@merittdev/horus 0.17.1 → 0.18.0

package/dist/index.cjs

@@ -3057,8 +3057,8 @@ var init_version = __esm({
   "../../packages/core/src/version.ts"() {
     "use strict";
     init_cjs_shims();
-    HORUS_VERSION = true ? "0.17.1" : "dev";
-    PINNED_SOURCE_VERSION = "2.0.2";
+    HORUS_VERSION = true ? "0.18.0" : "dev";
+    PINNED_SOURCE_VERSION = "2.1.0";
   }
 });
 
@@ -72992,7 +72992,12 @@ function shortTs(iso) {
 function buildErrorAnalysisBody(q2, field = "event_code", mapping = MERITT_FIELD_MAPPING) {
   const filters = [];
   if (q2.eventCode === void 0) {
-    const minLevel = q2.level !== void 0 && levelToValue(q2.level) > 50 ? q2.level : "error";
+    const hasText = (q2.text ?? "").trim().length > 0;
+    let minLevel = "error";
+    if (q2.level !== void 0) {
+      if (levelToValue(q2.level) > 50) minLevel = q2.level;
+      else if (hasText && levelToValue(q2.level) >= 40) minLevel = q2.level;
+    }
     filters.push(buildLevelFilter(mapping, minLevel));
   } else if (q2.level !== void 0 && levelToValue(q2.level) > 50) {
     filters.push(buildLevelFilter(mapping, q2.level));
@@ -94400,6 +94405,103 @@ function detectDataFlowCauseAcross(contexts) {
   return null;
 }
 
+// ../../packages/engine/src/hint-matched-signal.ts
+init_cjs_shims();
+var GENERIC_MATCH_STOP = /* @__PURE__ */ new Set([
+  "product",
+  "products",
+  "order",
+  "orders",
+  "sync",
+  "syncing",
+  "synced",
+  "fetch",
+  "fetching",
+  "api",
+  "data",
+  "service",
+  "services",
+  "update",
+  "updating",
+  "request",
+  "requests",
+  "response",
+  "error",
+  "errors",
+  "get",
+  "getting",
+  "save",
+  "saving",
+  "load",
+  "loading",
+  "create",
+  "creating",
+  "delete",
+  "failing",
+  "failed",
+  "failure",
+  "broken",
+  "value",
+  "values",
+  "record",
+  "records",
+  "found",
+  "not",
+  "with",
+  "the",
+  "and",
+  "for",
+  "from",
+  "into",
+  "this",
+  "that",
+  "when",
+  "returns",
+  "returning",
+  "stale",
+  "wrong",
+  "issue",
+  "issues",
+  "problem",
+  "slow",
+  "down",
+  "production"
+]);
+function distinctiveHintTokens(meaningfulHintTokens) {
+  return [...new Set(meaningfulHintTokens.map((t2) => t2.toLowerCase()))].filter(
+    (t2) => t2.length >= 4 && !GENERIC_MATCH_STOP.has(t2)
+  );
+}
+function codeSegments(code) {
+  return code.toLowerCase().split(/[^a-z]+/).filter((s5) => s5.length >= 4);
+}
+function selectHintMatchedSignal(signals, meaningfulHintTokens) {
+  const distinctive = distinctiveHintTokens(meaningfulHintTokens);
+  if (distinctive.length === 0) return null;
+  let best = null;
+  for (const s5 of signals) {
+    if (!s5.key || s5.key === "(none)" || s5.count < 2) continue;
+    const codeHit = codeSegments(s5.key).some((seg) => distinctive.includes(seg));
+    const msg = (s5.message ?? "").toLowerCase();
+    const msgHits = distinctive.filter((t2) => msg.includes(t2)).length;
+    if (!codeHit && msgHits < 2) continue;
+    const score = (codeHit ? 1e3 : 0) + msgHits * 10 + Math.min(9, Math.log10(Math.max(1, s5.count)));
+    if (best === null || score > best.score) {
+      best = {
+        code: s5.key,
+        count: s5.count,
+        message: s5.message ?? "",
+        via: codeHit ? "code" : "message",
+        score
+      };
+    }
+  }
+  if (best === null) return null;
+  const { score: _score, ...result } = best;
+  void _score;
+  return result;
+}
+
 // ../../packages/engine/src/hypotheses.ts
 init_cjs_shims();
 function generateHypotheses(evidence2, _correlation, ctx) {
@@ -98558,6 +98660,54 @@ async function investigate(input, deps) {
       }
     }
   }
+  if (deps.logs && typeof deps.logs.analyzeErrors === "function" && seedEmittedJoins.length === 0 && !sourceImpactHint && meaningfulHintTokens.length > 0) {
+    try {
+      const warnAnalysis = await deps.logs.analyzeErrors({
+        service: input.service,
+        from: logWindowFrom(input.logsSince ?? input.since),
+        level: "warn",
+        // Plain message match (OR semantics) — NOT broadText, whose phrase-match would
+        // require the hint words to appear contiguously (e.g. "Sale with link not found"
+        // wouldn't match the phrase "sale links found"). selectHintMatchedSignal then
+        // applies the precision gate on the returned signatures.
+        text: meaningfulHintTokens.filter((t2) => t2.length >= 4).join(" ")
+      });
+      const picked = selectHintMatchedSignal(warnAnalysis.signatures ?? [], meaningfulHintTokens);
+      if (picked) {
+        const tier = seedEmittedSeverityTier(null, picked.code, picked.message);
+        const volumeBoost = Math.min(0.1, Math.log10(Math.max(1, picked.count)) * 0.03);
+        const msgClause = picked.message ? ` \u2014 "${picked.message.replace(/\s+/g, " ").trim().slice(0, 80)}"` : "";
+        const ev = mkEv(
+          "log",
+          `event_code ${picked.code}: ${picked.count}x in Elasticsearch \u2014 matches the reported symptom`.slice(0, 220),
+          {
+            signature: picked.code,
+            count: picked.count,
+            sampleMessage: picked.message || null,
+            relevanceClass: "direct",
+            relevanceReason: `event_code ${picked.code} matches the reported symptom (not structurally linked to the seed)`,
+            hintMatched: true
+          },
+          {},
+          void 0,
+          0.75
+        );
+        logEvIds.push(ev.id);
+        causeInputs.push({
+          id: "cause:hint-matched-signal",
+          title: `Runtime signal ${picked.code} (${picked.count}x in Elasticsearch) matches the reported symptom but isn't structurally linked to ${top?.name ?? "the seed"}${msgClause} \u2014 verify`.slice(0, 220),
+          category: "error-correlation",
+          sourceEvidenceIds: [ev.id],
+          // A signal whose event_code/message names the symptom is stronger evidence than a
+          // diffuse recent commit that merely touched the seed's file (order-of-trust), so it
+          // ranks above the broad-commit regression floor (~0.54). Still below a seed-LINKED error.
+          baseScore: clamp015((tier === SEV_ERROR ? 0.6 : 0.56) + volumeBoost),
+          metadata: { blastRadius, hintMatched: true, code: picked.code, count: picked.count }
+        });
+      }
+    } catch {
+    }
+  }
   if (top && seedEv && ctx && code && !sourceImpactHint) {
     const scanIds = [
       .../* @__PURE__ */ new Set([...seeds.slice(1, 4).map((s5) => s5.id), ...(ctx.callees ?? []).slice(0, 4).map((c4) => c4.id)])

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@merittdev/horus",
-  "version": "0.17.1",
+  "version": "0.18.0",
   "description": "Local-first, source-aware production-incident investigation engine",
   "type": "module",
   "bin": {