@merittdev/horus 0.21.9 → 0.22.0

package/dist/index.cjs

@@ -3057,7 +3057,7 @@ var init_version = __esm({
   "../../packages/core/src/version.ts"() {
     "use strict";
     init_cjs_shims();
-    HORUS_VERSION = true ? "0.21.9" : "dev";
+    HORUS_VERSION = true ? "0.22.0" : "dev";
     PINNED_SOURCE_VERSION = HORUS_VERSION;
     SOURCE_PIN_ENFORCED = HORUS_VERSION !== "dev";
     EXPECTED_INDEX_CAPABILITY = 2;
@@ -71988,6 +71988,30 @@ var SourceHttpClient = class {
   diff(base2, compare) {
     return this.request("POST", "/api/diff", { base: base2, compare });
   }
+  /**
+   * Shortest relationship path between two symbols across all semantic edges
+   * (calls, imports, extends, implements, uses_type), in both directions.
+   * Broader than a call-only path — answers "how are A and B connected?".
+   * `relations` optionally narrows the edge kinds (e.g. `['calls']`).
+   */
+  trace(fromSymbol, toSymbol, opts) {
+    const params = new URLSearchParams({ from: fromSymbol, to: toSymbol });
+    if (opts?.maxDepth != null) params.set("max_depth", String(opts.maxDepth));
+    if (opts?.relations?.length) params.set("relations", opts.relations.join(","));
+    return this.request("GET", `/api/trace?${params.toString()}`);
+  }
+  /**
+   * Graph-shape insights: the codebase's hubs (highest-degree symbols),
+   * surprising connections (edges bridging detected communities), and a few
+   * suggested follow-up questions.
+   */
+  insights(opts) {
+    const params = new URLSearchParams();
+    if (opts?.hubLimit != null) params.set("hub_limit", String(opts.hubLimit));
+    if (opts?.bridgeLimit != null) params.set("bridge_limit", String(opts.bridgeLimit));
+    const qs = params.toString();
+    return this.request("GET", `/api/insights${qs ? `?${qs}` : ""}`);
+  }
   async nodeCount() {
     const o5 = await this.overview();
     return Number(o5.totalNodes) || 0;
@@ -73483,6 +73507,7 @@ function logsToEvidence(records, query, collectedAt) {
 // ../../packages/connectors/src/elasticsearch/analyze.ts
 init_cjs_shims();
 init_src();
+var UNCODED_SIGNATURE_KEY = "(no code)";
 function shortTs(iso) {
   if (!iso || iso.length < 16) return iso || "\u2014";
   return `${iso.slice(5, 10)} ${iso.slice(11, 16)}`;
@@ -73522,7 +73547,11 @@ function buildErrorAnalysisBody(q2, field = "event_code", mapping = MERITT_FIELD
     query: { bool: { filter: filters, must: mustClause } },
     aggs: {
       by_sig: {
-        terms: { field: sigTerm, size: 25 },
+        // `missing` routes docs with no signature-field value into a single
+        // "(no code)" bucket instead of dropping them — so error docs without an
+        // event_code still surface as a signature (with a sample) and the
+        // per-signature counts reconcile with totalErrors (the count/doc split bug).
+        terms: { field: sigTerm, size: 25, missing: UNCODED_SIGNATURE_KEY },
         aggs: {
           first_seen: { min: { field: mapping.timestampField } },
           last_seen: { max: { field: mapping.timestampField } },
@@ -122297,24 +122326,154 @@ async function runBlastRadius(query, opts) {
   }
 }
 
-// ../../packages/cli/src/commands/repos.ts
+// ../../packages/cli/src/commands/trace.ts
 init_cjs_shims();
 var import_picocolors28 = __toESM(require_picocolors(), 1);
 init_src();
+function confidenceTag(confidence) {
+  if (confidence >= 0.9) return "";
+  if (confidence >= 0.5) return " (~)";
+  return " (?)";
+}
+function renderTrace(result) {
+  if (!result.found) {
+    const lines = [result.error ?? "No path found."];
+    for (const n4 of result.notes ?? []) lines.push(import_picocolors28.default.dim(`  ${n4}`));
+    return lines.join("\n");
+  }
+  const path = result.path ?? [];
+  const segments = result.segments ?? [];
+  const chain = [path[0]?.name ?? "?"];
+  segments.forEach((seg, i3) => {
+    const tag = confidenceTag(seg.confidence);
+    const next = path[i3 + 1]?.name ?? "?";
+    chain.push(
+      seg.direction === "out" ? `--${seg.relType}${tag}--> ${next}` : `<--${seg.relType}${tag}-- ${next}`
+    );
+  });
+  const hops = result.hops ?? segments.length;
+  const out2 = [`Trace: ${chain.join(" ")} (${hops} hop${hops === 1 ? "" : "s"})`, ""];
+  path.forEach((n4, i3) => {
+    const label = n4.label.charAt(0).toUpperCase() + n4.label.slice(1);
+    out2.push(`  ${i3 + 1}. ${n4.name} (${label}) \u2014 ${n4.filePath}:${n4.startLine}`);
+  });
+  for (const n4 of result.notes ?? []) out2.push("", import_picocolors28.default.dim(n4));
+  return out2.join("\n");
+}
+async function runTrace(from, to, opts) {
+  try {
+    await loadConfig(opts.config);
+    const host = await ensureOwnSourceHost(process.cwd());
+    if (!host.ok || !host.hostUrl) {
+      const hint = ensureHostReasonHint(host.reason);
+      if (opts.json) {
+        console.log(JSON.stringify({ error: "Source-intelligence host unavailable", hint }, null, 2));
+      } else {
+        console.error(import_picocolors28.default.red("Source-intelligence host unavailable"));
+        console.error(import_picocolors28.default.dim(`  ${hint}`));
+      }
+      return 1;
+    }
+    const client = new SourceHttpClient({ baseUrl: host.hostUrl });
+    const relations = opts.relations ? opts.relations.split(",").map((r) => r.trim()).filter(Boolean) : void 0;
+    const result = await client.trace(from, to, {
+      ...opts.maxDepth != null ? { maxDepth: opts.maxDepth } : {},
+      ...relations ? { relations } : {}
+    });
+    if (opts.json) {
+      console.log(JSON.stringify(result, null, 2));
+    } else {
+      console.log(renderTrace(result));
+    }
+    return result.found ? 0 : 1;
+  } catch (err2) {
+    return failCommand(err2, opts.json);
+  }
+}
+
+// ../../packages/cli/src/commands/insights.ts
+init_cjs_shims();
+var import_picocolors29 = __toESM(require_picocolors(), 1);
+init_src();
+function renderInsights(r) {
+  const out2 = [];
+  out2.push(import_picocolors29.default.bold("Hubs") + import_picocolors29.default.dim(" \u2014 most-connected symbols"));
+  if (r.hubs.length === 0) {
+    out2.push(import_picocolors29.default.dim("  none (empty or unindexed graph)"));
+  } else {
+    for (const h3 of r.hubs) {
+      const label = h3.label.charAt(0).toUpperCase() + h3.label.slice(1);
+      out2.push(
+        `  ${String(h3.degree).padStart(3)}  ${h3.name} ${import_picocolors29.default.dim(`(${label}) \u2014 ${h3.filePath}:${h3.startLine}`)}`
+      );
+    }
+  }
+  out2.push("");
+  out2.push(import_picocolors29.default.bold("Surprising connections") + import_picocolors29.default.dim(" \u2014 edges bridging communities"));
+  if (r.bridges.length === 0) {
+    out2.push(import_picocolors29.default.dim("  none detected (run community detection first)"));
+  } else {
+    for (const b5 of r.bridges) {
+      out2.push(
+        `  ${b5.source} --${b5.relType}--> ${b5.target}  ${import_picocolors29.default.dim(`[${b5.sourceCommunity} \u2192 ${b5.targetCommunity}]`)}`
+      );
+    }
+  }
+  if (r.questions.length > 0) {
+    out2.push("");
+    out2.push(import_picocolors29.default.bold("Suggested questions"));
+    for (const q2 of r.questions) out2.push(`  ${import_picocolors29.default.dim("\u2022")} ${q2}`);
+  }
+  return out2.join("\n");
+}
+async function runInsights(opts) {
+  try {
+    await loadConfig(opts.config);
+    const host = await ensureOwnSourceHost(process.cwd());
+    if (!host.ok || !host.hostUrl) {
+      const hint = ensureHostReasonHint(host.reason);
+      if (opts.json) {
+        console.log(JSON.stringify({ error: "Source-intelligence host unavailable", hint }, null, 2));
+      } else {
+        console.error(import_picocolors29.default.red("Source-intelligence host unavailable"));
+        console.error(import_picocolors29.default.dim(`  ${hint}`));
+      }
+      return 1;
+    }
+    const client = new SourceHttpClient({ baseUrl: host.hostUrl });
+    const result = await client.insights({
+      ...opts.hubs != null ? { hubLimit: opts.hubs } : {},
+      ...opts.bridges != null ? { bridgeLimit: opts.bridges } : {}
+    });
+    if (opts.json) {
+      console.log(JSON.stringify(result, null, 2));
+    } else {
+      console.log(renderInsights(result));
+    }
+    return 0;
+  } catch (err2) {
+    return failCommand(err2, opts.json);
+  }
+}
+
+// ../../packages/cli/src/commands/repos.ts
+init_cjs_shims();
+var import_picocolors30 = __toESM(require_picocolors(), 1);
+init_src();
 async function runRepos(opts) {
   const config2 = await loadConfig(opts.config);
   const providers = repoProviders(config2);
   if (providers.length === 0) {
-    console.log(import_picocolors28.default.dim("No repositories configured."));
+    console.log(import_picocolors30.default.dim("No repositories configured."));
     return 0;
   }
   const health = await reposHealth(providers);
   for (const h3 of health) {
-    const dot = h3.reachable ? import_picocolors28.default.green("\u25CF") : import_picocolors28.default.red("\u25CF");
-    const name2 = import_picocolors28.default.bold(h3.repo.padEnd(20));
-    const hostUrl = import_picocolors28.default.cyan(h3.hostUrl.padEnd(30));
-    const path = import_picocolors28.default.dim(h3.path);
-    const detail = h3.detail ? import_picocolors28.default.dim(`(${h3.detail})`) : "";
+    const dot = h3.reachable ? import_picocolors30.default.green("\u25CF") : import_picocolors30.default.red("\u25CF");
+    const name2 = import_picocolors30.default.bold(h3.repo.padEnd(20));
+    const hostUrl = import_picocolors30.default.cyan(h3.hostUrl.padEnd(30));
+    const path = import_picocolors30.default.dim(h3.path);
+    const detail = h3.detail ? import_picocolors30.default.dim(`(${h3.detail})`) : "";
     console.log(`  ${dot}  ${name2}  ${hostUrl}  ${path}  ${detail}`);
   }
   return 0;
@@ -122322,7 +122481,7 @@ async function runRepos(opts) {
 
 // ../../packages/cli/src/commands/search.ts
 init_cjs_shims();
-var import_picocolors29 = __toESM(require_picocolors(), 1);
+var import_picocolors31 = __toESM(require_picocolors(), 1);
 init_src();
 async function runSearch(query, opts) {
   try {
@@ -122341,18 +122500,18 @@ async function search(query, opts) {
   }
   let totalMatches = 0;
   for (const result of results) {
-    const statusDot = result.reachable ? import_picocolors29.default.green("\u25CF") : import_picocolors29.default.red("\u25CF");
+    const statusDot = result.reachable ? import_picocolors31.default.green("\u25CF") : import_picocolors31.default.red("\u25CF");
     console.log("");
-    console.log(`${statusDot}  ${import_picocolors29.default.bold("## " + result.repo)}  ${import_picocolors29.default.dim(result.hostUrl)}`);
+    console.log(`${statusDot}  ${import_picocolors31.default.bold("## " + result.repo)}  ${import_picocolors31.default.dim(result.hostUrl)}`);
     if (!result.reachable) {
-      console.log(import_picocolors29.default.dim("  (unreachable)"));
+      console.log(import_picocolors31.default.dim("  (unreachable)"));
     } else if (result.symbols.length === 0) {
-      console.log(import_picocolors29.default.dim("  (no matches)"));
+      console.log(import_picocolors31.default.dim("  (no matches)"));
     } else {
       for (const sym of result.symbols) {
-        const owner = sym.className ? import_picocolors29.default.dim(`${sym.className}.`) : "";
-        const line2 = sym.startLine ? import_picocolors29.default.dim(`:${sym.startLine}`) : "";
-        console.log(`  - ${owner}${import_picocolors29.default.bold(sym.name)}  ${import_picocolors29.default.dim(sym.filePath)}${line2}`);
+        const owner = sym.className ? import_picocolors31.default.dim(`${sym.className}.`) : "";
+        const line2 = sym.startLine ? import_picocolors31.default.dim(`:${sym.startLine}`) : "";
+        console.log(`  - ${owner}${import_picocolors31.default.bold(sym.name)}  ${import_picocolors31.default.dim(sym.filePath)}${line2}`);
       }
       totalMatches += result.symbols.length;
     }
@@ -122360,7 +122519,7 @@ async function search(query, opts) {
   console.log("");
   const reachableCount = results.filter((r) => r.reachable).length;
   console.log(
-    import_picocolors29.default.dim(
+    import_picocolors31.default.dim(
       `${totalMatches} match(es) across ${reachableCount}/${results.length} reachable repo(s) for query: "${query}"`
     )
   );
@@ -122369,7 +122528,7 @@ async function search(query, opts) {
 
 // ../../packages/cli/src/commands/investigations.ts
 init_cjs_shims();
-var import_picocolors30 = __toESM(require_picocolors(), 1);
+var import_picocolors32 = __toESM(require_picocolors(), 1);
 init_src();
 
 // ../../packages/cli/src/lib/format.ts
@@ -122401,7 +122560,7 @@ function localIdFromCloudRow(row) {
 function printRow(id, createdAt, title, marker) {
   const ts = formatDateTime(createdAt);
   const t2 = (title ?? "").length > 60 ? (title ?? "").slice(0, 57) + "..." : title ?? "";
-  console.log(`${id}  ${ts}  ${t2}${marker !== void 0 ? `  ${import_picocolors30.default.dim(marker)}` : ""}`);
+  console.log(`${id}  ${ts}  ${t2}${marker !== void 0 ? `  ${import_picocolors32.default.dim(marker)}` : ""}`);
 }
 async function runInvestigations(opts) {
   const json2 = opts.json === true;
@@ -122429,7 +122588,7 @@ async function runInvestigations(opts) {
     if (json2) {
       console.log(JSON.stringify({ error: localError.message, investigations: [], count: 0 }, null, 2));
     }
-    console.error(import_picocolors30.default.red(localError.message));
+    console.error(import_picocolors32.default.red(localError.message));
     return 1;
   }
   const items = localRows.map((r) => ({
@@ -122495,18 +122654,18 @@ async function runInvestigations(opts) {
   if (localRows.length === 0 && cloudOnly === 0 && localError === null) {
     console.log('No investigations yet. Run: horus investigate "<hint>"');
   } else if (localRows.length > 0) {
-    console.log(import_picocolors30.default.dim("Replay locally: horus replay <id>  \xB7  postmortem: horus postmortem <id>"));
+    console.log(import_picocolors32.default.dim("Replay locally: horus replay <id>  \xB7  postmortem: horus postmortem <id>"));
   }
   if (localError) {
-    console.log(import_picocolors30.default.dim(`local audit store unavailable \u2014 replay needs it (${localError.message})`));
+    console.log(import_picocolors32.default.dim(`local audit store unavailable \u2014 replay needs it (${localError.message})`));
   }
-  if (cloudNote !== null) console.log(import_picocolors30.default.dim(cloudNote));
+  if (cloudNote !== null) console.log(import_picocolors32.default.dim(cloudNote));
   return 0;
 }
 
 // ../../packages/cli/src/commands/lens.ts
 init_cjs_shims();
-var import_picocolors31 = __toESM(require_picocolors(), 1);
+var import_picocolors33 = __toESM(require_picocolors(), 1);
 function truncate(s5, n4) {
   if (s5 === void 0 || s5 === "") return "";
   const flat = s5.replace(/\s+/g, " ").trim();
@@ -122514,10 +122673,10 @@ function truncate(s5, n4) {
 }
 function printRow2(r) {
   const ts = formatDateTime(new Date(r.createdAt));
-  const status = import_picocolors31.default.dim(`[${r.status || "?"}]`);
-  const route2 = r.route ? import_picocolors31.default.cyan(r.route) : import_picocolors31.default.dim("(no route)");
-  const errs = r.errorCount > 0 ? import_picocolors31.default.red(`${r.errorCount}err`) : import_picocolors31.default.dim("0err");
-  const comment = truncate(r.comment, 60) || import_picocolors31.default.dim("(no comment)");
+  const status = import_picocolors33.default.dim(`[${r.status || "?"}]`);
+  const route2 = r.route ? import_picocolors33.default.cyan(r.route) : import_picocolors33.default.dim("(no route)");
+  const errs = r.errorCount > 0 ? import_picocolors33.default.red(`${r.errorCount}err`) : import_picocolors33.default.dim("0err");
+  const comment = truncate(r.comment, 60) || import_picocolors33.default.dim("(no comment)");
   console.log(`${r.id}  ${ts}  ${status}  ${route2}  ${comment}  ${errs}`);
 }
 async function runLensList(opts) {
@@ -122536,7 +122695,7 @@ async function runLensList(opts) {
     const message = err2.message;
     if (json2)
       console.log(JSON.stringify({ reports: [], count: 0, notes: [message] }, null, 2));
-    console.error(import_picocolors31.default.red(message));
+    console.error(import_picocolors33.default.red(message));
     return 1;
   }
   if (isUnavailable2(result)) {
@@ -122545,7 +122704,7 @@ async function runLensList(opts) {
         JSON.stringify({ reports: [], count: 0, notes: [result.remedy] }, null, 2)
       );
     } else {
-      console.log(import_picocolors31.default.yellow(`Lens work queue unavailable \u2014 ${result.remedy}`));
+      console.log(import_picocolors33.default.yellow(`Lens work queue unavailable \u2014 ${result.remedy}`));
     }
     return json2 ? 0 : 1;
   }
@@ -122570,10 +122729,10 @@ async function runLensList(opts) {
   }
   for (const r of result.reports) printRow2(r);
   console.log(
-    import_picocolors31.default.dim(`
+    import_picocolors33.default.dim(`
 ${result.reports.length} report(s) \xB7 detail: horus lens show <id>`)
   );
-  if (result.notes) for (const n4 of result.notes) console.log(import_picocolors31.default.dim(n4));
+  if (result.notes) for (const n4 of result.notes) console.log(import_picocolors33.default.dim(n4));
   return 0;
 }
 async function runLensShow(reportId, opts) {
@@ -122585,46 +122744,46 @@ async function runLensShow(reportId, opts) {
   } catch (err2) {
     const message = err2.message;
     if (json2) console.log(JSON.stringify({ error: message }, null, 2));
-    console.error(import_picocolors31.default.red(message));
+    console.error(import_picocolors33.default.red(message));
     return 1;
   }
   if (isUnavailable2(detail)) {
     if (json2) console.log(JSON.stringify({ error: detail.remedy }, null, 2));
-    else console.log(import_picocolors31.default.yellow(`Lens work queue unavailable \u2014 ${detail.remedy}`));
+    else console.log(import_picocolors33.default.yellow(`Lens work queue unavailable \u2014 ${detail.remedy}`));
     return json2 ? 0 : 1;
   }
   if (isLensNotFound(detail)) {
     const msg = `No Lens report ${reportId} in this workspace.`;
     if (json2) console.log(JSON.stringify({ error: msg, notFound: true }, null, 2));
-    else console.log(import_picocolors31.default.yellow(msg));
+    else console.log(import_picocolors33.default.yellow(msg));
     return 1;
   }
   if (json2) {
     console.log(JSON.stringify(detail, null, 2));
     return 0;
   }
-  console.log(import_picocolors31.default.bold(`Lens report ${detail.id}`) + `  ${import_picocolors31.default.dim(`[${detail.status}]`)}`);
+  console.log(import_picocolors33.default.bold(`Lens report ${detail.id}`) + `  ${import_picocolors33.default.dim(`[${detail.status}]`)}`);
   if (detail.comment)
-    console.log(`  ${import_picocolors31.default.bold("comment")}   ${truncate(detail.comment, 200)}`);
-  if (detail.route) console.log(`  ${import_picocolors31.default.bold("route")}     ${import_picocolors31.default.cyan(detail.route)}`);
-  console.log(`  ${import_picocolors31.default.bold("filed")}     ${formatDateTime(new Date(detail.createdAt))}`);
-  if (detail.release) console.log(`  ${import_picocolors31.default.bold("release")}   ${detail.release}`);
-  if (detail.gitSha) console.log(`  ${import_picocolors31.default.bold("gitSha")}    ${detail.gitSha}`);
+    console.log(`  ${import_picocolors33.default.bold("comment")}   ${truncate(detail.comment, 200)}`);
+  if (detail.route) console.log(`  ${import_picocolors33.default.bold("route")}     ${import_picocolors33.default.cyan(detail.route)}`);
+  console.log(`  ${import_picocolors33.default.bold("filed")}     ${formatDateTime(new Date(detail.createdAt))}`);
+  if (detail.release) console.log(`  ${import_picocolors33.default.bold("release")}   ${detail.release}`);
+  if (detail.gitSha) console.log(`  ${import_picocolors33.default.bold("gitSha")}    ${detail.gitSha}`);
   if (detail.topErrorMessage)
     console.log(
-      `  ${import_picocolors31.default.bold("error")}     ${import_picocolors31.default.red(truncate(detail.topErrorMessage, 160))}`
+      `  ${import_picocolors33.default.bold("error")}     ${import_picocolors33.default.red(truncate(detail.topErrorMessage, 160))}`
     );
   if (detail.seed) {
     const loc = `${detail.seed.file}${detail.seed.line !== void 0 ? `:${detail.seed.line}` : ""}`;
-    const sym = detail.seed.symbol ? import_picocolors31.default.dim(` (${detail.seed.symbol})`) : "";
+    const sym = detail.seed.symbol ? import_picocolors33.default.dim(` (${detail.seed.symbol})`) : "";
     console.log(
-      `  ${import_picocolors31.default.bold("seed")}      ${import_picocolors31.default.green(loc)}${sym}  ${import_picocolors31.default.dim("\u2190 raise site to fix")}`
+      `  ${import_picocolors33.default.bold("seed")}      ${import_picocolors33.default.green(loc)}${sym}  ${import_picocolors33.default.dim("\u2190 raise site to fix")}`
     );
   }
   if (detail.failingRequests.length > 0) {
-    console.log(`  ${import_picocolors31.default.bold("failing")}`);
+    console.log(`  ${import_picocolors33.default.bold("failing")}`);
     for (const req of detail.failingRequests) {
-      console.log(`    ${req.method} ${req.url} ${import_picocolors31.default.red(String(req.status ?? "?"))}`);
+      console.log(`    ${req.method} ${req.url} ${import_picocolors33.default.red(String(req.status ?? "?"))}`);
     }
   }
   return 0;
@@ -122632,18 +122791,18 @@ async function runLensShow(reportId, opts) {
 
 // ../../packages/cli/src/commands/replay.ts
 init_cjs_shims();
-var import_picocolors32 = __toESM(require_picocolors(), 1);
+var import_picocolors34 = __toESM(require_picocolors(), 1);
 async function runReplay(id, opts) {
   const { db, sql: sql2 } = await openDb();
   try {
     const row = await getInvestigation(db, id);
     if (!row) {
-      console.error(import_picocolors32.default.red("No investigation found: " + id));
+      console.error(import_picocolors34.default.red("No investigation found: " + id));
       return 1;
     }
     if (!row.report) {
       console.error(
-        import_picocolors32.default.red(
+        import_picocolors34.default.red(
           "Investigation " + id + " has no stored report (run a newer investigation)."
         )
       );
@@ -122656,7 +122815,7 @@ async function runReplay(id, opts) {
     if (opts.ai && fmt !== "json") {
       if (report.aiJudgment && !opts.refreshAi) {
         renderStoredAIJudgment(report.aiJudgment);
-        console.log(import_picocolors32.default.dim("[ai] Stored judgment replayed. Use --refresh-ai to regenerate."));
+        console.log(import_picocolors34.default.dim("[ai] Stored judgment replayed. Use --refresh-ai to regenerate."));
       } else {
         const narrativeInput = buildNarrativeInput(report);
         const { provider } = await buildNarrativeProvider({
@@ -122669,17 +122828,17 @@ async function runReplay(id, opts) {
         );
         if (!fromProvider && degraded) {
           if (validationErrors?.length) {
-            console.error(import_picocolors32.default.yellow("[ai] structured validation incomplete \u2014 showing raw AI narrative"));
+            console.error(import_picocolors34.default.yellow("[ai] structured validation incomplete \u2014 showing raw AI narrative"));
           }
           console.log("");
-          console.log(import_picocolors32.default.dim("\u2500".repeat(60)));
-          console.log(import_picocolors32.default.bold("AI narrative ") + import_picocolors32.default.yellow("(unstructured \u2014 not validated)"));
-          if (output.what?.trim()) console.log(import_picocolors32.default.bold("\nWhat:"), output.what.trim());
-          if (output.why?.trim()) console.log(import_picocolors32.default.bold("\nWhy:"), output.why.trim());
+          console.log(import_picocolors34.default.dim("\u2500".repeat(60)));
+          console.log(import_picocolors34.default.bold("AI narrative ") + import_picocolors34.default.yellow("(unstructured \u2014 not validated)"));
+          if (output.what?.trim()) console.log(import_picocolors34.default.bold("\nWhat:"), output.what.trim());
+          if (output.why?.trim()) console.log(import_picocolors34.default.bold("\nWhy:"), output.why.trim());
         } else if (!fromProvider) {
-          console.error(import_picocolors32.default.yellow("[ai] Provider unavailable \u2014 deterministic output shown above."));
+          console.error(import_picocolors34.default.yellow("[ai] Provider unavailable \u2014 deterministic output shown above."));
           if (validationErrors?.length) {
-            console.error(import_picocolors32.default.dim(`    ${validationErrors[0]}`));
+            console.error(import_picocolors34.default.dim(`    ${validationErrors[0]}`));
           }
         } else {
           const stored = narrativeOutputToStoredJudgment(output, "anthropic");
@@ -122723,7 +122882,7 @@ async function runOwner(query, opts) {
 init_cjs_shims();
 var import_node_fs23 = require("fs");
 var import_node_path25 = require("path");
-var import_picocolors33 = __toESM(require_picocolors(), 1);
+var import_picocolors35 = __toESM(require_picocolors(), 1);
 async function runPostmortem(id, opts) {
   const log = opts.write ?? ((line2) => console.log(line2));
   let sql2;
@@ -122737,11 +122896,11 @@ async function runPostmortem(id, opts) {
       const { db } = conn;
       const row = await getInvestigation(db, id);
       if (!row) {
-        log(import_picocolors33.default.red("No investigation found: " + id));
+        log(import_picocolors35.default.red("No investigation found: " + id));
         return 1;
       }
       if (!row.report) {
-        log(import_picocolors33.default.red("Investigation " + id + " has no stored report."));
+        log(import_picocolors35.default.red("Investigation " + id + " has no stored report."));
         return 1;
       }
       report = migrateReport(row.report);
@@ -122835,23 +122994,23 @@ _AI summary unavailable: ${validationErrors?.[0] ?? "provider error"}_
     if (opts.output) {
       const outputPath = (0, import_node_path25.resolve)(opts.output);
       if ((0, import_node_fs23.existsSync)(outputPath) && !opts.force) {
-        log(import_picocolors33.default.red("\u2717") + " " + outputPath + " already exists");
-        log(import_picocolors33.default.dim("  pass --force to overwrite"));
+        log(import_picocolors35.default.red("\u2717") + " " + outputPath + " already exists");
+        log(import_picocolors35.default.dim("  pass --force to overwrite"));
         return 1;
       }
       try {
         (0, import_node_fs23.writeFileSync)(outputPath, content, "utf8");
       } catch (err2) {
-        log(import_picocolors33.default.red("\u2717 Could not write " + outputPath + ": ") + err2.message);
+        log(import_picocolors35.default.red("\u2717 Could not write " + outputPath + ": ") + err2.message);
         return 1;
       }
-      log(import_picocolors33.default.green("\u2713") + " Saved postmortem to " + outputPath);
+      log(import_picocolors35.default.green("\u2713") + " Saved postmortem to " + outputPath);
     } else {
       log(content);
     }
   } catch (err2) {
     const message = err2 instanceof Error ? err2.message : String(err2);
-    log(import_picocolors33.default.red("postmortem failed: " + message));
+    log(import_picocolors35.default.red("postmortem failed: " + message));
     return 1;
   } finally {
     if (sql2) {
@@ -122863,7 +123022,7 @@ _AI summary unavailable: ${validationErrors?.[0] ?? "provider error"}_
 
 // ../../packages/cli/src/commands/score.ts
 init_cjs_shims();
-var import_picocolors34 = __toESM(require_picocolors(), 1);
+var import_picocolors36 = __toESM(require_picocolors(), 1);
 init_src();
 var SCORE_AI_CONTRACT = `Provide a clearly separated AI score explanation with:
 
@@ -122883,11 +123042,11 @@ async function runScore(id, opts) {
   try {
     const row = await getInvestigation(db, id);
     if (!row) {
-      console.error(import_picocolors34.default.red("No investigation found: " + id));
+      console.error(import_picocolors36.default.red("No investigation found: " + id));
       return 1;
     }
     if (!row.report) {
-      console.error(import_picocolors34.default.red("Investigation " + id + " has no stored report."));
+      console.error(import_picocolors36.default.red("Investigation " + id + " has no stored report."));
       return 1;
     }
     const s5 = scoreInvestigation(migrateReport(row.report));
@@ -122908,7 +123067,7 @@ async function runScore(id, opts) {
         });
         console.log("\n" + renderInterpretation(result));
         if (!result.ok) {
-          console.error(import_picocolors34.default.yellow(`[ai] ${result.warning}`));
+          console.error(import_picocolors36.default.yellow(`[ai] ${result.warning}`));
         }
       }
     }
@@ -122942,7 +123101,7 @@ async function runScores(opts) {
     if (json2) {
       console.log(JSON.stringify({ error: err2.message, scores: [], count: 0 }, null, 2));
     }
-    console.error(import_picocolors34.default.red(err2.message));
+    console.error(import_picocolors36.default.red(err2.message));
     return 1;
   }
   if (json2) {
@@ -122983,7 +123142,7 @@ async function runScores(opts) {
 
 // ../../packages/cli/src/commands/ask.ts
 init_cjs_shims();
-var import_picocolors35 = __toESM(require_picocolors(), 1);
+var import_picocolors37 = __toESM(require_picocolors(), 1);
 init_src();
 function renderAnswer(report, directive, opts) {
   const answer = answerQuestion(report, directive);
@@ -122996,13 +123155,13 @@ function renderAnswer(report, directive, opts) {
   if (!opts.json && report.aiJudgment) {
     const j3 = report.aiJudgment;
     console.log("");
-    console.log(import_picocolors35.default.dim("\u2500".repeat(60)));
-    console.log(import_picocolors35.default.dim(`Stored AI judgment (${j3.provider}, ${j3.generatedAt}):`));
+    console.log(import_picocolors37.default.dim("\u2500".repeat(60)));
+    console.log(import_picocolors37.default.dim(`Stored AI judgment (${j3.provider}, ${j3.generatedAt}):`));
     if (j3.rootCauseAssessment) {
-      console.log(import_picocolors35.default.bold("Root cause (AI):"), j3.rootCauseAssessment.summary);
-      console.log(import_picocolors35.default.dim(`Uncertainty: ${j3.rootCauseAssessment.uncertainty}`));
+      console.log(import_picocolors37.default.bold("Root cause (AI):"), j3.rootCauseAssessment.summary);
+      console.log(import_picocolors37.default.dim(`Uncertainty: ${j3.rootCauseAssessment.uncertainty}`));
     } else {
-      console.log(import_picocolors35.default.bold("AI Why:"), j3.why);
+      console.log(import_picocolors37.default.bold("AI Why:"), j3.why);
     }
   }
   return 0;
@@ -123125,24 +123284,24 @@ function renderCodeAnswer(directive, symbols, ctx) {
   const top = symbols[0];
   if (!top) return;
   console.log("");
-  console.log(import_picocolors35.default.bold(directive));
-  console.log(`  ${import_picocolors35.default.green("\u2192")} ${import_picocolors35.default.bold(top.name)}  ${import_picocolors35.default.dim(symbolLocation(top))}`);
-  if (top.signature) console.log(`    ${import_picocolors35.default.dim(top.signature)}`);
+  console.log(import_picocolors37.default.bold(directive));
+  console.log(`  ${import_picocolors37.default.green("\u2192")} ${import_picocolors37.default.bold(top.name)}  ${import_picocolors37.default.dim(symbolLocation(top))}`);
+  if (top.signature) console.log(`    ${import_picocolors37.default.dim(top.signature)}`);
   if (ctx?.snippet) {
     for (const line2 of ctx.snippet.split("\n").slice(0, 3)) {
-      console.log(import_picocolors35.default.dim("    " + line2));
+      console.log(import_picocolors37.default.dim("    " + line2));
     }
   }
   const others = symbols.slice(1);
   if (others.length > 0) {
     console.log("");
-    console.log(import_picocolors35.default.dim("  Other matches:"));
+    console.log(import_picocolors37.default.dim("  Other matches:"));
     for (const s5 of others) {
-      console.log(`    - ${s5.name}  ${import_picocolors35.default.dim(symbolLocation(s5))}`);
+      console.log(`    - ${s5.name}  ${import_picocolors37.default.dim(symbolLocation(s5))}`);
     }
   }
   console.log("");
-  console.log(import_picocolors35.default.dim("  (fresh source lookup \u2014 re-queried the source host)"));
+  console.log(import_picocolors37.default.dim("  (fresh source lookup \u2014 re-queried the source host)"));
 }
 async function answerFromSource(directive, opts) {
   let code;
@@ -123194,8 +123353,8 @@ async function runAsk(id, directive, opts) {
     const session = authedClient();
     if (!session) {
       console.error(
-        import_picocolors35.default.red(
-          `This repo is linked to Horus Cloud but you are not logged in. Run ${import_picocolors35.default.bold("horus login")} first.`
+        import_picocolors37.default.red(
+          `This repo is linked to Horus Cloud but you are not logged in. Run ${import_picocolors37.default.bold("horus login")} first.`
         )
       );
       return 1;
@@ -123204,15 +123363,15 @@ async function runAsk(id, directive, opts) {
       const report = await fetchInvestigationReportFromCloud(session.client, cloudCfg, id);
       if (report) return renderAnswer(report, directive, opts);
       console.error(
-        import_picocolors35.default.red(
-          `Investigation ${id} has no saved report locally or in Horus Cloud. Run ${import_picocolors35.default.bold("horus investigate")} first.`
+        import_picocolors37.default.red(
+          `Investigation ${id} has no saved report locally or in Horus Cloud. Run ${import_picocolors37.default.bold("horus investigate")} first.`
         )
       );
       return 1;
     } catch (err2) {
       if (err2 instanceof CloudError && err2.status === 404) {
         console.error(
-          import_picocolors35.default.red(
+          import_picocolors37.default.red(
             `No investigation found for "${id}" locally or in Horus Cloud. Use the id printed at the top of \`horus investigate\` output.`
           )
         );
@@ -123226,21 +123385,21 @@ async function runAsk(id, directive, opts) {
     case "found":
       return renderAnswer(local.report, directive, opts);
     case "no-report":
-      console.error(import_picocolors35.default.red("Investigation " + id + " has no stored report."));
+      console.error(import_picocolors37.default.red("Investigation " + id + " has no stored report."));
       return 1;
     case "error":
-      console.error(import_picocolors35.default.red(local.message));
+      console.error(import_picocolors37.default.red(local.message));
       return 1;
     case "not-found":
     default:
-      console.error(import_picocolors35.default.red("No investigation found: " + id));
+      console.error(import_picocolors37.default.red("No investigation found: " + id));
       return 1;
   }
 }
 
 // ../../packages/cli/src/commands/onboard.ts
 init_cjs_shims();
-var import_picocolors36 = __toESM(require_picocolors(), 1);
+var import_picocolors38 = __toESM(require_picocolors(), 1);
 init_src();
 var ONBOARD_AI_CONTRACT = `Provide a clearly separated AI onboarding guide with:
 
@@ -123269,7 +123428,7 @@ async function runOnboard(area, opts) {
     try {
       renv = resolveEnvironment(config2, { project: opts.repo });
     } catch (err2) {
-      console.error(import_picocolors36.default.red(err2.message));
+      console.error(import_picocolors38.default.red(err2.message));
       return 1;
     }
     const repo = { name: renv.project, path: renv.path };
@@ -123277,7 +123436,7 @@ async function runOnboard(area, opts) {
     const health = await code.health();
     if (!health.ok) {
       console.error(
-        import_picocolors36.default.red("Source-intelligence host unreachable \u2014 run: horus init")
+        import_picocolors38.default.red("Source-intelligence host unreachable \u2014 run: horus init")
       );
       return 1;
     }
@@ -123310,7 +123469,7 @@ async function runOnboard(area, opts) {
           });
           console.log("\n" + renderInterpretation(result));
           if (!result.ok) {
-            console.error(import_picocolors36.default.yellow(`[ai] ${result.warning}`));
+            console.error(import_picocolors38.default.yellow(`[ai] ${result.warning}`));
           }
         }
       }
@@ -123319,14 +123478,14 @@ async function runOnboard(area, opts) {
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors36.default.red(err2.message));
+    console.error(import_picocolors38.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/memory.ts
 init_cjs_shims();
-var import_picocolors37 = __toESM(require_picocolors(), 1);
+var import_picocolors39 = __toESM(require_picocolors(), 1);
 var import_promises2 = require("readline/promises");
 init_src();
 
@@ -123692,7 +123851,7 @@ function resolveProject(config2, repo) {
   }
   if (!project) {
     console.error(
-      import_picocolors37.default.red("Could not resolve a project \u2014 pass --repo <name> or run inside a repo.")
+      import_picocolors39.default.red("Could not resolve a project \u2014 pass --repo <name> or run inside a repo.")
     );
     return null;
   }
@@ -123716,7 +123875,7 @@ async function withStore(url, fn2) {
       }
     }
     console.error(
-      import_picocolors37.default.yellow("Linked to Horus Cloud but not logged in \u2014 memory stays local only. Run `horus login`.")
+      import_picocolors39.default.yellow("Linked to Horus Cloud but not logged in \u2014 memory stays local only. Run `horus login`.")
     );
   }
   const { db, sql: sql2 } = await openDb(url);
@@ -123800,7 +123959,7 @@ function renderStoredItems(items) {
     );
     if (r.item.origin === "cloud") {
       const who = r.item.authorName ? `teammate ${r.item.authorName}` : "a teammate";
-      lines.push(`  - ${import_picocolors37.default.dim(`shared by ${who} (team)`)}`);
+      lines.push(`  - ${import_picocolors39.default.dim(`shared by ${who} (team)`)}`);
     }
   }
   return lines.join("\n");
@@ -123832,14 +123991,14 @@ async function runMemoryShow(scope, opts) {
         console.log(renderMemoryView(view));
         console.log("");
         console.log(renderStoredItems(stored));
-        for (const s5 of nextSteps) console.log(import_picocolors37.default.dim("  Suggested next: ") + formatRouteStep(s5));
+        for (const s5 of nextSteps) console.log(import_picocolors39.default.dim("  Suggested next: ") + formatRouteStep(s5));
       }
       return 0;
     } finally {
       await sql2.end();
     }
   } catch (err2) {
-    console.error(import_picocolors37.default.red(err2.message));
+    console.error(import_picocolors39.default.red(err2.message));
     return 1;
   }
 }
@@ -123847,19 +124006,19 @@ async function runMemoryAdd(claim, opts) {
   try {
     const text2 = (claim ?? "").trim();
     if (text2 === "") {
-      console.error(import_picocolors37.default.red("A non-empty claim is required."));
+      console.error(import_picocolors39.default.red("A non-empty claim is required."));
       return 1;
     }
     const kind = opts.kind ?? "code-fact";
     if (!MEMORY_KINDS.includes(kind)) {
-      console.error(import_picocolors37.default.red(`Unknown --kind "${opts.kind}" (one of: ${MEMORY_KINDS.join(", ")}).`));
+      console.error(import_picocolors39.default.red(`Unknown --kind "${opts.kind}" (one of: ${MEMORY_KINDS.join(", ")}).`));
       return 1;
     }
     let confidence = DEFAULT_ADD_CONFIDENCE;
     if (opts.confidence !== void 0) {
       const c4 = Number(opts.confidence);
       if (!Number.isFinite(c4) || c4 < 0 || c4 > 1) {
-        console.error(import_picocolors37.default.red("--confidence must be a number between 0 and 1."));
+        console.error(import_picocolors39.default.red("--confidence must be a number between 0 and 1."));
         return 1;
       }
       confidence = c4;
@@ -123892,7 +124051,7 @@ async function runMemoryAdd(claim, opts) {
         );
       } else {
         console.log(
-          import_picocolors37.default.green(`Added memory item ${created.id} (${created.kind}, scope: ${created.scope}).`)
+          import_picocolors39.default.green(`Added memory item ${created.id} (${created.kind}, scope: ${created.scope}).`)
         );
       }
       await bestEffortUpsert(buildVectorIndex(config2, project), {
@@ -123905,10 +124064,10 @@ async function runMemoryAdd(claim, opts) {
     });
   } catch (err2) {
     if (err2 instanceof MemorySecretError) {
-      console.error(import_picocolors37.default.red(err2.message));
+      console.error(import_picocolors39.default.red(err2.message));
       return 1;
     }
-    console.error(import_picocolors37.default.red(err2.message));
+    console.error(import_picocolors39.default.red(err2.message));
     return 1;
   }
 }
@@ -123928,7 +124087,7 @@ async function runMemoryConfirm(investigationId, opts) {
   try {
     const id = (investigationId ?? "").trim();
     if (id === "") {
-      console.error(import_picocolors37.default.red("An investigation id is required."));
+      console.error(import_picocolors39.default.red("An investigation id is required."));
       return 1;
     }
     const config2 = await loadConfig(opts.config);
@@ -123938,7 +124097,7 @@ async function runMemoryConfirm(investigationId, opts) {
     try {
       const investigation = await getInvestigation(db, id);
       if (investigation === null) {
-        console.error(import_picocolors37.default.red(`Investigation not found: ${id}`));
+        console.error(import_picocolors39.default.red(`Investigation not found: ${id}`));
         return 1;
       }
       const report = investigation.report ?? null;
@@ -123992,7 +124151,7 @@ async function runMemoryConfirm(investigationId, opts) {
         );
       } else {
         console.log(
-          import_picocolors37.default.green(
+          import_picocolors39.default.green(
             `Confirmed outcome stored as ${created.id} (private) and linked to investigation ${id}.`
           )
         );
@@ -124009,10 +124168,10 @@ async function runMemoryConfirm(investigationId, opts) {
     }
   } catch (err2) {
     if (err2 instanceof MemorySecretError) {
-      console.error(import_picocolors37.default.red(err2.message));
+      console.error(import_picocolors39.default.red(err2.message));
       return 1;
     }
-    console.error(import_picocolors37.default.red(err2.message));
+    console.error(import_picocolors39.default.red(err2.message));
     return 1;
   }
 }
@@ -124020,7 +124179,7 @@ async function setStatusLeaf(id, status, verb, opts) {
   try {
     const memId = (id ?? "").trim();
     if (memId === "") {
-      console.error(import_picocolors37.default.red("A memory item id is required."));
+      console.error(import_picocolors39.default.red("A memory item id is required."));
       return 1;
     }
     const config2 = await loadConfig(opts.config);
@@ -124029,12 +124188,12 @@ async function setStatusLeaf(id, status, verb, opts) {
       if (opts.json) {
         console.log(JSON.stringify({ ok: true, id: memId, status }, null, 2));
       } else {
-        console.log(import_picocolors37.default.green(`${verb} ${memId} (status: ${status}).`));
+        console.log(import_picocolors39.default.green(`${verb} ${memId} (status: ${status}).`));
       }
       return 0;
     });
   } catch (err2) {
-    console.error(import_picocolors37.default.red(err2.message));
+    console.error(import_picocolors39.default.red(err2.message));
     return 1;
   }
 }
@@ -124079,13 +124238,13 @@ async function runMemoryList(opts) {
       return 0;
     });
   } catch (err2) {
-    console.error(import_picocolors37.default.red(err2.message));
+    console.error(import_picocolors39.default.red(err2.message));
     return 1;
   }
 }
 function parseRel(rel) {
   if (rel === void 0 || !MEMORY_RELS2.includes(rel)) {
-    console.error(import_picocolors37.default.red(`--rel must be one of: ${MEMORY_RELS2.join(", ")}.`));
+    console.error(import_picocolors39.default.red(`--rel must be one of: ${MEMORY_RELS2.join(", ")}.`));
     return null;
   }
   return rel;
@@ -124095,7 +124254,7 @@ async function runMemoryLink(a2, b5, opts) {
     const fromId = (a2 ?? "").trim();
     const toId = (b5 ?? "").trim();
     if (fromId === "" || toId === "") {
-      console.error(import_picocolors37.default.red("Two memory item ids are required: `memory link <a> <b> --rel <rel>`."));
+      console.error(import_picocolors39.default.red("Two memory item ids are required: `memory link <a> <b> --rel <rel>`."));
       return 1;
     }
     const rel = parseRel(opts.rel);
@@ -124118,13 +124277,13 @@ async function runMemoryLink(a2, b5, opts) {
         );
       } else {
         console.log(
-          import_picocolors37.default.green(`Linked ${link.fromMemoryId} ${import_picocolors37.default.bold(link.rel)} ${link.toRef} (${link.id}).`)
+          import_picocolors39.default.green(`Linked ${link.fromMemoryId} ${import_picocolors39.default.bold(link.rel)} ${link.toRef} (${link.id}).`)
         );
       }
       return 0;
     });
   } catch (err2) {
-    console.error(import_picocolors37.default.red(err2.message));
+    console.error(import_picocolors39.default.red(err2.message));
     return 1;
   }
 }
@@ -124133,7 +124292,7 @@ async function runMemoryUnlink(a2, b5, opts) {
     const fromId = (a2 ?? "").trim();
     const toId = (b5 ?? "").trim();
     if (fromId === "" || toId === "") {
-      console.error(import_picocolors37.default.red("Two memory item ids are required: `memory unlink <a> <b> --rel <rel>`."));
+      console.error(import_picocolors39.default.red("Two memory item ids are required: `memory unlink <a> <b> --rel <rel>`."));
       return 1;
     }
     const rel = parseRel(opts.rel);
@@ -124149,19 +124308,19 @@ async function runMemoryUnlink(a2, b5, opts) {
       if (opts.json) {
         console.log(JSON.stringify({ ok: true, removed, rel, from: fromId, to: toId }, null, 2));
       } else if (removed === 0) {
-        console.log(import_picocolors37.default.dim(`No ${rel} link from ${fromId} to ${toId} \u2014 nothing removed.`));
+        console.log(import_picocolors39.default.dim(`No ${rel} link from ${fromId} to ${toId} \u2014 nothing removed.`));
       } else {
-        console.log(import_picocolors37.default.green(`Unlinked ${fromId} ${import_picocolors37.default.bold(rel)} ${toId} (${removed} edge removed).`));
+        console.log(import_picocolors39.default.green(`Unlinked ${fromId} ${import_picocolors39.default.bold(rel)} ${toId} (${removed} edge removed).`));
       }
       return 0;
     });
   } catch (err2) {
-    console.error(import_picocolors37.default.red(err2.message));
+    console.error(import_picocolors39.default.red(err2.message));
     return 1;
   }
 }
 function renderProposal(p5) {
-  return `  ${import_picocolors37.default.dim(`[${p5.detection}]`)} ${p5.fromMemoryId} ${import_picocolors37.default.bold(p5.rel)} ${p5.toMemoryId} ${import_picocolors37.default.dim(`\u2014 ${p5.reason}`)}`;
+  return `  ${import_picocolors39.default.dim(`[${p5.detection}]`)} ${p5.fromMemoryId} ${import_picocolors39.default.bold(p5.rel)} ${p5.toMemoryId} ${import_picocolors39.default.dim(`\u2014 ${p5.reason}`)}`;
 }
 async function runMemoryDetect(opts) {
   try {
@@ -124188,11 +124347,11 @@ async function runMemoryDetect(opts) {
         if (opts.json) {
           console.log(JSON.stringify({ ok: true, dryRun: true, proposed: proposals.length, applied: 0, edges: proposals }, null, 2));
         } else if (proposals.length === 0) {
-          console.log(import_picocolors37.default.dim("No memory\u2192memory edges proposed."));
+          console.log(import_picocolors39.default.dim("No memory\u2192memory edges proposed."));
         } else {
-          console.log(import_picocolors37.default.bold(`Proposed ${proposals.length} edge(s) ${import_picocolors37.default.dim("(dry run \u2014 nothing written)")}:`));
+          console.log(import_picocolors39.default.bold(`Proposed ${proposals.length} edge(s) ${import_picocolors39.default.dim("(dry run \u2014 nothing written)")}:`));
           for (const p5 of proposals) console.log(renderProposal(p5));
-          console.log(import_picocolors37.default.dim("Re-run without --dry-run to persist these edges."));
+          console.log(import_picocolors39.default.dim("Re-run without --dry-run to persist these edges."));
         }
         return 0;
       }
@@ -124209,19 +124368,19 @@ async function runMemoryDetect(opts) {
           }
         );
         applied += 1;
-        if (!opts.json) console.log(`${import_picocolors37.default.green("\u2713")}${renderProposal(p5)}`);
+        if (!opts.json) console.log(`${import_picocolors39.default.green("\u2713")}${renderProposal(p5)}`);
       }
       if (opts.json) {
         console.log(JSON.stringify({ ok: true, dryRun: false, proposed: proposals.length, applied, edges: proposals }, null, 2));
       } else if (applied === 0) {
-        console.log(import_picocolors37.default.dim("No memory\u2192memory edges proposed."));
+        console.log(import_picocolors39.default.dim("No memory\u2192memory edges proposed."));
       } else {
-        console.log(import_picocolors37.default.green(`Applied ${applied} detected edge(s).`));
+        console.log(import_picocolors39.default.green(`Applied ${applied} detected edge(s).`));
       }
       return 0;
     });
   } catch (err2) {
-    console.error(import_picocolors37.default.red(err2.message));
+    console.error(import_picocolors39.default.red(err2.message));
     return 1;
   }
 }
@@ -124252,7 +124411,7 @@ async function runMemorySync(opts) {
   const json2 = opts.json === true;
   const fail = (msg) => {
     if (json2) console.log(JSON.stringify({ ok: false, error: msg }, null, 2));
-    else console.error(import_picocolors37.default.red(msg));
+    else console.error(import_picocolors39.default.red(msg));
     return 1;
   };
   const root = repoRootOrCwd(opts.cwd);
@@ -124304,19 +124463,19 @@ async function runMemorySync(opts) {
           2
         )
       );
-    else console.log(import_picocolors37.default.dim("No local memory items to sync."));
+    else console.log(import_picocolors39.default.dim("No local memory items to sync."));
     return 0;
   }
   if (!json2) {
     console.log(
-      import_picocolors37.default.bold(
-        `Will sync ${inputs.length} memory item(s), ${linkInputs.length} link(s), ${auditInputs.length} audit row(s) to ${target} ${import_picocolors37.default.dim("(cloud)")}:`
+      import_picocolors39.default.bold(
+        `Will sync ${inputs.length} memory item(s), ${linkInputs.length} link(s), ${auditInputs.length} audit row(s) to ${target} ${import_picocolors39.default.dim("(cloud)")}:`
       )
     );
     for (const it2 of items.slice(0, 20)) {
-      console.log(`  ${import_picocolors37.default.dim(it2.id.slice(0, 8))}  ${import_picocolors37.default.dim(`[${it2.kind}]`)} ${it2.claim.slice(0, 70)}`);
+      console.log(`  ${import_picocolors39.default.dim(it2.id.slice(0, 8))}  ${import_picocolors39.default.dim(`[${it2.kind}]`)} ${it2.claim.slice(0, 70)}`);
     }
-    if (items.length > 20) console.log(import_picocolors37.default.dim(`  \u2026and ${items.length - 20} more`));
+    if (items.length > 20) console.log(import_picocolors39.default.dim(`  \u2026and ${items.length - 20} more`));
   }
   if (opts.dryRun) {
     if (json2)
@@ -124327,13 +124486,13 @@ async function runMemorySync(opts) {
           2
         )
       );
-    else console.log(import_picocolors37.default.dim("Dry run \u2014 nothing uploaded. Re-run without --dry-run to sync."));
+    else console.log(import_picocolors39.default.dim("Dry run \u2014 nothing uploaded. Re-run without --dry-run to sync."));
     return 0;
   }
   if (!opts.yes && !json2) {
     if (!process.stdin.isTTY) {
       console.error(
-        import_picocolors37.default.yellow(`Re-run with ${import_picocolors37.default.bold("--yes")} to sync, or ${import_picocolors37.default.bold("--dry-run")} to preview only.`)
+        import_picocolors39.default.yellow(`Re-run with ${import_picocolors39.default.bold("--yes")} to sync, or ${import_picocolors39.default.bold("--dry-run")} to preview only.`)
       );
       return 1;
     }
@@ -124341,7 +124500,7 @@ async function runMemorySync(opts) {
     try {
       const answer = (await rl.question(`Sync ${inputs.length} memory item(s) to ${target}? (y/N) `)).trim().toLowerCase();
       if (answer !== "y" && answer !== "yes") {
-        console.log(import_picocolors37.default.dim("Aborted. Nothing synced."));
+        console.log(import_picocolors39.default.dim("Aborted. Nothing synced."));
         return 0;
       }
     } finally {
@@ -124357,11 +124516,11 @@ async function runMemorySync(opts) {
     try {
       const res = await session.client.syncMemoryItems(cfg.project.id, { items: batch });
       synced += res.items?.length ?? batch.length;
-      if (!json2) console.log(`${import_picocolors37.default.green("\u2713")} synced ${batch.length} item(s)`);
+      if (!json2) console.log(`${import_picocolors39.default.green("\u2713")} synced ${batch.length} item(s)`);
     } catch (err2) {
       failed += batch.length;
       if (json2) reportCloudError(err2);
-      else console.error(`${import_picocolors37.default.red("\u2717")} ${err2.message}`);
+      else console.error(`${import_picocolors39.default.red("\u2717")} ${err2.message}`);
     }
   }
   for (let i3 = 0; i3 < linkInputs.length; i3 += MEMORY_SYNC_EDGE_BATCH_MAX) {
@@ -124369,11 +124528,11 @@ async function runMemorySync(opts) {
     try {
       const res = await session.client.syncMemoryItems(cfg.project.id, { links: batch });
       syncedLinks += res.links?.total ?? batch.length;
-      if (!json2) console.log(`${import_picocolors37.default.green("\u2713")} synced ${batch.length} link(s)`);
+      if (!json2) console.log(`${import_picocolors39.default.green("\u2713")} synced ${batch.length} link(s)`);
     } catch (err2) {
       failed += batch.length;
       if (json2) reportCloudError(err2);
-      else console.error(`${import_picocolors37.default.red("\u2717")} ${err2.message}`);
+      else console.error(`${import_picocolors39.default.red("\u2717")} ${err2.message}`);
     }
   }
   for (let i3 = 0; i3 < auditInputs.length; i3 += MEMORY_SYNC_EDGE_BATCH_MAX) {
@@ -124381,11 +124540,11 @@ async function runMemorySync(opts) {
     try {
       const res = await session.client.syncMemoryItems(cfg.project.id, { audit: batch });
       syncedAudit += res.audit?.total ?? batch.length;
-      if (!json2) console.log(`${import_picocolors37.default.green("\u2713")} synced ${batch.length} audit row(s)`);
+      if (!json2) console.log(`${import_picocolors39.default.green("\u2713")} synced ${batch.length} audit row(s)`);
     } catch (err2) {
       failed += batch.length;
       if (json2) reportCloudError(err2);
-      else console.error(`${import_picocolors37.default.red("\u2717")} ${err2.message}`);
+      else console.error(`${import_picocolors39.default.red("\u2717")} ${err2.message}`);
     }
   }
   if (json2) {
@@ -124407,10 +124566,10 @@ async function runMemorySync(opts) {
   } else {
     console.log("");
     console.log(
-      `${import_picocolors37.default.bold("Memory sync complete:")} ${import_picocolors37.default.green(`${synced} item(s)`)}, ${import_picocolors37.default.green(`${syncedLinks} link(s)`)}, ${import_picocolors37.default.green(`${syncedAudit} audit row(s)`)}, ` + (failed ? import_picocolors37.default.red(`${failed} failed`) : "0 failed") + "."
+      `${import_picocolors39.default.bold("Memory sync complete:")} ${import_picocolors39.default.green(`${synced} item(s)`)}, ${import_picocolors39.default.green(`${syncedLinks} link(s)`)}, ${import_picocolors39.default.green(`${syncedAudit} audit row(s)`)}, ` + (failed ? import_picocolors39.default.red(`${failed} failed`) : "0 failed") + "."
     );
     console.log(
-      import_picocolors37.default.dim("Local data was not modified. Re-running is safe \u2014 items/links dedupe by client id, audit is append-only. Vectors never sync.")
+      import_picocolors39.default.dim("Local data was not modified. Re-running is safe \u2014 items/links dedupe by client id, audit is append-only. Vectors never sync.")
     );
   }
   return failed > 0 ? 1 : 0;
@@ -124432,7 +124591,7 @@ async function runMemoryPromote(id, opts) {
   const json2 = opts.json === true;
   const fail = (msg) => {
     if (json2) console.log(JSON.stringify({ ok: false, error: msg }, null, 2));
-    else console.error(import_picocolors37.default.red(msg));
+    else console.error(import_picocolors39.default.red(msg));
     return 1;
   };
   const memId = (id ?? "").trim();
@@ -124462,7 +124621,7 @@ async function runMemoryPromote(id, opts) {
     }
     if (row.origin === "cloud") {
       if (json2) console.log(JSON.stringify({ ok: true, id: memId, alreadyTeam: true }, null, 2));
-      else console.log(import_picocolors37.default.dim(`${memId} is already a team item \u2014 nothing to promote.`));
+      else console.log(import_picocolors39.default.dim(`${memId} is already a team item \u2014 nothing to promote.`));
       return 0;
     }
     const res = await session.client.promoteTeamMemory(cfg.project.id, {
@@ -124495,7 +124654,7 @@ async function runMemoryPromote(id, opts) {
       );
     } else {
       console.log(
-        import_picocolors37.default.green(`Promoted ${memId} to team memory (${cfg.project.slug}) \u2014 now visible to teammates.`)
+        import_picocolors39.default.green(`Promoted ${memId} to team memory (${cfg.project.slug}) \u2014 now visible to teammates.`)
       );
     }
     return 0;
@@ -124519,7 +124678,7 @@ async function runMemoryPull(opts) {
   const json2 = opts.json === true;
   const fail = (msg) => {
     if (json2) console.log(JSON.stringify({ ok: false, error: msg }, null, 2));
-    else console.error(import_picocolors37.default.red(msg));
+    else console.error(import_picocolors39.default.red(msg));
     return 1;
   };
   const root = repoRootOrCwd(opts.cwd);
@@ -124564,7 +124723,7 @@ async function runMemoryPull(opts) {
             JSON.stringify({ ok: true, offline: true, stale: true, cached: cached2.length, note }, null, 2)
           );
         } else {
-          console.log(import_picocolors37.default.yellow(`Offline \u2014 serving ${cached2.length} cached team item(s) (${note}).`));
+          console.log(import_picocolors39.default.yellow(`Offline \u2014 serving ${cached2.length} cached team item(s) (${note}).`));
         }
         return 0;
       }
@@ -124611,11 +124770,11 @@ async function runMemoryPull(opts) {
       );
     } else {
       console.log(
-        import_picocolors37.default.green(
+        import_picocolors39.default.green(
           `Pulled ${upserted} team memory item(s)` + (removed ? `, dropped ${removed} stale` : "") + "."
         )
       );
-      console.log(import_picocolors37.default.dim("Team items are read-only locally \u2014 re-promote to change one. Vectors stay local."));
+      console.log(import_picocolors39.default.dim("Team items are read-only locally \u2014 re-promote to change one. Vectors stay local."));
     }
     return 0;
   } catch (err2) {
@@ -124643,7 +124802,7 @@ async function runMemoryAccuracy(opts) {
     let source;
     if (opts.source !== void 0) {
       if (!isOutcomeSource(opts.source)) {
-        console.error(import_picocolors37.default.red(`Unknown --source "${opts.source}" (one of: feedback, confirm).`));
+        console.error(import_picocolors39.default.red(`Unknown --source "${opts.source}" (one of: feedback, confirm).`));
         return 1;
       }
       source = opts.source;
@@ -124656,7 +124815,7 @@ async function runMemoryAccuracy(opts) {
       const parsed = new Date(opts.since);
       if (Number.isNaN(parsed.getTime())) {
         console.error(
-          import_picocolors37.default.red("--since must be a parseable date (e.g. 2026-06-01 or an ISO timestamp).")
+          import_picocolors39.default.red("--since must be a parseable date (e.g. 2026-06-01 or an ISO timestamp).")
         );
         return 1;
       }
@@ -124664,7 +124823,7 @@ async function runMemoryAccuracy(opts) {
       window2 = `since ${parsed.toISOString().slice(0, 10)}`;
     } else if (opts.days !== void 0) {
       if (!Number.isFinite(opts.days) || opts.days <= 0) {
-        console.error(import_picocolors37.default.red("--days must be a positive number."));
+        console.error(import_picocolors39.default.red("--days must be a positive number."));
         return 1;
       }
       since = new Date(Date.now() - opts.days * MS_PER_DAY2);
@@ -124702,22 +124861,22 @@ async function runMemoryAccuracy(opts) {
         );
       } else {
         const pct2 = (n4) => `${(n4 * 100).toFixed(0)}%`;
-        console.log(import_picocolors37.default.bold(`Investigation accuracy \u2014 ${project}`) + import_picocolors37.default.dim(`  \xB7  window: ${window2}`));
+        console.log(import_picocolors39.default.bold(`Investigation accuracy \u2014 ${project}`) + import_picocolors39.default.dim(`  \xB7  window: ${window2}`));
         if (summary.evaluated === 0) {
           console.log(
-            import_picocolors37.default.dim(
+            import_picocolors39.default.dim(
               `No outcome labels in this window (${window2}). Confirm an investigation (\`horus memory confirm <id>\`) or leave feedback (\`horus feedback <id> --resolved yes|partly|no\`) to add to the eval set` + (opts.all ? "." : ", or pass --all to include older labels.")
             )
           );
         } else {
           console.log(
-            `  Pointed at the cause: ${import_picocolors37.default.green(pct2(summary.accuracy))} ` + import_picocolors37.default.dim(`(weighted ${pct2(summary.weightedScore)}) over ${summary.evaluated} investigation(s)`)
+            `  Pointed at the cause: ${import_picocolors39.default.green(pct2(summary.accuracy))} ` + import_picocolors39.default.dim(`(weighted ${pct2(summary.weightedScore)}) over ${summary.evaluated} investigation(s)`)
           );
           console.log(
-            `  Verdicts: ${import_picocolors37.default.green(`${summary.counts.yes} yes`)}, ${import_picocolors37.default.yellow(`${summary.counts.partly} partly`)}, ${import_picocolors37.default.red(`${summary.counts.no} no`)}`
+            `  Verdicts: ${import_picocolors39.default.green(`${summary.counts.yes} yes`)}, ${import_picocolors39.default.yellow(`${summary.counts.partly} partly`)}, ${import_picocolors39.default.red(`${summary.counts.no} no`)}`
           );
           console.log(
-            import_picocolors37.default.dim(
+            import_picocolors39.default.dim(
               `  Source: ${summary.bySource.confirm} confirm, ${summary.bySource.feedback} feedback \xB7 ${summary.attestations} total attestation(s)`
             )
           );
@@ -124728,14 +124887,14 @@ async function runMemoryAccuracy(opts) {
       await sql2.end();
     }
   } catch (err2) {
-    console.error(import_picocolors37.default.red(err2.message));
+    console.error(import_picocolors39.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/simulate.ts
 init_cjs_shims();
-var import_picocolors38 = __toESM(require_picocolors(), 1);
+var import_picocolors40 = __toESM(require_picocolors(), 1);
 init_src();
 async function runSimulate(scenarioId, opts) {
   try {
@@ -124746,7 +124905,7 @@ async function runSimulate(scenarioId, opts) {
     const scenario = getScenario(scenarioId);
     if (scenario === null) {
       console.error(
-        import_picocolors38.default.red(
+        import_picocolors40.default.red(
           `Unknown scenario: "${scenarioId}". Run horus simulate to list available scenarios.`
         )
       );
@@ -124757,14 +124916,14 @@ async function runSimulate(scenarioId, opts) {
     try {
       renv = resolveEnvironment(config2, { project: opts.repo });
     } catch (err2) {
-      console.error(import_picocolors38.default.red(err2.message));
+      console.error(import_picocolors40.default.red(err2.message));
       return 1;
     }
     const code = codeForRepo(config2, renv.project);
     const health = await code.health();
     if (!health.ok) {
       console.error(
-        import_picocolors38.default.red("Source-intelligence host unreachable \u2014 run: horus init")
+        import_picocolors40.default.red("Source-intelligence host unreachable \u2014 run: horus init")
       );
       return 1;
     }
@@ -124781,14 +124940,14 @@ async function runSimulate(scenarioId, opts) {
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors38.default.red(err2.message));
+    console.error(import_picocolors40.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/logs.ts
 init_cjs_shims();
-var import_picocolors39 = __toESM(require_picocolors(), 1);
+var import_picocolors41 = __toESM(require_picocolors(), 1);
 init_src();
 var LOGS_AI_CONTRACT = `Provide a clearly separated AI evidence narration with:
 
@@ -124835,9 +124994,9 @@ function parseWhere(raw) {
 }
 var whereLabel = (where) => where.map((w4) => `${w4.field}=${w4.value}`).join(", ");
 function levelColor(level, text2) {
-  if (level === "error" || level === "fatal") return import_picocolors39.default.red(text2);
-  if (level === "warn") return import_picocolors39.default.yellow(text2);
-  return import_picocolors39.default.dim(text2);
+  if (level === "error" || level === "fatal") return import_picocolors41.default.red(text2);
+  if (level === "warn") return import_picocolors41.default.yellow(text2);
+  return import_picocolors41.default.dim(text2);
 }
 function matchServiceLabel(requested, candidates) {
   if (candidates.includes(requested)) return { kind: "unique", matched: requested };
@@ -124853,7 +125012,7 @@ async function runLogs(service, opts) {
     try {
       where = parseWhere(opts.where);
     } catch (err2) {
-      console.error(import_picocolors39.default.red(err2.message));
+      console.error(import_picocolors41.default.red(err2.message));
       return 1;
     }
     const hasWhere = where.length > 0;
@@ -124863,13 +125022,13 @@ async function runLogs(service, opts) {
     try {
       renv = resolveEnvironment(config2, { env: opts.env });
     } catch (err2) {
-      console.error(import_picocolors39.default.red(err2.message));
+      console.error(import_picocolors41.default.red(err2.message));
       return 1;
     }
     const logs = logsForEnv(renv);
     if (logs === null) {
       console.error(
-        import_picocolors39.default.red(
+        import_picocolors41.default.red(
           `No Elasticsearch connector configured for ${renv.project}/${renv.env} (set ES_URL / ES_USERNAME / ES_PASSWORD)`
         )
       );
@@ -124877,7 +125036,7 @@ async function runLogs(service, opts) {
     }
     const health = await logs.health();
     if (!health.ok) {
-      console.error(import_picocolors39.default.red(`Elasticsearch unreachable: ${health.detail}`));
+      console.error(import_picocolors41.default.red(`Elasticsearch unreachable: ${health.detail}`));
       return 1;
     }
     const resolvedService = service ?? renv.connectors.elasticsearch?.serviceName;
@@ -124890,21 +125049,21 @@ async function runLogs(service, opts) {
         requiresEventCode: aggregatesEventCode
       });
       for (const w4 of compat.issues.filter((i3) => i3.severity === "warning")) {
-        console.warn(import_picocolors39.default.yellow(`[warn] ${w4.field}: ${w4.message}`));
+        console.warn(import_picocolors41.default.yellow(`[warn] ${w4.field}: ${w4.message}`));
       }
       const errors2 = compat.issues.filter((i3) => i3.severity === "error");
       if (errors2.length > 0) {
-        console.error(import_picocolors39.default.red("Elasticsearch field mapping is incompatible with the index:"));
+        console.error(import_picocolors41.default.red("Elasticsearch field mapping is incompatible with the index:"));
         for (const e of errors2) {
-          console.error(import_picocolors39.default.red(`  ${e.field}: ${e.message}`));
+          console.error(import_picocolors41.default.red(`  ${e.field}: ${e.message}`));
         }
         console.error(
-          import_picocolors39.default.dim("Fix fields.* overrides in your connector config or choose the correct preset.")
+          import_picocolors41.default.dim("Fix fields.* overrides in your connector config or choose the correct preset.")
         );
         return 1;
       }
     } catch {
-      console.warn(import_picocolors39.default.dim("[warn] Elasticsearch compatibility check unavailable \u2014 proceeding."));
+      console.warn(import_picocolors41.default.dim("[warn] Elasticsearch compatibility check unavailable \u2014 proceeding."));
     }
     const from = sinceToIso(opts.since) ?? new Date(Date.now() - 7 * 864e5).toISOString();
     const fromDisplay = from.slice(0, 16).replace("T", " ");
@@ -124960,12 +125119,12 @@ async function runLogs(service, opts) {
         return 0;
       }
       console.error(
-        import_picocolors39.default.dim(
+        import_picocolors41.default.dim(
           `logs: ${renv.project}/${renv.env}` + (resolvedService ? ` \xB7 service ${resolvedService}` : "") + ` \xB7 from ${fromDisplay} UTC \xB7 level ${rawLevel ?? "all"}` + (hasWhere ? ` \xB7 where ${whereLabel(where)}` : "") + (opts.grep ? ` \xB7 grep "${opts.grep}"` : "") + (rawLevel === "error" && !hasWhere ? "  (error+ only \u2014 use --all-levels for info/debug)" : "")
         )
       );
       if (records.length === 0) {
-        console.log(import_picocolors39.default.dim("No logs matched."));
+        console.log(import_picocolors41.default.dim("No logs matched."));
         return 0;
       }
       for (const r of records) {
@@ -124975,12 +125134,12 @@ async function runLogs(service, opts) {
         const line2 = `${ts}  ${lvl}  ${comp}  ${r.message.slice(0, 120)}`;
         console.log(levelColor(r.level, line2));
         for (const { key, value } of extractContextFields(r)) {
-          console.log(import_picocolors39.default.dim(`    ${key}: ${value.slice(0, 200)}`));
+          console.log(import_picocolors41.default.dim(`    ${key}: ${value.slice(0, 200)}`));
         }
       }
       if (truncated) {
         console.error(
-          import_picocolors39.default.yellow(
+          import_picocolors41.default.yellow(
             `[warn] showing the first ${limit} record(s) \u2014 results may be truncated. Narrow with --where/--since/--level or raise --limit (max 1000).`
           )
         );
@@ -125023,22 +125182,22 @@ async function runLogs(service, opts) {
         return 0;
       }
       console.log(
-        import_picocolors39.default.bold(`Top ${field}`) + import_picocolors39.default.dim(
+        import_picocolors41.default.bold(`Top ${field}`) + import_picocolors41.default.dim(
           ` \u2014 ${renv.project}/${renv.env}` + (resolvedService ? ` \xB7 service ${resolvedService}` : "") + (opts.grep ? ` \xB7 grep "${opts.grep}"` : "") + (hasWhere ? ` \xB7 where ${whereLabel(where)}` : "")
         )
       );
-      console.log(import_picocolors39.default.dim(`  index: ${indexPattern} \xB7 from: ${fromDisplay} UTC \xB7 severity: error+`));
+      console.log(import_picocolors41.default.dim(`  index: ${indexPattern} \xB7 from: ${fromDisplay} UTC \xB7 severity: error+`));
       console.log("");
       if (buckets.length === 0) {
-        console.log(import_picocolors39.default.dim(`  No error logs with field "${field}" in the window.`));
-        console.log(import_picocolors39.default.dim(`  Tip: ensure "${field}" is an aggregatable (keyword) field.`));
+        console.log(import_picocolors41.default.dim(`  No error logs with field "${field}" in the window.`));
+        console.log(import_picocolors41.default.dim(`  Tip: ensure "${field}" is an aggregatable (keyword) field.`));
         return 0;
       }
       for (const b5 of buckets) {
-        console.log(`  ${import_picocolors39.default.red(String(b5.count).padStart(6))}  ${b5.key}`);
+        console.log(`  ${import_picocolors41.default.red(String(b5.count).padStart(6))}  ${b5.key}`);
       }
       console.log("");
-      console.log(import_picocolors39.default.dim(`  ${buckets.length} distinct ${field} value(s) shown (top by error count).`));
+      console.log(import_picocolors41.default.dim(`  ${buckets.length} distinct ${field} value(s) shown (top by error count).`));
       return 0;
     }
     let analysis = await logs.analyzeErrors({
@@ -125108,46 +125267,50 @@ async function runLogs(service, opts) {
       return 0;
     }
     console.log(
-      import_picocolors39.default.bold(`Error analysis`) + import_picocolors39.default.dim(
+      import_picocolors41.default.bold(`Error analysis`) + import_picocolors41.default.dim(
         ` \u2014 ${renv.project}/${renv.env}` + (scopeService ? ` \xB7 service ${scopeService}` : "") + (opts.grep ? ` \xB7 grep "${opts.grep}"` : "") + (hasWhere ? ` \xB7 where ${whereLabel(where)}` : "")
       )
     );
-    console.log(import_picocolors39.default.dim(`  index: ${indexPattern} \xB7 from: ${fromDisplay} UTC \xB7 severity: error+`));
+    console.log(import_picocolors41.default.dim(`  index: ${indexPattern} \xB7 from: ${fromDisplay} UTC \xB7 severity: error+`));
     if (broadeningNote) {
-      console.log(import_picocolors39.default.yellow(`  ${broadeningNote}`));
+      console.log(import_picocolors41.default.yellow(`  ${broadeningNote}`));
     }
     console.log(
-      `  ${analysis.totalErrors} error(s) \xB7 ${analysis.signatures.length} signature(s) \xB7 ${import_picocolors39.default.yellow(String(analysis.newSignatures.length))} new`
+      `  ${analysis.totalErrors} error(s) \xB7 ${analysis.signatures.length} signature(s) \xB7 ${import_picocolors41.default.yellow(String(analysis.newSignatures.length))} new`
     );
     console.log("");
     if (analysis.signatures.length === 0) {
-      console.log(import_picocolors39.default.dim("  No error-level logs in the window."));
       console.log(
-        import_picocolors39.default.dim(
+        import_picocolors41.default.dim(
+          analysis.totalErrors > 0 ? `  ${analysis.totalErrors} error-level log(s) matched, but none could be grouped into a signature (missing the code field). Try --raw to see the lines.` : "  No error-level logs in the window."
+        )
+      );
+      console.log(
+        import_picocolors41.default.dim(
           `  Searched: ${scopeService ? `service "${scopeService}"` : "all services"} \xB7 index: ${indexPattern} \xB7 from: ${fromDisplay} UTC`
         )
       );
-      console.log(import_picocolors39.default.dim(`  Tip: use --since to widen the window (e.g. --since 30d).`));
+      console.log(import_picocolors41.default.dim(`  Tip: use --since to widen the window (e.g. --since 30d).`));
       return 0;
     }
     for (const s5 of analysis.signatures) {
       const tags = [];
-      if (s5.isNew) tags.push(import_picocolors39.default.red("NEW"));
+      if (s5.isNew) tags.push(import_picocolors41.default.red("NEW"));
       else if (s5.ratio !== void 0 && Number.isFinite(s5.ratio) && s5.ratio >= 1.5) {
-        tags.push(import_picocolors39.default.yellow(`spike x${s5.ratio.toFixed(1)}`));
+        tags.push(import_picocolors41.default.yellow(`spike x${s5.ratio.toFixed(1)}`));
       }
-      const svc = s5.services.length > 0 ? import_picocolors39.default.dim(` \xB7 ${s5.services.slice(0, 3).join(", ")}`) : "";
+      const svc = s5.services.length > 0 ? import_picocolors41.default.dim(` \xB7 ${s5.services.slice(0, 3).join(", ")}`) : "";
       const tagStr = tags.length > 0 ? `  [${tags.join(", ")}]` : "";
       console.log(
-        `  ${import_picocolors39.default.red(String(s5.count).padStart(6))}  ${import_picocolors39.default.bold(s5.key.padEnd(14).slice(0, 14))}  ` + import_picocolors39.default.dim(`first ${shortTs(s5.firstSeen)} \xB7 last ${shortTs(s5.lastSeen)}`) + svc + tagStr
+        `  ${import_picocolors41.default.red(String(s5.count).padStart(6))}  ${import_picocolors41.default.bold(s5.key.padEnd(14).slice(0, 14))}  ` + import_picocolors41.default.dim(`first ${shortTs(s5.firstSeen)} \xB7 last ${shortTs(s5.lastSeen)}`) + svc + tagStr
       );
     }
     if (analysis.affectedServices.length > 0) {
       console.log("");
-      console.log(`  ${import_picocolors39.default.bold("Affected services:")} ${analysis.affectedServices.join(", ")}`);
+      console.log(`  ${import_picocolors41.default.bold("Affected services:")} ${analysis.affectedServices.join(", ")}`);
     }
     console.log("");
-    console.log(import_picocolors39.default.dim("  (use --raw to see individual log lines)"));
+    console.log(import_picocolors41.default.dim("  (use --raw to see individual log lines)"));
     if (opts.ai) {
       const result = await renderAiInterpretation({
         command: "logs",
@@ -125166,19 +125329,19 @@ async function runLogs(service, opts) {
       });
       console.log("\n" + renderInterpretation(result));
       if (!result.ok) {
-        console.error(import_picocolors39.default.yellow(`[ai] ${result.warning}`));
+        console.error(import_picocolors41.default.yellow(`[ai] ${result.warning}`));
       }
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors39.default.red(err2.message));
+    console.error(import_picocolors41.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/metrics.ts
 init_cjs_shims();
-var import_picocolors40 = __toESM(require_picocolors(), 1);
+var import_picocolors42 = __toESM(require_picocolors(), 1);
 init_src();
 var METRICS_AI_CONTRACT = `Provide a clearly separated AI evidence narration with:
 
@@ -125224,10 +125387,10 @@ function anomalyColor(anomaly) {
     case "latency-spike":
     case "error-rate-change":
     case "throughput-drop":
-      return import_picocolors40.default.red;
+      return import_picocolors42.default.red;
     case "queue-growth":
     case "change":
-      return import_picocolors40.default.yellow;
+      return import_picocolors42.default.yellow;
     default:
       return (s5) => s5;
   }
@@ -125256,7 +125419,7 @@ async function runMetrics(hint, opts) {
     const metrics = metricsProviderFromConfig(config2);
     if (metrics === null) {
       console.error(
-        import_picocolors40.default.red(
+        import_picocolors42.default.red(
           "Grafana not configured \u2014 set GRAFANA_URL + GRAFANA_USER + GRAFANA_PASSWORD"
         )
       );
@@ -125264,7 +125427,7 @@ async function runMetrics(hint, opts) {
     }
     const health = await metrics.health();
     if (!health.ok) {
-      console.error(import_picocolors40.default.red(`Grafana unreachable: ${health.detail}`));
+      console.error(import_picocolors42.default.red(`Grafana unreachable: ${health.detail}`));
       return 1;
     }
     const stepNum = opts.step !== void 0 ? Number(opts.step) : void 0;
@@ -125293,14 +125456,14 @@ async function runMetrics(hint, opts) {
         return 0;
       }
       if (series.length === 0) {
-        console.log(import_picocolors40.default.dim("No series returned."));
+        console.log(import_picocolors42.default.dim("No series returned."));
         return 0;
       }
       for (const s5 of series) {
         const summary = summarize(s5);
         const label = labelStr(s5.labels);
         console.log(
-          `  ${import_picocolors40.default.cyan(label || "(no labels)")}  last=${import_picocolors40.default.bold(fmtNum(summary.last))}  avg=${fmtNum(summary.avg)}`
+          `  ${import_picocolors42.default.cyan(label || "(no labels)")}  last=${import_picocolors42.default.bold(fmtNum(summary.last))}  avg=${fmtNum(summary.avg)}`
         );
       }
       return 0;
@@ -125315,36 +125478,36 @@ async function runMetrics(hint, opts) {
     if (findings2.length === 0) {
       if (hint !== void 0) {
         const tokens = extractHintTokens(hint);
-        console.log(import_picocolors40.default.dim(`No panels matched hint "${hint}".`));
+        console.log(import_picocolors42.default.dim(`No panels matched hint "${hint}".`));
         if (tokens.length > 0) {
-          console.log(import_picocolors40.default.dim(`  Searched for panels containing: ${tokens.join(", ")}`));
+          console.log(import_picocolors42.default.dim(`  Searched for panels containing: ${tokens.join(", ")}`));
         }
         console.log(
-          import_picocolors40.default.dim(
-            `  Tip: run ${import_picocolors40.default.bold("horus metrics")} (no hint) to see all available panels, then use a panel title or keyword directly.`
+          import_picocolors42.default.dim(
+            `  Tip: run ${import_picocolors42.default.bold("horus metrics")} (no hint) to see all available panels, then use a panel title or keyword directly.`
           )
         );
       } else {
-        console.log(import_picocolors40.default.dim("No panels found in configured Grafana dashboards."));
+        console.log(import_picocolors42.default.dim("No panels found in configured Grafana dashboards."));
       }
       return 0;
     }
     const hintSuffix = hint !== void 0 ? ` (hint: "${hint}")` : "";
     const matchSources = hint !== void 0 ? [...new Set(findings2.map((f5) => f5.matchSource).filter(Boolean))] : [];
-    const matchSuffix = matchSources.length > 0 ? import_picocolors40.default.dim(` [matched via ${matchSources.join(", ")}]`) : "";
+    const matchSuffix = matchSources.length > 0 ? import_picocolors42.default.dim(` [matched via ${matchSources.join(", ")}]`) : "";
     console.log(
-      import_picocolors40.default.bold(
+      import_picocolors42.default.bold(
         `Grafana metrics${hintSuffix} \u2014 ${findings2.length} series across panels`
       ) + matchSuffix
     );
     console.log(
-      import_picocolors40.default.dim(
+      import_picocolors42.default.dim(
         `  window: ${new Date(from * 1e3).toISOString()} \u2013 ${new Date(to * 1e3).toISOString()}`
       )
     );
     console.log("");
     if (flagged.length === 0) {
-      console.log(import_picocolors40.default.green("  No anomalies detected."));
+      console.log(import_picocolors42.default.green("  No anomalies detected."));
     } else {
       for (const f5 of flagged) {
         const color = anomalyColor(f5.anomaly);
@@ -125353,14 +125516,14 @@ async function runMetrics(hint, opts) {
         const lblStr = labelStr(f5.labels);
         console.log(
           color(
-            `  ${label.padEnd(22)}  ${f5.panelTitle.padEnd(40).slice(0, 40)}  ${fmtNum(f5.baselineAvg)} -> ${fmtNum(f5.currentAvg)} (${ratioStr})` + (lblStr !== "" ? `  ${import_picocolors40.default.dim(lblStr)}` : "")
+            `  ${label.padEnd(22)}  ${f5.panelTitle.padEnd(40).slice(0, 40)}  ${fmtNum(f5.baselineAvg)} -> ${fmtNum(f5.currentAvg)} (${ratioStr})` + (lblStr !== "" ? `  ${import_picocolors42.default.dim(lblStr)}` : "")
           )
         );
       }
     }
     if (ok.length > 0) {
       console.log("");
-      console.log(import_picocolors40.default.dim(`  ${ok.length} panel series with no anomaly.`));
+      console.log(import_picocolors42.default.dim(`  ${ok.length} panel series with no anomaly.`));
     }
     if (opts.ai) {
       const result = await renderAiInterpretation({
@@ -125375,19 +125538,19 @@ async function runMetrics(hint, opts) {
       });
       console.log("\n" + renderInterpretation(result));
       if (!result.ok) {
-        console.error(import_picocolors40.default.yellow(`[ai] ${result.warning}`));
+        console.error(import_picocolors42.default.yellow(`[ai] ${result.warning}`));
       }
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors40.default.red(err2.message));
+    console.error(import_picocolors42.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/state.ts
 init_cjs_shims();
-var import_picocolors41 = __toESM(require_picocolors(), 1);
+var import_picocolors43 = __toESM(require_picocolors(), 1);
 init_src();
 var STATE_AI_CONTRACT = `Provide a clearly separated AI evidence narration with:
 
@@ -125414,13 +125577,13 @@ async function runState(opts) {
     try {
       renv = resolveEnvironment(config2, { env: opts.env });
     } catch (err2) {
-      console.error(import_picocolors41.default.red(err2.message));
+      console.error(import_picocolors43.default.red(err2.message));
       return 1;
     }
     const mongo = mongoForEnv(renv);
     if (mongo === null) {
       console.error(
-        import_picocolors41.default.red(
+        import_picocolors43.default.red(
           `No MongoDB connector configured for ${renv.project}/${renv.env} (set the project's Mongo URL env var).`
         )
       );
@@ -125428,7 +125591,7 @@ async function runState(opts) {
     }
     const health = await mongo.health();
     if (!health.ok) {
-      console.error(import_picocolors41.default.red(`MongoDB unreachable: ${health.detail}`));
+      console.error(import_picocolors43.default.red(`MongoDB unreachable: ${health.detail}`));
       await mongo.close();
       return 1;
     }
@@ -125454,38 +125617,38 @@ async function runState(opts) {
         );
         return 0;
       }
-      const discoveryNote = analysis.autoDiscovered ? import_picocolors41.default.dim(` (${analysis.collections.length} collections, auto-discovered)`) : "";
+      const discoveryNote = analysis.autoDiscovered ? import_picocolors43.default.dim(` (${analysis.collections.length} collections, auto-discovered)`) : "";
       console.log(
-        import_picocolors41.default.bold("State analysis") + import_picocolors41.default.dim(` \u2014 ${renv.project}/${renv.env} \xB7 db ${analysis.database}`) + discoveryNote
+        import_picocolors43.default.bold("State analysis") + import_picocolors43.default.dim(` \u2014 ${renv.project}/${renv.env} \xB7 db ${analysis.database}`) + discoveryNote
       );
       console.log("");
       let signals = 0;
       for (const c4 of analysis.collections) {
         const flags2 = [];
         if (c4.isStale === true) {
-          flags2.push(import_picocolors41.default.yellow(`stale (last ${c4.dateField}, ~${Math.round(c4.ageHours ?? 0)}h)`));
+          flags2.push(import_picocolors43.default.yellow(`stale (last ${c4.dateField}, ~${Math.round(c4.ageHours ?? 0)}h)`));
         }
         for (const a2 of c4.anomalies) {
-          flags2.push(import_picocolors41.default.red(`${a2.count}\xD7 "${a2.value}"`));
+          flags2.push(import_picocolors43.default.red(`${a2.count}\xD7 "${a2.value}"`));
           signals += 1;
         }
         if (c4.isStale === true) signals += 1;
-        const head = `  ${import_picocolors41.default.bold(c4.collection.padEnd(18).slice(0, 18))} ${import_picocolors41.default.dim(String(c4.count).padStart(8) + " docs")}`;
-        console.log(flags2.length > 0 ? `${head}   ${flags2.join("  ")}` : import_picocolors41.default.dim(head));
+        const head = `  ${import_picocolors43.default.bold(c4.collection.padEnd(18).slice(0, 18))} ${import_picocolors43.default.dim(String(c4.count).padStart(8) + " docs")}`;
+        console.log(flags2.length > 0 ? `${head}   ${flags2.join("  ")}` : import_picocolors43.default.dim(head));
       }
       console.log("");
       if (analysis.collections.length === 0) {
         console.log(
-          import_picocolors41.default.yellow("  No collections discovered in this database.") + import_picocolors41.default.dim(" Verify the database name in your MongoDB connector config.")
+          import_picocolors43.default.yellow("  No collections discovered in this database.") + import_picocolors43.default.dim(" Verify the database name in your MongoDB connector config.")
         );
       } else {
         const scope = analysis.autoDiscovered ? "collection(s)" : "allowlisted collection(s)";
         console.log(
-          signals > 0 ? `  ${import_picocolors41.default.bold(String(signals))} state signal(s) across ${analysis.collections.length} ${scope}` : import_picocolors41.default.dim(`  No state anomalies across ${analysis.collections.length} ${scope}.`)
+          signals > 0 ? `  ${import_picocolors43.default.bold(String(signals))} state signal(s) across ${analysis.collections.length} ${scope}` : import_picocolors43.default.dim(`  No state anomalies across ${analysis.collections.length} ${scope}.`)
         );
         if (analysis.autoDiscovered) {
           console.log(
-            import_picocolors41.default.dim(
+            import_picocolors43.default.dim(
               `  Tip: add a "collections" list to your MongoDB connector config to restrict analysis.`
             )
           );
@@ -125503,7 +125666,7 @@ async function runState(opts) {
         });
         console.log("\n" + renderInterpretation(result));
         if (!result.ok) {
-          console.error(import_picocolors41.default.yellow(`[ai] ${result.warning}`));
+          console.error(import_picocolors43.default.yellow(`[ai] ${result.warning}`));
         }
       }
       return 0;
@@ -125511,20 +125674,20 @@ async function runState(opts) {
       await mongo.close();
     }
   } catch (err2) {
-    console.error(import_picocolors41.default.red(err2.message));
+    console.error(import_picocolors43.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/init.ts
 init_cjs_shims();
-var import_picocolors44 = __toESM(require_picocolors(), 1);
+var import_picocolors46 = __toESM(require_picocolors(), 1);
 var import_node_path27 = require("path");
 init_src();
 
 // ../../packages/cli/src/commands/init-prereqs.ts
 init_cjs_shims();
-var import_picocolors42 = __toESM(require_picocolors(), 1);
+var import_picocolors44 = __toESM(require_picocolors(), 1);
 init_src();
 async function checkPrerequisites(opts = {}) {
   const write = opts.write ?? ((line2) => console.log(line2));
@@ -125538,9 +125701,9 @@ async function checkPrerequisites(opts = {}) {
   } catch {
   }
   if (backendVersion === null) {
-    write(`  ${import_picocolors42.default.red("\u25CF")} Horus source-intelligence backend not found`);
+    write(`  ${import_picocolors44.default.red("\u25CF")} Horus source-intelligence backend not found`);
     write(
-      import_picocolors42.default.dim(
+      import_picocolors44.default.dim(
         `      install it (Python 3.11+ required):
         curl -fsSL https://horus.sh/install.sh | bash
       ensure ~/.local/bin is on your PATH`
@@ -125549,10 +125712,10 @@ async function checkPrerequisites(opts = {}) {
   } else if (SOURCE_PIN_ENFORCED && backendVersion !== PINNED_SOURCE_VERSION) {
     status.backendPresent = true;
     write(
-      `  ${import_picocolors42.default.yellow("\u25CF")} Horus source-intelligence backend version mismatch` + import_picocolors42.default.dim(` (installed: ${backendVersion}, required: ${PINNED_SOURCE_VERSION})`)
+      `  ${import_picocolors44.default.yellow("\u25CF")} Horus source-intelligence backend version mismatch` + import_picocolors44.default.dim(` (installed: ${backendVersion}, required: ${PINNED_SOURCE_VERSION})`)
     );
     write(
-      import_picocolors42.default.dim(
+      import_picocolors44.default.dim(
         `      update it:
         horus update`
       )
@@ -125561,7 +125724,7 @@ async function checkPrerequisites(opts = {}) {
     status.backendPresent = true;
     status.backendVersionOk = true;
     write(
-      `  ${import_picocolors42.default.green("\u25CF")} Horus source-intelligence backend ` + import_picocolors42.default.dim(`(${backendVersion})`)
+      `  ${import_picocolors44.default.green("\u25CF")} Horus source-intelligence backend ` + import_picocolors44.default.dim(`(${backendVersion})`)
     );
   }
   return status;
@@ -125571,7 +125734,7 @@ async function checkPrerequisites(opts = {}) {
 init_cjs_shims();
 var import_node_fs24 = require("fs");
 var import_node_path26 = require("path");
-var import_picocolors43 = __toESM(require_picocolors(), 1);
+var import_picocolors45 = __toESM(require_picocolors(), 1);
 init_src();
 
 // ../../packages/stitcher/src/index.ts
@@ -125692,27 +125855,27 @@ function extractQueueGraph(input) {
     }
   }
   const producers = [];
-  for (const pc64 of input.producerClasses) {
-    const loopVarEnums = loopVarEnumsFor(pc64.content);
-    for (const m5 of pc64.content.matchAll(INJECT_QUEUE_RE)) {
+  for (const pc66 of input.producerClasses) {
+    const loopVarEnums = loopVarEnumsFor(pc66.content);
+    for (const m5 of pc66.content.matchAll(INJECT_QUEUE_RE)) {
       const queue = m5[1] ?? "";
-      if (queue) producers.push({ queue, symbol: pc64.name, file: pc64.filePath });
+      if (queue) producers.push({ queue, symbol: pc66.name, file: pc66.filePath });
     }
-    for (const m5 of pc64.content.matchAll(NEW_BULL_RE)) {
+    for (const m5 of pc66.content.matchAll(NEW_BULL_RE)) {
       if (m5[2] !== "Queue") continue;
       const queues2 = resolveArg(m5[3] ?? "", constMap, enums, loopVarEnums);
       for (const queue of queues2) {
         producers.push({
           queue,
-          symbol: (m5[1] ?? pc64.name) || baseName(pc64.filePath),
-          file: pc64.filePath
+          symbol: (m5[1] ?? pc66.name) || baseName(pc66.filePath),
+          file: pc66.filePath
         });
       }
     }
-    for (const m5 of pc64.content.matchAll(QUEUE_NAME_CONST_RE)) {
+    for (const m5 of pc66.content.matchAll(QUEUE_NAME_CONST_RE)) {
       const ident = m5[1] ?? "";
       const queue = m5[2] ?? "";
-      if (queue) producers.push({ queue, symbol: ident || baseName(pc64.filePath), file: pc64.filePath });
+      if (queue) producers.push({ queue, symbol: ident || baseName(pc66.filePath), file: pc66.filePath });
     }
   }
   const workers = [];
@@ -126032,11 +126195,11 @@ async function stitchQueueMap(hostUrl, label) {
   try {
     const summary = await stitch(source, db, { project: label });
     console.log(
-      import_picocolors43.default.dim(`[${label}]  `) + `Stitched ${summary.edges} queue edge(s) across ${summary.queues} queue(s) \u2014 ${summary.producers} producer(s), ${summary.workers} worker(s).`
+      import_picocolors45.default.dim(`[${label}]  `) + `Stitched ${summary.edges} queue edge(s) across ${summary.queues} queue(s) \u2014 ${summary.producers} producer(s), ${summary.workers} worker(s).`
     );
   } catch (err2) {
     console.log(
-      import_picocolors43.default.dim(`[${label}]  `) + `Queue map skipped (degraded): ${err2.message}. Stitched 0 queue edge(s).`
+      import_picocolors45.default.dim(`[${label}]  `) + `Queue map skipped (degraded): ${err2.message}. Stitched 0 queue edge(s).`
     );
   } finally {
     await sql2.end();
@@ -126118,8 +126281,8 @@ async function buildKnowledgeIndex(root, config2, label, configuredProject, opts
     if (opts.importKb) {
       const res = importKnowledgeBaseFile((0, import_node_path26.resolve)(opts.importKb), { root, project: label });
       const total = res.manifest ? Object.values(res.manifest.counts).reduce((a2, b5) => a2 + b5, 0) : 0;
-      console.log(import_picocolors43.default.dim(`  project knowledge: imported ${total} item(s) from ${opts.importKb}`));
-      if (res.warnings.length) console.log(import_picocolors43.default.dim(`  (${res.warnings.length} import warning(s))`));
+      console.log(import_picocolors45.default.dim(`  project knowledge: imported ${total} item(s) from ${opts.importKb}`));
+      if (res.warnings.length) console.log(import_picocolors45.default.dim(`  (${res.warnings.length} import warning(s))`));
       return;
     }
     const changedMode = opts.changed === true && opts.full !== true;
@@ -126127,7 +126290,7 @@ async function buildKnowledgeIndex(root, config2, label, configuredProject, opts
       const changes = collectLocalChanges({ cwd: root });
       const n4 = changes.kind === "local-changes" ? changes.changedFiles.length : 0;
       console.log(
-        import_picocolors43.default.dim(
+        import_picocolors45.default.dim(
           `  project knowledge: fast refresh (${n4} changed file(s)) \u2014 the source graph is NOT reanalyzed (use \`horus init --reindex\` for that)`
         )
       );
@@ -126162,10 +126325,10 @@ async function buildKnowledgeIndex(root, config2, label, configuredProject, opts
       snapshot.dataFlows.length ? `${snapshot.dataFlows.length} flow(s)` : null
     ].filter(Boolean);
     console.log(
-      import_picocolors43.default.dim(`  project knowledge: ${counts.join(", ")} \u2192 .horus/index/`)
+      import_picocolors45.default.dim(`  project knowledge: ${counts.join(", ")} \u2192 .horus/index/`)
     );
   } catch (err2) {
-    console.log(import_picocolors43.default.dim(`  project knowledge skipped: ${err2.message}`));
+    console.log(import_picocolors45.default.dim(`  project knowledge skipped: ${err2.message}`));
   }
 }
 async function runIndex(opts) {
@@ -126195,7 +126358,7 @@ async function runIndex(opts) {
     let spawned = false;
     let driftedHost;
     if (opts.reindex === true) {
-      console.log(import_picocolors43.default.dim("  --reindex: stopping the host and removing .horus/source for a full re-analysis\u2026"));
+      console.log(import_picocolors45.default.dim("  --reindex: stopping the host and removing .horus/source for a full re-analysis\u2026"));
       await killSpawnedHost(root);
       (0, import_node_fs24.rmSync)((0, import_node_path26.join)(root, ".horus", "source"), { recursive: true, force: true });
     }
@@ -126212,51 +126375,51 @@ async function runIndex(opts) {
     }
     if (!hostUrl && driftedHost) {
       console.log(
-        import_picocolors43.default.yellow(
+        import_picocolors45.default.yellow(
           `Host at ${driftedHost.url} runs backend v${driftedHost.version} (pinned ${PINNED_SOURCE_VERSION}) \u2014 restarting it with the pinned backend`
         )
       );
       await killSpawnedHost(root);
     }
     if (hostUrl) {
-      console.log(import_picocolors43.default.dim(`Reusing source-intelligence host for ${label} at ${hostUrl}`));
+      console.log(import_picocolors45.default.dim(`Reusing source-intelligence host for ${label} at ${hostUrl}`));
     } else {
       spawned = true;
-      console.log(import_picocolors43.default.bold(`Indexing ${label}`) + import_picocolors43.default.dim(`  (${root})`));
+      console.log(import_picocolors45.default.bold(`Indexing ${label}`) + import_picocolors45.default.dim(`  (${root})`));
       if (!await sourceAvailable()) {
-        console.error(import_picocolors43.default.red("horus-source not found on PATH. Install it: curl -fsSL https://horus.sh/install.sh | bash"));
+        console.error(import_picocolors45.default.red("horus-source not found on PATH. Install it: curl -fsSL https://horus.sh/install.sh | bash"));
         return 1;
       }
       try {
         await assertSourceVersionPinned();
       } catch (err2) {
-        console.error(import_picocolors43.default.red(`  ${err2.message}`));
+        console.error(import_picocolors45.default.red(`  ${err2.message}`));
         return 1;
       }
       const staleReason = isAnalyzed(root) ? indexNeedsReanalyze(root) : null;
       if (!isAnalyzed(root) || staleReason) {
         console.log(
-          import_picocolors43.default.dim(
+          import_picocolors45.default.dim(
             staleReason ? `  existing index is stale (${staleReason}) \u2014 re-analyzing with source-intelligence backend\u2026` : "  analyzing with source-intelligence backend (first time \u2014 this can take a while)\u2026"
           )
         );
         try {
           await analyzeRepo(root);
         } catch (err2) {
-          console.error(import_picocolors43.default.red(`  source analysis failed: ${err2.message}`));
+          console.error(import_picocolors45.default.red(`  source analysis failed: ${err2.message}`));
           return 1;
         }
         const incomplete = isAnalyzed(root) ? indexNeedsReanalyze(root) : "no index was produced";
         if (incomplete) {
           console.error(
-            import_picocolors43.default.red(
+            import_picocolors45.default.red(
               `  source analysis did not finish (${incomplete}) \u2014 the structural index is missing or broken. Re-run \`horus init\` to rebuild it.`
             )
           );
           return 1;
         }
       } else {
-        console.log(import_picocolors43.default.dim("  already analyzed"));
+        console.log(import_picocolors45.default.dim("  already analyzed"));
       }
       const priorPort = parseHostPort(configuredHost ?? "") ?? parseHostPort(readSourceHostUrl(root) ?? "");
       await killSpawnedHost(root);
@@ -126275,7 +126438,7 @@ async function runIndex(opts) {
         }
         hostUrl = `http://127.0.0.1:${port}`;
         console.log(
-          import_picocolors43.default.dim(
+          import_picocolors45.default.dim(
             attempt === 0 ? `  starting source-intelligence host on port ${port}\u2026` : `  port contended \u2014 retrying on ${port}\u2026`
           )
         );
@@ -126291,7 +126454,7 @@ async function runIndex(opts) {
       }
       if (!started) {
         console.error(
-          import_picocolors43.default.red(`  Source-intelligence host did not become healthy \u2014 see ${root}/.horus/source-host.log`)
+          import_picocolors45.default.red(`  Source-intelligence host did not become healthy \u2014 see ${root}/.horus/source-host.log`)
         );
         return 1;
       }
@@ -126299,20 +126462,20 @@ async function runIndex(opts) {
     if (!hostUrl) return 1;
     if (!await hostServesRepo(hostUrl, root)) {
       console.error(
-        import_picocolors43.default.red(
+        import_picocolors45.default.red(
           `  Source-intelligence host at ${hostUrl} is serving a DIFFERENT repository \u2014 refusing to index foreign code. Retry, or stop the stale host: horus stop`
         )
       );
       return 1;
     }
     if (indexEmbeddingsPending(root)) {
-      console.log(import_picocolors43.default.dim("  index ready (semantic search warming up)"));
+      console.log(import_picocolors45.default.dim("  index ready (semantic search warming up)"));
     }
     try {
       await stitchQueueMap(hostUrl, label);
     } catch (err2) {
       console.log(
-        import_picocolors43.default.dim(`[${label}]  `) + `Queue map skipped (degraded): ${err2.message}. Stitched 0 queue edge(s).`
+        import_picocolors45.default.dim(`[${label}]  `) + `Queue map skipped (degraded): ${err2.message}. Stitched 0 queue edge(s).`
       );
     }
     await buildKnowledgeIndex(root, config2, label, configuredProject, opts, hostUrl);
@@ -126329,10 +126492,10 @@ async function runIndex(opts) {
       const configPath = writeLocalConfig(root, file);
       registerProject(name2, root, configPath);
       ensureProjectGitignore(root);
-      console.log(`${import_picocolors43.default.green("\u2713")} Indexed ${import_picocolors43.default.bold(name2)} \u2014 host ${hostUrl}`);
-      console.log(import_picocolors43.default.dim(`  ${configPath}`));
+      console.log(`${import_picocolors45.default.green("\u2713")} Indexed ${import_picocolors45.default.bold(name2)} \u2014 host ${hostUrl}`);
+      console.log(import_picocolors45.default.dim(`  ${configPath}`));
       console.log(
-        import_picocolors43.default.dim(
+        import_picocolors45.default.dim(
           `  investigate: horus investigate "<hint>"  (from this repo)`
         )
       );
@@ -126348,19 +126511,19 @@ async function runIndex(opts) {
         writeLocalConfig(root, file);
         registerProject(label, root, existingPath);
         ensureProjectGitignore(root);
-        console.log(`${import_picocolors43.default.green("\u2713")} Indexed ${import_picocolors43.default.bold(label)} \u2014 source host registered at ${hostUrl}`);
-        console.log(import_picocolors43.default.dim(`  ${existingPath}`));
+        console.log(`${import_picocolors45.default.green("\u2713")} Indexed ${import_picocolors45.default.bold(label)} \u2014 source host registered at ${hostUrl}`);
+        console.log(import_picocolors45.default.dim(`  ${existingPath}`));
       } else {
-        console.log(`${import_picocolors43.default.green("\u2713")} Indexed ${import_picocolors43.default.bold(label)} ${import_picocolors43.default.dim("(queue map refreshed)")}`);
+        console.log(`${import_picocolors45.default.green("\u2713")} Indexed ${import_picocolors45.default.bold(label)} ${import_picocolors45.default.dim("(queue map refreshed)")}`);
       }
     } else {
       console.log(
-        `${import_picocolors43.default.green("\u2713")} Indexed ${import_picocolors43.default.bold(label)} ${import_picocolors43.default.dim("(queue map refreshed)")}`
+        `${import_picocolors45.default.green("\u2713")} Indexed ${import_picocolors45.default.bold(label)} ${import_picocolors45.default.dim("(queue map refreshed)")}`
       );
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors43.default.red(err2.message));
+    console.error(import_picocolors45.default.red(err2.message));
     return 1;
   }
 }
@@ -126368,7 +126531,7 @@ async function runIndex(opts) {
 // ../../packages/cli/src/commands/init.ts
 async function runInit(opts) {
   try {
-    console.log(import_picocolors44.default.bold("\nHorus init\n"));
+    console.log(import_picocolors46.default.bold("\nHorus init\n"));
     await checkPrerequisites({ ...opts.config !== void 0 ? { config: opts.config } : {} });
     console.log("");
     const cwd = process.cwd();
@@ -126382,10 +126545,10 @@ async function runInit(opts) {
         const code = writeConfigOnly(root, opts, void 0);
         if (code === 0) {
           console.log(
-            import_picocolors44.default.dim("  indexing skipped \u2014 no source-intelligence backend found. Install it:")
+            import_picocolors46.default.dim("  indexing skipped \u2014 no source-intelligence backend found. Install it:")
           );
-          console.log(import_picocolors44.default.dim("    curl -fsSL https://horus.sh/install.sh | bash"));
-          console.log(import_picocolors44.default.dim("  then re-run `horus init` to index this repo"));
+          console.log(import_picocolors46.default.dim("    curl -fsSL https://horus.sh/install.sh | bash"));
+          console.log(import_picocolors46.default.dim("  then re-run `horus init` to index this repo"));
         }
         return code;
       }
@@ -126401,7 +126564,7 @@ async function runInit(opts) {
       path: root
     });
   } catch (err2) {
-    console.error(import_picocolors44.default.red(err2.message));
+    console.error(import_picocolors46.default.red(err2.message));
     return 1;
   }
 }
@@ -126422,57 +126585,57 @@ function writeConfigOnly(root, opts, hostUrl) {
     const configPath = writeLocalConfig(root, file);
     registerProject(name2, root, configPath);
     ensureProjectGitignore(root);
-    console.log(`${import_picocolors44.default.green("\u2713")} Initialized Horus project ${import_picocolors44.default.bold(name2)}`);
-    console.log(import_picocolors44.default.dim(`  config:     ${configPath}`));
-    console.log(import_picocolors44.default.dim(`  next: horus investigate "<hint>"  (from this repo)`));
+    console.log(`${import_picocolors46.default.green("\u2713")} Initialized Horus project ${import_picocolors46.default.bold(name2)}`);
+    console.log(import_picocolors46.default.dim(`  config:     ${configPath}`));
+    console.log(import_picocolors46.default.dim(`  next: horus investigate "<hint>"  (from this repo)`));
     console.log(
-      import_picocolors44.default.dim("  add runtime connectors with `horus connect <type>` (elasticsearch/mongodb/grafana/...) \u2014 credentials are encrypted, never hand-edited into config.json")
+      import_picocolors46.default.dim("  add runtime connectors with `horus connect <type>` (elasticsearch/mongodb/grafana/...) \u2014 credentials are encrypted, never hand-edited into config.json")
     );
     console.log(
-      import_picocolors44.default.dim("  .horus/ is gitignored \u2014 local config and runtime state stay out of version control")
+      import_picocolors46.default.dim("  .horus/ is gitignored \u2014 local config and runtime state stay out of version control")
     );
     return 0;
   } catch (err2) {
-    console.error(import_picocolors44.default.red(err2.message));
+    console.error(import_picocolors46.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/projects.ts
 init_cjs_shims();
-var import_picocolors45 = __toESM(require_picocolors(), 1);
+var import_picocolors47 = __toESM(require_picocolors(), 1);
 init_src();
 async function runProjects() {
   const reg = readRegistry();
   const names = Object.keys(reg.projects).sort();
   if (names.length === 0) {
     console.log(
-      import_picocolors45.default.dim("No registered projects. Run `horus init` inside a repo.")
+      import_picocolors47.default.dim("No registered projects. Run `horus init` inside a repo.")
     );
     return 0;
   }
-  console.log(import_picocolors45.default.bold("Registered Horus projects"));
+  console.log(import_picocolors47.default.bold("Registered Horus projects"));
   console.log("");
   for (const name2 of names) {
     const entry = reg.projects[name2];
     if (entry === void 0) continue;
-    console.log(`  ${import_picocolors45.default.bold(name2.padEnd(22))} ${import_picocolors45.default.dim(entry.root)}`);
+    console.log(`  ${import_picocolors47.default.bold(name2.padEnd(22))} ${import_picocolors47.default.dim(entry.root)}`);
   }
   console.log("");
-  console.log(import_picocolors45.default.dim('  cd <repo> && horus investigate "<hint>"   (or: horus investigate --config <path>)'));
+  console.log(import_picocolors47.default.dim('  cd <repo> && horus investigate "<hint>"   (or: horus investigate --config <path>)'));
   return 0;
 }
 
 // ../../packages/cli/src/commands/connect.ts
 init_cjs_shims();
 var import_node_readline = require("readline");
-var import_picocolors47 = __toESM(require_picocolors(), 1);
+var import_picocolors49 = __toESM(require_picocolors(), 1);
 init_src();
 
 // ../../packages/cli/src/commands/connect-ai.ts
 init_cjs_shims();
 var import_node_child_process10 = require("child_process");
-var import_picocolors46 = __toESM(require_picocolors(), 1);
+var import_picocolors48 = __toESM(require_picocolors(), 1);
 init_src();
 function cliInstalled(id) {
   const r = (0, import_node_child_process10.spawnSync)(id, ["--version"], { stdio: "ignore", timeout: 2e3 });
@@ -126501,13 +126664,13 @@ async function runConnectAi(opts) {
     const root = findRepoRoot(cwd) ?? cwd;
     const configPath = discoverLocalConfig(cwd) ?? localConfigPath(root);
     const installed = LOCAL_PROVIDER_IDS.filter((id) => cliInstalled(id));
-    console.log(import_picocolors46.default.bold("\nAI providers"));
+    console.log(import_picocolors48.default.bold("\nAI providers"));
     console.log(
-      import_picocolors46.default.dim(
+      import_picocolors48.default.dim(
         `  Local CLIs on PATH: ${installed.length > 0 ? installed.join(", ") : "none detected"}`
       )
     );
-    console.log(import_picocolors46.default.dim("  Cloud: anthropic (Anthropic Claude API \u2014 used by `investigate --ai`)\n"));
+    console.log(import_picocolors48.default.dim("  Cloud: anthropic (Anthropic Claude API \u2014 used by `investigate --ai`)\n"));
     let provider = opts.provider;
     if (provider === void 0) {
       if (isInteractive()) {
@@ -126518,7 +126681,7 @@ async function runConnectAi(opts) {
       }
     }
     if (!AI_PROVIDERS.includes(provider)) {
-      console.error(import_picocolors46.default.red(`Unknown AI provider: ${provider}`) + import_picocolors46.default.dim(`
+      console.error(import_picocolors48.default.red(`Unknown AI provider: ${provider}`) + import_picocolors48.default.dim(`
   supported: ${AI_PROVIDERS.join(", ")}`));
       return 1;
     }
@@ -126531,7 +126694,7 @@ async function runConnectAi(opts) {
       }
       if (!apiKey) {
         console.error(
-          import_picocolors46.default.red("No API key provided.") + import_picocolors46.default.dim("\n  Pass --api-key sk-ant-\u2026 or set ANTHROPIC_API_KEY and re-run.")
+          import_picocolors48.default.red("No API key provided.") + import_picocolors48.default.dim("\n  Pass --api-key sk-ant-\u2026 or set ANTHROPIC_API_KEY and re-run.")
         );
         return 1;
       }
@@ -126539,28 +126702,28 @@ async function runConnectAi(opts) {
         const probe2 = await probeAnthropic(apiKey);
         if (!probe2.ok) {
           console.error(`
-${import_picocolors46.default.red("\u2717 Anthropic key check failed:")} ${probe2.detail}`);
-          console.error(import_picocolors46.default.dim("  Fix the key and retry, or pass --no-test to skip."));
+${import_picocolors48.default.red("\u2717 Anthropic key check failed:")} ${probe2.detail}`);
+          console.error(import_picocolors48.default.dim("  Fix the key and retry, or pass --no-test to skip."));
           return 1;
         }
         console.log(`
-${import_picocolors46.default.green("\u2713")} anthropic ${import_picocolors46.default.dim(`(${probe2.detail})`)}`);
+${import_picocolors48.default.green("\u2713")} anthropic ${import_picocolors48.default.dim(`(${probe2.detail})`)}`);
       }
       if (opts.model) aiBlock["anthropic"] = { model: opts.model };
       storedKey = apiKey;
     } else {
       if (!installed.includes(provider)) {
         console.error(
-          import_picocolors46.default.red(`${provider} CLI not found on PATH.`) + import_picocolors46.default.dim(`
+          import_picocolors48.default.red(`${provider} CLI not found on PATH.`) + import_picocolors48.default.dim(`
   Install it first, or choose anthropic.`)
         );
         return 1;
       }
       const desc2 = DEFAULT_LOCAL_PROVIDER_REGISTRY.get(provider);
       console.log(`
-${import_picocolors46.default.green("\u2713")} ${desc2?.displayName ?? provider} ${import_picocolors46.default.dim("detected on PATH")}`);
+${import_picocolors48.default.green("\u2713")} ${desc2?.displayName ?? provider} ${import_picocolors48.default.dim("detected on PATH")}`);
       console.log(
-        import_picocolors46.default.dim(
+        import_picocolors48.default.dim(
           "  Note: `investigate --ai` currently uses the Anthropic API for narrative.\n  Local-CLI narrative generation is recorded as your preference for future use."
         )
       );
@@ -126578,15 +126741,15 @@ ${import_picocolors46.default.green("\u2713")} ${desc2?.displayName ?? provider}
       });
     }
     console.log(`
-${import_picocolors46.default.green("\u2713")} ${import_picocolors46.default.bold("ai")} provider saved \u2192 ${import_picocolors46.default.dim(configPath)}`);
-    console.log(import_picocolors46.default.dim(`  provider: ${provider}`));
+${import_picocolors48.default.green("\u2713")} ${import_picocolors48.default.bold("ai")} provider saved \u2192 ${import_picocolors48.default.dim(configPath)}`);
+    console.log(import_picocolors48.default.dim(`  provider: ${provider}`));
     if (storedKey && secretsPathStr) {
-      console.log(import_picocolors46.default.dim(`  anthropic key: ${redactKey(storedKey)} \u2192 ${secretsPathStr} (gitignored)`));
+      console.log(import_picocolors48.default.dim(`  anthropic key: ${redactKey(storedKey)} \u2192 ${secretsPathStr} (gitignored)`));
     }
-    console.log(import_picocolors46.default.dim('  run: horus investigate "<hint>" --ai'));
+    console.log(import_picocolors48.default.dim('  run: horus investigate "<hint>" --ai'));
     return 0;
   } catch (err2) {
-    console.error(import_picocolors46.default.red(err2 instanceof Error ? err2.message : String(err2)));
+    console.error(import_picocolors48.default.red(err2 instanceof Error ? err2.message : String(err2)));
     return 1;
   }
 }
@@ -126618,7 +126781,7 @@ async function runConnect(type, opts) {
   }
   if (!SUPPORTED.includes(type)) {
     console.error(
-      import_picocolors47.default.red(`Unknown connector type: ${type}`) + import_picocolors47.default.dim(`
+      import_picocolors49.default.red(`Unknown connector type: ${type}`) + import_picocolors49.default.dim(`
   supported: ${SUPPORTED.join(", ")}, ai`)
     );
     return 1;
@@ -126631,9 +126794,9 @@ async function runConnect(type, opts) {
     const filled = await fillInteractive(connectorType, opts);
     if (missingRequired(connectorType, filled)) {
       console.error(
-        import_picocolors47.default.red(`Missing required field(s) for ${connectorType} \u2014 nothing saved.`) + import_picocolors47.default.dim(
+        import_picocolors49.default.red(`Missing required field(s) for ${connectorType} \u2014 nothing saved.`) + import_picocolors49.default.dim(
           `
-  Re-run ${import_picocolors47.default.bold(`horus connect ${connectorType}`)} and fill every prompt, or pass them as flags (e.g. --secret for the token).`
+  Re-run ${import_picocolors49.default.bold(`horus connect ${connectorType}`)} and fill every prompt, or pass them as flags (e.g. --secret for the token).`
         )
       );
       return 1;
@@ -126670,13 +126833,13 @@ async function runConnect(type, opts) {
       if (!probeResult.ok) {
         console.error(
           `
-${import_picocolors47.default.red(`\u2717 Could not reach ${connectorType}:`)} ${probeResult.detail}` + import_picocolors47.default.dim("\n  Fix the connection and retry, or pass --no-test to skip.")
+${import_picocolors49.default.red(`\u2717 Could not reach ${connectorType}:`)} ${probeResult.detail}` + import_picocolors49.default.dim("\n  Fix the connection and retry, or pass --no-test to skip.")
         );
         return 1;
       }
       console.log(
         `
-${import_picocolors47.default.green("\u2713")} ${connectorType} reachable ${import_picocolors47.default.dim(`(${probeResult.detail})`)}`
+${import_picocolors49.default.green("\u2713")} ${connectorType} reachable ${import_picocolors49.default.dim(`(${probeResult.detail})`)}`
       );
     }
     const envName = resolveEnvName(configPath, filled.env);
@@ -126696,38 +126859,38 @@ ${import_picocolors47.default.green("\u2713")} ${connectorType} reachable ${impo
       try {
         keyResult = ensureMasterKey();
       } catch (err2) {
-        console.error(import_picocolors47.default.red(err2.message));
+        console.error(import_picocolors49.default.red(err2.message));
         return 1;
       }
       for (const [field, value] of secretPatch) {
         writeConnectorSecret(root, envName, connectorType, field, value, keyResult.key);
       }
-      if (keyResult.warning) console.warn(import_picocolors47.default.yellow(`
+      if (keyResult.warning) console.warn(import_picocolors49.default.yellow(`
 \u26A0 ${keyResult.warning}`));
     }
     patchLocalConnector(configPath, connectorType, nonSecretPatch, envName);
     console.log(
-      `${import_picocolors47.default.green("\u2713")} ${import_picocolors47.default.bold(connectorType)} connector saved \u2192 ${import_picocolors47.default.dim(configPath)}`
+      `${import_picocolors49.default.green("\u2713")} ${import_picocolors49.default.bold(connectorType)} connector saved \u2192 ${import_picocolors49.default.dim(configPath)}`
     );
     if (secretPatch.length > 0) {
       const n4 = secretPatch.length;
       console.log(
-        import_picocolors47.default.dim(
+        import_picocolors49.default.dim(
           `  ${n4} secret${n4 > 1 ? "s" : ""} encrypted \u2192 ${localSecretsPath(root)}
   master key: ${masterKeyStatus().detail}`
         )
       );
     }
     printSummary(connectorType, filled);
-    console.log(import_picocolors47.default.dim(`
+    console.log(import_picocolors49.default.dim(`
   run: horus investigate "<hint>"`));
     return 0;
   } catch (err2) {
     if (err2 instanceof ExitPromptError) {
-      console.error(import_picocolors47.default.red("Cancelled."));
+      console.error(import_picocolors49.default.red("Cancelled."));
       return 1;
     }
-    console.error(import_picocolors47.default.red(err2.message));
+    console.error(import_picocolors49.default.red(err2.message));
     return 1;
   }
 }
@@ -126736,7 +126899,7 @@ async function fillInteractive(type, opts) {
   if (!needsInteraction) return opts;
   console.log(
     `
-${import_picocolors47.default.bold(`Connect ${type}`)} ${import_picocolors47.default.dim("(press Enter to skip optional fields)")}
+${import_picocolors49.default.bold(`Connect ${type}`)} ${import_picocolors49.default.dim("(press Enter to skip optional fields)")}
 `
   );
   const filled = { ...opts };
@@ -126826,7 +126989,7 @@ ${import_picocolors47.default.bold(`Connect ${type}`)} ${import_picocolors47.def
         if (filled.dataset === void 0) {
           if (names.length === 0) {
             console.log(
-              import_picocolors47.default.yellow(
+              import_picocolors49.default.yellow(
                 "  Couldn't list datasets (check token / network / region) \u2014 enter the name manually."
               )
             );
@@ -126874,7 +127037,7 @@ ${import_picocolors47.default.bold(`Connect ${type}`)} ${import_picocolors47.def
       break;
     case "redis": {
       console.log(
-        import_picocolors47.default.dim(
+        import_picocolors49.default.dim(
           "  Tip: embed credentials directly in the URL \u2014 redis://:password@host:6379\n       or enter the URL and password separately below."
         )
       );
@@ -126920,8 +127083,8 @@ function missingRequired(type, opts) {
 }
 function ask(label, placeholder = "", required2 = true) {
   return new Promise((resolve13) => {
-    const hint = placeholder ? import_picocolors47.default.dim(` (${placeholder})`) : "";
-    const suffix = required2 ? "" : import_picocolors47.default.dim(" [optional]");
+    const hint = placeholder ? import_picocolors49.default.dim(` (${placeholder})`) : "";
+    const suffix = required2 ? "" : import_picocolors49.default.dim(" [optional]");
     process.stdout.write(`  ${label}${suffix}${hint}: `);
     const rl = (0, import_node_readline.createInterface)({
       input: process.stdin,
@@ -126938,7 +127101,7 @@ function askPassword(label, required2 = false) {
   return new Promise((resolve13) => {
     const stdin = process.stdin;
     if (typeof stdin.setRawMode === "function") {
-      const suffix = required2 ? "" : import_picocolors47.default.dim(" [optional]");
+      const suffix = required2 ? "" : import_picocolors49.default.dim(" [optional]");
       process.stdout.write(`  ${label}${suffix}: `);
       stdin.setRawMode(true);
       stdin.resume();
@@ -126948,7 +127111,7 @@ function askPassword(label, required2 = false) {
         if (char2 === "\r" || char2 === "\n") {
           if (required2 && value === "") {
             process.stdout.write(`
-${import_picocolors47.default.yellow("  Required \u2014 please enter a value.")}
+${import_picocolors49.default.yellow("  Required \u2014 please enter a value.")}
 `);
             process.stdout.write(`  ${label}: `);
             return;
@@ -126980,18 +127143,18 @@ async function askRequiredText(label) {
   for (; ; ) {
     const v4 = (await ask(label, "", false)).trim();
     if (v4) return v4;
-    console.log(import_picocolors47.default.yellow("  Required \u2014 please enter a value."));
+    console.log(import_picocolors49.default.yellow("  Required \u2014 please enter a value."));
   }
 }
 async function askShopifyAuthMethod() {
-  console.log(`  ${import_picocolors47.default.bold("Auth method")}`);
-  console.log(`    ${import_picocolors47.default.bold("1)")} Static Admin API access token   ${import_picocolors47.default.dim("\u2014 a Custom App shpat_\u2026 token")}`);
-  console.log(`    ${import_picocolors47.default.bold("2)")} Client-Credentials app          ${import_picocolors47.default.dim("\u2014 client id + secret, exchanged for a token")}`);
+  console.log(`  ${import_picocolors49.default.bold("Auth method")}`);
+  console.log(`    ${import_picocolors49.default.bold("1)")} Static Admin API access token   ${import_picocolors49.default.dim("\u2014 a Custom App shpat_\u2026 token")}`);
+  console.log(`    ${import_picocolors49.default.bold("2)")} Client-Credentials app          ${import_picocolors49.default.dim("\u2014 client id + secret, exchanged for a token")}`);
   for (; ; ) {
     const a2 = (await ask("Choose", "1")).trim();
     if (a2 === "1") return "static";
     if (a2 === "2") return "client-credentials";
-    console.log(import_picocolors47.default.yellow("  Enter 1 or 2."));
+    console.log(import_picocolors49.default.yellow("  Enter 1 or 2."));
   }
 }
 function buildEsPatch(opts) {
@@ -127096,15 +127259,15 @@ function describeProbe(p5) {
   return `${p5.keyCount} keys \xB7 ${p5.suggestedRoles.join("/")}${examples ? ` \xB7 ${examples}` : ""}`;
 }
 async function discoverAndSelectDbs(url, bullmqPrefix) {
-  console.log(import_picocolors47.default.dim("\n  Scanning DBs 0-15 (read-only, sampled)\u2026"));
+  console.log(import_picocolors49.default.dim("\n  Scanning DBs 0-15 (read-only, sampled)\u2026"));
   const probes = await probeRedisDatabases(url, { bullmqPrefix });
   const nonEmpty = probes.filter((p5) => p5.reachable && p5.keyCount > 0);
   if (nonEmpty.length === 0) {
-    console.log(import_picocolors47.default.dim("  No populated DBs found."));
+    console.log(import_picocolors49.default.dim("  No populated DBs found."));
     return [];
   }
   for (const p5 of nonEmpty) {
-    console.log(`  ${import_picocolors47.default.bold(`DB ${p5.db}`)} ${import_picocolors47.default.dim("\xB7 " + describeProbe(p5))}`);
+    console.log(`  ${import_picocolors49.default.bold(`DB ${p5.db}`)} ${import_picocolors49.default.dim("\xB7 " + describeProbe(p5))}`);
   }
   const byLabel = /* @__PURE__ */ new Map();
   const choices = nonEmpty.map((p5) => {
@@ -127275,7 +127438,7 @@ function printSummary(type, opts) {
   } else if (opts.dashboard) {
     lines.push(`  dashboard:      ${opts.dashboard}`);
   }
-  if (lines.length > 0) console.log(import_picocolors47.default.dim(lines.join("\n")));
+  if (lines.length > 0) console.log(import_picocolors49.default.dim(lines.join("\n")));
 }
 function resolveEnvName(configPath, requested) {
   const file = readLocalConfig(configPath);
@@ -127317,11 +127480,11 @@ async function askIndexSelection(indices) {
   const shown = indices.slice(0, MAX_DISPLAY);
   console.log("\n  Available Elasticsearch indexes/data streams:");
   shown.forEach((name2, i3) => {
-    console.log(`  ${import_picocolors47.default.dim(`[${i3 + 1}]`)} ${name2}`);
+    console.log(`  ${import_picocolors49.default.dim(`[${i3 + 1}]`)} ${name2}`);
   });
   if (indices.length > MAX_DISPLAY) {
     console.log(
-      import_picocolors47.default.dim(
+      import_picocolors49.default.dim(
         `  \u2026 and ${indices.length - MAX_DISPLAY} more (type a pattern manually to match all)`
       )
     );
@@ -127365,11 +127528,11 @@ async function askDashboardSelection(dashboards) {
   const shown = dashboards.slice(0, MAX_DISPLAY);
   console.log("\n  Available Grafana dashboards:");
   shown.forEach((d3, i3) => {
-    const folder = d3.folderTitle ? import_picocolors47.default.dim(` (${d3.folderTitle})`) : "";
-    console.log(`  ${import_picocolors47.default.dim(`[${i3 + 1}]`)} ${d3.title}${folder}`);
+    const folder = d3.folderTitle ? import_picocolors49.default.dim(` (${d3.folderTitle})`) : "";
+    console.log(`  ${import_picocolors49.default.dim(`[${i3 + 1}]`)} ${d3.title}${folder}`);
   });
   if (dashboards.length > MAX_DISPLAY) {
-    console.log(import_picocolors47.default.dim(`  \u2026 and ${dashboards.length - MAX_DISPLAY} more`));
+    console.log(import_picocolors49.default.dim(`  \u2026 and ${dashboards.length - MAX_DISPLAY} more`));
   }
   const input = (await ask(
     `  Select dashboards to use (e.g. 1,2 or Enter to type uid manually)`,
@@ -127427,10 +127590,10 @@ async function askDatasetSelection(names) {
   const shown = names.slice(0, MAX_DISPLAY);
   console.log("\n  Available Axiom datasets:");
   shown.forEach((name2, i3) => {
-    console.log(`  ${import_picocolors47.default.dim(`[${i3 + 1}]`)} ${name2}`);
+    console.log(`  ${import_picocolors49.default.dim(`[${i3 + 1}]`)} ${name2}`);
   });
   if (names.length > MAX_DISPLAY) {
-    console.log(import_picocolors47.default.dim(`  \u2026 and ${names.length - MAX_DISPLAY} more`));
+    console.log(import_picocolors49.default.dim(`  \u2026 and ${names.length - MAX_DISPLAY} more`));
   }
   const input = (await ask("  Select a dataset (e.g. 1 or Enter to type a name manually)", "", false)).trim();
   if (!input) return void 0;
@@ -127443,7 +127606,7 @@ async function askDatasetSelection(names) {
 async function pickSentryResource(label, resources) {
   if (resources.length === 0) {
     console.log(
-      import_picocolors47.default.yellow(
+      import_picocolors49.default.yellow(
         `  Couldn't list ${label.toLowerCase()}s (check token / org / network) \u2014 enter the slug manually.`
       )
     );
@@ -127473,10 +127636,10 @@ async function pickSentryResource(label, resources) {
   console.log(`
   Available ${label.toLowerCase()}s:`);
   shown.forEach((r, i3) => {
-    console.log(`  ${import_picocolors47.default.dim(`[${i3 + 1}]`)} ${choiceFor(r)}`);
+    console.log(`  ${import_picocolors49.default.dim(`[${i3 + 1}]`)} ${choiceFor(r)}`);
   });
   if (resources.length > MAX_DISPLAY) {
-    console.log(import_picocolors47.default.dim(`  \u2026 and ${resources.length - MAX_DISPLAY} more`));
+    console.log(import_picocolors49.default.dim(`  \u2026 and ${resources.length - MAX_DISPLAY} more`));
   }
   const input = (await ask(`  Select a ${label.toLowerCase()} (e.g. 1, or Enter to type the slug manually)`, "", false)).trim();
   if (!input) return void 0;
@@ -127522,14 +127685,14 @@ function redactUrl(raw) {
 
 // ../../packages/cli/src/commands/notify.ts
 init_cjs_shims();
-var import_picocolors48 = __toESM(require_picocolors(), 1);
+var import_picocolors50 = __toESM(require_picocolors(), 1);
 init_src();
 function locate(opts) {
   const cwd = process.cwd();
   const configPath = opts.config ?? discoverLocalConfig(cwd) ?? null;
   const root = findRepoRoot(cwd);
   if (root === null) {
-    console.error(import_picocolors48.default.red("Not inside a git repository \u2014 run this from your project."));
+    console.error(import_picocolors50.default.red("Not inside a git repository \u2014 run this from your project."));
     return null;
   }
   const resolved = configPath ?? localConfigPath(root);
@@ -127539,13 +127702,13 @@ function pickEnv(file, requested) {
   const project = file.project;
   const envs = project?.environments ?? [];
   if (envs.length === 0) {
-    console.error(import_picocolors48.default.red("No environments in config \u2014 run `horus connect` or `horus init` first."));
+    console.error(import_picocolors50.default.red("No environments in config \u2014 run `horus connect` or `horus init` first."));
     return null;
   }
   if (requested) {
     const found = envs.find((e) => e.name === requested);
     if (!found) {
-      console.error(import_picocolors48.default.red(`Environment "${requested}" not found in config.`));
+      console.error(import_picocolors50.default.red(`Environment "${requested}" not found in config.`));
       return null;
     }
     return found;
@@ -127556,26 +127719,26 @@ function readConfigOrError(configPath) {
   try {
     return readLocalConfig(configPath);
   } catch {
-    console.error(import_picocolors48.default.red(`No config found at ${configPath} \u2014 run \`horus connect\` or \`horus init\` first.`));
+    console.error(import_picocolors50.default.red(`No config found at ${configPath} \u2014 run \`horus connect\` or \`horus init\` first.`));
     return null;
   }
 }
 async function runSet(opts) {
   if (!opts.url) {
-    console.error(import_picocolors48.default.red("A webhook URL is required: horus notify set --url <https://\u2026> [--secret <s>] [--min-confidence 0.6] [--cloud]"));
+    console.error(import_picocolors50.default.red("A webhook URL is required: horus notify set --url <https://\u2026> [--secret <s>] [--min-confidence 0.6] [--cloud]"));
     return 1;
   }
   try {
     new URL(opts.url);
   } catch {
-    console.error(import_picocolors48.default.red(`Invalid --url "${opts.url}".`));
+    console.error(import_picocolors50.default.red(`Invalid --url "${opts.url}".`));
     return 1;
   }
   let minConfidence;
   if (opts.minConfidence !== void 0) {
     const n4 = Number(opts.minConfidence);
     if (!Number.isFinite(n4) || n4 < 0 || n4 > 1) {
-      console.error(import_picocolors48.default.red(`--min-confidence must be between 0 and 1 (got "${opts.minConfidence}").`));
+      console.error(import_picocolors50.default.red(`--min-confidence must be between 0 and 1 (got "${opts.minConfidence}").`));
       return 1;
     }
     minConfidence = n4;
@@ -127598,18 +127761,18 @@ async function runSet(opts) {
     try {
       const key = ensureMasterKey();
       writeConnectorSecret(loc.root, envName, "notify", "webhookSecret", opts.secret, key.key);
-      secretNote = import_picocolors48.default.dim(" \xB7 signing secret stored encrypted (.horus/secrets.local.json)");
+      secretNote = import_picocolors50.default.dim(" \xB7 signing secret stored encrypted (.horus/secrets.local.json)");
     } catch (err2) {
-      console.error(import_picocolors48.default.yellow(`Notify URL saved, but the signing secret could not be encrypted: ${err2.message}`));
+      console.error(import_picocolors50.default.yellow(`Notify URL saved, but the signing secret could not be encrypted: ${err2.message}`));
     }
   }
   console.log(
-    import_picocolors48.default.green(`\u2713 Notify sink configured for "${envName}"`) + `
-  ${import_picocolors48.default.dim("webhook:")} ${opts.url}
-  ${import_picocolors48.default.dim("threshold:")} ${notify.minConfidence ?? 0.6}
-  ${import_picocolors48.default.dim("cloud:")} ${notify.cloud === true}${secretNote}`
+    import_picocolors50.default.green(`\u2713 Notify sink configured for "${envName}"`) + `
+  ${import_picocolors50.default.dim("webhook:")} ${opts.url}
+  ${import_picocolors50.default.dim("threshold:")} ${notify.minConfidence ?? 0.6}
+  ${import_picocolors50.default.dim("cloud:")} ${notify.cloud === true}${secretNote}`
   );
-  console.log(import_picocolors48.default.dim("  Run `horus notify test` to send a sample, or `horus watch` to start monitoring."));
+  console.log(import_picocolors50.default.dim("  Run `horus notify test` to send a sample, or `horus watch` to start monitoring."));
   return 0;
 }
 function runShow(opts) {
@@ -127620,12 +127783,12 @@ function runShow(opts) {
   const env = pickEnv(file, opts.env);
   if (!env) return 1;
   if (!env.notify || !env.notify.webhook?.url) {
-    console.log(import_picocolors48.default.dim(`No notify sink configured for "${env.name}". Set one: horus notify set --url <https://\u2026>`));
+    console.log(import_picocolors50.default.dim(`No notify sink configured for "${env.name}". Set one: horus notify set --url <https://\u2026>`));
     return 0;
   }
   const n4 = env.notify;
   console.log(
-    import_picocolors48.default.bold(`Notify sink for "${env.name}"`) + `
+    import_picocolors50.default.bold(`Notify sink for "${env.name}"`) + `
   webhook:    ${n4.webhook?.url}
   threshold:  ${n4.minConfidence ?? 0.6}
   cloud:      ${n4.cloud === true}`
@@ -127640,11 +127803,11 @@ async function runTest(opts) {
     const renv = resolveEnvironment3(config2, { env: opts.env });
     notify = renv.notify;
   } catch (err2) {
-    console.error(import_picocolors48.default.red(`Could not load config: ${err2.message}`));
+    console.error(import_picocolors50.default.red(`Could not load config: ${err2.message}`));
     return 1;
   }
   if (!notify || !notify.webhook) {
-    console.error(import_picocolors48.default.red("No webhook configured \u2014 run `horus notify set --url <https://\u2026>` first."));
+    console.error(import_picocolors50.default.red("No webhook configured \u2014 run `horus notify set --url <https://\u2026>` first."));
     return 1;
   }
   const results = await dispatchNotify(
@@ -127657,15 +127820,15 @@ async function runTest(opts) {
     { ...notify, minConfidence: 0 }
   );
   if (results.length === 0) {
-    console.error(import_picocolors48.default.yellow("Nothing dispatched (no target enabled)."));
+    console.error(import_picocolors50.default.yellow("Nothing dispatched (no target enabled)."));
     return 1;
   }
   let ok = true;
   for (const r of results) {
-    if (r.ok) console.log(import_picocolors48.default.green(`\u2713 ${r.target} \u2014 ${r.detail}`));
+    if (r.ok) console.log(import_picocolors50.default.green(`\u2713 ${r.target} \u2014 ${r.detail}`));
     else {
       ok = false;
-      console.error(import_picocolors48.default.red(`\u2717 ${r.target} \u2014 ${r.detail}`));
+      console.error(import_picocolors50.default.red(`\u2717 ${r.target} \u2014 ${r.detail}`));
     }
   }
   return ok ? 0 : 1;
@@ -127678,13 +127841,13 @@ function runRemove(opts) {
   const env = pickEnv(file, opts.env);
   if (!env) return 1;
   if (!env.notify) {
-    console.log(import_picocolors48.default.dim(`No notify sink configured for "${env.name}".`));
+    console.log(import_picocolors50.default.dim(`No notify sink configured for "${env.name}".`));
     return 0;
   }
   delete env.notify;
   writeLocalConfig(loc.root, file);
-  console.log(import_picocolors48.default.green(`\u2713 Removed notify sink from "${env.name}".`));
-  console.log(import_picocolors48.default.dim("  (Any stored signing secret remains in .horus/secrets.local.json \u2014 remove it with `horus secrets` if needed.)"));
+  console.log(import_picocolors50.default.green(`\u2713 Removed notify sink from "${env.name}".`));
+  console.log(import_picocolors50.default.dim("  (Any stored signing secret remains in .horus/secrets.local.json \u2014 remove it with `horus secrets` if needed.)"));
   return 0;
 }
 async function runNotify(sub, opts) {
@@ -127700,7 +127863,7 @@ async function runNotify(sub, opts) {
     case "clear":
       return runRemove(opts);
     default:
-      console.error(import_picocolors48.default.red(`Unknown subcommand "${sub}". Use: set | show | test | remove.`));
+      console.error(import_picocolors50.default.red(`Unknown subcommand "${sub}". Use: set | show | test | remove.`));
       return 1;
   }
 }
@@ -127708,7 +127871,7 @@ async function runNotify(sub, opts) {
 // ../../packages/cli/src/commands/secrets.ts
 init_cjs_shims();
 var import_node_fs25 = require("fs");
-var import_picocolors49 = __toESM(require_picocolors(), 1);
+var import_picocolors51 = __toESM(require_picocolors(), 1);
 init_src();
 function locate2(cwd = process.cwd()) {
   const root = findRepoRoot(cwd) ?? cwd;
@@ -127729,37 +127892,37 @@ function countStoredSecrets(root) {
 function runSecretsStatus(opts = {}) {
   const { root, configPath, exists: exists2 } = locate2(opts.cwd);
   const key = masterKeyStatus();
-  console.log(import_picocolors49.default.bold("\nMaster key"));
+  console.log(import_picocolors51.default.bold("\nMaster key"));
   console.log(
-    key.available ? `  ${import_picocolors49.default.green("\u25CF")} ${key.detail}` : `  ${import_picocolors49.default.dim("\u25CB")} ${key.detail}`
+    key.available ? `  ${import_picocolors51.default.green("\u25CF")} ${key.detail}` : `  ${import_picocolors51.default.dim("\u25CB")} ${key.detail}`
   );
   const stored = countStoredSecrets(root);
-  console.log(import_picocolors49.default.bold("\nEncrypted secrets"));
-  console.log(`  ${stored} stored \u2192 ${import_picocolors49.default.dim(localSecretsPath(root))}`);
+  console.log(import_picocolors51.default.bold("\nEncrypted secrets"));
+  console.log(`  ${stored} stored \u2192 ${import_picocolors51.default.dim(localSecretsPath(root))}`);
   if (stored > 0) {
     const { warnings } = decryptConnectorSecrets(root);
     if (warnings.length > 0) {
-      console.log(import_picocolors49.default.yellow(`  \u26A0 ${warnings.length} cannot be decrypted with the current key:`));
-      for (const w4 of warnings) console.log(import_picocolors49.default.dim(`    - ${w4}`));
+      console.log(import_picocolors51.default.yellow(`  \u26A0 ${warnings.length} cannot be decrypted with the current key:`));
+      for (const w4 of warnings) console.log(import_picocolors51.default.dim(`    - ${w4}`));
     } else {
-      console.log(import_picocolors49.default.dim("  all decrypt cleanly with the current key"));
+      console.log(import_picocolors51.default.dim("  all decrypt cleanly with the current key"));
     }
   }
-  console.log(import_picocolors49.default.bold("\nPlaintext in config.json"));
+  console.log(import_picocolors51.default.bold("\nPlaintext in config.json"));
   if (!exists2) {
-    console.log(import_picocolors49.default.dim("  no .horus/config.json found"));
+    console.log(import_picocolors51.default.dim("  no .horus/config.json found"));
   } else {
     const plaintext = findPlaintextConnectorSecrets(readLocalConfig(configPath).project);
     if (plaintext.length === 0) {
-      console.log(`  ${import_picocolors49.default.green("\u2713")} none \u2014 config carries no credentials`);
+      console.log(`  ${import_picocolors51.default.green("\u2713")} none \u2014 config carries no credentials`);
     } else {
-      console.log(import_picocolors49.default.yellow(`  \u26A0 ${plaintext.length} plaintext secret(s) \u2014 run \`horus secrets migrate\`:`));
-      for (const p5 of plaintext) console.log(import_picocolors49.default.dim(`    - ${p5}`));
+      console.log(import_picocolors51.default.yellow(`  \u26A0 ${plaintext.length} plaintext secret(s) \u2014 run \`horus secrets migrate\`:`));
+      for (const p5 of plaintext) console.log(import_picocolors51.default.dim(`    - ${p5}`));
     }
   }
-  console.log(import_picocolors49.default.bold("\nGitignore"));
+  console.log(import_picocolors51.default.bold("\nGitignore"));
   console.log(
-    isHorusGitignored(root) ? `  ${import_picocolors49.default.green("\u2713")} .horus/ is gitignored` : import_picocolors49.default.yellow("  \u26A0 .horus/ is NOT gitignored \u2014 run `horus secrets migrate` or add `.horus/` to .gitignore")
+    isHorusGitignored(root) ? `  ${import_picocolors51.default.green("\u2713")} .horus/ is gitignored` : import_picocolors51.default.yellow("  \u26A0 .horus/ is NOT gitignored \u2014 run `horus secrets migrate` or add `.horus/` to .gitignore")
   );
   console.log("");
   return 0;
@@ -127767,31 +127930,31 @@ function runSecretsStatus(opts = {}) {
 function runSecretsMigrate(opts = {}) {
   const { root, configPath, exists: exists2 } = locate2(opts.cwd);
   if (!exists2) {
-    console.error(import_picocolors49.default.red(`No .horus/config.json found at ${configPath}.`));
-    console.error(import_picocolors49.default.dim("  Run `horus init` in this repo first."));
+    console.error(import_picocolors51.default.red(`No .horus/config.json found at ${configPath}.`));
+    console.error(import_picocolors51.default.dim("  Run `horus init` in this repo first."));
     return 1;
   }
   const file = readLocalConfig(configPath);
   const plaintext = findPlaintextConnectorSecrets(file.project);
   ensureProjectGitignore(root);
   if (plaintext.length === 0) {
-    console.log(`${import_picocolors49.default.green("\u2713")} No plaintext connector secrets in config.json \u2014 nothing to migrate.`);
+    console.log(`${import_picocolors51.default.green("\u2713")} No plaintext connector secrets in config.json \u2014 nothing to migrate.`);
     if (!isHorusGitignored(root)) {
-      console.log(import_picocolors49.default.dim("  Ensured `.horus/` is gitignored."));
+      console.log(import_picocolors51.default.dim("  Ensured `.horus/` is gitignored."));
     }
     return 0;
   }
   if (opts.dryRun) {
-    console.log(import_picocolors49.default.bold(`Would migrate ${plaintext.length} plaintext secret(s) \u2192 encrypted store:`));
-    for (const p5 of plaintext) console.log(import_picocolors49.default.dim(`  - ${p5}`));
-    console.log(import_picocolors49.default.dim("\n  Re-run without --dry-run to apply."));
+    console.log(import_picocolors51.default.bold(`Would migrate ${plaintext.length} plaintext secret(s) \u2192 encrypted store:`));
+    for (const p5 of plaintext) console.log(import_picocolors51.default.dim(`  - ${p5}`));
+    console.log(import_picocolors51.default.dim("\n  Re-run without --dry-run to apply."));
     return 0;
   }
   let keyResult;
   try {
     keyResult = ensureMasterKey();
   } catch (err2) {
-    console.error(import_picocolors49.default.red(err2.message));
+    console.error(import_picocolors51.default.red(err2.message));
     return 1;
   }
   const project = file.project;
@@ -127813,13 +127976,13 @@ function runSecretsMigrate(opts = {}) {
     }
   }
   writeLocalConfig(root, file);
-  console.log(`${import_picocolors49.default.green("\u2713")} Migrated ${migrated} secret(s) \u2192 ${import_picocolors49.default.dim(localSecretsPath(root))}`);
-  console.log(import_picocolors49.default.dim(`  master key: ${masterKeyStatus().detail}`));
-  console.log(import_picocolors49.default.dim("  config.json now carries no credentials."));
-  if (keyResult.warning) console.warn(import_picocolors49.default.yellow(`
+  console.log(`${import_picocolors51.default.green("\u2713")} Migrated ${migrated} secret(s) \u2192 ${import_picocolors51.default.dim(localSecretsPath(root))}`);
+  console.log(import_picocolors51.default.dim(`  master key: ${masterKeyStatus().detail}`));
+  console.log(import_picocolors51.default.dim("  config.json now carries no credentials."));
+  if (keyResult.warning) console.warn(import_picocolors51.default.yellow(`
 \u26A0 ${keyResult.warning}`));
   console.log(
-    import_picocolors49.default.dim(
+    import_picocolors51.default.dim(
       "\n  If config.json was ever committed, scrub the old secret from history:\n    git rm --cached .horus/config.json   # if tracked\n    # then rotate the exposed credential at its provider."
     )
   );
@@ -127828,20 +127991,20 @@ function runSecretsMigrate(opts = {}) {
 function runSecretsKey(opts = {}) {
   const status = masterKeyStatus();
   if (!status.available) {
-    console.log(import_picocolors49.default.dim("No master key yet \u2014 created on first `horus connect` or `horus secrets migrate`."));
+    console.log(import_picocolors51.default.dim("No master key yet \u2014 created on first `horus connect` or `horus secrets migrate`."));
     return 0;
   }
   console.log(`Master key source: ${status.detail}`);
   if (!opts.show) {
-    console.log(import_picocolors49.default.dim("  Pass --show to print the key (base64) for CI use (HORUS_SECRET_KEY)."));
+    console.log(import_picocolors51.default.dim("  Pass --show to print the key (base64) for CI use (HORUS_SECRET_KEY)."));
     return 0;
   }
   const key = getMasterKeyForRead();
   if (!key) {
-    console.error(import_picocolors49.default.red("Could not read the master key."));
+    console.error(import_picocolors51.default.red("Could not read the master key."));
     return 1;
   }
-  console.warn(import_picocolors49.default.yellow("\u26A0 Treat this as a credential. Anyone with it can decrypt your connector secrets."));
+  console.warn(import_picocolors51.default.yellow("\u26A0 Treat this as a credential. Anyone with it can decrypt your connector secrets."));
   console.log(`
 export HORUS_SECRET_KEY=${key.toString("base64")}
 `);
@@ -127854,7 +128017,7 @@ var import_node_child_process11 = require("child_process");
 var import_node_fs26 = require("fs");
 var import_node_util7 = require("util");
 var import_node_path28 = require("path");
-var import_picocolors50 = __toESM(require_picocolors(), 1);
+var import_picocolors52 = __toESM(require_picocolors(), 1);
 init_src();
 var execFileAsync4 = (0, import_node_util7.promisify)(import_node_child_process11.execFile);
 var unlinkAsync = (0, import_node_util7.promisify)(import_node_fs26.unlink);
@@ -127873,19 +128036,19 @@ async function runStop(opts) {
     const root = findRepoRoot(cwd) ?? cwd;
     const hostUrl = readSourceHostUrl(root);
     if (!hostUrl) {
-      console.log(import_picocolors50.default.dim("No source-intelligence host found for this repo (.horus/source/host.json absent)."));
+      console.log(import_picocolors52.default.dim("No source-intelligence host found for this repo (.horus/source/host.json absent)."));
       return 0;
     }
     return await stopHost(root, hostUrl);
   } catch (err2) {
-    console.error(import_picocolors50.default.red(err2.message));
+    console.error(import_picocolors52.default.red(err2.message));
     return 1;
   }
 }
 async function stopHost(root, hostUrl) {
   const port = extractPort(hostUrl);
   if (port === null) {
-    console.error(import_picocolors50.default.red(`Cannot determine port from host URL: ${hostUrl}`));
+    console.error(import_picocolors52.default.red(`Cannot determine port from host URL: ${hostUrl}`));
     return 1;
   }
   const healthy = await isHostHealthy(hostUrl);
@@ -127895,12 +128058,12 @@ async function stopHost(root, hostUrl) {
     if (!wrapperAlive) {
       const res = await stopBackendServerPid(root, port);
       if (res === "failed") return 1;
-      if (res !== "stopped") console.log(import_picocolors50.default.dim(`Host ${hostUrl} is already stopped.`));
+      if (res !== "stopped") console.log(import_picocolors52.default.dim(`Host ${hostUrl} is already stopped.`));
       await cleanupSpawnedRecord(root);
       return 0;
     }
     console.log(
-      import_picocolors50.default.dim(
+      import_picocolors52.default.dim(
         `Host ${hostUrl} is unreachable but pid ${owned.pid} is still running \u2014 terminating a stuck host.`
       )
     );
@@ -127908,7 +128071,7 @@ async function stopHost(root, hostUrl) {
   const spawned = readSpawnedHost(root);
   if (spawned === null) {
     console.error(
-      import_picocolors50.default.red(
+      import_picocolors52.default.red(
         `No ownership record found (.horus/${SPAWNED_HOST_FILE2} absent). Horus will not stop a host it did not spawn.`
       )
     );
@@ -127916,12 +128079,12 @@ async function stopHost(root, hostUrl) {
   }
   const recordError = validateSpawnedRecord(spawned);
   if (recordError !== null) {
-    console.error(import_picocolors50.default.red(`Ownership record is malformed: ${recordError}. Aborting for safety.`));
+    console.error(import_picocolors52.default.red(`Ownership record is malformed: ${recordError}. Aborting for safety.`));
     return 1;
   }
   if (spawned.port !== port) {
     console.error(
-      import_picocolors50.default.red(
+      import_picocolors52.default.red(
         `Ownership record port (${spawned.port}) does not match host URL port (${port}). Record may be stale.`
       )
     );
@@ -127929,7 +128092,7 @@ async function stopHost(root, hostUrl) {
   }
   if (spawned.root !== root) {
     console.error(
-      import_picocolors50.default.red(
+      import_picocolors52.default.red(
         `Ownership record root (${spawned.root}) does not match resolved root (${root}). Record may be stale.`
       )
     );
@@ -127940,14 +128103,14 @@ async function stopHost(root, hostUrl) {
     const res = await stopBackendServerPid(root, port);
     if (res === "failed") return 1;
     if (res !== "stopped") {
-      console.log(import_picocolors50.default.dim(`Process pid ${spawned.pid} is no longer running \u2014 already stopped.`));
+      console.log(import_picocolors52.default.dim(`Process pid ${spawned.pid} is no longer running \u2014 already stopped.`));
     }
     await cleanupSpawnedRecord(root);
     return 0;
   }
   if (!isOwnHostProcess(spawned.pid, port, root, info2.args)) {
     console.error(
-      import_picocolors50.default.red(
+      import_picocolors52.default.red(
         `Pid ${spawned.pid} args do not match "horus-source host --port ${port}". Got: "${info2.args.slice(0, 120)}". Aborting for safety.`
       )
     );
@@ -127956,12 +128119,12 @@ async function stopHost(root, hostUrl) {
   const startTs = new Date(spawned.startedAt).getTime();
   const recordedAgeS = Math.round((Date.now() - startTs) / 1e3);
   if (!Number.isFinite(info2.etimeSeconds)) {
-    console.error(import_picocolors50.default.red(`Could not read elapsed time for pid ${spawned.pid}. Aborting for safety.`));
+    console.error(import_picocolors52.default.red(`Could not read elapsed time for pid ${spawned.pid}. Aborting for safety.`));
     return 1;
   }
   if (Math.abs(info2.etimeSeconds - recordedAgeS) > START_TIME_TOLERANCE_S) {
     console.error(
-      import_picocolors50.default.red(
+      import_picocolors52.default.red(
         `Pid ${spawned.pid} age mismatch: record says ~${recordedAgeS}s, process reports ${info2.etimeSeconds}s elapsed. Possible PID reuse \u2014 aborting for safety.`
       )
     );
@@ -127971,17 +128134,17 @@ async function stopHost(root, hostUrl) {
   try {
     terminated = await terminatePid(spawned.pid);
   } catch (err2) {
-    console.error(import_picocolors50.default.red(`Failed to signal pid ${spawned.pid}: ${err2.message}`));
+    console.error(import_picocolors52.default.red(`Failed to signal pid ${spawned.pid}: ${err2.message}`));
     return 1;
   }
   if (!terminated) {
     console.error(
-      import_picocolors50.default.red(`Host pid ${spawned.pid} did not exit even after SIGKILL \u2014 could not reclaim the port.`)
+      import_picocolors52.default.red(`Host pid ${spawned.pid} did not exit even after SIGKILL \u2014 could not reclaim the port.`)
     );
     return 1;
   }
   console.log(
-    `${import_picocolors50.default.green("\u2713")} Stopped source-intelligence host ` + import_picocolors50.default.dim(`(pid ${spawned.pid}, port ${port})`) + ` for ${root}`
+    `${import_picocolors52.default.green("\u2713")} Stopped source-intelligence host ` + import_picocolors52.default.dim(`(pid ${spawned.pid}, port ${port})`) + ` for ${root}`
   );
   if (await stopBackendServerPid(root, port) === "failed") return 1;
   await cleanupSpawnedRecord(root);
@@ -128016,7 +128179,7 @@ async function stopBackendServerPid(root, port) {
   if (info2 === null) return "none";
   if (!isOwnHostProcess(rec.pid, port, root, info2.args)) {
     console.log(
-      import_picocolors50.default.dim(
+      import_picocolors52.default.dim(
         `Host pid ${rec.pid} is now an unrelated process (stale source/host.json / PID reuse) \u2014 host already gone.`
       )
     );
@@ -128026,17 +128189,17 @@ async function stopBackendServerPid(root, port) {
   try {
     terminated = await terminatePid(rec.pid);
   } catch (err2) {
-    console.error(import_picocolors50.default.red(`Failed to signal pid ${rec.pid}: ${err2.message}`));
+    console.error(import_picocolors52.default.red(`Failed to signal pid ${rec.pid}: ${err2.message}`));
     return "failed";
   }
   if (!terminated) {
     console.error(
-      import_picocolors50.default.red(`Host pid ${rec.pid} did not exit even after SIGKILL \u2014 could not reclaim the port.`)
+      import_picocolors52.default.red(`Host pid ${rec.pid} did not exit even after SIGKILL \u2014 could not reclaim the port.`)
     );
     return "failed";
   }
   console.log(
-    `${import_picocolors50.default.green("\u2713")} Stopped source-intelligence host ` + import_picocolors50.default.dim(`(pid ${rec.pid}, port ${port})`) + ` for ${root}`
+    `${import_picocolors52.default.green("\u2713")} Stopped source-intelligence host ` + import_picocolors52.default.dim(`(pid ${rec.pid}, port ${port})`) + ` for ${root}`
   );
   return "stopped";
 }
@@ -128044,7 +128207,7 @@ async function stopAll() {
   const registry2 = readRegistry();
   const projects2 = Object.entries(registry2.projects);
   if (projects2.length === 0) {
-    console.log(import_picocolors50.default.dim("No registered projects."));
+    console.log(import_picocolors52.default.dim("No registered projects."));
     return 0;
   }
   let stopped = 0;
@@ -128056,17 +128219,17 @@ async function stopAll() {
     if (!healthy && readSpawnedHost(entry.root) === null && readSourceHostPid(entry.root) === null) {
       continue;
     }
-    console.log(`  Stopping ${import_picocolors50.default.bold(name2)} ${import_picocolors50.default.dim(`(${hostUrl})`)}`);
+    console.log(`  Stopping ${import_picocolors52.default.bold(name2)} ${import_picocolors52.default.dim(`(${hostUrl})`)}`);
     const code = await stopHost(entry.root, hostUrl);
     if (code === 0) stopped++;
     else failed++;
   }
   if (stopped === 0 && failed === 0) {
-    console.log(import_picocolors50.default.dim("No running source-intelligence hosts found."));
+    console.log(import_picocolors52.default.dim("No running source-intelligence hosts found."));
   } else {
     console.log(
       `
-Stopped ${stopped} host(s)${failed > 0 ? import_picocolors50.default.red(`, ${failed} failed`) : ""}.`
+Stopped ${stopped} host(s)${failed > 0 ? import_picocolors52.default.red(`, ${failed} failed`) : ""}.`
     );
   }
   return failed > 0 ? 1 : 0;
@@ -128154,7 +128317,7 @@ function extractPort(hostUrl) {
 
 // ../../packages/cli/src/commands/hosts.ts
 init_cjs_shims();
-var import_picocolors51 = __toESM(require_picocolors(), 1);
+var import_picocolors53 = __toESM(require_picocolors(), 1);
 var import_node_path29 = require("path");
 init_src();
 
@@ -128266,14 +128429,14 @@ async function runHosts(opts = {}) {
   for (const row of rows) {
     if (row.hostUrl === null) continue;
     printedAny = true;
-    const status = row.live ? import_picocolors51.default.green("\u25CF running") : row.healthy && row.servesRepo === false ? import_picocolors51.default.yellow("\u25CF foreign \u2014 port serves another repo") : import_picocolors51.default.red("\u25CF stopped");
+    const status = row.live ? import_picocolors53.default.green("\u25CF running") : row.healthy && row.servesRepo === false ? import_picocolors53.default.yellow("\u25CF foreign \u2014 port serves another repo") : import_picocolors53.default.red("\u25CF stopped");
     const port = row.port ?? "?";
     console.log(
-      `  ${status}  ${import_picocolors51.default.bold(row.name.padEnd(24))} port ${String(port).padEnd(6)} ${import_picocolors51.default.dim(row.root)}`
+      `  ${status}  ${import_picocolors53.default.bold(row.name.padEnd(24))} port ${String(port).padEnd(6)} ${import_picocolors53.default.dim(row.root)}`
     );
   }
   const noHost = rows.filter((r) => r.hostUrl === null);
-  for (const row of noHost) console.log(`  ${import_picocolors51.default.dim("\u25CB no host")}   ${import_picocolors51.default.dim(row.name)}`);
+  for (const row of noHost) console.log(`  ${import_picocolors53.default.dim("\u25CB no host")}   ${import_picocolors53.default.dim(row.name)}`);
   if (printedAny || noHost.length > 0) console.log("");
   const claimedPids = /* @__PURE__ */ new Set();
   for (const [, entry] of projects2) {
@@ -128286,37 +128449,37 @@ async function runHosts(opts = {}) {
   let reapFailed = 0;
   if (orphans.length > 0) {
     console.log(
-      import_picocolors51.default.yellow(`  \u26A0 ${orphans.length} orphaned source host(s) \u2014 no registered repo owns them:`)
+      import_picocolors53.default.yellow(`  \u26A0 ${orphans.length} orphaned source host(s) \u2014 no registered repo owns them:`)
     );
-    for (const o5 of orphans) console.log(import_picocolors51.default.dim(`      pid ${o5.pid}  port ${o5.port}`));
+    for (const o5 of orphans) console.log(import_picocolors53.default.dim(`      pid ${o5.pid}  port ${o5.port}`));
     if (opts.reap) {
       let reaped = 0;
       for (const o5 of orphans) {
         if (await reapPid(o5.pid)) {
           reaped++;
-          console.log(`  ${import_picocolors51.default.green("\u2713")} reaped pid ${o5.pid} ${import_picocolors51.default.dim(`(port ${o5.port})`)}`);
+          console.log(`  ${import_picocolors53.default.green("\u2713")} reaped pid ${o5.pid} ${import_picocolors53.default.dim(`(port ${o5.port})`)}`);
         } else {
           reapFailed++;
-          console.log(import_picocolors51.default.red(`  \u2717 could not stop pid ${o5.pid} (port ${o5.port})`));
+          console.log(import_picocolors53.default.red(`  \u2717 could not stop pid ${o5.pid} (port ${o5.port})`));
         }
       }
-      console.log(import_picocolors51.default.dim(`  Reaped ${reaped}/${orphans.length} orphan(s).`));
+      console.log(import_picocolors53.default.dim(`  Reaped ${reaped}/${orphans.length} orphan(s).`));
     } else {
-      console.log(import_picocolors51.default.dim("  Run `horus hosts --reap` to stop them."));
+      console.log(import_picocolors53.default.dim("  Run `horus hosts --reap` to stop them."));
     }
     console.log("");
   }
   if (projects2.length === 0 && orphans.length === 0) {
-    console.log(import_picocolors51.default.dim("No registered projects. Run `horus init` in a repo first."));
+    console.log(import_picocolors53.default.dim("No registered projects. Run `horus init` in a repo first."));
     return 0;
   }
   if (!printedAny && orphans.length === 0) {
-    console.log(import_picocolors51.default.dim("No source-intelligence hosts found. Run `horus init` to start one."));
+    console.log(import_picocolors53.default.dim("No source-intelligence hosts found. Run `horus init` to start one."));
     return 0;
   }
   const running = countDistinctLiveHosts(rows);
   console.log(
-    import_picocolors51.default.dim(
+    import_picocolors53.default.dim(
       `${running} running${orphans.length ? ` \xB7 ${orphans.length} orphan(s)` : ""} \xB7 horus hosts --reap to clear orphans \xB7 horus stop --all to stop everything`
     )
   );
@@ -128333,7 +128496,7 @@ function extractPort2(hostUrl) {
 
 // ../../packages/cli/src/commands/doctor.ts
 init_cjs_shims();
-var import_picocolors52 = __toESM(require_picocolors(), 1);
+var import_picocolors54 = __toESM(require_picocolors(), 1);
 init_src();
 var CONNECTOR_CHECKS = {
   // Elasticsearch (runtime logs)
@@ -128473,9 +128636,9 @@ var CONNECTOR_CHECKS = {
 };
 var DOCTOR_CONNECTOR_KEYS = Object.keys(CONNECTOR_CHECKS);
 function mark2(status) {
-  if (status === "pass") return import_picocolors52.default.green("\u2713");
-  if (status === "warn") return import_picocolors52.default.yellow("~");
-  return import_picocolors52.default.red("\u2717");
+  if (status === "pass") return import_picocolors54.default.green("\u2713");
+  if (status === "warn") return import_picocolors54.default.yellow("~");
+  return import_picocolors54.default.red("\u2717");
 }
 async function runDoctor(opts) {
   const cwd = opts?.cwd ?? process.cwd();
@@ -128633,15 +128796,15 @@ async function runDoctor(opts) {
     write(JSON.stringify(output, null, 2));
     return hasFailure ? 1 : 0;
   }
-  write(import_picocolors52.default.bold("\nHorus readiness check\n"));
+  write(import_picocolors54.default.bold("\nHorus readiness check\n"));
   for (const check2 of checks) {
-    write(`  ${mark2(check2.status)} ${import_picocolors52.default.bold(check2.label.padEnd(26))}  ${import_picocolors52.default.dim(check2.detail)}`);
+    write(`  ${mark2(check2.status)} ${import_picocolors54.default.bold(check2.label.padEnd(26))}  ${import_picocolors54.default.dim(check2.detail)}`);
     if (check2.next) {
-      write(`    ${import_picocolors52.default.dim("\u2192 " + check2.next)}`);
+      write(`    ${import_picocolors54.default.dim("\u2192 " + check2.next)}`);
     }
   }
   write("");
-  write(import_picocolors52.default.dim("  Hit a bug or a missing capability? Report it:  horus report"));
+  write(import_picocolors54.default.dim("  Hit a bug or a missing capability? Report it:  horus report"));
   write("");
   return hasFailure ? 1 : 0;
 }
@@ -128649,17 +128812,17 @@ async function runDoctor(opts) {
 // ../../packages/cli/src/commands/providers-doctor.ts
 init_cjs_shims();
 var import_node_child_process13 = require("child_process");
-var import_picocolors53 = __toESM(require_picocolors(), 1);
+var import_picocolors55 = __toESM(require_picocolors(), 1);
 init_src();
 function statusMark(status) {
-  if (status === "ready") return import_picocolors53.default.green("\u2713");
-  if (status === "installed") return import_picocolors53.default.yellow("~");
-  return import_picocolors53.default.red("\u2717");
+  if (status === "ready") return import_picocolors55.default.green("\u2713");
+  if (status === "installed") return import_picocolors55.default.yellow("~");
+  return import_picocolors55.default.red("\u2717");
 }
 function statusLabel(status) {
-  if (status === "ready") return import_picocolors53.default.green("ready");
-  if (status === "installed") return import_picocolors53.default.yellow("installed (not configured)");
-  return import_picocolors53.default.dim("not found on PATH");
+  if (status === "ready") return import_picocolors55.default.green("ready");
+  if (status === "installed") return import_picocolors55.default.yellow("installed (not configured)");
+  return import_picocolors55.default.dim("not found on PATH");
 }
 function detectBinary(id) {
   const result = (0, import_node_child_process13.spawnSync)(id, ["--version"], { stdio: "pipe", timeout: 2e3 });
@@ -128676,7 +128839,7 @@ async function runProvidersDoctorCommand(opts) {
   const registry2 = opts?.registry ?? DEFAULT_LOCAL_PROVIDER_REGISTRY;
   const write = opts?.write ?? ((line2) => console.log(line2));
   const results = buildProviderResults(registry2, opts?._detect);
-  write(import_picocolors53.default.bold("\nLocal AI providers\n"));
+  write(import_picocolors55.default.bold("\nLocal AI providers\n"));
   for (const result of results) {
     const descriptor = registry2.get(result.id);
     const name2 = descriptor?.displayName ?? result.id;
@@ -128684,11 +128847,11 @@ async function runProvidersDoctorCommand(opts) {
       `  ${statusMark(result.status)} ${result.id.padEnd(8)}  ${name2.padEnd(22)}  ${statusLabel(result.status)}`
     );
     if (result.status !== "ready" && result.detail) {
-      write(`    ${import_picocolors53.default.dim("\u2192 " + result.detail)}`);
+      write(`    ${import_picocolors55.default.dim("\u2192 " + result.detail)}`);
     }
   }
   write("");
-  write(import_picocolors53.default.bold("Cloud AI providers\n"));
+  write(import_picocolors55.default.bold("Cloud AI providers\n"));
   let source = null;
   if (opts?._anthropicKey !== void 0) {
     source = opts._anthropicKey ? "env" : null;
@@ -128703,18 +128866,18 @@ async function runProvidersDoctorCommand(opts) {
   }
   if (source === "config") {
     write(
-      `  ${import_picocolors53.default.green("\u2713")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors53.default.green("configured (local .horus config)")}`
+      `  ${import_picocolors55.default.green("\u2713")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors55.default.green("configured (local .horus config)")}`
     );
   } else if (source === "env") {
     write(
-      `  ${import_picocolors53.default.green("\u2713")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors53.default.green("configured (ANTHROPIC_API_KEY env)")}`
+      `  ${import_picocolors55.default.green("\u2713")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors55.default.green("configured (ANTHROPIC_API_KEY env)")}`
     );
   } else {
     write(
-      `  ${import_picocolors53.default.red("\u2717")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors53.default.dim("not configured")}`
+      `  ${import_picocolors55.default.red("\u2717")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors55.default.dim("not configured")}`
     );
     write(
-      `    ${import_picocolors53.default.dim("\u2192 run `horus connect ai` (or set ANTHROPIC_API_KEY) to enable `horus investigate --ai`")}`
+      `    ${import_picocolors55.default.dim("\u2192 run `horus connect ai` (or set ANTHROPIC_API_KEY) to enable `horus investigate --ai`")}`
     );
   }
   write("");
@@ -128723,7 +128886,7 @@ async function runProvidersDoctorCommand(opts) {
 
 // ../../packages/cli/src/commands/readiness.ts
 init_cjs_shims();
-var import_picocolors54 = __toESM(require_picocolors(), 1);
+var import_picocolors56 = __toESM(require_picocolors(), 1);
 init_src();
 var READINESS_AI_CONTRACT = `Provide a clearly separated AI readiness summary with:
 
@@ -128746,9 +128909,9 @@ Recommended next action
 Confidence / gaps
 - Which checks Horus could verify vs. which require manual confirmation`;
 function mark3(status) {
-  if (status === "pass") return import_picocolors54.default.green("\u2713");
-  if (status === "warn") return import_picocolors54.default.yellow("~");
-  return import_picocolors54.default.red("\u2717");
+  if (status === "pass") return import_picocolors56.default.green("\u2713");
+  if (status === "warn") return import_picocolors56.default.yellow("~");
+  return import_picocolors56.default.red("\u2717");
 }
 async function runReadiness(opts) {
   const cwd = opts?.cwd ?? process.cwd();
@@ -128955,20 +129118,20 @@ async function runReadiness(opts) {
   }
   const blockingChecks = checks.filter((c4) => c4.blocking);
   const optionalChecks = checks.filter((c4) => !c4.blocking);
-  write(import_picocolors54.default.bold("\nHorus release readiness\n"));
-  write(import_picocolors54.default.bold("  Blocking"));
+  write(import_picocolors56.default.bold("\nHorus release readiness\n"));
+  write(import_picocolors56.default.bold("  Blocking"));
   for (const check2 of blockingChecks) {
-    write(`    ${mark3(check2.status)} ${import_picocolors54.default.bold(check2.label.padEnd(22))}  ${import_picocolors54.default.dim(check2.detail)}`);
+    write(`    ${mark3(check2.status)} ${import_picocolors56.default.bold(check2.label.padEnd(22))}  ${import_picocolors56.default.dim(check2.detail)}`);
     if (check2.next) {
-      write(`      ${import_picocolors54.default.dim("\u2192 " + check2.next)}`);
+      write(`      ${import_picocolors56.default.dim("\u2192 " + check2.next)}`);
     }
   }
   write("");
-  write(import_picocolors54.default.bold("  Optional"));
+  write(import_picocolors56.default.bold("  Optional"));
   for (const check2 of optionalChecks) {
-    write(`    ${mark3(check2.status)} ${import_picocolors54.default.bold(check2.label.padEnd(22))}  ${import_picocolors54.default.dim(check2.detail)}`);
+    write(`    ${mark3(check2.status)} ${import_picocolors56.default.bold(check2.label.padEnd(22))}  ${import_picocolors56.default.dim(check2.detail)}`);
     if (check2.next) {
-      write(`      ${import_picocolors54.default.dim("\u2192 " + check2.next)}`);
+      write(`      ${import_picocolors56.default.dim("\u2192 " + check2.next)}`);
     }
   }
   write("");
@@ -128976,21 +129139,21 @@ async function runReadiness(opts) {
   const optionalWarns = optionalChecks.filter((c4) => c4.status === "warn").length;
   if (blockingFails.length === 0) {
     if (optionalWarns === 0) {
-      write(import_picocolors54.default.green("  Ready for demo/release."));
+      write(import_picocolors56.default.green("  Ready for demo/release."));
     } else {
       write(
-        import_picocolors54.default.yellow(
+        import_picocolors56.default.yellow(
           `  Ready for a basic demo. ${optionalWarns} optional item(s) not configured \u2014 investigation evidence will be limited.`
         )
       );
     }
   } else {
     write(
-      import_picocolors54.default.red(
+      import_picocolors56.default.red(
         `  Not ready. ${blockingFails.length} blocking item(s) must be resolved before demo/release.`
       )
     );
-    write(import_picocolors54.default.dim("  Re-run `horus readiness` after resolving the items above."));
+    write(import_picocolors56.default.dim("  Re-run `horus readiness` after resolving the items above."));
   }
   write("");
   if (opts?.ai) {
@@ -129005,7 +129168,7 @@ async function runReadiness(opts) {
     });
     console.log("\n" + renderInterpretation(result));
     if (!result.ok) {
-      console.error(import_picocolors54.default.yellow(`[ai] ${result.warning}`));
+      console.error(import_picocolors56.default.yellow(`[ai] ${result.warning}`));
     }
   }
   return blockingFails.length > 0 ? 1 : 0;
@@ -129013,7 +129176,7 @@ async function runReadiness(opts) {
 
 // ../../packages/cli/src/commands/db.ts
 init_cjs_shims();
-var import_picocolors55 = __toESM(require_picocolors(), 1);
+var import_picocolors57 = __toESM(require_picocolors(), 1);
 function redactUrl2(url) {
   try {
     const u3 = new URL(url);
@@ -129027,33 +129190,33 @@ async function runDbImport(opts) {
   const from = opts.from ?? process.env["DATABASE_URL"];
   if (!from || from.trim() === "") {
     console.error(
-      import_picocolors55.default.red("No source database to import from.") + import_picocolors55.default.dim("  Pass --from <postgres-url> (or set DATABASE_URL).")
+      import_picocolors57.default.red("No source database to import from.") + import_picocolors57.default.dim("  Pass --from <postgres-url> (or set DATABASE_URL).")
     );
     return 1;
   }
   const { db, sql: sql2 } = await openDb();
   try {
     console.log(
-      import_picocolors55.default.dim(`Importing from ${redactUrl2(from)} into the embedded database (${localDbPath()})\u2026`)
+      import_picocolors57.default.dim(`Importing from ${redactUrl2(from)} into the embedded database (${localDbPath()})\u2026`)
     );
     const counts = await importFromPostgres(from, db);
     const total = Object.values(counts).reduce((a2, b5) => a2 + b5, 0);
     for (const [table, n4] of Object.entries(counts)) {
-      console.log(`  ${import_picocolors55.default.bold(String(n4).padStart(6))}  ${table}`);
+      console.log(`  ${import_picocolors57.default.bold(String(n4).padStart(6))}  ${table}`);
     }
     console.log(
-      import_picocolors55.default.green(`\u2713 Imported ${total} row(s) from Postgres into the embedded database.`)
+      import_picocolors57.default.green(`\u2713 Imported ${total} row(s) from Postgres into the embedded database.`)
     );
     if (total === 0) {
-      console.log(import_picocolors55.default.dim("  (nothing to copy \u2014 the source had no investigation/memory rows)"));
+      console.log(import_picocolors57.default.dim("  (nothing to copy \u2014 the source had no investigation/memory rows)"));
     }
     return 0;
   } catch (err2) {
     if (err2 instanceof CloudDatabaseUrlError) {
-      console.error(import_picocolors55.default.red(err2.message));
+      console.error(import_picocolors57.default.red(err2.message));
       return 1;
     }
-    console.error(import_picocolors55.default.red(`Import failed: ${err2.message}`));
+    console.error(import_picocolors57.default.red(`Import failed: ${err2.message}`));
     return 1;
   } finally {
     await sql2.end();
@@ -129066,7 +129229,7 @@ var import_node_fs27 = require("fs");
 var import_node_path30 = require("path");
 var import_node_os11 = require("os");
 var import_promises3 = require("readline/promises");
-var import_picocolors56 = __toESM(require_picocolors(), 1);
+var import_picocolors58 = __toESM(require_picocolors(), 1);
 var SUPPORTED_TARGETS = [
   "claude",
   "codex",
@@ -129361,8 +129524,8 @@ async function confirm(message) {
 async function runSkillInstall(target, opts) {
   const log = opts.write ?? ((line2) => console.log(line2));
   if (!isValidTarget(target)) {
-    log(`${import_picocolors56.default.red("\u2717")} Unknown target: ${import_picocolors56.default.bold(target)}`);
-    log(import_picocolors56.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
+    log(`${import_picocolors58.default.red("\u2717")} Unknown target: ${import_picocolors58.default.bold(target)}`);
+    log(import_picocolors58.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
     return 1;
   }
   const outPath = getSkillInstallPath(target, { global: opts.global, cwd: opts.cwd });
@@ -129375,54 +129538,54 @@ async function runSkillInstall(target, opts) {
           `Found old flat skill file at ${legacyPath}. Replace it with the new directory layout?`
         );
         if (!confirmed) {
-          log(`${import_picocolors56.default.yellow("!")} Migration cancelled; existing skill left untouched.`);
-          log(import_picocolors56.default.dim("  Pass --force to replace without prompting."));
+          log(`${import_picocolors58.default.yellow("!")} Migration cancelled; existing skill left untouched.`);
+          log(import_picocolors58.default.dim("  Pass --force to replace without prompting."));
           return 1;
         }
       }
       try {
         (0, import_node_fs27.rmSync)(legacyPath);
-        log(`${import_picocolors56.default.yellow("!")} Replaced old flat skill file: ${legacyPath}`);
+        log(`${import_picocolors58.default.yellow("!")} Replaced old flat skill file: ${legacyPath}`);
       } catch (err2) {
         log(
-          `${import_picocolors56.default.red("\u2717")} Could not remove legacy skill file ${legacyPath}: ${err2.message}`
+          `${import_picocolors58.default.red("\u2717")} Could not remove legacy skill file ${legacyPath}: ${err2.message}`
         );
         return 1;
       }
     }
   }
   if ((0, import_node_fs27.existsSync)(outPath) && !opts.force) {
-    log(`${import_picocolors56.default.red("\u2717")} ${outPath} already exists`);
-    log(import_picocolors56.default.dim("  pass --force to overwrite"));
+    log(`${import_picocolors58.default.red("\u2717")} ${outPath} already exists`);
+    log(import_picocolors58.default.dim("  pass --force to overwrite"));
     return 1;
   }
   try {
     (0, import_node_fs27.mkdirSync)((0, import_node_path30.dirname)(outPath), { recursive: true });
     (0, import_node_fs27.writeFileSync)(outPath, content, "utf8");
   } catch (err2) {
-    log(`${import_picocolors56.default.red("\u2717")} Could not write ${outPath}: ${err2.message}`);
+    log(`${import_picocolors58.default.red("\u2717")} Could not write ${outPath}: ${err2.message}`);
     return 1;
   }
-  log(`${import_picocolors56.default.green("\u2713")} Horus skill installed \u2192 ${outPath}`);
+  log(`${import_picocolors58.default.green("\u2713")} Horus skill installed \u2192 ${outPath}`);
   if (target === "claude") {
-    log(import_picocolors56.default.dim("  Claude Code will load this skill automatically."));
-    log(import_picocolors56.default.dim("  Invoke it with: /horus"));
+    log(import_picocolors58.default.dim("  Claude Code will load this skill automatically."));
+    log(import_picocolors58.default.dim("  Invoke it with: /horus"));
   } else if (target === "gemini") {
-    log(import_picocolors56.default.dim("  Gemini CLI will load this context file automatically."));
+    log(import_picocolors58.default.dim("  Gemini CLI will load this context file automatically."));
   } else if (target === "cursor") {
-    log(import_picocolors56.default.dim("  Cursor will load this rule automatically."));
+    log(import_picocolors58.default.dim("  Cursor will load this rule automatically."));
   } else if (target === "codex") {
-    log(import_picocolors56.default.dim("  Codex CLI will load this file automatically."));
+    log(import_picocolors58.default.dim("  Codex CLI will load this file automatically."));
   } else {
-    log(import_picocolors56.default.dim(`  Copy or reference this file in your ${target} agent instructions.`));
+    log(import_picocolors58.default.dim(`  Copy or reference this file in your ${target} agent instructions.`));
   }
   return 0;
 }
 async function runSkillPrint(target, opts) {
   const log = opts.write ?? ((line2) => console.log(line2));
   if (!isValidTarget(target)) {
-    log(`${import_picocolors56.default.red("\u2717")} Unknown target: ${import_picocolors56.default.bold(target)}`);
-    log(import_picocolors56.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
+    log(`${import_picocolors58.default.red("\u2717")} Unknown target: ${import_picocolors58.default.bold(target)}`);
+    log(import_picocolors58.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
     return 1;
   }
   process.stdout.write(generateSkillContent(target));
@@ -129431,8 +129594,8 @@ async function runSkillPrint(target, opts) {
 async function runSkillPath(target, opts) {
   const log = opts.write ?? ((line2) => console.log(line2));
   if (!isValidTarget(target)) {
-    log(`${import_picocolors56.default.red("\u2717")} Unknown target: ${import_picocolors56.default.bold(target)}`);
-    log(import_picocolors56.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
+    log(`${import_picocolors58.default.red("\u2717")} Unknown target: ${import_picocolors58.default.bold(target)}`);
+    log(import_picocolors58.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
     return 1;
   }
   const outPath = getSkillInstallPath(target, { global: opts.global, cwd: opts.cwd });
@@ -129442,7 +129605,7 @@ async function runSkillPath(target, opts) {
 
 // ../../packages/cli/src/commands/login.ts
 init_cjs_shims();
-var import_picocolors57 = __toESM(require_picocolors(), 1);
+var import_picocolors59 = __toESM(require_picocolors(), 1);
 var sleep3 = (ms) => new Promise((resolve13) => setTimeout(resolve13, ms));
 async function loginWithToken(apiBaseUrl, token) {
   const client = new CloudClient(apiBaseUrl, token);
@@ -129458,19 +129621,19 @@ async function loginWithToken(apiBaseUrl, token) {
       }
     });
     console.log(
-      `${import_picocolors57.default.green("\u2713")} Logged in as ${import_picocolors57.default.bold(me3.user.primaryEmail)}. Run ${import_picocolors57.default.bold("horus cloud link")} to connect this repo.`
+      `${import_picocolors59.default.green("\u2713")} Logged in as ${import_picocolors59.default.bold(me3.user.primaryEmail)}. Run ${import_picocolors59.default.bold("horus cloud link")} to connect this repo.`
     );
     return 0;
   } catch (err2) {
     if (err2 instanceof CloudOfflineError) {
-      console.error(import_picocolors57.default.red(err2.message));
+      console.error(import_picocolors59.default.red(err2.message));
       return 1;
     }
     if (err2 instanceof CloudError && err2.status === 401) {
-      console.error(import_picocolors57.default.red("That token is not valid. Create a fresh one in the dashboard and try again."));
+      console.error(import_picocolors59.default.red("That token is not valid. Create a fresh one in the dashboard and try again."));
       return 1;
     }
-    console.error(import_picocolors57.default.red(`Login failed: ${err2.message}`));
+    console.error(import_picocolors59.default.red(`Login failed: ${err2.message}`));
     return 1;
   }
 }
@@ -129481,19 +129644,19 @@ async function loginWithBrowser(apiBaseUrl) {
     session = await client.startCliSession();
   } catch (err2) {
     if (err2 instanceof CloudOfflineError) {
-      console.error(import_picocolors57.default.red(err2.message));
+      console.error(import_picocolors59.default.red(err2.message));
       return 1;
     }
-    console.error(import_picocolors57.default.red(`Could not start login: ${err2.message}`));
+    console.error(import_picocolors59.default.red(`Could not start login: ${err2.message}`));
     return 1;
   }
   console.log("");
   console.log(`  To sign in, open this URL in your browser:`);
-  console.log(`    ${import_picocolors57.default.cyan(import_picocolors57.default.bold(session.verificationUri))}`);
+  console.log(`    ${import_picocolors59.default.cyan(import_picocolors59.default.bold(session.verificationUri))}`);
   console.log("");
-  console.log(`  and enter the code:  ${import_picocolors57.default.bold(session.userCode)}`);
+  console.log(`  and enter the code:  ${import_picocolors59.default.bold(session.userCode)}`);
   console.log("");
-  console.log(import_picocolors57.default.dim(`  Waiting for approval\u2026  (press Ctrl+C to cancel)`));
+  console.log(import_picocolors59.default.dim(`  Waiting for approval\u2026  (press Ctrl+C to cancel)`));
   openBrowser(session.verificationUriComplete);
   const deadline = Date.now() + session.expiresIn * 1e3;
   let intervalMs = Math.max(session.interval, 1) * 1e3;
@@ -129504,7 +129667,7 @@ async function loginWithBrowser(apiBaseUrl) {
       poll = await client.pollCliSession(session.deviceCode);
     } catch (err2) {
       if (err2 instanceof CloudOfflineError) {
-        console.error(import_picocolors57.default.red(`
+        console.error(import_picocolors59.default.red(`
 ${err2.message}`));
         return 1;
       }
@@ -129517,14 +129680,14 @@ ${err2.message}`));
         intervalMs += 2e3;
         break;
       case "denied":
-        console.error(import_picocolors57.default.red("\nLogin was denied in the browser."));
+        console.error(import_picocolors59.default.red("\nLogin was denied in the browser."));
         return 1;
       case "expired":
-        console.error(import_picocolors57.default.red("\nThis login request expired. Run `horus login` again."));
+        console.error(import_picocolors59.default.red("\nThis login request expired. Run `horus login` again."));
         return 1;
       case "approved":
         if (!poll.token || !poll.account) {
-          console.error(import_picocolors57.default.red("\nLogin approved but no token was returned. Try again."));
+          console.error(import_picocolors59.default.red("\nLogin approved but no token was returned. Try again."));
           return 1;
         }
         writeAuth({
@@ -129534,12 +129697,12 @@ ${err2.message}`));
         });
         console.log(
           `
-${import_picocolors57.default.green("\u2713")} Logged in as ${import_picocolors57.default.bold(poll.account.email)}. Run ${import_picocolors57.default.bold("horus cloud link")} to connect this repo.`
+${import_picocolors59.default.green("\u2713")} Logged in as ${import_picocolors59.default.bold(poll.account.email)}. Run ${import_picocolors59.default.bold("horus cloud link")} to connect this repo.`
         );
         return 0;
     }
   }
-  console.error(import_picocolors57.default.red("\nTimed out waiting for approval. Run `horus login` again."));
+  console.error(import_picocolors59.default.red("\nTimed out waiting for approval. Run `horus login` again."));
   return 1;
 }
 async function runLogin(opts = {}) {
@@ -129553,7 +129716,7 @@ async function runLogin(opts = {}) {
 async function runLogout() {
   const auth = readAuth();
   if (!auth) {
-    console.log(import_picocolors57.default.dim("Not logged in."));
+    console.log(import_picocolors59.default.dim("Not logged in."));
     return 0;
   }
   const session = authedClient();
@@ -129567,13 +129730,13 @@ async function runLogout() {
     }
   }
   clearAuth();
-  console.log(`${import_picocolors57.default.green("\u2713")} Logged out. Local mode still works.`);
+  console.log(`${import_picocolors59.default.green("\u2713")} Logged out. Local mode still works.`);
   return 0;
 }
 
 // ../../packages/cli/src/commands/cloud.ts
 init_cjs_shims();
-var import_picocolors58 = __toESM(require_picocolors(), 1);
+var import_picocolors60 = __toESM(require_picocolors(), 1);
 init_src();
 var import_promises4 = require("readline/promises");
 
@@ -129619,7 +129782,7 @@ async function runCloudLink(opts = {}) {
   const root = repoRootOrCwd(opts.cwd);
   const session = authedClient();
   if (!session) {
-    console.error(import_picocolors58.default.red(`Not logged in. Run ${import_picocolors58.default.bold("horus login")} first.`));
+    console.error(import_picocolors60.default.red(`Not logged in. Run ${import_picocolors60.default.bold("horus login")} first.`));
     return 1;
   }
   let ctx;
@@ -129629,7 +129792,7 @@ async function runCloudLink(opts = {}) {
     return reportCloudError(err2);
   }
   const remote = detectGitRemote(root);
-  if (remote) console.log(import_picocolors58.default.dim(`Detected git remote: ${remote.remoteUrl}`));
+  if (remote) console.log(import_picocolors60.default.dim(`Detected git remote: ${remote.remoteUrl}`));
   let resolved = null;
   let target = opts.project;
   if (!target) {
@@ -129645,7 +129808,7 @@ async function runCloudLink(opts = {}) {
       const org = ctx.organizations.find((o5) => o5.id === match.organizationId);
       if (ws && org) {
         target = `${org.slug}/${ws.slug}/${match.slug}`;
-        console.log(import_picocolors58.default.dim(`Matched existing project by remote: ${import_picocolors58.default.bold(target)}`));
+        console.log(import_picocolors60.default.dim(`Matched existing project by remote: ${import_picocolors60.default.bold(target)}`));
       }
     }
   }
@@ -129660,8 +129823,8 @@ async function runCloudLink(opts = {}) {
     if (created === "aborted") return 1;
     if (!created) {
       console.error(
-        import_picocolors58.default.red("No project to link.") + `
-  Run ${import_picocolors58.default.bold("horus cloud link")} in a TTY to pick or create one, pass a target (${import_picocolors58.default.bold("horus cloud link <org/workspace/project>")}), or create a project at ${import_picocolors58.default.bold("https://cloud.horus.sh")}.`
+        import_picocolors60.default.red("No project to link.") + `
+  Run ${import_picocolors60.default.bold("horus cloud link")} in a TTY to pick or create one, pass a target (${import_picocolors60.default.bold("horus cloud link <org/workspace/project>")}), or create a project at ${import_picocolors60.default.bold("https://cloud.horus.sh")}.`
       );
       return 1;
     }
@@ -129671,8 +129834,8 @@ async function runCloudLink(opts = {}) {
     resolved = resolveTriple(ctx, target);
     if (!resolved) {
       console.error(
-        import_picocolors58.default.red(`You don't have access to ${import_picocolors58.default.bold(target)}.`) + `
-  Run ${import_picocolors58.default.bold("horus context list")} to see available projects.`
+        import_picocolors60.default.red(`You don't have access to ${import_picocolors60.default.bold(target)}.`) + `
+  Run ${import_picocolors60.default.bold("horus context list")} to see available projects.`
       );
       return 1;
     }
@@ -129685,10 +129848,10 @@ async function runCloudLink(opts = {}) {
     project: resolved.project
   });
   console.log(
-    `${import_picocolors58.default.green("\u2713")} Linked. Context for this repo is now ${import_picocolors58.default.bold(label)} ${import_picocolors58.default.dim("(cloud)")}.`
+    `${import_picocolors60.default.green("\u2713")} Linked. Context for this repo is now ${import_picocolors60.default.bold(label)} ${import_picocolors60.default.dim("(cloud)")}.`
   );
   console.log(
-    import_picocolors58.default.dim(`  Investigations here save to Horus Cloud. ${import_picocolors58.default.bold("horus context use local")} to switch back.`)
+    import_picocolors60.default.dim(`  Investigations here save to Horus Cloud. ${import_picocolors60.default.bold("horus context use local")} to switch back.`)
   );
   return 0;
 }
@@ -129696,11 +129859,11 @@ async function runCloudUnlink(opts = {}) {
   const root = repoRootOrCwd(opts.cwd);
   const cfg = readCloudConfig(root);
   if (!cfg || cfg.context !== "cloud") {
-    console.log(import_picocolors58.default.dim("This repo isn't linked to a cloud project."));
+    console.log(import_picocolors60.default.dim("This repo isn't linked to a cloud project."));
     return 0;
   }
   clearCloudConfig(root);
-  console.log(`${import_picocolors58.default.green("\u2713")} Unlinked. This repo is back to ${import_picocolors58.default.bold("local")} mode.`);
+  console.log(`${import_picocolors60.default.green("\u2713")} Unlinked. This repo is back to ${import_picocolors60.default.bold("local")} mode.`);
   return 0;
 }
 async function runCloudStatus(opts = {}) {
@@ -129708,18 +129871,18 @@ async function runCloudStatus(opts = {}) {
   const cfg = readCloudConfig(root);
   const session = authedClient();
   if (!isCloudActive(cfg) || !cfg?.project) {
-    console.log(`${import_picocolors58.default.bold("Context:")}  local`);
-    console.log(`${import_picocolors58.default.bold("Storage:")}  local Postgres (~/.horus)`);
+    console.log(`${import_picocolors60.default.bold("Context:")}  local`);
+    console.log(`${import_picocolors60.default.bold("Storage:")}  local Postgres (~/.horus)`);
     console.log(
-      import_picocolors58.default.dim(`Tip:      ${import_picocolors58.default.bold("horus login")} then ${import_picocolors58.default.bold("horus cloud link")} to share investigations with your team.`)
+      import_picocolors60.default.dim(`Tip:      ${import_picocolors60.default.bold("horus login")} then ${import_picocolors60.default.bold("horus cloud link")} to share investigations with your team.`)
     );
     return 0;
   }
   const triple = `${cfg.organization?.slug}/${cfg.workspace?.slug}/${cfg.project.slug}`;
-  console.log(`${import_picocolors58.default.bold("Context:")}     ${triple}   ${import_picocolors58.default.dim("(cloud)")}`);
+  console.log(`${import_picocolors60.default.bold("Context:")}     ${triple}   ${import_picocolors60.default.dim("(cloud)")}`);
   let projectLine = `${cfg.project.slug}`;
   let metaLines = [];
-  let account = import_picocolors58.default.dim("not logged in");
+  let account = import_picocolors60.default.dim("not logged in");
   if (session) {
     account = session.auth.account.email;
     try {
@@ -129734,9 +129897,9 @@ async function runCloudStatus(opts = {}) {
     } catch {
     }
   }
-  console.log(`${import_picocolors58.default.bold("Project:")}     ${projectLine}`);
+  console.log(`${import_picocolors60.default.bold("Project:")}     ${projectLine}`);
   for (const line2 of metaLines) console.log(line2);
-  console.log(`${import_picocolors58.default.bold("Account:")}     ${account}`);
+  console.log(`${import_picocolors60.default.bold("Account:")}     ${account}`);
   return 0;
 }
 async function runCloudSync(opts = {}) {
@@ -129744,13 +129907,13 @@ async function runCloudSync(opts = {}) {
   const cfg = readCloudConfig(root);
   if (!isCloudActive(cfg) || !cfg.project) {
     console.error(
-      import_picocolors58.default.red("This repo isn't linked to a cloud project.") + ` Run ${import_picocolors58.default.bold("horus cloud link")} first.`
+      import_picocolors60.default.red("This repo isn't linked to a cloud project.") + ` Run ${import_picocolors60.default.bold("horus cloud link")} first.`
     );
     return 1;
   }
   const session = authedClient();
   if (!session) {
-    console.error(import_picocolors58.default.red(`Not logged in. Run ${import_picocolors58.default.bold("horus login")} first.`));
+    console.error(import_picocolors60.default.red(`Not logged in. Run ${import_picocolors60.default.bold("horus login")} first.`));
     return 1;
   }
   let project;
@@ -129773,26 +129936,26 @@ async function runCloudSync(opts = {}) {
     const target = `${cfg.organization?.slug}/${cfg.workspace?.slug}/${cfg.project.slug}`;
     if (uploadable.length === 0) {
       console.log(
-        import_picocolors58.default.dim(
+        import_picocolors60.default.dim(
           `No local investigations with reports to upload.` + (skippedNoReport ? ` (${skippedNoReport} without a report skipped)` : "")
         )
       );
       return 0;
     }
-    console.log(import_picocolors58.default.bold(`Will upload ${uploadable.length} investigation(s) to ${target} ${import_picocolors58.default.dim("(cloud)")}:`));
+    console.log(import_picocolors60.default.bold(`Will upload ${uploadable.length} investigation(s) to ${target} ${import_picocolors60.default.dim("(cloud)")}:`));
     for (const c4 of uploadable.slice(0, 20)) {
-      console.log(`  ${import_picocolors58.default.dim(c4.id.slice(0, 8))}  ${(c4.title ?? "untitled").slice(0, 70)}`);
+      console.log(`  ${import_picocolors60.default.dim(c4.id.slice(0, 8))}  ${(c4.title ?? "untitled").slice(0, 70)}`);
     }
-    if (uploadable.length > 20) console.log(import_picocolors58.default.dim(`  \u2026and ${uploadable.length - 20} more`));
-    if (skippedNoReport) console.log(import_picocolors58.default.dim(`  (${skippedNoReport} local investigation(s) without a report will be skipped)`));
+    if (uploadable.length > 20) console.log(import_picocolors60.default.dim(`  \u2026and ${uploadable.length - 20} more`));
+    if (skippedNoReport) console.log(import_picocolors60.default.dim(`  (${skippedNoReport} local investigation(s) without a report will be skipped)`));
     if (opts.dryRun) {
-      console.log(import_picocolors58.default.dim("Dry run \u2014 nothing uploaded. Re-run without --dry-run to upload."));
+      console.log(import_picocolors60.default.dim("Dry run \u2014 nothing uploaded. Re-run without --dry-run to upload."));
       return 0;
     }
     if (!opts.yes) {
       if (!process.stdin.isTTY) {
         console.error(
-          import_picocolors58.default.yellow(`Re-run with ${import_picocolors58.default.bold("--yes")} to upload, or ${import_picocolors58.default.bold("--dry-run")} to preview only.`)
+          import_picocolors60.default.yellow(`Re-run with ${import_picocolors60.default.bold("--yes")} to upload, or ${import_picocolors60.default.bold("--dry-run")} to preview only.`)
         );
         return 1;
       }
@@ -129800,7 +129963,7 @@ async function runCloudSync(opts = {}) {
       try {
         const answer = (await rl.question(`Upload ${uploadable.length} investigation(s) to ${target}? (y/N) `)).trim().toLowerCase();
         if (answer !== "y" && answer !== "yes") {
-          console.log(import_picocolors58.default.dim("Aborted. Nothing uploaded."));
+          console.log(import_picocolors60.default.dim("Aborted. Nothing uploaded."));
           return 0;
         }
       } finally {
@@ -129813,18 +129976,18 @@ async function runCloudSync(opts = {}) {
       try {
         const refs = await uploadInvestigationToCloud(session.client, cfg, c4.report, { db });
         created++;
-        console.log(`${import_picocolors58.default.green("\u2713")} ${import_picocolors58.default.dim(c4.id.slice(0, 8))} \u2192 ${refs.investigationId}`);
+        console.log(`${import_picocolors60.default.green("\u2713")} ${import_picocolors60.default.dim(c4.id.slice(0, 8))} \u2192 ${refs.investigationId}`);
       } catch (err2) {
         failed++;
-        console.error(`${import_picocolors58.default.red("\u2717")} ${import_picocolors58.default.dim(c4.id.slice(0, 8))} ${err2.message}`);
+        console.error(`${import_picocolors60.default.red("\u2717")} ${import_picocolors60.default.dim(c4.id.slice(0, 8))} ${err2.message}`);
       }
     }
     console.log("");
     console.log(
-      `${import_picocolors58.default.bold("Sync complete:")} ${import_picocolors58.default.green(`${created} uploaded`)}, ${skippedNoReport} skipped, ` + (failed ? import_picocolors58.default.red(`${failed} failed`) : "0 failed") + "."
+      `${import_picocolors60.default.bold("Sync complete:")} ${import_picocolors60.default.green(`${created} uploaded`)}, ${skippedNoReport} skipped, ` + (failed ? import_picocolors60.default.red(`${failed} failed`) : "0 failed") + "."
     );
     console.log(
-      import_picocolors58.default.dim("Local data was not modified. Re-running is safe \u2014 duplicates are deduped by idempotency key.")
+      import_picocolors60.default.dim("Local data was not modified. Re-running is safe \u2014 duplicates are deduped by idempotency key.")
     );
     return failed > 0 ? 1 : 0;
   } finally {
@@ -129835,8 +129998,8 @@ async function createProjectFromRepo(client, ctx, remote, yes) {
   if (!process.stdin.isTTY && !yes) return null;
   if (ctx.organizations.length === 0) {
     console.error(
-      import_picocolors58.default.red("You're not a member of any organization yet.") + `
-  Create one at ${import_picocolors58.default.bold("https://cloud.horus.sh")} first.`
+      import_picocolors60.default.red("You're not a member of any organization yet.") + `
+  Create one at ${import_picocolors60.default.bold("https://cloud.horus.sh")} first.`
     );
     return null;
   }
@@ -129861,9 +130024,9 @@ async function createProjectFromRepo(client, ctx, remote, yes) {
       const wsName = await ask2("New workspace name", repoName || "default");
       const ws = await client.createWorkspace(org.id, { name: wsName });
       workspace = { id: ws.id, slug: ws.slug };
-      console.log(import_picocolors58.default.dim(`Created workspace ${import_picocolors58.default.bold(ws.slug)}.`));
+      console.log(import_picocolors60.default.dim(`Created workspace ${import_picocolors60.default.bold(ws.slug)}.`));
     } else {
-      console.log(`Workspaces in ${import_picocolors58.default.bold(org.slug)}:`);
+      console.log(`Workspaces in ${import_picocolors60.default.bold(org.slug)}:`);
       orgWorkspaces.forEach((w4, i3) => console.log(`  ${i3 + 1}) ${w4.slug}`));
       console.log(`  ${orgWorkspaces.length + 1}) + create a new workspace`);
       const pick2 = Number(await ask2("Workspace number", "1"));
@@ -129871,7 +130034,7 @@ async function createProjectFromRepo(client, ctx, remote, yes) {
         const wsName = await ask2("New workspace name", repoName || "default");
         const ws = await client.createWorkspace(org.id, { name: wsName });
         workspace = { id: ws.id, slug: ws.slug };
-        console.log(import_picocolors58.default.dim(`Created workspace ${import_picocolors58.default.bold(ws.slug)}.`));
+        console.log(import_picocolors60.default.dim(`Created workspace ${import_picocolors60.default.bold(ws.slug)}.`));
       } else {
         const chosen = orgWorkspaces[pick2 - 1] ?? orgWorkspaces[0];
         workspace = { id: chosen.id, slug: chosen.slug };
@@ -129883,7 +130046,7 @@ async function createProjectFromRepo(client, ctx, remote, yes) {
       remoteUrl: remote?.remoteUrl,
       provider: remote ? inferProvider(remote.remoteUrl) : void 0
     });
-    console.log(import_picocolors58.default.dim(`Created project ${import_picocolors58.default.bold(project.slug)}.`));
+    console.log(import_picocolors60.default.dim(`Created project ${import_picocolors60.default.bold(project.slug)}.`));
     return {
       organization: { id: org.id, slug: org.slug },
       workspace,
@@ -129899,7 +130062,7 @@ async function createProjectFromRepo(client, ctx, remote, yes) {
 
 // ../../packages/cli/src/commands/telemetry.ts
 init_cjs_shims();
-var import_picocolors60 = __toESM(require_picocolors(), 1);
+var import_picocolors62 = __toESM(require_picocolors(), 1);
 var import_node_crypto11 = require("crypto");
 
 // ../../packages/cli/src/lib/telemetry/transport.ts
@@ -129960,7 +130123,7 @@ async function deleteRemoteTelemetry(installId, opts = {}) {
 
 // ../../packages/cli/src/lib/telemetry/notice.ts
 init_cjs_shims();
-var import_picocolors59 = __toESM(require_picocolors(), 1);
+var import_picocolors61 = __toESM(require_picocolors(), 1);
 var PRIVACY_URL = "https://horus.sh/privacy";
 var SUPPRESS_FIRST_TOKEN = /* @__PURE__ */ new Set(["telemetry", "help"]);
 var SUPPRESS_FLAGS = /* @__PURE__ */ new Set(["-V", "--version", "-h", "--help"]);
@@ -129972,11 +130135,11 @@ function shouldSuppressFor(argv) {
   return firstToken != null && SUPPRESS_FIRST_TOKEN.has(firstToken);
 }
 function banner() {
-  const b5 = import_picocolors59.default.bold;
-  const dim = import_picocolors59.default.dim;
+  const b5 = import_picocolors61.default.bold;
+  const dim = import_picocolors61.default.dim;
   return [
     "",
-    import_picocolors59.default.cyan(b5("Horus collects anonymous usage data to improve the tool.")),
+    import_picocolors61.default.cyan(b5("Horus collects anonymous usage data to improve the tool.")),
     dim("  \u2022 On by default: command names, timings, success/failure, and where the"),
     dim("    engine ran out of evidence. No file contents, queries, or secrets."),
     dim("  \u2022 Off by default: your investigation inputs/outputs (opt in to help train"),
@@ -129984,7 +130147,7 @@ function banner() {
     dim("  \u2022 If you use Horus Cloud, linked investigations sync to your workspace."),
     "",
     `  ${dim("Opt out anytime:")} ${b5("horus telemetry disable")}  ${dim("\xB7")}  ${b5("HORUS_TELEMETRY=0")}  ${dim("\xB7")}  ${b5("DO_NOT_TRACK=1")}`,
-    `  ${dim("Details:")} ${import_picocolors59.default.underline(PRIVACY_URL)}`,
+    `  ${dim("Details:")} ${import_picocolors61.default.underline(PRIVACY_URL)}`,
     ""
   ].join("\n");
 }
@@ -130007,45 +130170,45 @@ function maybeShowFirstRunNotice(argv = process.argv) {
 
 // ../../packages/cli/src/commands/telemetry.ts
 function onOff(enabled) {
-  return enabled ? import_picocolors60.default.green("on") : import_picocolors60.default.dim("off");
+  return enabled ? import_picocolors62.default.green("on") : import_picocolors62.default.dim("off");
 }
 function warnIfEnvOverrides() {
   const decision = resolveConsent();
   if (decision.forcedOff) {
     console.log(
-      import_picocolors60.default.yellow(
+      import_picocolors62.default.yellow(
         `
 Note: telemetry is currently forced off by your environment (${decision.reason}).`
       )
     );
-    console.log(import_picocolors60.default.dim("Your saved preference will apply once that override is removed."));
+    console.log(import_picocolors62.default.dim("Your saved preference will apply once that override is removed."));
   } else if (decision.source === "ci") {
     console.log(
-      import_picocolors60.default.yellow("\nNote: CI environment detected \u2014 telemetry stays off here regardless.")
+      import_picocolors62.default.yellow("\nNote: CI environment detected \u2014 telemetry stays off here regardless.")
     );
   }
 }
 async function runTelemetryStatus() {
   const state = readTelemetryState();
   const decision = resolveConsent({ state });
-  console.log(import_picocolors60.default.bold("Horus telemetry"));
+  console.log(import_picocolors62.default.bold("Horus telemetry"));
   console.log(
-    `  Usage metadata (Tier A): ${onOff(decision.tierA)}  ${import_picocolors60.default.dim(`[${decision.source}]`)}`
+    `  Usage metadata (Tier A): ${onOff(decision.tierA)}  ${import_picocolors62.default.dim(`[${decision.source}]`)}`
   );
   console.log(`  Content sharing (Tier B): ${onOff(decision.tierB)}`);
-  console.log(import_picocolors60.default.dim(`  Reason: ${decision.reason}`));
+  console.log(import_picocolors62.default.dim(`  Reason: ${decision.reason}`));
   if (state) {
-    console.log(import_picocolors60.default.dim(`  Install ID: ${state.installId}`));
+    console.log(import_picocolors62.default.dim(`  Install ID: ${state.installId}`));
     console.log(
-      import_picocolors60.default.dim(
+      import_picocolors62.default.dim(
         `  Saved: Tier A ${state.tierA.enabled ? "on" : "off"}, Tier B ${state.tierB.enabled ? "on" : "off"}`
       )
     );
   } else {
-    console.log(import_picocolors60.default.dim("  No saved preference yet (defaults apply)."));
+    console.log(import_picocolors62.default.dim("  No saved preference yet (defaults apply)."));
   }
-  console.log(import_picocolors60.default.dim(`  Config: ${telemetryPath()}`));
-  console.log(import_picocolors60.default.dim(`  Privacy: ${PRIVACY_URL}`));
+  console.log(import_picocolors62.default.dim(`  Config: ${telemetryPath()}`));
+  console.log(import_picocolors62.default.dim(`  Privacy: ${PRIVACY_URL}`));
   if (!state || decision.source === "env" || decision.source === "ci") {
     warnIfEnvOverrides();
   }
@@ -130056,7 +130219,7 @@ async function runTelemetryEnable() {
     s5.tierA.enabled = true;
     if (!s5.tierA.noticeShownAt) s5.tierA.noticeShownAt = (/* @__PURE__ */ new Date()).toISOString();
   });
-  console.log(import_picocolors60.default.green("Anonymous usage metadata (Tier A) is now ON. Thank you!"));
+  console.log(import_picocolors62.default.green("Anonymous usage metadata (Tier A) is now ON. Thank you!"));
   warnIfEnvOverrides();
   return 0;
 }
@@ -130066,7 +130229,7 @@ async function runTelemetryDisable() {
     s5.tierB.enabled = false;
     if (!s5.tierA.noticeShownAt) s5.tierA.noticeShownAt = (/* @__PURE__ */ new Date()).toISOString();
   });
-  console.log(import_picocolors60.default.yellow("All telemetry is now OFF (Tier A and Tier B)."));
+  console.log(import_picocolors62.default.yellow("All telemetry is now OFF (Tier A and Tier B)."));
   return 0;
 }
 async function runTelemetryEnableContent() {
@@ -130077,10 +130240,10 @@ async function runTelemetryEnableContent() {
     if (!s5.tierA.noticeShownAt) s5.tierA.noticeShownAt = (/* @__PURE__ */ new Date()).toISOString();
   });
   console.log(
-    import_picocolors60.default.green("Content sharing (Tier B) is now ON \u2014 redacted inputs/outputs help improve Horus.")
+    import_picocolors62.default.green("Content sharing (Tier B) is now ON \u2014 redacted inputs/outputs help improve Horus.")
   );
-  console.log(import_picocolors60.default.dim("Content is scrubbed of secrets/PII before it ever leaves your machine."));
-  console.log(import_picocolors60.default.dim(`What this means: ${PRIVACY_URL}`));
+  console.log(import_picocolors62.default.dim("Content is scrubbed of secrets/PII before it ever leaves your machine."));
+  console.log(import_picocolors62.default.dim(`What this means: ${PRIVACY_URL}`));
   warnIfEnvOverrides();
   return 0;
 }
@@ -130088,7 +130251,7 @@ async function runTelemetryDisableContent() {
   updateTelemetryState((s5) => {
     s5.tierB.enabled = false;
   });
-  console.log(import_picocolors60.default.yellow("Content sharing (Tier B) is now OFF. Usage metadata is unchanged."));
+  console.log(import_picocolors62.default.yellow("Content sharing (Tier B) is now OFF. Usage metadata is unchanged."));
   return 0;
 }
 async function runTelemetryResetId() {
@@ -130096,8 +130259,8 @@ async function runTelemetryResetId() {
   updateTelemetryState((s5) => {
     s5.installId = next;
   });
-  console.log(import_picocolors60.default.green("Install ID reset."));
-  console.log(import_picocolors60.default.dim(`  New install ID: ${next}`));
+  console.log(import_picocolors62.default.green("Install ID reset."));
+  console.log(import_picocolors62.default.dim(`  New install ID: ${next}`));
   return 0;
 }
 async function runTelemetryDelete() {
@@ -130105,9 +130268,9 @@ async function runTelemetryDelete() {
   if (installId) await deleteRemoteTelemetry(installId);
   deleteTelemetryState();
   clearSpool();
-  console.log(import_picocolors60.default.green("Telemetry deleted \u2014 local state cleared and a server purge requested."));
+  console.log(import_picocolors62.default.green("Telemetry deleted \u2014 local state cleared and a server purge requested."));
   console.log(
-    import_picocolors60.default.dim(
+    import_picocolors62.default.dim(
       "Next run will treat this as a fresh install and re-show the notice. If the purge could not reach the server (offline), re-run this command when back online."
     )
   );
@@ -130152,7 +130315,7 @@ function installCommandTelemetry(program2) {
 init_cjs_shims();
 var import_promises5 = require("fs/promises");
 var import_node_path31 = require("path");
-var import_picocolors61 = __toESM(require_picocolors(), 1);
+var import_picocolors63 = __toESM(require_picocolors(), 1);
 init_src();
 function resolveProject2(config2, repo) {
   let project;
@@ -130161,7 +130324,7 @@ function resolveProject2(config2, repo) {
   } catch {
   }
   if (!project) {
-    console.error(import_picocolors61.default.red("Could not resolve a project \u2014 pass --repo <name> or run inside a repo."));
+    console.error(import_picocolors63.default.red("Could not resolve a project \u2014 pass --repo <name> or run inside a repo."));
     return null;
   }
   return project;
@@ -130170,7 +130333,7 @@ function readSlice(opts) {
   let source;
   if (opts.source !== void 0) {
     if (!isOutcomeSource(opts.source)) {
-      console.error(import_picocolors61.default.red(`Unknown --source "${opts.source}" (one of: feedback, confirm).`));
+      console.error(import_picocolors63.default.red(`Unknown --source "${opts.source}" (one of: feedback, confirm).`));
       return null;
     }
     source = opts.source;
@@ -130178,7 +130341,7 @@ function readSlice(opts) {
   let since;
   if (opts.days !== void 0) {
     if (!Number.isFinite(opts.days) || opts.days <= 0) {
-      console.error(import_picocolors61.default.red("--days must be a positive number."));
+      console.error(import_picocolors63.default.red("--days must be a positive number."));
       return null;
     }
     since = new Date(Date.now() - opts.days * 24 * 60 * 60 * 1e3);
@@ -130226,26 +130389,26 @@ async function runEvalBuild(opts) {
       if (opts.json) {
         console.log(JSON.stringify({ project, corpusPath, manifestPath, manifest }, null, 2));
       } else {
-        console.log(import_picocolors61.default.bold(`Eval corpus \u2014 ${project}`));
+        console.log(import_picocolors63.default.bold(`Eval corpus \u2014 ${project}`));
         console.log(
-          `  Rows: ${import_picocolors61.default.green(String(build.rows.length))} ` + import_picocolors61.default.dim(
+          `  Rows: ${import_picocolors63.default.green(String(build.rows.length))} ` + import_picocolors63.default.dim(
             `(evaluated ${build.evaluated}, quarantined ${build.quarantined.length}, unjoinable ${build.unjoinable.length})`
           )
         );
         console.log(
-          import_picocolors61.default.dim(
+          import_picocolors63.default.dim(
             `  Class balance: ${build.classBalance.yes} yes, ${build.classBalance.partly} partly, ${build.classBalance.no} no \xB7 source: ${build.bySource.feedback} feedback, ${build.bySource.confirm} confirm`
           )
         );
-        console.log(`  Corpus:   ${import_picocolors61.default.cyan(corpusPath)}`);
-        console.log(`  Manifest: ${import_picocolors61.default.cyan(manifestPath)}`);
+        console.log(`  Corpus:   ${import_picocolors63.default.cyan(corpusPath)}`);
+        console.log(`  Manifest: ${import_picocolors63.default.cyan(manifestPath)}`);
       }
       return 0;
     } finally {
       await sql2.end();
     }
   } catch (err2) {
-    console.error(import_picocolors61.default.red(err2.message));
+    console.error(import_picocolors63.default.red(err2.message));
     return 1;
   }
 }
@@ -130275,31 +130438,31 @@ async function runEvalBaseline(opts) {
         console.log(JSON.stringify({ project, baseline, separation }, null, 2));
       } else {
         const pct2 = (n4) => `${(n4 * 100).toFixed(0)}%`;
-        console.log(import_picocolors61.default.bold(`Eval baseline \u2014 ${project}`));
+        console.log(import_picocolors63.default.bold(`Eval baseline \u2014 ${project}`));
         if (baseline.n === 0) {
           console.log(
-            import_picocolors61.default.dim(
+            import_picocolors63.default.dim(
               "No outcome labels yet. Leave feedback (`horus feedback`) or confirm an investigation (`horus memory confirm`) to seed the eval set."
             )
           );
         } else {
           console.log(
-            `  Strict hit-rate: ${import_picocolors61.default.green(pct2(baseline.strictHitRate))} ` + import_picocolors61.default.dim(`(weighted ${pct2(baseline.weightedHitRate)}) over ${baseline.n} investigation(s)`)
+            `  Strict hit-rate: ${import_picocolors63.default.green(pct2(baseline.strictHitRate))} ` + import_picocolors63.default.dim(`(weighted ${pct2(baseline.weightedHitRate)}) over ${baseline.n} investigation(s)`)
           );
           console.log(
-            `  Class balance: ${import_picocolors61.default.green(`${baseline.classBalance.yes} yes`)}, ${import_picocolors61.default.yellow(`${baseline.classBalance.partly} partly`)}, ${import_picocolors61.default.red(`${baseline.classBalance.no} no`)} \xB7 ` + import_picocolors61.default.dim(`source: ${baseline.bySource.feedback} feedback, ${baseline.bySource.confirm} confirm`)
+            `  Class balance: ${import_picocolors63.default.green(`${baseline.classBalance.yes} yes`)}, ${import_picocolors63.default.yellow(`${baseline.classBalance.partly} partly`)}, ${import_picocolors63.default.red(`${baseline.classBalance.no} no`)} \xB7 ` + import_picocolors63.default.dim(`source: ${baseline.bySource.feedback} feedback, ${baseline.bySource.confirm} confirm`)
           );
           if (separation.factors.length === 0) {
             console.log(
-              import_picocolors61.default.dim(
+              import_picocolors63.default.dim(
                 `  Feature separation: no discriminative sample yet (needs feedback rows with yes AND no verdicts and a ranked cause).`
               )
             );
           } else {
-            console.log(import_picocolors61.default.dim(`  Feature separation (yes vs no, ${separation.evaluated} row(s)):`));
+            console.log(import_picocolors63.default.dim(`  Feature separation (yes vs no, ${separation.evaluated} row(s)):`));
             for (const f5 of separation.factors.slice(0, 10)) {
               console.log(
-                import_picocolors61.default.dim(
+                import_picocolors63.default.dim(
                   `    ${f5.factor}: \u0394 ${f5.separation.toFixed(3)} (yes ${f5.meanYes.toFixed(3)} vs no ${f5.meanNo.toFixed(3)}, effect ${f5.effectSize.toFixed(2)})`
                 )
               );
@@ -130312,7 +130475,7 @@ async function runEvalBaseline(opts) {
       await sql2.end();
     }
   } catch (err2) {
-    console.error(import_picocolors61.default.red(err2.message));
+    console.error(import_picocolors63.default.red(err2.message));
     return 1;
   }
 }
@@ -130322,7 +130485,7 @@ init_cjs_shims();
 var import_promises6 = require("fs/promises");
 var import_node_path32 = require("path");
 var import_node_os12 = require("os");
-var import_picocolors62 = __toESM(require_picocolors(), 1);
+var import_picocolors64 = __toESM(require_picocolors(), 1);
 init_src();
 var RERANKER_MODEL_PATH = (0, import_node_path32.join)((0, import_node_os12.homedir)(), ".horus", "reranker.json");
 function candidatesFromReport(blob) {
@@ -130338,7 +130501,7 @@ async function runTrain(opts) {
   let source;
   if (opts.source !== void 0) {
     if (!isOutcomeSource(opts.source)) {
-      console.error(import_picocolors62.default.red(`Unknown --source "${opts.source}" (one of: feedback, confirm).`));
+      console.error(import_picocolors64.default.red(`Unknown --source "${opts.source}" (one of: feedback, confirm).`));
       return 1;
     }
     source = opts.source;
@@ -130346,7 +130509,7 @@ async function runTrain(opts) {
   let since;
   if (opts.days !== void 0) {
     if (!Number.isFinite(opts.days) || opts.days <= 0) {
-      console.error(import_picocolors62.default.red("--days must be a positive number."));
+      console.error(import_picocolors64.default.red("--days must be a positive number."));
       return 1;
     }
     since = new Date(Date.now() - opts.days * 24 * 60 * 60 * 1e3);
@@ -130382,7 +130545,7 @@ async function runTrain(opts) {
       await sql2.end();
     }
   } catch (err2) {
-    console.error(import_picocolors62.default.red(`Could not read the local corpus: ${err2.message}`));
+    console.error(import_picocolors64.default.red(`Could not read the local corpus: ${err2.message}`));
     return 1;
   }
   const split = holdoutSplit(investigations2);
@@ -130390,26 +130553,26 @@ async function runTrain(opts) {
   if (!result.ok) {
     if (result.reason === "insufficient-corpus") {
       console.log(
-        import_picocolors62.default.yellow(
+        import_picocolors64.default.yellow(
           `Not enough labeled investigations to train yet (have ${result.labeledInvestigations} with a known-correct cause; need \u2265${MIN_TRAIN_INVESTIGATIONS}).`
         )
       );
-      console.log(import_picocolors62.default.dim("  Keep labeling outcomes with `horus feedback` \u2014 the reranker trains once the corpus is large enough."));
+      console.log(import_picocolors64.default.dim("  Keep labeling outcomes with `horus feedback` \u2014 the reranker trains once the corpus is large enough."));
     } else {
-      console.log(import_picocolors62.default.yellow(`Cannot train a meaningful model yet: ${result.detail}.`));
+      console.log(import_picocolors64.default.yellow(`Cannot train a meaningful model yet: ${result.detail}.`));
     }
     return 0;
   }
   const { baselineHitRate, rerankedHitRate, delta, n: n4 } = result.holdout;
-  console.log(import_picocolors62.default.bold("\nReranker training (local, per-tenant)\n"));
+  console.log(import_picocolors64.default.bold("\nReranker training (local, per-tenant)\n"));
   console.log(`  Holdout investigations:  ${n4}`);
   console.log(`  Baseline top-1 hit-rate: ${pct(baselineHitRate)}`);
   console.log(`  Reranked top-1 hit-rate: ${pct(rerankedHitRate)}`);
   console.log(`  Delta:                   ${delta >= 0 ? "+" : ""}${pct(delta)}`);
   console.log("");
   if (delta <= 0) {
-    console.log(import_picocolors62.default.yellow("  The reranker did NOT beat the deterministic baseline \u2014 not saving a model."));
-    console.log(import_picocolors62.default.dim("  Horus stays on its hand-tuned ranking. Re-run as more labels accumulate."));
+    console.log(import_picocolors64.default.yellow("  The reranker did NOT beat the deterministic baseline \u2014 not saving a model."));
+    console.log(import_picocolors64.default.dim("  Horus stays on its hand-tuned ranking. Re-run as more labels accumulate."));
     return 0;
   }
   try {
@@ -130418,20 +130581,20 @@ async function runTrain(opts) {
     void _ok;
     await (0, import_promises6.writeFile)(RERANKER_MODEL_PATH, JSON.stringify(model, null, 2) + "\n", "utf8");
   } catch (err2) {
-    console.error(import_picocolors62.default.red(`Trained, but could not write the model: ${err2.message}`));
+    console.error(import_picocolors64.default.red(`Trained, but could not write the model: ${err2.message}`));
     return 1;
   }
-  console.log(import_picocolors62.default.green(`  \u2713 Reranker beats baseline by +${pct(delta)} \u2014 saved to ${RERANKER_MODEL_PATH}`));
-  console.log(import_picocolors62.default.dim("  It ships OFF by default. Enable it with `HORUS_RERANK=1 horus investigate \u2026`."));
+  console.log(import_picocolors64.default.green(`  \u2713 Reranker beats baseline by +${pct(delta)} \u2014 saved to ${RERANKER_MODEL_PATH}`));
+  console.log(import_picocolors64.default.dim("  It ships OFF by default. Enable it with `HORUS_RERANK=1 horus investigate \u2026`."));
   return 0;
 }
 
 // ../../packages/cli/src/lib/report-crash.ts
 init_cjs_shims();
-var import_picocolors63 = __toESM(require_picocolors(), 1);
+var import_picocolors65 = __toESM(require_picocolors(), 1);
 function reportCrash(err2, log = console.error) {
   log(err2);
-  log(import_picocolors63.default.dim("\n  Looks like a Horus bug or a missing capability? Report it:  horus report"));
+  log(import_picocolors65.default.dim("\n  Looks like a Horus bug or a missing capability? Report it:  horus report"));
 }
 
 // ../../packages/cli/src/index.ts
@@ -131100,6 +131263,33 @@ Examples:
       });
     }
   );
+  program2.command("trace <from> <to>").description(
+    "Shortest relationship path between two symbols across all edges (calls, imports, extends, implements, uses_type), both directions"
+  ).option("-c, --config <path>", "path to horus.config.ts").option("-d, --max-depth <n>", "maximum hops (default 10, max 10)", (v4) => parseInt(v4, 10)).option(
+    "--relations <list>",
+    "comma-separated edge kinds to restrict the walk (e.g. calls,imports)"
+  ).option("--json", "output JSON").action(
+    async (from, to, opts) => {
+      process.exitCode = await runTrace(from, to, {
+        config: opts.config,
+        maxDepth: opts.maxDepth,
+        relations: opts.relations,
+        json: opts.json
+      });
+    }
+  );
+  program2.command("insights").description(
+    "Graph-shape insights: the codebase's hubs (most-connected symbols), surprising cross-community connections, and suggested questions"
+  ).option("-c, --config <path>", "path to horus.config.ts").option("--hubs <n>", "how many top hubs to show (default 8)", (v4) => parseInt(v4, 10)).option("--bridges <n>", "how many cross-community edges to show (default 8)", (v4) => parseInt(v4, 10)).option("--json", "output JSON").action(
+    async (opts) => {
+      process.exitCode = await runInsights({
+        config: opts.config,
+        hubs: opts.hubs,
+        bridges: opts.bridges,
+        json: opts.json
+      });
+    }
+  );
   program2.command("repos").description("List configured repositories and their source-intelligence host health").option("-c, --config <path>", "path to horus.config.ts").action(async (opts) => {
     process.exitCode = await runRepos({ config: opts.config });
   });