opts.password}`).toString(
+            "base64"
+          );
           headers["Authorization"] = `Basic ${encoded}`;
         }
         const res = await fetch(`${opts.url.replace(/\/$/, "")}/api/health`, {
@@ -73056,15 +74939,24 @@ function tcpProbe(host, port, timeoutMs = 3e3) {
 }
 function printSummary(type, opts) {
   const lines = [];
-  if (opts.url) lines.push(`  url:           ${redactUrl(opts.url)}`);
-  if (opts.username) lines.push(`  username:      ${opts.username}`);
-  if (opts.password) lines.push(`  password:      ${"\u2022".repeat(Math.min(opts.password.length, 8))}`);
-  if (opts.indexPattern) lines.push(`  index-pattern: ${opts.indexPattern}`);
-  if (opts.service) lines.push(`  service:       ${opts.service}`);
-  if (opts.database) lines.push(`  database:      ${opts.database}`);
-  if (opts.collections) lines.push(`  collections:   ${opts.collections}`);
-  if (opts.dashboard) lines.push(`  dashboard:     ${opts.dashboard}`);
-  if (lines.length > 0) console.log(import_picocolors26.default.dim(lines.join("\n")));
+  if (opts.url) lines.push(`  url:            ${redactUrl(opts.url)}`);
+  if (opts.username) lines.push(`  username:       ${opts.username}`);
+  if (opts.password)
+    lines.push(`  password:       ${"\u2022".repeat(Math.min(opts.password.length, 8))}`);
+  if (opts.indexPatterns && opts.indexPatterns.length > 0) {
+    lines.push(`  index-patterns: ${opts.indexPatterns.join(", ")}`);
+  } else if (opts.indexPattern) {
+    lines.push(`  index-pattern:  ${opts.indexPattern}`);
+  }
+  if (opts.service) lines.push(`  service:        ${opts.service}`);
+  if (opts.database) lines.push(`  database:       ${opts.database}`);
+  if (opts.collections) lines.push(`  collections:    ${opts.collections}`);
+  if (opts.dashboardUids && opts.dashboardUids.length > 0) {
+    lines.push(`  dashboards:     ${opts.dashboardUids.join(", ")}`);
+  } else if (opts.dashboard) {
+    lines.push(`  dashboard:      ${opts.dashboard}`);
+  }
+  if (lines.length > 0) console.log(import_picocolors27.default.dim(lines.join("\n")));
 }
 function isGitTracked(filePath, cwd) {
   try {
@@ -73077,6 +74969,119 @@ function isGitTracked(filePath, cwd) {
     return false;
   }
 }
+async function discoverEsIndices(url, username, password) {
+  if (!url) return [];
+  try {
+    const client = new ElasticsearchClient({ baseUrl: url, username, password });
+    const signal = AbortSignal.timeout(8e3);
+    return await client.listIndices(signal);
+  } catch {
+    return [];
+  }
+}
+async function askIndexSelection(indices) {
+  if (isInteractive()) {
+    try {
+      return await checkboxSearch({
+        message: "Select index patterns to use",
+        choices: indices,
+        pageSize: 12
+      });
+    } catch (err) {
+      if (err instanceof ExitPromptError) throw err;
+    }
+  }
+  const MAX_DISPLAY = 25;
+  const shown = indices.slice(0, MAX_DISPLAY);
+  console.log("\n  Available Elasticsearch indexes/data streams:");
+  shown.forEach((name, i) => {
+    console.log(`  ${import_picocolors27.default.dim(`[${i + 1}]`)} ${name}`);
+  });
+  if (indices.length > MAX_DISPLAY) {
+    console.log(
+      import_picocolors27.default.dim(
+        `  \u2026 and ${indices.length - MAX_DISPLAY} more (type a pattern manually to match all)`
+      )
+    );
+  }
+  const input = (await ask(
+    `  Select index patterns to use (e.g. 1,2 or Enter to type pattern manually)`,
+    "",
+    false
+  )).trim();
+  if (!input) return [];
+  if (/^[\d,\s]+$/.test(input)) {
+    const picks = input.split(",").map((s) => s.trim()).filter(Boolean).map((s) => parseInt(s, 10) - 1).filter((i) => i >= 0 && i < shown.length).map((i) => shown[i]);
+    if (picks.length > 0) return picks;
+  }
+  return [input];
+}
+async function discoverGrafanaDashboards(url, username, password) {
+  if (!url) return [];
+  try {
+    const client = new GrafanaClient({ baseUrl: url, username, password });
+    const signal = AbortSignal.timeout(8e3);
+    return await client.searchDashboards(void 0, signal);
+  } catch {
+    return [];
+  }
+}
+async function askDashboardSelection(dashboards) {
+  if (isInteractive()) {
+    try {
+      const selected = await checkboxSearch({
+        message: "Select dashboards to use",
+        choices: dashboards.map((d) => d.title),
+        pageSize: 12
+      });
+      return dashboards.filter((d) => selected.includes(d.title));
+    } catch (err) {
+      if (err instanceof ExitPromptError) throw err;
+    }
+  }
+  const MAX_DISPLAY = 25;
+  const shown = dashboards.slice(0, MAX_DISPLAY);
+  console.log("\n  Available Grafana dashboards:");
+  shown.forEach((d, i) => {
+    const folder = d.folderTitle ? import_picocolors27.default.dim(` (${d.folderTitle})`) : "";
+    console.log(`  ${import_picocolors27.default.dim(`[${i + 1}]`)} ${d.title}${folder}`);
+  });
+  if (dashboards.length > MAX_DISPLAY) {
+    console.log(import_picocolors27.default.dim(`  \u2026 and ${dashboards.length - MAX_DISPLAY} more`));
+  }
+  const input = (await ask(
+    `  Select dashboards to use (e.g. 1,2 or Enter to type uid manually)`,
+    "",
+    false
+  )).trim();
+  if (!input) return [];
+  if (/^[\d,\s]+$/.test(input)) {
+    const picks = input.split(",").map((s) => s.trim()).filter(Boolean).map((s) => parseInt(s, 10) - 1).filter((i) => i >= 0 && i < shown.length).map((i) => shown[i]);
+    return picks;
+  }
+  return [];
+}
+function redisUrlHasPassword(raw) {
+  if (!raw) return false;
+  try {
+    return new URL(raw).password !== "";
+  } catch {
+    return false;
+  }
+}
+function injectRedisPassword(raw, password) {
+  try {
+    const u = new URL(raw);
+    u.password = encodeURIComponent(password);
+    return u.toString();
+  } catch {
+    const match = /^(rediss?:\/\/)(.*)$/.exec(raw);
+    if (match?.[1] && match?.[2]) {
+      return `${match[1]}:${encodeURIComponent(password)}@${match[2]}`;
+    }
+    return raw;
+  }
+}
 function redactUrl(raw) {
   try {
     const u = new URL(raw);
@@ -73096,11 +75101,14 @@ var import_node_child_process6 = require("child_process");
 var import_node_fs7 = require("fs");
 var import_node_util4 = require("util");
 var import_node_path9 = require("path");
-var import_picocolors27 = __toESM(require_picocolors(), 1);
+var import_picocolors28 = __toESM(require_picocolors(), 1);
 var execFileAsync = (0, import_node_util4.promisify)(import_node_child_process6.execFile);
 var unlinkAsync = (0, import_node_util4.promisify)(import_node_fs7.unlink);
 var SPAWNED_HOST_FILE2 = "spawned-host.json";
 var START_TIME_TOLERANCE_S = 60;
+var STOP_WAIT_MS = 5e3;
+var STOP_POLL_MS = 200;
+var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 async function runStop(opts) {
   try {
     if (opts.all) {
@@ -73110,30 +75118,30 @@ async function runStop(opts) {
     const root = findRepoRoot(cwd) ?? cwd;
     const hostUrl = readSourceHostUrl(root);
     if (!hostUrl) {
-      console.log(import_picocolors27.default.dim("No source-intelligence host found for this repo (.horus/source/host.json absent)."));
+      console.log(import_picocolors28.default.dim("No source-intelligence host found for this repo (.horus/source/host.json absent)."));
       return 0;
     }
     return await stopHost(root, hostUrl);
   } catch (err) {
-    console.error(import_picocolors27.default.red(err.message));
+    console.error(import_picocolors28.default.red(err.message));
     return 1;
   }
 }
 async function stopHost(root, hostUrl) {
   const alive = await isHostHealthy(hostUrl);
   if (!alive) {
-    console.log(import_picocolors27.default.dim(`Host ${hostUrl} is already stopped.`));
+    console.log(import_picocolors28.default.dim(`Host ${hostUrl} is already stopped.`));
     return 0;
   }
   const port = extractPort(hostUrl);
   if (port === null) {
-    console.error(import_picocolors27.default.red(`Cannot determine port from host URL: ${hostUrl}`));
+    console.error(import_picocolors28.default.red(`Cannot determine port from host URL: ${hostUrl}`));
     return 1;
   }
   const spawned = readSpawnedHost(root);
   if (spawned === null) {
     console.error(
-      import_picocolors27.default.red(
+      import_picocolors28.default.red(
         `No ownership record found (.horus/${SPAWNED_HOST_FILE2} absent). Horus will not stop a host it did not spawn.`
       )
     );
@@ -73141,12 +75149,12 @@ async function stopHost(root, hostUrl) {
   }
   const recordError = validateSpawnedRecord(spawned);
   if (recordError !== null) {
-    console.error(import_picocolors27.default.red(`Ownership record is malformed: ${recordError}. Aborting for safety.`));
+    console.error(import_picocolors28.default.red(`Ownership record is malformed: ${recordError}. Aborting for safety.`));
     return 1;
   }
   if (spawned.port !== port) {
     console.error(
-      import_picocolors27.default.red(
+      import_picocolors28.default.red(
         `Ownership record port (${spawned.port}) does not match host URL port (${port}). Record may be stale.`
       )
     );
@@ -73154,7 +75162,7 @@ async function stopHost(root, hostUrl) {
   }
   if (spawned.root !== root) {
     console.error(
-      import_picocolors27.default.red(
+      import_picocolors28.default.red(
         `Ownership record root (${spawned.root}) does not match resolved root (${root}). Record may be stale.`
       )
     );
@@ -73162,17 +75170,21 @@ async function stopHost(root, hostUrl) {
   }
   const info = await getProcessInfo(spawned.pid);
   if (info === null) {
-    console.error(import_picocolors27.default.red(`Process pid ${spawned.pid} is no longer running.`));
-    return 1;
+    console.log(import_picocolors28.default.dim(`Process pid ${spawned.pid} is no longer running \u2014 already stopped.`));
+    try {
+      await unlinkAsync((0, import_node_path9.join)(root, HORUS_DIR, SPAWNED_HOST_FILE2));
+    } catch {
+    }
+    return 0;
   }
   const portStr = String(port);
-  const axonHostPortRe = new RegExp(
-    `(?:^|\\s)(?:\\S*/)?axon\\s+host\\s+--port(?:=|\\s+)${portStr}(?=\\s|$)`
+  const hostPortRe = new RegExp(
+    `(?:^|\\s)(?:\\S*/)?horus-source\\s+host\\s+--port(?:=|\\s+)${portStr}(?=\\s|$)`
   );
-  if (!axonHostPortRe.test(info.args)) {
+  if (!hostPortRe.test(info.args)) {
     console.error(
-      import_picocolors27.default.red(
-        `Pid ${spawned.pid} args do not match "axon host --port ${portStr}". Got: "${info.args.slice(0, 120)}". Aborting for safety.`
+      import_picocolors28.default.red(
+        `Pid ${spawned.pid} args do not match "horus-source host --port ${portStr}". Got: "${info.args.slice(0, 120)}". Aborting for safety.`
       )
     );
     return 1;
@@ -73180,29 +75192,50 @@ async function stopHost(root, hostUrl) {
   const startTs = new Date(spawned.startedAt).getTime();
   const recordedAgeS = Math.round((Date.now() - startTs) / 1e3);
   if (!Number.isFinite(info.etimeSeconds)) {
-    console.error(import_picocolors27.default.red(`Could not read elapsed time for pid ${spawned.pid}. Aborting for safety.`));
+    console.error(import_picocolors28.default.red(`Could not read elapsed time for pid ${spawned.pid}. Aborting for safety.`));
     return 1;
   }
   if (Math.abs(info.etimeSeconds - recordedAgeS) > START_TIME_TOLERANCE_S) {
     console.error(
-      import_picocolors27.default.red(
+      import_picocolors28.default.red(
         `Pid ${spawned.pid} age mismatch: record says ~${recordedAgeS}s, process reports ${info.etimeSeconds}s elapsed. Possible PID reuse \u2014 aborting for safety.`
       )
     );
     return 1;
   }
+  let signaled = false;
   try {
     process.kill(spawned.pid, "SIGTERM");
-    console.log(
-      `${import_picocolors27.default.green("\u2713")} Stopped source-intelligence host ` + import_picocolors27.default.dim(`(pid ${spawned.pid}, port ${port})`) + ` for ${root}`
-    );
+    signaled = true;
   } catch (err) {
     if (err.code === "ESRCH") {
-      console.log(import_picocolors27.default.dim(`Host already gone (pid ${spawned.pid}).`));
+      console.log(import_picocolors28.default.dim(`Process pid ${spawned.pid} exited before signal \u2014 already stopped.`));
     } else {
-      console.error(import_picocolors27.default.red(`Failed to signal pid ${spawned.pid}: ${err.message}`));
+      console.error(import_picocolors28.default.red(`Failed to signal pid ${spawned.pid}: ${err.message}`));
+      return 1;
+    }
+  }
+  if (signaled) {
+    const deadline = Date.now() + STOP_WAIT_MS;
+    let exited = false;
+    while (Date.now() < deadline) {
+      await sleep(STOP_POLL_MS);
+      if (await getProcessInfo(spawned.pid) === null) {
+        exited = true;
+        break;
+      }
+    }
+    if (!exited) {
+      console.error(
+        import_picocolors28.default.red(
+          `Host pid ${spawned.pid} did not exit within ${STOP_WAIT_MS / 1e3}s after SIGTERM.`
+        )
+      );
       return 1;
     }
+    console.log(
+      `${import_picocolors28.default.green("\u2713")} Stopped source-intelligence host ` + import_picocolors28.default.dim(`(pid ${spawned.pid}, port ${port})`) + ` for ${root}`
+    );
   }
   try {
     await unlinkAsync((0, import_node_path9.join)(root, HORUS_DIR, SPAWNED_HOST_FILE2));
@@ -73214,7 +75247,7 @@ async function stopAll() {
   const registry = readRegistry();
   const projects2 = Object.entries(registry.projects);
   if (projects2.length === 0) {
-    console.log(import_picocolors27.default.dim("No registered projects."));
+    console.log(import_picocolors28.default.dim("No registered projects."));
     return 0;
   }
   let stopped = 0;
@@ -73224,17 +75257,17 @@ async function stopAll() {
     if (!hostUrl) continue;
     const alive = await isHostHealthy(hostUrl);
     if (!alive) continue;
-    console.log(`  Stopping ${import_picocolors27.default.bold(name)} ${import_picocolors27.default.dim(`(${hostUrl})`)}`);
+    console.log(`  Stopping ${import_picocolors28.default.bold(name)} ${import_picocolors28.default.dim(`(${hostUrl})`)}`);
     const code = await stopHost(entry2.root, hostUrl);
     if (code === 0) stopped++;
     else failed++;
   }
   if (stopped === 0 && failed === 0) {
-    console.log(import_picocolors27.default.dim("No running source-intelligence hosts found."));
+    console.log(import_picocolors28.default.dim("No running source-intelligence hosts found."));
   } else {
     console.log(
       `
-Stopped ${stopped} host(s)${failed > 0 ? import_picocolors27.default.red(`, ${failed} failed`) : ""}.`
+Stopped ${stopped} host(s)${failed > 0 ? import_picocolors28.default.red(`, ${failed} failed`) : ""}.`
     );
   }
   return failed > 0 ? 1 : 0;
@@ -73286,12 +75319,12 @@ function extractPort(hostUrl) {
 
 // ../../packages/cli/src/commands/hosts.ts
 init_cjs_shims();
-var import_picocolors28 = __toESM(require_picocolors(), 1);
+var import_picocolors29 = __toESM(require_picocolors(), 1);
 async function runHosts() {
   const registry = readRegistry();
   const projects2 = Object.entries(registry.projects);
   if (projects2.length === 0) {
-    console.log(import_picocolors28.default.dim("No registered projects. Run `horus index` in a repo first."));
+    console.log(import_picocolors29.default.dim("No registered projects. Run `horus index` in a repo first."));
     return 0;
   }
   const rows = [];
@@ -73308,29 +75341,29 @@ async function runHosts() {
   });
   const anyHost = rows.some((r) => r.hostUrl !== null);
   if (!anyHost) {
-    console.log(import_picocolors28.default.dim("No source-intelligence hosts found. Run `horus index` to start one."));
+    console.log(import_picocolors29.default.dim("No source-intelligence hosts found. Run `horus index` to start one."));
     return 0;
   }
   console.log("");
   for (const row of rows) {
     if (row.hostUrl === null) continue;
-    const status = row.healthy ? import_picocolors28.default.green("\u25CF running") : import_picocolors28.default.red("\u25CF stopped");
+    const status = row.healthy ? import_picocolors29.default.green("\u25CF running") : import_picocolors29.default.red("\u25CF stopped");
     const port = extractPort2(row.hostUrl) ?? "?";
     console.log(
-      `  ${status}  ${import_picocolors28.default.bold(row.name.padEnd(24))} port ${String(port).padEnd(6)} ${import_picocolors28.default.dim(row.root)}`
+      `  ${status}  ${import_picocolors29.default.bold(row.name.padEnd(24))} port ${String(port).padEnd(6)} ${import_picocolors29.default.dim(row.root)}`
     );
   }
   console.log("");
   const noHost = rows.filter((r) => r.hostUrl === null);
   if (noHost.length > 0) {
     for (const row of noHost) {
-      console.log(`  ${import_picocolors28.default.dim("\u25CB no host")}   ${import_picocolors28.default.dim(row.name)}`);
+      console.log(`  ${import_picocolors29.default.dim("\u25CB no host")}   ${import_picocolors29.default.dim(row.name)}`);
     }
     console.log("");
   }
   const running = rows.filter((r) => r.healthy).length;
   console.log(
-    import_picocolors28.default.dim(
+    import_picocolors29.default.dim(
       `${running} running \xB7 horus stop to reap \xB7 horus stop --all to stop everything`
     )
   );
@@ -73347,12 +75380,12 @@ function extractPort2(hostUrl) {
 
 // ../../packages/cli/src/commands/doctor.ts
 init_cjs_shims();
-var import_picocolors29 = __toESM(require_picocolors(), 1);
+var import_picocolors30 = __toESM(require_picocolors(), 1);
 var DEFAULT_DB_URL3 = "postgresql://horus:horus@localhost:5433/horus";
 function mark2(status) {
-  if (status === "pass") return import_picocolors29.default.green("\u2713");
-  if (status === "warn") return import_picocolors29.default.yellow("~");
-  return import_picocolors29.default.red("\u2717");
+  if (status === "pass") return import_picocolors30.default.green("\u2713");
+  if (status === "warn") return import_picocolors30.default.yellow("~");
+  return import_picocolors30.default.red("\u2717");
 }
 async function runDoctor(opts) {
   const cwd = opts?.cwd ?? process.cwd();
@@ -73579,11 +75612,11 @@ async function runDoctor(opts) {
     write(JSON.stringify(output, null, 2));
     return hasFailure ? 1 : 0;
   }
-  write(import_picocolors29.default.bold("\nHorus readiness check\n"));
+  write(import_picocolors30.default.bold("\nHorus readiness check\n"));
   for (const check of checks) {
-    write(`  ${mark2(check.status)} ${import_picocolors29.default.bold(check.label.padEnd(26))}  ${import_picocolors29.default.dim(check.detail)}`);
+    write(`  ${mark2(check.status)} ${import_picocolors30.default.bold(check.label.padEnd(26))}  ${import_picocolors30.default.dim(check.detail)}`);
     if (check.next) {
-      write(`    ${import_picocolors29.default.dim("\u2192 " + check.next)}`);
+      write(`    ${import_picocolors30.default.dim("\u2192 " + check.next)}`);
     }
   }
   write("");
@@ -73592,29 +75625,34 @@ async function runDoctor(opts) {
 
 // ../../packages/cli/src/commands/providers-doctor.ts
 init_cjs_shims();
-var import_picocolors30 = __toESM(require_picocolors(), 1);
+var import_node_child_process7 = require("child_process");
+var import_picocolors31 = __toESM(require_picocolors(), 1);
 function statusMark(status) {
-  if (status === "ready") return import_picocolors30.default.green("\u2713");
-  if (status === "installed") return import_picocolors30.default.yellow("~");
-  return import_picocolors30.default.red("\u2717");
+  if (status === "ready") return import_picocolors31.default.green("\u2713");
+  if (status === "installed") return import_picocolors31.default.yellow("~");
+  return import_picocolors31.default.red("\u2717");
 }
 function statusLabel(status) {
-  if (status === "ready") return import_picocolors30.default.green("ready");
-  if (status === "installed") return import_picocolors30.default.yellow("installed (not configured)");
-  return import_picocolors30.default.dim("not found on PATH");
-}
-function buildProviderResults(registry) {
-  return registry.providers.map((p) => ({
-    id: p.id,
-    status: "unavailable",
-    detail: `install the ${p.displayName} binary to use this provider`
-  }));
+  if (status === "ready") return import_picocolors31.default.green("ready");
+  if (status === "installed") return import_picocolors31.default.yellow("installed (not configured)");
+  return import_picocolors31.default.dim("not found on PATH");
+}
+function detectBinary(id) {
+  const result = (0, import_node_child_process7.spawnSync)(id, ["--version"], { stdio: "pipe", timeout: 2e3 });
+  if (result.error) {
+    return { id, status: "unavailable", detail: `${id}: command not found` };
+  }
+  return { id, status: "installed", detail: `${id}: found on PATH` };
+}
+function buildProviderResults(registry, _detect) {
+  const detect = _detect ?? detectBinary;
+  return registry.providers.map((p) => detect(p.id));
 }
 async function runProvidersDoctorCommand(opts) {
   const registry = opts?.registry ?? DEFAULT_LOCAL_PROVIDER_REGISTRY;
   const write = opts?.write ?? ((line2) => console.log(line2));
-  const results = buildProviderResults(registry);
-  write(import_picocolors30.default.bold("\nLocal AI providers\n"));
+  const results = buildProviderResults(registry, opts?._detect);
+  write(import_picocolors31.default.bold("\nLocal AI providers\n"));
   for (const result of results) {
     const descriptor = registry.get(result.id);
     const name = descriptor?.displayName ?? result.id;
@@ -73622,12 +75660,24 @@ async function runProvidersDoctorCommand(opts) {
       `  ${statusMark(result.status)} ${result.id.padEnd(8)}  ${name.padEnd(22)}  ${statusLabel(result.status)}`
     );
     if (result.status !== "ready" && result.detail) {
-      write(`    ${import_picocolors30.default.dim("\u2192 " + result.detail)}`);
+      write(`    ${import_picocolors31.default.dim("\u2192 " + result.detail)}`);
     }
   }
   write("");
-  write(import_picocolors30.default.dim("  Detection not yet implemented \u2014 install the provider binary first."));
-  write(import_picocolors30.default.dim('  Cloud provider: ANTHROPIC_API_KEY=<key> horus investigate "hint" --ai'));
+  write(import_picocolors31.default.bold("Cloud AI providers\n"));
+  const anthropicKey = opts?._anthropicKey !== void 0 ? opts._anthropicKey : process.env["ANTHROPIC_API_KEY"] ?? null;
+  if (anthropicKey) {
+    write(
+      `  ${import_picocolors31.default.green("\u2713")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors31.default.green("ANTHROPIC_API_KEY configured")}`
+    );
+  } else {
+    write(
+      `  ${import_picocolors31.default.red("\u2717")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors31.default.dim("ANTHROPIC_API_KEY not set")}`
+    );
+    write(
+      `    ${import_picocolors31.default.dim('\u2192 set ANTHROPIC_API_KEY=<key> to enable AI-powered investigation (horus investigate "hint" --ai)')}`
+    );
+  }
   write("");
   return 0;
 }
@@ -73636,7 +75686,7 @@ async function runProvidersDoctorCommand(opts) {
 init_cjs_shims();
 var import_node_fs8 = require("fs");
 var import_node_path10 = require("path");
-var import_picocolors31 = __toESM(require_picocolors(), 1);
+var import_picocolors32 = __toESM(require_picocolors(), 1);
 function configTemplate(name, repoPath) {
   return `export default {
   database: {
@@ -73662,39 +75712,66 @@ function configTemplate(name, repoPath) {
 };
 `;
 }
+function projectDefaults(localConfigPath2) {
+  try {
+    const file = readLocalConfig(localConfigPath2);
+    const project = file.project;
+    if (!project) return null;
+    const name = typeof project.name === "string" ? project.name : null;
+    const repositories2 = Array.isArray(project.repositories) ? project.repositories : [];
+    const firstRepo = repositories2[0];
+    const repoPath = firstRepo && typeof firstRepo.path === "string" ? firstRepo.path : null;
+    if (name == null) return null;
+    return { name, repoPath: repoPath ?? name };
+  } catch {
+    return null;
+  }
+}
 async function runGenerateConfig(opts) {
   const log = opts.write ?? ((line2) => console.log(line2));
   const cwd = opts.cwd ?? process.cwd();
-  const outPath = (0, import_node_path10.resolve)(cwd, opts.out ?? "horus.config.js");
-  const name = opts.name ?? "my-project";
-  const repoPath = opts.repo ?? `/path/to/${name}`;
+  const localConfigPath2 = discoverLocalConfig(cwd);
+  const defaults = localConfigPath2 != null ? projectDefaults(localConfigPath2) : null;
+  const hasLocalConfig = defaults != null;
+  const defaultOut = hasLocalConfig ? "horus.config.example.js" : "horus.config.js";
+  const outPath = (0, import_node_path10.resolve)(cwd, opts.out ?? defaultOut);
+  const name = opts.name ?? defaults?.name ?? "my-project";
+  const repoPath = opts.repo ?? defaults?.repoPath ?? `/path/to/${name}`;
   if ((0, import_node_fs8.existsSync)(outPath) && !opts.force) {
-    log(`${import_picocolors31.default.red("\u2717")} ${outPath} already exists`);
-    log(import_picocolors31.default.dim("  pass --force to overwrite"));
+    log(`${import_picocolors32.default.red("\u2717")} ${outPath} already exists`);
+    log(import_picocolors32.default.dim("  pass --force to overwrite"));
     return 1;
   }
   try {
     (0, import_node_fs8.mkdirSync)((0, import_node_path10.dirname)(outPath), { recursive: true });
     (0, import_node_fs8.writeFileSync)(outPath, configTemplate(name, repoPath), "utf8");
   } catch (err) {
-    log(`${import_picocolors31.default.red("\u2717")} Could not write ${outPath}: ${err.message}`);
+    log(`${import_picocolors32.default.red("\u2717")} Could not write ${outPath}: ${err.message}`);
     return 1;
   }
-  log(`${import_picocolors31.default.green("\u2713")} Created ${outPath}`);
-  log(import_picocolors31.default.dim(`  project: ${name}`));
-  log(import_picocolors31.default.dim(`  repo:    ${repoPath}`));
-  log(import_picocolors31.default.dim(`  next:    horus doctor --config ${outPath}`));
+  log(`${import_picocolors32.default.green("\u2713")} Created ${outPath}`);
+  log(import_picocolors32.default.dim(`  project: ${name}`));
+  log(import_picocolors32.default.dim(`  repo:    ${repoPath}`));
+  if (hasLocalConfig && localConfigPath2 != null) {
+    log("");
+    log(import_picocolors32.default.yellow("Note:") + ` an initialized Horus project config exists at ${localConfigPath2}`);
+    log("  \u2022 .horus/config.json  \u2014 project config used by `horus investigate` from this repo");
+    log("  \u2022 horus.config.js     \u2014 standalone/global config used with `horus doctor --config <path>`");
+    log(import_picocolors32.default.dim(`  next:  review ${outPath} and copy/adapt it as needed`));
+  } else {
+    log(import_picocolors32.default.dim(`  next:    horus doctor --config ${outPath}`));
+  }
   return 0;
 }
 
 // ../../packages/cli/src/commands/readiness.ts
 init_cjs_shims();
-var import_picocolors32 = __toESM(require_picocolors(), 1);
+var import_picocolors33 = __toESM(require_picocolors(), 1);
 var DEFAULT_DB_URL4 = "postgresql://horus:horus@localhost:5433/horus";
 function mark3(status) {
-  if (status === "pass") return import_picocolors32.default.green("\u2713");
-  if (status === "warn") return import_picocolors32.default.yellow("~");
-  return import_picocolors32.default.red("\u2717");
+  if (status === "pass") return import_picocolors33.default.green("\u2713");
+  if (status === "warn") return import_picocolors33.default.yellow("~");
+  return import_picocolors33.default.red("\u2717");
 }
 async function runReadiness(opts) {
   const cwd = opts?.cwd ?? process.cwd();
@@ -73757,7 +75834,7 @@ async function runReadiness(opts) {
       status: "warn",
       blocking: false,
       detail: "not installed \u2014 source intelligence unavailable",
-      next: `uv tool install axoniq==${PINNED_SOURCE_VERSION}`
+      next: `pip install horus-source`
     });
   } else if (sourceVersion !== PINNED_SOURCE_VERSION) {
     checks.push({
@@ -73765,7 +75842,7 @@ async function runReadiness(opts) {
       status: "warn",
       blocking: false,
       detail: `version mismatch (installed: ${sourceVersion}, required: ${PINNED_SOURCE_VERSION})`,
-      next: `uv tool install axoniq==${PINNED_SOURCE_VERSION}`
+      next: `pip install horus-source`
     });
   } else {
     checks.push({
@@ -73849,20 +75926,20 @@ async function runReadiness(opts) {
   }
   const blockingChecks = checks.filter((c) => c.blocking);
   const optionalChecks = checks.filter((c) => !c.blocking);
-  write(import_picocolors32.default.bold("\nHorus release readiness\n"));
-  write(import_picocolors32.default.bold("  Blocking"));
+  write(import_picocolors33.default.bold("\nHorus release readiness\n"));
+  write(import_picocolors33.default.bold("  Blocking"));
   for (const check of blockingChecks) {
-    write(`    ${mark3(check.status)} ${import_picocolors32.default.bold(check.label.padEnd(22))}  ${import_picocolors32.default.dim(check.detail)}`);
+    write(`    ${mark3(check.status)} ${import_picocolors33.default.bold(check.label.padEnd(22))}  ${import_picocolors33.default.dim(check.detail)}`);
     if (check.next) {
-      write(`      ${import_picocolors32.default.dim("\u2192 " + check.next)}`);
+      write(`      ${import_picocolors33.default.dim("\u2192 " + check.next)}`);
     }
   }
   write("");
-  write(import_picocolors32.default.bold("  Optional"));
+  write(import_picocolors33.default.bold("  Optional"));
   for (const check of optionalChecks) {
-    write(`    ${mark3(check.status)} ${import_picocolors32.default.bold(check.label.padEnd(22))}  ${import_picocolors32.default.dim(check.detail)}`);
+    write(`    ${mark3(check.status)} ${import_picocolors33.default.bold(check.label.padEnd(22))}  ${import_picocolors33.default.dim(check.detail)}`);
     if (check.next) {
-      write(`      ${import_picocolors32.default.dim("\u2192 " + check.next)}`);
+      write(`      ${import_picocolors33.default.dim("\u2192 " + check.next)}`);
     }
   }
   write("");
@@ -73870,21 +75947,21 @@ async function runReadiness(opts) {
   const optionalWarns = optionalChecks.filter((c) => c.status === "warn").length;
   if (blockingFails.length === 0) {
     if (optionalWarns === 0) {
-      write(import_picocolors32.default.green("  Ready for demo/release."));
+      write(import_picocolors33.default.green("  Ready for demo/release."));
     } else {
       write(
-        import_picocolors32.default.yellow(
+        import_picocolors33.default.yellow(
           `  Ready for a basic demo. ${optionalWarns} optional item(s) not configured \u2014 investigation evidence will be limited.`
         )
       );
     }
   } else {
     write(
-      import_picocolors32.default.red(
+      import_picocolors33.default.red(
         `  Not ready. ${blockingFails.length} blocking item(s) must be resolved before demo/release.`
       )
     );
-    write(import_picocolors32.default.dim("  Re-run `horus readiness` after resolving the items above."));
+    write(import_picocolors33.default.dim("  Re-run `horus readiness` after resolving the items above."));
   }
   write("");
   return blockingFails.length > 0 ? 1 : 0;
@@ -73935,7 +76012,7 @@ Examples:
   });
   program2.command("connect <type>").description(
     "Add or update a runtime connector (elasticsearch / mongodb / grafana / redis) in .horus/config.json"
-  ).option("--env <name>", "target environment (default: first environment in config)").option("--url <url>", "connector URL or connection string").option("--username <user>", "username (elasticsearch / grafana)").option("--password <pass>", "password (elasticsearch / grafana)").option("--index-pattern <pattern>", "Elasticsearch index pattern (required for elasticsearch)").option("--service <name>", "service name scope for log queries").option("--database <name>", "database name (required for mongodb)").option("--collections <list>", "comma-separated collection allowlist (mongodb)").option("--dashboard <uid>", "default dashboard uid (grafana)").option("--no-test", "skip live connection probe").action(
+  ).option("--env <name>", "target environment (default: first environment in config)").option("--url <url>", "connector URL or connection string (Redis with auth: redis://:password@host:6379)").option("--username <user>", "username (elasticsearch / grafana)").option("--password <pass>", "password (elasticsearch / grafana; for Redis embed in --url)").option("--index-pattern <pattern>", "Elasticsearch index pattern (required for elasticsearch)").option("--service <name>", "service name scope for log queries").option("--database <name>", "database name (required for mongodb)").option("--collections <list>", "comma-separated collection allowlist (mongodb)").option("--dashboard <uid>", "default dashboard uid (grafana)").option("--no-test", "skip live connection probe").action(
     async (type, opts) => {
       process.exitCode = await runConnect(type, {
         env: opts.env,
@@ -73984,9 +76061,16 @@ Examples:
       process.exitCode = await runIndex(opts);
     }
   );
-  program2.command("queues [name]").description("Show producer -> queue -> worker edges").option("-c, --config <path>", "path to horus.config.ts").option("--project <name>", "filter edges by project").action(async (name, opts) => {
-    process.exitCode = await runQueues(name, { config: opts.config, project: opts.project });
-  });
+  program2.command("queues [name]").description("Show queue topology from source intelligence; --live adds real-time Redis/BullMQ state").option("-c, --config <path>", "path to horus.config.ts").option("--name <name>", "registered project name (resolves via registry)").option("--project <name>", "filter edges by project").option("--live", "fetch real-time queue depths and failed-job counts from Redis/BullMQ").action(
+    async (name, opts) => {
+      process.exitCode = await runQueues(name, {
+        config: opts.config,
+        name: opts.name,
+        project: opts.project,
+        live: opts.live
+      });
+    }
+  );
   program2.command("investigate <hint>").description("Run a deterministic investigation for an incident hint").option("-c, --config <path>", "path to horus.config.ts").option("--name <name>", "registered project name (resolves via the registry)").option("--project <name>", "project name to scope to").option("--env <name>", "environment name (e.g. production)").option("--repo <name>", "repository/project to scope to (alias for --project)").option("--since <ref>", "git ref/range for change-impact (e.g. HEAD~5)").option(
     "--service <name>",
     "service name to scope runtime logs, e.g. leadcall-api-prod"
@@ -74081,8 +76165,8 @@ Examples:
   horus investigations
   horus investigations -n 20
 `);
-  program2.command("replay <id>").description("Re-render a saved investigation from the audit store (no re-query)").option("-c, --config <path>", "path to horus.config.ts").option("--format <fmt>", "text | markdown | json", "text").option("--ai", "enrich report with AI narrative (requires ANTHROPIC_API_KEY; falls back to deterministic on failure)").option("--ai-model <model>", "AI model for --ai (default: claude-opus-4-8)").action(async (id, opts) => {
-    process.exitCode = await runReplay(id, { config: opts.config, format: opts.format, ai: opts.ai, aiModel: opts.aiModel });
+  program2.command("replay <id>").description("Re-render a saved investigation from the audit store (no re-query)").option("-c, --config <path>", "path to horus.config.ts").option("--format <fmt>", "text | markdown | json", "text").option("--ai", "enrich report with AI narrative (requires ANTHROPIC_API_KEY; falls back to deterministic on failure)").option("--ai-model <model>", "AI model for --ai (default: claude-opus-4-8)").option("--refresh-ai", "re-run AI even if a stored judgment already exists").action(async (id, opts) => {
+    process.exitCode = await runReplay(id, { config: opts.config, format: opts.format, ai: opts.ai, aiModel: opts.aiModel, refreshAi: opts.refreshAi });
   }).addHelpText("after", `
 Examples:
   horus replay <id>
@@ -74090,11 +76174,12 @@ Examples:
   horus replay <id> --format json
   horus replay <id> --ai
   horus replay <id> --ai --ai-model claude-sonnet-4-6
+  horus replay <id> --ai --refresh-ai
 
   (Use 'horus investigations' to list saved investigation ids.)
 `);
-  program2.command("postmortem <id>").description("Draft an editable incident postmortem from a saved investigation").option("-c, --config <path>", "path to horus.config.ts").option("--output <path>", "write Markdown to a file instead of printing to stdout").option("--force", "overwrite the output file if it already exists").option("--ai-summary", "append an AI-generated summary section (requires ANTHROPIC_API_KEY; falls back gracefully)").option("--ai-model <model>", "AI model for --ai-summary (default: claude-opus-4-8)").action(async (id, opts) => {
-    process.exitCode = await runPostmortem(id, { config: opts.config, output: opts.output, force: opts.force, aiSummary: opts.aiSummary, aiModel: opts.aiModel });
+  program2.command("postmortem <id>").description("Draft an editable incident postmortem from a saved investigation").option("-c, --config <path>", "path to horus.config.ts").option("--output <path>", "write Markdown to a file instead of printing to stdout").option("--force", "overwrite the output file if it already exists").option("--ai-summary", "append an AI-generated summary section (requires ANTHROPIC_API_KEY; falls back gracefully)").option("--ai-model <model>", "AI model for --ai-summary (default: claude-opus-4-8)").option("--refresh-ai", "re-run AI even if a stored judgment already exists").action(async (id, opts) => {
+    process.exitCode = await runPostmortem(id, { config: opts.config, output: opts.output, force: opts.force, aiSummary: opts.aiSummary, aiModel: opts.aiModel, refreshAi: opts.refreshAi });
   }).addHelpText("after", `
 Examples:
   horus postmortem <id>
@@ -74102,6 +76187,7 @@ Examples:
   horus postmortem <id> --output ./postmortem.md --force
   horus postmortem <id> --ai-summary
   horus postmortem <id> --output ./postmortem.md --ai-summary --ai-model claude-sonnet-4-6
+  horus postmortem <id> --ai-summary --refresh-ai
 
   (Use 'horus investigations' to list saved investigation ids.)
 `);