@neat.is/core 0.10.1-dev.20260927 → 0.10.1-dev.20260928

package/dist/cli.cjs

@@ -61,8 +61,8 @@ function mountBearerAuth(app, opts) {
   ]);
   const publicRead = opts.publicRead === true;
   app.addHook("preHandler", (req, reply, done) => {
-    const path98 = (req.url.split("?")[0] ?? "").replace(/\/+$/, "");
-    if (exactUnauthPaths.has(path98) || PROJECT_SCOPED_UNAUTH_PATTERN.test(path98)) {
+    const path99 = (req.url.split("?")[0] ?? "").replace(/\/+$/, "");
+    if (exactUnauthPaths.has(path99) || PROJECT_SCOPED_UNAUTH_PATTERN.test(path99)) {
       done();
       return;
     }
@@ -415,8 +415,8 @@ function websocketChannelPathOf(attrs) {
     const v = attrs[key];
     if (typeof v === "string" && v.length > 0) {
       const q = v.indexOf("?");
-      const path98 = q === -1 ? v : v.slice(0, q);
-      if (path98.length > 0) return path98;
+      const path99 = q === -1 ? v : v.slice(0, q);
+      if (path99.length > 0) return path99;
     }
   }
   return void 0;
@@ -805,9 +805,9 @@ __export(cli_exports, {
 });
 module.exports = __toCommonJS(cli_exports);
 init_cjs_shims();
-var import_node_path98 = __toESM(require("path"), 1);
+var import_node_path99 = __toESM(require("path"), 1);
 var import_node_os11 = __toESM(require("os"), 1);
-var import_node_fs59 = require("fs");
+var import_node_fs60 = require("fs");
 
 // src/banner.ts
 init_cjs_shims();
@@ -1490,19 +1490,19 @@ function confidenceFromMix(edges, now = Date.now()) {
 function longestIncomingWalk(graph, start, maxDepth) {
   let best = { path: [start], edges: [] };
   const visited = /* @__PURE__ */ new Set([start]);
-  function step(node, path98, edges) {
-    if (path98.length > best.path.length) {
-      best = { path: [...path98], edges: [...edges] };
+  function step(node, path99, edges) {
+    if (path99.length > best.path.length) {
+      best = { path: [...path99], edges: [...edges] };
     }
-    if (path98.length - 1 >= maxDepth) return;
+    if (path99.length - 1 >= maxDepth) return;
     const incoming = bestEdgeBySource(graph, graph.inboundEdges(node));
     for (const [srcId, edge] of incoming) {
       if (visited.has(srcId)) continue;
       visited.add(srcId);
-      path98.push(srcId);
+      path99.push(srcId);
       edges.push(edge);
-      step(srcId, path98, edges);
-      path98.pop();
+      step(srcId, path99, edges);
+      path99.pop();
       edges.pop();
       visited.delete(srcId);
     }
@@ -1717,20 +1717,20 @@ function dominantFailingCall(graph, serviceId17, visited) {
   return best;
 }
 function followFailingCallChain(graph, originServiceId, maxDepth) {
-  const path98 = [originServiceId];
+  const path99 = [originServiceId];
   const edges = [];
   const visited = /* @__PURE__ */ new Set([originServiceId]);
   let current = originServiceId;
   for (let depth = 0; depth < maxDepth; depth++) {
     const hop = dominantFailingCall(graph, current, visited);
     if (!hop) break;
-    path98.push(hop.nextService);
+    path99.push(hop.nextService);
     edges.push(hop.edge);
     visited.add(hop.nextService);
     current = hop.nextService;
   }
   if (edges.length === 0) return null;
-  return { path: path98, edges, culprit: current };
+  return { path: path99, edges, culprit: current };
 }
 function isStaleCallEdge(e) {
   return e.type === import_types2.EdgeType.CALLS && e.provenance === import_types2.Provenance.STALE;
@@ -1766,26 +1766,26 @@ function dominantStaleCall(graph, serviceId17, visited) {
   return best;
 }
 function followStaleCallChain(graph, originServiceId, maxDepth) {
-  const path98 = [originServiceId];
+  const path99 = [originServiceId];
   const edges = [];
   const visited = /* @__PURE__ */ new Set([originServiceId]);
   let current = originServiceId;
   for (let depth = 0; depth < maxDepth; depth++) {
     const hop = dominantStaleCall(graph, current, visited);
     if (!hop) break;
-    path98.push(hop.nextService);
+    path99.push(hop.nextService);
     edges.push(hop.edge);
     visited.add(hop.nextService);
     current = hop.nextService;
   }
   if (edges.length === 0) return null;
-  return { path: path98, edges, culprit: current };
+  return { path: path99, edges, culprit: current };
 }
 function crossServiceRootCause(graph, originId, incidents, errorEvent) {
   const chain = followFailingCallChain(graph, originId, ROOT_CAUSE_MAX_DEPTH);
   if (!chain) return null;
   const culprit = chain.culprit;
-  const path98 = [...chain.path];
+  const path99 = [...chain.path];
   const edgeProvenances = chain.edges.map((e) => e.provenance);
   const baseConfidence = confidenceFromMix(chain.edges);
   const confidence = Math.max(0, Math.min(1, baseConfidence * INCIDENT_ROOT_CAUSE_CONFIDENCE));
@@ -1793,14 +1793,14 @@ function crossServiceRootCause(graph, originId, incidents, errorEvent) {
   if (loc) {
     let rootCauseNode = culprit;
     if (loc.fileNode) {
-      path98.push(loc.fileNode);
+      path99.push(loc.fileNode);
       edgeProvenances.push(import_types2.Provenance.OBSERVED);
       rootCauseNode = loc.fileNode;
     }
     return import_types2.RootCauseResultSchema.parse({
       rootCauseNode,
       rootCauseReason: loc.rootCauseReason,
-      traversalPath: path98,
+      traversalPath: path99,
       edgeProvenances,
       confidence,
       ...loc.fixRecommendation ? { fixRecommendation: loc.fixRecommendation } : {}
@@ -1812,7 +1812,7 @@ function crossServiceRootCause(graph, originId, incidents, errorEvent) {
   return import_types2.RootCauseResultSchema.parse({
     rootCauseNode: culprit,
     rootCauseReason: `${culpritName} is failing downstream calls (${errs} observed error${errs === 1 ? "" : "s"})`,
-    traversalPath: path98,
+    traversalPath: path99,
     edgeProvenances,
     confidence,
     fixRecommendation: `Inspect ${culpritName}'s failing handler`
@@ -2465,10 +2465,10 @@ function enrichWithNavigation(graph, errorNodeId, tagged, incidents, now) {
     traversalPath = staleChain.path;
     edgeProvenances = staleChain.edges.map((e) => e.provenance);
   } else if (top.node !== seedNode) {
-    const path98 = findPath(graph, errorNodeId, top.node, "up", ROOT_CAUSE_MAX_DEPTH);
-    if (path98) {
-      traversalPath = path98.nodes;
-      edgeProvenances = path98.edges.map((e) => e.provenance);
+    const path99 = findPath(graph, errorNodeId, top.node, "up", ROOT_CAUSE_MAX_DEPTH);
+    if (path99) {
+      traversalPath = path99.nodes;
+      edgeProvenances = path99.edges.map((e) => e.provenance);
     } else {
       traversalPath = [errorNodeId, top.node];
       edgeProvenances = [top.provenance ?? import_types2.Provenance.OBSERVED];
@@ -3919,8 +3919,8 @@ function chiRoutesFromSource(source, parser) {
   chiWalk(tree.rootNode, "", out);
   return out;
 }
-function stripChiRegex(path98) {
-  return path98.replace(/\{([^{}:]+):[^{}]*\}/g, "{$1}");
+function stripChiRegex(path99) {
+  return path99.replace(/\{([^{}:]+):[^{}]*\}/g, "{$1}");
 }
 function chiWalk(node, prefix, out) {
   for (let i = 0; i < node.namedChildCount; i++) {
@@ -4592,9 +4592,9 @@ function rubyRocketRoute(args) {
     if (!pair || pair.type !== "pair") continue;
     const k = pair.childForFieldName("key");
     if (k?.type !== "string") continue;
-    const path98 = rubyLiteral(k);
-    if (path98 === null) continue;
-    return { path: path98, target: rubyLiteral(pair.childForFieldName("value")) };
+    const path99 = rubyLiteral(k);
+    if (path99 === null) continue;
+    return { path: path99, target: rubyLiteral(pair.childForFieldName("value")) };
   }
   return null;
 }
@@ -12002,13 +12002,16 @@ function objectKeys(obj) {
 var MODULAR_WRITES = /* @__PURE__ */ new Set(["addDoc", "setDoc", "updateDoc"]);
 var NAMESPACED_WRITES = /* @__PURE__ */ new Set(["add", "set", "update"]);
 var READ_CLAUSES = /* @__PURE__ */ new Set(["where", "orderBy"]);
-function firestoreEndpointsFromFile(file, serviceDir) {
+function firestoreEndpointsFromFile(file, serviceDir, imported) {
   const hasClient = FIRESTORE_CLIENT_IMPORT_RE.test(file.content);
   const hasAdmin = FIRESTORE_ADMIN_IMPORT_RE.test(file.content);
-  if (!hasClient && !hasAdmin) return [];
-  const fileSdk = hasClient && !hasAdmin ? "client" : hasAdmin && !hasClient ? "admin" : null;
+  const importedNames = imported?.names ?? /* @__PURE__ */ new Set();
+  if (!hasClient && !hasAdmin && importedNames.size === 0) return [];
+  const ownSdk = hasClient && !hasAdmin ? "client" : hasAdmin && !hasClient ? "admin" : null;
+  const fileSdk = !hasClient && !hasAdmin ? imported?.sdk ?? null : ownSdk;
   const tree = parseSource3(parserForExt2(import_node_path45.default.extname(file.path)), file.content);
   const clientVars = firestoreClientVars(tree.rootNode);
+  for (const n of importedNames) clientVars.add(n);
   const collLine = /* @__PURE__ */ new Map();
   const writes = /* @__PURE__ */ new Map();
   const reads = /* @__PURE__ */ new Map();
@@ -12119,6 +12122,99 @@ function firestoreEndpointsFromFile(file, serviceDir) {
   }
   return out;
 }
+function exportedFirestoreClients(root) {
+  const out = /* @__PURE__ */ new Set();
+  const collect = (node) => {
+    if (node.type === "variable_declarator") {
+      const name = node.childForFieldName("name");
+      let value = node.childForFieldName("value");
+      if (value?.type === "await_expression") value = namedChildren(value)[0] ?? null;
+      if (name?.type === "identifier" && isFirestoreClientFactory(value)) out.add(name.text);
+    }
+    for (const c of namedChildren(node)) collect(c);
+  };
+  const walk11 = (node) => {
+    if (node.type === "export_statement") collect(node);
+    else for (const c of namedChildren(node)) walk11(c);
+  };
+  walk11(root);
+  return out;
+}
+function namedImportBindings(root) {
+  const out = [];
+  const walk11 = (node) => {
+    if (node.type === "import_statement") {
+      const src = node.childForFieldName("source");
+      const specifier = src ? src.text.slice(1, -1) : "";
+      if (specifier.length > 0) {
+        const stack = [node];
+        while (stack.length > 0) {
+          const n = stack.pop();
+          if (n.type === "import_specifier") {
+            const nameNode = n.childForFieldName("name");
+            const aliasNode = n.childForFieldName("alias");
+            const importedName = nameNode?.text;
+            if (importedName) {
+              out.push({ local: aliasNode?.text ?? importedName, imported: importedName, specifier });
+            }
+            continue;
+          }
+          for (const c of namedChildren(n)) stack.push(c);
+        }
+      }
+    }
+    for (const c of namedChildren(node)) walk11(c);
+  };
+  walk11(root);
+  return out;
+}
+function sdkOf(content) {
+  const hasClient = FIRESTORE_CLIENT_IMPORT_RE.test(content);
+  const hasAdmin = FIRESTORE_ADMIN_IMPORT_RE.test(content);
+  return hasClient && !hasAdmin ? "client" : hasAdmin && !hasClient ? "admin" : null;
+}
+function parseOrNull(file) {
+  const ext = import_node_path45.default.extname(file.path);
+  if (!(ext in GRAMMAR_BY_EXT)) return null;
+  try {
+    return parseSource3(parserForExt2(ext), file.content).rootNode;
+  } catch {
+    return null;
+  }
+}
+async function firestoreCrossFileEndpoints(files, serviceDir) {
+  const registry = /* @__PURE__ */ new Map();
+  for (const f of files) {
+    if (sdkOf(f.content) === null && !FIRESTORE_CLIENT_IMPORT_RE.test(f.content)) continue;
+    const root = parseOrNull(f);
+    if (!root) continue;
+    const names = exportedFirestoreClients(root);
+    if (names.size === 0) continue;
+    registry.set(toPosix(import_node_path45.default.relative(serviceDir, f.path)), { names, sdk: sdkOf(f.content) });
+  }
+  if (registry.size === 0) return [];
+  const out = [];
+  for (const f of files) {
+    const root = parseOrNull(f);
+    if (!root) continue;
+    if (firestoreClientVars(root).size > 0) continue;
+    const bindings = namedImportBindings(root);
+    if (bindings.length === 0) continue;
+    const names = /* @__PURE__ */ new Set();
+    let sdk = null;
+    for (const b of bindings) {
+      const rel = await resolveJsImport(b.specifier, import_node_path45.default.dirname(f.path), serviceDir, null);
+      if (!rel) continue;
+      const entry2 = registry.get(rel);
+      if (!entry2 || !entry2.names.has(b.imported)) continue;
+      names.add(b.local);
+      sdk ??= entry2.sdk;
+    }
+    if (names.size === 0) continue;
+    out.push(...firestoreEndpointsFromFile(f, serviceDir, { names, sdk }));
+  }
+  return out;
+}
 
 // src/extract/calls/mongoose.ts
 init_cjs_shims();
@@ -14928,6 +15024,7 @@ async function addExternalEndpointEdges(graph, services) {
         recordExtractionError("python socket call extraction", file.path, err);
       }
     }
+    endpoints.push(...await firestoreCrossFileEndpoints(maskedFiles, service.dir));
     endpoints.push(...await mongooseCrossFileEndpoints(maskedFiles, service.dir));
     endpoints.push(...pythonOrmCrossFileEndpoints(maskedFiles, service.dir));
     endpoints.push(...await prismaColumnEndpoints(service.dir));
@@ -16223,6 +16320,9 @@ function stripComments(src) {
 function segmentsFromMatchPath(pathToken) {
   return pathToken.split("/").filter((s) => s.length > 0);
 }
+function isRecursiveWildcard(seg) {
+  return /^\{[^}]*=\s*\*\*\}$/.test(seg);
+}
 function collectionKeyFromSegments(segments) {
   let segs = segments;
   if (segs.length >= 3 && segs[0] === "databases" && /^\{.*\}$/.test(segs[1]) && segs[2] === "documents") {
@@ -16235,10 +16335,11 @@ function collectionKeyFromName(name) {
 }
 function fieldsFromCondition(cond) {
   const out = [];
-  const callRe = /\b(?:hasAll|hasOnly|hasAny)\s*\(\s*\[([^\]]*)\]\s*\)/g;
+  const callRe = /(!\s*)?\b(?:hasAll|hasOnly|hasAny)\s*\(\s*\[([^\]]*)\]\s*\)/g;
   let m;
   while ((m = callRe.exec(cond)) !== null) {
-    const inner = m[1];
+    if (m[1] !== void 0 || isNegatedAt(cond, m.index)) continue;
+    const inner = m[2];
     const litRe = /'([^']*)'|"([^"]*)"/g;
     let lm;
     while ((lm = litRe.exec(inner)) !== null) {
@@ -16248,6 +16349,28 @@ function fieldsFromCondition(cond) {
   }
   return out;
 }
+function isNegatedAt(cond, idx) {
+  let i = idx - 1;
+  while (i >= 0) {
+    const ch = cond[i];
+    if (ch === ")") {
+      let depth = 1;
+      i--;
+      while (i >= 0 && depth > 0) {
+        if (cond[i] === ")") depth++;
+        else if (cond[i] === "(") depth--;
+        i--;
+      }
+      continue;
+    }
+    if (/[A-Za-z0-9_$.\]['"]/.test(ch) || ch === " ") {
+      i--;
+      continue;
+    }
+    return ch === "!";
+  }
+  return false;
+}
 function parseFirestoreRules(content) {
   const src = stripComments(content);
   const tokenRe = /match\s+((?:\/(?:\{[^}]*\}|[^\s/{}]+))+)\s*\{|allow\b([^;{}]*);|(\{)|(\})/g;
@@ -16260,7 +16383,8 @@ function parseFirestoreRules(content) {
   while ((m = tokenRe.exec(src)) !== null) {
     if (m[1] !== void 0) {
       depth++;
-      matchStack.push({ depth, segs: segmentsFromMatchPath(m[1]) });
+      const segs = segmentsFromMatchPath(m[1]);
+      matchStack.push({ depth, segs, recursive: segs.some(isRecursiveWildcard) });
       continue;
     }
     if (m[2] !== void 0) {
@@ -16271,6 +16395,10 @@ function parseFirestoreRules(content) {
       if (!methods.some((mm) => WRITE_METHODS.has(mm))) continue;
       const key = currentKey();
       if (key.length === 0) continue;
+      if (matchStack.some((f) => f.recursive)) {
+        indeterminate.add(key);
+        continue;
+      }
       const cond = colon === -1 ? "" : body.slice(colon + 1);
       const fields = fieldsFromCondition(cond);
       if (fields.length > 0) {
@@ -20325,10 +20453,10 @@ var SUPABASE_RPC_TARGET_KIND = "supabase-rpc";
 // src/connectors/supabase/map.ts
 var REST_RPC_PATH_RE = /^\/rest\/v1\/rpc\/([^/?]+)/;
 var REST_TABLE_PATH_RE = /^\/rest\/v1\/([^/?]+)/;
-function targetFromRestPath(path98) {
-  const rpcMatch = REST_RPC_PATH_RE.exec(path98);
+function targetFromRestPath(path99) {
+  const rpcMatch = REST_RPC_PATH_RE.exec(path99);
   if (rpcMatch) return { targetKind: SUPABASE_RPC_TARGET_KIND, name: rpcMatch[1] };
-  const tableMatch = REST_TABLE_PATH_RE.exec(path98);
+  const tableMatch = REST_TABLE_PATH_RE.exec(path99);
   if (tableMatch) return { targetKind: SUPABASE_TABLE_TARGET_KIND, name: tableMatch[1] };
   return null;
 }
@@ -20932,9 +21060,9 @@ function parseFirebaseTargetName(targetName) {
   const secondSep = rest.indexOf(FIELD_SEP);
   if (secondSep === -1) return null;
   const method = rest.slice(0, secondSep);
-  const path98 = rest.slice(secondSep + 1);
-  if (!resourceName || !method || !path98) return null;
-  return { resourceName, method, path: path98 };
+  const path99 = rest.slice(secondSep + 1);
+  if (!resourceName || !method || !path99) return null;
+  return { resourceName, method, path: path99 };
 }
 function resourceNameFor(type, labels) {
   if (!labels) return null;
@@ -20972,14 +21100,14 @@ function mapLogEntryToSignal(entry2) {
   if (!req) return null;
   if (typeof req.requestMethod !== "string" || req.requestMethod.length === 0) return null;
   const method = req.requestMethod.toUpperCase();
-  const path98 = pathFromRequestUrl(req.requestUrl);
-  if (path98 === null) return null;
+  const path99 = pathFromRequestUrl(req.requestUrl);
+  if (path99 === null) return null;
   const timestamp = entry2.timestamp;
   if (typeof timestamp !== "string" || timestamp.length === 0) return null;
   const isError = typeof req.status === "number" && req.status >= ERROR_STATUS_THRESHOLD2;
   return {
     targetKind: resourceType,
-    targetName: packFirebaseTargetName({ resourceName, method, path: path98 }),
+    targetName: packFirebaseTargetName({ resourceName, method, path: path99 }),
     callCount: 1,
     errorCount: isError ? 1 : 0,
     lastObservedIso: timestamp
@@ -21004,9 +21132,9 @@ var import_types73 = require("@neat.is/types");
 function normalizeName(name) {
   return name.toLowerCase().replace(/[^a-z0-9]/g, "");
 }
-function inferServiceName(graph, resourceName, method, path98) {
+function inferServiceName(graph, resourceName, method, path99) {
   const wantedMethod = method.toUpperCase();
-  const wantedPath = normalizePathTemplate(path98);
+  const wantedPath = normalizePathTemplate(path99);
   const services = [];
   const owners = /* @__PURE__ */ new Set();
   graph.forEachNode((_id, attrs) => {
@@ -21223,7 +21351,7 @@ function mapEventToSignal(event) {
   if (Number.isNaN(observedAt.getTime())) return null;
   const statusCode = metadata?.statusCode;
   const isError = typeof statusCode === "number" && statusCode >= ERROR_STATUS_THRESHOLD3;
-  const path98 = metadata?.trigger ? parsePathFromTrigger(metadata.trigger) : void 0;
+  const path99 = metadata?.trigger ? parsePathFromTrigger(metadata.trigger) : void 0;
   return {
     targetKind: CLOUDFLARE_TARGET_KIND,
     targetName: scriptName,
@@ -21231,7 +21359,7 @@ function mapEventToSignal(event) {
     errorCount: isError ? 1 : 0,
     lastObservedIso: observedAt.toISOString(),
     method,
-    ...path98 ? { path: path98 } : {},
+    ...path99 ? { path: path99 } : {},
     ...typeof statusCode === "number" ? { statusCode } : {},
     ...typeof metadata?.duration === "number" ? { duration: metadata.duration } : {}
   };
@@ -21277,8 +21405,8 @@ function findTaggedWorkerFileNode(graph, workerName) {
   });
   return found;
 }
-function findMatchingRouteNode(graph, serviceName, method, path98) {
-  const normalizedPath = normalizePathTemplate(path98);
+function findMatchingRouteNode(graph, serviceName, method, path99) {
+  const normalizedPath = normalizePathTemplate(path99);
   let found = null;
   graph.forEachNode((id, attrs) => {
     if (found) return;
@@ -21295,10 +21423,10 @@ function createCloudflareResolveTarget(config, graph) {
   return (signal) => {
     if (signal.targetKind !== CLOUDFLARE_TARGET_KIND) return null;
     const scriptName = signal.targetName;
-    const { method, path: path98 } = signal;
+    const { method, path: path99 } = signal;
     const resolveRouteGrain = (serviceName, wholeFileId) => {
-      if (!method || !path98) return wholeFileId;
-      return findMatchingRouteNode(graph, serviceName, method, path98) ?? wholeFileId;
+      if (!method || !path99) return wholeFileId;
+      return findMatchingRouteNode(graph, serviceName, method, path99) ?? wholeFileId;
     };
     const mapping = config.workers?.[scriptName];
     if (mapping) {
@@ -21650,9 +21778,9 @@ function parseCloudRunTargetName(targetName) {
   const secondSep = rest.indexOf(FIELD_SEP2);
   if (secondSep === -1) return null;
   const method = rest.slice(0, secondSep);
-  const path98 = rest.slice(secondSep + 1);
-  if (!serviceName || !method || !path98) return null;
-  return { serviceName, method, path: path98 };
+  const path99 = rest.slice(secondSep + 1);
+  if (!serviceName || !method || !path99) return null;
+  return { serviceName, method, path: path99 };
 }
 
 // src/connectors/cloud-run/map.ts
@@ -21681,14 +21809,14 @@ function mapLogEntryToSignal2(entry2) {
   if (!req) return null;
   if (typeof req.requestMethod !== "string" || req.requestMethod.length === 0) return null;
   const method = req.requestMethod.toUpperCase();
-  const path98 = pathFromRequestUrl2(req.requestUrl);
-  if (path98 === null) return null;
+  const path99 = pathFromRequestUrl2(req.requestUrl);
+  if (path99 === null) return null;
   const timestamp = entry2.timestamp;
   if (typeof timestamp !== "string" || timestamp.length === 0) return null;
   const isError = typeof req.status === "number" && req.status >= ERROR_STATUS_THRESHOLD4;
   return {
     targetKind: CLOUD_RUN_TARGET_KIND,
-    targetName: packCloudRunTargetName({ serviceName, method, path: path98 }),
+    targetName: packCloudRunTargetName({ serviceName, method, path: path99 }),
     callCount: 1,
     errorCount: isError ? 1 : 0,
     lastObservedIso: timestamp
@@ -21727,14 +21855,14 @@ function createCloudRunResolveTarget(graph, config) {
     if (signal.targetKind !== CLOUD_RUN_TARGET_KIND) return null;
     const identity = parseCloudRunTargetName(signal.targetName);
     if (!identity) return null;
-    const { serviceName: gcpServiceName, method, path: path98 } = identity;
-    const mappedService = config.serviceMap?.[gcpServiceName] ?? (config.inferServices ? inferServiceName(graph, gcpServiceName, method, path98) ?? void 0 : void 0);
+    const { serviceName: gcpServiceName, method, path: path99 } = identity;
+    const mappedService = config.serviceMap?.[gcpServiceName] ?? (config.inferServices ? inferServiceName(graph, gcpServiceName, method, path99) ?? void 0 : void 0);
     if (mappedService) {
       const routeNodeId = findMatchingRouteNode2(
         graph,
         mappedService,
         method,
-        normalizePathTemplate(path98)
+        normalizePathTemplate(path99)
       );
       if (routeNodeId) {
         return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types84.EdgeType.CALLS };
@@ -21870,9 +21998,9 @@ function parseGcpLbTargetName(targetName) {
   const secondSep = rest.indexOf(FIELD_SEP3);
   if (secondSep === -1) return null;
   const method = rest.slice(0, secondSep);
-  const path98 = rest.slice(secondSep + 1);
-  if (!backendServiceName || !method || !path98) return null;
-  return { backendServiceName, method, path: path98 };
+  const path99 = rest.slice(secondSep + 1);
+  if (!backendServiceName || !method || !path99) return null;
+  return { backendServiceName, method, path: path99 };
 }
 
 // src/connectors/gcp-lb/map.ts
@@ -21901,14 +22029,14 @@ function mapLogEntryToSignal3(entry2) {
   if (!req) return null;
   if (typeof req.requestMethod !== "string" || req.requestMethod.length === 0) return null;
   const method = req.requestMethod.toUpperCase();
-  const path98 = pathFromRequestUrl3(req.requestUrl);
-  if (path98 === null) return null;
+  const path99 = pathFromRequestUrl3(req.requestUrl);
+  if (path99 === null) return null;
   const timestamp = entry2.timestamp;
   if (typeof timestamp !== "string" || timestamp.length === 0) return null;
   const isError = typeof req.status === "number" && req.status >= ERROR_STATUS_THRESHOLD5;
   return {
     targetKind: GCP_LB_TARGET_KIND,
-    targetName: packGcpLbTargetName({ backendServiceName, method, path: path98 }),
+    targetName: packGcpLbTargetName({ backendServiceName, method, path: path99 }),
     callCount: 1,
     errorCount: isError ? 1 : 0,
     lastObservedIso: timestamp
@@ -21947,14 +22075,14 @@ function createGcpLbResolveTarget(graph, config) {
     if (signal.targetKind !== GCP_LB_TARGET_KIND) return null;
     const identity = parseGcpLbTargetName(signal.targetName);
     if (!identity) return null;
-    const { backendServiceName, method, path: path98 } = identity;
-    const mappedService = config.backendServiceMap?.[backendServiceName] ?? (config.inferServices ? inferServiceName(graph, backendServiceName, method, path98) ?? void 0 : void 0);
+    const { backendServiceName, method, path: path99 } = identity;
+    const mappedService = config.backendServiceMap?.[backendServiceName] ?? (config.inferServices ? inferServiceName(graph, backendServiceName, method, path99) ?? void 0 : void 0);
     if (mappedService) {
       const routeNodeId = findMatchingRouteNode3(
         graph,
         mappedService,
         method,
-        normalizePathTemplate(path98)
+        normalizePathTemplate(path99)
       );
       if (routeNodeId) {
         return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types88.EdgeType.CALLS };
@@ -24346,9 +24474,9 @@ function makeK8sFetchImpl(transport) {
     req.end();
   }));
 }
-async function listResource(transport, namespace, path98, opts = {}) {
+async function listResource(transport, namespace, path99, opts = {}) {
   const base = opts.apiUrl ?? transport.server;
-  const url = `${base.replace(/\/$/, "")}${path98}`;
+  const url = `${base.replace(/\/$/, "")}${path99}`;
   const fetchImpl = opts.fetchImpl ?? makeK8sFetchImpl(transport);
   const res = await junctionFetch(
     url,
@@ -24358,7 +24486,7 @@ async function listResource(transport, namespace, path98, opts = {}) {
     { provider: "kubernetes", accountKey: `${safeHost(transport.server)}/${namespace}`, fetchImpl }
   );
   if (!res.ok) {
-    throw new Error(`kubernetes ${path98} failed: ${res.status} ${res.statusText}`);
+    throw new Error(`kubernetes ${path99} failed: ${res.status} ${res.statusText}`);
   }
   const json = await res.json();
   return Array.isArray(json.items) ? json.items : [];
@@ -30047,7 +30175,7 @@ async function clearActiveProfile(home = neatHome3()) {
 }
 
 // src/login-sso.ts
-var DEFAULT_CP_URL = "https://neat-control-plane-bg5yqctn2q-nw.a.run.app";
+var DEFAULT_CP_URL = "https://api.neat.is";
 var DEFAULT_WEB_URL = "https://app.neat.is";
 var CALLBACK_TIMEOUT_MS = 5 * 6e4;
 function resolveCpUrl(env = process.env, override) {
@@ -30236,6 +30364,11 @@ async function runSsoLogin(opts, deps) {
       out(`  OTEL_EXPORTER_OTLP_ENDPOINT=${cred.ingestEndpoint}`);
       out(`  OTEL_EXPORTER_OTLP_HEADERS=Authorization=Bearer ${cred.otelToken}`);
     }
+    out("");
+    out("This directory isn't part of that graph yet \u2014 logging in connected your account,");
+    out("not this repo, and nothing here has been uploaded.");
+    out(`  Manage projects and repos:  ${opts.webUrl}`);
+    out("");
     out("Run `neat logout` to switch back to your local daemon.");
   }
   return 0;
@@ -30372,10 +30505,10 @@ function createHttpClient(baseUrl, bearerToken, fetchImpl = fetch) {
   const root = baseUrl.replace(/\/$/, "");
   const authHeader = bearerToken && bearerToken.length > 0 ? { authorization: `Bearer ${bearerToken}` } : {};
   return {
-    async get(path98) {
+    async get(path99) {
       let res;
       try {
-        res = await fetchImpl(`${root}${path98}`, {
+        res = await fetchImpl(`${root}${path99}`, {
           headers: { ...authHeader }
         });
       } catch (err) {
@@ -30387,16 +30520,16 @@ function createHttpClient(baseUrl, bearerToken, fetchImpl = fetch) {
         const body = await res.text().catch(() => "");
         throw new HttpError(
           res.status,
-          `${res.status} ${res.statusText} on GET ${path98}: ${body}`,
+          `${res.status} ${res.statusText} on GET ${path99}: ${body}`,
           body
         );
       }
       return await res.json();
     },
-    async post(path98, body) {
+    async post(path99, body) {
       let res;
       try {
-        res = await fetchImpl(`${root}${path98}`, {
+        res = await fetchImpl(`${root}${path99}`, {
           method: "POST",
           headers: { "content-type": "application/json", ...authHeader },
           body: JSON.stringify(body)
@@ -30410,7 +30543,7 @@ function createHttpClient(baseUrl, bearerToken, fetchImpl = fetch) {
         const text = await res.text().catch(() => "");
         throw new HttpError(
           res.status,
-          `${res.status} ${res.statusText} on POST ${path98}: ${text}`,
+          `${res.status} ${res.statusText} on POST ${path99}: ${text}`,
           text
         );
       }
@@ -30424,12 +30557,12 @@ function projectPath(project, suffix) {
 }
 async function runRootCause(client, input) {
   const qs = input.errorId ? `?errorId=${encodeURIComponent(input.errorId)}` : "";
-  const path98 = projectPath(
+  const path99 = projectPath(
     input.project,
     `/graph/root-cause/${encodeURIComponent(input.errorNode)}${qs}`
   );
   try {
-    const result = await client.get(path98);
+    const result = await client.get(path99);
     const arrowPath = result.traversalPath.join(" \u2190 ");
     const provenances = result.edgeProvenances.length ? result.edgeProvenances.join(", ") : "(direct, no edges traversed)";
     const summary = `Root cause for ${input.errorNode} is ${result.rootCauseNode}. ` + result.rootCauseReason + (result.fixRecommendation ? ` Recommended fix: ${result.fixRecommendation}.` : "");
@@ -30455,12 +30588,12 @@ async function runRootCause(client, input) {
 }
 async function runBlastRadius(client, input) {
   const qs = input.depth !== void 0 ? `?depth=${input.depth}` : "";
-  const path98 = projectPath(
+  const path99 = projectPath(
     input.project,
     `/graph/blast-radius/${encodeURIComponent(input.nodeId)}${qs}`
   );
   try {
-    const result = await client.get(path98);
+    const result = await client.get(path99);
     if (result.totalAffected === 0) {
       return {
         summary: `${result.origin} has no dependents. Nothing else would break if it failed.`
@@ -30494,12 +30627,12 @@ function formatBlastEntry(n) {
 }
 async function runDependencies(client, input) {
   const depth = input.depth ?? 3;
-  const path98 = projectPath(
+  const path99 = projectPath(
     input.project,
     `/graph/dependencies/${encodeURIComponent(input.nodeId)}?depth=${depth}`
   );
   try {
-    const result = await client.get(path98);
+    const result = await client.get(path99);
     if (result.total === 0) {
       return {
         summary: depth === 1 ? `${input.nodeId} has no direct dependencies in the graph.` : `${input.nodeId} has no dependencies (BFS to depth ${depth}).`
@@ -30591,9 +30724,9 @@ function formatDuration(ms) {
   return `${Math.round(h / 24)}d`;
 }
 async function runIncidents(client, input) {
-  const path98 = input.nodeId ? projectPath(input.project, `/incidents/${encodeURIComponent(input.nodeId)}`) : projectPath(input.project, "/incidents");
+  const path99 = input.nodeId ? projectPath(input.project, `/incidents/${encodeURIComponent(input.nodeId)}`) : projectPath(input.project, "/incidents");
   try {
-    const body = await client.get(path98);
+    const body = await client.get(path99);
     const events = body.events;
     if (events.length === 0) {
       return {
@@ -31372,6 +31505,8 @@ async function defaultReadSecret(prompt) {
 
 // src/welcome.ts
 init_cjs_shims();
+var import_node_fs55 = require("fs");
+var import_node_path93 = __toESM(require("path"), 1);
 var import_promises5 = __toESM(require("readline/promises"), 1);
 var WORDMARK = [
   "\u2588\u2588\u2588\u2557   \u2588\u2588\u2557\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2557 \u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2588\u2557",
@@ -31404,6 +31539,28 @@ function printHeader(out) {
 }
 async function runWelcome(deps = {}) {
   const out = deps.out ?? ((line) => console.log(line));
+  try {
+    return await runFrontDoor(deps, out);
+  } catch (err) {
+    if (isPromptCancelled(err)) {
+      out("");
+      return 130;
+    }
+    throw err;
+  }
+}
+var PromptCancelled = class extends Error {
+  constructor() {
+    super("prompt cancelled");
+    this.name = "PromptCancelled";
+  }
+};
+function isPromptCancelled(err) {
+  if (err instanceof PromptCancelled) return true;
+  const e = err;
+  return e?.code === "ABORT_ERR" || e?.name === "AbortError";
+}
+async function runFrontDoor(deps, out) {
   const readLine = deps.readLine ?? defaultReadLine2;
   const login = deps.login ?? (() => Promise.resolve(0));
   const orchestrator = deps.orchestrator ?? (() => Promise.resolve(0));
@@ -31411,21 +31568,114 @@ async function runWelcome(deps = {}) {
   printHeader(out);
   out("Welcome to NEAT. Let's get you a graph of this system.");
   out("");
-  out("  1) I have a NEAT account \u2014 log in");
-  out("  2) Self-hosted \u2014 set up NEAT on this machine");
+  const keyReader = deps.readKey !== void 0 ? { read: deps.readKey, done: () => {
+  } } : createKeyReader();
+  const picked = keyReader !== null ? await selectOption(out, keyReader, deps.moveCursorUp ?? defaultMoveCursorUp) : await selectByNumber(out, readLine);
+  if (picked === void 0) return runSelfHosted(out, readLine, orchestrator, cwd);
+  if (picked === 0) return login(["--browser"]);
+  return runSelfHosted(out, readLine, orchestrator, cwd);
+}
+var MENU_OPTIONS = [
+  "Log me into Hosted Neat",
+  "I'd like to self-host or use it locally (copy a prompt)"
+];
+async function selectOption(out, reader, moveCursorUp) {
+  let cursor = 0;
+  const render = () => {
+    for (const [i, label] of MENU_OPTIONS.entries()) {
+      out(i === cursor ? `  \u276F ${i + 1}) ${label}` : `    ${i + 1}) ${label}`);
+    }
+  };
+  try {
+    render();
+    out("");
+    out("  \u2191/\u2193 to move \xB7 Enter to choose \xB7 1 or 2 to jump");
+    for (; ; ) {
+      const key = await reader.read();
+      if (key === void 0) return void 0;
+      if (key === "cancel") throw new PromptCancelled();
+      if (key === "enter") return cursor;
+      if (key === "select-1") return 0;
+      if (key === "select-2") return 1;
+      if (key === "up") cursor = (cursor + MENU_OPTIONS.length - 1) % MENU_OPTIONS.length;
+      else if (key === "down") cursor = (cursor + 1) % MENU_OPTIONS.length;
+      else continue;
+      moveCursorUp(MENU_OPTIONS.length + 2);
+      render();
+      out("");
+      out("  \u2191/\u2193 to move \xB7 Enter to choose \xB7 1 or 2 to jump");
+    }
+  } finally {
+    reader.done();
+  }
+}
+async function selectByNumber(out, readLine) {
+  for (const [i, label] of MENU_OPTIONS.entries()) out(`  ${i + 1}) ${label}`);
   out("");
   for (; ; ) {
     const choice = (await readLine("Choose 1 or 2 (default 2): "))?.trim();
-    if (choice === void 0) return runSelfHosted(out, readLine, orchestrator, cwd);
-    if (choice === "1") {
-      return login(["--browser"]);
-    }
-    if (choice === "2" || choice === "") {
-      return runSelfHosted(out, readLine, orchestrator, cwd);
-    }
-    out(`"${choice}" isn't 1 or 2 \u2014 try again, or press Enter for self-hosted.`);
+    if (choice === void 0) return void 0;
+    if (choice === "1") return 0;
+    if (choice === "2" || choice === "") return 1;
+    out(`"${choice}" isn't 1 or 2 \u2014 try again, or press Enter for the local path.`);
   }
 }
+function createKeyReader() {
+  const stdin = process.stdin;
+  if (!stdin.isTTY || typeof stdin.setRawMode !== "function") return null;
+  stdin.setRawMode(true);
+  stdin.resume();
+  let closed = false;
+  let ended = false;
+  const markEnded = () => {
+    ended = true;
+  };
+  stdin.once("end", markEnded);
+  stdin.once("close", markEnded);
+  return {
+    read: () => new Promise((resolve) => {
+      if (ended) {
+        resolve(void 0);
+        return;
+      }
+      const finish = (value) => {
+        stdin.removeListener("data", onData);
+        stdin.removeListener("end", onClosed);
+        stdin.removeListener("close", onClosed);
+        resolve(value);
+      };
+      const onData = (buf) => finish(decodeKey(buf));
+      const onClosed = () => {
+        ended = true;
+        finish(void 0);
+      };
+      stdin.on("data", onData);
+      stdin.once("end", onClosed);
+      stdin.once("close", onClosed);
+    }),
+    done: () => {
+      if (closed) return;
+      closed = true;
+      stdin.removeListener("end", markEnded);
+      stdin.removeListener("close", markEnded);
+      stdin.setRawMode(false);
+      stdin.pause();
+    }
+  };
+}
+function decodeKey(buf) {
+  const s = buf.toString("utf8");
+  if (s === "\x1B[A" || s === "k") return "up";
+  if (s === "\x1B[B" || s === "j") return "down";
+  if (s === "\r" || s === "\n") return "enter";
+  if (s === "1") return "select-1";
+  if (s === "2") return "select-2";
+  if (s === "" || s === "\x1B") return "cancel";
+  return "ignore";
+}
+function defaultMoveCursorUp(rows) {
+  if (rows > 0) process.stdout.write(`\x1B[${rows}A`);
+}
 async function runSelfHosted(out, readLine, orchestrator, cwd) {
   const wantsPrompt = (await readLine("Print a copy-paste setup prompt for your coding agent? [Y/n]: "))?.trim().toLowerCase();
   if (wantsPrompt !== "n" && wantsPrompt !== "no") {
@@ -31445,10 +31695,23 @@ async function shouldShowWelcome(deps = {}) {
   const stdinTTY = deps.stdinIsTTY ?? Boolean(process.stdin.isTTY);
   const stdoutTTY = deps.stdoutIsTTY ?? Boolean(process.stdout.isTTY);
   if (!stdinTTY || !stdoutTTY) return false;
-  const readProfiles = deps.readProfiles ?? (() => readProfilesConfig());
+  const cwd = deps.cwd ?? process.cwd();
+  const readRegistry2 = deps.readRegistry ?? (() => readRegistry());
+  const hasSnapshot = deps.hasSnapshot ?? defaultHasSnapshot;
+  try {
+    const here = import_node_path93.default.resolve(cwd);
+    const { projects } = await readRegistry2();
+    if (projects.some((p) => import_node_path93.default.resolve(p.path) === here)) return false;
+    if (await hasSnapshot(here)) return false;
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function defaultHasSnapshot(cwd) {
   try {
-    const { profiles } = await readProfiles();
-    return profiles.length === 0;
+    const entries = await import_node_fs55.promises.readdir(import_node_path93.default.join(cwd, "neat-out"));
+    return entries.some((e) => e.endsWith(".json"));
   } catch {
     return false;
   }
@@ -31465,27 +31728,27 @@ async function defaultReadLine2(prompt) {
 
 // src/hooks-cli.ts
 init_cjs_shims();
-var import_node_path93 = __toESM(require("path"), 1);
+var import_node_path94 = __toESM(require("path"), 1);
 var import_node_os8 = __toESM(require("os"), 1);
-var import_node_fs55 = require("fs");
+var import_node_fs56 = require("fs");
 var import_node_url5 = require("url");
 var HOOK_FILENAME = "neat-search-nudge.mjs";
 var GUIDE_FILENAME = "GRAPH_FIRST.md";
 var GUIDE_INSTALL_NAME = "neat-graph-first.md";
 var HOOK_MATCHER = "Grep|Glob|Bash";
 function moduleDir() {
-  return typeof __dirname !== "undefined" ? __dirname : import_node_path93.default.dirname((0, import_node_url5.fileURLToPath)(importMetaUrl));
+  return typeof __dirname !== "undefined" ? __dirname : import_node_path94.default.dirname((0, import_node_url5.fileURLToPath)(importMetaUrl));
 }
 async function readSkillAsset(rel) {
   const here = moduleDir();
   const candidates = [
-    import_node_path93.default.resolve(here, "../../claude-skill", rel),
-    import_node_path93.default.resolve(here, "../../../claude-skill", rel),
-    import_node_path93.default.resolve(here, "../claude-skill", rel)
+    import_node_path94.default.resolve(here, "../../claude-skill", rel),
+    import_node_path94.default.resolve(here, "../../../claude-skill", rel),
+    import_node_path94.default.resolve(here, "../claude-skill", rel)
   ];
   for (const candidate of candidates) {
     try {
-      return await import_node_fs55.promises.readFile(candidate, "utf8");
+      return await import_node_fs56.promises.readFile(candidate, "utf8");
     } catch {
     }
   }
@@ -31495,20 +31758,20 @@ async function readSkillAsset(rel) {
 }
 function neatHome4() {
   const override = process.env.NEAT_HOME;
-  if (override && override.length > 0) return import_node_path93.default.resolve(override);
-  return import_node_path93.default.join(import_node_os8.default.homedir(), ".neat");
+  if (override && override.length > 0) return import_node_path94.default.resolve(override);
+  return import_node_path94.default.join(import_node_os8.default.homedir(), ".neat");
 }
 function claudeSettingsPath() {
   const override = process.env.NEAT_CLAUDE_SETTINGS;
-  if (override && override.length > 0) return import_node_path93.default.resolve(override);
+  if (override && override.length > 0) return import_node_path94.default.resolve(override);
   const home = process.env.HOME ?? process.env.USERPROFILE ?? import_node_os8.default.homedir();
-  return import_node_path93.default.join(home, ".claude", "settings.json");
+  return import_node_path94.default.join(home, ".claude", "settings.json");
 }
 function installedHookPath() {
-  return import_node_path93.default.join(neatHome4(), "hooks", HOOK_FILENAME);
+  return import_node_path94.default.join(neatHome4(), "hooks", HOOK_FILENAME);
 }
 function gateFlagPath() {
-  return import_node_path93.default.join(neatHome4(), "hooks", "gate-enabled");
+  return import_node_path94.default.join(neatHome4(), "hooks", "gate-enabled");
 }
 function isNeatSearchEntry(entry2) {
   return (entry2.hooks ?? []).some(
@@ -31541,14 +31804,14 @@ async function runHooks(opts) {
     const hookScript = await readSkillAsset(`hooks/${HOOK_FILENAME}`);
     const guide = await readSkillAsset(GUIDE_FILENAME);
     const scriptPath = installedHookPath();
-    await import_node_fs55.promises.mkdir(import_node_path93.default.dirname(scriptPath), { recursive: true });
-    await import_node_fs55.promises.writeFile(scriptPath, hookScript, { mode: 493 });
-    const guidePath = import_node_path93.default.join(neatHome4(), GUIDE_INSTALL_NAME);
-    await import_node_fs55.promises.writeFile(guidePath, guide, "utf8");
+    await import_node_fs56.promises.mkdir(import_node_path94.default.dirname(scriptPath), { recursive: true });
+    await import_node_fs56.promises.writeFile(scriptPath, hookScript, { mode: 493 });
+    const guidePath = import_node_path94.default.join(neatHome4(), GUIDE_INSTALL_NAME);
+    await import_node_fs56.promises.writeFile(guidePath, guide, "utf8");
     const settingsFile = claudeSettingsPath();
     let settings = {};
     try {
-      settings = JSON.parse(await import_node_fs55.promises.readFile(settingsFile, "utf8"));
+      settings = JSON.parse(await import_node_fs56.promises.readFile(settingsFile, "utf8"));
     } catch (err) {
       if (err.code !== "ENOENT") {
         console.error(
@@ -31570,14 +31833,14 @@ async function runHooks(opts) {
       ...settings,
       hooks: { ...hooks, PreToolUse: preToolUse }
     };
-    await import_node_fs55.promises.mkdir(import_node_path93.default.dirname(settingsFile), { recursive: true });
-    await import_node_fs55.promises.writeFile(settingsFile, JSON.stringify(merged, null, 2) + "\n", "utf8");
+    await import_node_fs56.promises.mkdir(import_node_path94.default.dirname(settingsFile), { recursive: true });
+    await import_node_fs56.promises.writeFile(settingsFile, JSON.stringify(merged, null, 2) + "\n", "utf8");
     const flag = gateFlagPath();
     if (opts.gate) {
-      await import_node_fs55.promises.mkdir(import_node_path93.default.dirname(flag), { recursive: true });
-      await import_node_fs55.promises.writeFile(flag, "1\n", "utf8");
+      await import_node_fs56.promises.mkdir(import_node_path94.default.dirname(flag), { recursive: true });
+      await import_node_fs56.promises.writeFile(flag, "1\n", "utf8");
     } else {
-      await import_node_fs55.promises.rm(flag, { force: true });
+      await import_node_fs56.promises.rm(flag, { force: true });
     }
     const mode = opts.gate ? "GATE (deny search until you ask the graph)" : "nudge (search still runs)";
     console.log(`neat hooks: installed the search hook in ${opts.gate ? "gate" : "nudge"} mode`);
@@ -31667,8 +31930,8 @@ async function runHooksCommand(args) {
 
 // src/claude-cli.ts
 init_cjs_shims();
-var import_node_path94 = __toESM(require("path"), 1);
-var import_node_fs56 = require("fs");
+var import_node_path95 = __toESM(require("path"), 1);
+var import_node_fs57 = require("fs");
 var NEAT_SECTION_HEADING = "## neat";
 var NEAT_DIRECTIVE_BODY = `This project has NEAT wired in: a live, fused semantic graph of the system \u2014
 code and runtime behaviour (OpenTelemetry) in one model, every fact tagged with
@@ -31702,8 +31965,8 @@ ${NEAT_DIRECTIVE_BODY}
 }
 function claudeMdPath() {
   const override = process.env.NEAT_CLAUDE_MD;
-  if (override && override.length > 0) return import_node_path94.default.resolve(override);
-  return import_node_path94.default.join(process.cwd(), "CLAUDE.md");
+  if (override && override.length > 0) return import_node_path95.default.resolve(override);
+  return import_node_path95.default.join(process.cwd(), "CLAUDE.md");
 }
 function splitAroundSection(raw) {
   const lines = raw.split("\n");
@@ -31731,7 +31994,7 @@ function compose(before, after) {
 }
 async function readIfExists2(file) {
   try {
-    return await import_node_fs56.promises.readFile(file, "utf8");
+    return await import_node_fs57.promises.readFile(file, "utf8");
   } catch (err) {
     if (err.code === "ENOENT") return null;
     throw err;
@@ -31742,8 +32005,8 @@ async function runInstall() {
   const raw = await readIfExists2(file) ?? "";
   const { before, after, found } = splitAroundSection(raw);
   const next = compose(before, after);
-  await import_node_fs56.promises.mkdir(import_node_path94.default.dirname(file), { recursive: true });
-  await import_node_fs56.promises.writeFile(file, next, "utf8");
+  await import_node_fs57.promises.mkdir(import_node_path95.default.dirname(file), { recursive: true });
+  await import_node_fs57.promises.writeFile(file, next, "utf8");
   const verb = raw.length === 0 ? "created" : found ? "refreshed" : "added";
   console.log(`neat claude: ${verb} the \`${NEAT_SECTION_HEADING}\` section in ${file}`);
   console.log("Your agent will now reach for `neat ask` before Read/Grep/Bash. Restart the");
@@ -31764,7 +32027,7 @@ async function runUninstall() {
   }
   const remaining = [before, after].filter((s) => s.length > 0).join("\n\n");
   const next = remaining.length > 0 ? remaining.replace(/\n*$/, "") + "\n" : "";
-  await import_node_fs56.promises.writeFile(file, next, "utf8");
+  await import_node_fs57.promises.writeFile(file, next, "utf8");
   console.log(`neat claude: removed the \`${NEAT_SECTION_HEADING}\` section from ${file}.`);
   return { exitCode: 0 };
 }
@@ -31807,9 +32070,9 @@ async function runClaudeCommand(args) {
 
 // src/codex-cli.ts
 init_cjs_shims();
-var import_node_path95 = __toESM(require("path"), 1);
+var import_node_path96 = __toESM(require("path"), 1);
 var import_node_os9 = __toESM(require("os"), 1);
-var import_node_fs57 = require("fs");
+var import_node_fs58 = require("fs");
 var import_node_util = require("util");
 var import_smol_toml6 = require("smol-toml");
 var CODEX_MCP_SERVER = {
@@ -31827,14 +32090,14 @@ var NEAT_GRAPH_FIRST_START = "<!-- neat:graph-first -->";
 var NEAT_GRAPH_FIRST_END = "<!-- /neat:graph-first -->";
 function codexConfigPath() {
   const override = process.env.NEAT_CODEX_CONFIG;
-  if (override && override.length > 0) return import_node_path95.default.resolve(override);
+  if (override && override.length > 0) return import_node_path96.default.resolve(override);
   const home = process.env.HOME ?? process.env.USERPROFILE ?? import_node_os9.default.homedir();
-  return import_node_path95.default.join(home, ".codex", "config.toml");
+  return import_node_path96.default.join(home, ".codex", "config.toml");
 }
 function agentsFilePath() {
   const override = process.env.NEAT_CODEX_AGENTS;
-  if (override && override.length > 0) return import_node_path95.default.resolve(override);
-  return import_node_path95.default.join(process.cwd(), "AGENTS.md");
+  if (override && override.length > 0) return import_node_path96.default.resolve(override);
+  return import_node_path96.default.join(process.cwd(), "AGENTS.md");
 }
 function isTableHeader(line) {
   return /^\s*\[\[?[^\]]+\]\]?\s*$/.test(line);
@@ -31968,7 +32231,7 @@ async function runCodex(opts) {
   const agentsPath = agentsFilePath();
   let configRaw = "";
   try {
-    configRaw = await import_node_fs57.promises.readFile(configPath, "utf8");
+    configRaw = await import_node_fs58.promises.readFile(configPath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       console.error(`neat codex: failed to read ${configPath} \u2014 ${err.message}`);
@@ -31977,7 +32240,7 @@ async function runCodex(opts) {
   }
   let agentsRaw = "";
   try {
-    agentsRaw = await import_node_fs57.promises.readFile(agentsPath, "utf8");
+    agentsRaw = await import_node_fs58.promises.readFile(agentsPath, "utf8");
   } catch (err) {
     if (err.code !== "ENOENT") {
       console.error(`neat codex: failed to read ${agentsPath} \u2014 ${err.message}`);
@@ -32017,15 +32280,15 @@ async function runCodex(opts) {
     return { exitCode: 0 };
   }
   if (config.changed) {
-    await import_node_fs57.promises.mkdir(import_node_path95.default.dirname(configPath), { recursive: true });
-    await import_node_fs57.promises.writeFile(configPath, config.text, "utf8");
+    await import_node_fs58.promises.mkdir(import_node_path96.default.dirname(configPath), { recursive: true });
+    await import_node_fs58.promises.writeFile(configPath, config.text, "utf8");
     console.log(`neat codex: wrote [mcp_servers.neat] to ${configPath}`);
   } else {
     console.log(`neat codex: ${configPath} already has NEAT's MCP server`);
   }
   if (agents.changed) {
-    await import_node_fs57.promises.mkdir(import_node_path95.default.dirname(agentsPath), { recursive: true });
-    await import_node_fs57.promises.writeFile(agentsPath, agents.text, "utf8");
+    await import_node_fs58.promises.mkdir(import_node_path96.default.dirname(agentsPath), { recursive: true });
+    await import_node_fs58.promises.writeFile(agentsPath, agents.text, "utf8");
     console.log(`neat codex: wrote the graph-first block to ${agentsPath}`);
   } else {
     console.log(`neat codex: ${agentsPath} already has the graph-first block`);
@@ -32082,9 +32345,9 @@ async function runCodexCommand(args) {
 
 // src/editors-cli.ts
 init_cjs_shims();
-var import_node_path96 = __toESM(require("path"), 1);
+var import_node_path97 = __toESM(require("path"), 1);
 var import_node_os10 = __toESM(require("os"), 1);
-var import_node_fs58 = require("fs");
+var import_node_fs59 = require("fs");
 var import_node_util2 = require("util");
 var jsonc = __toESM(require("jsonc-parser"), 1);
 var NEAT_MCP_SERVER = {
@@ -32108,17 +32371,17 @@ function homeDir() {
 }
 function xdgConfigDir() {
   const xdg = process.env.XDG_CONFIG_HOME;
-  return xdg && xdg.length > 0 ? import_node_path96.default.resolve(xdg) : import_node_path96.default.join(homeDir(), ".config");
+  return xdg && xdg.length > 0 ? import_node_path97.default.resolve(xdg) : import_node_path97.default.join(homeDir(), ".config");
 }
 function envOverride(name) {
   const v = process.env[name];
-  return v && v.length > 0 ? import_node_path96.default.resolve(v) : void 0;
+  return v && v.length > 0 ? import_node_path97.default.resolve(v) : void 0;
 }
 var CURSOR_CLIENT = {
   id: "cursor",
   label: "Cursor",
   docsUrl: "https://docs.cursor.com/context/mcp",
-  mcpConfigPath: () => envOverride("NEAT_CURSOR_CONFIG") ?? import_node_path96.default.join(homeDir(), ".cursor", "mcp.json"),
+  mcpConfigPath: () => envOverride("NEAT_CURSOR_CONFIG") ?? import_node_path97.default.join(homeDir(), ".cursor", "mcp.json"),
   mcpContainerKey: "mcpServers",
   format: "json",
   // Cursor still reads a single `.cursorrules` at the project root (the modern
@@ -32130,7 +32393,7 @@ var DEVIN_CLIENT = {
   id: "devin",
   label: "Devin Desktop (Cascade)",
   docsUrl: "https://docs.devin.ai/desktop/cascade/mcp",
-  mcpConfigPath: () => envOverride("NEAT_DEVIN_CONFIG") ?? import_node_path96.default.join(homeDir(), ".codeium", "windsurf", "mcp_config.json"),
+  mcpConfigPath: () => envOverride("NEAT_DEVIN_CONFIG") ?? import_node_path97.default.join(homeDir(), ".codeium", "windsurf", "mcp_config.json"),
   mcpContainerKey: "mcpServers",
   format: "json",
   rulesFileName: ".windsurfrules"
@@ -32139,7 +32402,7 @@ var GEMINI_CLIENT = {
   id: "gemini",
   label: "Gemini CLI",
   docsUrl: "https://github.com/google-gemini/gemini-cli/blob/main/docs/tools/mcp-server.md",
-  mcpConfigPath: () => envOverride("NEAT_GEMINI_CONFIG") ?? import_node_path96.default.join(homeDir(), ".gemini", "settings.json"),
+  mcpConfigPath: () => envOverride("NEAT_GEMINI_CONFIG") ?? import_node_path97.default.join(homeDir(), ".gemini", "settings.json"),
   mcpContainerKey: "mcpServers",
   format: "json",
   rulesFileName: "GEMINI.md"
@@ -32148,7 +32411,7 @@ var QWEN_CLIENT = {
   id: "qwen",
   label: "Qwen Code",
   docsUrl: "https://qwenlm.github.io/qwen-code-docs/en/users/features/mcp/",
-  mcpConfigPath: () => envOverride("NEAT_QWEN_CONFIG") ?? import_node_path96.default.join(homeDir(), ".qwen", "settings.json"),
+  mcpConfigPath: () => envOverride("NEAT_QWEN_CONFIG") ?? import_node_path97.default.join(homeDir(), ".qwen", "settings.json"),
   mcpContainerKey: "mcpServers",
   format: "json",
   rulesFileName: "QWEN.md"
@@ -32157,7 +32420,7 @@ var AMAZONQ_CLIENT = {
   id: "amazonq",
   label: "Amazon Q Developer CLI",
   docsUrl: "https://docs.aws.amazon.com/amazonq/latest/qdeveloper-ug/command-line-mcp-configuration.html",
-  mcpConfigPath: () => envOverride("NEAT_AMAZONQ_CONFIG") ?? import_node_path96.default.join(homeDir(), ".aws", "amazonq", "mcp.json"),
+  mcpConfigPath: () => envOverride("NEAT_AMAZONQ_CONFIG") ?? import_node_path97.default.join(homeDir(), ".aws", "amazonq", "mcp.json"),
   mcpContainerKey: "mcpServers",
   format: "json"
 };
@@ -32165,7 +32428,7 @@ var ROOCODE_CLIENT = {
   id: "roocode",
   label: "Roo Code",
   docsUrl: "https://roocodeinc.github.io/Roo-Code/features/mcp/using-mcp-in-roo",
-  mcpConfigPath: () => envOverride("NEAT_ROOCODE_CONFIG") ?? import_node_path96.default.join(process.cwd(), ".roo", "mcp.json"),
+  mcpConfigPath: () => envOverride("NEAT_ROOCODE_CONFIG") ?? import_node_path97.default.join(process.cwd(), ".roo", "mcp.json"),
   mcpContainerKey: "mcpServers",
   format: "json"
 };
@@ -32178,9 +32441,9 @@ var ZED_CLIENT = {
     if (override) return override;
     if (process.platform === "win32") {
       const appData = process.env.APPDATA;
-      if (appData && appData.length > 0) return import_node_path96.default.join(appData, "Zed", "settings.json");
+      if (appData && appData.length > 0) return import_node_path97.default.join(appData, "Zed", "settings.json");
     }
-    return import_node_path96.default.join(homeDir(), ".config", "zed", "settings.json");
+    return import_node_path97.default.join(homeDir(), ".config", "zed", "settings.json");
   },
   mcpContainerKey: "context_servers",
   format: "jsonc",
@@ -32190,7 +32453,7 @@ var OPENCODE_CLIENT = {
   id: "opencode",
   label: "OpenCode",
   docsUrl: "https://opencode.ai/docs/mcp-servers/",
-  mcpConfigPath: () => envOverride("NEAT_OPENCODE_CONFIG") ?? import_node_path96.default.join(xdgConfigDir(), "opencode", "opencode.json"),
+  mcpConfigPath: () => envOverride("NEAT_OPENCODE_CONFIG") ?? import_node_path97.default.join(xdgConfigDir(), "opencode", "opencode.json"),
   mcpContainerKey: "mcp",
   format: "json",
   serverEntry: NEAT_OPENCODE_SERVER,
@@ -32200,7 +32463,7 @@ var CRUSH_CLIENT = {
   id: "crush",
   label: "Crush",
   docsUrl: "https://charmbracelet-crush.mintlify.app/configuration/mcp",
-  mcpConfigPath: () => envOverride("NEAT_CRUSH_CONFIG") ?? import_node_path96.default.join(xdgConfigDir(), "crush", "crush.json"),
+  mcpConfigPath: () => envOverride("NEAT_CRUSH_CONFIG") ?? import_node_path97.default.join(xdgConfigDir(), "crush", "crush.json"),
   mcpContainerKey: "mcp",
   format: "json",
   serverEntry: NEAT_CRUSH_SERVER,
@@ -32263,7 +32526,7 @@ async function planMcp(client, mcpPath) {
   const serverEntry = client.serverEntry ?? NEAT_MCP_SERVER;
   let raw = "";
   try {
-    raw = await import_node_fs58.promises.readFile(mcpPath, "utf8");
+    raw = await import_node_fs59.promises.readFile(mcpPath, "utf8");
   } catch (err) {
     const e = err;
     if (e.code === "ENOENT") {
@@ -32305,7 +32568,7 @@ async function runEditorInstall(client, opts) {
   const mcpPath = client.mcpConfigPath();
   const serverEntry = client.serverEntry ?? NEAT_MCP_SERVER;
   const hasRules = typeof client.rulesFileName === "string";
-  const rulesPath = hasRules ? import_node_path96.default.join(opts.projectDir, client.rulesFileName) : "";
+  const rulesPath = hasRules ? import_node_path97.default.join(opts.projectDir, client.rulesFileName) : "";
   const mcp = await planMcp(client, mcpPath);
   if (mcp === null) return { exitCode: 1 };
   let existingRules = "";
@@ -32314,7 +32577,7 @@ async function runEditorInstall(client, opts) {
   let block = "";
   if (hasRules) {
     try {
-      existingRules = await import_node_fs58.promises.readFile(rulesPath, "utf8");
+      existingRules = await import_node_fs59.promises.readFile(rulesPath, "utf8");
     } catch (err) {
       if (err.code !== "ENOENT") {
         console.error(`neat ${client.id}: failed to read ${rulesPath} \u2014 ${err.message}`);
@@ -32348,11 +32611,11 @@ async function runEditorInstall(client, opts) {
     );
     return { exitCode: 0 };
   }
-  await import_node_fs58.promises.mkdir(import_node_path96.default.dirname(mcpPath), { recursive: true });
-  await import_node_fs58.promises.writeFile(mcpPath, mcp.text, "utf8");
+  await import_node_fs59.promises.mkdir(import_node_path97.default.dirname(mcpPath), { recursive: true });
+  await import_node_fs59.promises.writeFile(mcpPath, mcp.text, "utf8");
   if (hasRules) {
-    await import_node_fs58.promises.mkdir(import_node_path96.default.dirname(rulesPath), { recursive: true });
-    await import_node_fs58.promises.writeFile(rulesPath, newRules, "utf8");
+    await import_node_fs59.promises.mkdir(import_node_path97.default.dirname(rulesPath), { recursive: true });
+    await import_node_fs59.promises.writeFile(rulesPath, newRules, "utf8");
   }
   console.log(`neat ${client.id}: wired NEAT into ${client.label}`);
   console.log(`  MCP server: ${mcpPath} (${client.mcpContainerKey}.neat \u2192 npx -y @neat.is/mcp)`);
@@ -32854,7 +33117,7 @@ function sleep(ms, signal) {
 
 // src/cli-verbs.ts
 init_cjs_shims();
-var import_node_path97 = __toESM(require("path"), 1);
+var import_node_path98 = __toESM(require("path"), 1);
 async function resolveProjectEntry(opts) {
   const entries = await listProjects();
   if (opts.project) {
@@ -32864,7 +33127,7 @@ async function resolveProjectEntry(opts) {
   const cwd = opts.cwd ?? process.cwd();
   const resolvedCwd = await normalizeProjectPath(cwd);
   for (const entry2 of entries) {
-    if (resolvedCwd === entry2.path || resolvedCwd.startsWith(`${entry2.path}${import_node_path97.default.sep}`)) {
+    if (resolvedCwd === entry2.path || resolvedCwd.startsWith(`${entry2.path}${import_node_path98.default.sep}`)) {
       return entry2;
     }
   }
@@ -33441,7 +33704,7 @@ async function buildPatchSections(services, project) {
 }
 async function runInit(opts) {
   const written = [];
-  const stat = await import_node_fs59.promises.stat(opts.scanPath).catch(() => null);
+  const stat = await import_node_fs60.promises.stat(opts.scanPath).catch(() => null);
   if (!stat || !stat.isDirectory()) {
     console.error(`neat init: ${opts.scanPath} is not a directory`);
     return { exitCode: 2, writtenFiles: written };
@@ -33450,13 +33713,13 @@ async function runInit(opts) {
   printDiscoveryReport(opts, services);
   const sections = opts.noInstall ? [] : await buildPatchSections(services, opts.project);
   const patch = renderPatch(sections);
-  const patchPath = import_node_path98.default.join(opts.scanPath, "neat.patch");
+  const patchPath = import_node_path99.default.join(opts.scanPath, "neat.patch");
   if (opts.dryRun) {
-    await import_node_fs59.promises.writeFile(patchPath, patch, "utf8");
+    await import_node_fs60.promises.writeFile(patchPath, patch, "utf8");
     written.push(patchPath);
     console.log(`dry-run: patch written to ${patchPath}`);
-    const gitignorePath = import_node_path98.default.join(opts.scanPath, ".gitignore");
-    const gitignoreExists = await import_node_fs59.promises.stat(gitignorePath).then(() => true).catch(() => false);
+    const gitignorePath = import_node_path99.default.join(opts.scanPath, ".gitignore");
+    const gitignoreExists = await import_node_fs60.promises.stat(gitignorePath).then(() => true).catch(() => false);
     const verb = gitignoreExists ? "append" : "create";
     console.log(`dry-run: would ${verb} ${gitignorePath} (add neat-out/)`);
     console.log("rerun without --dry-run to register and snapshot.");
@@ -33467,9 +33730,9 @@ async function runInit(opts) {
   const graph = getGraph(graphKey);
   const projectPaths = pathsForProject(
     graphKey,
-    import_node_path98.default.join(opts.scanPath, "neat-out")
+    import_node_path99.default.join(opts.scanPath, "neat-out")
   );
-  const errorsPath = import_node_path98.default.join(import_node_path98.default.dirname(opts.outPath), import_node_path98.default.basename(projectPaths.errorsPath));
+  const errorsPath = import_node_path99.default.join(import_node_path99.default.dirname(opts.outPath), import_node_path99.default.basename(projectPaths.errorsPath));
   const result = await extractFromDirectory(graph, opts.scanPath, { errorsPath });
   await saveGraphToDisk(graph, opts.outPath);
   written.push(opts.outPath);
@@ -33548,7 +33811,7 @@ async function runInit(opts) {
         console.log("Run `npm install` (or your language equivalent) to refresh lockfiles.");
       }
     } else {
-      await import_node_fs59.promises.writeFile(patchPath, patch, "utf8");
+      await import_node_fs60.promises.writeFile(patchPath, patch, "utf8");
       written.push(patchPath);
     }
   }
@@ -33589,9 +33852,9 @@ var CLAUDE_SKILL_CONFIG = {
 };
 function claudeConfigPath() {
   const override = process.env.NEAT_CLAUDE_CONFIG;
-  if (override && override.length > 0) return import_node_path98.default.resolve(override);
+  if (override && override.length > 0) return import_node_path99.default.resolve(override);
   const home = process.env.HOME ?? process.env.USERPROFILE ?? "";
-  return import_node_path98.default.join(home, ".claude.json");
+  return import_node_path99.default.join(home, ".claude.json");
 }
 async function runSkill(opts) {
   const snippet2 = JSON.stringify(CLAUDE_SKILL_CONFIG, null, 2) + "\n";
@@ -33603,7 +33866,7 @@ async function runSkill(opts) {
     const target = claudeConfigPath();
     let existing = {};
     try {
-      existing = JSON.parse(await import_node_fs59.promises.readFile(target, "utf8"));
+      existing = JSON.parse(await import_node_fs60.promises.readFile(target, "utf8"));
     } catch (err) {
       if (err.code !== "ENOENT") {
         console.error(`neat skill: failed to read ${target} \u2014 ${err.message}`);
@@ -33615,8 +33878,8 @@ async function runSkill(opts) {
       ...existing,
       mcpServers: { ...mcp, neat: CLAUDE_SKILL_CONFIG.mcpServers.neat }
     };
-    await import_node_fs59.promises.mkdir(import_node_path98.default.dirname(target), { recursive: true });
-    await import_node_fs59.promises.writeFile(target, JSON.stringify(merged, null, 2) + "\n", "utf8");
+    await import_node_fs60.promises.mkdir(import_node_path99.default.dirname(target), { recursive: true });
+    await import_node_fs60.promises.writeFile(target, JSON.stringify(merged, null, 2) + "\n", "utf8");
     console.log(`neat skill: wrote mcpServers.neat to ${target}`);
     console.log("restart Claude Code to pick up the new MCP server.");
     console.log("");
@@ -33642,7 +33905,7 @@ async function runSkill(opts) {
 async function main() {
   const argv = process.argv.slice(2);
   const cmd0 = argv[0];
-  if (cmd0 === "-h" || cmd0 === "--help") {
+  if (argv.some((a) => a === "-h" || a === "--help")) {
     usage5();
     process.exit(0);
   }
@@ -33737,12 +34000,12 @@ async function main() {
       console.error("neat init: --apply and --dry-run are mutually exclusive");
       process.exit(2);
     }
-    const scanPath = import_node_path98.default.resolve(target);
+    const scanPath = import_node_path99.default.resolve(target);
     const projectExplicit = parsed.project !== null;
-    const projectName = projectExplicit ? project : import_node_path98.default.basename(scanPath);
+    const projectName = projectExplicit ? project : import_node_path99.default.basename(scanPath);
     const projectKey = projectExplicit ? project : DEFAULT_PROJECT;
-    const fallback = pathsForProject(projectKey, import_node_path98.default.join(scanPath, "neat-out")).snapshotPath;
-    const outPath = import_node_path98.default.resolve(process.env.NEAT_OUT_PATH ?? fallback);
+    const fallback = pathsForProject(projectKey, import_node_path99.default.join(scanPath, "neat-out")).snapshotPath;
+    const outPath = import_node_path99.default.resolve(process.env.NEAT_OUT_PATH ?? fallback);
     const result = await runInit({
       scanPath,
       outPath,
@@ -33763,21 +34026,21 @@ async function main() {
       usage5();
       process.exit(2);
     }
-    const scanPath = import_node_path98.default.resolve(target);
-    const stat = await import_node_fs59.promises.stat(scanPath).catch(() => null);
+    const scanPath = import_node_path99.default.resolve(target);
+    const stat = await import_node_fs60.promises.stat(scanPath).catch(() => null);
     if (!stat || !stat.isDirectory()) {
       console.error(`neat watch: ${scanPath} is not a directory`);
       process.exit(2);
     }
-    const projectPaths = pathsForProject(project, import_node_path98.default.join(scanPath, "neat-out"));
-    const outPath = import_node_path98.default.resolve(process.env.NEAT_OUT_PATH ?? projectPaths.snapshotPath);
-    const errorsPath = import_node_path98.default.resolve(
-      process.env.NEAT_ERRORS_PATH ?? import_node_path98.default.join(import_node_path98.default.dirname(outPath), import_node_path98.default.basename(projectPaths.errorsPath))
+    const projectPaths = pathsForProject(project, import_node_path99.default.join(scanPath, "neat-out"));
+    const outPath = import_node_path99.default.resolve(process.env.NEAT_OUT_PATH ?? projectPaths.snapshotPath);
+    const errorsPath = import_node_path99.default.resolve(
+      process.env.NEAT_ERRORS_PATH ?? import_node_path99.default.join(import_node_path99.default.dirname(outPath), import_node_path99.default.basename(projectPaths.errorsPath))
     );
-    const staleEventsPath = import_node_path98.default.resolve(
-      process.env.NEAT_STALE_EVENTS_PATH ?? import_node_path98.default.join(import_node_path98.default.dirname(outPath), import_node_path98.default.basename(projectPaths.staleEventsPath))
+    const staleEventsPath = import_node_path99.default.resolve(
+      process.env.NEAT_STALE_EVENTS_PATH ?? import_node_path99.default.join(import_node_path99.default.dirname(outPath), import_node_path99.default.basename(projectPaths.staleEventsPath))
     );
-    const embeddingsCachePath = process.env.NEAT_EMBEDDINGS_CACHE_PATH ? import_node_path98.default.resolve(process.env.NEAT_EMBEDDINGS_CACHE_PATH) : void 0;
+    const embeddingsCachePath = process.env.NEAT_EMBEDDINGS_CACHE_PATH ? import_node_path99.default.resolve(process.env.NEAT_EMBEDDINGS_CACHE_PATH) : void 0;
     const handle = await startWatch(getGraph(project), {
       scanPath,
       outPath,
@@ -33786,7 +34049,7 @@ async function main() {
       project,
       // Resolve NEAT_HOME so a `neat watch` picks up connectors added to
       // ~/.neat/connectors.json (#871). Same resolution the rest of the CLI uses.
-      neatHome: process.env.NEAT_HOME ? import_node_path98.default.resolve(process.env.NEAT_HOME) : import_node_path98.default.join(import_node_os11.default.homedir(), ".neat"),
+      neatHome: process.env.NEAT_HOME ? import_node_path99.default.resolve(process.env.NEAT_HOME) : import_node_path99.default.join(import_node_os11.default.homedir(), ".neat"),
       ...embeddingsCachePath ? { embeddingsCachePath } : {},
       host: process.env.HOST ?? "0.0.0.0",
       port: Number(process.env.PORT ?? 8080),
@@ -33968,11 +34231,11 @@ async function main() {
   process.exit(1);
 }
 async function tryOrchestrator(cmd, parsed) {
-  const scanPath = import_node_path98.default.resolve(cmd);
-  const stat = await import_node_fs59.promises.stat(scanPath).catch(() => null);
+  const scanPath = import_node_path99.default.resolve(cmd);
+  const stat = await import_node_fs60.promises.stat(scanPath).catch(() => null);
   if (!stat || !stat.isDirectory()) return null;
   const projectExplicit = parsed.project !== null;
-  const projectName = projectExplicit ? parsed.project : import_node_path98.default.basename(scanPath);
+  const projectName = projectExplicit ? parsed.project : import_node_path99.default.basename(scanPath);
   const result = await runOrchestrator({
     scanPath,
     project: projectName,