@merittdev/horus 0.8.16 → 0.8.18

package/dist/index.cjs

@@ -43846,7 +43846,7 @@ var require_pg_pool = __commonJS({
     function throwOnDoubleRelease() {
       throw new Error("Release called on client which has already been released to the pool.");
     }
-    function promisify6(Promise2, callback) {
+    function promisify8(Promise2, callback) {
       if (callback) {
         return { callback, result: void 0 };
       }
@@ -43984,7 +43984,7 @@ var require_pg_pool = __commonJS({
           const err2 = new Error("Cannot use a pool after calling end on the pool");
           return cb ? cb(err2) : this.Promise.reject(err2);
         }
-        const response = promisify6(this.Promise, cb);
+        const response = promisify8(this.Promise, cb);
         const result = response.result;
         if (this._isFull() || this._idle.length) {
           if (this._idle.length) {
@@ -44169,7 +44169,7 @@ var require_pg_pool = __commonJS({
       }
       query(text2, values2, cb) {
         if (typeof text2 === "function") {
-          const response2 = promisify6(this.Promise, text2);
+          const response2 = promisify8(this.Promise, text2);
           setImmediate(function() {
             return response2.callback(new Error("Passing a function as the first parameter to pool.query is not supported"));
           });
@@ -44179,7 +44179,7 @@ var require_pg_pool = __commonJS({
           cb = values2;
           values2 = void 0;
         }
-        const response = promisify6(this.Promise, cb);
+        const response = promisify8(this.Promise, cb);
         cb = response.callback;
         this.connect((err2, client) => {
           if (err2) {
@@ -44224,7 +44224,7 @@ var require_pg_pool = __commonJS({
           return cb ? cb(err2) : this.Promise.reject(err2);
         }
         this.ending = true;
-        const promised = promisify6(this.Promise, cb);
+        const promised = promisify8(this.Promise, cb);
         this._endCallback = promised.callback;
         this._pulseQueue();
         return promised.result;
@@ -65880,8 +65880,8 @@ init_cjs_shims();
 
 // ../../packages/core/src/version.ts
 init_cjs_shims();
-var HORUS_VERSION = true ? "0.8.16" : "dev";
-var PINNED_SOURCE_VERSION = "1.5.3";
+var HORUS_VERSION = true ? "0.8.18" : "dev";
+var PINNED_SOURCE_VERSION = "1.5.4";
 
 // ../../packages/core/src/evidence.ts
 init_cjs_shims();
@@ -71105,6 +71105,34 @@ function removeSpawnedHostRecord(root) {
   } catch {
   }
 }
+async function killSpawnedHost(root) {
+  const pids = /* @__PURE__ */ new Set();
+  const spawned = readSpawnedHost(root);
+  if (spawned?.pid) pids.add(spawned.pid);
+  const backend = readSourceHostPid(root);
+  if (backend?.pid) pids.add(backend.pid);
+  for (const pid of pids) {
+    for (const signal of ["SIGTERM", "SIGKILL"]) {
+      try {
+        process.kill(pid, signal);
+      } catch {
+        break;
+      }
+      let dead = false;
+      for (let i3 = 0; i3 < 15; i3 += 1) {
+        await new Promise((r) => setTimeout(r, 200));
+        try {
+          process.kill(pid, 0);
+        } catch {
+          dead = true;
+          break;
+        }
+      }
+      if (dead) break;
+    }
+  }
+  removeSpawnedHostRecord(root);
+}
 function reconcileSpawnedHostPid(root, port) {
   try {
     const backend = readSourceHostPid(root);
@@ -75560,7 +75588,7 @@ function sql(strings, ...params) {
     return new SQL([new StringChunk(str3)]);
   }
   sql2.raw = raw;
-  function join14(chunks, separator) {
+  function join15(chunks, separator) {
     const result = [];
     for (const [i3, chunk] of chunks.entries()) {
       if (i3 > 0 && separator !== void 0) {
@@ -75570,7 +75598,7 @@ function sql(strings, ...params) {
     }
     return new SQL(result);
   }
-  sql2.join = join14;
+  sql2.join = join15;
   function identifier(value) {
     return new Name(value);
   }
@@ -79161,7 +79189,7 @@ var PgSelectQueryBuilderBase = class extends TypedQueryBuilder {
     return (table, on2) => {
       const baseTableName = this.tableName;
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins?.some((join14) => join14.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins?.some((join15) => join15.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (!this.isPartialSelect) {
@@ -80173,7 +80201,7 @@ var PgUpdateBase = class extends QueryPromise {
   createJoin(joinType) {
     return (table, on2) => {
       const tableName = getTableLikeName(table);
-      if (typeof tableName === "string" && this.config.joins.some((join14) => join14.alias === tableName)) {
+      if (typeof tableName === "string" && this.config.joins.some((join15) => join15.alias === tableName)) {
         throw new Error(`Alias "${tableName}" is already used in this query`);
       }
       if (typeof on2 === "function") {
@@ -80269,10 +80297,10 @@ var PgUpdateBase = class extends QueryPromise {
           const fromFields = this.getTableLikeFields(this.config.from);
           fields[tableName] = fromFields;
         }
-        for (const join14 of this.config.joins) {
-          const tableName2 = getTableLikeName(join14.table);
-          if (typeof tableName2 === "string" && !is(join14.table, SQL)) {
-            const fromFields = this.getTableLikeFields(join14.table);
+        for (const join15 of this.config.joins) {
+          const tableName2 = getTableLikeName(join15.table);
+          if (typeof tableName2 === "string" && !is(join15.table, SQL)) {
+            const fromFields = this.getTableLikeFields(join15.table);
             fields[tableName2] = fromFields;
           }
         }
@@ -90401,6 +90429,10 @@ function reportToMarkdown(r) {
 
 // ../../packages/engine/src/ownership.ts
 init_cjs_shims();
+var BOT_AUTHOR_RE = /\[bot\]|^(?:github-actions|dependabot|renovate(?:-bot)?|greenkeeper|snyk-bot|mergify|codecov|semantic-release-bot|allcontributors)\b/i;
+function isBotAuthor(author) {
+  return BOT_AUTHOR_RE.test((author ?? "").trim());
+}
 var CODE_EXTENSIONS = /* @__PURE__ */ new Set([
   "ts",
   "tsx",
@@ -90507,10 +90539,12 @@ async function estimateOwnership(query, deps) {
     };
   }
   const contributors = await gitFileContributors(deps.repoPath, file);
-  const total = contributors.reduce((n4, c4) => n4 + c4.commits, 0);
-  const lead = contributors[0] ?? null;
+  const humans = contributors.filter((c4) => !isBotAuthor(c4.author));
+  const ranked = humans.length > 0 ? humans : contributors;
+  const total = ranked.reduce((n4, c4) => n4 + c4.commits, 0);
+  const lead = ranked[0] ?? null;
   const maintainerShare = total > 0 && lead !== null ? lead.commits / total : 0;
-  const byRecent = [...contributors].sort(
+  const byRecent = [...ranked].sort(
     (a2, b5) => b5.lastDate < a2.lastDate ? -1 : b5.lastDate > a2.lastDate ? 1 : 0
   );
   const mostActiveRecent = byRecent[0]?.author ?? null;
@@ -91250,6 +91284,30 @@ function factorRequestContext(sourceEvidenceIds, graph, request) {
     reason: `Cause directly implicates the investigated service (${request.service})`
   };
 }
+function factorIncidentHistory(sourceEvidenceIds, graph, priorIncidents) {
+  if (priorIncidents.size === 0) return null;
+  const idSet = new Set(sourceEvidenceIds);
+  const codeNodes = graph.nodes.filter(
+    (n4) => (n4.type === "symbol" || n4.type === "file") && n4.evidenceIds.some((eid) => idSet.has(eid))
+  );
+  const matched = [];
+  let totalPrior = 0;
+  for (const n4 of codeNodes) {
+    const count = priorIncidents.get(n4.id);
+    if (count && count > 0) {
+      matched.push(n4);
+      totalPrior += count;
+    }
+  }
+  if (matched.length === 0) return null;
+  const delta = +Math.min(matched.length * 0.04, 0.1).toFixed(3);
+  const names = matched.slice(0, 3).map((n4) => n4.label);
+  return {
+    factor: "incident-history",
+    delta,
+    reason: `Implicated code has a prior-incident history (${totalPrior} prior investigation(s) on ${names.join(", ")}${matched.length > 3 ? ", \u2026" : ""})`
+  };
+}
 function scoreCause(input, ctx) {
   const now = ctx.now ?? (/* @__PURE__ */ new Date()).toISOString();
   const idSet = new Set(input.sourceEvidenceIds);
@@ -91263,7 +91321,8 @@ function scoreCause(input, ctx) {
     factorSignalStrength(attached),
     factorFindingUncertainty(input.sourceEvidenceIds, ctx.findings ?? []),
     ctx.providerReliability ? factorProviderReliability(attached, ctx.providerReliability) : null,
-    ctx.request ? factorRequestContext(input.sourceEvidenceIds, ctx.graph, ctx.request) : null
+    ctx.request ? factorRequestContext(input.sourceEvidenceIds, ctx.graph, ctx.request) : null,
+    ctx.priorIncidents ? factorIncidentHistory(input.sourceEvidenceIds, ctx.graph, ctx.priorIncidents) : null
   ];
   const explanations = rawFactors.filter((f5) => f5 !== null);
   const totalDelta = explanations.reduce((sum, e) => sum + e.delta, 0);
@@ -92002,6 +92061,14 @@ function scoreSeed(s5, index2, hintTokens, changedFiles, hintHasCode) {
   if (changedFiles !== void 0 && changedFiles.has(s5.filePath)) score += 5;
   if (/\.(resolver|controller|service)\.[jt]sx?$/i.test(s5.filePath)) score += hintHasCode ? 0 : 2;
   if (/(^|\/)scripts?\//i.test(s5.filePath)) score -= 2;
+  if (/(^|\/)(tests?|__tests__|spec)\//i.test(s5.filePath) || /(\.|_)(test|spec)\.[jt]sx?$/i.test(s5.filePath) || /(^|\/)test_[^/]*\.py$/i.test(s5.filePath) || /_test\.py$/i.test(s5.filePath)) {
+    score -= 4;
+  }
+  if (/(^|\/)(examples?|samples?|demos?|fixtures?|sandbox|playground|docs|docs_src|tutorials?)(\/|$)/i.test(
+    s5.filePath
+  )) {
+    score -= 4;
+  }
   score += Math.max(0, 5 - index2) * (hintHasCode ? 0.8 : 0.1);
   if (s5.score !== void 0) score += s5.score * (hintHasCode ? 8 : 1.5);
   if (/\.[jt]sx?$/i.test(s5.name)) score -= 5;
@@ -92678,12 +92745,12 @@ async function investigate(input, deps) {
     const fp = (s5.filePath ?? "").replace(/^\.?\/+/, "");
     return fp === scopePrefix || fp.startsWith(scopePrefix + "/");
   };
-  const seedSearchLimit = scopePrefix ? 25 : 5;
-  const rawSeeds = code ? (await code.searchSymbols(hint, seedSearchLimit)).filter(inScope).slice(0, 5) : [];
+  const seedSearchLimit = scopePrefix ? 30 : 20;
+  const rawSeeds = code ? (await code.searchSymbols(hint, seedSearchLimit)).filter(inScope) : [];
   const hintTokens = [...new Set(tokenize(hint))];
   const hintHasCode = /\b(?=[A-Z0-9_]*[0-9_])[A-Z][A-Z0-9_]{3,}\b/.test(hint);
   const ranked = rankSeeds(rawSeeds, hintTokens, changedFilePaths, hintHasCode);
-  let seeds = ranked.map((r) => r.symbol);
+  let seeds = ranked.map((r) => r.symbol).slice(0, 5);
   let top = seeds[0];
   if (top && code && isTypeLikeName(top.name)) {
     const base2 = executableBaseName(top.name);
@@ -93478,11 +93545,12 @@ async function investigate(input, deps) {
   const causeChains = buildCauseChains(validated, evidence2, graph, label);
   const findings2 = [];
   if (top && seedEv) {
+    const seedConfidence = seedIsLowConfidence ? Math.min(0.4, top.score ?? 0.3) : Math.min(0.95, Math.max(0.5, top.score ?? 0.75));
     findings2.push({
       kind: "observation",
       title: `Seed resolves to ${label} at ${seedLoc}`,
       detail: top.signature ?? void 0,
-      confidence: 1,
+      confidence: +seedConfidence.toFixed(2),
       evidenceIds: [seedEv.id]
     });
   }
@@ -93864,12 +93932,31 @@ async function investigate(input, deps) {
     ...deps.queue != null ? { queue: 0.9 } : {},
     ...deps.metrics != null ? { metrics: 0.75 } : {}
   };
+  const priorIncidents = /* @__PURE__ */ new Map();
+  try {
+    const priors = await listInvestigationsWithReports(deps.db, 50);
+    for (const row of priors) {
+      const rep = row.report;
+      if (!rep || !Array.isArray(rep.evidence) || rep.evidence.length === 0) continue;
+      if (typeof rep.confidence === "number" && rep.confidence < 0.5) continue;
+      const priorGraph = buildGraph(rep.evidence);
+      const seen = /* @__PURE__ */ new Set();
+      for (const n4 of priorGraph.nodes) {
+        if ((n4.type === "symbol" || n4.type === "file") && !seen.has(n4.id)) {
+          seen.add(n4.id);
+          priorIncidents.set(n4.id, (priorIncidents.get(n4.id) ?? 0) + 1);
+        }
+      }
+    }
+  } catch {
+  }
   const rankedCauses = rankCauses(causeInputs, {
     evidence: evidence2,
     graph,
     findings: findings2,
     providerReliability,
-    request: { hint: input.hint, service: input.service }
+    request: { hint: input.hint, service: input.service },
+    ...priorIncidents.size > 0 ? { priorIncidents } : {}
   });
   const evidenceConfidence = computeWeightedEvidenceConfidence(
     evidence2,
@@ -94441,6 +94528,32 @@ var EXTERNAL_MARKERS = [
   "mysql2",
   "mssql"
 ];
+var TESTY_TOKENS = /* @__PURE__ */ new Set([
+  "test",
+  "tests",
+  "spec",
+  "specs",
+  "example",
+  "examples",
+  "sample",
+  "samples",
+  "demo",
+  "demos",
+  "docs",
+  "doc",
+  "tutorial",
+  "tutorials",
+  "fixture",
+  "fixtures",
+  "e2e"
+]);
+function isTestyCommunity(name2) {
+  return name2.toLowerCase().split(/[+\s/_.-]+/).some((t2) => TESTY_TOKENS.has(t2));
+}
+var TEST_EXAMPLE_PATH_RE = /(^|\/)(tests?|__tests__|examples?|samples?|demos?|docs|docs_src|tutorials?|fixtures?|spec|specs)(\/|$)/i;
+function isTestOrExamplePath(p5) {
+  return TEST_EXAMPLE_PATH_RE.test(p5);
+}
 async function discoverArchitecture(deps) {
   const nodeStats = await (async () => {
     try {
@@ -94460,10 +94573,17 @@ async function discoverArchitecture(deps) {
       const result = await deps.code.cypher(
         'MATCH (m)-[r:CodeRelation]->(c:Community) WHERE r.rel_type = "member_of" RETURN c.name, count(m) ORDER BY count(m) DESC'
       );
-      return result.rows.slice(0, 12).map((row) => ({
+      const rows = result.rows.map((row) => ({
         name: String(row[0] ?? ""),
         members: Number(row[1] ?? 0)
       }));
+      rows.sort((a2, b5) => {
+        const at4 = isTestyCommunity(a2.name) ? 1 : 0;
+        const bt2 = isTestyCommunity(b5.name) ? 1 : 0;
+        if (at4 !== bt2) return at4 - bt2;
+        return b5.members - a2.members;
+      });
+      return rows.slice(0, 12);
     } catch {
       return [];
     }
@@ -94475,20 +94595,22 @@ async function discoverArchitecture(deps) {
       for (const edge of edges) {
         const key = edge.queueName;
         if (!byQueue.has(key)) {
-          byQueue.set(key, { producers: /* @__PURE__ */ new Set(), workers: /* @__PURE__ */ new Set() });
+          byQueue.set(key, { producers: /* @__PURE__ */ new Map(), workers: /* @__PURE__ */ new Map() });
         }
         const entry2 = byQueue.get(key);
         if (edge.producerSymbol != null && edge.producerSymbol !== "") {
-          entry2.producers.add(edge.producerSymbol);
+          const file = edge.producerFile ?? null;
+          entry2.producers.set(`${edge.producerSymbol}\0${file ?? ""}`, { symbol: edge.producerSymbol, file });
         }
         if (edge.workerSymbol != null && edge.workerSymbol !== "") {
-          entry2.workers.add(edge.workerSymbol);
+          const file = edge.workerFile ?? null;
+          entry2.workers.set(`${edge.workerSymbol}\0${file ?? ""}`, { symbol: edge.workerSymbol, file });
         }
       }
       return Array.from(byQueue.entries()).map(([queueName, { producers, workers }]) => ({
         queueName,
-        producers: Array.from(producers),
-        workers: Array.from(workers)
+        producers: Array.from(producers.values()),
+        workers: Array.from(workers.values())
       }));
     } catch {
       return [];
@@ -94524,16 +94646,20 @@ async function discoverArchitecture(deps) {
       return 0;
     }
   })();
+  const ownPackage = deps.project?.toLowerCase();
   const externalSystems = await (async () => {
     try {
       const results = await Promise.all(
         EXTERNAL_MARKERS.map(async (marker) => {
+          if (ownPackage && marker.toLowerCase() === ownPackage) {
+            return { name: marker, files: 0 };
+          }
           try {
             const result = await deps.code.cypher(
-              `MATCH (n:File) WHERE n.content CONTAINS "${marker}" RETURN count(n)`
+              `MATCH (n:File) WHERE n.content CONTAINS "${marker}" RETURN n.file_path LIMIT 500`
             );
-            const count = Number(result.rows[0]?.[0] ?? 0);
-            return { name: marker, files: count };
+            const files = result.rows.map((r) => String(r[0] ?? "")).filter((p5) => p5 !== "" && !isTestOrExamplePath(p5)).length;
+            return { name: marker, files };
           } catch {
             return { name: marker, files: 0 };
           }
@@ -94560,6 +94686,10 @@ async function discoverArchitecture(deps) {
 
 // ../../packages/engine/src/render-architecture.ts
 init_cjs_shims();
+function fmtEndpoints(endpoints2) {
+  if (endpoints2.length === 0) return "(unknown)";
+  return endpoints2.map((e) => e.file ? `${e.symbol} (${e.file.split("/").pop()})` : e.symbol).join(", ");
+}
 function renderArchitecture(m5) {
   const lines = [];
   lines.push("# Architecture (discovered)");
@@ -94580,9 +94710,7 @@ function renderArchitecture(m5) {
     lines.push("(none)");
   } else {
     for (const b5 of m5.asyncBoundaries) {
-      const producers = b5.producers.length > 0 ? b5.producers.join(", ") : "(unknown)";
-      const workers = b5.workers.length > 0 ? b5.workers.join(", ") : "(unknown)";
-      lines.push(`- ${b5.queueName}: ${producers} -> ${workers}`);
+      lines.push(`- ${b5.queueName}: ${fmtEndpoints(b5.producers)} -> ${fmtEndpoints(b5.workers)}`);
     }
   }
   lines.push("");
@@ -95747,7 +95875,7 @@ function filterArchitecture(architecture, tokens) {
     ...architecture,
     subsystems: architecture.subsystems.filter((s5) => matchesArea(s5.name, tokens)),
     asyncBoundaries: architecture.asyncBoundaries.filter(
-      (b5) => matchesArea(b5.queueName, tokens) || b5.producers.some((p5) => matchesArea(p5, tokens)) || b5.workers.some((w4) => matchesArea(w4, tokens))
+      (b5) => matchesArea(b5.queueName, tokens) || b5.producers.some((p5) => matchesArea(p5.symbol, tokens)) || b5.workers.some((w4) => matchesArea(w4.symbol, tokens))
     ),
     keyFlows: architecture.keyFlows.filter((f5) => matchesArea(f5, tokens)),
     externalSystems: architecture.externalSystems.filter((e) => matchesArea(e.name, tokens))
@@ -95861,9 +95989,8 @@ function renderOnboarding(g4) {
   if (g4.architecture.asyncBoundaries.length > 0) {
     lines.push("Async boundaries:");
     for (const b5 of g4.architecture.asyncBoundaries) {
-      const producers = b5.producers.length > 0 ? b5.producers.join(", ") : "(unknown)";
-      const workers = b5.workers.length > 0 ? b5.workers.join(", ") : "(unknown)";
-      lines.push(`- ${b5.queueName}: ${producers} -> ${workers}`);
+      const fmt = (xs) => xs.length > 0 ? xs.map((x4) => x4.file ? `${x4.symbol} (${x4.file.split("/").pop()})` : x4.symbol).join(", ") : "(unknown)";
+      lines.push(`- ${b5.queueName}: ${fmt(b5.producers)} -> ${fmt(b5.workers)}`);
     }
   } else {
     lines.push("No async boundaries detected.");
@@ -97209,27 +97336,27 @@ function extractQueueGraph(input) {
     }
   }
   const producers = [];
-  for (const pc49 of input.producerClasses) {
-    const loopVarEnums = loopVarEnumsFor(pc49.content);
-    for (const m5 of pc49.content.matchAll(INJECT_QUEUE_RE)) {
+  for (const pc50 of input.producerClasses) {
+    const loopVarEnums = loopVarEnumsFor(pc50.content);
+    for (const m5 of pc50.content.matchAll(INJECT_QUEUE_RE)) {
       const queue = m5[1] ?? "";
-      if (queue) producers.push({ queue, symbol: pc49.name, file: pc49.filePath });
+      if (queue) producers.push({ queue, symbol: pc50.name, file: pc50.filePath });
     }
-    for (const m5 of pc49.content.matchAll(NEW_BULL_RE)) {
+    for (const m5 of pc50.content.matchAll(NEW_BULL_RE)) {
       if (m5[2] !== "Queue") continue;
       const queues2 = resolveArg(m5[3] ?? "", constMap, enums, loopVarEnums);
       for (const queue of queues2) {
         producers.push({
           queue,
-          symbol: (m5[1] ?? pc49.name) || baseName(pc49.filePath),
-          file: pc49.filePath
+          symbol: (m5[1] ?? pc50.name) || baseName(pc50.filePath),
+          file: pc50.filePath
         });
       }
     }
-    for (const m5 of pc49.content.matchAll(QUEUE_NAME_CONST_RE)) {
+    for (const m5 of pc50.content.matchAll(QUEUE_NAME_CONST_RE)) {
       const ident = m5[1] ?? "";
       const queue = m5[2] ?? "";
-      if (queue) producers.push({ queue, symbol: ident || baseName(pc49.filePath), file: pc49.filePath });
+      if (queue) producers.push({ queue, symbol: ident || baseName(pc50.filePath), file: pc50.filePath });
     }
   }
   const workers = [];
@@ -97296,6 +97423,60 @@ function extractQueueGraph(input) {
   }
   return { queues, producers, workers, edges };
 }
+var CELERY_TASK_DEF_RE = /@(?:[\w]+\.)*(?:shared_task|periodic_task|task)\b[^\n]*(?:\n[ \t]*@[^\n]*)*\n[ \t]*(?:async[ \t]+)?def[ \t]+(\w+)/g;
+var CELERY_ENQUEUE_RE = /([A-Za-z_]\w*)\s*\.\s*(?:delay|apply_async)\s*\(/g;
+function extractCeleryQueueGraph(nodes) {
+  const producers = [];
+  const workers = [];
+  const FILE_NODE_RE = /\.(py|pyi|js|jsx|ts|tsx|mjs|cjs)$/i;
+  for (const n4 of nodes) {
+    for (const m5 of n4.content.matchAll(CELERY_TASK_DEF_RE)) {
+      const task = m5[1];
+      if (task) workers.push({ queue: task, symbol: task, file: n4.filePath });
+    }
+    if (FILE_NODE_RE.test(n4.name)) continue;
+    for (const m5 of n4.content.matchAll(CELERY_ENQUEUE_RE)) {
+      const task = m5[1];
+      if (task) producers.push({ queue: task, symbol: n4.name || baseName(n4.filePath), file: n4.filePath });
+    }
+  }
+  const taskQueues = new Set(workers.map((w4) => w4.queue));
+  const queues = [...taskQueues].sort();
+  const edges = [];
+  for (const q2 of queues) {
+    const P5 = dedupeBySymbolFile(producers.filter((p5) => p5.queue === q2));
+    const W5 = dedupeBySymbolFile(workers.filter((w4) => w4.queue === q2));
+    if (P5.length) {
+      for (const p5 of P5) {
+        for (const w4 of W5) {
+          edges.push({
+            queueName: q2,
+            producerSymbol: p5.symbol,
+            producerFile: p5.file,
+            workerSymbol: w4.symbol,
+            workerFile: w4.file
+          });
+        }
+      }
+    } else {
+      for (const w4 of W5) {
+        edges.push({
+          queueName: q2,
+          producerSymbol: null,
+          producerFile: null,
+          workerSymbol: w4.symbol,
+          workerFile: w4.file
+        });
+      }
+    }
+  }
+  return {
+    queues,
+    producers: producers.filter((p5) => taskQueues.has(p5.queue)),
+    workers,
+    edges
+  };
+}
 function dedupeBySymbolFile(rows) {
   const seen = /* @__PURE__ */ new Set();
   const out2 = [];
@@ -97329,7 +97510,16 @@ async function stitch(client, db, opts = {}) {
     content: String(r[2] ?? "")
   }));
   const graph = extractQueueGraph({ producerClasses, workerFiles });
-  const edges = graph.edges.map((e) => ({
+  const celeryRows = (await client.cypher(
+    'MATCH (n) WHERE n.content CONTAINS ".delay(" OR n.content CONTAINS ".apply_async(" OR n.content CONTAINS "@shared_task" OR n.content CONTAINS "@task" OR n.content CONTAINS ".task" RETURN n.name, n.file_path, n.content'
+  )).rows;
+  const celeryNodes = celeryRows.map((r) => ({
+    name: String(r[0] ?? ""),
+    filePath: String(r[1] ?? ""),
+    content: String(r[2] ?? "")
+  }));
+  const celery = extractCeleryQueueGraph(celeryNodes);
+  const edges = [...graph.edges, ...celery.edges].map((e) => ({
     queueName: e.queueName,
     producerSymbol: e.producerSymbol,
     producerFile: e.producerFile,
@@ -97340,9 +97530,9 @@ async function stitch(client, db, opts = {}) {
   }));
   await replaceQueueEdges(db, edges, { project: opts.project });
   return {
-    queues: graph.queues.length,
-    producers: graph.producers.length,
-    workers: graph.workers.length,
+    queues: graph.queues.length + celery.queues.length,
+    producers: graph.producers.length + celery.producers.length,
+    workers: graph.workers.length + celery.workers.length,
     edges: edges.length
   };
 }
@@ -97530,6 +97720,7 @@ async function runIndex(opts) {
         console.log(import_picocolors3.default.dim("  already analyzed"));
       }
       const priorPort = parseHostPort(configuredHost ?? "") ?? parseHostPort(readSourceHostUrl(root) ?? "");
+      await killSpawnedHost(root);
       const MAX_PORT_ATTEMPTS = 4;
       let started = false;
       for (let attempt = 0; attempt < MAX_PORT_ATTEMPTS && !started; attempt += 1) {
@@ -97554,7 +97745,7 @@ async function runIndex(opts) {
           reconcileSpawnedHostPid(root, port);
           started = true;
         } else {
-          removeSpawnedHostRecord(root);
+          await killSpawnedHost(root);
         }
       }
       if (!started) {
@@ -110077,7 +110268,7 @@ function formatAge(ms) {
 
 // ../../packages/cli/src/commands/investigate.ts
 init_cjs_shims();
-var import_picocolors10 = __toESM(require_picocolors(), 1);
+var import_picocolors11 = __toESM(require_picocolors(), 1);
 
 // ../../packages/cli/src/lib/cloud/investigation-sync.ts
 init_cjs_shims();
@@ -110495,9 +110686,110 @@ async function maybePromptFeedback(opts) {
   }
 }
 
-// ../../packages/cli/src/lib/investigation-runner.ts
+// ../../packages/cli/src/lib/freshness.ts
 init_cjs_shims();
+var import_node_child_process5 = require("child_process");
+var import_node_fs15 = require("fs");
+var import_node_path16 = require("path");
+var import_node_util4 = require("util");
 var import_picocolors9 = __toESM(require_picocolors(), 1);
+var execFileAsync = (0, import_node_util4.promisify)(import_node_child_process5.execFile);
+async function commitsSince(repoRoot, sinceIso) {
+  try {
+    const { stdout } = await execFileAsync(
+      "git",
+      ["-C", repoRoot, "rev-list", "--count", `--since=${sinceIso}`, "HEAD"],
+      { timeout: 5e3 }
+    );
+    const n4 = parseInt(stdout.trim(), 10);
+    return Number.isFinite(n4) ? n4 : null;
+  } catch {
+    return null;
+  }
+}
+var RUNTIME_SOURCES = /* @__PURE__ */ new Set(["logs", "metrics", "state", "queue"]);
+var STALE_INDEX_MS = 7 * 24 * 60 * 60 * 1e3;
+function readIndexMeta(repoRoot) {
+  try {
+    const raw = (0, import_node_fs15.readFileSync)((0, import_node_path16.join)(repoRoot, ".horus", "source", "meta.json"), "utf8");
+    const j3 = JSON.parse(raw);
+    return {
+      lastIndexedAt: typeof j3.last_indexed_at === "string" ? j3.last_indexed_at : void 0,
+      version: typeof j3.version === "string" ? j3.version : void 0,
+      stats: j3.stats ?? void 0
+    };
+  } catch {
+    return null;
+  }
+}
+function humanAge(ms) {
+  const s5 = Math.max(0, Math.floor(ms / 1e3));
+  if (s5 < 60) return `${s5}s`;
+  const m5 = Math.floor(s5 / 60);
+  if (m5 < 60) return `${m5}m`;
+  const h3 = Math.floor(m5 / 60);
+  if (h3 < 24) return `${h3}h`;
+  return `${Math.floor(h3 / 24)}d`;
+}
+function computeFreshness(opts) {
+  const now = Date.parse(opts.nowIso);
+  const meta = opts.meta !== void 0 ? opts.meta : readIndexMeta(opts.repoRoot);
+  const commitsSinceIndex = opts.commitsSinceIndex ?? null;
+  const caveats = [];
+  let indexAgeMs = null;
+  let indexAgeLabel = "index age unknown";
+  let indexStale = false;
+  const indexedAt = meta?.lastIndexedAt ? Date.parse(meta.lastIndexedAt) : NaN;
+  if (!Number.isNaN(indexedAt)) {
+    indexAgeMs = Math.max(0, now - indexedAt);
+    indexAgeLabel = `indexed ${humanAge(indexAgeMs)} ago`;
+    indexStale = indexAgeMs > STALE_INDEX_MS;
+    if (indexStale) {
+      caveats.push(
+        `code index is ${humanAge(indexAgeMs)} old \u2014 re-run \`horus index\` so analysis reflects current code`
+      );
+    }
+  } else {
+    caveats.push("code index age unknown (no .horus/source/meta.json) \u2014 freshness unverified");
+  }
+  if (typeof commitsSinceIndex === "number" && commitsSinceIndex > 0) {
+    caveats.push(
+      `${commitsSinceIndex} commit(s) since the last index \u2014 re-run \`horus index\` so analysis reflects current code`
+    );
+  }
+  const runtime = opts.evidence.filter((e) => e.source && RUNTIME_SOURCES.has(e.source));
+  const runtimeSources = [...new Set(runtime.map((e) => e.source))].sort();
+  const stamps = runtime.map((e) => e.timestamp ? Date.parse(e.timestamp) : NaN).filter((n4) => !Number.isNaN(n4)).sort((a2, b5) => a2 - b5);
+  const runtimeWindow = stamps.length > 0 ? { fromIso: new Date(stamps[0]).toISOString(), toIso: new Date(stamps[stamps.length - 1]).toISOString() } : null;
+  if (runtime.length === 0) {
+    caveats.push(
+      "no runtime evidence \u2014 source-only investigation; connect logs/metrics/queues for deeper grounding"
+    );
+  }
+  return {
+    indexAgeMs,
+    indexAgeLabel,
+    indexStale,
+    commitsSinceIndex,
+    runtimeWindow,
+    runtimeSources,
+    caveats
+  };
+}
+function renderFreshness(f5) {
+  const lines = [];
+  const behind = f5.commitsSinceIndex && f5.commitsSinceIndex > 0 ? ` (${f5.commitsSinceIndex} behind)` : "";
+  const label = f5.indexAgeLabel + behind;
+  const idx = f5.indexStale || behind ? import_picocolors9.default.yellow(label) : label;
+  const runtime = f5.runtimeWindow !== null ? `runtime ${f5.runtimeWindow.fromIso.slice(0, 10)}\u2192${f5.runtimeWindow.toIso.slice(0, 10)}` + (f5.runtimeSources.length ? ` (${f5.runtimeSources.join(", ")})` : "") : "no runtime window";
+  lines.push(import_picocolors9.default.dim(`Freshness: code ${idx} \xB7 ${runtime}`));
+  for (const c4 of f5.caveats) lines.push(import_picocolors9.default.yellow(`  \u26A0 ${c4}`));
+  return lines.join("\n");
+}
+
+// ../../packages/cli/src/lib/investigation-runner.ts
+init_cjs_shims();
+var import_picocolors10 = __toESM(require_picocolors(), 1);
 async function buildInvestigationContext(renv, opts) {
   const log = opts.log ?? ((l2) => console.error(l2));
   const code = codeForEnv(renv);
@@ -110509,20 +110801,20 @@ async function buildInvestigationContext(renv, opts) {
   const sourceUrl = renv.repositories[0]?.sourceHostUrl;
   let health = await code.health();
   if (!health.ok && sourceUrl) {
-    log(import_picocolors9.default.yellow(`Source-intelligence host unreachable (${sourceUrl}) \u2014 attempting to start it\u2026`));
+    log(import_picocolors10.default.yellow(`Source-intelligence host unreachable (${sourceUrl}) \u2014 attempting to start it\u2026`));
     const healed = await ensureSourceHost(renv.path, sourceUrl);
     if (healed.ok) {
-      log(import_picocolors9.default.green(`Source-intelligence host is up at ${healed.hostUrl}.`));
+      log(import_picocolors10.default.green(`Source-intelligence host is up at ${healed.hostUrl}.`));
       health = await code.health();
     } else {
-      log(import_picocolors9.default.dim(`  ${ensureHostReasonHint(healed.reason)}`));
+      log(import_picocolors10.default.dim(`  ${ensureHostReasonHint(healed.reason)}`));
     }
   }
   const runtimeOnly = !health.ok;
   if (runtimeOnly) {
     log(
-      import_picocolors9.default.yellow(
-        `Proceeding in runtime-only mode \u2014 no source intelligence. Run ${import_picocolors9.default.bold("horus index")} for a full (code-aware) investigation.`
+      import_picocolors10.default.yellow(
+        `Proceeding in runtime-only mode \u2014 no source intelligence. Run ${import_picocolors10.default.bold("horus index")} for a full (code-aware) investigation.`
       )
     );
   }
@@ -110677,37 +110969,37 @@ function renderStoredAIJudgment(judgment, write = (l2) => console.log(l2)) {
   const sep = "\u2500".repeat(60);
   write(`
 ${sep}`);
-  write(import_picocolors10.default.bold("AI Judgment") + import_picocolors10.default.dim(` (confidence: ${(judgment.confidence * 100).toFixed(0)}%, provider: ${judgment.provider})`));
+  write(import_picocolors11.default.bold("AI Judgment") + import_picocolors11.default.dim(` (confidence: ${(judgment.confidence * 100).toFixed(0)}%, provider: ${judgment.provider})`));
   write(sep);
   if (judgment.hypothesisJudgments && judgment.hypothesisJudgments.length > 0) {
-    write(import_picocolors10.default.bold("Hypothesis verdicts:"));
+    write(import_picocolors11.default.bold("Hypothesis verdicts:"));
     for (const j3 of judgment.hypothesisJudgments) {
-      const verdictColor = j3.verdict === "supported" ? import_picocolors10.default.green : j3.verdict === "weakened" ? import_picocolors10.default.yellow : j3.verdict === "eliminated" ? import_picocolors10.default.red : import_picocolors10.default.dim;
-      write(`  ${verdictColor(`[${j3.verdict}]`)} ${j3.category}` + import_picocolors10.default.dim(` (${(j3.confidence * 100).toFixed(0)}%)`));
-      write(import_picocolors10.default.dim(`    ${j3.rationale}`));
+      const verdictColor = j3.verdict === "supported" ? import_picocolors11.default.green : j3.verdict === "weakened" ? import_picocolors11.default.yellow : j3.verdict === "eliminated" ? import_picocolors11.default.red : import_picocolors11.default.dim;
+      write(`  ${verdictColor(`[${j3.verdict}]`)} ${j3.category}` + import_picocolors11.default.dim(` (${(j3.confidence * 100).toFixed(0)}%)`));
+      write(import_picocolors11.default.dim(`    ${j3.rationale}`));
     }
     write("");
   }
   if (judgment.rootCauseAssessment) {
     const rca = judgment.rootCauseAssessment;
-    const uncertaintyColor = rca.uncertainty === "low" ? import_picocolors10.default.green : rca.uncertainty === "medium" ? import_picocolors10.default.yellow : import_picocolors10.default.red;
-    write(import_picocolors10.default.bold("Root cause assessment:") + import_picocolors10.default.dim(` uncertainty: ${uncertaintyColor(rca.uncertainty)}`));
+    const uncertaintyColor = rca.uncertainty === "low" ? import_picocolors11.default.green : rca.uncertainty === "medium" ? import_picocolors11.default.yellow : import_picocolors11.default.red;
+    write(import_picocolors11.default.bold("Root cause assessment:") + import_picocolors11.default.dim(` uncertainty: ${uncertaintyColor(rca.uncertainty)}`));
     write(rca.summary);
     if (rca.citedEvidenceIds.length > 0) {
-      write(import_picocolors10.default.dim(`  Cited: ${rca.citedEvidenceIds.join(", ")}`));
+      write(import_picocolors11.default.dim(`  Cited: ${rca.citedEvidenceIds.join(", ")}`));
     }
     write("");
   }
-  write(import_picocolors10.default.bold("What:") + " " + judgment.what);
-  write(import_picocolors10.default.bold("Why:") + " " + judgment.why);
+  write(import_picocolors11.default.bold("What:") + " " + judgment.what);
+  write(import_picocolors11.default.bold("Why:") + " " + judgment.why);
   if (judgment.whereNext.length > 0) {
-    write(import_picocolors10.default.bold("Next steps:"));
+    write(import_picocolors11.default.bold("Next steps:"));
     for (const step of judgment.whereNext) {
       write(`  \u2022 ${step}`);
     }
   }
   if (judgment.citations.length > 0) {
-    write(import_picocolors10.default.dim(`
+    write(import_picocolors11.default.dim(`
 Cited evidence: ${judgment.citations.map((c4) => c4.evidenceId).join(", ")}`));
   }
 }
@@ -110733,7 +111025,7 @@ async function runInvestigate(hint, opts) {
     try {
       renv = resolveEnvironment(config2, { project: projectName, env: opts.env });
     } catch (err2) {
-      console.error(import_picocolors10.default.red(err2.message));
+      console.error(import_picocolors11.default.red(err2.message));
       return 1;
     }
     const repoRoot = repoRootOrCwd(renv.path);
@@ -110742,8 +111034,8 @@ async function runInvestigate(hint, opts) {
     const cloudSession = cloudActive ? authedClient() : null;
     if (cloudActive && !cloudSession) {
       console.error(
-        import_picocolors10.default.yellow(
-          `This repo is linked to Horus Cloud but you are not logged in \u2014 running locally only. Run ${import_picocolors10.default.bold("horus login")} to also sync results to the cloud.`
+        import_picocolors11.default.yellow(
+          `This repo is linked to Horus Cloud but you are not logged in \u2014 running locally only. Run ${import_picocolors11.default.bold("horus login")} to also sync results to the cloud.`
         )
       );
     }
@@ -110754,7 +111046,7 @@ async function runInvestigate(hint, opts) {
         ...opts.service !== void 0 ? { service: opts.service } : {}
       });
     } catch (err2) {
-      console.error(import_picocolors10.default.red(err2.message));
+      console.error(import_picocolors11.default.red(err2.message));
       return 1;
     }
     try {
@@ -110771,8 +111063,24 @@ async function runInvestigate(hint, opts) {
       );
       const db = ctx.dbHandle.db;
       const format = opts.json ? "json" : opts.format ?? "text";
-      const rendered = format === "json" ? reportToJSON(report) : format === "markdown" || format === "md" ? reportToMarkdown(report) : renderReport(report);
-      console.log(rendered);
+      const fmeta = readIndexMeta(repoRoot);
+      const commitsSinceIndex = fmeta?.lastIndexedAt ? await commitsSince(repoRoot, fmeta.lastIndexedAt) : null;
+      const freshness = computeFreshness({
+        repoRoot,
+        evidence: report.evidence,
+        nowIso: (/* @__PURE__ */ new Date()).toISOString(),
+        meta: fmeta,
+        commitsSinceIndex
+      });
+      if (format === "json") {
+        const obj = JSON.parse(reportToJSON(report));
+        obj.freshness = freshness;
+        console.log(JSON.stringify(obj, null, 2));
+      } else {
+        console.log(format === "markdown" || format === "md" ? reportToMarkdown(report) : renderReport(report));
+        console.log("");
+        console.log(renderFreshness(freshness));
+      }
       if (opts.ai && format !== "json") {
         const ai = resolveAiSettings(config2);
         const model = opts.aiModel ?? ai.model ?? "claude-opus-4-8";
@@ -110780,7 +111088,7 @@ async function runInvestigate(hint, opts) {
           model,
           ...ai.anthropicApiKey !== void 0 ? { apiKey: ai.anthropicApiKey } : {}
         });
-        console.log(import_picocolors10.default.dim(`[ai] model: ${model}`));
+        console.log(import_picocolors11.default.dim(`[ai] model: ${model}`));
         const narrativeInput = buildNarrativeInput(report);
         const { output, fromProvider, degraded, validationErrors } = await renderNarrative(
           narrativeInput,
@@ -110796,24 +111104,24 @@ async function runInvestigate(hint, opts) {
           renderStoredAIJudgment(stored);
         } else if (degraded) {
           if (validationErrors && validationErrors.length > 0) {
-            console.error(import_picocolors10.default.yellow(`[ai] structured validation incomplete \u2014 showing raw AI narrative`));
+            console.error(import_picocolors11.default.yellow(`[ai] structured validation incomplete \u2014 showing raw AI narrative`));
           }
           console.log("");
-          console.log(import_picocolors10.default.dim("\u2500".repeat(60)));
-          console.log(import_picocolors10.default.bold("AI narrative ") + import_picocolors10.default.yellow("(unstructured \u2014 not validated)"));
+          console.log(import_picocolors11.default.dim("\u2500".repeat(60)));
+          console.log(import_picocolors11.default.bold("AI narrative ") + import_picocolors11.default.yellow("(unstructured \u2014 not validated)"));
           if (output.what?.trim()) {
-            console.log(import_picocolors10.default.bold("\nWhat:"), output.what.trim());
+            console.log(import_picocolors11.default.bold("\nWhat:"), output.what.trim());
           }
           if (output.why?.trim()) {
-            console.log(import_picocolors10.default.bold("\nWhy:"), output.why.trim());
+            console.log(import_picocolors11.default.bold("\nWhy:"), output.why.trim());
           }
           if (output.whereNext.length > 0) {
-            console.log(import_picocolors10.default.bold("\nNext:"));
+            console.log(import_picocolors11.default.bold("\nNext:"));
             for (const a2 of output.whereNext) console.log(`  - ${a2}`);
           }
         } else {
           const reason = classifyAIFailure(validationErrors?.[0]);
-          console.error(import_picocolors10.default.yellow(`[ai] fallback to deterministic \u2014 ${reason}`));
+          console.error(import_picocolors11.default.yellow(`[ai] fallback to deterministic \u2014 ${reason}`));
         }
       }
       track({
@@ -110844,7 +111152,7 @@ async function runInvestigate(hint, opts) {
       if (cloudActive && cloudSession && cloudCfg) {
         try {
           const refs = await uploadInvestigationToCloud(cloudSession.client, cloudCfg, report);
-          const cloudNote = import_picocolors10.default.dim(`[cloud] investigation saved: ${refs.investigationId}`);
+          const cloudNote = import_picocolors11.default.dim(`[cloud] investigation saved: ${refs.investigationId}`);
           if (format === "json") console.error(cloudNote);
           else console.log(cloudNote);
         } catch (err2) {
@@ -110854,16 +111162,16 @@ async function runInvestigate(hint, opts) {
       if (format !== "json") {
         if (report.persisted === false) {
           console.error(
-            import_picocolors10.default.yellow(`
+            import_picocolors11.default.yellow(`
 \u26A0 Results were not saved \u2014 the investigation database was unreachable.`)
           );
           console.error(
-            import_picocolors10.default.dim(
+            import_picocolors11.default.dim(
               `  This report is display-only; \`horus ask\` won't find it. Start the database and re-run to persist.`
             )
           );
         } else {
-          console.log(import_picocolors10.default.dim(`
+          console.log(import_picocolors11.default.dim(`
 Ask a follow-up:  horus ask ${report.id} "<question>"`));
         }
         await maybePromptFeedback({
@@ -110877,15 +111185,15 @@ Ask a follow-up:  horus ask ${report.id} "<question>"`));
     return 0;
   } catch (err2) {
     const msg = err2?.message || String(err2);
-    console.error(import_picocolors10.default.red(msg.trim() ? msg : "Investigation failed (unknown error)."));
-    if (process.env.HORUS_DEBUG) console.error(import_picocolors10.default.dim(err2?.stack ?? String(err2)));
+    console.error(import_picocolors11.default.red(msg.trim() ? msg : "Investigation failed (unknown error)."));
+    if (process.env.HORUS_DEBUG) console.error(import_picocolors11.default.dim(err2?.stack ?? String(err2)));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/watch.ts
 init_cjs_shims();
-var import_picocolors11 = __toESM(require_picocolors(), 1);
+var import_picocolors12 = __toESM(require_picocolors(), 1);
 function detectNewSentryIncidents(issues, seen) {
   const fresh = [];
   for (const issue2 of issues) {
@@ -110967,21 +111275,21 @@ async function runWatch(opts) {
   try {
     renv = resolveEnvironment(config2, { project: opts.project, env: opts.env });
   } catch (err2) {
-    console.error(import_picocolors11.default.red(err2.message));
+    console.error(import_picocolors12.default.red(err2.message));
     return 1;
   }
   let ctx;
   try {
     ctx = await buildInvestigationContext(renv, { databaseUrl: config2.database.url });
   } catch (err2) {
-    console.error(import_picocolors11.default.red(err2.message));
+    console.error(import_picocolors12.default.red(err2.message));
     return 1;
   }
   const requested = opts.source ?? "auto";
   const source = resolveSource(requested, ctx);
   if (source === null) {
     console.error(
-      import_picocolors11.default.red(
+      import_picocolors12.default.red(
         requested === "auto" ? `No Sentry or Elasticsearch connector configured for "${renv.project}" / "${renv.env}".` : `No ${requested} connector configured for "${renv.project}" / "${renv.env}".`
       )
     );
@@ -110991,7 +111299,7 @@ async function runWatch(opts) {
   const intervalSec = Math.max(1, Number(opts.interval) || 60);
   const seen = /* @__PURE__ */ new Set();
   console.error(
-    import_picocolors11.default.dim(
+    import_picocolors12.default.dim(
       `[watch] source: ${source} \xB7 project: ${renv.project} \xB7 env: ${renv.env}` + (opts.once ? " \xB7 mode: once" : ` \xB7 interval: ${intervalSec}s`)
     )
   );
@@ -111000,24 +111308,24 @@ async function runWatch(opts) {
     try {
       incidents = source === "sentry" ? await pollSentry(ctx.sentry, seen) : await pollElasticsearch(ctx.logs, seen, ctx.service);
     } catch (err2) {
-      console.error(import_picocolors11.default.yellow(`[watch] poll failed \u2014 ${err2.message}`));
+      console.error(import_picocolors12.default.yellow(`[watch] poll failed \u2014 ${err2.message}`));
       return;
     }
     if (incidents.length === 0) {
-      console.error(import_picocolors11.default.dim(`[watch] no new incidents`));
+      console.error(import_picocolors12.default.dim(`[watch] no new incidents`));
       return;
     }
     for (const incident of incidents) {
       try {
         const report = await runOneInvestigation({ hint: incident.hint }, ctx);
         const { cause, confidence } = headlineFor(report);
-        const persisted = report.persisted === false ? import_picocolors11.default.yellow(" (not persisted)") : "";
+        const persisted = report.persisted === false ? import_picocolors12.default.yellow(" (not persisted)") : "";
         console.log(
-          `${import_picocolors11.default.bold("\u25CF")} ${incident.hint}  ${import_picocolors11.default.dim("\u2192")} ${cause} ${import_picocolors11.default.dim(`(${(confidence * 100).toFixed(0)}%)`)}  ${import_picocolors11.default.dim(`id: ${report.id}`)}${persisted}`
+          `${import_picocolors12.default.bold("\u25CF")} ${incident.hint}  ${import_picocolors12.default.dim("\u2192")} ${cause} ${import_picocolors12.default.dim(`(${(confidence * 100).toFixed(0)}%)`)}  ${import_picocolors12.default.dim(`id: ${report.id}`)}${persisted}`
         );
       } catch (err2) {
         console.error(
-          import_picocolors11.default.yellow(`[watch] investigation failed for "${incident.ref}" \u2014 ${err2.message}`)
+          import_picocolors12.default.yellow(`[watch] investigation failed for "${incident.ref}" \u2014 ${err2.message}`)
         );
       }
     }
@@ -111032,7 +111340,7 @@ async function runWatch(opts) {
   const onSignal = () => {
     if (stopping) return;
     stopping = true;
-    console.error(import_picocolors11.default.dim(`
+    console.error(import_picocolors12.default.dim(`
 [watch] shutting down\u2026`));
     if (wake) wake();
   };
@@ -111059,7 +111367,7 @@ async function runWatch(opts) {
 
 // ../../packages/cli/src/commands/changes.ts
 init_cjs_shims();
-var import_picocolors12 = __toESM(require_picocolors(), 1);
+var import_picocolors13 = __toESM(require_picocolors(), 1);
 var CHANGES_AI_CONTRACT = `Provide a clearly separated AI change-impact review with:
 
 Highest-risk changes
@@ -111084,7 +111392,7 @@ async function runChanges(base2, compare, opts) {
     const health = await code.health();
     if (!health.ok) {
       console.error(
-        import_picocolors12.default.red("Source-intelligence host unreachable \u2014 run: horus index")
+        import_picocolors13.default.red("Source-intelligence host unreachable \u2014 run: horus index")
       );
       return 1;
     }
@@ -111106,20 +111414,20 @@ async function runChanges(base2, compare, opts) {
         });
         console.log("\n" + renderInterpretation(result));
         if (!result.ok) {
-          console.error(import_picocolors12.default.yellow(`[ai] ${result.warning}`));
+          console.error(import_picocolors13.default.yellow(`[ai] ${result.warning}`));
         }
       }
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors12.default.red(err2.message));
+    console.error(import_picocolors13.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/timeline.ts
 init_cjs_shims();
-var import_picocolors13 = __toESM(require_picocolors(), 1);
+var import_picocolors14 = __toESM(require_picocolors(), 1);
 var DEFAULT_SINCE = "7 days ago";
 function resolveTimelineWindow(opts) {
   const usingDefault = !opts.all && opts.since === void 0;
@@ -111149,7 +111457,7 @@ async function runTimeline(service, opts) {
     try {
       renv = resolveEnvironment(config2, { project: opts.repo });
     } catch (err2) {
-      console.error(import_picocolors13.default.red(err2.message));
+      console.error(import_picocolors14.default.red(err2.message));
       return 1;
     }
     const { code } = createConnectors(config2);
@@ -111164,9 +111472,9 @@ async function runTimeline(service, opts) {
       console.log(renderChangeTimeline(t2));
       if (usingDefaultWindow) {
         console.log(
-          import_picocolors13.default.dim(
+          import_picocolors14.default.dim(
             `
-  Showing the last 7 days (default). Widen with ${import_picocolors13.default.bold('--since "30 days ago"')}, pin a range with ${import_picocolors13.default.bold("--since <when> --until <when>")}, or see everything with ${import_picocolors13.default.bold("--all")}.`
+  Showing the last 7 days (default). Widen with ${import_picocolors14.default.bold('--since "30 days ago"')}, pin a range with ${import_picocolors14.default.bold("--since <when> --until <when>")}, or see everything with ${import_picocolors14.default.bold("--all")}.`
           )
         );
       }
@@ -111183,21 +111491,26 @@ async function runTimeline(service, opts) {
         });
         console.log("\n" + renderInterpretation(result));
         if (!result.ok) {
-          console.error(import_picocolors13.default.yellow(`[ai] ${result.warning}`));
+          console.error(import_picocolors14.default.yellow(`[ai] ${result.warning}`));
         }
       }
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors13.default.red(err2.message));
+    console.error(import_picocolors14.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/what-changed.ts
 init_cjs_shims();
-var import_picocolors14 = __toESM(require_picocolors(), 1);
+var import_picocolors15 = __toESM(require_picocolors(), 1);
 var DEFAULT_SINCE2 = "7 days ago";
+function looksLikeGitRef(s5) {
+  const t2 = s5.trim();
+  if (/\s/.test(t2) || /^\d{4}-\d{2}-\d{2}/.test(t2)) return false;
+  return /[~^]/.test(t2) || /^HEAD\b/.test(t2) || /^[0-9a-f]{7,40}$/i.test(t2) || /^v?\d+\.\d+/.test(t2);
+}
 var WHAT_CHANGED_AI_CONTRACT = `Provide a clearly separated AI interpretation section with:
 
 Evidence used
@@ -111220,11 +111533,18 @@ async function runWhatChanged(service, opts) {
     try {
       renv = resolveEnvironment(config2, { project: opts.repo });
     } catch (err2) {
-      console.error(import_picocolors14.default.red(err2.message));
+      console.error(import_picocolors15.default.red(err2.message));
       return 1;
     }
     const { code } = createConnectors(config2);
     const since = opts.since ?? DEFAULT_SINCE2;
+    if (opts.since !== void 0 && looksLikeGitRef(opts.since) && !await resolvesToCommit(renv.path, opts.since)) {
+      console.error(
+        import_picocolors15.default.yellow(
+          `Warning: --since "${opts.since}" does not resolve to a commit (shallow clone or unknown ref?); it will be treated as a date filter and likely return no commits.`
+        )
+      );
+    }
     const r = await whatChanged(
       { repoPath: renv.path, since, until: opts.until, service },
       { code }
@@ -111243,7 +111563,7 @@ async function runWhatChanged(service, opts) {
       });
       console.log("\n" + renderInterpretation(result));
       if (!result.ok) {
-        console.error(import_picocolors14.default.yellow(`[ai] ${result.warning}`));
+        console.error(import_picocolors15.default.yellow(`[ai] ${result.warning}`));
       }
     }
     if (opts.push) {
@@ -111251,19 +111571,19 @@ async function runWhatChanged(service, opts) {
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors14.default.red(err2.message));
+    console.error(import_picocolors15.default.red(err2.message));
     return 1;
   }
 }
 async function pushChangeReport(r, repoCwd) {
   const session = authedClient();
   if (!session) {
-    console.error(import_picocolors14.default.yellow("[cloud] not logged in \u2014 run `horus login` to push reports."));
+    console.error(import_picocolors15.default.yellow("[cloud] not logged in \u2014 run `horus login` to push reports."));
     return;
   }
   const cfg = readCloudConfig(repoRootOrCwd(repoCwd));
   if (!isCloudActive(cfg)) {
-    console.error(import_picocolors14.default.yellow("[cloud] repo not linked \u2014 run `horus cloud link` to push reports."));
+    console.error(import_picocolors15.default.yellow("[cloud] repo not linked \u2014 run `horus cloud link` to push reports."));
     return;
   }
   const projectId = cfg.project?.id;
@@ -111309,15 +111629,15 @@ async function pushChangeReport(r, repoCwd) {
       queueTopologyTouched: r.queueTopology.touched,
       payload
     });
-    console.error(import_picocolors14.default.dim("[cloud] pushed change report."));
+    console.error(import_picocolors15.default.dim("[cloud] pushed change report."));
   } catch (err2) {
-    console.error(import_picocolors14.default.yellow(`[cloud] push failed: ${err2.message}`));
+    console.error(import_picocolors15.default.yellow(`[cloud] push failed: ${err2.message}`));
   }
 }
 
 // ../../packages/cli/src/commands/architecture.ts
 init_cjs_shims();
-var import_picocolors15 = __toESM(require_picocolors(), 1);
+var import_picocolors16 = __toESM(require_picocolors(), 1);
 var ARCHITECTURE_AI_CONTRACT = `Provide a clearly separated AI interpretation section with:
 
 System summary
@@ -111346,7 +111666,7 @@ async function runArchitecture(opts) {
     const health = await code.health();
     if (!health.ok) {
       console.error(
-        import_picocolors15.default.red("Source-intelligence host unreachable \u2014 run: horus index")
+        import_picocolors16.default.red("Source-intelligence host unreachable \u2014 run: horus index")
       );
       return 1;
     }
@@ -111374,7 +111694,7 @@ async function runArchitecture(opts) {
           });
           console.log("\n" + renderInterpretation(result));
           if (!result.ok) {
-            console.error(import_picocolors15.default.yellow(`[ai] ${result.warning}`));
+            console.error(import_picocolors16.default.yellow(`[ai] ${result.warning}`));
           }
         }
       }
@@ -111383,14 +111703,14 @@ async function runArchitecture(opts) {
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors15.default.red(err2.message));
+    console.error(import_picocolors16.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/blast-radius.ts
 init_cjs_shims();
-var import_picocolors16 = __toESM(require_picocolors(), 1);
+var import_picocolors17 = __toESM(require_picocolors(), 1);
 var BLAST_RADIUS_AI_CONTRACT = `Provide a clearly separated AI interpretation section with:
 
 Evidence used
@@ -111417,7 +111737,7 @@ async function runBlastRadius(query, opts) {
     const { code } = createConnectors(config2);
     const health = await code.health();
     if (!health.ok) {
-      console.error(import_picocolors16.default.red("Source-intelligence host unreachable \u2014 run: horus index"));
+      console.error(import_picocolors17.default.red("Source-intelligence host unreachable \u2014 run: horus index"));
       return 1;
     }
     let project;
@@ -111430,12 +111750,12 @@ async function runBlastRadius(query, opts) {
       const r = await analyzeBlastRadius(query, { code, db, project }, opts.depth ?? 3);
       if (!r) {
         console.log(`No symbol found for: ${query}`);
-        console.log(import_picocolors16.default.dim(`  Tip: use an exact class or function name, e.g. "MyService"`));
+        console.log(import_picocolors17.default.dim(`  Tip: use an exact class or function name, e.g. "MyService"`));
         return 1;
       }
       if (r.seed.name.toLowerCase() !== query.toLowerCase()) {
         console.log(
-          import_picocolors16.default.yellow(`  No exact match for "${query}"`) + import_picocolors16.default.dim(` \u2014 showing closest: "${r.seed.name}" (fuzzy match)`)
+          import_picocolors17.default.yellow(`  No exact match for "${query}"`) + import_picocolors17.default.dim(` \u2014 showing closest: "${r.seed.name}" (fuzzy match)`)
         );
       }
       if (opts.json) {
@@ -111455,7 +111775,7 @@ async function runBlastRadius(query, opts) {
           });
           console.log("\n" + renderInterpretation(result));
           if (!result.ok) {
-            console.error(import_picocolors16.default.yellow(`[ai] ${result.warning}`));
+            console.error(import_picocolors17.default.yellow(`[ai] ${result.warning}`));
           }
         }
       }
@@ -111464,28 +111784,28 @@ async function runBlastRadius(query, opts) {
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors16.default.red(err2.message));
+    console.error(import_picocolors17.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/repos.ts
 init_cjs_shims();
-var import_picocolors17 = __toESM(require_picocolors(), 1);
+var import_picocolors18 = __toESM(require_picocolors(), 1);
 async function runRepos(opts) {
   const config2 = await loadConfig(opts.config);
   const providers = repoProviders(config2);
   if (providers.length === 0) {
-    console.log(import_picocolors17.default.dim("No repositories configured."));
+    console.log(import_picocolors18.default.dim("No repositories configured."));
     return 0;
   }
   const health = await reposHealth(providers);
   for (const h3 of health) {
-    const dot = h3.reachable ? import_picocolors17.default.green("\u25CF") : import_picocolors17.default.red("\u25CF");
-    const name2 = import_picocolors17.default.bold(h3.repo.padEnd(20));
-    const hostUrl = import_picocolors17.default.cyan(h3.hostUrl.padEnd(30));
-    const path = import_picocolors17.default.dim(h3.path);
-    const detail = h3.detail ? import_picocolors17.default.dim(`(${h3.detail})`) : "";
+    const dot = h3.reachable ? import_picocolors18.default.green("\u25CF") : import_picocolors18.default.red("\u25CF");
+    const name2 = import_picocolors18.default.bold(h3.repo.padEnd(20));
+    const hostUrl = import_picocolors18.default.cyan(h3.hostUrl.padEnd(30));
+    const path = import_picocolors18.default.dim(h3.path);
+    const detail = h3.detail ? import_picocolors18.default.dim(`(${h3.detail})`) : "";
     console.log(`  ${dot}  ${name2}  ${hostUrl}  ${path}  ${detail}`);
   }
   return 0;
@@ -111493,7 +111813,7 @@ async function runRepos(opts) {
 
 // ../../packages/cli/src/commands/search.ts
 init_cjs_shims();
-var import_picocolors18 = __toESM(require_picocolors(), 1);
+var import_picocolors19 = __toESM(require_picocolors(), 1);
 async function runSearch(query, opts) {
   const config2 = await loadConfig(opts.config);
   const providers = repoProviders(config2);
@@ -111504,16 +111824,16 @@ async function runSearch(query, opts) {
   }
   let totalMatches = 0;
   for (const result of results) {
-    const statusDot = result.reachable ? import_picocolors18.default.green("\u25CF") : import_picocolors18.default.red("\u25CF");
+    const statusDot = result.reachable ? import_picocolors19.default.green("\u25CF") : import_picocolors19.default.red("\u25CF");
     console.log("");
-    console.log(`${statusDot}  ${import_picocolors18.default.bold("## " + result.repo)}  ${import_picocolors18.default.dim(result.hostUrl)}`);
+    console.log(`${statusDot}  ${import_picocolors19.default.bold("## " + result.repo)}  ${import_picocolors19.default.dim(result.hostUrl)}`);
     if (!result.reachable) {
-      console.log(import_picocolors18.default.dim("  (unreachable)"));
+      console.log(import_picocolors19.default.dim("  (unreachable)"));
     } else if (result.symbols.length === 0) {
-      console.log(import_picocolors18.default.dim("  (no matches)"));
+      console.log(import_picocolors19.default.dim("  (no matches)"));
     } else {
       for (const sym of result.symbols) {
-        console.log(`  - ${import_picocolors18.default.bold(sym.name)}  ${import_picocolors18.default.dim(sym.filePath)}`);
+        console.log(`  - ${import_picocolors19.default.bold(sym.name)}  ${import_picocolors19.default.dim(sym.filePath)}`);
       }
       totalMatches += result.symbols.length;
     }
@@ -111521,7 +111841,7 @@ async function runSearch(query, opts) {
   console.log("");
   const reachableCount = results.filter((r) => r.reachable).length;
   console.log(
-    import_picocolors18.default.dim(
+    import_picocolors19.default.dim(
       `${totalMatches} match(es) across ${reachableCount}/${results.length} reachable repo(s) for query: "${query}"`
     )
   );
@@ -111530,7 +111850,7 @@ async function runSearch(query, opts) {
 
 // ../../packages/cli/src/commands/investigations.ts
 init_cjs_shims();
-var import_picocolors19 = __toESM(require_picocolors(), 1);
+var import_picocolors20 = __toESM(require_picocolors(), 1);
 
 // ../../packages/cli/src/lib/format.ts
 init_cjs_shims();
@@ -111573,8 +111893,8 @@ async function runInvestigations(opts) {
     const session = authedClient();
     if (!session) {
       console.error(
-        import_picocolors19.default.red(
-          `This repo is linked to Horus Cloud but you are not logged in. Run ${import_picocolors19.default.bold("horus login")} first.`
+        import_picocolors20.default.red(
+          `This repo is linked to Horus Cloud but you are not logged in. Run ${import_picocolors20.default.bold("horus login")} first.`
         )
       );
       return 1;
@@ -111615,18 +111935,18 @@ async function runInvestigations(opts) {
 
 // ../../packages/cli/src/commands/replay.ts
 init_cjs_shims();
-var import_picocolors20 = __toESM(require_picocolors(), 1);
+var import_picocolors21 = __toESM(require_picocolors(), 1);
 async function runReplay(id, opts) {
   const { db, sql: sql2 } = await openDb(await resolveDbUrl(opts.config));
   try {
     const row = await getInvestigation(db, id);
     if (!row) {
-      console.error(import_picocolors20.default.red("No investigation found: " + id));
+      console.error(import_picocolors21.default.red("No investigation found: " + id));
       return 1;
     }
     if (!row.report) {
       console.error(
-        import_picocolors20.default.red(
+        import_picocolors21.default.red(
           "Investigation " + id + " has no stored report (run a newer investigation)."
         )
       );
@@ -111639,7 +111959,7 @@ async function runReplay(id, opts) {
     if (opts.ai && fmt !== "json") {
       if (report.aiJudgment && !opts.refreshAi) {
         renderStoredAIJudgment(report.aiJudgment);
-        console.log(import_picocolors20.default.dim("[ai] Stored judgment replayed. Use --refresh-ai to regenerate."));
+        console.log(import_picocolors21.default.dim("[ai] Stored judgment replayed. Use --refresh-ai to regenerate."));
       } else {
         const narrativeInput = buildNarrativeInput(report);
         const { provider } = await buildNarrativeProvider({
@@ -111652,17 +111972,17 @@ async function runReplay(id, opts) {
         );
         if (!fromProvider && degraded) {
           if (validationErrors?.length) {
-            console.error(import_picocolors20.default.yellow("[ai] structured validation incomplete \u2014 showing raw AI narrative"));
+            console.error(import_picocolors21.default.yellow("[ai] structured validation incomplete \u2014 showing raw AI narrative"));
           }
           console.log("");
-          console.log(import_picocolors20.default.dim("\u2500".repeat(60)));
-          console.log(import_picocolors20.default.bold("AI narrative ") + import_picocolors20.default.yellow("(unstructured \u2014 not validated)"));
-          if (output.what?.trim()) console.log(import_picocolors20.default.bold("\nWhat:"), output.what.trim());
-          if (output.why?.trim()) console.log(import_picocolors20.default.bold("\nWhy:"), output.why.trim());
+          console.log(import_picocolors21.default.dim("\u2500".repeat(60)));
+          console.log(import_picocolors21.default.bold("AI narrative ") + import_picocolors21.default.yellow("(unstructured \u2014 not validated)"));
+          if (output.what?.trim()) console.log(import_picocolors21.default.bold("\nWhat:"), output.what.trim());
+          if (output.why?.trim()) console.log(import_picocolors21.default.bold("\nWhy:"), output.why.trim());
         } else if (!fromProvider) {
-          console.error(import_picocolors20.default.yellow("[ai] Provider unavailable \u2014 deterministic output shown above."));
+          console.error(import_picocolors21.default.yellow("[ai] Provider unavailable \u2014 deterministic output shown above."));
           if (validationErrors?.length) {
-            console.error(import_picocolors20.default.dim(`    ${validationErrors[0]}`));
+            console.error(import_picocolors21.default.dim(`    ${validationErrors[0]}`));
           }
         } else {
           const stored = narrativeOutputToStoredJudgment(output, "anthropic");
@@ -111683,7 +112003,7 @@ async function runReplay(id, opts) {
 
 // ../../packages/cli/src/commands/owner.ts
 init_cjs_shims();
-var import_picocolors21 = __toESM(require_picocolors(), 1);
+var import_picocolors22 = __toESM(require_picocolors(), 1);
 async function runOwner(query, opts) {
   try {
     const config2 = await loadConfig(opts.config);
@@ -111691,7 +112011,7 @@ async function runOwner(query, opts) {
     try {
       renv = resolveEnvironment(config2, { project: opts.repo });
     } catch (err2) {
-      console.error(import_picocolors21.default.red(err2.message));
+      console.error(import_picocolors22.default.red(err2.message));
       return 1;
     }
     const code = codeForRepo(config2, renv.project);
@@ -111699,16 +112019,16 @@ async function runOwner(query, opts) {
     console.log(opts.json ? ownershipToJSON(o5) : renderOwnership(o5));
     return 0;
   } catch (err2) {
-    console.error(import_picocolors21.default.red(err2.message));
+    console.error(import_picocolors22.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/postmortem.ts
 init_cjs_shims();
-var import_node_fs15 = require("fs");
-var import_node_path16 = require("path");
-var import_picocolors22 = __toESM(require_picocolors(), 1);
+var import_node_fs16 = require("fs");
+var import_node_path17 = require("path");
+var import_picocolors23 = __toESM(require_picocolors(), 1);
 async function runPostmortem(id, opts) {
   const log = opts.write ?? ((line2) => console.log(line2));
   let sql2;
@@ -111722,11 +112042,11 @@ async function runPostmortem(id, opts) {
       const { db } = conn;
       const row = await getInvestigation(db, id);
       if (!row) {
-        log(import_picocolors22.default.red("No investigation found: " + id));
+        log(import_picocolors23.default.red("No investigation found: " + id));
         return 1;
       }
       if (!row.report) {
-        log(import_picocolors22.default.red("Investigation " + id + " has no stored report."));
+        log(import_picocolors23.default.red("Investigation " + id + " has no stored report."));
         return 1;
       }
       report = migrateReport(row.report);
@@ -111818,25 +112138,25 @@ _AI summary unavailable: ${validationErrors?.[0] ?? "provider error"}_
       }
     }
     if (opts.output) {
-      const outputPath = (0, import_node_path16.resolve)(opts.output);
-      if ((0, import_node_fs15.existsSync)(outputPath) && !opts.force) {
-        log(import_picocolors22.default.red("\u2717") + " " + outputPath + " already exists");
-        log(import_picocolors22.default.dim("  pass --force to overwrite"));
+      const outputPath = (0, import_node_path17.resolve)(opts.output);
+      if ((0, import_node_fs16.existsSync)(outputPath) && !opts.force) {
+        log(import_picocolors23.default.red("\u2717") + " " + outputPath + " already exists");
+        log(import_picocolors23.default.dim("  pass --force to overwrite"));
         return 1;
       }
       try {
-        (0, import_node_fs15.writeFileSync)(outputPath, content, "utf8");
+        (0, import_node_fs16.writeFileSync)(outputPath, content, "utf8");
       } catch (err2) {
-        log(import_picocolors22.default.red("\u2717 Could not write " + outputPath + ": ") + err2.message);
+        log(import_picocolors23.default.red("\u2717 Could not write " + outputPath + ": ") + err2.message);
         return 1;
       }
-      log(import_picocolors22.default.green("\u2713") + " Saved postmortem to " + outputPath);
+      log(import_picocolors23.default.green("\u2713") + " Saved postmortem to " + outputPath);
     } else {
       log(content);
     }
   } catch (err2) {
     const message = err2 instanceof Error ? err2.message : String(err2);
-    log(import_picocolors22.default.red("postmortem failed: " + message));
+    log(import_picocolors23.default.red("postmortem failed: " + message));
     return 1;
   } finally {
     if (sql2) {
@@ -111848,7 +112168,7 @@ _AI summary unavailable: ${validationErrors?.[0] ?? "provider error"}_
 
 // ../../packages/cli/src/commands/score.ts
 init_cjs_shims();
-var import_picocolors23 = __toESM(require_picocolors(), 1);
+var import_picocolors24 = __toESM(require_picocolors(), 1);
 var SCORE_AI_CONTRACT = `Provide a clearly separated AI score explanation with:
 
 Why this scored this way
@@ -111867,11 +112187,11 @@ async function runScore(id, opts) {
   try {
     const row = await getInvestigation(db, id);
     if (!row) {
-      console.error(import_picocolors23.default.red("No investigation found: " + id));
+      console.error(import_picocolors24.default.red("No investigation found: " + id));
       return 1;
     }
     if (!row.report) {
-      console.error(import_picocolors23.default.red("Investigation " + id + " has no stored report."));
+      console.error(import_picocolors24.default.red("Investigation " + id + " has no stored report."));
       return 1;
     }
     const s5 = scoreInvestigation(migrateReport(row.report));
@@ -111892,7 +112212,7 @@ async function runScore(id, opts) {
         });
         console.log("\n" + renderInterpretation(result));
         if (!result.ok) {
-          console.error(import_picocolors23.default.yellow(`[ai] ${result.warning}`));
+          console.error(import_picocolors24.default.yellow(`[ai] ${result.warning}`));
         }
       }
     }
@@ -111932,7 +112252,7 @@ async function runScores(opts) {
 
 // ../../packages/cli/src/commands/ask.ts
 init_cjs_shims();
-var import_picocolors24 = __toESM(require_picocolors(), 1);
+var import_picocolors25 = __toESM(require_picocolors(), 1);
 function renderAnswer(report, directive, opts) {
   const answer = answerQuestion(report, directive);
   if (answer) {
@@ -111944,13 +112264,13 @@ function renderAnswer(report, directive, opts) {
   if (!opts.json && report.aiJudgment) {
     const j3 = report.aiJudgment;
     console.log("");
-    console.log(import_picocolors24.default.dim("\u2500".repeat(60)));
-    console.log(import_picocolors24.default.dim(`Stored AI judgment (${j3.provider}, ${j3.generatedAt}):`));
+    console.log(import_picocolors25.default.dim("\u2500".repeat(60)));
+    console.log(import_picocolors25.default.dim(`Stored AI judgment (${j3.provider}, ${j3.generatedAt}):`));
     if (j3.rootCauseAssessment) {
-      console.log(import_picocolors24.default.bold("Root cause (AI):"), j3.rootCauseAssessment.summary);
-      console.log(import_picocolors24.default.dim(`Uncertainty: ${j3.rootCauseAssessment.uncertainty}`));
+      console.log(import_picocolors25.default.bold("Root cause (AI):"), j3.rootCauseAssessment.summary);
+      console.log(import_picocolors25.default.dim(`Uncertainty: ${j3.rootCauseAssessment.uncertainty}`));
     } else {
-      console.log(import_picocolors24.default.bold("AI Why:"), j3.why);
+      console.log(import_picocolors25.default.bold("AI Why:"), j3.why);
     }
   }
   return 0;
@@ -111979,8 +112299,8 @@ async function runAsk(id, directive, opts) {
     const session = authedClient();
     if (!session) {
       console.error(
-        import_picocolors24.default.red(
-          `This repo is linked to Horus Cloud but you are not logged in. Run ${import_picocolors24.default.bold("horus login")} first.`
+        import_picocolors25.default.red(
+          `This repo is linked to Horus Cloud but you are not logged in. Run ${import_picocolors25.default.bold("horus login")} first.`
         )
       );
       return 1;
@@ -111989,15 +112309,15 @@ async function runAsk(id, directive, opts) {
       const report = await fetchInvestigationReportFromCloud(session.client, cloudCfg, id);
       if (report) return renderAnswer(report, directive, opts);
       console.error(
-        import_picocolors24.default.red(
-          `Investigation ${id} has no saved report locally or in Horus Cloud. Run ${import_picocolors24.default.bold("horus investigate")} first.`
+        import_picocolors25.default.red(
+          `Investigation ${id} has no saved report locally or in Horus Cloud. Run ${import_picocolors25.default.bold("horus investigate")} first.`
         )
       );
       return 1;
     } catch (err2) {
       if (err2 instanceof CloudError && err2.status === 404) {
         console.error(
-          import_picocolors24.default.red(
+          import_picocolors25.default.red(
             `No investigation found for "${id}" locally or in Horus Cloud. Use the id printed at the top of \`horus investigate\` output.`
           )
         );
@@ -112011,21 +112331,21 @@ async function runAsk(id, directive, opts) {
     case "found":
       return renderAnswer(local.report, directive, opts);
     case "no-report":
-      console.error(import_picocolors24.default.red("Investigation " + id + " has no stored report."));
+      console.error(import_picocolors25.default.red("Investigation " + id + " has no stored report."));
       return 1;
     case "error":
-      console.error(import_picocolors24.default.red(local.message));
+      console.error(import_picocolors25.default.red(local.message));
       return 1;
     case "not-found":
     default:
-      console.error(import_picocolors24.default.red("No investigation found: " + id));
+      console.error(import_picocolors25.default.red("No investigation found: " + id));
       return 1;
   }
 }
 
 // ../../packages/cli/src/commands/onboard.ts
 init_cjs_shims();
-var import_picocolors25 = __toESM(require_picocolors(), 1);
+var import_picocolors26 = __toESM(require_picocolors(), 1);
 var ONBOARD_AI_CONTRACT = `Provide a clearly separated AI onboarding guide with:
 
 Start here
@@ -112053,7 +112373,7 @@ async function runOnboard(area, opts) {
     try {
       renv = resolveEnvironment(config2, { project: opts.repo });
     } catch (err2) {
-      console.error(import_picocolors25.default.red(err2.message));
+      console.error(import_picocolors26.default.red(err2.message));
       return 1;
     }
     const repo = { name: renv.project, path: renv.path };
@@ -112061,7 +112381,7 @@ async function runOnboard(area, opts) {
     const health = await code.health();
     if (!health.ok) {
       console.error(
-        import_picocolors25.default.red("Source-intelligence host unreachable \u2014 run: horus index")
+        import_picocolors26.default.red("Source-intelligence host unreachable \u2014 run: horus index")
       );
       return 1;
     }
@@ -112088,7 +112408,7 @@ async function runOnboard(area, opts) {
           });
           console.log("\n" + renderInterpretation(result));
           if (!result.ok) {
-            console.error(import_picocolors25.default.yellow(`[ai] ${result.warning}`));
+            console.error(import_picocolors26.default.yellow(`[ai] ${result.warning}`));
           }
         }
       }
@@ -112097,14 +112417,14 @@ async function runOnboard(area, opts) {
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors25.default.red(err2.message));
+    console.error(import_picocolors26.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/simulate.ts
 init_cjs_shims();
-var import_picocolors26 = __toESM(require_picocolors(), 1);
+var import_picocolors27 = __toESM(require_picocolors(), 1);
 async function runSimulate(scenarioId, opts) {
   try {
     if (scenarioId === void 0) {
@@ -112114,7 +112434,7 @@ async function runSimulate(scenarioId, opts) {
     const scenario = getScenario(scenarioId);
     if (scenario === null) {
       console.error(
-        import_picocolors26.default.red(
+        import_picocolors27.default.red(
           `Unknown scenario: "${scenarioId}". Run horus simulate to list available scenarios.`
         )
       );
@@ -112125,14 +112445,14 @@ async function runSimulate(scenarioId, opts) {
     try {
       renv = resolveEnvironment(config2, { project: opts.repo });
     } catch (err2) {
-      console.error(import_picocolors26.default.red(err2.message));
+      console.error(import_picocolors27.default.red(err2.message));
       return 1;
     }
     const code = codeForRepo(config2, renv.project);
     const health = await code.health();
     if (!health.ok) {
       console.error(
-        import_picocolors26.default.red("Source-intelligence host unreachable \u2014 run: horus index")
+        import_picocolors27.default.red("Source-intelligence host unreachable \u2014 run: horus index")
       );
       return 1;
     }
@@ -112149,14 +112469,14 @@ async function runSimulate(scenarioId, opts) {
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors26.default.red(err2.message));
+    console.error(import_picocolors27.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/logs.ts
 init_cjs_shims();
-var import_picocolors27 = __toESM(require_picocolors(), 1);
+var import_picocolors28 = __toESM(require_picocolors(), 1);
 var LOGS_AI_CONTRACT = `Provide a clearly separated AI evidence narration with:
 
 Evidence used
@@ -112202,9 +112522,9 @@ function parseWhere(raw) {
 }
 var whereLabel = (where) => where.map((w4) => `${w4.field}=${w4.value}`).join(", ");
 function levelColor(level, text2) {
-  if (level === "error" || level === "fatal") return import_picocolors27.default.red(text2);
-  if (level === "warn") return import_picocolors27.default.yellow(text2);
-  return import_picocolors27.default.dim(text2);
+  if (level === "error" || level === "fatal") return import_picocolors28.default.red(text2);
+  if (level === "warn") return import_picocolors28.default.yellow(text2);
+  return import_picocolors28.default.dim(text2);
 }
 function matchServiceLabel(requested, candidates) {
   if (candidates.includes(requested)) return { kind: "unique", matched: requested };
@@ -112220,7 +112540,7 @@ async function runLogs(service, opts) {
     try {
       where = parseWhere(opts.where);
     } catch (err2) {
-      console.error(import_picocolors27.default.red(err2.message));
+      console.error(import_picocolors28.default.red(err2.message));
       return 1;
     }
     const hasWhere = where.length > 0;
@@ -112230,13 +112550,13 @@ async function runLogs(service, opts) {
     try {
       renv = resolveEnvironment(config2, { project: opts.project, env: opts.env });
     } catch (err2) {
-      console.error(import_picocolors27.default.red(err2.message));
+      console.error(import_picocolors28.default.red(err2.message));
       return 1;
     }
     const logs = logsForEnv(renv);
     if (logs === null) {
       console.error(
-        import_picocolors27.default.red(
+        import_picocolors28.default.red(
           `No Elasticsearch connector configured for ${renv.project}/${renv.env} (set ES_URL / ES_USERNAME / ES_PASSWORD)`
         )
       );
@@ -112244,7 +112564,7 @@ async function runLogs(service, opts) {
     }
     const health = await logs.health();
     if (!health.ok) {
-      console.error(import_picocolors27.default.red(`Elasticsearch unreachable: ${health.detail}`));
+      console.error(import_picocolors28.default.red(`Elasticsearch unreachable: ${health.detail}`));
       return 1;
     }
     const resolvedService = service ?? renv.connectors.elasticsearch?.serviceName;
@@ -112257,21 +112577,21 @@ async function runLogs(service, opts) {
         requiresEventCode: aggregatesEventCode
       });
       for (const w4 of compat.issues.filter((i3) => i3.severity === "warning")) {
-        console.warn(import_picocolors27.default.yellow(`[warn] ${w4.field}: ${w4.message}`));
+        console.warn(import_picocolors28.default.yellow(`[warn] ${w4.field}: ${w4.message}`));
       }
       const errors2 = compat.issues.filter((i3) => i3.severity === "error");
       if (errors2.length > 0) {
-        console.error(import_picocolors27.default.red("Elasticsearch field mapping is incompatible with the index:"));
+        console.error(import_picocolors28.default.red("Elasticsearch field mapping is incompatible with the index:"));
         for (const e of errors2) {
-          console.error(import_picocolors27.default.red(`  ${e.field}: ${e.message}`));
+          console.error(import_picocolors28.default.red(`  ${e.field}: ${e.message}`));
         }
         console.error(
-          import_picocolors27.default.dim("Fix fields.* overrides in your connector config or choose the correct preset.")
+          import_picocolors28.default.dim("Fix fields.* overrides in your connector config or choose the correct preset.")
         );
         return 1;
       }
     } catch {
-      console.warn(import_picocolors27.default.dim("[warn] Elasticsearch compatibility check unavailable \u2014 proceeding."));
+      console.warn(import_picocolors28.default.dim("[warn] Elasticsearch compatibility check unavailable \u2014 proceeding."));
     }
     const from = sinceToIso(opts.since) ?? new Date(Date.now() - 7 * 864e5).toISOString();
     const fromDisplay = from.slice(0, 16).replace("T", " ");
@@ -112327,12 +112647,12 @@ async function runLogs(service, opts) {
         return 0;
       }
       console.error(
-        import_picocolors27.default.dim(
+        import_picocolors28.default.dim(
           `logs: ${renv.project}/${renv.env}` + (resolvedService ? ` \xB7 service ${resolvedService}` : "") + ` \xB7 from ${fromDisplay} UTC \xB7 level ${rawLevel ?? "all"}` + (hasWhere ? ` \xB7 where ${whereLabel(where)}` : "") + (opts.grep ? ` \xB7 grep "${opts.grep}"` : "") + (rawLevel === "error" && !hasWhere ? "  (error+ only \u2014 use --all-levels for info/debug)" : "")
         )
       );
       if (records.length === 0) {
-        console.log(import_picocolors27.default.dim("No logs matched."));
+        console.log(import_picocolors28.default.dim("No logs matched."));
         return 0;
       }
       for (const r of records) {
@@ -112342,12 +112662,12 @@ async function runLogs(service, opts) {
         const line2 = `${ts}  ${lvl}  ${comp}  ${r.message.slice(0, 120)}`;
         console.log(levelColor(r.level, line2));
         for (const { key, value } of extractContextFields(r)) {
-          console.log(import_picocolors27.default.dim(`    ${key}: ${value.slice(0, 200)}`));
+          console.log(import_picocolors28.default.dim(`    ${key}: ${value.slice(0, 200)}`));
         }
       }
       if (truncated) {
         console.error(
-          import_picocolors27.default.yellow(
+          import_picocolors28.default.yellow(
             `[warn] showing the first ${limit} record(s) \u2014 results may be truncated. Narrow with --where/--since/--level or raise --limit (max 1000).`
           )
         );
@@ -112390,22 +112710,22 @@ async function runLogs(service, opts) {
         return 0;
       }
       console.log(
-        import_picocolors27.default.bold(`Top ${field}`) + import_picocolors27.default.dim(
+        import_picocolors28.default.bold(`Top ${field}`) + import_picocolors28.default.dim(
           ` \u2014 ${renv.project}/${renv.env}` + (resolvedService ? ` \xB7 service ${resolvedService}` : "") + (opts.grep ? ` \xB7 grep "${opts.grep}"` : "") + (hasWhere ? ` \xB7 where ${whereLabel(where)}` : "")
         )
       );
-      console.log(import_picocolors27.default.dim(`  index: ${indexPattern} \xB7 from: ${fromDisplay} UTC \xB7 severity: error+`));
+      console.log(import_picocolors28.default.dim(`  index: ${indexPattern} \xB7 from: ${fromDisplay} UTC \xB7 severity: error+`));
       console.log("");
       if (buckets.length === 0) {
-        console.log(import_picocolors27.default.dim(`  No error logs with field "${field}" in the window.`));
-        console.log(import_picocolors27.default.dim(`  Tip: ensure "${field}" is an aggregatable (keyword) field.`));
+        console.log(import_picocolors28.default.dim(`  No error logs with field "${field}" in the window.`));
+        console.log(import_picocolors28.default.dim(`  Tip: ensure "${field}" is an aggregatable (keyword) field.`));
         return 0;
       }
       for (const b5 of buckets) {
-        console.log(`  ${import_picocolors27.default.red(String(b5.count).padStart(6))}  ${b5.key}`);
+        console.log(`  ${import_picocolors28.default.red(String(b5.count).padStart(6))}  ${b5.key}`);
       }
       console.log("");
-      console.log(import_picocolors27.default.dim(`  ${buckets.length} distinct ${field} value(s) shown (top by error count).`));
+      console.log(import_picocolors28.default.dim(`  ${buckets.length} distinct ${field} value(s) shown (top by error count).`));
       return 0;
     }
     let analysis = await logs.analyzeErrors({
@@ -112475,46 +112795,46 @@ async function runLogs(service, opts) {
       return 0;
     }
     console.log(
-      import_picocolors27.default.bold(`Error analysis`) + import_picocolors27.default.dim(
+      import_picocolors28.default.bold(`Error analysis`) + import_picocolors28.default.dim(
         ` \u2014 ${renv.project}/${renv.env}` + (scopeService ? ` \xB7 service ${scopeService}` : "") + (opts.grep ? ` \xB7 grep "${opts.grep}"` : "") + (hasWhere ? ` \xB7 where ${whereLabel(where)}` : "")
       )
     );
-    console.log(import_picocolors27.default.dim(`  index: ${indexPattern} \xB7 from: ${fromDisplay} UTC \xB7 severity: error+`));
+    console.log(import_picocolors28.default.dim(`  index: ${indexPattern} \xB7 from: ${fromDisplay} UTC \xB7 severity: error+`));
     if (broadeningNote) {
-      console.log(import_picocolors27.default.yellow(`  ${broadeningNote}`));
+      console.log(import_picocolors28.default.yellow(`  ${broadeningNote}`));
     }
     console.log(
-      `  ${analysis.totalErrors} error(s) \xB7 ${analysis.signatures.length} signature(s) \xB7 ${import_picocolors27.default.yellow(String(analysis.newSignatures.length))} new`
+      `  ${analysis.totalErrors} error(s) \xB7 ${analysis.signatures.length} signature(s) \xB7 ${import_picocolors28.default.yellow(String(analysis.newSignatures.length))} new`
     );
     console.log("");
     if (analysis.signatures.length === 0) {
-      console.log(import_picocolors27.default.dim("  No error-level logs in the window."));
+      console.log(import_picocolors28.default.dim("  No error-level logs in the window."));
       console.log(
-        import_picocolors27.default.dim(
+        import_picocolors28.default.dim(
           `  Searched: ${scopeService ? `service "${scopeService}"` : "all services"} \xB7 index: ${indexPattern} \xB7 from: ${fromDisplay} UTC`
         )
       );
-      console.log(import_picocolors27.default.dim(`  Tip: use --since to widen the window (e.g. --since 30d).`));
+      console.log(import_picocolors28.default.dim(`  Tip: use --since to widen the window (e.g. --since 30d).`));
       return 0;
     }
     for (const s5 of analysis.signatures) {
       const tags = [];
-      if (s5.isNew) tags.push(import_picocolors27.default.red("NEW"));
+      if (s5.isNew) tags.push(import_picocolors28.default.red("NEW"));
       else if (s5.ratio !== void 0 && Number.isFinite(s5.ratio) && s5.ratio >= 1.5) {
-        tags.push(import_picocolors27.default.yellow(`spike x${s5.ratio.toFixed(1)}`));
+        tags.push(import_picocolors28.default.yellow(`spike x${s5.ratio.toFixed(1)}`));
       }
-      const svc = s5.services.length > 0 ? import_picocolors27.default.dim(` \xB7 ${s5.services.slice(0, 3).join(", ")}`) : "";
+      const svc = s5.services.length > 0 ? import_picocolors28.default.dim(` \xB7 ${s5.services.slice(0, 3).join(", ")}`) : "";
       const tagStr = tags.length > 0 ? `  [${tags.join(", ")}]` : "";
       console.log(
-        `  ${import_picocolors27.default.red(String(s5.count).padStart(6))}  ${import_picocolors27.default.bold(s5.key.padEnd(14).slice(0, 14))}  ` + import_picocolors27.default.dim(`first ${shortTs(s5.firstSeen)} \xB7 last ${shortTs(s5.lastSeen)}`) + svc + tagStr
+        `  ${import_picocolors28.default.red(String(s5.count).padStart(6))}  ${import_picocolors28.default.bold(s5.key.padEnd(14).slice(0, 14))}  ` + import_picocolors28.default.dim(`first ${shortTs(s5.firstSeen)} \xB7 last ${shortTs(s5.lastSeen)}`) + svc + tagStr
       );
     }
     if (analysis.affectedServices.length > 0) {
       console.log("");
-      console.log(`  ${import_picocolors27.default.bold("Affected services:")} ${analysis.affectedServices.join(", ")}`);
+      console.log(`  ${import_picocolors28.default.bold("Affected services:")} ${analysis.affectedServices.join(", ")}`);
     }
     console.log("");
-    console.log(import_picocolors27.default.dim("  (use --raw to see individual log lines)"));
+    console.log(import_picocolors28.default.dim("  (use --raw to see individual log lines)"));
     if (opts.ai) {
       const result = await renderAiInterpretation({
         command: "logs",
@@ -112533,19 +112853,19 @@ async function runLogs(service, opts) {
       });
       console.log("\n" + renderInterpretation(result));
       if (!result.ok) {
-        console.error(import_picocolors27.default.yellow(`[ai] ${result.warning}`));
+        console.error(import_picocolors28.default.yellow(`[ai] ${result.warning}`));
       }
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors27.default.red(err2.message));
+    console.error(import_picocolors28.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/metrics.ts
 init_cjs_shims();
-var import_picocolors28 = __toESM(require_picocolors(), 1);
+var import_picocolors29 = __toESM(require_picocolors(), 1);
 var METRICS_AI_CONTRACT = `Provide a clearly separated AI evidence narration with:
 
 Evidence used
@@ -112590,10 +112910,10 @@ function anomalyColor(anomaly) {
     case "latency-spike":
     case "error-rate-change":
     case "throughput-drop":
-      return import_picocolors28.default.red;
+      return import_picocolors29.default.red;
     case "queue-growth":
     case "change":
-      return import_picocolors28.default.yellow;
+      return import_picocolors29.default.yellow;
     default:
       return (s5) => s5;
   }
@@ -112620,7 +112940,7 @@ async function runMetrics(hint, opts) {
     const metrics = metricsProviderFromConfig(config2);
     if (metrics === null) {
       console.error(
-        import_picocolors28.default.red(
+        import_picocolors29.default.red(
           "Grafana not configured \u2014 set GRAFANA_URL + GRAFANA_USER + GRAFANA_PASSWORD"
         )
       );
@@ -112628,7 +112948,7 @@ async function runMetrics(hint, opts) {
     }
     const health = await metrics.health();
     if (!health.ok) {
-      console.error(import_picocolors28.default.red(`Grafana unreachable: ${health.detail}`));
+      console.error(import_picocolors29.default.red(`Grafana unreachable: ${health.detail}`));
       return 1;
     }
     const stepNum = opts.step !== void 0 ? Number(opts.step) : void 0;
@@ -112657,14 +112977,14 @@ async function runMetrics(hint, opts) {
         return 0;
       }
       if (series.length === 0) {
-        console.log(import_picocolors28.default.dim("No series returned."));
+        console.log(import_picocolors29.default.dim("No series returned."));
         return 0;
       }
       for (const s5 of series) {
         const summary = summarize(s5);
         const label = labelStr(s5.labels);
         console.log(
-          `  ${import_picocolors28.default.cyan(label || "(no labels)")}  last=${import_picocolors28.default.bold(fmtNum(summary.last))}  avg=${fmtNum(summary.avg)}`
+          `  ${import_picocolors29.default.cyan(label || "(no labels)")}  last=${import_picocolors29.default.bold(fmtNum(summary.last))}  avg=${fmtNum(summary.avg)}`
         );
       }
       return 0;
@@ -112679,36 +112999,36 @@ async function runMetrics(hint, opts) {
     if (findings2.length === 0) {
       if (hint !== void 0) {
         const tokens = extractHintTokens(hint);
-        console.log(import_picocolors28.default.dim(`No panels matched hint "${hint}".`));
+        console.log(import_picocolors29.default.dim(`No panels matched hint "${hint}".`));
         if (tokens.length > 0) {
-          console.log(import_picocolors28.default.dim(`  Searched for panels containing: ${tokens.join(", ")}`));
+          console.log(import_picocolors29.default.dim(`  Searched for panels containing: ${tokens.join(", ")}`));
         }
         console.log(
-          import_picocolors28.default.dim(
-            `  Tip: run ${import_picocolors28.default.bold("horus metrics")} (no hint) to see all available panels, then use a panel title or keyword directly.`
+          import_picocolors29.default.dim(
+            `  Tip: run ${import_picocolors29.default.bold("horus metrics")} (no hint) to see all available panels, then use a panel title or keyword directly.`
           )
         );
       } else {
-        console.log(import_picocolors28.default.dim("No panels found in configured Grafana dashboards."));
+        console.log(import_picocolors29.default.dim("No panels found in configured Grafana dashboards."));
       }
       return 0;
     }
     const hintSuffix = hint !== void 0 ? ` (hint: "${hint}")` : "";
     const matchSources = hint !== void 0 ? [...new Set(findings2.map((f5) => f5.matchSource).filter(Boolean))] : [];
-    const matchSuffix = matchSources.length > 0 ? import_picocolors28.default.dim(` [matched via ${matchSources.join(", ")}]`) : "";
+    const matchSuffix = matchSources.length > 0 ? import_picocolors29.default.dim(` [matched via ${matchSources.join(", ")}]`) : "";
     console.log(
-      import_picocolors28.default.bold(
+      import_picocolors29.default.bold(
         `Grafana metrics${hintSuffix} \u2014 ${findings2.length} series across panels`
       ) + matchSuffix
     );
     console.log(
-      import_picocolors28.default.dim(
+      import_picocolors29.default.dim(
         `  window: ${new Date(from * 1e3).toISOString()} \u2013 ${new Date(to * 1e3).toISOString()}`
       )
     );
     console.log("");
     if (flagged.length === 0) {
-      console.log(import_picocolors28.default.green("  No anomalies detected."));
+      console.log(import_picocolors29.default.green("  No anomalies detected."));
     } else {
       for (const f5 of flagged) {
         const color = anomalyColor(f5.anomaly);
@@ -112717,14 +113037,14 @@ async function runMetrics(hint, opts) {
         const lblStr = labelStr(f5.labels);
         console.log(
           color(
-            `  ${label.padEnd(22)}  ${f5.panelTitle.padEnd(40).slice(0, 40)}  ${fmtNum(f5.baselineAvg)} -> ${fmtNum(f5.currentAvg)} (${ratioStr})` + (lblStr !== "" ? `  ${import_picocolors28.default.dim(lblStr)}` : "")
+            `  ${label.padEnd(22)}  ${f5.panelTitle.padEnd(40).slice(0, 40)}  ${fmtNum(f5.baselineAvg)} -> ${fmtNum(f5.currentAvg)} (${ratioStr})` + (lblStr !== "" ? `  ${import_picocolors29.default.dim(lblStr)}` : "")
           )
         );
       }
     }
     if (ok.length > 0) {
       console.log("");
-      console.log(import_picocolors28.default.dim(`  ${ok.length} panel series with no anomaly.`));
+      console.log(import_picocolors29.default.dim(`  ${ok.length} panel series with no anomaly.`));
     }
     if (opts.ai) {
       const result = await renderAiInterpretation({
@@ -112739,19 +113059,19 @@ async function runMetrics(hint, opts) {
       });
       console.log("\n" + renderInterpretation(result));
       if (!result.ok) {
-        console.error(import_picocolors28.default.yellow(`[ai] ${result.warning}`));
+        console.error(import_picocolors29.default.yellow(`[ai] ${result.warning}`));
       }
     }
     return 0;
   } catch (err2) {
-    console.error(import_picocolors28.default.red(err2.message));
+    console.error(import_picocolors29.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/state.ts
 init_cjs_shims();
-var import_picocolors29 = __toESM(require_picocolors(), 1);
+var import_picocolors30 = __toESM(require_picocolors(), 1);
 var STATE_AI_CONTRACT = `Provide a clearly separated AI evidence narration with:
 
 Evidence used
@@ -112777,13 +113097,13 @@ async function runState(opts) {
     try {
       renv = resolveEnvironment(config2, { project: opts.project, env: opts.env });
     } catch (err2) {
-      console.error(import_picocolors29.default.red(err2.message));
+      console.error(import_picocolors30.default.red(err2.message));
       return 1;
     }
     const mongo = mongoForEnv(renv);
     if (mongo === null) {
       console.error(
-        import_picocolors29.default.red(
+        import_picocolors30.default.red(
           `No MongoDB connector configured for ${renv.project}/${renv.env} (set the project's Mongo URL env var).`
         )
       );
@@ -112791,7 +113111,7 @@ async function runState(opts) {
     }
     const health = await mongo.health();
     if (!health.ok) {
-      console.error(import_picocolors29.default.red(`MongoDB unreachable: ${health.detail}`));
+      console.error(import_picocolors30.default.red(`MongoDB unreachable: ${health.detail}`));
       await mongo.close();
       return 1;
     }
@@ -112817,38 +113137,38 @@ async function runState(opts) {
         );
         return 0;
       }
-      const discoveryNote = analysis.autoDiscovered ? import_picocolors29.default.dim(` (${analysis.collections.length} collections, auto-discovered)`) : "";
+      const discoveryNote = analysis.autoDiscovered ? import_picocolors30.default.dim(` (${analysis.collections.length} collections, auto-discovered)`) : "";
       console.log(
-        import_picocolors29.default.bold("State analysis") + import_picocolors29.default.dim(` \u2014 ${renv.project}/${renv.env} \xB7 db ${analysis.database}`) + discoveryNote
+        import_picocolors30.default.bold("State analysis") + import_picocolors30.default.dim(` \u2014 ${renv.project}/${renv.env} \xB7 db ${analysis.database}`) + discoveryNote
       );
       console.log("");
       let signals = 0;
       for (const c4 of analysis.collections) {
         const flags2 = [];
         if (c4.isStale === true) {
-          flags2.push(import_picocolors29.default.yellow(`stale (last ${c4.dateField}, ~${Math.round(c4.ageHours ?? 0)}h)`));
+          flags2.push(import_picocolors30.default.yellow(`stale (last ${c4.dateField}, ~${Math.round(c4.ageHours ?? 0)}h)`));
         }
         for (const a2 of c4.anomalies) {
-          flags2.push(import_picocolors29.default.red(`${a2.count}\xD7 "${a2.value}"`));
+          flags2.push(import_picocolors30.default.red(`${a2.count}\xD7 "${a2.value}"`));
           signals += 1;
         }
         if (c4.isStale === true) signals += 1;
-        const head = `  ${import_picocolors29.default.bold(c4.collection.padEnd(18).slice(0, 18))} ${import_picocolors29.default.dim(String(c4.count).padStart(8) + " docs")}`;
-        console.log(flags2.length > 0 ? `${head}   ${flags2.join("  ")}` : import_picocolors29.default.dim(head));
+        const head = `  ${import_picocolors30.default.bold(c4.collection.padEnd(18).slice(0, 18))} ${import_picocolors30.default.dim(String(c4.count).padStart(8) + " docs")}`;
+        console.log(flags2.length > 0 ? `${head}   ${flags2.join("  ")}` : import_picocolors30.default.dim(head));
       }
       console.log("");
       if (analysis.collections.length === 0) {
         console.log(
-          import_picocolors29.default.yellow("  No collections discovered in this database.") + import_picocolors29.default.dim(" Verify the database name in your MongoDB connector config.")
+          import_picocolors30.default.yellow("  No collections discovered in this database.") + import_picocolors30.default.dim(" Verify the database name in your MongoDB connector config.")
         );
       } else {
         const scope = analysis.autoDiscovered ? "collection(s)" : "allowlisted collection(s)";
         console.log(
-          signals > 0 ? `  ${import_picocolors29.default.bold(String(signals))} state signal(s) across ${analysis.collections.length} ${scope}` : import_picocolors29.default.dim(`  No state anomalies across ${analysis.collections.length} ${scope}.`)
+          signals > 0 ? `  ${import_picocolors30.default.bold(String(signals))} state signal(s) across ${analysis.collections.length} ${scope}` : import_picocolors30.default.dim(`  No state anomalies across ${analysis.collections.length} ${scope}.`)
         );
         if (analysis.autoDiscovered) {
           console.log(
-            import_picocolors29.default.dim(
+            import_picocolors30.default.dim(
               `  Tip: add a "collections" list to your MongoDB connector config to restrict analysis.`
             )
           );
@@ -112866,7 +113186,7 @@ async function runState(opts) {
         });
         console.log("\n" + renderInterpretation(result));
         if (!result.ok) {
-          console.error(import_picocolors29.default.yellow(`[ai] ${result.warning}`));
+          console.error(import_picocolors30.default.yellow(`[ai] ${result.warning}`));
         }
       }
       return 0;
@@ -112874,20 +113194,20 @@ async function runState(opts) {
       await mongo.close();
     }
   } catch (err2) {
-    console.error(import_picocolors29.default.red(err2.message));
+    console.error(import_picocolors30.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/init.ts
 init_cjs_shims();
-var import_picocolors30 = __toESM(require_picocolors(), 1);
-var import_node_path17 = require("path");
+var import_picocolors31 = __toESM(require_picocolors(), 1);
+var import_node_path18 = require("path");
 async function runInit(opts) {
   try {
     const cwd = process.cwd();
-    const root = opts.path ? (0, import_node_path17.resolve)(opts.path) : findRepoRoot(cwd) ?? cwd;
-    const name2 = opts.name ?? (0, import_node_path17.basename)(root);
+    const root = opts.path ? (0, import_node_path18.resolve)(opts.path) : findRepoRoot(cwd) ?? cwd;
+    const name2 = opts.name ?? (0, import_node_path18.basename)(root);
     const envName = opts.env ?? "production";
     const repo = { name: name2, path: root };
     if (opts.source) repo["source"] = { hostUrl: opts.source };
@@ -112902,65 +113222,65 @@ async function runInit(opts) {
     const configPath = writeLocalConfig(root, file);
     registerProject(name2, root, configPath);
     ensureProjectGitignore(root);
-    console.log(`${import_picocolors30.default.green("\u2713")} Initialized Horus project ${import_picocolors30.default.bold(name2)}`);
-    console.log(import_picocolors30.default.dim(`  config:     ${configPath}`));
-    console.log(import_picocolors30.default.dim(`  registered: horus investigate --name ${name2} "<hint>"`));
+    console.log(`${import_picocolors31.default.green("\u2713")} Initialized Horus project ${import_picocolors31.default.bold(name2)}`);
+    console.log(import_picocolors31.default.dim(`  config:     ${configPath}`));
+    console.log(import_picocolors31.default.dim(`  registered: horus investigate --name ${name2} "<hint>"`));
     if (!opts.source) {
       console.log(
-        import_picocolors30.default.dim("  no source-intelligence host set \u2014 run `horus index` to analyze + host, or pass --source <url>")
+        import_picocolors31.default.dim("  no source-intelligence host set \u2014 run `horus index` to analyze + host, or pass --source <url>")
       );
     }
     console.log(
-      import_picocolors30.default.dim("  add runtime connectors (elasticsearch/mongodb/grafana) to .horus/config.json")
+      import_picocolors31.default.dim("  add runtime connectors (elasticsearch/mongodb/grafana) to .horus/config.json")
     );
     console.log(
-      import_picocolors30.default.dim("  .horus/ is gitignored \u2014 local config and runtime state stay out of version control")
+      import_picocolors31.default.dim("  .horus/ is gitignored \u2014 local config and runtime state stay out of version control")
     );
     return 0;
   } catch (err2) {
-    console.error(import_picocolors30.default.red(err2.message));
+    console.error(import_picocolors31.default.red(err2.message));
     return 1;
   }
 }
 
 // ../../packages/cli/src/commands/projects.ts
 init_cjs_shims();
-var import_picocolors31 = __toESM(require_picocolors(), 1);
+var import_picocolors32 = __toESM(require_picocolors(), 1);
 async function runProjects() {
   const reg = readRegistry();
   const names = Object.keys(reg.projects).sort();
   if (names.length === 0) {
     console.log(
-      import_picocolors31.default.dim("No registered projects. Run `horus index` (or `horus init`) inside a repo.")
+      import_picocolors32.default.dim("No registered projects. Run `horus index` (or `horus init`) inside a repo.")
     );
     return 0;
   }
-  console.log(import_picocolors31.default.bold("Registered Horus projects"));
+  console.log(import_picocolors32.default.bold("Registered Horus projects"));
   console.log("");
   for (const name2 of names) {
     const entry2 = reg.projects[name2];
     if (entry2 === void 0) continue;
-    console.log(`  ${import_picocolors31.default.bold(name2.padEnd(22))} ${import_picocolors31.default.dim(entry2.root)}`);
+    console.log(`  ${import_picocolors32.default.bold(name2.padEnd(22))} ${import_picocolors32.default.dim(entry2.root)}`);
   }
   console.log("");
-  console.log(import_picocolors31.default.dim('  horus investigate --name <name> "<hint>"'));
+  console.log(import_picocolors32.default.dim('  horus investigate --name <name> "<hint>"'));
   return 0;
 }
 
 // ../../packages/cli/src/commands/setup.ts
 init_cjs_shims();
-var import_picocolors32 = __toESM(require_picocolors(), 1);
+var import_picocolors33 = __toESM(require_picocolors(), 1);
 var DEFAULT_DB_URL3 = "postgresql://horus:horus@localhost:5433/horus";
 async function runSetup(opts) {
   const write = opts.write ?? ((line2) => console.log(line2));
   let ok = true;
-  write(import_picocolors32.default.bold("\nHorus setup\n"));
+  write(import_picocolors33.default.bold("\nHorus setup\n"));
   const backendVersion = await getSourceVersion();
   if (backendVersion === null) {
     ok = false;
-    write(`  ${import_picocolors32.default.red("\u25CF")} Horus source-intelligence backend not found`);
+    write(`  ${import_picocolors33.default.red("\u25CF")} Horus source-intelligence backend not found`);
     write(
-      import_picocolors32.default.dim(
+      import_picocolors33.default.dim(
         `      install it (Python 3.11+ required):
         curl -fsSL https://horus.sh/install.sh | bash
       ensure ~/.local/bin is on your PATH`
@@ -112969,17 +113289,17 @@ async function runSetup(opts) {
   } else if (backendVersion !== PINNED_SOURCE_VERSION) {
     ok = false;
     write(
-      `  ${import_picocolors32.default.yellow("\u25CF")} Horus source-intelligence backend version mismatch` + import_picocolors32.default.dim(` (installed: ${backendVersion}, required: ${PINNED_SOURCE_VERSION})`)
+      `  ${import_picocolors33.default.yellow("\u25CF")} Horus source-intelligence backend version mismatch` + import_picocolors33.default.dim(` (installed: ${backendVersion}, required: ${PINNED_SOURCE_VERSION})`)
     );
     write(
-      import_picocolors32.default.dim(
+      import_picocolors33.default.dim(
         `      update it:
         horus update`
       )
     );
   } else {
     write(
-      `  ${import_picocolors32.default.green("\u25CF")} Horus source-intelligence backend ` + import_picocolors32.default.dim(`(${backendVersion})`)
+      `  ${import_picocolors33.default.green("\u25CF")} Horus source-intelligence backend ` + import_picocolors33.default.dim(`(${backendVersion})`)
     );
   }
   let dbUrl = process.env["DATABASE_URL"] ?? DEFAULT_DB_URL3;
@@ -112991,11 +113311,11 @@ async function runSetup(opts) {
   }
   const db = await checkDatabase(dbUrl);
   if (db.reachable) {
-    write(`  ${import_picocolors32.default.green("\u25CF")} Postgres reachable ${import_picocolors32.default.dim(`(${db.schemaDetail})`)}`);
+    write(`  ${import_picocolors33.default.green("\u25CF")} Postgres reachable ${import_picocolors33.default.dim(`(${db.schemaDetail})`)}`);
     if (!db.schemaReady) {
       ok = false;
       write(
-        import_picocolors32.default.dim(
+        import_picocolors33.default.dim(
           `      schema not applied \u2014 run migrations:
         from the Horus repo: pnpm db migrate
         or apply the schema directly: https://github.com/meritt-dev/horus/tree/master/packages/db/drizzle`
@@ -113004,9 +113324,9 @@ async function runSetup(opts) {
     }
   } else {
     ok = false;
-    write(`  ${import_picocolors32.default.red("\u25CF")} Postgres unreachable`);
+    write(`  ${import_picocolors33.default.red("\u25CF")} Postgres unreachable`);
     write(
-      import_picocolors32.default.dim(
+      import_picocolors33.default.dim(
         `      start a local instance:
         docker run -d --name horus-db \\
           -e POSTGRES_USER=horus -e POSTGRES_PASSWORD=horus -e POSTGRES_DB=horus \\
@@ -113031,10 +113351,10 @@ async function runSetup(opts) {
         if (!health.ok) {
           ok = false;
           write(
-            `  ${import_picocolors32.default.red("\u25CF")} Source intelligence host unreachable for ${import_picocolors32.default.bold(repo.name)} ` + import_picocolors32.default.dim(`(${repoHostUrl})`)
+            `  ${import_picocolors33.default.red("\u25CF")} Source intelligence host unreachable for ${import_picocolors33.default.bold(repo.name)} ` + import_picocolors33.default.dim(`(${repoHostUrl})`)
           );
           write(
-            import_picocolors32.default.dim(
+            import_picocolors33.default.dim(
               `      start the source intelligence host:
         cd ${repo.path}
         horus index`
@@ -113045,10 +113365,10 @@ async function runSetup(opts) {
           if (count === 0) {
             ok = false;
             write(
-              `  ${import_picocolors32.default.yellow("\u25CF")} Source intelligence host running but ${import_picocolors32.default.bold(repo.name)} is not indexed`
+              `  ${import_picocolors33.default.yellow("\u25CF")} Source intelligence host running but ${import_picocolors33.default.bold(repo.name)} is not indexed`
             );
             write(
-              import_picocolors32.default.dim(
+              import_picocolors33.default.dim(
                 `      index the repo:
         cd ${repo.path}
         horus index`
@@ -113056,7 +113376,7 @@ async function runSetup(opts) {
             );
           } else {
             write(
-              `  ${import_picocolors32.default.green("\u25CF")} ${import_picocolors32.default.bold(repo.name)} \u2014 ${count} nodes indexed ` + import_picocolors32.default.dim(`(${repoHostUrl})`)
+              `  ${import_picocolors33.default.green("\u25CF")} ${import_picocolors33.default.bold(repo.name)} \u2014 ${count} nodes indexed ` + import_picocolors33.default.dim(`(${repoHostUrl})`)
             );
           }
         }
@@ -113066,10 +113386,10 @@ async function runSetup(opts) {
   write("");
   if (ok) {
     write(
-      import_picocolors32.default.green("Ready.") + ' Next: `cd` into a repo and run `horus index`, then `horus investigate "<hint>"`.'
+      import_picocolors33.default.green("Ready.") + ' Next: `cd` into a repo and run `horus index`, then `horus investigate "<hint>"`.'
     );
   } else {
-    write(import_picocolors32.default.yellow("Resolve the items above, then re-run `horus setup`."));
+    write(import_picocolors33.default.yellow("Resolve the items above, then re-run `horus setup`."));
   }
   return ok ? 0 : 1;
 }
@@ -113077,13 +113397,13 @@ async function runSetup(opts) {
 // ../../packages/cli/src/commands/connect.ts
 init_cjs_shims();
 var import_node_readline = require("readline");
-var import_node_child_process6 = require("child_process");
-var import_picocolors35 = __toESM(require_picocolors(), 1);
+var import_node_child_process7 = require("child_process");
+var import_picocolors36 = __toESM(require_picocolors(), 1);
 
 // ../../packages/cli/src/lib/tty-selector.ts
 init_cjs_shims();
 var import_node_tty = require("tty");
-var import_picocolors33 = __toESM(require_picocolors(), 1);
+var import_picocolors34 = __toESM(require_picocolors(), 1);
 var ExitPromptError = class extends Error {
   constructor(message = "Prompt was cancelled") {
     super(message);
@@ -113139,7 +113459,7 @@ async function checkboxSearch(opts) {
       clear();
       const lines = [];
       lines.push(
-        `? ${import_picocolors33.default.bold(message)} ${import_picocolors33.default.dim("(\u2191\u2193 navigate \u2022 space toggle \u2022 enter confirm \u2022 type filter)")}`
+        `? ${import_picocolors34.default.bold(message)} ${import_picocolors34.default.dim("(\u2191\u2193 navigate \u2022 space toggle \u2022 enter confirm \u2022 type filter)")}`
       );
       const visible = filtered.slice(visibleOffset, visibleOffset + pageSize);
       for (let i3 = 0; i3 < visible.length; i3++) {
@@ -113147,29 +113467,29 @@ async function checkboxSearch(opts) {
         const choice = visible[i3];
         const isCursor = idx === cursor;
         const isSelected = selected.has(choice);
-        const marker = isSelected ? import_picocolors33.default.green("\u25CF") : " ";
+        const marker = isSelected ? import_picocolors34.default.green("\u25CF") : " ";
         const prefix = `[${marker}]`;
-        const label = isCursor ? import_picocolors33.default.cyan(choice) : choice;
-        const pointer = isCursor ? import_picocolors33.default.cyan("\u276F") : " ";
+        const label = isCursor ? import_picocolors34.default.cyan(choice) : choice;
+        const pointer = isCursor ? import_picocolors34.default.cyan("\u276F") : " ";
         lines.push(`  ${pointer} ${prefix} ${label}`);
       }
       if (filtered.length === 0) {
-        lines.push(import_picocolors33.default.dim("  No matches"));
+        lines.push(import_picocolors34.default.dim("  No matches"));
       }
       const statusParts = [
         `${selected.size} selected`,
         `${filtered.length}/${choices.length} matches`
       ];
       if (filter) statusParts.push(`filter: ${filter}`);
-      lines.push(import_picocolors33.default.dim(`  ${statusParts.join(" \xB7 ")}`));
+      lines.push(import_picocolors34.default.dim(`  ${statusParts.join(" \xB7 ")}`));
       output.write(lines.join("\n"));
       lastRenderLines = lines.length;
     }
     function finish(values2) {
       cleanup();
-      const summary = values2.length > 0 ? values2.join(", ") : import_picocolors33.default.dim("none");
+      const summary = values2.length > 0 ? values2.join(", ") : import_picocolors34.default.dim("none");
       output.write(`
-? ${import_picocolors33.default.bold(message)} ${summary}
+? ${import_picocolors34.default.bold(message)} ${summary}
 `);
       resolve9(values2);
     }
@@ -113260,10 +113580,10 @@ async function checkboxSearch(opts) {
 
 // ../../packages/cli/src/commands/connect-ai.ts
 init_cjs_shims();
-var import_node_child_process5 = require("child_process");
-var import_picocolors34 = __toESM(require_picocolors(), 1);
+var import_node_child_process6 = require("child_process");
+var import_picocolors35 = __toESM(require_picocolors(), 1);
 function cliInstalled(id) {
-  const r = (0, import_node_child_process5.spawnSync)(id, ["--version"], { stdio: "ignore", timeout: 2e3 });
+  const r = (0, import_node_child_process6.spawnSync)(id, ["--version"], { stdio: "ignore", timeout: 2e3 });
   return !r.error;
 }
 async function probeAnthropic(apiKey) {
@@ -113289,13 +113609,13 @@ async function runConnectAi(opts) {
     const root = findRepoRoot(cwd) ?? cwd;
     const configPath = discoverLocalConfig(cwd) ?? localConfigPath(root);
     const installed = LOCAL_PROVIDER_IDS.filter((id) => cliInstalled(id));
-    console.log(import_picocolors34.default.bold("\nAI providers"));
+    console.log(import_picocolors35.default.bold("\nAI providers"));
     console.log(
-      import_picocolors34.default.dim(
+      import_picocolors35.default.dim(
         `  Local CLIs on PATH: ${installed.length > 0 ? installed.join(", ") : "none detected"}`
       )
     );
-    console.log(import_picocolors34.default.dim("  Cloud: anthropic (Anthropic Claude API \u2014 used by `investigate --ai`)\n"));
+    console.log(import_picocolors35.default.dim("  Cloud: anthropic (Anthropic Claude API \u2014 used by `investigate --ai`)\n"));
     let provider = opts.provider;
     if (provider === void 0) {
       if (isInteractive()) {
@@ -113306,7 +113626,7 @@ async function runConnectAi(opts) {
       }
     }
     if (!AI_PROVIDERS.includes(provider)) {
-      console.error(import_picocolors34.default.red(`Unknown AI provider: ${provider}`) + import_picocolors34.default.dim(`
+      console.error(import_picocolors35.default.red(`Unknown AI provider: ${provider}`) + import_picocolors35.default.dim(`
   supported: ${AI_PROVIDERS.join(", ")}`));
       return 1;
     }
@@ -113319,7 +113639,7 @@ async function runConnectAi(opts) {
       }
       if (!apiKey) {
         console.error(
-          import_picocolors34.default.red("No API key provided.") + import_picocolors34.default.dim("\n  Pass --api-key sk-ant-\u2026 or set ANTHROPIC_API_KEY and re-run.")
+          import_picocolors35.default.red("No API key provided.") + import_picocolors35.default.dim("\n  Pass --api-key sk-ant-\u2026 or set ANTHROPIC_API_KEY and re-run.")
         );
         return 1;
       }
@@ -113327,28 +113647,28 @@ async function runConnectAi(opts) {
         const probe2 = await probeAnthropic(apiKey);
         if (!probe2.ok) {
           console.error(`
-${import_picocolors34.default.red("\u2717 Anthropic key check failed:")} ${probe2.detail}`);
-          console.error(import_picocolors34.default.dim("  Fix the key and retry, or pass --no-test to skip."));
+${import_picocolors35.default.red("\u2717 Anthropic key check failed:")} ${probe2.detail}`);
+          console.error(import_picocolors35.default.dim("  Fix the key and retry, or pass --no-test to skip."));
           return 1;
         }
         console.log(`
-${import_picocolors34.default.green("\u2713")} anthropic ${import_picocolors34.default.dim(`(${probe2.detail})`)}`);
+${import_picocolors35.default.green("\u2713")} anthropic ${import_picocolors35.default.dim(`(${probe2.detail})`)}`);
       }
       if (opts.model) aiBlock["anthropic"] = { model: opts.model };
       storedKey = apiKey;
     } else {
       if (!installed.includes(provider)) {
         console.error(
-          import_picocolors34.default.red(`${provider} CLI not found on PATH.`) + import_picocolors34.default.dim(`
+          import_picocolors35.default.red(`${provider} CLI not found on PATH.`) + import_picocolors35.default.dim(`
   Install it first, or choose anthropic.`)
         );
         return 1;
       }
       const desc2 = DEFAULT_LOCAL_PROVIDER_REGISTRY.get(provider);
       console.log(`
-${import_picocolors34.default.green("\u2713")} ${desc2?.displayName ?? provider} ${import_picocolors34.default.dim("detected on PATH")}`);
+${import_picocolors35.default.green("\u2713")} ${desc2?.displayName ?? provider} ${import_picocolors35.default.dim("detected on PATH")}`);
       console.log(
-        import_picocolors34.default.dim(
+        import_picocolors35.default.dim(
           "  Note: `investigate --ai` currently uses the Anthropic API for narrative.\n  Local-CLI narrative generation is recorded as your preference for future use."
         )
       );
@@ -113366,15 +113686,15 @@ ${import_picocolors34.default.green("\u2713")} ${desc2?.displayName ?? provider}
       });
     }
     console.log(`
-${import_picocolors34.default.green("\u2713")} ${import_picocolors34.default.bold("ai")} provider saved \u2192 ${import_picocolors34.default.dim(configPath)}`);
-    console.log(import_picocolors34.default.dim(`  provider: ${provider}`));
+${import_picocolors35.default.green("\u2713")} ${import_picocolors35.default.bold("ai")} provider saved \u2192 ${import_picocolors35.default.dim(configPath)}`);
+    console.log(import_picocolors35.default.dim(`  provider: ${provider}`));
     if (storedKey && secretsPathStr) {
-      console.log(import_picocolors34.default.dim(`  anthropic key: ${redactKey(storedKey)} \u2192 ${secretsPathStr} (gitignored)`));
+      console.log(import_picocolors35.default.dim(`  anthropic key: ${redactKey(storedKey)} \u2192 ${secretsPathStr} (gitignored)`));
     }
-    console.log(import_picocolors34.default.dim('  run: horus investigate "<hint>" --ai'));
+    console.log(import_picocolors35.default.dim('  run: horus investigate "<hint>" --ai'));
     return 0;
   } catch (err2) {
-    console.error(import_picocolors34.default.red(err2 instanceof Error ? err2.message : String(err2)));
+    console.error(import_picocolors35.default.red(err2 instanceof Error ? err2.message : String(err2)));
     return 1;
   }
 }
@@ -113406,7 +113726,7 @@ async function runConnect(type, opts) {
   }
   if (!SUPPORTED.includes(type)) {
     console.error(
-      import_picocolors35.default.red(`Unknown connector type: ${type}`) + import_picocolors35.default.dim(`
+      import_picocolors36.default.red(`Unknown connector type: ${type}`) + import_picocolors36.default.dim(`
   supported: ${SUPPORTED.join(", ")}, ai`)
     );
     return 1;
@@ -113443,20 +113763,20 @@ async function runConnect(type, opts) {
       if (!probeResult.ok) {
         console.error(
           `
-${import_picocolors35.default.red(`\u2717 Could not reach ${connectorType}:`)} ${probeResult.detail}` + import_picocolors35.default.dim("\n  Fix the connection and retry, or pass --no-test to skip.")
+${import_picocolors36.default.red(`\u2717 Could not reach ${connectorType}:`)} ${probeResult.detail}` + import_picocolors36.default.dim("\n  Fix the connection and retry, or pass --no-test to skip.")
         );
         return 1;
       }
       console.log(
         `
-${import_picocolors35.default.green("\u2713")} ${connectorType} reachable ${import_picocolors35.default.dim(`(${probeResult.detail})`)}`
+${import_picocolors36.default.green("\u2713")} ${connectorType} reachable ${import_picocolors36.default.dim(`(${probeResult.detail})`)}`
       );
     }
     const hasLiteralCredentials = filled.url !== void 0 || filled.password !== void 0 || filled.username !== void 0 || filled.authToken !== void 0;
     if (hasLiteralCredentials) {
       if (isGitTracked(configPath, root)) {
         console.error(
-          import_picocolors35.default.red(".horus/config.json is already tracked by Git.") + "\nStoring credentials here would expose them in the repository.\n" + import_picocolors35.default.dim(
+          import_picocolors36.default.red(".horus/config.json is already tracked by Git.") + "\nStoring credentials here would expose them in the repository.\n" + import_picocolors36.default.dim(
             "  Option A \u2014 remove from Git index then re-run:\n    git rm --cached .horus/config.json\n    horus connect " + type + " ...\n\n  Option B \u2014 keep credentials in the environment and reference them:\n    export ES_URL=https://...\n    export ES_USERNAME=...\n    export ES_PASSWORD=...\n  Then edit .horus/config.json manually to use urlEnv/usernameEnv/passwordEnv."
           )
         );
@@ -113466,18 +113786,18 @@ ${import_picocolors35.default.green("\u2713")} ${connectorType} reachable ${impo
     }
     patchLocalConnector(configPath, connectorType, patch, filled.env);
     console.log(
-      `${import_picocolors35.default.green("\u2713")} ${import_picocolors35.default.bold(connectorType)} connector saved \u2192 ${import_picocolors35.default.dim(configPath)}`
+      `${import_picocolors36.default.green("\u2713")} ${import_picocolors36.default.bold(connectorType)} connector saved \u2192 ${import_picocolors36.default.dim(configPath)}`
     );
     printSummary(connectorType, filled);
-    console.log(import_picocolors35.default.dim(`
+    console.log(import_picocolors36.default.dim(`
   run: horus investigate "<hint>"`));
     return 0;
   } catch (err2) {
     if (err2 instanceof ExitPromptError) {
-      console.error(import_picocolors35.default.red("Cancelled."));
+      console.error(import_picocolors36.default.red("Cancelled."));
       return 1;
     }
-    console.error(import_picocolors35.default.red(err2.message));
+    console.error(import_picocolors36.default.red(err2.message));
     return 1;
   }
 }
@@ -113486,7 +113806,7 @@ async function fillInteractive(type, opts) {
   if (!needsInteraction) return opts;
   console.log(
     `
-${import_picocolors35.default.bold(`Connect ${type}`)} ${import_picocolors35.default.dim("(press Enter to skip optional fields)")}
+${import_picocolors36.default.bold(`Connect ${type}`)} ${import_picocolors36.default.dim("(press Enter to skip optional fields)")}
 `
   );
   const filled = { ...opts };
@@ -113552,7 +113872,7 @@ ${import_picocolors35.default.bold(`Connect ${type}`)} ${import_picocolors35.def
       break;
     case "redis": {
       console.log(
-        import_picocolors35.default.dim(
+        import_picocolors36.default.dim(
           "  Tip: embed credentials directly in the URL \u2014 redis://:password@host:6379\n       or enter the URL and password separately below."
         )
       );
@@ -113594,8 +113914,8 @@ function missingRequired(type, opts) {
 }
 function ask(label, placeholder = "", required2 = true) {
   return new Promise((resolve9) => {
-    const hint = placeholder ? import_picocolors35.default.dim(` (${placeholder})`) : "";
-    const suffix = required2 ? "" : import_picocolors35.default.dim(" [optional]");
+    const hint = placeholder ? import_picocolors36.default.dim(` (${placeholder})`) : "";
+    const suffix = required2 ? "" : import_picocolors36.default.dim(" [optional]");
     process.stdout.write(`  ${label}${suffix}${hint}: `);
     const rl = (0, import_node_readline.createInterface)({
       input: process.stdin,
@@ -113612,7 +113932,7 @@ function askPassword(label) {
   return new Promise((resolve9) => {
     const stdin = process.stdin;
     if (typeof stdin.setRawMode === "function") {
-      process.stdout.write(`  ${label}${import_picocolors35.default.dim(" [optional]")}: `);
+      process.stdout.write(`  ${label}${import_picocolors36.default.dim(" [optional]")}: `);
       stdin.setRawMode(true);
       stdin.resume();
       let value = "";
@@ -113729,15 +114049,15 @@ function describeProbe(p5) {
   return `${p5.keyCount} keys \xB7 ${p5.suggestedRoles.join("/")}${examples ? ` \xB7 ${examples}` : ""}`;
 }
 async function discoverAndSelectDbs(url, bullmqPrefix) {
-  console.log(import_picocolors35.default.dim("\n  Scanning DBs 0-15 (read-only, sampled)\u2026"));
+  console.log(import_picocolors36.default.dim("\n  Scanning DBs 0-15 (read-only, sampled)\u2026"));
   const probes = await probeRedisDatabases(url, { bullmqPrefix });
   const nonEmpty = probes.filter((p5) => p5.reachable && p5.keyCount > 0);
   if (nonEmpty.length === 0) {
-    console.log(import_picocolors35.default.dim("  No populated DBs found."));
+    console.log(import_picocolors36.default.dim("  No populated DBs found."));
     return [];
   }
   for (const p5 of nonEmpty) {
-    console.log(`  ${import_picocolors35.default.bold(`DB ${p5.db}`)} ${import_picocolors35.default.dim("\xB7 " + describeProbe(p5))}`);
+    console.log(`  ${import_picocolors36.default.bold(`DB ${p5.db}`)} ${import_picocolors36.default.dim("\xB7 " + describeProbe(p5))}`);
   }
   const byLabel = /* @__PURE__ */ new Map();
   const choices = nonEmpty.map((p5) => {
@@ -113877,11 +114197,11 @@ function printSummary(type, opts) {
   } else if (opts.dashboard) {
     lines.push(`  dashboard:      ${opts.dashboard}`);
   }
-  if (lines.length > 0) console.log(import_picocolors35.default.dim(lines.join("\n")));
+  if (lines.length > 0) console.log(import_picocolors36.default.dim(lines.join("\n")));
 }
 function isGitTracked(filePath, cwd) {
   try {
-    (0, import_node_child_process6.execFileSync)("git", ["ls-files", "--error-unmatch", filePath], {
+    (0, import_node_child_process7.execFileSync)("git", ["ls-files", "--error-unmatch", filePath], {
       cwd,
       stdio: "pipe"
     });
@@ -113916,11 +114236,11 @@ async function askIndexSelection(indices) {
   const shown = indices.slice(0, MAX_DISPLAY);
   console.log("\n  Available Elasticsearch indexes/data streams:");
   shown.forEach((name2, i3) => {
-    console.log(`  ${import_picocolors35.default.dim(`[${i3 + 1}]`)} ${name2}`);
+    console.log(`  ${import_picocolors36.default.dim(`[${i3 + 1}]`)} ${name2}`);
   });
   if (indices.length > MAX_DISPLAY) {
     console.log(
-      import_picocolors35.default.dim(
+      import_picocolors36.default.dim(
         `  \u2026 and ${indices.length - MAX_DISPLAY} more (type a pattern manually to match all)`
       )
     );
@@ -113964,11 +114284,11 @@ async function askDashboardSelection(dashboards) {
   const shown = dashboards.slice(0, MAX_DISPLAY);
   console.log("\n  Available Grafana dashboards:");
   shown.forEach((d3, i3) => {
-    const folder = d3.folderTitle ? import_picocolors35.default.dim(` (${d3.folderTitle})`) : "";
-    console.log(`  ${import_picocolors35.default.dim(`[${i3 + 1}]`)} ${d3.title}${folder}`);
+    const folder = d3.folderTitle ? import_picocolors36.default.dim(` (${d3.folderTitle})`) : "";
+    console.log(`  ${import_picocolors36.default.dim(`[${i3 + 1}]`)} ${d3.title}${folder}`);
   });
   if (dashboards.length > MAX_DISPLAY) {
-    console.log(import_picocolors35.default.dim(`  \u2026 and ${dashboards.length - MAX_DISPLAY} more`));
+    console.log(import_picocolors36.default.dim(`  \u2026 and ${dashboards.length - MAX_DISPLAY} more`));
   }
   const input = (await ask(
     `  Select dashboards to use (e.g. 1,2 or Enter to type uid manually)`,
@@ -114018,16 +114338,17 @@ function redactUrl(raw) {
 
 // ../../packages/cli/src/commands/stop.ts
 init_cjs_shims();
-var import_node_child_process7 = require("child_process");
-var import_node_fs16 = require("fs");
-var import_node_util4 = require("util");
-var import_node_path18 = require("path");
-var import_picocolors36 = __toESM(require_picocolors(), 1);
-var execFileAsync = (0, import_node_util4.promisify)(import_node_child_process7.execFile);
-var unlinkAsync = (0, import_node_util4.promisify)(import_node_fs16.unlink);
+var import_node_child_process8 = require("child_process");
+var import_node_fs17 = require("fs");
+var import_node_util5 = require("util");
+var import_node_path19 = require("path");
+var import_picocolors37 = __toESM(require_picocolors(), 1);
+var execFileAsync2 = (0, import_node_util5.promisify)(import_node_child_process8.execFile);
+var unlinkAsync = (0, import_node_util5.promisify)(import_node_fs17.unlink);
 var SPAWNED_HOST_FILE2 = "spawned-host.json";
 var START_TIME_TOLERANCE_S = 60;
 var STOP_WAIT_MS = 5e3;
+var STOP_KILL_WAIT_MS = 3e3;
 var STOP_POLL_MS = 200;
 var sleep = (ms) => new Promise((r) => setTimeout(r, ms));
 async function runStop(opts) {
@@ -114039,19 +114360,19 @@ async function runStop(opts) {
     const root = findRepoRoot(cwd) ?? cwd;
     const hostUrl = readSourceHostUrl(root);
     if (!hostUrl) {
-      console.log(import_picocolors36.default.dim("No source-intelligence host found for this repo (.horus/source/host.json absent)."));
+      console.log(import_picocolors37.default.dim("No source-intelligence host found for this repo (.horus/source/host.json absent)."));
       return 0;
     }
     return await stopHost(root, hostUrl);
   } catch (err2) {
-    console.error(import_picocolors36.default.red(err2.message));
+    console.error(import_picocolors37.default.red(err2.message));
     return 1;
   }
 }
 async function stopHost(root, hostUrl) {
   const port = extractPort(hostUrl);
   if (port === null) {
-    console.error(import_picocolors36.default.red(`Cannot determine port from host URL: ${hostUrl}`));
+    console.error(import_picocolors37.default.red(`Cannot determine port from host URL: ${hostUrl}`));
     return 1;
   }
   const healthy = await isHostHealthy(hostUrl);
@@ -114061,12 +114382,12 @@ async function stopHost(root, hostUrl) {
     if (!wrapperAlive) {
       const res = await stopBackendServerPid(root, port);
       if (res === "failed") return 1;
-      if (res !== "stopped") console.log(import_picocolors36.default.dim(`Host ${hostUrl} is already stopped.`));
+      if (res !== "stopped") console.log(import_picocolors37.default.dim(`Host ${hostUrl} is already stopped.`));
       await cleanupSpawnedRecord(root);
       return 0;
     }
     console.log(
-      import_picocolors36.default.dim(
+      import_picocolors37.default.dim(
         `Host ${hostUrl} is unreachable but pid ${owned.pid} is still running \u2014 terminating a stuck host.`
       )
     );
@@ -114074,7 +114395,7 @@ async function stopHost(root, hostUrl) {
   const spawned = readSpawnedHost(root);
   if (spawned === null) {
     console.error(
-      import_picocolors36.default.red(
+      import_picocolors37.default.red(
         `No ownership record found (.horus/${SPAWNED_HOST_FILE2} absent). Horus will not stop a host it did not spawn.`
       )
     );
@@ -114082,12 +114403,12 @@ async function stopHost(root, hostUrl) {
   }
   const recordError = validateSpawnedRecord(spawned);
   if (recordError !== null) {
-    console.error(import_picocolors36.default.red(`Ownership record is malformed: ${recordError}. Aborting for safety.`));
+    console.error(import_picocolors37.default.red(`Ownership record is malformed: ${recordError}. Aborting for safety.`));
     return 1;
   }
   if (spawned.port !== port) {
     console.error(
-      import_picocolors36.default.red(
+      import_picocolors37.default.red(
         `Ownership record port (${spawned.port}) does not match host URL port (${port}). Record may be stale.`
       )
     );
@@ -114095,7 +114416,7 @@ async function stopHost(root, hostUrl) {
   }
   if (spawned.root !== root) {
     console.error(
-      import_picocolors36.default.red(
+      import_picocolors37.default.red(
         `Ownership record root (${spawned.root}) does not match resolved root (${root}). Record may be stale.`
       )
     );
@@ -114106,14 +114427,14 @@ async function stopHost(root, hostUrl) {
     const res = await stopBackendServerPid(root, port);
     if (res === "failed") return 1;
     if (res !== "stopped") {
-      console.log(import_picocolors36.default.dim(`Process pid ${spawned.pid} is no longer running \u2014 already stopped.`));
+      console.log(import_picocolors37.default.dim(`Process pid ${spawned.pid} is no longer running \u2014 already stopped.`));
     }
     await cleanupSpawnedRecord(root);
     return 0;
   }
   if (!hostArgvRegex(port).test(info2.args)) {
     console.error(
-      import_picocolors36.default.red(
+      import_picocolors37.default.red(
         `Pid ${spawned.pid} args do not match "horus-source host --port ${port}". Got: "${info2.args.slice(0, 120)}". Aborting for safety.`
       )
     );
@@ -114122,51 +114443,33 @@ async function stopHost(root, hostUrl) {
   const startTs = new Date(spawned.startedAt).getTime();
   const recordedAgeS = Math.round((Date.now() - startTs) / 1e3);
   if (!Number.isFinite(info2.etimeSeconds)) {
-    console.error(import_picocolors36.default.red(`Could not read elapsed time for pid ${spawned.pid}. Aborting for safety.`));
+    console.error(import_picocolors37.default.red(`Could not read elapsed time for pid ${spawned.pid}. Aborting for safety.`));
     return 1;
   }
   if (Math.abs(info2.etimeSeconds - recordedAgeS) > START_TIME_TOLERANCE_S) {
     console.error(
-      import_picocolors36.default.red(
+      import_picocolors37.default.red(
         `Pid ${spawned.pid} age mismatch: record says ~${recordedAgeS}s, process reports ${info2.etimeSeconds}s elapsed. Possible PID reuse \u2014 aborting for safety.`
       )
     );
     return 1;
   }
-  let signaled = false;
+  let terminated;
   try {
-    process.kill(spawned.pid, "SIGTERM");
-    signaled = true;
+    terminated = await terminatePid(spawned.pid);
   } catch (err2) {
-    if (err2.code === "ESRCH") {
-      console.log(import_picocolors36.default.dim(`Process pid ${spawned.pid} exited before signal \u2014 already stopped.`));
-    } else {
-      console.error(import_picocolors36.default.red(`Failed to signal pid ${spawned.pid}: ${err2.message}`));
-      return 1;
-    }
+    console.error(import_picocolors37.default.red(`Failed to signal pid ${spawned.pid}: ${err2.message}`));
+    return 1;
   }
-  if (signaled) {
-    const deadline = Date.now() + STOP_WAIT_MS;
-    let exited = false;
-    while (Date.now() < deadline) {
-      await sleep(STOP_POLL_MS);
-      if (await getProcessInfo(spawned.pid) === null) {
-        exited = true;
-        break;
-      }
-    }
-    if (!exited) {
-      console.error(
-        import_picocolors36.default.red(
-          `Host pid ${spawned.pid} did not exit within ${STOP_WAIT_MS / 1e3}s after SIGTERM.`
-        )
-      );
-      return 1;
-    }
-    console.log(
-      `${import_picocolors36.default.green("\u2713")} Stopped source-intelligence host ` + import_picocolors36.default.dim(`(pid ${spawned.pid}, port ${port})`) + ` for ${root}`
+  if (!terminated) {
+    console.error(
+      import_picocolors37.default.red(`Host pid ${spawned.pid} did not exit even after SIGKILL \u2014 could not reclaim the port.`)
     );
+    return 1;
   }
+  console.log(
+    `${import_picocolors37.default.green("\u2713")} Stopped source-intelligence host ` + import_picocolors37.default.dim(`(pid ${spawned.pid}, port ${port})`) + ` for ${root}`
+  );
   if (await stopBackendServerPid(root, port) === "failed") return 1;
   await cleanupSpawnedRecord(root);
   return 0;
@@ -114178,7 +114481,7 @@ function hostArgvRegex(port) {
 }
 async function cleanupSpawnedRecord(root) {
   try {
-    await unlinkAsync((0, import_node_path18.join)(root, HORUS_DIR, SPAWNED_HOST_FILE2));
+    await unlinkAsync((0, import_node_path19.join)(root, HORUS_DIR, SPAWNED_HOST_FILE2));
   } catch {
   }
 }
@@ -114191,39 +114494,35 @@ async function stopBackendServerPid(root, port) {
   if (info2 === null) return "none";
   if (!hostArgvRegex(port).test(info2.args)) {
     console.error(
-      import_picocolors36.default.red(
+      import_picocolors37.default.red(
         `Backend host pid ${rec.pid} args do not match "horus-source host --port ${port}". Not signalling \u2014 possible stale source/host.json or PID reuse.`
       )
     );
     return "failed";
   }
+  let terminated;
   try {
-    process.kill(rec.pid, "SIGTERM");
+    terminated = await terminatePid(rec.pid);
   } catch (err2) {
-    if (err2.code === "ESRCH") return "stopped";
-    console.error(import_picocolors36.default.red(`Failed to signal pid ${rec.pid}: ${err2.message}`));
+    console.error(import_picocolors37.default.red(`Failed to signal pid ${rec.pid}: ${err2.message}`));
     return "failed";
   }
-  const deadline = Date.now() + STOP_WAIT_MS;
-  while (Date.now() < deadline) {
-    await sleep(STOP_POLL_MS);
-    if (await getProcessInfo(rec.pid) === null) {
-      console.log(
-        `${import_picocolors36.default.green("\u2713")} Stopped source-intelligence host ` + import_picocolors36.default.dim(`(pid ${rec.pid}, port ${port})`) + ` for ${root}`
-      );
-      return "stopped";
-    }
+  if (!terminated) {
+    console.error(
+      import_picocolors37.default.red(`Host pid ${rec.pid} did not exit even after SIGKILL \u2014 could not reclaim the port.`)
+    );
+    return "failed";
   }
-  console.error(
-    import_picocolors36.default.red(`Host pid ${rec.pid} did not exit within ${STOP_WAIT_MS / 1e3}s after SIGTERM.`)
+  console.log(
+    `${import_picocolors37.default.green("\u2713")} Stopped source-intelligence host ` + import_picocolors37.default.dim(`(pid ${rec.pid}, port ${port})`) + ` for ${root}`
   );
-  return "failed";
+  return "stopped";
 }
 async function stopAll() {
   const registry2 = readRegistry();
   const projects2 = Object.entries(registry2.projects);
   if (projects2.length === 0) {
-    console.log(import_picocolors36.default.dim("No registered projects."));
+    console.log(import_picocolors37.default.dim("No registered projects."));
     return 0;
   }
   let stopped = 0;
@@ -114235,17 +114534,17 @@ async function stopAll() {
     if (!healthy && readSpawnedHost(entry2.root) === null && readSourceHostPid(entry2.root) === null) {
       continue;
     }
-    console.log(`  Stopping ${import_picocolors36.default.bold(name2)} ${import_picocolors36.default.dim(`(${hostUrl})`)}`);
+    console.log(`  Stopping ${import_picocolors37.default.bold(name2)} ${import_picocolors37.default.dim(`(${hostUrl})`)}`);
     const code = await stopHost(entry2.root, hostUrl);
     if (code === 0) stopped++;
     else failed++;
   }
   if (stopped === 0 && failed === 0) {
-    console.log(import_picocolors36.default.dim("No running source-intelligence hosts found."));
+    console.log(import_picocolors37.default.dim("No running source-intelligence hosts found."));
   } else {
     console.log(
       `
-Stopped ${stopped} host(s)${failed > 0 ? import_picocolors36.default.red(`, ${failed} failed`) : ""}.`
+Stopped ${stopped} host(s)${failed > 0 ? import_picocolors37.default.red(`, ${failed} failed`) : ""}.`
     );
   }
   return failed > 0 ? 1 : 0;
@@ -114272,10 +114571,30 @@ function validateSpawnedRecord(r) {
   }
   return null;
 }
+async function terminatePid(pid) {
+  const escalation = [
+    { signal: "SIGTERM", waitMs: STOP_WAIT_MS },
+    { signal: "SIGKILL", waitMs: STOP_KILL_WAIT_MS }
+  ];
+  for (const { signal, waitMs } of escalation) {
+    try {
+      process.kill(pid, signal);
+    } catch (err2) {
+      if (err2.code === "ESRCH") return true;
+      throw err2;
+    }
+    const deadline = Date.now() + waitMs;
+    while (Date.now() < deadline) {
+      await sleep(STOP_POLL_MS);
+      if (await getProcessInfo(pid) === null) return true;
+    }
+  }
+  return await getProcessInfo(pid) === null;
+}
 async function getProcessInfo(pid) {
   let args2;
   try {
-    const argsResult = await execFileAsync("ps", ["-p", String(pid), "-o", "args="], {
+    const argsResult = await execFileAsync2("ps", ["-p", String(pid), "-o", "args="], {
       timeout: 3e3
     });
     args2 = argsResult.stdout.trim();
@@ -114285,7 +114604,7 @@ async function getProcessInfo(pid) {
   if (!args2) return null;
   let etimeSeconds = Number.NaN;
   try {
-    const etimeResult = await execFileAsync("ps", ["-p", String(pid), "-o", "etime="], {
+    const etimeResult = await execFileAsync2("ps", ["-p", String(pid), "-o", "etime="], {
       timeout: 3e3
     });
     etimeSeconds = parseEtimeSeconds(etimeResult.stdout.trim());
@@ -114313,14 +114632,77 @@ function extractPort(hostUrl) {
 
 // ../../packages/cli/src/commands/hosts.ts
 init_cjs_shims();
-var import_picocolors37 = __toESM(require_picocolors(), 1);
-async function runHosts() {
+var import_picocolors38 = __toESM(require_picocolors(), 1);
+
+// ../../packages/cli/src/lib/host-reaper.ts
+init_cjs_shims();
+var import_node_child_process9 = require("child_process");
+var import_node_util6 = require("util");
+var execFileAsync3 = (0, import_node_util6.promisify)(import_node_child_process9.execFile);
+var HOST_ARGV = /(?:^|\s)(?:\S*\/)?horus-source\s+host\s+--port(?:=|\s+)(\d+)(?=\s|$)/;
+function parseSourceHosts(psStdout) {
+  const hosts = [];
+  for (const line2 of psStdout.split("\n")) {
+    const trimmed = line2.trim();
+    if (!trimmed) continue;
+    const sp = trimmed.indexOf(" ");
+    if (sp < 0) continue;
+    const pid = Number(trimmed.slice(0, sp));
+    if (!Number.isInteger(pid) || pid <= 0) continue;
+    const m5 = HOST_ARGV.exec(trimmed.slice(sp + 1));
+    if (!m5) continue;
+    hosts.push({ pid, port: Number(m5[1]) });
+  }
+  return hosts;
+}
+function selectOrphans(running, claimedPids) {
+  return running.filter((h3) => !claimedPids.has(h3.pid));
+}
+async function listRunningSourceHosts() {
+  try {
+    const { stdout } = await execFileAsync3("ps", ["-axww", "-o", "pid=,args="], {
+      maxBuffer: 8 * 1024 * 1024,
+      timeout: 5e3
+    });
+    return parseSourceHosts(stdout);
+  } catch {
+    return [];
+  }
+}
+function isAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch (err2) {
+    return err2.code === "EPERM";
+  }
+}
+async function reapPid(pid, opts = {}) {
+  const termMs = opts.termMs ?? 4e3;
+  const killMs = opts.killMs ?? 3e3;
+  const pollMs = opts.pollMs ?? 200;
+  for (const [signal, wait] of [
+    ["SIGTERM", termMs],
+    ["SIGKILL", killMs]
+  ]) {
+    try {
+      process.kill(pid, signal);
+    } catch (err2) {
+      if (err2.code === "ESRCH") return true;
+    }
+    const deadline = Date.now() + wait;
+    while (Date.now() < deadline) {
+      await new Promise((r) => setTimeout(r, pollMs));
+      if (!isAlive(pid)) return true;
+    }
+  }
+  return !isAlive(pid);
+}
+
+// ../../packages/cli/src/commands/hosts.ts
+async function runHosts(opts = {}) {
   const registry2 = readRegistry();
   const projects2 = Object.entries(registry2.projects);
-  if (projects2.length === 0) {
-    console.log(import_picocolors37.default.dim("No registered projects. Run `horus index` in a repo first."));
-    return 0;
-  }
   const rows = [];
   await Promise.all(
     projects2.map(async ([name2, entry2]) => {
@@ -114329,39 +114711,69 @@ async function runHosts() {
       rows.push({ name: name2, hostUrl: hostUrl ?? null, healthy, root: entry2.root });
     })
   );
-  rows.sort((a2, b5) => {
-    if (a2.healthy !== b5.healthy) return a2.healthy ? -1 : 1;
-    return a2.name.localeCompare(b5.name);
-  });
-  const anyHost = rows.some((r) => r.hostUrl !== null);
-  if (!anyHost) {
-    console.log(import_picocolors37.default.dim("No source-intelligence hosts found. Run `horus index` to start one."));
-    return 0;
-  }
+  rows.sort(
+    (a2, b5) => a2.healthy !== b5.healthy ? a2.healthy ? -1 : 1 : a2.name.localeCompare(b5.name)
+  );
   console.log("");
+  let printedAny = false;
   for (const row of rows) {
     if (row.hostUrl === null) continue;
-    const status = row.healthy ? import_picocolors37.default.green("\u25CF running") : import_picocolors37.default.red("\u25CF stopped");
+    printedAny = true;
+    const status = row.healthy ? import_picocolors38.default.green("\u25CF running") : import_picocolors38.default.red("\u25CF stopped");
     const port = extractPort2(row.hostUrl) ?? "?";
     console.log(
-      `  ${status}  ${import_picocolors37.default.bold(row.name.padEnd(24))} port ${String(port).padEnd(6)} ${import_picocolors37.default.dim(row.root)}`
+      `  ${status}  ${import_picocolors38.default.bold(row.name.padEnd(24))} port ${String(port).padEnd(6)} ${import_picocolors38.default.dim(row.root)}`
     );
   }
-  console.log("");
   const noHost = rows.filter((r) => r.hostUrl === null);
-  if (noHost.length > 0) {
-    for (const row of noHost) {
-      console.log(`  ${import_picocolors37.default.dim("\u25CB no host")}   ${import_picocolors37.default.dim(row.name)}`);
+  for (const row of noHost) console.log(`  ${import_picocolors38.default.dim("\u25CB no host")}   ${import_picocolors38.default.dim(row.name)}`);
+  if (printedAny || noHost.length > 0) console.log("");
+  const claimedPids = /* @__PURE__ */ new Set();
+  for (const [, entry2] of projects2) {
+    const hp = readSourceHostPid(entry2.root);
+    if (hp?.pid) claimedPids.add(hp.pid);
+    const sp = readSpawnedHost(entry2.root);
+    if (sp?.pid) claimedPids.add(sp.pid);
+  }
+  const orphans = selectOrphans(await listRunningSourceHosts(), claimedPids);
+  let reapFailed = 0;
+  if (orphans.length > 0) {
+    console.log(
+      import_picocolors38.default.yellow(`  \u26A0 ${orphans.length} orphaned source host(s) \u2014 no registered repo owns them:`)
+    );
+    for (const o5 of orphans) console.log(import_picocolors38.default.dim(`      pid ${o5.pid}  port ${o5.port}`));
+    if (opts.reap) {
+      let reaped = 0;
+      for (const o5 of orphans) {
+        if (await reapPid(o5.pid)) {
+          reaped++;
+          console.log(`  ${import_picocolors38.default.green("\u2713")} reaped pid ${o5.pid} ${import_picocolors38.default.dim(`(port ${o5.port})`)}`);
+        } else {
+          reapFailed++;
+          console.log(import_picocolors38.default.red(`  \u2717 could not stop pid ${o5.pid} (port ${o5.port})`));
+        }
+      }
+      console.log(import_picocolors38.default.dim(`  Reaped ${reaped}/${orphans.length} orphan(s).`));
+    } else {
+      console.log(import_picocolors38.default.dim("  Run `horus hosts --reap` to stop them."));
     }
     console.log("");
   }
+  if (projects2.length === 0 && orphans.length === 0) {
+    console.log(import_picocolors38.default.dim("No registered projects. Run `horus index` in a repo first."));
+    return 0;
+  }
+  if (!printedAny && orphans.length === 0) {
+    console.log(import_picocolors38.default.dim("No source-intelligence hosts found. Run `horus index` to start one."));
+    return 0;
+  }
   const running = rows.filter((r) => r.healthy).length;
   console.log(
-    import_picocolors37.default.dim(
-      `${running} running \xB7 horus stop to reap \xB7 horus stop --all to stop everything`
+    import_picocolors38.default.dim(
+      `${running} running${orphans.length ? ` \xB7 ${orphans.length} orphan(s)` : ""} \xB7 horus hosts --reap to clear orphans \xB7 horus stop --all to stop everything`
     )
   );
-  return 0;
+  return reapFailed > 0 ? 1 : 0;
 }
 function extractPort2(hostUrl) {
   try {
@@ -114374,12 +114786,12 @@ function extractPort2(hostUrl) {
 
 // ../../packages/cli/src/commands/doctor.ts
 init_cjs_shims();
-var import_picocolors38 = __toESM(require_picocolors(), 1);
+var import_picocolors39 = __toESM(require_picocolors(), 1);
 var DEFAULT_DB_URL4 = "postgresql://horus:horus@localhost:5433/horus";
 function mark2(status) {
-  if (status === "pass") return import_picocolors38.default.green("\u2713");
-  if (status === "warn") return import_picocolors38.default.yellow("~");
-  return import_picocolors38.default.red("\u2717");
+  if (status === "pass") return import_picocolors39.default.green("\u2713");
+  if (status === "warn") return import_picocolors39.default.yellow("~");
+  return import_picocolors39.default.red("\u2717");
 }
 async function runDoctor(opts) {
   const cwd = opts?.cwd ?? process.cwd();
@@ -114659,11 +115071,11 @@ async function runDoctor(opts) {
     write(JSON.stringify(output, null, 2));
     return hasFailure ? 1 : 0;
   }
-  write(import_picocolors38.default.bold("\nHorus readiness check\n"));
+  write(import_picocolors39.default.bold("\nHorus readiness check\n"));
   for (const check2 of checks) {
-    write(`  ${mark2(check2.status)} ${import_picocolors38.default.bold(check2.label.padEnd(26))}  ${import_picocolors38.default.dim(check2.detail)}`);
+    write(`  ${mark2(check2.status)} ${import_picocolors39.default.bold(check2.label.padEnd(26))}  ${import_picocolors39.default.dim(check2.detail)}`);
     if (check2.next) {
-      write(`    ${import_picocolors38.default.dim("\u2192 " + check2.next)}`);
+      write(`    ${import_picocolors39.default.dim("\u2192 " + check2.next)}`);
     }
   }
   write("");
@@ -114672,20 +115084,20 @@ async function runDoctor(opts) {
 
 // ../../packages/cli/src/commands/providers-doctor.ts
 init_cjs_shims();
-var import_node_child_process8 = require("child_process");
-var import_picocolors39 = __toESM(require_picocolors(), 1);
+var import_node_child_process10 = require("child_process");
+var import_picocolors40 = __toESM(require_picocolors(), 1);
 function statusMark(status) {
-  if (status === "ready") return import_picocolors39.default.green("\u2713");
-  if (status === "installed") return import_picocolors39.default.yellow("~");
-  return import_picocolors39.default.red("\u2717");
+  if (status === "ready") return import_picocolors40.default.green("\u2713");
+  if (status === "installed") return import_picocolors40.default.yellow("~");
+  return import_picocolors40.default.red("\u2717");
 }
 function statusLabel(status) {
-  if (status === "ready") return import_picocolors39.default.green("ready");
-  if (status === "installed") return import_picocolors39.default.yellow("installed (not configured)");
-  return import_picocolors39.default.dim("not found on PATH");
+  if (status === "ready") return import_picocolors40.default.green("ready");
+  if (status === "installed") return import_picocolors40.default.yellow("installed (not configured)");
+  return import_picocolors40.default.dim("not found on PATH");
 }
 function detectBinary(id) {
-  const result = (0, import_node_child_process8.spawnSync)(id, ["--version"], { stdio: "pipe", timeout: 2e3 });
+  const result = (0, import_node_child_process10.spawnSync)(id, ["--version"], { stdio: "pipe", timeout: 2e3 });
   if (result.error) {
     return { id, status: "unavailable", detail: `${id}: command not found` };
   }
@@ -114699,7 +115111,7 @@ async function runProvidersDoctorCommand(opts) {
   const registry2 = opts?.registry ?? DEFAULT_LOCAL_PROVIDER_REGISTRY;
   const write = opts?.write ?? ((line2) => console.log(line2));
   const results = buildProviderResults(registry2, opts?._detect);
-  write(import_picocolors39.default.bold("\nLocal AI providers\n"));
+  write(import_picocolors40.default.bold("\nLocal AI providers\n"));
   for (const result of results) {
     const descriptor = registry2.get(result.id);
     const name2 = descriptor?.displayName ?? result.id;
@@ -114707,11 +115119,11 @@ async function runProvidersDoctorCommand(opts) {
       `  ${statusMark(result.status)} ${result.id.padEnd(8)}  ${name2.padEnd(22)}  ${statusLabel(result.status)}`
     );
     if (result.status !== "ready" && result.detail) {
-      write(`    ${import_picocolors39.default.dim("\u2192 " + result.detail)}`);
+      write(`    ${import_picocolors40.default.dim("\u2192 " + result.detail)}`);
     }
   }
   write("");
-  write(import_picocolors39.default.bold("Cloud AI providers\n"));
+  write(import_picocolors40.default.bold("Cloud AI providers\n"));
   let source = null;
   if (opts?._anthropicKey !== void 0) {
     source = opts._anthropicKey ? "env" : null;
@@ -114726,18 +115138,18 @@ async function runProvidersDoctorCommand(opts) {
   }
   if (source === "config") {
     write(
-      `  ${import_picocolors39.default.green("\u2713")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors39.default.green("configured (local .horus config)")}`
+      `  ${import_picocolors40.default.green("\u2713")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors40.default.green("configured (local .horus config)")}`
     );
   } else if (source === "env") {
     write(
-      `  ${import_picocolors39.default.green("\u2713")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors39.default.green("configured (ANTHROPIC_API_KEY env)")}`
+      `  ${import_picocolors40.default.green("\u2713")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors40.default.green("configured (ANTHROPIC_API_KEY env)")}`
     );
   } else {
     write(
-      `  ${import_picocolors39.default.red("\u2717")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors39.default.dim("not configured")}`
+      `  ${import_picocolors40.default.red("\u2717")} ${"anthropic".padEnd(8)}  ${"Anthropic Claude API".padEnd(22)}  ${import_picocolors40.default.dim("not configured")}`
     );
     write(
-      `    ${import_picocolors39.default.dim("\u2192 run `horus connect ai` (or set ANTHROPIC_API_KEY) to enable `horus investigate --ai`")}`
+      `    ${import_picocolors40.default.dim("\u2192 run `horus connect ai` (or set ANTHROPIC_API_KEY) to enable `horus investigate --ai`")}`
     );
   }
   write("");
@@ -114746,9 +115158,9 @@ async function runProvidersDoctorCommand(opts) {
 
 // ../../packages/cli/src/commands/generate-config.ts
 init_cjs_shims();
-var import_node_fs17 = require("fs");
-var import_node_path19 = require("path");
-var import_picocolors40 = __toESM(require_picocolors(), 1);
+var import_node_fs18 = require("fs");
+var import_node_path20 = require("path");
+var import_picocolors41 = __toESM(require_picocolors(), 1);
 function configTemplate(name2, repoPath) {
   return `export default {
   database: {
@@ -114796,39 +115208,39 @@ async function runGenerateConfig(opts) {
   const defaults2 = localConfigPath2 != null ? projectDefaults(localConfigPath2) : null;
   const hasLocalConfig = defaults2 != null;
   const defaultOut = hasLocalConfig ? "horus.config.example.js" : "horus.config.js";
-  const outPath = (0, import_node_path19.resolve)(cwd, opts.out ?? defaultOut);
+  const outPath = (0, import_node_path20.resolve)(cwd, opts.out ?? defaultOut);
   const name2 = opts.name ?? defaults2?.name ?? "my-project";
   const repoPath = opts.repo ?? defaults2?.repoPath ?? `/path/to/${name2}`;
-  if ((0, import_node_fs17.existsSync)(outPath) && !opts.force) {
-    log(`${import_picocolors40.default.red("\u2717")} ${outPath} already exists`);
-    log(import_picocolors40.default.dim("  pass --force to overwrite"));
+  if ((0, import_node_fs18.existsSync)(outPath) && !opts.force) {
+    log(`${import_picocolors41.default.red("\u2717")} ${outPath} already exists`);
+    log(import_picocolors41.default.dim("  pass --force to overwrite"));
     return 1;
   }
   try {
-    (0, import_node_fs17.mkdirSync)((0, import_node_path19.dirname)(outPath), { recursive: true });
-    (0, import_node_fs17.writeFileSync)(outPath, configTemplate(name2, repoPath), "utf8");
+    (0, import_node_fs18.mkdirSync)((0, import_node_path20.dirname)(outPath), { recursive: true });
+    (0, import_node_fs18.writeFileSync)(outPath, configTemplate(name2, repoPath), "utf8");
   } catch (err2) {
-    log(`${import_picocolors40.default.red("\u2717")} Could not write ${outPath}: ${err2.message}`);
+    log(`${import_picocolors41.default.red("\u2717")} Could not write ${outPath}: ${err2.message}`);
     return 1;
   }
-  log(`${import_picocolors40.default.green("\u2713")} Created ${outPath}`);
-  log(import_picocolors40.default.dim(`  project: ${name2}`));
-  log(import_picocolors40.default.dim(`  repo:    ${repoPath}`));
+  log(`${import_picocolors41.default.green("\u2713")} Created ${outPath}`);
+  log(import_picocolors41.default.dim(`  project: ${name2}`));
+  log(import_picocolors41.default.dim(`  repo:    ${repoPath}`));
   if (hasLocalConfig && localConfigPath2 != null) {
     log("");
-    log(import_picocolors40.default.yellow("Note:") + ` an initialized Horus project config exists at ${localConfigPath2}`);
+    log(import_picocolors41.default.yellow("Note:") + ` an initialized Horus project config exists at ${localConfigPath2}`);
     log("  \u2022 .horus/config.json  \u2014 project config used by `horus investigate` from this repo");
     log("  \u2022 horus.config.js     \u2014 standalone/global config used with `horus doctor --config <path>`");
-    log(import_picocolors40.default.dim(`  next:  review ${outPath} and copy/adapt it as needed`));
+    log(import_picocolors41.default.dim(`  next:  review ${outPath} and copy/adapt it as needed`));
   } else {
-    log(import_picocolors40.default.dim(`  next:    horus doctor --config ${outPath}`));
+    log(import_picocolors41.default.dim(`  next:    horus doctor --config ${outPath}`));
   }
   return 0;
 }
 
 // ../../packages/cli/src/commands/readiness.ts
 init_cjs_shims();
-var import_picocolors41 = __toESM(require_picocolors(), 1);
+var import_picocolors42 = __toESM(require_picocolors(), 1);
 var READINESS_AI_CONTRACT = `Provide a clearly separated AI readiness summary with:
 
 Overall assessment
@@ -114851,9 +115263,9 @@ Confidence / gaps
 - Which checks Horus could verify vs. which require manual confirmation`;
 var DEFAULT_DB_URL5 = "postgresql://horus:horus@localhost:5433/horus";
 function mark3(status) {
-  if (status === "pass") return import_picocolors41.default.green("\u2713");
-  if (status === "warn") return import_picocolors41.default.yellow("~");
-  return import_picocolors41.default.red("\u2717");
+  if (status === "pass") return import_picocolors42.default.green("\u2713");
+  if (status === "warn") return import_picocolors42.default.yellow("~");
+  return import_picocolors42.default.red("\u2717");
 }
 async function runReadiness(opts) {
   const cwd = opts?.cwd ?? process.cwd();
@@ -115030,20 +115442,20 @@ async function runReadiness(opts) {
   }
   const blockingChecks = checks.filter((c4) => c4.blocking);
   const optionalChecks = checks.filter((c4) => !c4.blocking);
-  write(import_picocolors41.default.bold("\nHorus release readiness\n"));
-  write(import_picocolors41.default.bold("  Blocking"));
+  write(import_picocolors42.default.bold("\nHorus release readiness\n"));
+  write(import_picocolors42.default.bold("  Blocking"));
   for (const check2 of blockingChecks) {
-    write(`    ${mark3(check2.status)} ${import_picocolors41.default.bold(check2.label.padEnd(22))}  ${import_picocolors41.default.dim(check2.detail)}`);
+    write(`    ${mark3(check2.status)} ${import_picocolors42.default.bold(check2.label.padEnd(22))}  ${import_picocolors42.default.dim(check2.detail)}`);
     if (check2.next) {
-      write(`      ${import_picocolors41.default.dim("\u2192 " + check2.next)}`);
+      write(`      ${import_picocolors42.default.dim("\u2192 " + check2.next)}`);
     }
   }
   write("");
-  write(import_picocolors41.default.bold("  Optional"));
+  write(import_picocolors42.default.bold("  Optional"));
   for (const check2 of optionalChecks) {
-    write(`    ${mark3(check2.status)} ${import_picocolors41.default.bold(check2.label.padEnd(22))}  ${import_picocolors41.default.dim(check2.detail)}`);
+    write(`    ${mark3(check2.status)} ${import_picocolors42.default.bold(check2.label.padEnd(22))}  ${import_picocolors42.default.dim(check2.detail)}`);
     if (check2.next) {
-      write(`      ${import_picocolors41.default.dim("\u2192 " + check2.next)}`);
+      write(`      ${import_picocolors42.default.dim("\u2192 " + check2.next)}`);
     }
   }
   write("");
@@ -115051,21 +115463,21 @@ async function runReadiness(opts) {
   const optionalWarns = optionalChecks.filter((c4) => c4.status === "warn").length;
   if (blockingFails.length === 0) {
     if (optionalWarns === 0) {
-      write(import_picocolors41.default.green("  Ready for demo/release."));
+      write(import_picocolors42.default.green("  Ready for demo/release."));
     } else {
       write(
-        import_picocolors41.default.yellow(
+        import_picocolors42.default.yellow(
           `  Ready for a basic demo. ${optionalWarns} optional item(s) not configured \u2014 investigation evidence will be limited.`
         )
       );
     }
   } else {
     write(
-      import_picocolors41.default.red(
+      import_picocolors42.default.red(
         `  Not ready. ${blockingFails.length} blocking item(s) must be resolved before demo/release.`
       )
     );
-    write(import_picocolors41.default.dim("  Re-run `horus readiness` after resolving the items above."));
+    write(import_picocolors42.default.dim("  Re-run `horus readiness` after resolving the items above."));
   }
   write("");
   if (opts?.ai) {
@@ -115080,7 +115492,7 @@ async function runReadiness(opts) {
     });
     console.log("\n" + renderInterpretation(result));
     if (!result.ok) {
-      console.error(import_picocolors41.default.yellow(`[ai] ${result.warning}`));
+      console.error(import_picocolors42.default.yellow(`[ai] ${result.warning}`));
     }
   }
   return blockingFails.length > 0 ? 1 : 0;
@@ -115088,33 +115500,33 @@ async function runReadiness(opts) {
 
 // ../../packages/cli/src/commands/skill.ts
 init_cjs_shims();
-var import_node_fs18 = require("fs");
-var import_node_path20 = require("path");
+var import_node_fs19 = require("fs");
+var import_node_path21 = require("path");
 var import_node_os5 = require("os");
 var import_promises2 = require("readline/promises");
-var import_picocolors42 = __toESM(require_picocolors(), 1);
+var import_picocolors43 = __toESM(require_picocolors(), 1);
 var SUPPORTED_TARGETS = ["claude", "codex", "gemini", "cursor", "generic"];
 function isValidTarget(target) {
   return SUPPORTED_TARGETS.includes(target);
 }
 function getLegacyClaudeSkillPath(opts) {
   const base2 = opts.global ? (0, import_node_os5.homedir)() : opts.cwd ?? process.cwd();
-  return (0, import_node_path20.join)(base2, ".claude", "skills", "horus.md");
+  return (0, import_node_path21.join)(base2, ".claude", "skills", "horus.md");
 }
 function getSkillInstallPath(target, opts) {
   const base2 = opts.global ? (0, import_node_os5.homedir)() : opts.cwd ?? process.cwd();
   switch (target) {
     case "claude":
-      return (0, import_node_path20.join)(base2, ".claude", "skills", "horus", "SKILL.md");
+      return (0, import_node_path21.join)(base2, ".claude", "skills", "horus", "SKILL.md");
     case "gemini":
-      return opts.global ? (0, import_node_path20.join)(base2, ".gemini", "GEMINI.md") : (0, import_node_path20.join)(base2, "GEMINI.md");
+      return opts.global ? (0, import_node_path21.join)(base2, ".gemini", "GEMINI.md") : (0, import_node_path21.join)(base2, "GEMINI.md");
     case "cursor":
-      return opts.global ? (0, import_node_path20.join)(base2, ".cursorrules") : (0, import_node_path20.join)(base2, ".cursor", "rules", "horus.mdc");
+      return opts.global ? (0, import_node_path21.join)(base2, ".cursorrules") : (0, import_node_path21.join)(base2, ".cursor", "rules", "horus.mdc");
     case "codex":
-      return opts.global ? (0, import_node_path20.join)(base2, ".codex", "AGENTS.md") : (0, import_node_path20.join)(base2, "AGENTS.md");
+      return opts.global ? (0, import_node_path21.join)(base2, ".codex", "AGENTS.md") : (0, import_node_path21.join)(base2, "AGENTS.md");
     case "generic":
     default:
-      return (0, import_node_path20.join)(base2, ".horus", "skills", `horus-${target}.md`);
+      return (0, import_node_path21.join)(base2, ".horus", "skills", `horus-${target}.md`);
   }
 }
 var BASE_SKILL = `# Horus Grounded Investigation Skill
@@ -115431,66 +115843,66 @@ async function confirm(message) {
 async function runSkillInstall(target, opts) {
   const log = opts.write ?? ((line2) => console.log(line2));
   if (!isValidTarget(target)) {
-    log(`${import_picocolors42.default.red("\u2717")} Unknown target: ${import_picocolors42.default.bold(target)}`);
-    log(import_picocolors42.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
+    log(`${import_picocolors43.default.red("\u2717")} Unknown target: ${import_picocolors43.default.bold(target)}`);
+    log(import_picocolors43.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
     return 1;
   }
   const outPath = getSkillInstallPath(target, { global: opts.global, cwd: opts.cwd });
   const content = generateSkillContent(target);
   if (target === "claude") {
     const legacyPath = getLegacyClaudeSkillPath({ global: opts.global, cwd: opts.cwd });
-    if ((0, import_node_fs18.existsSync)(legacyPath)) {
+    if ((0, import_node_fs19.existsSync)(legacyPath)) {
       if (!opts.force) {
         const confirmed = await (opts.confirm ?? confirm)(
           `Found old flat skill file at ${legacyPath}. Replace it with the new directory layout?`
         );
         if (!confirmed) {
-          log(`${import_picocolors42.default.yellow("!")} Migration cancelled; existing skill left untouched.`);
-          log(import_picocolors42.default.dim("  Pass --force to replace without prompting."));
+          log(`${import_picocolors43.default.yellow("!")} Migration cancelled; existing skill left untouched.`);
+          log(import_picocolors43.default.dim("  Pass --force to replace without prompting."));
           return 1;
         }
       }
       try {
-        (0, import_node_fs18.rmSync)(legacyPath);
-        log(`${import_picocolors42.default.yellow("!")} Replaced old flat skill file: ${legacyPath}`);
+        (0, import_node_fs19.rmSync)(legacyPath);
+        log(`${import_picocolors43.default.yellow("!")} Replaced old flat skill file: ${legacyPath}`);
       } catch (err2) {
-        log(`${import_picocolors42.default.red("\u2717")} Could not remove legacy skill file ${legacyPath}: ${err2.message}`);
+        log(`${import_picocolors43.default.red("\u2717")} Could not remove legacy skill file ${legacyPath}: ${err2.message}`);
         return 1;
       }
     }
   }
-  if ((0, import_node_fs18.existsSync)(outPath) && !opts.force) {
-    log(`${import_picocolors42.default.red("\u2717")} ${outPath} already exists`);
-    log(import_picocolors42.default.dim("  pass --force to overwrite"));
+  if ((0, import_node_fs19.existsSync)(outPath) && !opts.force) {
+    log(`${import_picocolors43.default.red("\u2717")} ${outPath} already exists`);
+    log(import_picocolors43.default.dim("  pass --force to overwrite"));
     return 1;
   }
   try {
-    (0, import_node_fs18.mkdirSync)((0, import_node_path20.dirname)(outPath), { recursive: true });
-    (0, import_node_fs18.writeFileSync)(outPath, content, "utf8");
+    (0, import_node_fs19.mkdirSync)((0, import_node_path21.dirname)(outPath), { recursive: true });
+    (0, import_node_fs19.writeFileSync)(outPath, content, "utf8");
   } catch (err2) {
-    log(`${import_picocolors42.default.red("\u2717")} Could not write ${outPath}: ${err2.message}`);
+    log(`${import_picocolors43.default.red("\u2717")} Could not write ${outPath}: ${err2.message}`);
     return 1;
   }
-  log(`${import_picocolors42.default.green("\u2713")} Horus skill installed \u2192 ${outPath}`);
+  log(`${import_picocolors43.default.green("\u2713")} Horus skill installed \u2192 ${outPath}`);
   if (target === "claude") {
-    log(import_picocolors42.default.dim("  Claude Code will load this skill automatically."));
-    log(import_picocolors42.default.dim("  Invoke it with: /horus"));
+    log(import_picocolors43.default.dim("  Claude Code will load this skill automatically."));
+    log(import_picocolors43.default.dim("  Invoke it with: /horus"));
   } else if (target === "gemini") {
-    log(import_picocolors42.default.dim("  Gemini CLI will load this context file automatically."));
+    log(import_picocolors43.default.dim("  Gemini CLI will load this context file automatically."));
   } else if (target === "cursor") {
-    log(import_picocolors42.default.dim("  Cursor will load this rule automatically."));
+    log(import_picocolors43.default.dim("  Cursor will load this rule automatically."));
   } else if (target === "codex") {
-    log(import_picocolors42.default.dim("  Codex CLI will load this file automatically."));
+    log(import_picocolors43.default.dim("  Codex CLI will load this file automatically."));
   } else {
-    log(import_picocolors42.default.dim(`  Copy or reference this file in your ${target} agent instructions.`));
+    log(import_picocolors43.default.dim(`  Copy or reference this file in your ${target} agent instructions.`));
   }
   return 0;
 }
 async function runSkillPrint(target, opts) {
   const log = opts.write ?? ((line2) => console.log(line2));
   if (!isValidTarget(target)) {
-    log(`${import_picocolors42.default.red("\u2717")} Unknown target: ${import_picocolors42.default.bold(target)}`);
-    log(import_picocolors42.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
+    log(`${import_picocolors43.default.red("\u2717")} Unknown target: ${import_picocolors43.default.bold(target)}`);
+    log(import_picocolors43.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
     return 1;
   }
   process.stdout.write(generateSkillContent(target));
@@ -115499,8 +115911,8 @@ async function runSkillPrint(target, opts) {
 async function runSkillPath(target, opts) {
   const log = opts.write ?? ((line2) => console.log(line2));
   if (!isValidTarget(target)) {
-    log(`${import_picocolors42.default.red("\u2717")} Unknown target: ${import_picocolors42.default.bold(target)}`);
-    log(import_picocolors42.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
+    log(`${import_picocolors43.default.red("\u2717")} Unknown target: ${import_picocolors43.default.bold(target)}`);
+    log(import_picocolors43.default.dim(`  Supported targets: ${SUPPORTED_TARGETS.join(", ")}`));
     return 1;
   }
   const outPath = getSkillInstallPath(target, { global: opts.global, cwd: opts.cwd });
@@ -115510,14 +115922,14 @@ async function runSkillPath(target, opts) {
 
 // ../../packages/cli/src/commands/update.ts
 init_cjs_shims();
-var import_node_fs19 = require("fs");
-var import_node_path21 = require("path");
+var import_node_fs20 = require("fs");
+var import_node_path22 = require("path");
 var import_node_os6 = require("os");
 var import_node_crypto7 = require("crypto");
-var import_node_child_process9 = require("child_process");
-var import_node_util5 = require("util");
-var import_picocolors43 = __toESM(require_picocolors(), 1);
-var execFileAsync2 = (0, import_node_util5.promisify)(import_node_child_process9.execFile);
+var import_node_child_process11 = require("child_process");
+var import_node_util7 = require("util");
+var import_picocolors44 = __toESM(require_picocolors(), 1);
+var execFileAsync4 = (0, import_node_util7.promisify)(import_node_child_process11.execFile);
 async function ensureBackendPinned(write) {
   let installed = null;
   try {
@@ -115526,18 +115938,18 @@ async function ensureBackendPinned(write) {
     installed = null;
   }
   if (installed === PINNED_SOURCE_VERSION) {
-    write(`  ${import_picocolors43.default.green("\u2713")} Source backend already on pinned ${PINNED_SOURCE_VERSION}.`);
+    write(`  ${import_picocolors44.default.green("\u2713")} Source backend already on pinned ${PINNED_SOURCE_VERSION}.`);
     return;
   }
   if (installed === null) {
     write(
-      `  ${import_picocolors43.default.dim("Source backend not installed \u2014 install it: curl -fsSL https://horus.sh/install.sh | bash")}`
+      `  ${import_picocolors44.default.dim("Source backend not installed \u2014 install it: curl -fsSL https://horus.sh/install.sh | bash")}`
     );
     return;
   }
   write(`  Upgrading source backend ${installed} \u2192 ${PINNED_SOURCE_VERSION}\u2026`);
   try {
-    await execFileAsync2(
+    await execFileAsync4(
       "uv",
       // --refresh: a CLI update commonly lands seconds after a backend release, so uv's
       // cached PyPI index may not list the just-published version yet and the install
@@ -115546,10 +115958,10 @@ async function ensureBackendPinned(write) {
       ["tool", "install", "--force", "--refresh", `horus-source==${PINNED_SOURCE_VERSION}`],
       { timeout: 3e5 }
     );
-    write(`  ${import_picocolors43.default.green("\u2713")} Source backend upgraded to ${PINNED_SOURCE_VERSION}.`);
+    write(`  ${import_picocolors44.default.green("\u2713")} Source backend upgraded to ${PINNED_SOURCE_VERSION}.`);
   } catch {
-    write(`  ${import_picocolors43.default.yellow("!")} Couldn't auto-upgrade the source backend. Re-run the installer:`);
-    write(`    ${import_picocolors43.default.dim("curl -fsSL https://horus.sh/install.sh | bash")}`);
+    write(`  ${import_picocolors44.default.yellow("!")} Couldn't auto-upgrade the source backend. Re-run the installer:`);
+    write(`    ${import_picocolors44.default.dim("curl -fsSL https://horus.sh/install.sh | bash")}`);
   }
 }
 var RELEASES_API = "https://api.github.com/repos/meritt-dev/horus/releases/latest";
@@ -115582,7 +115994,7 @@ function resolveBinaryPath() {
   const raw = process.argv[1];
   if (!raw) throw new Error("Cannot determine binary path from process.argv[1]");
   try {
-    return (0, import_node_fs19.realpathSync)(raw);
+    return (0, import_node_fs20.realpathSync)(raw);
   } catch {
     return raw;
   }
@@ -115592,33 +116004,33 @@ async function runUpdate(opts) {
   const _fetch = opts._fetch ?? fetch;
   const currentVersion = opts._currentVersion ?? HORUS_VERSION;
   write(`
-${import_picocolors43.default.bold("Horus update")}
+${import_picocolors44.default.bold("Horus update")}
 `);
-  write(`  Current version: ${import_picocolors43.default.cyan(currentVersion)}`);
+  write(`  Current version: ${import_picocolors44.default.cyan(currentVersion)}`);
   let release;
   try {
     release = await fetchLatestRelease(_fetch);
   } catch (e) {
-    write(`  ${import_picocolors43.default.red("\u2717")} Could not reach GitHub: ${e.message}`);
+    write(`  ${import_picocolors44.default.red("\u2717")} Could not reach GitHub: ${e.message}`);
     return 1;
   }
   const latest = release.tag_name.replace(/^v/, "");
-  write(`  Latest version:  ${import_picocolors43.default.cyan(latest)}`);
+  write(`  Latest version:  ${import_picocolors44.default.cyan(latest)}`);
   const newer = isNewer(latest, currentVersion);
   if (opts.check) {
     if (newer) {
       write(`
-  ${import_picocolors43.default.yellow("\u2192")} ${import_picocolors43.default.bold(latest)} is available.`);
-      write(`    Run ${import_picocolors43.default.bold("horus update")} to upgrade.`);
+  ${import_picocolors44.default.yellow("\u2192")} ${import_picocolors44.default.bold(latest)} is available.`);
+      write(`    Run ${import_picocolors44.default.bold("horus update")} to upgrade.`);
     } else {
       write(`
-  ${import_picocolors43.default.green("\u2713")} Already on the latest version.`);
+  ${import_picocolors44.default.green("\u2713")} Already on the latest version.`);
     }
     return 0;
   }
   if (!newer && !opts.force) {
     write(`
-  ${import_picocolors43.default.green("\u2713")} Already on the latest version.`);
+  ${import_picocolors44.default.green("\u2713")} Already on the latest version.`);
     await ensureBackendPinned(write);
     return 0;
   }
@@ -115628,8 +116040,8 @@ ${import_picocolors43.default.bold("Horus update")}
   const binaryAsset = release.assets.find((a2) => a2.name === assetName);
   const checksumAsset = release.assets.find((a2) => a2.name === checksumName);
   if (!binaryAsset) {
-    write(`  ${import_picocolors43.default.red("\u2717")} Release ${tag} has no binary asset named '${assetName}'.`);
-    write(`    Fallback: ${import_picocolors43.default.dim("curl -fsSL https://horus.sh/install.sh | bash")}`);
+    write(`  ${import_picocolors44.default.red("\u2717")} Release ${tag} has no binary asset named '${assetName}'.`);
+    write(`    Fallback: ${import_picocolors44.default.dim("curl -fsSL https://horus.sh/install.sh | bash")}`);
     return 1;
   }
   write(`
@@ -115639,7 +116051,7 @@ ${import_picocolors43.default.bold("Horus update")}
     redirect: "follow"
   });
   if (!binRes.ok || !binRes.body) {
-    write(`  ${import_picocolors43.default.red("\u2717")} Download failed: ${binRes.status}`);
+    write(`  ${import_picocolors44.default.red("\u2717")} Download failed: ${binRes.status}`);
     return 1;
   }
   const binBuf = Buffer.from(await binRes.arrayBuffer());
@@ -115653,82 +116065,82 @@ ${import_picocolors43.default.bold("Horus update")}
       const expectedHash = csText.trim().split(/\s+/)[0];
       const actualHash = sha256hex(binBuf);
       if (expectedHash !== actualHash) {
-        write(`  ${import_picocolors43.default.red("\u2717")} Checksum mismatch \u2014 download may be corrupt.`);
+        write(`  ${import_picocolors44.default.red("\u2717")} Checksum mismatch \u2014 download may be corrupt.`);
         write(`    Expected: ${expectedHash}`);
         write(`    Got:      ${actualHash}`);
         return 1;
       }
-      write(`  ${import_picocolors43.default.green("\u2713")} Checksum verified.`);
+      write(`  ${import_picocolors44.default.green("\u2713")} Checksum verified.`);
     }
   }
   let binaryPath;
   try {
     binaryPath = resolveBinaryPath();
   } catch (e) {
-    write(`  ${import_picocolors43.default.red("\u2717")} ${e.message}`);
+    write(`  ${import_picocolors44.default.red("\u2717")} ${e.message}`);
     return 1;
   }
-  if (!(0, import_node_fs19.existsSync)(binaryPath)) {
-    write(`  ${import_picocolors43.default.red("\u2717")} Binary not found at ${binaryPath}`);
+  if (!(0, import_node_fs20.existsSync)(binaryPath)) {
+    write(`  ${import_picocolors44.default.red("\u2717")} Binary not found at ${binaryPath}`);
     return 1;
   }
-  const tmpPath = (0, import_node_path21.join)((0, import_node_os6.tmpdir)(), `horus-update-${tag}-${process.pid}`);
+  const tmpPath = (0, import_node_path22.join)((0, import_node_os6.tmpdir)(), `horus-update-${tag}-${process.pid}`);
   const backupPath = `${binaryPath}.bak`;
   try {
-    (0, import_node_fs19.writeFileSync)(tmpPath, binBuf, { mode: 493 });
+    (0, import_node_fs20.writeFileSync)(tmpPath, binBuf, { mode: 493 });
   } catch (e) {
-    write(`  ${import_picocolors43.default.red("\u2717")} Could not write to temp dir: ${e.message}`);
+    write(`  ${import_picocolors44.default.red("\u2717")} Could not write to temp dir: ${e.message}`);
     return 1;
   }
   try {
-    (0, import_node_fs19.renameSync)(binaryPath, backupPath);
+    (0, import_node_fs20.renameSync)(binaryPath, backupPath);
     try {
-      (0, import_node_fs19.renameSync)(tmpPath, binaryPath);
-      (0, import_node_fs19.chmodSync)(binaryPath, 493);
+      (0, import_node_fs20.renameSync)(tmpPath, binaryPath);
+      (0, import_node_fs20.chmodSync)(binaryPath, 493);
     } catch (e) {
       try {
-        (0, import_node_fs19.renameSync)(backupPath, binaryPath);
+        (0, import_node_fs20.renameSync)(backupPath, binaryPath);
       } catch {
       }
       throw e;
     }
     try {
-      (0, import_node_fs19.unlinkSync)(backupPath);
+      (0, import_node_fs20.unlinkSync)(backupPath);
     } catch {
     }
   } catch (e) {
     try {
-      (0, import_node_fs19.unlinkSync)(tmpPath);
+      (0, import_node_fs20.unlinkSync)(tmpPath);
     } catch {
     }
     const msg = e.message ?? String(e);
     const needsSudo = e.code === "EACCES" || e.code === "EPERM";
-    write(`  ${import_picocolors43.default.red("\u2717")} Could not replace binary at ${binaryPath}: ${msg}`);
+    write(`  ${import_picocolors44.default.red("\u2717")} Could not replace binary at ${binaryPath}: ${msg}`);
     if (needsSudo) {
       write(`
   Try with sudo:`);
       write(
-        `    ${import_picocolors43.default.dim(`sudo curl -fsSL https://github.com/meritt-dev/horus/releases/download/${tag}/${assetName} -o ${binaryPath} && sudo chmod +x ${binaryPath}`)}`
+        `    ${import_picocolors44.default.dim(`sudo curl -fsSL https://github.com/meritt-dev/horus/releases/download/${tag}/${assetName} -o ${binaryPath} && sudo chmod +x ${binaryPath}`)}`
       );
     }
     return 1;
   }
-  write(`  ${import_picocolors43.default.green("\u2713")} Updated: ${import_picocolors43.default.bold(currentVersion)} \u2192 ${import_picocolors43.default.bold(latest)}`);
-  write(`  ${import_picocolors43.default.dim(binaryPath)}`);
+  write(`  ${import_picocolors44.default.green("\u2713")} Updated: ${import_picocolors44.default.bold(currentVersion)} \u2192 ${import_picocolors44.default.bold(latest)}`);
+  write(`  ${import_picocolors44.default.dim(binaryPath)}`);
   await ensureBackendPinned(write);
   return 0;
 }
 
 // ../../packages/cli/src/commands/login.ts
 init_cjs_shims();
-var import_node_child_process10 = require("child_process");
-var import_picocolors44 = __toESM(require_picocolors(), 1);
+var import_node_child_process12 = require("child_process");
+var import_picocolors45 = __toESM(require_picocolors(), 1);
 var sleep2 = (ms) => new Promise((resolve9) => setTimeout(resolve9, ms));
 function openBrowser(url) {
   const cmd = process.platform === "darwin" ? "open" : process.platform === "win32" ? "cmd" : "xdg-open";
   const args2 = process.platform === "win32" ? ["/c", "start", "", url] : [url];
   try {
-    (0, import_node_child_process10.execFile)(cmd, args2, () => {
+    (0, import_node_child_process12.execFile)(cmd, args2, () => {
     });
   } catch {
   }
@@ -115747,19 +116159,19 @@ async function loginWithToken(apiBaseUrl, token) {
       }
     });
     console.log(
-      `${import_picocolors44.default.green("\u2713")} Logged in as ${import_picocolors44.default.bold(me3.user.primaryEmail)}. Run ${import_picocolors44.default.bold("horus cloud link")} to connect this repo.`
+      `${import_picocolors45.default.green("\u2713")} Logged in as ${import_picocolors45.default.bold(me3.user.primaryEmail)}. Run ${import_picocolors45.default.bold("horus cloud link")} to connect this repo.`
     );
     return 0;
   } catch (err2) {
     if (err2 instanceof CloudOfflineError) {
-      console.error(import_picocolors44.default.red(err2.message));
+      console.error(import_picocolors45.default.red(err2.message));
       return 1;
     }
     if (err2 instanceof CloudError && err2.status === 401) {
-      console.error(import_picocolors44.default.red("That token is not valid. Create a fresh one in the dashboard and try again."));
+      console.error(import_picocolors45.default.red("That token is not valid. Create a fresh one in the dashboard and try again."));
       return 1;
     }
-    console.error(import_picocolors44.default.red(`Login failed: ${err2.message}`));
+    console.error(import_picocolors45.default.red(`Login failed: ${err2.message}`));
     return 1;
   }
 }
@@ -115770,19 +116182,19 @@ async function loginWithBrowser(apiBaseUrl) {
     session = await client.startCliSession();
   } catch (err2) {
     if (err2 instanceof CloudOfflineError) {
-      console.error(import_picocolors44.default.red(err2.message));
+      console.error(import_picocolors45.default.red(err2.message));
       return 1;
     }
-    console.error(import_picocolors44.default.red(`Could not start login: ${err2.message}`));
+    console.error(import_picocolors45.default.red(`Could not start login: ${err2.message}`));
     return 1;
   }
   console.log("");
   console.log(`  To sign in, open this URL in your browser:`);
-  console.log(`    ${import_picocolors44.default.cyan(import_picocolors44.default.bold(session.verificationUri))}`);
+  console.log(`    ${import_picocolors45.default.cyan(import_picocolors45.default.bold(session.verificationUri))}`);
   console.log("");
-  console.log(`  and enter the code:  ${import_picocolors44.default.bold(session.userCode)}`);
+  console.log(`  and enter the code:  ${import_picocolors45.default.bold(session.userCode)}`);
   console.log("");
-  console.log(import_picocolors44.default.dim(`  Waiting for approval\u2026  (press Ctrl+C to cancel)`));
+  console.log(import_picocolors45.default.dim(`  Waiting for approval\u2026  (press Ctrl+C to cancel)`));
   openBrowser(session.verificationUriComplete);
   const deadline = Date.now() + session.expiresIn * 1e3;
   let intervalMs = Math.max(session.interval, 1) * 1e3;
@@ -115793,7 +116205,7 @@ async function loginWithBrowser(apiBaseUrl) {
       poll = await client.pollCliSession(session.deviceCode);
     } catch (err2) {
       if (err2 instanceof CloudOfflineError) {
-        console.error(import_picocolors44.default.red(`
+        console.error(import_picocolors45.default.red(`
 ${err2.message}`));
         return 1;
       }
@@ -115806,14 +116218,14 @@ ${err2.message}`));
         intervalMs += 2e3;
         break;
       case "denied":
-        console.error(import_picocolors44.default.red("\nLogin was denied in the browser."));
+        console.error(import_picocolors45.default.red("\nLogin was denied in the browser."));
         return 1;
       case "expired":
-        console.error(import_picocolors44.default.red("\nThis login request expired. Run `horus login` again."));
+        console.error(import_picocolors45.default.red("\nThis login request expired. Run `horus login` again."));
         return 1;
       case "approved":
         if (!poll.token || !poll.account) {
-          console.error(import_picocolors44.default.red("\nLogin approved but no token was returned. Try again."));
+          console.error(import_picocolors45.default.red("\nLogin approved but no token was returned. Try again."));
           return 1;
         }
         writeAuth({
@@ -115823,12 +116235,12 @@ ${err2.message}`));
         });
         console.log(
           `
-${import_picocolors44.default.green("\u2713")} Logged in as ${import_picocolors44.default.bold(poll.account.email)}. Run ${import_picocolors44.default.bold("horus cloud link")} to connect this repo.`
+${import_picocolors45.default.green("\u2713")} Logged in as ${import_picocolors45.default.bold(poll.account.email)}. Run ${import_picocolors45.default.bold("horus cloud link")} to connect this repo.`
         );
         return 0;
     }
   }
-  console.error(import_picocolors44.default.red("\nTimed out waiting for approval. Run `horus login` again."));
+  console.error(import_picocolors45.default.red("\nTimed out waiting for approval. Run `horus login` again."));
   return 1;
 }
 async function runLogin(opts = {}) {
@@ -115842,7 +116254,7 @@ async function runLogin(opts = {}) {
 async function runLogout() {
   const auth = readAuth();
   if (!auth) {
-    console.log(import_picocolors44.default.dim("Not logged in."));
+    console.log(import_picocolors45.default.dim("Not logged in."));
     return 0;
   }
   const session = authedClient();
@@ -115856,18 +116268,18 @@ async function runLogout() {
     }
   }
   clearAuth();
-  console.log(`${import_picocolors44.default.green("\u2713")} Logged out. Local mode still works.`);
+  console.log(`${import_picocolors45.default.green("\u2713")} Logged out. Local mode still works.`);
   return 0;
 }
 
 // ../../packages/cli/src/commands/cloud.ts
 init_cjs_shims();
-var import_picocolors45 = __toESM(require_picocolors(), 1);
+var import_picocolors46 = __toESM(require_picocolors(), 1);
 var import_promises3 = require("readline/promises");
 
 // ../../packages/cli/src/lib/cloud/git.ts
 init_cjs_shims();
-var import_node_child_process11 = require("child_process");
+var import_node_child_process13 = require("child_process");
 function parseRepoName(remoteUrl) {
   const cleaned = remoteUrl.trim().replace(/\.git$/, "");
   const lastSegment = cleaned.split(/[/:]/).filter(Boolean).pop() ?? "";
@@ -115891,7 +116303,7 @@ function inferProvider(remoteUrl) {
 }
 function detectGitRemote(root) {
   try {
-    const remoteUrl = (0, import_node_child_process11.execFileSync)("git", ["-C", root, "remote", "get-url", "origin"], {
+    const remoteUrl = (0, import_node_child_process13.execFileSync)("git", ["-C", root, "remote", "get-url", "origin"], {
       encoding: "utf8",
       stdio: ["ignore", "pipe", "ignore"]
     }).trim();
@@ -115907,7 +116319,7 @@ async function runCloudLink(opts = {}) {
   const root = repoRootOrCwd(opts.cwd);
   const session = authedClient();
   if (!session) {
-    console.error(import_picocolors45.default.red(`Not logged in. Run ${import_picocolors45.default.bold("horus login")} first.`));
+    console.error(import_picocolors46.default.red(`Not logged in. Run ${import_picocolors46.default.bold("horus login")} first.`));
     return 1;
   }
   let ctx;
@@ -115917,7 +116329,7 @@ async function runCloudLink(opts = {}) {
     return reportCloudError(err2);
   }
   const remote = detectGitRemote(root);
-  if (remote) console.log(import_picocolors45.default.dim(`Detected git remote: ${remote.remoteUrl}`));
+  if (remote) console.log(import_picocolors46.default.dim(`Detected git remote: ${remote.remoteUrl}`));
   let resolved = null;
   let target = opts.project;
   if (!target) {
@@ -115933,7 +116345,7 @@ async function runCloudLink(opts = {}) {
       const org = ctx.organizations.find((o5) => o5.id === match.organizationId);
       if (ws && org) {
         target = `${org.slug}/${ws.slug}/${match.slug}`;
-        console.log(import_picocolors45.default.dim(`Matched existing project by remote: ${import_picocolors45.default.bold(target)}`));
+        console.log(import_picocolors46.default.dim(`Matched existing project by remote: ${import_picocolors46.default.bold(target)}`));
       }
     }
   }
@@ -115942,8 +116354,8 @@ async function runCloudLink(opts = {}) {
     if (created === "aborted") return 1;
     if (!created) {
       console.error(
-        import_picocolors45.default.red("No project to link.") + `
-  Run ${import_picocolors45.default.bold("horus cloud link")} in a TTY to create one, pass ${import_picocolors45.default.bold("--project <org/workspace/project>")}, or create a project at ${import_picocolors45.default.bold("https://cloud.horus.sh")}.`
+        import_picocolors46.default.red("No project to link.") + `
+  Run ${import_picocolors46.default.bold("horus cloud link")} in a TTY to create one, pass ${import_picocolors46.default.bold("--project <org/workspace/project>")}, or create a project at ${import_picocolors46.default.bold("https://cloud.horus.sh")}.`
       );
       return 1;
     }
@@ -115953,8 +116365,8 @@ async function runCloudLink(opts = {}) {
     resolved = resolveTriple(ctx, target);
     if (!resolved) {
       console.error(
-        import_picocolors45.default.red(`You don't have access to ${import_picocolors45.default.bold(target)}.`) + `
-  Run ${import_picocolors45.default.bold("horus context list")} to see available projects.`
+        import_picocolors46.default.red(`You don't have access to ${import_picocolors46.default.bold(target)}.`) + `
+  Run ${import_picocolors46.default.bold("horus context list")} to see available projects.`
       );
       return 1;
     }
@@ -115967,10 +116379,10 @@ async function runCloudLink(opts = {}) {
     project: resolved.project
   });
   console.log(
-    `${import_picocolors45.default.green("\u2713")} Linked. Context for this repo is now ${import_picocolors45.default.bold(label)} ${import_picocolors45.default.dim("(cloud)")}.`
+    `${import_picocolors46.default.green("\u2713")} Linked. Context for this repo is now ${import_picocolors46.default.bold(label)} ${import_picocolors46.default.dim("(cloud)")}.`
   );
   console.log(
-    import_picocolors45.default.dim(`  Investigations here save to Horus Cloud. ${import_picocolors45.default.bold("horus context use local")} to switch back.`)
+    import_picocolors46.default.dim(`  Investigations here save to Horus Cloud. ${import_picocolors46.default.bold("horus context use local")} to switch back.`)
   );
   return 0;
 }
@@ -115978,11 +116390,11 @@ async function runCloudUnlink(opts = {}) {
   const root = repoRootOrCwd(opts.cwd);
   const cfg = readCloudConfig(root);
   if (!cfg || cfg.context !== "cloud") {
-    console.log(import_picocolors45.default.dim("This repo isn't linked to a cloud project."));
+    console.log(import_picocolors46.default.dim("This repo isn't linked to a cloud project."));
     return 0;
   }
   clearCloudConfig(root);
-  console.log(`${import_picocolors45.default.green("\u2713")} Unlinked. This repo is back to ${import_picocolors45.default.bold("local")} mode.`);
+  console.log(`${import_picocolors46.default.green("\u2713")} Unlinked. This repo is back to ${import_picocolors46.default.bold("local")} mode.`);
   return 0;
 }
 async function runCloudStatus(opts = {}) {
@@ -115990,18 +116402,18 @@ async function runCloudStatus(opts = {}) {
   const cfg = readCloudConfig(root);
   const session = authedClient();
   if (!isCloudActive(cfg) || !cfg?.project) {
-    console.log(`${import_picocolors45.default.bold("Context:")}  local`);
-    console.log(`${import_picocolors45.default.bold("Storage:")}  local Postgres (~/.horus)`);
+    console.log(`${import_picocolors46.default.bold("Context:")}  local`);
+    console.log(`${import_picocolors46.default.bold("Storage:")}  local Postgres (~/.horus)`);
     console.log(
-      import_picocolors45.default.dim(`Tip:      ${import_picocolors45.default.bold("horus login")} then ${import_picocolors45.default.bold("horus cloud link")} to share investigations with your team.`)
+      import_picocolors46.default.dim(`Tip:      ${import_picocolors46.default.bold("horus login")} then ${import_picocolors46.default.bold("horus cloud link")} to share investigations with your team.`)
     );
     return 0;
   }
   const triple = `${cfg.organization?.slug}/${cfg.workspace?.slug}/${cfg.project.slug}`;
-  console.log(`${import_picocolors45.default.bold("Context:")}     ${triple}   ${import_picocolors45.default.dim("(cloud)")}`);
+  console.log(`${import_picocolors46.default.bold("Context:")}     ${triple}   ${import_picocolors46.default.dim("(cloud)")}`);
   let projectLine = `${cfg.project.slug}`;
   let metaLines = [];
-  let account = import_picocolors45.default.dim("not logged in");
+  let account = import_picocolors46.default.dim("not logged in");
   if (session) {
     account = session.auth.account.email;
     try {
@@ -116016,9 +116428,9 @@ async function runCloudStatus(opts = {}) {
     } catch {
     }
   }
-  console.log(`${import_picocolors45.default.bold("Project:")}     ${projectLine}`);
+  console.log(`${import_picocolors46.default.bold("Project:")}     ${projectLine}`);
   for (const line2 of metaLines) console.log(line2);
-  console.log(`${import_picocolors45.default.bold("Account:")}     ${account}`);
+  console.log(`${import_picocolors46.default.bold("Account:")}     ${account}`);
   return 0;
 }
 async function runCloudSync(opts = {}) {
@@ -116026,13 +116438,13 @@ async function runCloudSync(opts = {}) {
   const cfg = readCloudConfig(root);
   if (!isCloudActive(cfg) || !cfg.project) {
     console.error(
-      import_picocolors45.default.red("This repo isn't linked to a cloud project.") + ` Run ${import_picocolors45.default.bold("horus cloud link")} first.`
+      import_picocolors46.default.red("This repo isn't linked to a cloud project.") + ` Run ${import_picocolors46.default.bold("horus cloud link")} first.`
     );
     return 1;
   }
   const session = authedClient();
   if (!session) {
-    console.error(import_picocolors45.default.red(`Not logged in. Run ${import_picocolors45.default.bold("horus login")} first.`));
+    console.error(import_picocolors46.default.red(`Not logged in. Run ${import_picocolors46.default.bold("horus login")} first.`));
     return 1;
   }
   const { db, sql: sql2 } = await openDb(await resolveDbUrl(opts.config));
@@ -116053,26 +116465,26 @@ async function runCloudSync(opts = {}) {
   const target = `${cfg.organization?.slug}/${cfg.workspace?.slug}/${cfg.project.slug}`;
   if (uploadable.length === 0) {
     console.log(
-      import_picocolors45.default.dim(
+      import_picocolors46.default.dim(
         `No local investigations with reports to upload.` + (skippedNoReport ? ` (${skippedNoReport} without a report skipped)` : "")
       )
     );
     return 0;
   }
-  console.log(import_picocolors45.default.bold(`Will upload ${uploadable.length} investigation(s) to ${target} ${import_picocolors45.default.dim("(cloud)")}:`));
+  console.log(import_picocolors46.default.bold(`Will upload ${uploadable.length} investigation(s) to ${target} ${import_picocolors46.default.dim("(cloud)")}:`));
   for (const c4 of uploadable.slice(0, 20)) {
-    console.log(`  ${import_picocolors45.default.dim(c4.id.slice(0, 8))}  ${(c4.title ?? "untitled").slice(0, 70)}`);
+    console.log(`  ${import_picocolors46.default.dim(c4.id.slice(0, 8))}  ${(c4.title ?? "untitled").slice(0, 70)}`);
   }
-  if (uploadable.length > 20) console.log(import_picocolors45.default.dim(`  \u2026and ${uploadable.length - 20} more`));
-  if (skippedNoReport) console.log(import_picocolors45.default.dim(`  (${skippedNoReport} local investigation(s) without a report will be skipped)`));
+  if (uploadable.length > 20) console.log(import_picocolors46.default.dim(`  \u2026and ${uploadable.length - 20} more`));
+  if (skippedNoReport) console.log(import_picocolors46.default.dim(`  (${skippedNoReport} local investigation(s) without a report will be skipped)`));
   if (opts.dryRun) {
-    console.log(import_picocolors45.default.dim("Dry run \u2014 nothing uploaded. Re-run without --dry-run to upload."));
+    console.log(import_picocolors46.default.dim("Dry run \u2014 nothing uploaded. Re-run without --dry-run to upload."));
     return 0;
   }
   if (!opts.yes) {
     if (!process.stdin.isTTY) {
       console.error(
-        import_picocolors45.default.yellow(`Re-run with ${import_picocolors45.default.bold("--yes")} to upload, or ${import_picocolors45.default.bold("--dry-run")} to preview only.`)
+        import_picocolors46.default.yellow(`Re-run with ${import_picocolors46.default.bold("--yes")} to upload, or ${import_picocolors46.default.bold("--dry-run")} to preview only.`)
       );
       return 1;
     }
@@ -116080,7 +116492,7 @@ async function runCloudSync(opts = {}) {
     try {
       const answer = (await rl.question(`Upload ${uploadable.length} investigation(s) to ${target}? (y/N) `)).trim().toLowerCase();
       if (answer !== "y" && answer !== "yes") {
-        console.log(import_picocolors45.default.dim("Aborted. Nothing uploaded."));
+        console.log(import_picocolors46.default.dim("Aborted. Nothing uploaded."));
         return 0;
       }
     } finally {
@@ -116093,18 +116505,18 @@ async function runCloudSync(opts = {}) {
     try {
       const refs = await uploadInvestigationToCloud(session.client, cfg, c4.report);
       created++;
-      console.log(`${import_picocolors45.default.green("\u2713")} ${import_picocolors45.default.dim(c4.id.slice(0, 8))} \u2192 ${refs.investigationId}`);
+      console.log(`${import_picocolors46.default.green("\u2713")} ${import_picocolors46.default.dim(c4.id.slice(0, 8))} \u2192 ${refs.investigationId}`);
     } catch (err2) {
       failed++;
-      console.error(`${import_picocolors45.default.red("\u2717")} ${import_picocolors45.default.dim(c4.id.slice(0, 8))} ${err2.message}`);
+      console.error(`${import_picocolors46.default.red("\u2717")} ${import_picocolors46.default.dim(c4.id.slice(0, 8))} ${err2.message}`);
     }
   }
   console.log("");
   console.log(
-    `${import_picocolors45.default.bold("Sync complete:")} ${import_picocolors45.default.green(`${created} uploaded`)}, ${skippedNoReport} skipped, ` + (failed ? import_picocolors45.default.red(`${failed} failed`) : "0 failed") + "."
+    `${import_picocolors46.default.bold("Sync complete:")} ${import_picocolors46.default.green(`${created} uploaded`)}, ${skippedNoReport} skipped, ` + (failed ? import_picocolors46.default.red(`${failed} failed`) : "0 failed") + "."
   );
   console.log(
-    import_picocolors45.default.dim("Local data was not modified. Re-running is safe \u2014 duplicates are deduped by idempotency key.")
+    import_picocolors46.default.dim("Local data was not modified. Re-running is safe \u2014 duplicates are deduped by idempotency key.")
   );
   return failed > 0 ? 1 : 0;
 }
@@ -116112,8 +116524,8 @@ async function createProjectFromRepo(client, ctx, remote, yes) {
   if (!process.stdin.isTTY && !yes) return null;
   if (ctx.organizations.length === 0) {
     console.error(
-      import_picocolors45.default.red("You're not a member of any organization yet.") + `
-  Create one at ${import_picocolors45.default.bold("https://cloud.horus.sh")} first.`
+      import_picocolors46.default.red("You're not a member of any organization yet.") + `
+  Create one at ${import_picocolors46.default.bold("https://cloud.horus.sh")} first.`
     );
     return null;
   }
@@ -116138,9 +116550,9 @@ async function createProjectFromRepo(client, ctx, remote, yes) {
       const wsName = await ask2("New workspace name", repoName || "default");
       const ws = await client.createWorkspace(org.id, { name: wsName });
       workspace = { id: ws.id, slug: ws.slug };
-      console.log(import_picocolors45.default.dim(`Created workspace ${import_picocolors45.default.bold(ws.slug)}.`));
+      console.log(import_picocolors46.default.dim(`Created workspace ${import_picocolors46.default.bold(ws.slug)}.`));
     } else {
-      console.log(`Workspaces in ${import_picocolors45.default.bold(org.slug)}:`);
+      console.log(`Workspaces in ${import_picocolors46.default.bold(org.slug)}:`);
       orgWorkspaces.forEach((w4, i3) => console.log(`  ${i3 + 1}) ${w4.slug}`));
       console.log(`  ${orgWorkspaces.length + 1}) + create a new workspace`);
       const pick2 = Number(await ask2("Workspace number", "1"));
@@ -116148,7 +116560,7 @@ async function createProjectFromRepo(client, ctx, remote, yes) {
         const wsName = await ask2("New workspace name", repoName || "default");
         const ws = await client.createWorkspace(org.id, { name: wsName });
         workspace = { id: ws.id, slug: ws.slug };
-        console.log(import_picocolors45.default.dim(`Created workspace ${import_picocolors45.default.bold(ws.slug)}.`));
+        console.log(import_picocolors46.default.dim(`Created workspace ${import_picocolors46.default.bold(ws.slug)}.`));
       } else {
         const chosen = orgWorkspaces[pick2 - 1] ?? orgWorkspaces[0];
         workspace = { id: chosen.id, slug: chosen.slug };
@@ -116160,7 +116572,7 @@ async function createProjectFromRepo(client, ctx, remote, yes) {
       remoteUrl: remote?.remoteUrl,
       provider: remote ? inferProvider(remote.remoteUrl) : void 0
     });
-    console.log(import_picocolors45.default.dim(`Created project ${import_picocolors45.default.bold(project.slug)}.`));
+    console.log(import_picocolors46.default.dim(`Created project ${import_picocolors46.default.bold(project.slug)}.`));
     return {
       organization: { id: org.id, slug: org.slug },
       workspace,
@@ -116176,7 +116588,7 @@ async function createProjectFromRepo(client, ctx, remote, yes) {
 
 // ../../packages/cli/src/commands/telemetry.ts
 init_cjs_shims();
-var import_picocolors47 = __toESM(require_picocolors(), 1);
+var import_picocolors48 = __toESM(require_picocolors(), 1);
 var import_node_crypto8 = require("crypto");
 
 // ../../packages/cli/src/lib/telemetry/transport.ts
@@ -116237,7 +116649,7 @@ async function deleteRemoteTelemetry(installId, opts = {}) {
 
 // ../../packages/cli/src/lib/telemetry/notice.ts
 init_cjs_shims();
-var import_picocolors46 = __toESM(require_picocolors(), 1);
+var import_picocolors47 = __toESM(require_picocolors(), 1);
 var PRIVACY_URL = "https://horus.sh/privacy";
 var SUPPRESS_FIRST_TOKEN = /* @__PURE__ */ new Set(["telemetry", "help"]);
 var SUPPRESS_FLAGS = /* @__PURE__ */ new Set(["-V", "--version", "-h", "--help"]);
@@ -116249,11 +116661,11 @@ function shouldSuppressFor(argv) {
   return firstToken != null && SUPPRESS_FIRST_TOKEN.has(firstToken);
 }
 function banner() {
-  const b5 = import_picocolors46.default.bold;
-  const dim = import_picocolors46.default.dim;
+  const b5 = import_picocolors47.default.bold;
+  const dim = import_picocolors47.default.dim;
   return [
     "",
-    import_picocolors46.default.cyan(b5("Horus collects anonymous usage data to improve the tool.")),
+    import_picocolors47.default.cyan(b5("Horus collects anonymous usage data to improve the tool.")),
     dim("  \u2022 On by default: command names, timings, success/failure, and where the"),
     dim("    engine ran out of evidence. No file contents, queries, or secrets."),
     dim("  \u2022 Off by default: your investigation inputs/outputs (opt in to help train"),
@@ -116261,7 +116673,7 @@ function banner() {
     dim("  \u2022 If you use Horus Cloud, linked investigations sync to your workspace."),
     "",
     `  ${dim("Opt out anytime:")} ${b5("horus telemetry disable")}  ${dim("\xB7")}  ${b5("HORUS_TELEMETRY=0")}  ${dim("\xB7")}  ${b5("DO_NOT_TRACK=1")}`,
-    `  ${dim("Details:")} ${import_picocolors46.default.underline(PRIVACY_URL)}`,
+    `  ${dim("Details:")} ${import_picocolors47.default.underline(PRIVACY_URL)}`,
     ""
   ].join("\n");
 }
@@ -116284,45 +116696,45 @@ function maybeShowFirstRunNotice(argv = process.argv) {
 
 // ../../packages/cli/src/commands/telemetry.ts
 function onOff(enabled) {
-  return enabled ? import_picocolors47.default.green("on") : import_picocolors47.default.dim("off");
+  return enabled ? import_picocolors48.default.green("on") : import_picocolors48.default.dim("off");
 }
 function warnIfEnvOverrides() {
   const decision = resolveConsent();
   if (decision.forcedOff) {
     console.log(
-      import_picocolors47.default.yellow(
+      import_picocolors48.default.yellow(
         `
 Note: telemetry is currently forced off by your environment (${decision.reason}).`
       )
     );
-    console.log(import_picocolors47.default.dim("Your saved preference will apply once that override is removed."));
+    console.log(import_picocolors48.default.dim("Your saved preference will apply once that override is removed."));
   } else if (decision.source === "ci") {
     console.log(
-      import_picocolors47.default.yellow("\nNote: CI environment detected \u2014 telemetry stays off here regardless.")
+      import_picocolors48.default.yellow("\nNote: CI environment detected \u2014 telemetry stays off here regardless.")
     );
   }
 }
 async function runTelemetryStatus() {
   const state = readTelemetryState();
   const decision = resolveConsent({ state });
-  console.log(import_picocolors47.default.bold("Horus telemetry"));
+  console.log(import_picocolors48.default.bold("Horus telemetry"));
   console.log(
-    `  Usage metadata (Tier A): ${onOff(decision.tierA)}  ${import_picocolors47.default.dim(`[${decision.source}]`)}`
+    `  Usage metadata (Tier A): ${onOff(decision.tierA)}  ${import_picocolors48.default.dim(`[${decision.source}]`)}`
   );
   console.log(`  Content sharing (Tier B): ${onOff(decision.tierB)}`);
-  console.log(import_picocolors47.default.dim(`  Reason: ${decision.reason}`));
+  console.log(import_picocolors48.default.dim(`  Reason: ${decision.reason}`));
   if (state) {
-    console.log(import_picocolors47.default.dim(`  Install ID: ${state.installId}`));
+    console.log(import_picocolors48.default.dim(`  Install ID: ${state.installId}`));
     console.log(
-      import_picocolors47.default.dim(
+      import_picocolors48.default.dim(
         `  Saved: Tier A ${state.tierA.enabled ? "on" : "off"}, Tier B ${state.tierB.enabled ? "on" : "off"}`
       )
     );
   } else {
-    console.log(import_picocolors47.default.dim("  No saved preference yet (defaults apply)."));
+    console.log(import_picocolors48.default.dim("  No saved preference yet (defaults apply)."));
   }
-  console.log(import_picocolors47.default.dim(`  Config: ${telemetryPath()}`));
-  console.log(import_picocolors47.default.dim(`  Privacy: ${PRIVACY_URL}`));
+  console.log(import_picocolors48.default.dim(`  Config: ${telemetryPath()}`));
+  console.log(import_picocolors48.default.dim(`  Privacy: ${PRIVACY_URL}`));
   if (!state || decision.source === "env" || decision.source === "ci") {
     warnIfEnvOverrides();
   }
@@ -116333,7 +116745,7 @@ async function runTelemetryEnable() {
     s5.tierA.enabled = true;
     if (!s5.tierA.noticeShownAt) s5.tierA.noticeShownAt = (/* @__PURE__ */ new Date()).toISOString();
   });
-  console.log(import_picocolors47.default.green("Anonymous usage metadata (Tier A) is now ON. Thank you!"));
+  console.log(import_picocolors48.default.green("Anonymous usage metadata (Tier A) is now ON. Thank you!"));
   warnIfEnvOverrides();
   return 0;
 }
@@ -116343,7 +116755,7 @@ async function runTelemetryDisable() {
     s5.tierB.enabled = false;
     if (!s5.tierA.noticeShownAt) s5.tierA.noticeShownAt = (/* @__PURE__ */ new Date()).toISOString();
   });
-  console.log(import_picocolors47.default.yellow("All telemetry is now OFF (Tier A and Tier B)."));
+  console.log(import_picocolors48.default.yellow("All telemetry is now OFF (Tier A and Tier B)."));
   return 0;
 }
 async function runTelemetryEnableContent() {
@@ -116354,10 +116766,10 @@ async function runTelemetryEnableContent() {
     if (!s5.tierA.noticeShownAt) s5.tierA.noticeShownAt = (/* @__PURE__ */ new Date()).toISOString();
   });
   console.log(
-    import_picocolors47.default.green("Content sharing (Tier B) is now ON \u2014 redacted inputs/outputs help improve Horus.")
+    import_picocolors48.default.green("Content sharing (Tier B) is now ON \u2014 redacted inputs/outputs help improve Horus.")
   );
-  console.log(import_picocolors47.default.dim("Content is scrubbed of secrets/PII before it ever leaves your machine."));
-  console.log(import_picocolors47.default.dim(`What this means: ${PRIVACY_URL}`));
+  console.log(import_picocolors48.default.dim("Content is scrubbed of secrets/PII before it ever leaves your machine."));
+  console.log(import_picocolors48.default.dim(`What this means: ${PRIVACY_URL}`));
   warnIfEnvOverrides();
   return 0;
 }
@@ -116365,7 +116777,7 @@ async function runTelemetryDisableContent() {
   updateTelemetryState((s5) => {
     s5.tierB.enabled = false;
   });
-  console.log(import_picocolors47.default.yellow("Content sharing (Tier B) is now OFF. Usage metadata is unchanged."));
+  console.log(import_picocolors48.default.yellow("Content sharing (Tier B) is now OFF. Usage metadata is unchanged."));
   return 0;
 }
 async function runTelemetryResetId() {
@@ -116373,8 +116785,8 @@ async function runTelemetryResetId() {
   updateTelemetryState((s5) => {
     s5.installId = next;
   });
-  console.log(import_picocolors47.default.green("Install ID reset."));
-  console.log(import_picocolors47.default.dim(`  New install ID: ${next}`));
+  console.log(import_picocolors48.default.green("Install ID reset."));
+  console.log(import_picocolors48.default.dim(`  New install ID: ${next}`));
   return 0;
 }
 async function runTelemetryDelete() {
@@ -116382,9 +116794,9 @@ async function runTelemetryDelete() {
   if (installId) await deleteRemoteTelemetry(installId);
   deleteTelemetryState();
   clearSpool();
-  console.log(import_picocolors47.default.green("Telemetry deleted \u2014 local state cleared and a server purge requested."));
+  console.log(import_picocolors48.default.green("Telemetry deleted \u2014 local state cleared and a server purge requested."));
   console.log(
-    import_picocolors47.default.dim(
+    import_picocolors48.default.dim(
       "Next run will treat this as a fresh install and re-show the notice. If the purge could not reach the server (offline), re-run this command when back online."
     )
   );
@@ -116427,35 +116839,35 @@ function installCommandTelemetry(program2) {
 
 // ../../packages/cli/src/commands/feedback.ts
 init_cjs_shims();
-var import_picocolors48 = __toESM(require_picocolors(), 1);
+var import_picocolors49 = __toESM(require_picocolors(), 1);
 async function runFeedback(investigationId, opts = {}) {
   const id = investigationId?.trim();
   if (!id) {
-    console.error(import_picocolors48.default.red("Usage: horus feedback <investigationId> [--resolved yes|partly|no]"));
+    console.error(import_picocolors49.default.red("Usage: horus feedback <investigationId> [--resolved yes|partly|no]"));
     return 1;
   }
   if (opts.resolved !== void 0) {
     const resolved = parseResolved(opts.resolved);
     if (resolved === null) {
-      console.error(import_picocolors48.default.red(`Invalid --resolved "${opts.resolved}". Use: yes | partly | no.`));
+      console.error(import_picocolors49.default.red(`Invalid --resolved "${opts.resolved}". Use: yes | partly | no.`));
       return 1;
     }
     let manualEstimateMinutes = null;
     if (opts.manualEstimateMin !== void 0) {
       const n4 = Number.parseInt(opts.manualEstimateMin, 10);
       if (!Number.isFinite(n4) || n4 < 0) {
-        console.error(import_picocolors48.default.red(`Invalid --manual-estimate-min "${opts.manualEstimateMin}" (expect a non-negative integer).`));
+        console.error(import_picocolors49.default.red(`Invalid --manual-estimate-min "${opts.manualEstimateMin}" (expect a non-negative integer).`));
         return 1;
       }
       manualEstimateMinutes = n4;
     }
     submitFeedback({ investigationId: id, resolved, manualEstimateMinutes, horusSeconds: null, source: "flag" });
-    console.log(import_picocolors48.default.dim(`Feedback recorded (${resolved}) \u2014 thanks, this helps improve Horus.`));
+    console.log(import_picocolors49.default.dim(`Feedback recorded (${resolved}) \u2014 thanks, this helps improve Horus.`));
     return 0;
   }
   if (!process.stdin.isTTY) {
     console.error(
-      import_picocolors48.default.yellow(
+      import_picocolors49.default.yellow(
         "horus feedback needs an interactive terminal \u2014 or pass --resolved yes|partly|no for non-interactive (agent) use."
       )
     );
@@ -116548,8 +116960,8 @@ Examples:
   program2.command("stop").description("Stop the source-intelligence host for the current repo (or --all to stop every host)").option("--all", "stop all registered source-intelligence hosts").action(async (opts) => {
     process.exitCode = await runStop(opts);
   });
-  program2.command("hosts").description("List registered source-intelligence hosts and their live status (port, repo, running/stopped)").action(async () => {
-    process.exitCode = await runHosts();
+  program2.command("hosts").description("List registered source-intelligence hosts and their live status (port, repo, running/stopped)").option("--reap", "stop orphaned source hosts that no registered repo owns").action(async (opts) => {
+    process.exitCode = await runHosts({ reap: opts.reap });
   });
   program2.command("status").description("Show config, provider health, and project/environment matrix").option("-c, --config <path>", "path to horus.config.ts").option("--name <name>", "registered project name (resolves via the registry)").option("--project <name>", "project name (show only this project)").option("--env <name>", "environment name (e.g. production)").action(
     async (opts) => {