@merittdev/horus 0.8.4 → 0.8.6

package/dist/index.cjs

@@ -65880,7 +65880,7 @@ init_cjs_shims();
 
 // ../../packages/core/src/version.ts
 init_cjs_shims();
-var HORUS_VERSION = true ? "0.8.4" : "dev";
+var HORUS_VERSION = true ? "0.8.6" : "dev";
 var PINNED_SOURCE_VERSION = "1.5.0";
 
 // ../../packages/core/src/evidence.ts
@@ -92471,10 +92471,21 @@ function looksDiffable(since) {
 function looksExplanatory(hint) {
   const h3 = hint.trim();
   if (h3.length === 0) return false;
+  if (/^\s*(explain|describe|walk\s+me\s+through|tell\s+me\s+(?:about|how))\b/i.test(h3)) {
+    return true;
+  }
+  if (/\b(recently\s+changed|what\s+changed|changed\s+recently|regress|regression)\b/i.test(h3)) {
+    return false;
+  }
   if (/\b(how|what|why|when|where)\b.*\b(work|works|working|do|does|done|happen|happens|flow|flows|behave|called|invoked|triggered|used)\b/i.test(h3)) {
     return true;
   }
-  if (/^\s*(how|what|why|when|where|explain|describe|walk\s+me\s+through|tell\s+me\s+(?:about|how))\b/i.test(h3)) {
+  if (/\b(fail|fails|failed|failing|failure|break|breaks|breaking|broke|broken|crash|crashes|crashing|down|slow|stuck|hang|hangs|hung|timeout|timing\s*out|wrong|exception|error|errors|leak|leaking|stopped|throwing|throws|reject|rejected|denied|not\s+work|doesn'?t\s+work|isn'?t\s+work|can'?t|cannot|caus(?:e|es|ing)|misbehav)/i.test(
+    h3
+  )) {
+    return false;
+  }
+  if (/^\s*(how|what|why|when|where)\b/i.test(h3)) {
     return true;
   }
   return false;
@@ -92976,6 +92987,77 @@ async function investigate(input, deps) {
           } catch {
           }
         }
+        if (top !== void 0 && typeof deps.code?.searchSymbols === "function") {
+          const GAP_D_MAX_RESOLVE = 12;
+          const seedScope = /* @__PURE__ */ new Set([top.id, ...(ctx?.callees ?? []).map((c4) => c4.id)]);
+          const alreadyEmitted = new Set(seedEmittedJoins.map((j3) => j3.code));
+          const eligible = analysis.signatures.filter(
+            (s5) => s5.key !== "" && s5.key !== "(none)" && s5.count > 0 && !alreadyEmitted.has(s5.key)
+          );
+          const meaningful = meaningfulHintTokens.filter((t2) => t2.length >= 4);
+          const hintRelevant = (s5) => meaningful.some(
+            (t2) => s5.key.toLowerCase().includes(t2) || (s5.sampleMessage ?? "").toLowerCase().includes(t2)
+          );
+          const candidates = [
+            .../* @__PURE__ */ new Set([
+              ...[...eligible].sort((a2, b5) => b5.count - a2.count).slice(0, GAP_D_MAX_RESOLVE),
+              ...eligible.filter(hintRelevant).slice(0, GAP_D_MAX_RESOLVE)
+            ])
+          ].slice(0, GAP_D_MAX_RESOLVE * 2);
+          for (const sig of candidates) {
+            let raiser;
+            try {
+              raiser = (await deps.code.searchSymbols(sig.key, 1))[0];
+            } catch {
+              continue;
+            }
+            if (raiser === void 0 || !seedScope.has(raiser.id)) continue;
+            let evId = directEvIdByKey.get(sig.key);
+            if (evId === void 0) {
+              const where = raiser.id === top.id ? "the seed" : "a callee of the seed";
+              const links = raiser.startLine !== void 0 && raiser.startLine > 0 ? { symbolId: raiser.id, file: raiser.filePath, line: raiser.startLine } : { symbolId: raiser.id, file: raiser.filePath };
+              const ev = mkEv(
+                "log",
+                `event_code ${sig.key}: ${sig.count}x in Elasticsearch \u2014 raised by ${raiser.name} (${where})`.slice(
+                  0,
+                  220
+                ),
+                {
+                  signature: sig.key,
+                  count: sig.count,
+                  firstSeen: sig.firstSeen,
+                  lastSeen: sig.lastSeen,
+                  services: sig.services,
+                  isNew: sig.isNew ?? false,
+                  ratio: sig.ratio ?? null,
+                  sampleMessage: sig.sampleMessage ?? null,
+                  relevanceClass: "direct",
+                  relevanceReason: `event_code ${sig.key} is raised by ${raiser.name} (${where})`,
+                  crossSignalJoin: true,
+                  seedEmitted: true
+                },
+                links,
+                sig.lastSeen || void 0,
+                0.9
+              );
+              if (sig.isNew) ev.isNew = sig.isNew;
+              if (typeof sig.ratio === "number" && Number.isFinite(sig.ratio)) ev.ratio = sig.ratio;
+              logEvIds.push(ev.id);
+              directLogEvIds.push(ev.id);
+              directSignatures.push({ key: sig.key, count: sig.count, message: sig.sampleMessage ?? "" });
+              directEvIdByKey.set(sig.key, ev.id);
+              evId = ev.id;
+            }
+            seedEmittedJoins.push({
+              code: sig.key,
+              count: sig.count,
+              message: sig.sampleMessage ?? "",
+              evId,
+              isNew: sig.isNew ?? false,
+              level: sig.level ?? null
+            });
+          }
+        }
         if (typeof deps.logs.aggregateErrors === "function") {
           const sigForEntities = analysis.signatures.find(
             (s5) => detectEntityFields(s5.sampleContext).length > 0
@@ -93724,7 +93806,7 @@ async function investigate(input, deps) {
   const seedDisclaimer = seedIsLowConfidence && top ? `\u26A0 No symbol closely matched "${hint}" \u2014 "${top.name}" is a low-confidence closest match (semantic). Refine with an exact symbol or error code to target precisely. ` : "";
   let summary = headlineCause ? headlineLinked ? `${seedDisclaimer}${banner2}Investigation of "${hint}" ${scope}. Top suspected cause: ${headlineCause.title}.` : `${seedDisclaimer}${banner2}Investigation of "${hint}" ${scope}. No cause is structurally linked to the seed; the strongest co-occurring signal (a lead to verify, not a diagnosis) is: ${headlineCause.title}.` : `${seedDisclaimer}${banner2}Investigation of "${hint}" ${scope}. No dominant suspected cause emerged from the available ${degradedNoSource ? "runtime" : "structural"} evidence.`;
   const hasIncidentSignal = directLogEvIds.length > 0 || latencyMetricEvIds.length > 0 || queueMetricEvIds.length > 0 || dataAnomalyEvIds.length > 0 || queueFailureSignals.length > 0 || findings2.some((f5) => f5.kind === "anomaly") || headlineCause !== void 0;
-  const explanatoryHint = looksExplanatory(hint);
+  const explanatoryHint = looksExplanatory(hint) && input.since === void 0;
   let behavioral;
   if (explanatoryHint) {
     let flowPool = flows;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@merittdev/horus",
-  "version": "0.8.4",
+  "version": "0.8.6",
   "description": "Local-first, source-aware production-incident investigation engine",
   "type": "module",
   "bin": {