@neat.is/core 0.10.6-dev.20261010 → 0.10.7-dev.20261011

package/dist/cli.cjs

@@ -801,6 +801,7 @@ __export(cli_exports, {
   cwdProjectApplies: () => cwdProjectApplies,
   isLoopbackEndpoint: () => isLoopbackEndpoint,
   isNpxInvocation: () => isNpxInvocation,
+  loopbackResolutionHint: () => loopbackResolutionHint,
   main: () => main,
   parseArgs: () => parseArgs,
   printBanner: () => printBanner,
@@ -3039,7 +3040,7 @@ var PolicyViolationsLog = class {
 };
 
 // src/ingest.ts
-var import_types9 = require("@neat.is/types");
+var import_types10 = require("@neat.is/types");
 
 // src/extract/routes.ts
 init_cjs_shims();
@@ -5816,9 +5817,95 @@ async function addRoutes(graph, services) {
   return { nodesAdded, edgesAdded };
 }
 
-// src/columns.ts
+// src/extract/source-baseline.ts
 init_cjs_shims();
 var import_types8 = require("@neat.is/types");
+var states = /* @__PURE__ */ new WeakMap();
+var REPOSITORY = /^[A-Za-z0-9_.-]+\/[A-Za-z0-9_.-]+$/;
+function validCommit(commit, repository) {
+  return !!commit && commit.repository === repository && /^[0-9a-f]{40}$/.test(commit.sha);
+}
+function stateOf(graph) {
+  let state = states.get(graph);
+  if (!state) {
+    state = { repos: /* @__PURE__ */ new Map(), active: /* @__PURE__ */ new Set(), conflicted: /* @__PURE__ */ new Set() };
+    states.set(graph, state);
+  }
+  return state;
+}
+function setEntry(state, repository, baseline, generation = /* @__PURE__ */ Symbol()) {
+  state.repos.set(repository, {
+    baseline,
+    generation,
+    services: state.repos.get(repository)?.services ?? /* @__PURE__ */ new Set()
+  });
+}
+function readSourceBaselines(graph) {
+  const state = states.get(graph);
+  if (!state) return [];
+  return [...state.repos.entries()].sort(([a], [b]) => a < b ? -1 : a > b ? 1 : 0).map(([, entry2]) => ({ ...entry2.baseline }));
+}
+function invalidateSourceBaseline(graph, repository, status2 = "unavailable") {
+  if (repository !== void 0) {
+    if (REPOSITORY.test(repository)) setEntry(stateOf(graph), repository, { status: status2, repository });
+    return;
+  }
+  const state = states.get(graph);
+  if (!state) return;
+  for (const generation of state.active) state.conflicted.add(generation);
+  for (const name of state.repos.keys()) {
+    setEntry(state, name, { status: "unavailable", repository: name });
+  }
+}
+function beginSourceExtraction(graph, source, commit) {
+  const generation = /* @__PURE__ */ Symbol();
+  const state = stateOf(graph);
+  if (source === void 0) {
+    invalidateSourceBaseline(graph);
+    state.active.add(generation);
+    return generation;
+  }
+  state.active.add(generation);
+  if (!REPOSITORY.test(source)) return generation;
+  setEntry(
+    state,
+    source,
+    validCommit(commit, source) ? { status: "syncing", repository: source } : { status: "unavailable", repository: source },
+    generation
+  );
+  return generation;
+}
+function servicesOf(graph, repository) {
+  const services = /* @__PURE__ */ new Set();
+  graph.forEachNode((_id, attrs) => {
+    const node = attrs;
+    if (node.type === import_types8.NodeType.FileNode && node.source === repository && node.service) {
+      services.add(node.service);
+    }
+  });
+  return services;
+}
+function finishSourceExtraction(graph, generation, source, commit, result) {
+  const state = states.get(graph);
+  if (!state) return;
+  state.active.delete(generation);
+  const conflicted = state.conflicted.delete(generation);
+  if (source === void 0 || !REPOSITORY.test(source)) return;
+  const entry2 = state.repos.get(source);
+  if (!entry2 || entry2.generation !== generation) return;
+  entry2.services = servicesOf(graph, source);
+  let shared = false;
+  for (const [name, other] of state.repos) {
+    if (name === source || ![...entry2.services].some((s) => other.services.has(s))) continue;
+    shared = true;
+    setEntry(state, name, { status: "unavailable", repository: name }, other.generation);
+  }
+  entry2.baseline = !conflicted && !shared && validCommit(commit, source) && result.extractionErrors === 0 && result.skippedFiles === 0 ? { status: "ready", repository: source, sha: commit.sha } : { status: "unavailable", repository: source };
+}
+
+// src/columns.ts
+init_cjs_shims();
+var import_types9 = require("@neat.is/types");
 var OBSERVED_COLUMN_CONFIDENCE = 0.9;
 function normalizeProvenances(provenances) {
   return [...new Set(provenances)].sort();
@@ -5861,10 +5948,10 @@ function foldSdkWrites(existing, writes) {
   return out;
 }
 function columnIsDeclared(col) {
-  return col.provenances.includes(import_types8.Provenance.EXTRACTED);
+  return col.provenances.includes(import_types9.Provenance.EXTRACTED);
 }
 function columnIsObserved(col) {
-  return col.provenances.includes(import_types8.Provenance.OBSERVED);
+  return col.provenances.includes(import_types9.Provenance.OBSERVED);
 }
 
 // src/latency-digest.ts
@@ -6328,11 +6415,11 @@ function callSiteFromSpan(span, serviceNode, scanPath) {
   };
 }
 function reconcileObservedRelPath(graph, serviceName, relPath) {
-  if (graph.hasNode((0, import_types9.fileId)(serviceName, relPath))) return relPath;
+  if (graph.hasNode((0, import_types10.fileId)(serviceName, relPath))) return relPath;
   let best = null;
   graph.forEachNode((_id, attrs) => {
     const a = attrs;
-    if (a.type !== import_types9.NodeType.FileNode || a.service !== serviceName) return;
+    if (a.type !== import_types10.NodeType.FileNode || a.service !== serviceName) return;
     if (a.discoveredVia === "otel") return;
     const p = a.path;
     if (!p) return;
@@ -6344,14 +6431,14 @@ function reconcileObservedRelPath(graph, serviceName, relPath) {
 }
 function ensureObservedFileNode(graph, serviceName, serviceNodeId, callSite) {
   const svcAttrs = graph.hasNode(serviceNodeId) ? graph.getNodeAttributes(serviceNodeId) : void 0;
-  const canonicalService = svcAttrs && svcAttrs.type === import_types9.NodeType.ServiceNode && typeof svcAttrs.name === "string" ? svcAttrs.name : serviceName;
+  const canonicalService = svcAttrs && svcAttrs.type === import_types10.NodeType.ServiceNode && typeof svcAttrs.name === "string" ? svcAttrs.name : serviceName;
   const relPath = reconcileObservedRelPath(graph, canonicalService, callSite.relPath);
-  const fileNodeId = (0, import_types9.fileId)(canonicalService, relPath);
+  const fileNodeId = (0, import_types10.fileId)(canonicalService, relPath);
   if (!graph.hasNode(fileNodeId)) {
     const language = languageForExt(relPath);
     const node = {
       id: fileNodeId,
-      type: import_types9.NodeType.FileNode,
+      type: import_types10.NodeType.FileNode,
       service: canonicalService,
       path: relPath,
       ...language ? { language } : {},
@@ -6360,14 +6447,14 @@ function ensureObservedFileNode(graph, serviceName, serviceNodeId, callSite) {
     };
     graph.addNode(fileNodeId, node);
   }
-  const containsId = makeObservedEdgeId(import_types9.EdgeType.CONTAINS, serviceNodeId, fileNodeId);
+  const containsId = makeObservedEdgeId(import_types10.EdgeType.CONTAINS, serviceNodeId, fileNodeId);
   if (!graph.hasEdge(containsId)) {
     const edge = {
       id: containsId,
       source: serviceNodeId,
       target: fileNodeId,
-      type: import_types9.EdgeType.CONTAINS,
-      provenance: import_types9.Provenance.OBSERVED
+      type: import_types10.EdgeType.CONTAINS,
+      provenance: import_types10.Provenance.OBSERVED
     };
     graph.addEdgeWithKey(containsId, serviceNodeId, fileNodeId, edge);
   }
@@ -6391,11 +6478,11 @@ function pickContainingSymbol(candidates, fn) {
   return [...candidates].sort(bySpan)[0].id;
 }
 function ensureObservedSymbolNode(graph, fileNodeId, service, relPath, fn, line) {
-  const sid = (0, import_types9.symbolId)(service, relPath, fn);
+  const sid = (0, import_types10.symbolId)(service, relPath, fn);
   if (!graph.hasNode(sid)) {
     const node = {
       id: sid,
-      type: import_types9.NodeType.SymbolNode,
+      type: import_types10.NodeType.SymbolNode,
       kind: "function",
       qualname: fn,
       span: { startLine: line, endLine: line },
@@ -6405,14 +6492,14 @@ function ensureObservedSymbolNode(graph, fileNodeId, service, relPath, fn, line)
     };
     graph.addNode(sid, node);
   }
-  const containsId = makeObservedEdgeId(import_types9.EdgeType.CONTAINS, fileNodeId, sid);
+  const containsId = makeObservedEdgeId(import_types10.EdgeType.CONTAINS, fileNodeId, sid);
   if (!graph.hasEdge(containsId)) {
     const edge = {
       id: containsId,
       source: fileNodeId,
       target: sid,
-      type: import_types9.EdgeType.CONTAINS,
-      provenance: import_types9.Provenance.OBSERVED
+      type: import_types10.EdgeType.CONTAINS,
+      provenance: import_types10.Provenance.OBSERVED
     };
     graph.addEdgeWithKey(containsId, fileNodeId, sid, edge);
   }
@@ -6424,9 +6511,9 @@ function landObservedSymbol(graph, fileNodeId, service, relPath, callSite, mint
   let sawSymbol = false;
   const candidates = [];
   graph.forEachOutboundEdge(fileNodeId, (_edge, edgeAttrs, _source, target) => {
-    if (edgeAttrs.type !== import_types9.EdgeType.CONTAINS) return;
+    if (edgeAttrs.type !== import_types10.EdgeType.CONTAINS) return;
     const t = graph.getNodeAttributes(target);
-    if (t.type !== import_types9.NodeType.SymbolNode) return;
+    if (t.type !== import_types10.NodeType.SymbolNode) return;
     sawSymbol = true;
     if (line >= t.span.startLine && line <= t.span.endLine) {
       candidates.push({ id: target, symbol: t });
@@ -6439,17 +6526,17 @@ function landObservedSymbol(graph, fileNodeId, service, relPath, callSite, mint
   return fileNodeId;
 }
 function makeObservedEdgeId(type, source, target) {
-  return (0, import_types9.observedEdgeId)(source, target, type);
+  return (0, import_types10.observedEdgeId)(source, target, type);
 }
 function makeInferredEdgeId(type, source, target) {
-  return (0, import_types9.inferredEdgeId)(source, target, type);
+  return (0, import_types10.inferredEdgeId)(source, target, type);
 }
 var INFERRED_CONFIDENCE = 0.6;
 var STITCH_MAX_DEPTH = 2;
 var STITCH_EDGE_TYPES = /* @__PURE__ */ new Set([
-  import_types9.EdgeType.CALLS,
-  import_types9.EdgeType.CONNECTS_TO,
-  import_types9.EdgeType.DEPENDS_ON
+  import_types10.EdgeType.CALLS,
+  import_types10.EdgeType.CONNECTS_TO,
+  import_types10.EdgeType.DEPENDS_ON
 ]);
 var WIRE_SPAN_KIND_CLIENT = 3;
 var WIRE_SPAN_KIND_PRODUCER = 4;
@@ -6465,11 +6552,11 @@ function spanServesGraphqlOperation(kind) {
   return kind !== WIRE_SPAN_KIND_CLIENT && kind !== WIRE_SPAN_KIND_PRODUCER && kind !== WIRE_SPAN_KIND_CONSUMER;
 }
 function ensureGraphqlOperationNode(graph, serviceName, operationType, operationName) {
-  const id = (0, import_types9.graphqlOperationId)(serviceName, operationType, operationName);
+  const id = (0, import_types10.graphqlOperationId)(serviceName, operationType, operationName);
   if (graph.hasNode(id)) return id;
   const node = {
     id,
-    type: import_types9.NodeType.GraphQLOperationNode,
+    type: import_types10.NodeType.GraphQLOperationNode,
     name: operationName,
     service: serviceName,
     operationType: operationType.toLowerCase(),
@@ -6483,11 +6570,11 @@ function spanServesGrpcMethod(kind) {
   return kind !== WIRE_SPAN_KIND_CLIENT && kind !== WIRE_SPAN_KIND_PRODUCER && kind !== WIRE_SPAN_KIND_CONSUMER;
 }
 function ensureGrpcMethodNode(graph, rpcService, rpcMethod) {
-  const id = (0, import_types9.grpcMethodId)(rpcService, rpcMethod);
+  const id = (0, import_types10.grpcMethodId)(rpcService, rpcMethod);
   if (graph.hasNode(id)) return id;
   const node = {
     id,
-    type: import_types9.NodeType.GrpcMethodNode,
+    type: import_types10.NodeType.GrpcMethodNode,
     name: `${rpcService}/${rpcMethod}`,
     rpcService,
     rpcMethod,
@@ -6500,11 +6587,11 @@ function spanServesWebsocketChannel(kind) {
   return kind !== WIRE_SPAN_KIND_CLIENT && kind !== WIRE_SPAN_KIND_PRODUCER && kind !== WIRE_SPAN_KIND_CONSUMER;
 }
 function ensureWebsocketChannelNode(graph, serviceName, channel) {
-  const id = (0, import_types9.websocketChannelId)(serviceName, channel);
+  const id = (0, import_types10.websocketChannelId)(serviceName, channel);
   if (graph.hasNode(id)) return id;
   const node = {
     id,
-    type: import_types9.NodeType.WebSocketChannelNode,
+    type: import_types10.NodeType.WebSocketChannelNode,
     name: channel,
     service: serviceName,
     channel,
@@ -6517,11 +6604,11 @@ function messagingDestinationKind(system) {
   return `${system}-topic`;
 }
 function ensureMessagingDestinationNode(graph, system, destination) {
-  const id = (0, import_types9.infraId)(messagingDestinationKind(system), destination);
+  const id = (0, import_types10.infraId)(messagingDestinationKind(system), destination);
   if (graph.hasNode(id)) return id;
   const node = {
     id,
-    type: import_types9.NodeType.InfraNode,
+    type: import_types10.NodeType.InfraNode,
     name: destination,
     provider: "self",
     kind: messagingDestinationKind(system)
@@ -6565,9 +6652,9 @@ function lookupParentSpan(traceId, parentSpanId, now) {
   };
 }
 function resolveServiceId(graph, host, env) {
-  const envTagged = (0, import_types9.serviceId)(host, env);
+  const envTagged = (0, import_types10.serviceId)(host, env);
   if (graph.hasNode(envTagged)) return envTagged;
-  const envLess = (0, import_types9.serviceId)(host);
+  const envLess = (0, import_types10.serviceId)(host);
   if (envLess !== envTagged && graph.hasNode(envLess)) return envLess;
   let sameEnv = null;
   let envLessMatch = null;
@@ -6575,7 +6662,7 @@ function resolveServiceId(graph, host, env) {
   graph.forEachNode((id, attrs) => {
     if (sameEnv) return;
     const a = attrs;
-    if (a.type !== import_types9.NodeType.ServiceNode) return;
+    if (a.type !== import_types10.NodeType.ServiceNode) return;
     const matchesByName = a.name === host;
     const matchesByAlias = a.aliases ? a.aliases.includes(host) : false;
     if (!matchesByName && !matchesByAlias) return;
@@ -6590,14 +6677,14 @@ function resolveServiceId(graph, host, env) {
   return sameEnv ?? envLessMatch ?? anyMatch;
 }
 function frontierIdFor(host) {
-  return (0, import_types9.frontierId)(host);
+  return (0, import_types10.frontierId)(host);
 }
 function resolveFusedServiceId(graph, serviceName, env) {
-  const id = (0, import_types9.serviceId)(serviceName, env);
+  const id = (0, import_types10.serviceId)(serviceName, env);
   if (graph.hasNode(id)) return id;
   const wanted = serviceName.toLowerCase();
   const extractedId = graph.findNode((_nid, attrs) => {
-    if (attrs.type !== import_types9.NodeType.ServiceNode) return false;
+    if (attrs.type !== import_types10.NodeType.ServiceNode) return false;
     const svc = attrs;
     if (svc.discoveredVia === "otel") return false;
     return typeof svc.name === "string" && svc.name.toLowerCase() === wanted;
@@ -6609,7 +6696,7 @@ function ensureServiceNode(graph, serviceName, env) {
   if (graph.hasNode(resolved)) return resolved;
   const node = {
     id: resolved,
-    type: import_types9.NodeType.ServiceNode,
+    type: import_types10.NodeType.ServiceNode,
     name: serviceName,
     language: "unknown",
     discoveredVia: "otel",
@@ -6619,11 +6706,11 @@ function ensureServiceNode(graph, serviceName, env) {
   return resolved;
 }
 function ensureInfraNode(graph, kind, name, provider) {
-  const id = (0, import_types9.infraId)(kind, name);
+  const id = (0, import_types10.infraId)(kind, name);
   if (graph.hasNode(id)) return id;
   const node = {
     id,
-    type: import_types9.NodeType.InfraNode,
+    type: import_types10.NodeType.InfraNode,
     name,
     provider,
     kind
@@ -6635,7 +6722,7 @@ var COLUMN_BEARING_INFRA_KINDS = /* @__PURE__ */ new Set(["sql-table", "supabase
 function mergeColumnsAt(graph, tableNodeId, columns, provenance2, confidence) {
   if (!columns || columns.length === 0 || !graph.hasNode(tableNodeId)) return;
   const node = graph.getNodeAttributes(tableNodeId);
-  if (node.type !== import_types9.NodeType.InfraNode || !node.kind || !COLUMN_BEARING_INFRA_KINDS.has(node.kind)) {
+  if (node.type !== import_types10.NodeType.InfraNode || !node.kind || !COLUMN_BEARING_INFRA_KINDS.has(node.kind)) {
     return;
   }
   graph.replaceNodeAttributes(tableNodeId, {
@@ -6644,7 +6731,7 @@ function mergeColumnsAt(graph, tableNodeId, columns, provenance2, confidence) {
   });
 }
 function mergeObservedColumns(graph, tableNodeId, columns) {
-  mergeColumnsAt(graph, tableNodeId, columns, import_types9.Provenance.OBSERVED, OBSERVED_COLUMN_CONFIDENCE);
+  mergeColumnsAt(graph, tableNodeId, columns, import_types10.Provenance.OBSERVED, OBSERVED_COLUMN_CONFIDENCE);
 }
 function mergeObservedDeployState(graph, serviceNodeId, state) {
   if (!graph.hasNode(serviceNodeId)) return;
@@ -6655,11 +6742,11 @@ function mergeObservedDeployState(graph, serviceNodeId, state) {
   graph.mergeNodeAttributes(serviceNodeId, attrs);
 }
 function ensureDatabaseNode(graph, host, engine) {
-  const id = (0, import_types9.databaseId)(host);
+  const id = (0, import_types10.databaseId)(host);
   if (graph.hasNode(id)) return id;
   const node = {
     id,
-    type: import_types9.NodeType.DatabaseNode,
+    type: import_types10.NodeType.DatabaseNode,
     name: host,
     engine,
     engineVersion: "unknown",
@@ -6671,11 +6758,11 @@ function ensureDatabaseNode(graph, host, engine) {
   return id;
 }
 function ensureLocalDatabaseNode(graph, serviceName, name, engine) {
-  const id = (0, import_types9.localDatabaseId)(serviceName, name);
+  const id = (0, import_types10.localDatabaseId)(serviceName, name);
   if (graph.hasNode(id)) return id;
   const node = {
     id,
-    type: import_types9.NodeType.DatabaseNode,
+    type: import_types10.NodeType.DatabaseNode,
     name,
     engine,
     engineVersion: "unknown",
@@ -6690,17 +6777,17 @@ function findDeclaredDatabaseForService(graph, serviceNodeId, engine) {
   const sources = [serviceNodeId];
   for (const edgeId of graph.outboundEdges(serviceNodeId)) {
     const e = graph.getEdgeAttributes(edgeId);
-    if (e.type === import_types9.EdgeType.CONTAINS) sources.push(e.target);
+    if (e.type === import_types10.EdgeType.CONTAINS) sources.push(e.target);
   }
   const matches = /* @__PURE__ */ new Set();
   for (const src of sources) {
     if (!graph.hasNode(src)) continue;
     for (const edgeId of graph.outboundEdges(src)) {
       const edge = graph.getEdgeAttributes(edgeId);
-      if (edge.type !== import_types9.EdgeType.CONNECTS_TO || edge.provenance !== import_types9.Provenance.EXTRACTED) continue;
+      if (edge.type !== import_types10.EdgeType.CONNECTS_TO || edge.provenance !== import_types10.Provenance.EXTRACTED) continue;
       if (!graph.hasNode(edge.target)) continue;
       const target = graph.getNodeAttributes(edge.target);
-      if (target.type !== import_types9.NodeType.DatabaseNode || target.engine !== engine) continue;
+      if (target.type !== import_types10.NodeType.DatabaseNode || target.engine !== engine) continue;
       matches.add(edge.target);
     }
   }
@@ -6715,7 +6802,7 @@ function ensureFrontierNode(graph, host, ts) {
   }
   const node = {
     id,
-    type: import_types9.NodeType.FrontierNode,
+    type: import_types10.NodeType.FrontierNode,
     name: host,
     host,
     firstObserved: ts,
@@ -6768,11 +6855,11 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false, ev
     };
     const updated = {
       ...existing,
-      provenance: import_types9.Provenance.OBSERVED,
+      provenance: import_types10.Provenance.OBSERVED,
       lastObserved: ts,
       callCount: newSpanCount,
       signal: newSignal,
-      confidence: (0, import_types9.confidenceForObservedSignal)(newSignal),
+      confidence: (0, import_types10.confidenceForObservedSignal)(newSignal),
       grain
       // backfills legacy edges that predate ADR-142
     };
@@ -6795,8 +6882,8 @@ function upsertObservedEdge(graph, type, source, target, ts, isError = false, ev
     source,
     target,
     type,
-    provenance: import_types9.Provenance.OBSERVED,
-    confidence: (0, import_types9.confidenceForObservedSignal)(signal),
+    provenance: import_types10.Provenance.OBSERVED,
+    confidence: (0, import_types10.confidenceForObservedSignal)(signal),
     lastObserved: ts,
     callCount: 1,
     signal,
@@ -6818,9 +6905,9 @@ function stitchTrace(graph, sourceServiceId, ts) {
     const outbound = graph.outboundEdges(nodeId);
     for (const edgeId of outbound) {
       const edge = graph.getEdgeAttributes(edgeId);
-      if (edge.provenance !== import_types9.Provenance.EXTRACTED) continue;
+      if (edge.provenance !== import_types10.Provenance.EXTRACTED) continue;
       if (!STITCH_EDGE_TYPES.has(edge.type)) continue;
-      if (graph.hasEdge((0, import_types9.observedEdgeId)(edge.source, edge.target, edge.type))) continue;
+      if (graph.hasEdge((0, import_types10.observedEdgeId)(edge.source, edge.target, edge.type))) continue;
       upsertInferredEdge(graph, edge.type, edge.source, edge.target, ts);
       if (!visited.has(edge.target)) {
         visited.add(edge.target);
@@ -6842,7 +6929,7 @@ function upsertInferredEdge(graph, type, source, target, ts) {
     source,
     target,
     type,
-    provenance: import_types9.Provenance.INFERRED,
+    provenance: import_types10.Provenance.INFERRED,
     confidence: INFERRED_CONFIDENCE,
     lastObserved: ts
   };
@@ -6856,7 +6943,7 @@ function emitIncidentEvent(project, ev) {
       incidentId: ev.id,
       affectedNode: ev.affectedNode,
       service: ev.service,
-      incidentKind: (0, import_types9.incidentKindOf)(ev),
+      incidentKind: (0, import_types10.incidentKindOf)(ev),
       at: ev.timestamp
     }
   });
@@ -6885,7 +6972,7 @@ function landIncidentCallSite(span, callSite, trusted, graph) {
   const canonicalService = serviceNodeName(graph, span) ?? span.service;
   const recovered = !trusted;
   if (graph) {
-    const fusedFileId = (0, import_types9.fileId)(canonicalService, relPath);
+    const fusedFileId = (0, import_types10.fileId)(canonicalService, relPath);
     if (graph.hasNode(fusedFileId)) {
       const node = landObservedSymbol(
         graph,
@@ -6905,7 +6992,7 @@ function landIncidentCallSite(span, callSite, trusted, graph) {
     }
     if (recovered) return null;
   }
-  return { affectedNode: (0, import_types9.fileId)(span.service, relPath) };
+  return { affectedNode: (0, import_types10.fileId)(span.service, relPath) };
 }
 function serviceNodeName(graph, span) {
   if (!graph) return void 0;
@@ -6922,7 +7009,7 @@ function stacktraceCallSite(span, serviceNode, scanPath) {
   return { relPath, line: frame.line, ...frame.fn ? { fn: frame.fn } : {} };
 }
 function incidentLocus(span, graph, scanPath) {
-  const sid = graph ? resolveFusedServiceId(graph, span.service, span.env) : (0, import_types9.serviceId)(span.service, span.env);
+  const sid = graph ? resolveFusedServiceId(graph, span.service, span.env) : (0, import_types10.serviceId)(span.service, span.env);
   const serviceNode = graph && graph.hasNode(sid) ? graph.getNodeAttributes(sid) : void 0;
   const callSite = callSiteFromSpan(span, serviceNode, scanPath);
   if (callSite) {
@@ -7113,7 +7200,7 @@ function findRouteNodeByHttpRoute(graph, serviceName, method, httpRoute) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type !== import_types9.NodeType.RouteNode || a.service !== serviceName) return;
+    if (a.type !== import_types10.NodeType.RouteNode || a.service !== serviceName) return;
     if (m && a.method !== "ALL" && a.method !== m) return;
     if (normalizePathTemplate(a.pathTemplate) === target) found = id;
   });
@@ -7146,7 +7233,7 @@ async function handleSpan(ctx, span) {
       let targetId;
       if (host) {
         ensureDatabaseNode(ctx.graph, host, span.dbSystem);
-        targetId = (0, import_types9.databaseId)(host);
+        targetId = (0, import_types10.databaseId)(host);
       } else {
         const declared = findDeclaredDatabaseForService(ctx.graph, sourceId, span.dbSystem);
         if (declared) {
@@ -7163,7 +7250,7 @@ async function handleSpan(ctx, span) {
       }
       const result = upsertObservedEdge(
         ctx.graph,
-        import_types9.EdgeType.CONNECTS_TO,
+        import_types10.EdgeType.CONNECTS_TO,
         observedSource(),
         targetId,
         ts,
@@ -7177,7 +7264,7 @@ async function handleSpan(ctx, span) {
         const collectionId = ensureInfraNode(ctx.graph, "mongodb-collection", span.dbCollection, "self");
         upsertObservedEdge(
           ctx.graph,
-          import_types9.EdgeType.CALLS,
+          import_types10.EdgeType.CALLS,
           observedSource(),
           collectionId,
           ts,
@@ -7191,7 +7278,7 @@ async function handleSpan(ctx, span) {
         const tableId = ensureInfraNode(ctx.graph, "sql-table", span.dbTable, "self");
         upsertObservedEdge(
           ctx.graph,
-          import_types9.EdgeType.CALLS,
+          import_types10.EdgeType.CALLS,
           observedSource(),
           tableId,
           ts,
@@ -7209,7 +7296,7 @@ async function handleSpan(ctx, span) {
       span.messagingSystem,
       span.messagingDestination
     );
-    const edgeType = span.kind === WIRE_SPAN_KIND_CONSUMER ? import_types9.EdgeType.CONSUMES_FROM : import_types9.EdgeType.PUBLISHES_TO;
+    const edgeType = span.kind === WIRE_SPAN_KIND_CONSUMER ? import_types10.EdgeType.CONSUMES_FROM : import_types10.EdgeType.PUBLISHES_TO;
     const result = upsertObservedEdge(
       ctx.graph,
       edgeType,
@@ -7231,7 +7318,7 @@ async function handleSpan(ctx, span) {
     );
     const result = upsertObservedEdge(
       ctx.graph,
-      import_types9.EdgeType.CONTAINS,
+      import_types10.EdgeType.CONTAINS,
       observedSource(),
       targetId,
       ts,
@@ -7245,7 +7332,7 @@ async function handleSpan(ctx, span) {
     const targetId = ensureGrpcMethodNode(ctx.graph, span.rpcService, span.rpcMethod);
     const result = upsertObservedEdge(
       ctx.graph,
-      import_types9.EdgeType.CONTAINS,
+      import_types10.EdgeType.CONTAINS,
       observedSource(),
       targetId,
       ts,
@@ -7263,7 +7350,7 @@ async function handleSpan(ctx, span) {
     );
     const result = upsertObservedEdge(
       ctx.graph,
-      import_types9.EdgeType.CONNECTS_TO,
+      import_types10.EdgeType.CONNECTS_TO,
       observedSource(),
       targetId,
       ts,
@@ -7281,7 +7368,7 @@ async function handleSpan(ctx, span) {
       if (targetId && targetId !== sourceId) {
         upsertObservedEdge(
           ctx.graph,
-          import_types9.EdgeType.CALLS,
+          import_types10.EdgeType.CALLS,
           observedSource(),
           targetId,
           ts,
@@ -7296,7 +7383,7 @@ async function handleSpan(ctx, span) {
         const frontierNodeId = ensureFrontierNode(ctx.graph, host, ts);
         upsertObservedEdge(
           ctx.graph,
-          import_types9.EdgeType.CALLS,
+          import_types10.EdgeType.CALLS,
           observedSource(),
           frontierNodeId,
           ts,
@@ -7324,7 +7411,7 @@ async function handleSpan(ctx, span) {
         } : void 0;
         upsertObservedEdge(
           ctx.graph,
-          import_types9.EdgeType.CALLS,
+          import_types10.EdgeType.CALLS,
           fallbackSource,
           sourceId,
           ts,
@@ -7346,7 +7433,7 @@ async function handleSpan(ctx, span) {
     );
     if (routeNodeId) {
       const routeSvc = ctx.graph.getNodeAttributes(routeNodeId).service;
-      upsertObservedEdge(ctx.graph, import_types9.EdgeType.CONTAINS, (0, import_types9.serviceId)(routeSvc), routeNodeId, ts, isError, void 0, durationMs, errorDetail);
+      upsertObservedEdge(ctx.graph, import_types10.EdgeType.CONTAINS, (0, import_types10.serviceId)(routeSvc), routeNodeId, ts, isError, void 0, durationMs, errorDetail);
     }
   }
   if (span.statusCode === 2) {
@@ -7376,7 +7463,7 @@ function promoteFrontierNodes(graph, opts = {}) {
   const aliasIndex = /* @__PURE__ */ new Map();
   graph.forEachNode((id, attrs) => {
     const a = attrs;
-    if (a.type !== import_types9.NodeType.ServiceNode) return;
+    if (a.type !== import_types10.NodeType.ServiceNode) return;
     aliasIndex.set(a.name, id);
     if (a.aliases) {
       for (const alias of a.aliases) aliasIndex.set(alias, id);
@@ -7385,7 +7472,7 @@ function promoteFrontierNodes(graph, opts = {}) {
   const toPromote = [];
   graph.forEachNode((id, attrs) => {
     const a = attrs;
-    if (a.type !== import_types9.NodeType.FrontierNode) return;
+    if (a.type !== import_types10.NodeType.FrontierNode) return;
     const target = aliasIndex.get(a.host);
     if (!target) return;
     if (target === id) return;
@@ -7407,15 +7494,15 @@ function promoteFrontierNodes(graph, opts = {}) {
 }
 function stageFrontierEdge(graph, source, target, type) {
   if (!graph.hasNode(source) || !graph.hasNode(target)) return false;
-  if (graph.hasEdge((0, import_types9.observedEdgeId)(source, target, type))) return false;
-  const key = (0, import_types9.frontierEdgeId)(source, target, type);
+  if (graph.hasEdge((0, import_types10.observedEdgeId)(source, target, type))) return false;
+  const key = (0, import_types10.frontierEdgeId)(source, target, type);
   if (graph.hasEdge(key)) return false;
   graph.addEdgeWithKey(key, source, target, {
     id: key,
     source,
     target,
     type,
-    provenance: import_types9.Provenance.FRONTIER
+    provenance: import_types10.Provenance.FRONTIER
   });
   return true;
 }
@@ -7423,8 +7510,8 @@ function promoteFrontierEdges(graph) {
   const graduated = [];
   graph.forEachEdge((edgeId, attrs) => {
     const e = attrs;
-    if (e.provenance !== import_types9.Provenance.FRONTIER) return;
-    if (graph.hasEdge((0, import_types9.observedEdgeId)(e.source, e.target, e.type))) {
+    if (e.provenance !== import_types10.Provenance.FRONTIER) return;
+    if (graph.hasEdge((0, import_types10.observedEdgeId)(e.source, e.target, e.type))) {
       graduated.push(edgeId);
     }
   });
@@ -7445,7 +7532,7 @@ function rewireFrontierEdges(graph, frontierId2, serviceId17) {
 }
 function rebuildEdge(graph, edge, newSource, newTarget, oldEdgeId) {
   graph.dropEdge(oldEdgeId);
-  const newId = edge.provenance === import_types9.Provenance.OBSERVED ? (0, import_types9.observedEdgeId)(newSource, newTarget, edge.type) : edge.provenance === import_types9.Provenance.INFERRED ? (0, import_types9.inferredEdgeId)(newSource, newTarget, edge.type) : (0, import_types9.extractedEdgeId)(newSource, newTarget, edge.type);
+  const newId = edge.provenance === import_types10.Provenance.OBSERVED ? (0, import_types10.observedEdgeId)(newSource, newTarget, edge.type) : edge.provenance === import_types10.Provenance.INFERRED ? (0, import_types10.inferredEdgeId)(newSource, newTarget, edge.type) : (0, import_types10.extractedEdgeId)(newSource, newTarget, edge.type);
   if (graph.hasEdge(newId)) {
     const existing = graph.getEdgeAttributes(newId);
     const merged = {
@@ -7479,12 +7566,12 @@ async function markStaleEdges(graph, options = {}) {
   const project = options.project ?? DEFAULT_PROJECT;
   graph.forEachEdge((id, attrs) => {
     const e = attrs;
-    if (e.provenance !== import_types9.Provenance.OBSERVED) return;
+    if (e.provenance !== import_types10.Provenance.OBSERVED) return;
     if (!e.lastObserved) return;
     const threshold = thresholdForEdgeType(e.type, thresholds);
     const age = now - new Date(e.lastObserved).getTime();
     if (age > threshold) {
-      const updated = { ...e, provenance: import_types9.Provenance.STALE, confidence: 0.3 };
+      const updated = { ...e, provenance: import_types10.Provenance.STALE, confidence: 0.3 };
       graph.replaceEdgeAttributes(id, updated);
       events.push({
         edgeId: id,
@@ -7501,8 +7588,8 @@ async function markStaleEdges(graph, options = {}) {
         project,
         payload: {
           edgeId: id,
-          from: import_types9.Provenance.OBSERVED,
-          to: import_types9.Provenance.STALE
+          from: import_types10.Provenance.OBSERVED,
+          to: import_types10.Provenance.STALE
         }
       });
     }
@@ -7650,6 +7737,7 @@ function describeZodIssues(error2) {
   return error2.issues.map((issue) => issue.path.length > 0 ? `${issue.path.join(".")}: ${issue.message}` : issue.message).join("; ");
 }
 function mergeSnapshot(graph, snapshot) {
+  invalidateSourceBaseline(graph);
   const exported = snapshot.graph;
   const incomingNodes = Array.isArray(exported.nodes) ? exported.nodes : [];
   const incomingEdges = Array.isArray(exported.edges) ? exported.edges : [];
@@ -7658,7 +7746,7 @@ function mergeSnapshot(graph, snapshot) {
   const validEdges = [];
   for (const node of incomingNodes) {
     if (node.attributes === void 0) continue;
-    const parsed = import_types9.GraphNodeSchema.safeParse(node.attributes);
+    const parsed = import_types10.GraphNodeSchema.safeParse(node.attributes);
     if (!parsed.success) {
       issues.push(`node "${node.key}": ${describeZodIssues(parsed.error)}`);
       continue;
@@ -7667,7 +7755,7 @@ function mergeSnapshot(graph, snapshot) {
   }
   for (const edge of incomingEdges) {
     if (edge.attributes === void 0) continue;
-    const parsed = import_types9.GraphEdgeSchema.safeParse(edge.attributes);
+    const parsed = import_types10.GraphEdgeSchema.safeParse(edge.attributes);
     if (!parsed.success) {
       const label = edge.key ?? `${edge.source}->${edge.target}`;
       issues.push(`edge "${label}": ${describeZodIssues(parsed.error)}`);
@@ -7701,7 +7789,7 @@ var import_node_fs21 = require("fs");
 var import_node_path23 = __toESM(require("path"), 1);
 var import_ignore2 = __toESM(require("ignore"), 1);
 var import_minimatch2 = require("minimatch");
-var import_types19 = require("@neat.is/types");
+var import_types20 = require("@neat.is/types");
 
 // src/extract/python.ts
 init_cjs_shims();
@@ -7774,7 +7862,7 @@ function pythonToPackage(service) {
 init_cjs_shims();
 var import_node_fs12 = require("fs");
 var import_node_path13 = __toESM(require("path"), 1);
-var import_types10 = require("@neat.is/types");
+var import_types11 = require("@neat.is/types");
 function parseGoMod(source) {
   const module2 = source.match(/^\s*module\s+(\S+)\s*$/m)?.[1];
   if (!module2) return null;
@@ -7810,8 +7898,8 @@ async function discoverGoService(scanPath, dir) {
   const pkg = { name, dependencies: mod.dependencies };
   const framework = goFramework(mod.dependencies);
   const node = {
-    id: (0, import_types10.serviceId)(name),
-    type: import_types10.NodeType.ServiceNode,
+    id: (0, import_types11.serviceId)(name),
+    type: import_types11.NodeType.ServiceNode,
     name,
     language: "go",
     dependencies: mod.dependencies,
@@ -7825,7 +7913,7 @@ async function discoverGoService(scanPath, dir) {
 init_cjs_shims();
 var import_node_fs13 = require("fs");
 var import_node_path14 = __toESM(require("path"), 1);
-var import_types11 = require("@neat.is/types");
+var import_types12 = require("@neat.is/types");
 function parseGemfile(source) {
   const dependencies = {};
   for (const raw of source.split(/\r?\n/)) {
@@ -7849,8 +7937,8 @@ async function discoverRubyService(scanPath, dir) {
   const name = import_node_path14.default.basename(dir);
   const pkg = { name, dependencies: gemfile.dependencies };
   const node = {
-    id: (0, import_types11.serviceId)(name),
-    type: import_types11.NodeType.ServiceNode,
+    id: (0, import_types12.serviceId)(name),
+    type: import_types12.NodeType.ServiceNode,
     name,
     language: "ruby",
     dependencies: gemfile.dependencies,
@@ -7863,7 +7951,7 @@ async function discoverRubyService(scanPath, dir) {
 // src/extract/php.ts
 init_cjs_shims();
 var import_node_path15 = __toESM(require("path"), 1);
-var import_types12 = require("@neat.is/types");
+var import_types13 = require("@neat.is/types");
 function parseComposerJson(composer) {
   return {
     dependencies: {
@@ -7883,8 +7971,8 @@ async function discoverPhpService(scanPath, dir) {
   const name = import_node_path15.default.basename(dir);
   const pkg = { name, dependencies };
   const node = {
-    id: (0, import_types12.serviceId)(name),
-    type: import_types12.NodeType.ServiceNode,
+    id: (0, import_types13.serviceId)(name),
+    type: import_types13.NodeType.ServiceNode,
     name,
     language: "php",
     dependencies,
@@ -7898,7 +7986,7 @@ async function discoverPhpService(scanPath, dir) {
 init_cjs_shims();
 var import_node_fs14 = require("fs");
 var import_node_path16 = __toESM(require("path"), 1);
-var import_types13 = require("@neat.is/types");
+var import_types14 = require("@neat.is/types");
 var CSHARP_PROJECT_EXTS = /* @__PURE__ */ new Set([".csproj", ".sln"]);
 async function projectFiles(dir) {
   const entries = await import_node_fs14.promises.readdir(dir, { withFileTypes: true }).catch(() => []);
@@ -7945,8 +8033,8 @@ async function discoverCsharpService(scanPath, dir) {
   }
   const pkg = { name, dependencies };
   const node = {
-    id: (0, import_types13.serviceId)(name),
-    type: import_types13.NodeType.ServiceNode,
+    id: (0, import_types14.serviceId)(name),
+    type: import_types14.NodeType.ServiceNode,
     name,
     language: "csharp",
     dependencies,
@@ -7961,7 +8049,7 @@ async function discoverCsharpService(scanPath, dir) {
 init_cjs_shims();
 var import_node_fs15 = require("fs");
 var import_node_path17 = __toESM(require("path"), 1);
-var import_types14 = require("@neat.is/types");
+var import_types15 = require("@neat.is/types");
 var JAVA_MANIFESTS = ["pom.xml", "build.gradle", "build.gradle.kts"];
 async function hasJavaManifest(dir) {
   for (const manifest of JAVA_MANIFESTS) {
@@ -8016,8 +8104,8 @@ async function discoverJavaService(scanPath, dir) {
   const dependencies = manifest.dependencies;
   const pkg = { name, dependencies };
   const node = {
-    id: (0, import_types14.serviceId)(name),
-    type: import_types14.NodeType.ServiceNode,
+    id: (0, import_types15.serviceId)(name),
+    type: import_types15.NodeType.ServiceNode,
     name,
     language: "java",
     dependencies,
@@ -8030,7 +8118,7 @@ async function discoverJavaService(scanPath, dir) {
 init_cjs_shims();
 var import_node_fs16 = require("fs");
 var import_node_path18 = __toESM(require("path"), 1);
-var import_types15 = require("@neat.is/types");
+var import_types16 = require("@neat.is/types");
 var KOTLIN_SOURCE_EXT = ".kt";
 var JAVA_SOURCE_EXT = ".java";
 var SOURCE_PROBE_MAX_DEPTH = 8;
@@ -8081,8 +8169,8 @@ async function discoverKotlinService(scanPath, dir) {
   const dependencies = manifest.dependencies;
   const pkg = { name, dependencies };
   const node = {
-    id: (0, import_types15.serviceId)(name),
-    type: import_types15.NodeType.ServiceNode,
+    id: (0, import_types16.serviceId)(name),
+    type: import_types16.NodeType.ServiceNode,
     name,
     language: "kotlin",
     dependencies,
@@ -8096,7 +8184,7 @@ init_cjs_shims();
 var import_node_fs17 = require("fs");
 var import_node_path19 = __toESM(require("path"), 1);
 var import_smol_toml2 = require("smol-toml");
-var import_types16 = require("@neat.is/types");
+var import_types17 = require("@neat.is/types");
 var CARGO_MANIFEST = "Cargo.toml";
 async function hasRustManifest(dir) {
   return exists(import_node_path19.default.join(dir, CARGO_MANIFEST));
@@ -8131,8 +8219,8 @@ async function discoverRustService(scanPath, dir) {
   const dependencies = manifest.dependencies;
   const pkg = { name, dependencies };
   const node = {
-    id: (0, import_types16.serviceId)(name),
-    type: import_types16.NodeType.ServiceNode,
+    id: (0, import_types17.serviceId)(name),
+    type: import_types17.NodeType.ServiceNode,
     name,
     language: "rust",
     dependencies,
@@ -8145,7 +8233,7 @@ async function discoverRustService(scanPath, dir) {
 init_cjs_shims();
 var import_node_fs18 = require("fs");
 var import_node_path20 = __toESM(require("path"), 1);
-var import_types17 = require("@neat.is/types");
+var import_types18 = require("@neat.is/types");
 var CMAKE_MANIFEST = "CMakeLists.txt";
 async function hasCppManifest(dir) {
   return exists(import_node_path20.default.join(dir, CMAKE_MANIFEST));
@@ -8163,8 +8251,8 @@ async function discoverCppService(scanPath, dir) {
   const dependencies = {};
   const pkg = { name, dependencies };
   const node = {
-    id: (0, import_types17.serviceId)(name),
-    type: import_types17.NodeType.ServiceNode,
+    id: (0, import_types18.serviceId)(name),
+    type: import_types18.NodeType.ServiceNode,
     name,
     language: "cpp",
     dependencies,
@@ -8177,7 +8265,7 @@ async function discoverCppService(scanPath, dir) {
 init_cjs_shims();
 var import_node_fs19 = require("fs");
 var import_node_path21 = __toESM(require("path"), 1);
-var import_types18 = require("@neat.is/types");
+var import_types19 = require("@neat.is/types");
 function languageForSourceExt(ext) {
   switch (ext) {
     case ".py":
@@ -8263,8 +8351,8 @@ async function discoverDockerfileService(scanPath, dir) {
   const name = import_node_path21.default.basename(dir);
   const pkg = { name, dependencies: {} };
   const node = {
-    id: (0, import_types18.serviceId)(name),
-    type: import_types18.NodeType.ServiceNode,
+    id: (0, import_types19.serviceId)(name),
+    type: import_types19.NodeType.ServiceNode,
     name,
     language,
     dependencies: {},
@@ -8458,8 +8546,8 @@ async function discoverNodeService(scanPath, dir) {
   const framework = detectJsFramework(pkg);
   const language = await detectJsServiceLanguage(dir, pkg);
   const node = {
-    id: (0, import_types19.serviceId)(pkg.name),
-    type: import_types19.NodeType.ServiceNode,
+    id: (0, import_types20.serviceId)(pkg.name),
+    type: import_types20.NodeType.ServiceNode,
     name: pkg.name,
     language,
     version: pkg.version,
@@ -8475,8 +8563,8 @@ async function discoverPyService(scanPath, dir) {
   if (!py) return null;
   const pkg = pythonToPackage(py);
   const node = {
-    id: (0, import_types19.serviceId)(py.name),
-    type: import_types19.NodeType.ServiceNode,
+    id: (0, import_types20.serviceId)(py.name),
+    type: import_types20.NodeType.ServiceNode,
     name: py.name,
     language: "python",
     version: py.version,
@@ -8595,7 +8683,7 @@ init_cjs_shims();
 var import_node_path24 = __toESM(require("path"), 1);
 var import_node_fs22 = require("fs");
 var import_yaml2 = require("yaml");
-var import_types20 = require("@neat.is/types");
+var import_types21 = require("@neat.is/types");
 var K8S_KINDS_WITH_HOSTNAMES = /* @__PURE__ */ new Set([
   "Service",
   "Deployment",
@@ -8605,7 +8693,7 @@ var K8S_KINDS_WITH_HOSTNAMES = /* @__PURE__ */ new Set([
 function addAliases(graph, serviceId17, candidates) {
   if (!graph.hasNode(serviceId17)) return;
   const node = graph.getNodeAttributes(serviceId17);
-  if (node.type !== import_types20.NodeType.ServiceNode) return;
+  if (node.type !== import_types21.NodeType.ServiceNode) return;
   const set = new Set(node.aliases ?? []);
   for (const c of candidates) {
     if (!c) continue;
@@ -8795,7 +8883,7 @@ var import_tree_sitter_java = __toESM(require("tree-sitter-java"), 1);
 var import_tree_sitter_kotlin = __toESM(require("tree-sitter-kotlin"), 1);
 var import_tree_sitter_rust2 = __toESM(require("tree-sitter-rust"), 1);
 var import_tree_sitter_cpp = __toESM(require("tree-sitter-cpp"), 1);
-var import_types21 = require("@neat.is/types");
+var import_types22 = require("@neat.is/types");
 var PARSE_CHUNK3 = 16384;
 var GRAMMAR_BY_EXT = {
   ".ts": import_tree_sitter_typescript.default.typescript,
@@ -8848,7 +8936,9 @@ function collectSymbolDefs(root) {
       kind,
       qualname,
       startLine: node.startPosition.row + 1,
-      endLine: node.endPosition.row + 1
+      endLine: node.endPosition.row + 1,
+      startIndex: node.startIndex,
+      endIndex: node.endIndex
     });
   };
   const visit = (node, classCtx) => {
@@ -8907,7 +8997,9 @@ function collectPythonSymbolDefs(root) {
       kind,
       qualname,
       startLine: node.startPosition.row + 1,
-      endLine: node.endPosition.row + 1
+      endLine: node.endPosition.row + 1,
+      startIndex: node.startIndex,
+      endIndex: node.endIndex
     });
   };
   const visit = (node, classCtx) => {
@@ -8980,7 +9072,9 @@ function collectGoSymbolDefs(root) {
       kind,
       qualname,
       startLine: node.startPosition.row + 1,
-      endLine: node.endPosition.row + 1
+      endLine: node.endPosition.row + 1,
+      startIndex: node.startIndex,
+      endIndex: node.endIndex
     });
   };
   const visit = (node) => {
@@ -9014,7 +9108,9 @@ function collectRubySymbolDefs(root) {
       kind,
       qualname,
       startLine: node.startPosition.row + 1,
-      endLine: node.endPosition.row + 1
+      endLine: node.endPosition.row + 1,
+      startIndex: node.startIndex,
+      endIndex: node.endIndex
     });
   };
   const nameText = (node) => node.childForFieldName("name")?.text.replace(/::/g, ".");
@@ -9065,7 +9161,9 @@ function collectPhpSymbolDefs(root) {
       kind,
       qualname,
       startLine: node.startPosition.row + 1,
-      endLine: node.endPosition.row + 1
+      endLine: node.endPosition.row + 1,
+      startIndex: node.startIndex,
+      endIndex: node.endIndex
     });
   };
   const dot = (s) => s.replace(/\\/g, ".").replace(/::/g, ".").replace(/^\.+/, "");
@@ -9131,7 +9229,9 @@ function collectCsharpSymbolDefs(root) {
       kind,
       qualname,
       startLine: node.startPosition.row + 1,
-      endLine: node.endPosition.row + 1
+      endLine: node.endPosition.row + 1,
+      startIndex: node.startIndex,
+      endIndex: node.endIndex
     });
   };
   const join2 = (prefix, name) => prefix ? `${prefix}.${name}` : name;
@@ -9193,7 +9293,9 @@ function collectJavaSymbolDefs(root) {
       kind,
       qualname,
       startLine: node.startPosition.row + 1,
-      endLine: node.endPosition.row + 1
+      endLine: node.endPosition.row + 1,
+      startIndex: node.startIndex,
+      endIndex: node.endIndex
     });
   };
   const join2 = (prefix, name) => prefix ? `${prefix}.${name}` : name;
@@ -9250,7 +9352,9 @@ function collectKotlinSymbolDefs(root) {
       kind,
       qualname,
       startLine: node.startPosition.row + 1,
-      endLine: node.endPosition.row + 1
+      endLine: node.endPosition.row + 1,
+      startIndex: node.startIndex,
+      endIndex: node.endIndex
     });
   };
   const join2 = (prefix, name) => prefix ? `${prefix}.${name}` : name;
@@ -9320,7 +9424,9 @@ function collectRustSymbolDefs(root) {
       kind,
       qualname,
       startLine: node.startPosition.row + 1,
-      endLine: node.endPosition.row + 1
+      endLine: node.endPosition.row + 1,
+      startIndex: node.startIndex,
+      endIndex: node.endIndex
     });
   };
   const join2 = (prefix, name) => prefix ? `${prefix}::${name}` : name;
@@ -9388,7 +9494,9 @@ function collectCppSymbolDefs(root) {
       kind,
       qualname,
       startLine: node.startPosition.row + 1,
-      endLine: node.endPosition.row + 1
+      endLine: node.endPosition.row + 1,
+      startIndex: node.startIndex,
+      endIndex: node.endIndex
     });
   };
   const join2 = (prefix, name) => prefix ? `${prefix}::${name}` : name;
@@ -9516,6 +9624,22 @@ function disambiguate(defs) {
     return { def, disambiguator: ordinal };
   });
 }
+function utf8Offsets(content, defs) {
+  if (content.includes("\uFFFD")) return /* @__PURE__ */ new Map();
+  const indices = [...new Set(defs.flatMap(({ startIndex, endIndex }) => [startIndex, endIndex]))].sort(
+    (a, b) => a - b
+  );
+  const offsets = /* @__PURE__ */ new Map();
+  let cursor = 0;
+  let bytes = 0;
+  for (const index of indices) {
+    if (index < cursor || index > content.length) return /* @__PURE__ */ new Map();
+    bytes += Buffer.byteLength(content.slice(cursor, index), "utf8");
+    offsets.set(index, bytes);
+    cursor = index;
+  }
+  return offsets;
+}
 async function addSymbols(graph, services) {
   const parsers = /* @__PURE__ */ new Map();
   const parserForExt5 = (ext) => {
@@ -9539,47 +9663,59 @@ async function addSymbols(graph, services) {
       if (!parser) continue;
       const relPath = toPosix(import_node_path26.default.relative(service.dir, file.path));
       let defs;
+      let completeParse;
       try {
         const tree = parseSource3(parser, file.content);
         defs = collectSymbolDefsForExt(ext, tree.rootNode);
+        completeParse = !tree.rootNode.hasError;
       } catch (err) {
         recordExtractionError("symbol extraction", file.path, err);
         continue;
       }
       if (defs.length === 0) continue;
-      const { fileNodeId, nodesAdded: fn, edgesAdded: fe } = ensureFileNode(
-        graph,
-        service.pkg.name,
-        service.node.id,
-        relPath
-      );
+      const offsets = completeParse ? utf8Offsets(file.content, defs) : /* @__PURE__ */ new Map();
+      const {
+        fileNodeId,
+        nodesAdded: fn,
+        edgesAdded: fe
+      } = ensureFileNode(graph, service.pkg.name, service.node.id, relPath);
       nodesAdded += fn;
       edgesAdded += fe;
       for (const { def, disambiguator } of disambiguate(defs)) {
-        const sid = (0, import_types21.symbolId)(service.pkg.name, relPath, def.qualname, disambiguator);
+        const sid = (0, import_types22.symbolId)(service.pkg.name, relPath, def.qualname, disambiguator);
+        const startByte = offsets.get(def.startIndex);
+        const endByte = offsets.get(def.endIndex);
+        const precise = startByte !== void 0 && endByte !== void 0 && endByte > startByte ? { startByte, endByte } : {};
+        const node = {
+          id: sid,
+          type: import_types22.NodeType.SymbolNode,
+          kind: def.kind,
+          qualname: def.qualname,
+          span: { startLine: def.startLine, endLine: def.endLine, ...precise },
+          service: service.pkg.name,
+          relPath,
+          discoveredVia: "static"
+        };
         if (!graph.hasNode(sid)) {
-          const node = {
-            id: sid,
-            type: import_types21.NodeType.SymbolNode,
-            kind: def.kind,
-            qualname: def.qualname,
-            span: { startLine: def.startLine, endLine: def.endLine },
-            service: service.pkg.name,
-            relPath,
-            discoveredVia: "static"
-          };
           graph.addNode(sid, node);
           nodesAdded++;
+        } else {
+          const previous = graph.getNodeAttributes(sid);
+          const discoveredVia = previous.discoveredVia === "otel" || previous.discoveredVia === "merged" ? "merged" : "static";
+          const moved = previous.span.startLine !== node.span.startLine || previous.span.endLine !== node.span.endLine || previous.span.startByte !== node.span.startByte || previous.span.endByte !== node.span.endByte;
+          if (moved || previous.kind !== node.kind || previous.qualname !== node.qualname || previous.discoveredVia !== discoveredVia || previous.service !== node.service || previous.relPath !== node.relPath) {
+            graph.replaceNodeAttributes(sid, { ...previous, ...node, discoveredVia });
+          }
         }
-        const containsId = (0, import_types21.extractedEdgeId)(fileNodeId, sid, import_types21.EdgeType.CONTAINS);
+        const containsId = (0, import_types22.extractedEdgeId)(fileNodeId, sid, import_types22.EdgeType.CONTAINS);
         if (!graph.hasEdge(containsId)) {
           const edge = {
             id: containsId,
             source: fileNodeId,
             target: sid,
-            type: import_types21.EdgeType.CONTAINS,
-            provenance: import_types21.Provenance.EXTRACTED,
-            confidence: (0, import_types21.confidenceForExtracted)("structural"),
+            type: import_types22.EdgeType.CONTAINS,
+            provenance: import_types22.Provenance.EXTRACTED,
+            confidence: (0, import_types22.confidenceForExtracted)("structural"),
             evidence: {
               file: relPath,
               line: def.startLine,
@@ -9599,7 +9735,7 @@ async function addSymbols(graph, services) {
 init_cjs_shims();
 var import_node_path27 = __toESM(require("path"), 1);
 var import_tree_sitter4 = __toESM(require("tree-sitter"), 1);
-var import_types22 = require("@neat.is/types");
+var import_types23 = require("@neat.is/types");
 function extendsInfo(classHeritage) {
   for (let i = 0; i < classHeritage.namedChildCount; i++) {
     const child = classHeritage.namedChild(i);
@@ -9717,7 +9853,7 @@ async function addSymbolEdges(graph, services) {
       }
       const disambiguated = disambiguate(collectSymbolDefs(root));
       const locals = disambiguated.map(({ def, disambiguator }) => ({
-        sid: (0, import_types22.symbolId)(serviceName, relPath, def.qualname, disambiguator),
+        sid: (0, import_types23.symbolId)(serviceName, relPath, def.qualname, disambiguator),
         qualname: def.qualname,
         kind: def.kind,
         startLine: def.startLine,
@@ -9746,10 +9882,10 @@ async function addSymbolEdges(graph, services) {
         if (local) return local.kind === wantKind ? local.sid : null;
         const imp = resolvedImports.get(name);
         if (imp) {
-          const candidate = (0, import_types22.symbolId)(serviceName, imp.targetRelPath, imp.importedName);
+          const candidate = (0, import_types23.symbolId)(serviceName, imp.targetRelPath, imp.importedName);
           if (graph.hasNode(candidate)) {
             const node = graph.getNodeAttributes(candidate);
-            if (node.type === import_types22.NodeType.SymbolNode && node.kind === wantKind) return candidate;
+            if (node.type === import_types23.NodeType.SymbolNode && node.kind === wantKind) return candidate;
           }
         }
         return null;
@@ -9776,7 +9912,7 @@ async function addSymbolEdges(graph, services) {
                   sourceSid: self.sid,
                   targetName: ext.name,
                   wantKind: "class",
-                  edgeType: import_types22.EdgeType.INHERITS,
+                  edgeType: import_types23.EdgeType.INHERITS,
                   line: ext.line
                 });
               }
@@ -9785,7 +9921,7 @@ async function addSymbolEdges(graph, services) {
                   sourceSid: self.sid,
                   targetName: impl.name,
                   wantKind: "class",
-                  edgeType: import_types22.EdgeType.IMPLEMENTS,
+                  edgeType: import_types23.EdgeType.IMPLEMENTS,
                   line: impl.line
                 });
               }
@@ -9801,7 +9937,7 @@ async function addSymbolEdges(graph, services) {
                 sourceSid: caller.sid,
                 targetName: fn.text,
                 wantKind: "function",
-                edgeType: import_types22.EdgeType.CALLS,
+                edgeType: import_types23.EdgeType.CALLS,
                 line
               });
             }
@@ -9817,15 +9953,15 @@ async function addSymbolEdges(graph, services) {
         const targetSid = resolveTarget(req.targetName, req.wantKind);
         if (!targetSid) continue;
         if (targetSid === req.sourceSid) continue;
-        const edgeId = (0, import_types22.extractedEdgeId)(req.sourceSid, targetSid, req.edgeType);
+        const edgeId = (0, import_types23.extractedEdgeId)(req.sourceSid, targetSid, req.edgeType);
         if (graph.hasEdge(edgeId)) continue;
         const edge = {
           id: edgeId,
           source: req.sourceSid,
           target: targetSid,
           type: req.edgeType,
-          provenance: import_types22.Provenance.EXTRACTED,
-          confidence: (0, import_types22.confidenceForExtracted)("structural"),
+          provenance: import_types23.Provenance.EXTRACTED,
+          confidence: (0, import_types23.confidenceForExtracted)("structural"),
           evidence: {
             file: relPath,
             line: req.line,
@@ -9844,7 +9980,7 @@ async function addSymbolEdges(graph, services) {
 init_cjs_shims();
 var import_node_path28 = __toESM(require("path"), 1);
 var import_tree_sitter5 = __toESM(require("tree-sitter"), 1);
-var import_types23 = require("@neat.is/types");
+var import_types24 = require("@neat.is/types");
 function stringLiteralText2(node) {
   for (let i = 0; i < node.childCount; i++) {
     const child = node.child(i);
@@ -10014,11 +10150,11 @@ async function addServerActions(graph, services) {
       nodesAdded += fn;
       edgesAdded += fe;
       for (const action of actions) {
-        const aid = (0, import_types23.serverActionId)(service.pkg.name, relPath, action.exportName);
+        const aid = (0, import_types24.serverActionId)(service.pkg.name, relPath, action.exportName);
         if (!graph.hasNode(aid)) {
           const node = {
             id: aid,
-            type: import_types23.NodeType.ServerActionNode,
+            type: import_types24.NodeType.ServerActionNode,
             name: action.exportName,
             service: service.pkg.name,
             module: relPath,
@@ -10030,15 +10166,15 @@ async function addServerActions(graph, services) {
           graph.addNode(aid, node);
           nodesAdded++;
         }
-        const containsId = (0, import_types23.extractedEdgeId)(fileNodeId, aid, import_types23.EdgeType.CONTAINS);
+        const containsId = (0, import_types24.extractedEdgeId)(fileNodeId, aid, import_types24.EdgeType.CONTAINS);
         if (!graph.hasEdge(containsId)) {
           const edge = {
             id: containsId,
             source: fileNodeId,
             target: aid,
-            type: import_types23.EdgeType.CONTAINS,
-            provenance: import_types23.Provenance.EXTRACTED,
-            confidence: (0, import_types23.confidenceForExtracted)("structural"),
+            type: import_types24.EdgeType.CONTAINS,
+            provenance: import_types24.Provenance.EXTRACTED,
+            confidence: (0, import_types24.confidenceForExtracted)("structural"),
             evidence: {
               file: relPath,
               line: action.line,
@@ -10068,7 +10204,7 @@ async function addServerActions(graph, services) {
       for (const [local, binding] of bindings) {
         const target = await resolveJsImport(binding.specifier, fileDir, service.dir, tsPaths);
         if (!target) continue;
-        const aid = (0, import_types23.serverActionId)(service.pkg.name, target, binding.importedName);
+        const aid = (0, import_types24.serverActionId)(service.pkg.name, target, binding.importedName);
         if (graph.hasNode(aid)) actionBindings.set(local, aid);
       }
       if (actionBindings.size === 0) continue;
@@ -10083,15 +10219,15 @@ async function addServerActions(graph, services) {
           nodesAdded += ensured.nodesAdded;
           edgesAdded += ensured.edgesAdded;
         }
-        const callsId = (0, import_types23.extractedEdgeId)(clientFileId, aid, import_types23.EdgeType.CALLS);
+        const callsId = (0, import_types24.extractedEdgeId)(clientFileId, aid, import_types24.EdgeType.CALLS);
         if (graph.hasEdge(callsId)) continue;
         const edge = {
           id: callsId,
           source: clientFileId,
           target: aid,
-          type: import_types23.EdgeType.CALLS,
-          provenance: import_types23.Provenance.EXTRACTED,
-          confidence: (0, import_types23.confidenceForExtracted)("structural"),
+          type: import_types24.EdgeType.CALLS,
+          provenance: import_types24.Provenance.EXTRACTED,
+          confidence: (0, import_types24.confidenceForExtracted)("structural"),
           evidence: {
             file: relPath,
             line,
@@ -10109,7 +10245,7 @@ async function addServerActions(graph, services) {
 // src/extract/databases/index.ts
 init_cjs_shims();
 var import_node_path37 = __toESM(require("path"), 1);
-var import_types24 = require("@neat.is/types");
+var import_types25 = require("@neat.is/types");
 
 // src/extract/databases/db-config-yaml.ts
 init_cjs_shims();
@@ -10768,8 +10904,8 @@ function compatibleDriversFor(engine) {
 }
 function toDatabaseNode(config) {
   return {
-    id: (0, import_types24.databaseId)(config.host),
-    type: import_types24.NodeType.DatabaseNode,
+    id: (0, import_types25.databaseId)(config.host),
+    type: import_types25.NodeType.DatabaseNode,
     name: config.database || config.host,
     engine: config.engine,
     engineVersion: config.engineVersion,
@@ -10910,12 +11046,12 @@ async function addDatabasesAndCompat(graph, services, scanPath) {
       edgesAdded += fe;
       const evidenceFile = toPosix(import_node_path37.default.relative(scanPath, config.sourceFile));
       const edge = {
-        id: (0, import_types4.extractedEdgeId)(fileNodeId, dbNode.id, import_types24.EdgeType.CONNECTS_TO),
+        id: (0, import_types4.extractedEdgeId)(fileNodeId, dbNode.id, import_types25.EdgeType.CONNECTS_TO),
         source: fileNodeId,
         target: dbNode.id,
-        type: import_types24.EdgeType.CONNECTS_TO,
-        provenance: import_types24.Provenance.EXTRACTED,
-        confidence: (0, import_types24.confidenceForExtracted)("structural"),
+        type: import_types25.EdgeType.CONNECTS_TO,
+        provenance: import_types25.Provenance.EXTRACTED,
+        confidence: (0, import_types25.confidenceForExtracted)("structural"),
         // Carry how the host was recovered (ADR-213) so the divergence ranker
         // can tell a real declared store from a hardcoded fault-injection /
         // flag-gated probe. Only set when the parser distinguished the two.
@@ -10930,11 +11066,11 @@ async function addDatabasesAndCompat(graph, services, scanPath) {
       const primary = allConfigs[0];
       service.node.dbConnectionTarget = primary.port ? `${primary.host}:${primary.port}` : primary.host;
       const relPath = import_node_path37.default.relative(scanPath, primary.sourceFile);
-      const cfgId = (0, import_types24.configId)(relPath);
+      const cfgId = (0, import_types25.configId)(relPath);
       if (!graph.hasNode(cfgId)) {
         const cfgNode = {
           id: cfgId,
-          type: import_types24.NodeType.ConfigNode,
+          type: import_types25.NodeType.ConfigNode,
           name: import_node_path37.default.basename(primary.sourceFile),
           path: relPath,
           fileType: isConfigFile(import_node_path37.default.basename(primary.sourceFile)).fileType || "config"
@@ -10943,12 +11079,12 @@ async function addDatabasesAndCompat(graph, services, scanPath) {
         nodesAdded++;
       }
       const cfgEdge = {
-        id: (0, import_types4.extractedEdgeId)(service.node.id, cfgId, import_types24.EdgeType.CONFIGURED_BY),
+        id: (0, import_types4.extractedEdgeId)(service.node.id, cfgId, import_types25.EdgeType.CONFIGURED_BY),
         source: service.node.id,
         target: cfgId,
-        type: import_types24.EdgeType.CONFIGURED_BY,
-        provenance: import_types24.Provenance.EXTRACTED,
-        confidence: (0, import_types24.confidenceForExtracted)("structural"),
+        type: import_types25.EdgeType.CONFIGURED_BY,
+        provenance: import_types25.Provenance.EXTRACTED,
+        confidence: (0, import_types25.confidenceForExtracted)("structural"),
         evidence: { file: toPosix(relPath) }
       };
       if (!graph.hasEdge(cfgEdge.id)) {
@@ -10980,7 +11116,7 @@ async function addDatabasesAndCompat(graph, services, scanPath) {
 init_cjs_shims();
 var import_node_fs26 = require("fs");
 var import_node_path38 = __toESM(require("path"), 1);
-var import_types25 = require("@neat.is/types");
+var import_types26 = require("@neat.is/types");
 async function walkConfigFiles(dir, excludeDirs = []) {
   const excluded = new Set(excludeDirs.map((d) => import_node_path38.default.resolve(d)));
   const out = [];
@@ -11009,8 +11145,8 @@ async function addConfigNodes(graph, services, scanPath) {
     for (const file of configFiles) {
       const relPath = import_node_path38.default.relative(scanPath, file);
       const node = {
-        id: (0, import_types25.configId)(relPath),
-        type: import_types25.NodeType.ConfigNode,
+        id: (0, import_types26.configId)(relPath),
+        type: import_types26.NodeType.ConfigNode,
         name: import_node_path38.default.basename(file),
         path: relPath,
         fileType: isConfigFile(import_node_path38.default.basename(file)).fileType
@@ -11029,12 +11165,12 @@ async function addConfigNodes(graph, services, scanPath) {
       nodesAdded += fn;
       edgesAdded += fe;
       const edge = {
-        id: (0, import_types4.extractedEdgeId)(fileNodeId, node.id, import_types25.EdgeType.CONFIGURED_BY),
+        id: (0, import_types4.extractedEdgeId)(fileNodeId, node.id, import_types26.EdgeType.CONFIGURED_BY),
         source: fileNodeId,
         target: node.id,
-        type: import_types25.EdgeType.CONFIGURED_BY,
-        provenance: import_types25.Provenance.EXTRACTED,
-        confidence: (0, import_types25.confidenceForExtracted)("structural"),
+        type: import_types26.EdgeType.CONFIGURED_BY,
+        provenance: import_types26.Provenance.EXTRACTED,
+        confidence: (0, import_types26.confidenceForExtracted)("structural"),
         evidence: { file: relPath.split(import_node_path38.default.sep).join("/") }
       };
       if (!graph.hasEdge(edge.id)) {
@@ -11050,7 +11186,7 @@ async function addConfigNodes(graph, services, scanPath) {
 init_cjs_shims();
 var import_node_fs27 = require("fs");
 var import_node_path39 = __toESM(require("path"), 1);
-var import_types26 = require("@neat.is/types");
+var import_types27 = require("@neat.is/types");
 var PROTO_EXTENSION = ".proto";
 function packageOf(content) {
   const m = content.match(/^\s*package\s+([A-Za-z_][A-Za-z0-9_.]*)\s*;/m);
@@ -11130,11 +11266,11 @@ async function addGrpcMethods(graph, services) {
       }
       if (methods.length === 0) continue;
       for (const method of methods) {
-        const mid = (0, import_types26.grpcMethodId)(method.rpcService, method.rpcMethod);
+        const mid = (0, import_types27.grpcMethodId)(method.rpcService, method.rpcMethod);
         if (!graph.hasNode(mid)) {
           const node = {
             id: mid,
-            type: import_types26.NodeType.GrpcMethodNode,
+            type: import_types27.NodeType.GrpcMethodNode,
             name: `${method.rpcService}/${method.rpcMethod}`,
             rpcService: method.rpcService,
             rpcMethod: method.rpcMethod,
@@ -11145,15 +11281,15 @@ async function addGrpcMethods(graph, services) {
           graph.addNode(mid, node);
           nodesAdded++;
         }
-        const containsId = (0, import_types26.extractedEdgeId)(service.node.id, mid, import_types26.EdgeType.CONTAINS);
+        const containsId = (0, import_types27.extractedEdgeId)(service.node.id, mid, import_types27.EdgeType.CONTAINS);
         if (!graph.hasEdge(containsId)) {
           const edge = {
             id: containsId,
             source: service.node.id,
             target: mid,
-            type: import_types26.EdgeType.CONTAINS,
-            provenance: import_types26.Provenance.EXTRACTED,
-            confidence: (0, import_types26.confidenceForExtracted)("structural"),
+            type: import_types27.EdgeType.CONTAINS,
+            provenance: import_types27.Provenance.EXTRACTED,
+            confidence: (0, import_types27.confidenceForExtracted)("structural"),
             evidence: {
               file: relFile,
               line: method.line,
@@ -11171,7 +11307,7 @@ async function addGrpcMethods(graph, services) {
 
 // src/extract/calls/index.ts
 init_cjs_shims();
-var import_types46 = require("@neat.is/types");
+var import_types47 = require("@neat.is/types");
 
 // src/extract/calls/http.ts
 init_cjs_shims();
@@ -11180,7 +11316,7 @@ var import_tree_sitter6 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_javascript4 = __toESM(require("tree-sitter-javascript"), 1);
 var import_tree_sitter_typescript2 = __toESM(require("tree-sitter-typescript"), 1);
 var import_tree_sitter_python4 = __toESM(require("tree-sitter-python"), 1);
-var import_types27 = require("@neat.is/types");
+var import_types28 = require("@neat.is/types");
 var STRING_LITERAL_NODE_TYPES = /* @__PURE__ */ new Set(["string_fragment", "string_content"]);
 var JSX_EXTERNAL_LINK_TAGS = /* @__PURE__ */ new Set(["a", "Link", "NavLink", "ExternalLink", "Anchor"]);
 function isInsideJsxExternalLink(node) {
@@ -11274,7 +11410,7 @@ async function addHttpCallEdges(graph, services) {
         const dedupKey = `${relFile}|${targetId}`;
         if (seen.has(dedupKey)) continue;
         seen.add(dedupKey);
-        const confidence = (0, import_types27.confidenceForExtracted)("url-literal-service-target");
+        const confidence = (0, import_types28.confidenceForExtracted)("url-literal-service-target");
         const ev = {
           file: relFile,
           line: site.line,
@@ -11288,25 +11424,25 @@ async function addHttpCallEdges(graph, services) {
         );
         nodesAdded += n;
         edgesAdded += e;
-        if (!(0, import_types27.passesExtractedFloor)(confidence)) {
+        if (!(0, import_types28.passesExtractedFloor)(confidence)) {
           noteExtractedDropped({
             source: fileNodeId,
             target: targetId,
-            type: import_types27.EdgeType.CALLS,
+            type: import_types28.EdgeType.CALLS,
             confidence,
             confidenceKind: "url-literal-service-target",
             evidence: ev
           });
           continue;
         }
-        const edgeId = (0, import_types4.extractedEdgeId)(fileNodeId, targetId, import_types27.EdgeType.CALLS);
+        const edgeId = (0, import_types4.extractedEdgeId)(fileNodeId, targetId, import_types28.EdgeType.CALLS);
         if (!graph.hasEdge(edgeId)) {
           const edge = {
             id: edgeId,
             source: fileNodeId,
             target: targetId,
-            type: import_types27.EdgeType.CALLS,
-            provenance: import_types27.Provenance.EXTRACTED,
+            type: import_types28.EdgeType.CALLS,
+            provenance: import_types28.Provenance.EXTRACTED,
             confidence,
             evidence: ev
           };
@@ -11324,7 +11460,7 @@ init_cjs_shims();
 var import_node_path41 = __toESM(require("path"), 1);
 var import_tree_sitter7 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_javascript5 = __toESM(require("tree-sitter-javascript"), 1);
-var import_types28 = require("@neat.is/types");
+var import_types29 = require("@neat.is/types");
 var PARSE_CHUNK5 = 16384;
 function parseSource5(parser, source) {
   return parser.parse(
@@ -11568,9 +11704,9 @@ function buildRouteIndex(graph) {
   const index = /* @__PURE__ */ new Map();
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types28.NodeType.RouteNode) return;
+    if (node.type !== import_types29.NodeType.RouteNode) return;
     const route = attrs;
-    const owner = (0, import_types28.serviceId)(route.service);
+    const owner = (0, import_types29.serviceId)(route.service);
     const entry2 = {
       method: route.method.toUpperCase(),
       normalizedPath: normalizePathTemplate(route.pathTemplate),
@@ -11625,8 +11761,8 @@ async function addRouteCallEdges(graph, services) {
           noteExtractedDropped({
             source: fileNodeId2,
             target: "route:unresolved",
-            type: import_types28.EdgeType.CALLS,
-            confidence: (0, import_types28.confidenceForExtracted)("reconstructed-approximate"),
+            type: import_types29.EdgeType.CALLS,
+            confidence: (0, import_types29.confidenceForExtracted)("reconstructed-approximate"),
             confidenceKind: "reconstructed-approximate",
             evidence: {
               file: relFile,
@@ -11659,7 +11795,7 @@ async function addRouteCallEdges(graph, services) {
         edgesAdded += e;
         const anchored = pathHasLiteralAnchor(site.pathTemplate);
         const confidenceKind = site.approximate && !anchored ? "reconstructed-approximate" : "verified-call-site";
-        const confidence = (0, import_types28.confidenceForExtracted)(confidenceKind);
+        const confidence = (0, import_types29.confidenceForExtracted)(confidenceKind);
         const ev = {
           file: relFile,
           line: site.line,
@@ -11668,25 +11804,25 @@ async function addRouteCallEdges(graph, services) {
           pathTemplate: site.pathTemplate,
           ...confidenceKind === "reconstructed-approximate" ? { approximate: true, reason: site.reason } : {}
         };
-        if (!(0, import_types28.passesExtractedFloor)(confidence)) {
+        if (!(0, import_types29.passesExtractedFloor)(confidence)) {
           noteExtractedDropped({
             source: fileNodeId,
             target: match.routeNodeId,
-            type: import_types28.EdgeType.CALLS,
+            type: import_types29.EdgeType.CALLS,
             confidence,
             confidenceKind,
             evidence: ev
           });
           continue;
         }
-        const edgeId = (0, import_types4.extractedEdgeId)(fileNodeId, match.routeNodeId, import_types28.EdgeType.CALLS);
+        const edgeId = (0, import_types4.extractedEdgeId)(fileNodeId, match.routeNodeId, import_types29.EdgeType.CALLS);
         if (!graph.hasEdge(edgeId)) {
           const edge = {
             id: edgeId,
             source: fileNodeId,
             target: match.routeNodeId,
-            type: import_types28.EdgeType.CALLS,
-            provenance: import_types28.Provenance.EXTRACTED,
+            type: import_types29.EdgeType.CALLS,
+            provenance: import_types29.Provenance.EXTRACTED,
             confidence,
             evidence: ev
           };
@@ -11702,7 +11838,7 @@ async function addRouteCallEdges(graph, services) {
 // src/extract/calls/kafka.ts
 init_cjs_shims();
 var import_node_path42 = __toESM(require("path"), 1);
-var import_types29 = require("@neat.is/types");
+var import_types30 = require("@neat.is/types");
 var PRODUCER_TOPIC_RE = /(?:producer|kafkaProducer)[\s\S]{0,40}?\.send\s*\(\s*\{[\s\S]{0,200}?topic\s*:\s*['"`]([^'"`]+)['"`]/g;
 var CONSUMER_TOPIC_RE = /(?:consumer|kafkaConsumer)[\s\S]{0,40}?\.(?:subscribe|run)\s*\(\s*\{[\s\S]{0,200}?topic[s]?\s*:\s*(?:\[\s*)?['"`]([^'"`]+)['"`]/g;
 var SARAMA_IMPORT_RE = /"[^"]*\/sarama"/;
@@ -11779,7 +11915,7 @@ function kafkaEndpointsFromFile(file, serviceDir) {
     seen.add(key);
     const line = anchor !== void 0 ? file.content.slice(0, anchor).split("\n").length : lineOf(file.content, topic);
     out.push({
-      infraId: (0, import_types29.infraId)("kafka-topic", topic),
+      infraId: (0, import_types30.infraId)("kafka-topic", topic),
       name: topic,
       kind: "kafka-topic",
       edgeType,
@@ -11807,7 +11943,7 @@ function kafkaEndpointsFromFile(file, serviceDir) {
 // src/extract/calls/redis.ts
 init_cjs_shims();
 var import_node_path43 = __toESM(require("path"), 1);
-var import_types30 = require("@neat.is/types");
+var import_types31 = require("@neat.is/types");
 var REDIS_URL_RE = /redis(?:s)?:\/\/(?:[^@'"`\s]+@)?([^:/'"`\s]+)(?::(\d+))?/g;
 function redisEndpointsFromFile(file, serviceDir) {
   const out = [];
@@ -11820,7 +11956,7 @@ function redisEndpointsFromFile(file, serviceDir) {
     seen.add(host);
     const line = lineOf(file.content, host);
     out.push({
-      infraId: (0, import_types30.infraId)("redis", host),
+      infraId: (0, import_types31.infraId)("redis", host),
       name: host,
       kind: "redis",
       edgeType: "CALLS",
@@ -11841,7 +11977,7 @@ function redisEndpointsFromFile(file, serviceDir) {
 // src/extract/calls/aws.ts
 init_cjs_shims();
 var import_node_path44 = __toESM(require("path"), 1);
-var import_types31 = require("@neat.is/types");
+var import_types32 = require("@neat.is/types");
 var S3_BUCKET_RE = /Bucket\s*:\s*['"`]([^'"`]+)['"`]/g;
 var DYNAMO_TABLE_RE = /TableName\s*:\s*['"`]([^'"`]+)['"`]/g;
 function hasMarker(text, markers) {
@@ -11865,7 +12001,7 @@ function awsEndpointsFromFile(file, serviceDir) {
     seen.add(key);
     const line = lineOf(file.content, name);
     out.push({
-      infraId: (0, import_types31.infraId)(kind, name),
+      infraId: (0, import_types32.infraId)(kind, name),
       name,
       kind,
       edgeType: "CALLS",
@@ -11900,7 +12036,7 @@ function awsEndpointsFromFile(file, serviceDir) {
 // src/extract/calls/grpc.ts
 init_cjs_shims();
 var import_node_path45 = __toESM(require("path"), 1);
-var import_types32 = require("@neat.is/types");
+var import_types33 = require("@neat.is/types");
 var GRPC_CLIENT_RE = /new\s+([A-Z][A-Za-z0-9_]*)Client\s*\(\s*['"`]?([^,'"`)]+)?/g;
 var AWS_SDK_IMPORT_RE = /(?:from\s+['"`]|require\(\s*['"`])@aws-sdk\/client-([a-z0-9-]+)['"`]/g;
 var GRPC_IMPORT_RE = /(?:from\s+['"`]|require\(\s*['"`])@grpc\/grpc-js['"`]|_grpc_pb['"`]/;
@@ -11949,7 +12085,7 @@ function grpcEndpointsFromFile(file, serviceDir) {
     const { kind } = classified;
     const line = lineOf(file.content, m[0]);
     out.push({
-      infraId: (0, import_types32.infraId)(kind, name),
+      infraId: (0, import_types33.infraId)(kind, name),
       name,
       kind,
       edgeType: "CALLS",
@@ -11970,7 +12106,7 @@ function grpcEndpointsFromFile(file, serviceDir) {
 // src/extract/calls/supabase.ts
 init_cjs_shims();
 var import_node_path46 = __toESM(require("path"), 1);
-var import_types33 = require("@neat.is/types");
+var import_types34 = require("@neat.is/types");
 var SUPABASE_JS_IMPORT_RE = /(?:from\s+['"`]|require\(\s*['"`])@supabase\/supabase-js['"`]/;
 var SUPABASE_SSR_IMPORT_RE = /(?:from\s+['"`]|require\(\s*['"`])@supabase\/ssr['"`]/;
 var SUPABASE_CLIENT_RE = /\b(createClient|createServerClient|createBrowserClient)\s*\(\s*(?:['"`]([^'"`]*)['"`])?/g;
@@ -12018,7 +12154,7 @@ function supabaseEndpointsFromFile(file, serviceDir) {
     seen.add(name);
     const line = lineOf(file.content, m[0]);
     out.push({
-      infraId: (0, import_types33.infraId)("supabase", name),
+      infraId: (0, import_types34.infraId)("supabase", name),
       name,
       kind: "supabase",
       edgeType: "CALLS",
@@ -12049,7 +12185,7 @@ function supabaseEndpointsFromFile(file, serviceDir) {
       seen.add(key);
       const line = lineOf(file.content, am[0]);
       out.push({
-        infraId: (0, import_types33.infraId)(kind, resource),
+        infraId: (0, import_types34.infraId)(kind, resource),
         name: resource,
         kind,
         edgeType: "CALLS",
@@ -12070,7 +12206,7 @@ init_cjs_shims();
 var import_node_path47 = __toESM(require("path"), 1);
 var import_tree_sitter8 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_javascript6 = __toESM(require("tree-sitter-javascript"), 1);
-var import_types34 = require("@neat.is/types");
+var import_types35 = require("@neat.is/types");
 var FIRESTORE_CLIENT_IMPORT_RE = /(?:from\s+['"`]|require\(\s*['"`])firebase\/firestore['"`]/;
 var FIRESTORE_ADMIN_IMPORT_RE = /(?:from\s+['"`]|require\(\s*['"`])firebase-admin(?:\/firestore)?['"`]/;
 function parserForExt2(ext) {
@@ -12334,7 +12470,7 @@ function firestoreEndpointsFromFile(file, serviceDir, imported) {
       }
     }
     out.push({
-      infraId: (0, import_types34.infraId)("firestore-collection", collPath),
+      infraId: (0, import_types35.infraId)("firestore-collection", collPath),
       name: collPath,
       kind: "firestore-collection",
       edgeType: "CALLS",
@@ -12450,7 +12586,7 @@ async function firestoreCrossFileEndpoints(files, serviceDir) {
 // src/extract/calls/mongoose.ts
 init_cjs_shims();
 var import_node_path48 = __toESM(require("path"), 1);
-var import_types35 = require("@neat.is/types");
+var import_types36 = require("@neat.is/types");
 var MONGOOSE_IMPORT_RE = /(?:from\s+['"`]|require\(\s*['"`])mongoose['"`]/;
 var MONGODB_IMPORT_RE = /(?:from\s+['"`]|require\(\s*['"`])mongodb['"`]/;
 var PLURALIZE_DISABLED_RE = /\bpluralize\s*\(\s*(?:null|false)\s*\)/;
@@ -12595,7 +12731,7 @@ function collectModelDefs(content, pluralizeOn) {
 function endpoint(r, file, serviceDir, matchText) {
   const line = lineOf(file.content, matchText);
   return {
-    infraId: (0, import_types35.infraId)(r.kind, r.name),
+    infraId: (0, import_types36.infraId)(r.kind, r.name),
     name: r.name,
     kind: r.kind,
     edgeType: "CALLS",
@@ -12748,7 +12884,7 @@ init_cjs_shims();
 var import_node_path49 = __toESM(require("path"), 1);
 var import_tree_sitter9 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_python5 = __toESM(require("tree-sitter-python"), 1);
-var import_types36 = require("@neat.is/types");
+var import_types37 = require("@neat.is/types");
 var SQLALCHEMY_IMPORT_RE = /(?:from|import)\s+(?:flask_sqlalchemy|sqlalchemy)\b/;
 var PARSE_CHUNK6 = 16384;
 function makePyParser3() {
@@ -12902,7 +13038,7 @@ function sqlalchemyEndpointsFromFile(file, serviceDir) {
     if (seen.has(name)) return;
     seen.add(name);
     out.push({
-      infraId: (0, import_types36.infraId)("sql-table", name),
+      infraId: (0, import_types37.infraId)("sql-table", name),
       name,
       kind: "sql-table",
       edgeType: "CALLS",
@@ -13010,7 +13146,7 @@ function pythonOrmCrossFileEndpoints(files, serviceDir) {
       if (seen.has(key)) continue;
       seen.add(key);
       out.push({
-        infraId: (0, import_types36.infraId)("sql-table", t),
+        infraId: (0, import_types37.infraId)("sql-table", t),
         name: t,
         kind: "sql-table",
         edgeType: "CALLS",
@@ -13031,7 +13167,7 @@ init_cjs_shims();
 var import_node_path50 = __toESM(require("path"), 1);
 var import_tree_sitter10 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_python6 = __toESM(require("tree-sitter-python"), 1);
-var import_types37 = require("@neat.is/types");
+var import_types38 = require("@neat.is/types");
 var SOCKET_IMPORT_RE = /(?:^|\n)\s*(?:import\s+socket\b|from\s+socket\s+import\b)/;
 var PARSE_CHUNK7 = 16384;
 function makePyParser4() {
@@ -13097,7 +13233,7 @@ function socketEndpointsFromFile(file, serviceDir) {
     seen.add(name);
     const line = node.startPosition.row + 1;
     out.push({
-      infraId: (0, import_types37.infraId)("socket", name),
+      infraId: (0, import_types38.infraId)("socket", name),
       name,
       kind: "socket",
       edgeType: "CALLS",
@@ -13118,7 +13254,7 @@ init_cjs_shims();
 var import_node_path51 = __toESM(require("path"), 1);
 var import_tree_sitter11 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_python7 = __toESM(require("tree-sitter-python"), 1);
-var import_types38 = require("@neat.is/types");
+var import_types39 = require("@neat.is/types");
 var DJANGO_IMPORT_RE = /(?:from|import)\s+django\b/;
 var PARSE_CHUNK8 = 16384;
 function makePyParser5() {
@@ -13198,7 +13334,7 @@ function djangoOrmEndpointsFromFile(file, serviceDir) {
     seen.add(table2);
     const line = node.startPosition.row + 1;
     out.push({
-      infraId: (0, import_types38.infraId)("sql-table", table2),
+      infraId: (0, import_types39.infraId)("sql-table", table2),
       name: table2,
       kind: "sql-table",
       edgeType: "CALLS",
@@ -13214,7 +13350,7 @@ init_cjs_shims();
 var import_node_path52 = __toESM(require("path"), 1);
 var import_tree_sitter12 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_javascript7 = __toESM(require("tree-sitter-javascript"), 1);
-var import_types39 = require("@neat.is/types");
+var import_types40 = require("@neat.is/types");
 var DRIZZLE_IMPORT_RE = /drizzle-orm/;
 var TABLE_BUILDERS = /* @__PURE__ */ new Set(["pgTable", "mysqlTable", "sqliteTable"]);
 function parserForExt3(ext) {
@@ -13305,7 +13441,7 @@ function drizzleEndpointsFromFile(file, serviceDir) {
           const columns = columnsFromObject(obj);
           const line = node.startPosition.row + 1;
           out.push({
-            infraId: (0, import_types39.infraId)("sql-table", tableName2),
+            infraId: (0, import_types40.infraId)("sql-table", tableName2),
             name: tableName2,
             kind: "sql-table",
             edgeType: "CALLS",
@@ -13415,7 +13551,7 @@ function drizzleForeignKeys(file, serviceDir) {
 // src/extract/calls/prisma.ts
 init_cjs_shims();
 var import_node_path53 = __toESM(require("path"), 1);
-var import_types40 = require("@neat.is/types");
+var import_types41 = require("@neat.is/types");
 var SCALAR_TYPES = /* @__PURE__ */ new Set([
   "Int",
   "String",
@@ -13463,7 +13599,7 @@ function prismaColumnsFromSchema(file, serviceDir) {
     if (seenTable.has(b.tableName)) return;
     seenTable.add(b.tableName);
     out.push({
-      infraId: (0, import_types40.infraId)("sql-table", b.tableName),
+      infraId: (0, import_types41.infraId)("sql-table", b.tableName),
       name: b.tableName,
       kind: "sql-table",
       edgeType: "CALLS",
@@ -13635,7 +13771,7 @@ init_cjs_shims();
 var import_node_path54 = __toESM(require("path"), 1);
 var import_tree_sitter13 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_ruby3 = __toESM(require("tree-sitter-ruby"), 1);
-var import_types41 = require("@neat.is/types");
+var import_types42 = require("@neat.is/types");
 var AR_SCHEMA_RE = /ActiveRecord::Schema/;
 var PARSE_CHUNK9 = 16384;
 function makeRubyParser2() {
@@ -13833,7 +13969,7 @@ function railsSchemaEndpointsFromFile(file, serviceDir) {
     if (!table2 || seen.has(table2.name)) return;
     seen.add(table2.name);
     out.push({
-      infraId: (0, import_types41.infraId)("sql-table", table2.name),
+      infraId: (0, import_types42.infraId)("sql-table", table2.name),
       name: table2.name,
       kind: "sql-table",
       edgeType: "CALLS",
@@ -13939,7 +14075,7 @@ function railsModelEndpointsFromFile(file, serviceDir) {
     seen.add(table2);
     const line = node.startPosition.row + 1;
     out.push({
-      infraId: (0, import_types41.infraId)("sql-table", table2),
+      infraId: (0, import_types42.infraId)("sql-table", table2),
       name: table2,
       kind: "sql-table",
       edgeType: "CALLS",
@@ -13997,7 +14133,7 @@ init_cjs_shims();
 var import_node_path55 = __toESM(require("path"), 1);
 var import_tree_sitter14 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_php3 = __toESM(require("tree-sitter-php"), 1);
-var import_types42 = require("@neat.is/types");
+var import_types43 = require("@neat.is/types");
 var LARAVEL_SCHEMA_RE = /\bSchema::(create|createIfNotExists|table)\b/;
 var PARSE_CHUNK10 = 16384;
 function makePhpParser2() {
@@ -14244,7 +14380,7 @@ function laravelMigrationEndpointsFromFile(file, serviceDir) {
       }
     }
     out.push({
-      infraId: (0, import_types42.infraId)("sql-table", bp.table),
+      infraId: (0, import_types43.infraId)("sql-table", bp.table),
       name: bp.table,
       kind: "sql-table",
       edgeType: "CALLS",
@@ -14387,7 +14523,7 @@ function laravelModelEndpointsFromFile(file, serviceDir) {
     seen.add(table2);
     const line = node.startPosition.row + 1;
     out.push({
-      infraId: (0, import_types42.infraId)("sql-table", table2),
+      infraId: (0, import_types43.infraId)("sql-table", table2),
       name: table2,
       kind: "sql-table",
       edgeType: "CALLS",
@@ -14444,7 +14580,7 @@ init_cjs_shims();
 var import_node_path58 = __toESM(require("path"), 1);
 var import_tree_sitter15 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_go4 = __toESM(require("tree-sitter-go"), 1);
-var import_types43 = require("@neat.is/types");
+var import_types44 = require("@neat.is/types");
 init_otel();
 var PARSE_CHUNK11 = 16384;
 var DATABASE_SQL_METHODS = /* @__PURE__ */ new Set([
@@ -14538,7 +14674,7 @@ function goSqlEndpointsFromFile(file, serviceDir) {
     const columns = columnsFromSqlStatement(sql);
     const line = node.startPosition.row + 1;
     out.push({
-      infraId: (0, import_types43.infraId)("sql-table", table2),
+      infraId: (0, import_types44.infraId)("sql-table", table2),
       name: table2,
       kind: "sql-table",
       edgeType: "CALLS",
@@ -14559,7 +14695,7 @@ init_cjs_shims();
 var import_node_path59 = __toESM(require("path"), 1);
 var import_tree_sitter16 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_go5 = __toESM(require("tree-sitter-go"), 1);
-var import_types44 = require("@neat.is/types");
+var import_types45 = require("@neat.is/types");
 var GORM_IMPORT_RE = /gorm\.io\/gorm/;
 var PARSE_CHUNK12 = 16384;
 function makeGoParser4() {
@@ -15004,7 +15140,7 @@ function gormEndpointsFromFile(file, serviceDir) {
     const columns = [];
     collectColumns(struct, structs, /* @__PURE__ */ new Set(), "", columns, /* @__PURE__ */ new Set());
     out.push({
-      infraId: (0, import_types44.infraId)("sql-table", table2),
+      infraId: (0, import_types45.infraId)("sql-table", table2),
       name: table2,
       kind: "sql-table",
       edgeType: "CALLS",
@@ -15075,7 +15211,7 @@ init_cjs_shims();
 var import_node_path60 = __toESM(require("path"), 1);
 var import_tree_sitter17 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_c_sharp2 = __toESM(require("tree-sitter-c-sharp"), 1);
-var import_types45 = require("@neat.is/types");
+var import_types46 = require("@neat.is/types");
 var EFCORE_GATE = /Microsoft\.EntityFrameworkCore|DataAnnotations\.Schema|\bDbContext\b|\bDbSet\s*</;
 var PARSE_CHUNK13 = 16384;
 function makeCsParser() {
@@ -15160,7 +15296,7 @@ function efcoreEndpointsFromFile(file, serviceDir) {
     if (!name || seen.has(name)) return;
     seen.add(name);
     out.push({
-      infraId: (0, import_types45.infraId)("sql-table", name),
+      infraId: (0, import_types46.infraId)("sql-table", name),
       name,
       kind: "sql-table",
       edgeType: "CALLS",
@@ -15190,11 +15326,11 @@ function efcoreEndpointsFromFile(file, serviceDir) {
 function edgeTypeFromEndpoint(ep) {
   switch (ep.edgeType) {
     case "PUBLISHES_TO":
-      return import_types46.EdgeType.PUBLISHES_TO;
+      return import_types47.EdgeType.PUBLISHES_TO;
     case "CONSUMES_FROM":
-      return import_types46.EdgeType.CONSUMES_FROM;
+      return import_types47.EdgeType.CONSUMES_FROM;
     default:
-      return import_types46.EdgeType.CALLS;
+      return import_types47.EdgeType.CALLS;
   }
 }
 function isAwsKind(kind) {
@@ -15265,7 +15401,7 @@ async function addExternalEndpointEdges(graph, services) {
       if (!graph.hasNode(ep.infraId)) {
         const node = {
           id: ep.infraId,
-          type: import_types46.NodeType.InfraNode,
+          type: import_types47.NodeType.InfraNode,
           name: ep.name,
           // #238 — `aws-*` covers AWS-SDK client kinds (aws-s3, aws-dynamodb,
           // aws-cognito-identity-provider, …); `s3-` / `dynamodb-` cover the
@@ -15278,21 +15414,21 @@ async function addExternalEndpointEdges(graph, services) {
       }
       if (ep.columns && ep.columns.length > 0) {
         const node = graph.getNodeAttributes(ep.infraId);
-        if (node.type === import_types46.NodeType.InfraNode) {
+        if (node.type === import_types47.NodeType.InfraNode) {
           graph.replaceNodeAttributes(ep.infraId, {
             ...node,
             columns: foldColumns(
               node.columns,
               ep.columns,
-              import_types46.Provenance.EXTRACTED,
-              (0, import_types46.confidenceForExtracted)(ep.confidenceKind)
+              import_types47.Provenance.EXTRACTED,
+              (0, import_types47.confidenceForExtracted)(ep.confidenceKind)
             )
           });
         }
       }
       if (ep.sdkWrites && Object.keys(ep.sdkWrites).length > 0) {
         const node = graph.getNodeAttributes(ep.infraId);
-        if (node.type === import_types46.NodeType.InfraNode) {
+        if (node.type === import_types47.NodeType.InfraNode) {
           graph.replaceNodeAttributes(ep.infraId, {
             ...node,
             columns: foldSdkWrites(node.columns, ep.sdkWrites)
@@ -15300,7 +15436,7 @@ async function addExternalEndpointEdges(graph, services) {
         }
       }
       const edgeType = edgeTypeFromEndpoint(ep);
-      const confidence = (0, import_types46.confidenceForExtracted)(ep.confidenceKind);
+      const confidence = (0, import_types47.confidenceForExtracted)(ep.confidenceKind);
       const relFile = toPosix(ep.evidence.file);
       const { fileNodeId, nodesAdded: n, edgesAdded: e } = ensureFileNode(
         graph,
@@ -15310,7 +15446,7 @@ async function addExternalEndpointEdges(graph, services) {
       );
       nodesAdded += n;
       edgesAdded += e;
-      if (!(0, import_types46.passesExtractedFloor)(confidence)) {
+      if (!(0, import_types47.passesExtractedFloor)(confidence)) {
         noteExtractedDropped({
           source: fileNodeId,
           target: ep.infraId,
@@ -15330,7 +15466,7 @@ async function addExternalEndpointEdges(graph, services) {
           source: fileNodeId,
           target: ep.infraId,
           type: edgeType,
-          provenance: import_types46.Provenance.EXTRACTED,
+          provenance: import_types47.Provenance.EXTRACTED,
           confidence,
           evidence: ep.evidence
         };
@@ -15353,7 +15489,7 @@ async function addCallEdges(graph, services) {
 
 // src/extract/table-edges.ts
 init_cjs_shims();
-var import_types47 = require("@neat.is/types");
+var import_types48 = require("@neat.is/types");
 async function addTableEdges(graph, services) {
   let nodesAdded = 0;
   let edgesAdded = 0;
@@ -15381,20 +15517,20 @@ async function addTableEdges(graph, services) {
     }
     refs.push(...modelRefs);
     for (const ref of refs) {
-      const childId = (0, import_types47.infraId)("sql-table", ref.childTable);
-      const parentId = (0, import_types47.infraId)("sql-table", ref.parentTable);
+      const childId = (0, import_types48.infraId)("sql-table", ref.childTable);
+      const parentId = (0, import_types48.infraId)("sql-table", ref.parentTable);
       if (childId === parentId) continue;
       nodesAdded += ensureTableNode(graph, childId, ref.childTable);
       nodesAdded += ensureTableNode(graph, parentId, ref.parentTable);
-      const edgeId = (0, import_types47.extractedEdgeId)(childId, parentId, import_types47.EdgeType.REFERENCES);
+      const edgeId = (0, import_types48.extractedEdgeId)(childId, parentId, import_types48.EdgeType.REFERENCES);
       if (graph.hasEdge(edgeId)) continue;
       const edge = {
         id: edgeId,
         source: childId,
         target: parentId,
-        type: import_types47.EdgeType.REFERENCES,
-        provenance: import_types47.Provenance.EXTRACTED,
-        confidence: (0, import_types47.confidenceForExtracted)("structural"),
+        type: import_types48.EdgeType.REFERENCES,
+        provenance: import_types48.Provenance.EXTRACTED,
+        confidence: (0, import_types48.confidenceForExtracted)("structural"),
         evidence: ref.evidence
       };
       graph.addEdgeWithKey(edgeId, childId, parentId, edge);
@@ -15407,7 +15543,7 @@ function ensureTableNode(graph, id, name) {
   if (graph.hasNode(id)) return 0;
   const node = {
     id,
-    type: import_types47.NodeType.InfraNode,
+    type: import_types48.NodeType.InfraNode,
     name,
     provider: "self",
     kind: "sql-table"
@@ -15422,15 +15558,15 @@ init_cjs_shims();
 // src/extract/infra/docker-compose.ts
 init_cjs_shims();
 var import_node_path61 = __toESM(require("path"), 1);
-var import_types49 = require("@neat.is/types");
+var import_types50 = require("@neat.is/types");
 
 // src/extract/infra/shared.ts
 init_cjs_shims();
-var import_types48 = require("@neat.is/types");
+var import_types49 = require("@neat.is/types");
 function makeInfraNode(kind, name, provider = "self", extras) {
   return {
-    id: (0, import_types48.infraId)(kind, name),
-    type: import_types48.NodeType.InfraNode,
+    id: (0, import_types49.infraId)(kind, name),
+    type: import_types49.NodeType.InfraNode,
     name,
     provider,
     kind,
@@ -15474,8 +15610,8 @@ function emitPlatformResourceEdge(graph, anchorId, edgeType, kind, name, provide
       source: anchorId,
       target: node.id,
       type: edgeType,
-      provenance: import_types48.Provenance.EXTRACTED,
-      confidence: (0, import_types48.confidenceForExtracted)("structural"),
+      provenance: import_types49.Provenance.EXTRACTED,
+      confidence: (0, import_types49.confidenceForExtracted)("structural"),
       evidence: { file: evidenceFile, ...line !== void 0 ? { line } : {} }
     };
     graph.addEdgeWithKey(edgeId, edge.source, edge.target, edge);
@@ -15542,15 +15678,15 @@ async function addComposeInfra(graph, scanPath, services) {
     for (const dep of dependsOnList(svc.depends_on)) {
       const targetId = composeNameToNodeId.get(dep);
       if (!targetId) continue;
-      const edgeId = (0, import_types4.extractedEdgeId)(sourceId, targetId, import_types49.EdgeType.DEPENDS_ON);
+      const edgeId = (0, import_types4.extractedEdgeId)(sourceId, targetId, import_types50.EdgeType.DEPENDS_ON);
       if (graph.hasEdge(edgeId)) continue;
       const edge = {
         id: edgeId,
         source: sourceId,
         target: targetId,
-        type: import_types49.EdgeType.DEPENDS_ON,
-        provenance: import_types49.Provenance.EXTRACTED,
-        confidence: (0, import_types49.confidenceForExtracted)("structural"),
+        type: import_types50.EdgeType.DEPENDS_ON,
+        provenance: import_types50.Provenance.EXTRACTED,
+        confidence: (0, import_types50.confidenceForExtracted)("structural"),
         evidence: { file: evidenceFile }
       };
       graph.addEdgeWithKey(edgeId, edge.source, edge.target, edge);
@@ -15564,7 +15700,7 @@ async function addComposeInfra(graph, scanPath, services) {
 init_cjs_shims();
 var import_node_path62 = __toESM(require("path"), 1);
 var import_node_fs28 = require("fs");
-var import_types50 = require("@neat.is/types");
+var import_types51 = require("@neat.is/types");
 function readDockerfile(content) {
   let image = null;
   const ports = [];
@@ -15623,15 +15759,15 @@ async function addDockerfileRuntimes(graph, services, scanPath) {
     );
     nodesAdded += fn;
     edgesAdded += fe;
-    const edgeId = (0, import_types4.extractedEdgeId)(fileNodeId, node.id, import_types50.EdgeType.RUNS_ON);
+    const edgeId = (0, import_types4.extractedEdgeId)(fileNodeId, node.id, import_types51.EdgeType.RUNS_ON);
     if (!graph.hasEdge(edgeId)) {
       const edge = {
         id: edgeId,
         source: fileNodeId,
         target: node.id,
-        type: import_types50.EdgeType.RUNS_ON,
-        provenance: import_types50.Provenance.EXTRACTED,
-        confidence: (0, import_types50.confidenceForExtracted)("structural"),
+        type: import_types51.EdgeType.RUNS_ON,
+        provenance: import_types51.Provenance.EXTRACTED,
+        confidence: (0, import_types51.confidenceForExtracted)("structural"),
         evidence: {
           file: evidenceFile,
           ...facts.entrypoint ? { snippet: facts.entrypoint.slice(0, 120) } : {}
@@ -15646,15 +15782,15 @@ async function addDockerfileRuntimes(graph, services, scanPath) {
         graph.addNode(portNode.id, portNode);
         nodesAdded++;
       }
-      const portEdgeId = (0, import_types4.extractedEdgeId)(fileNodeId, portNode.id, import_types50.EdgeType.CONNECTS_TO);
+      const portEdgeId = (0, import_types4.extractedEdgeId)(fileNodeId, portNode.id, import_types51.EdgeType.CONNECTS_TO);
       if (graph.hasEdge(portEdgeId)) continue;
       const portEdge = {
         id: portEdgeId,
         source: fileNodeId,
         target: portNode.id,
-        type: import_types50.EdgeType.CONNECTS_TO,
-        provenance: import_types50.Provenance.EXTRACTED,
-        confidence: (0, import_types50.confidenceForExtracted)("structural"),
+        type: import_types51.EdgeType.CONNECTS_TO,
+        provenance: import_types51.Provenance.EXTRACTED,
+        confidence: (0, import_types51.confidenceForExtracted)("structural"),
         evidence: { file: evidenceFile, snippet: `EXPOSE ${port}` }
       };
       graph.addEdgeWithKey(portEdgeId, portEdge.source, portEdge.target, portEdge);
@@ -15668,7 +15804,7 @@ async function addDockerfileRuntimes(graph, services, scanPath) {
 init_cjs_shims();
 var import_node_fs29 = require("fs");
 var import_node_path63 = __toESM(require("path"), 1);
-var import_types51 = require("@neat.is/types");
+var import_types52 = require("@neat.is/types");
 var RESOURCE_RE = /resource\s+"(aws_[A-Za-z0-9_]+)"\s+"([A-Za-z0-9_-]+)"/g;
 var REFERENCE_RE = /(?<![\w.])(aws_[A-Za-z0-9_]+)\.([A-Za-z0-9_-]+)/g;
 async function walkTfFiles(start, depth = 0, max = 5) {
@@ -15749,16 +15885,16 @@ async function addTerraformResources(graph, scanPath) {
         if (!target) continue;
         if (seen.has(target.nodeId)) continue;
         seen.add(target.nodeId);
-        const edgeId = (0, import_types4.extractedEdgeId)(resource.nodeId, target.nodeId, import_types51.EdgeType.DEPENDS_ON);
+        const edgeId = (0, import_types4.extractedEdgeId)(resource.nodeId, target.nodeId, import_types52.EdgeType.DEPENDS_ON);
         if (graph.hasEdge(edgeId)) continue;
         const line = lineAt2(content, resource.bodyOffset + ref.index);
         const edge = {
           id: edgeId,
           source: resource.nodeId,
           target: target.nodeId,
-          type: import_types51.EdgeType.DEPENDS_ON,
-          provenance: import_types51.Provenance.EXTRACTED,
-          confidence: (0, import_types51.confidenceForExtracted)("structural"),
+          type: import_types52.EdgeType.DEPENDS_ON,
+          provenance: import_types52.Provenance.EXTRACTED,
+          confidence: (0, import_types52.confidenceForExtracted)("structural"),
           evidence: { file: evidenceFile, line, snippet: key }
         };
         graph.addEdgeWithKey(edgeId, edge.source, edge.target, edge);
@@ -15774,7 +15910,7 @@ init_cjs_shims();
 var import_node_fs30 = require("fs");
 var import_node_path64 = __toESM(require("path"), 1);
 var import_yaml3 = require("yaml");
-var import_types52 = require("@neat.is/types");
+var import_types53 = require("@neat.is/types");
 var K8S_KIND_TO_INFRA_KIND = {
   Service: "k8s-service",
   Deployment: "k8s-deployment",
@@ -15834,7 +15970,7 @@ async function addK8sResources(graph, scanPath) {
         nodesAdded++;
       }
       if (isWorkload) {
-        const svcId = (0, import_types52.serviceId)(name);
+        const svcId = (0, import_types53.serviceId)(name);
         if (graph.hasNode(svcId)) {
           const svc = graph.getNodeAttributes(svcId);
           graph.replaceNodeAttributes(svcId, {
@@ -15846,7 +15982,7 @@ async function addK8sResources(graph, scanPath) {
           edgesAdded += emitPlatformResourceEdge(
             graph,
             svcId,
-            import_types52.EdgeType.RUNS_ON,
+            import_types53.EdgeType.RUNS_ON,
             infraKind,
             name,
             "kubernetes",
@@ -15865,7 +16001,7 @@ init_cjs_shims();
 var import_node_fs31 = require("fs");
 var import_node_path65 = __toESM(require("path"), 1);
 var import_smol_toml3 = require("smol-toml");
-var import_types53 = require("@neat.is/types");
+var import_types54 = require("@neat.is/types");
 var WRANGLER_FILENAMES = ["wrangler.toml", "wrangler.jsonc", "wrangler.json"];
 async function readWranglerConfig(dir) {
   for (const filename of WRANGLER_FILENAMES) {
@@ -15913,8 +16049,8 @@ function addResourceEdge(graph, anchorId, edgeType, kind, name, evidenceFile, li
       source: anchorId,
       target: node.id,
       type: edgeType,
-      provenance: import_types53.Provenance.EXTRACTED,
-      confidence: (0, import_types53.confidenceForExtracted)("structural"),
+      provenance: import_types54.Provenance.EXTRACTED,
+      confidence: (0, import_types54.confidenceForExtracted)("structural"),
       evidence: { file: evidenceFile, ...line !== void 0 ? { line } : {} }
     };
     graph.addEdgeWithKey(edgeId, edge.source, edge.target, edge);
@@ -15975,15 +16111,15 @@ async function addCloudflareWorkers(graph, services, scanPath) {
       nodesAdded++;
     }
     if (runtimeNode.id !== anchorId) {
-      const runsOnId = (0, import_types4.extractedEdgeId)(anchorId, runtimeNode.id, import_types53.EdgeType.RUNS_ON);
+      const runsOnId = (0, import_types4.extractedEdgeId)(anchorId, runtimeNode.id, import_types54.EdgeType.RUNS_ON);
       if (!graph.hasEdge(runsOnId)) {
         const edge = {
           id: runsOnId,
           source: anchorId,
           target: runtimeNode.id,
-          type: import_types53.EdgeType.RUNS_ON,
-          provenance: import_types53.Provenance.EXTRACTED,
-          confidence: (0, import_types53.confidenceForExtracted)("structural"),
+          type: import_types54.EdgeType.RUNS_ON,
+          provenance: import_types54.Provenance.EXTRACTED,
+          confidence: (0, import_types54.confidenceForExtracted)("structural"),
           evidence: {
             file: evidenceFile,
             ...config.compatibility_date ? { snippet: `compatibility_date = ${config.compatibility_date}`.slice(0, 120) } : {}
@@ -15997,7 +16133,7 @@ async function addCloudflareWorkers(graph, services, scanPath) {
       const result = addResourceEdge(
         graph,
         anchorId,
-        import_types53.EdgeType.CONNECTS_TO,
+        import_types54.EdgeType.CONNECTS_TO,
         "cloudflare-route",
         route,
         evidenceFile,
@@ -16021,7 +16157,7 @@ async function addCloudflareWorkers(graph, services, scanPath) {
         const result = addResourceEdge(
           graph,
           anchorId,
-          import_types53.EdgeType.DEPENDS_ON,
+          import_types54.EdgeType.DEPENDS_ON,
           group.kind,
           name,
           evidenceFile,
@@ -16035,7 +16171,7 @@ async function addCloudflareWorkers(graph, services, scanPath) {
       const result = addResourceEdge(
         graph,
         anchorId,
-        import_types53.EdgeType.DEPENDS_ON,
+        import_types54.EdgeType.DEPENDS_ON,
         "cloudflare-cron",
         cron,
         evidenceFile,
@@ -16048,7 +16184,7 @@ async function addCloudflareWorkers(graph, services, scanPath) {
       const result = addResourceEdge(
         graph,
         anchorId,
-        import_types53.EdgeType.DEPENDS_ON,
+        import_types54.EdgeType.DEPENDS_ON,
         "cloudflare-env-var",
         varName,
         evidenceFile,
@@ -16061,15 +16197,15 @@ async function addCloudflareWorkers(graph, services, scanPath) {
       if (!svc.service) continue;
       const target = workerIndex.get(svc.service);
       if (target && target.anchorId !== anchorId) {
-        const edgeId = (0, import_types4.extractedEdgeId)(anchorId, target.anchorId, import_types53.EdgeType.CALLS);
+        const edgeId = (0, import_types4.extractedEdgeId)(anchorId, target.anchorId, import_types54.EdgeType.CALLS);
         if (!graph.hasEdge(edgeId)) {
           const edge = {
             id: edgeId,
             source: anchorId,
             target: target.anchorId,
-            type: import_types53.EdgeType.CALLS,
-            provenance: import_types53.Provenance.EXTRACTED,
-            confidence: (0, import_types53.confidenceForExtracted)("structural"),
+            type: import_types54.EdgeType.CALLS,
+            provenance: import_types54.Provenance.EXTRACTED,
+            confidence: (0, import_types54.confidenceForExtracted)("structural"),
             evidence: { file: evidenceFile, line: lineContaining2(raw, svc.service) }
           };
           graph.addEdgeWithKey(edgeId, edge.source, edge.target, edge);
@@ -16080,7 +16216,7 @@ async function addCloudflareWorkers(graph, services, scanPath) {
       const result = addResourceEdge(
         graph,
         anchorId,
-        import_types53.EdgeType.DEPENDS_ON,
+        import_types54.EdgeType.DEPENDS_ON,
         "cloudflare-service-binding",
         svc.service,
         evidenceFile,
@@ -16097,7 +16233,7 @@ async function addCloudflareWorkers(graph, services, scanPath) {
 init_cjs_shims();
 var import_node_fs32 = require("fs");
 var import_node_path66 = __toESM(require("path"), 1);
-var import_types54 = require("@neat.is/types");
+var import_types55 = require("@neat.is/types");
 var VERCEL_CONFIG_FILENAMES = ["vercel.json", "vercel.jsonc"];
 async function readVercelConfig(dir) {
   for (const filename of VERCEL_CONFIG_FILENAMES) {
@@ -16160,12 +16296,12 @@ async function addVercelServices(graph, services, scanPath) {
       nodesAdded += result.nodesAdded;
       edgesAdded += result.edgesAdded;
     };
-    add(import_types54.EdgeType.RUNS_ON, "vercel", "vercel");
-    for (const cron of config.crons ?? []) add(import_types54.EdgeType.DEPENDS_ON, "vercel-cron", cron.path ?? cron.schedule);
-    for (const varName of Object.keys(config.env ?? {})) add(import_types54.EdgeType.DEPENDS_ON, "vercel-env-var", varName);
-    for (const varName of Object.keys(config.build?.env ?? {})) add(import_types54.EdgeType.DEPENDS_ON, "vercel-env-var", varName);
+    add(import_types55.EdgeType.RUNS_ON, "vercel", "vercel");
+    for (const cron of config.crons ?? []) add(import_types55.EdgeType.DEPENDS_ON, "vercel-cron", cron.path ?? cron.schedule);
+    for (const varName of Object.keys(config.env ?? {})) add(import_types55.EdgeType.DEPENDS_ON, "vercel-env-var", varName);
+    for (const varName of Object.keys(config.build?.env ?? {})) add(import_types55.EdgeType.DEPENDS_ON, "vercel-env-var", varName);
     for (const route of [...config.rewrites ?? [], ...config.redirects ?? [], ...config.routes ?? []]) {
-      add(import_types54.EdgeType.CONNECTS_TO, "vercel-route", routeSource(route));
+      add(import_types55.EdgeType.CONNECTS_TO, "vercel-route", routeSource(route));
     }
   }
   return { nodesAdded, edgesAdded };
@@ -16176,7 +16312,7 @@ init_cjs_shims();
 var import_node_fs33 = require("fs");
 var import_node_path67 = __toESM(require("path"), 1);
 var import_smol_toml4 = require("smol-toml");
-var import_types55 = require("@neat.is/types");
+var import_types56 = require("@neat.is/types");
 var RAILWAY_FILENAMES = ["railway.toml", "railway.json", "railway.jsonc"];
 async function readRailwayConfig(dir) {
   for (const filename of RAILWAY_FILENAMES) {
@@ -16222,9 +16358,9 @@ async function addRailwayServices(graph, services, scanPath) {
       nodesAdded += result.nodesAdded;
       edgesAdded += result.edgesAdded;
     };
-    add(import_types55.EdgeType.RUNS_ON, "railway", "railway");
-    add(import_types55.EdgeType.CONNECTS_TO, "railway-route", config.deploy?.healthcheckPath);
-    add(import_types55.EdgeType.DEPENDS_ON, "railway-cron", config.deploy?.cronSchedule);
+    add(import_types56.EdgeType.RUNS_ON, "railway", "railway");
+    add(import_types56.EdgeType.CONNECTS_TO, "railway-route", config.deploy?.healthcheckPath);
+    add(import_types56.EdgeType.DEPENDS_ON, "railway-cron", config.deploy?.cronSchedule);
   }
   return { nodesAdded, edgesAdded };
 }
@@ -16234,7 +16370,7 @@ init_cjs_shims();
 var import_node_fs34 = require("fs");
 var import_node_path68 = __toESM(require("path"), 1);
 var import_smol_toml5 = require("smol-toml");
-var import_types56 = require("@neat.is/types");
+var import_types57 = require("@neat.is/types");
 async function readSupabaseConfig(dir) {
   const relFile = import_node_path68.default.join("supabase", "config.toml");
   const abs = import_node_path68.default.join(dir, relFile);
@@ -16282,10 +16418,10 @@ async function addSupabaseProjects(graph, services, scanPath) {
       nodesAdded += result.nodesAdded;
       edgesAdded += result.edgesAdded;
     };
-    add(import_types56.EdgeType.RUNS_ON, "supabase", "supabase");
-    for (const fn of Object.keys(config.functions ?? {})) add(import_types56.EdgeType.DEPENDS_ON, "supabase-function", fn);
-    if (config.storage) add(import_types56.EdgeType.DEPENDS_ON, "supabase-storage", "storage");
-    if (config.auth) add(import_types56.EdgeType.DEPENDS_ON, "supabase-auth", "auth");
+    add(import_types57.EdgeType.RUNS_ON, "supabase", "supabase");
+    for (const fn of Object.keys(config.functions ?? {})) add(import_types57.EdgeType.DEPENDS_ON, "supabase-function", fn);
+    if (config.storage) add(import_types57.EdgeType.DEPENDS_ON, "supabase-storage", "storage");
+    if (config.auth) add(import_types57.EdgeType.DEPENDS_ON, "supabase-auth", "auth");
   }
   return { nodesAdded, edgesAdded };
 }
@@ -16311,7 +16447,7 @@ init_cjs_shims();
 var import_node_path69 = __toESM(require("path"), 1);
 var import_tree_sitter18 = __toESM(require("tree-sitter"), 1);
 var import_tree_sitter_javascript8 = __toESM(require("tree-sitter-javascript"), 1);
-var import_types57 = require("@neat.is/types");
+var import_types58 = require("@neat.is/types");
 var ZOD_IMPORT_RE = /\bzod\b/;
 var ZOD_OBJECTS = /* @__PURE__ */ new Set(["z", "zod"]);
 function parserForExt4(ext) {
@@ -16417,7 +16553,7 @@ function zodShapesFromFile(file, serviceDir) {
     seen.add(name);
     const line = call.startPosition.row + 1;
     out.push({
-      infraId: (0, import_types57.infraId)("zod-schema", name),
+      infraId: (0, import_types58.infraId)("zod-schema", name),
       name,
       fields,
       evidence: {
@@ -16452,7 +16588,7 @@ async function addZodShapes(graph, services) {
         if (!graph.hasNode(shape.infraId)) {
           const node = {
             id: shape.infraId,
-            type: import_types57.NodeType.InfraNode,
+            type: import_types58.NodeType.InfraNode,
             name: shape.name,
             provider: "self",
             kind: "zod-schema"
@@ -16462,14 +16598,14 @@ async function addZodShapes(graph, services) {
         }
         if (shape.fields.length > 0) {
           const node = graph.getNodeAttributes(shape.infraId);
-          if (node.type === import_types57.NodeType.InfraNode) {
+          if (node.type === import_types58.NodeType.InfraNode) {
             graph.replaceNodeAttributes(shape.infraId, {
               ...node,
               columns: foldColumns(
                 node.columns,
                 shape.fields,
-                import_types57.Provenance.EXTRACTED,
-                (0, import_types57.confidenceForExtracted)("structural")
+                import_types58.Provenance.EXTRACTED,
+                (0, import_types58.confidenceForExtracted)("structural")
               )
             });
           }
@@ -16483,15 +16619,15 @@ async function addZodShapes(graph, services) {
         );
         nodesAdded += n;
         edgesAdded += e;
-        const edgeId = (0, import_types57.extractedEdgeId)(fileNodeId, shape.infraId, import_types57.EdgeType.CONTAINS);
+        const edgeId = (0, import_types58.extractedEdgeId)(fileNodeId, shape.infraId, import_types58.EdgeType.CONTAINS);
         if (!graph.hasEdge(edgeId)) {
           const edge = {
             id: edgeId,
             source: fileNodeId,
             target: shape.infraId,
-            type: import_types57.EdgeType.CONTAINS,
-            provenance: import_types57.Provenance.EXTRACTED,
-            confidence: (0, import_types57.confidenceForExtracted)("structural"),
+            type: import_types58.EdgeType.CONTAINS,
+            provenance: import_types58.Provenance.EXTRACTED,
+            confidence: (0, import_types58.confidenceForExtracted)("structural"),
             evidence: shape.evidence
           };
           graph.addEdgeWithKey(edgeId, fileNodeId, shape.infraId, edge);
@@ -16505,7 +16641,7 @@ async function addZodShapes(graph, services) {
 
 // src/extract/firestore-rules.ts
 init_cjs_shims();
-var import_types58 = require("@neat.is/types");
+var import_types59 = require("@neat.is/types");
 var FIRESTORE_COLLECTION_KIND = "firestore-collection";
 var WRITE_METHODS = /* @__PURE__ */ new Set(["write", "create", "update"]);
 function stripComments(src) {
@@ -16676,7 +16812,7 @@ async function addFirestoreRules(graph, services) {
   if (guards.size === 0) return { nodesAdded: 0, edgesAdded: 0 };
   graph.forEachNode((id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types58.NodeType.InfraNode) return;
+    if (node.type !== import_types59.NodeType.InfraNode) return;
     if (node.kind !== FIRESTORE_COLLECTION_KIND) return;
     const fields = guards.get(collectionKeyFromName(node.name));
     if (!fields || fields.size === 0) return;
@@ -16695,12 +16831,12 @@ var import_node_path71 = __toESM(require("path"), 1);
 init_cjs_shims();
 var import_node_fs35 = require("fs");
 var import_node_path70 = __toESM(require("path"), 1);
-var import_types59 = require("@neat.is/types");
+var import_types60 = require("@neat.is/types");
 function dropOrphanedFileNodes(graph, source) {
   const orphans = [];
   graph.forEachNode((id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types59.NodeType.FileNode) return;
+    if (node.type !== import_types60.NodeType.FileNode) return;
     if (source && node.source !== source) return;
     if (graph.inboundEdges(id).length === 0 && graph.outboundEdges(id).length === 0) {
       orphans.push(id);
@@ -16714,7 +16850,7 @@ function retireEdgesByFile(graph, file) {
   const toDrop = [];
   graph.forEachEdge((id, attrs) => {
     const edge = attrs;
-    if (edge.provenance !== import_types59.Provenance.EXTRACTED) return;
+    if (edge.provenance !== import_types60.Provenance.EXTRACTED) return;
     if (!edge.evidence?.file) return;
     if (edge.evidence.file === normalized) toDrop.push(id);
   });
@@ -16727,7 +16863,7 @@ function outOfScope(graph, edge, source) {
   for (const endpoint2 of [edge.source, edge.target]) {
     if (!graph.hasNode(endpoint2)) continue;
     const node = graph.getNodeAttributes(endpoint2);
-    if (node.type !== import_types59.NodeType.FileNode) continue;
+    if (node.type !== import_types60.NodeType.FileNode) continue;
     return node.source !== source;
   }
   return false;
@@ -16737,7 +16873,7 @@ function retireExtractedEdgesByMissingFile(graph, scanPath, serviceDirs = [], so
   const bases = [scanPath, ...serviceDirs];
   graph.forEachEdge((id, attrs) => {
     const edge = attrs;
-    if (edge.provenance !== import_types59.Provenance.EXTRACTED) return;
+    if (edge.provenance !== import_types60.Provenance.EXTRACTED) return;
     if (outOfScope(graph, edge, source)) return;
     const evidenceFile = edge.evidence?.file;
     if (!evidenceFile) return;
@@ -16756,7 +16892,23 @@ function retireExtractedEdgesByMissingFile(graph, scanPath, serviceDirs = [], so
 // src/extract/index.ts
 var passQueue = Promise.resolve();
 function extractFromDirectory(graph, scanPath, opts = {}) {
-  const pass = passQueue.then(() => runExtractionPass(graph, scanPath, opts));
+  invalidateSourceBaseline(graph, opts.source, "syncing");
+  const pass = passQueue.then(async () => {
+    const sourceGeneration = beginSourceExtraction(graph, opts.source, opts.sourceCommit);
+    let result;
+    try {
+      result = await runExtractionPass(graph, scanPath, opts);
+      return result;
+    } finally {
+      finishSourceExtraction(
+        graph,
+        sourceGeneration,
+        opts.source,
+        opts.sourceCommit,
+        result ?? { extractionErrors: 1, skippedFiles: 0 }
+      );
+    }
+  });
   passQueue = pass.catch(() => {
   });
   return pass;
@@ -16850,39 +17002,39 @@ async function runExtractionPass(graph, scanPath, opts) {
 
 // src/divergences.ts
 init_cjs_shims();
-var import_types60 = require("@neat.is/types");
+var import_types61 = require("@neat.is/types");
 function bucketKey(source, target, type) {
   return `${type}|${source}|${target}`;
 }
 function bucketSourceFor(graph, edge) {
-  if (edge.type !== import_types60.EdgeType.CONNECTS_TO) return edge.source;
-  const parsed = (0, import_types60.parseFileId)(edge.source);
+  if (edge.type !== import_types61.EdgeType.CONNECTS_TO) return edge.source;
+  const parsed = (0, import_types61.parseFileId)(edge.source);
   if (!parsed || !graph.hasNode(edge.target)) return edge.source;
   const target = graph.getNodeAttributes(edge.target);
-  if (target.type !== import_types60.NodeType.DatabaseNode) return edge.source;
-  return (0, import_types60.serviceId)(parsed.service);
+  if (target.type !== import_types61.NodeType.DatabaseNode) return edge.source;
+  return (0, import_types61.serviceId)(parsed.service);
 }
 function bucketEdges(graph) {
   const buckets2 = /* @__PURE__ */ new Map();
   graph.forEachEdge((id, attrs) => {
     const e = attrs;
-    const parsed = (0, import_types60.parseEdgeId)(id);
+    const parsed = (0, import_types61.parseEdgeId)(id);
     const provenance2 = parsed?.provenance ?? e.provenance;
     const source = bucketSourceFor(graph, e);
     const key = bucketKey(source, e.target, e.type);
     const cur = buckets2.get(key) ?? { source, target: e.target, type: e.type };
     switch (provenance2) {
-      case import_types60.Provenance.EXTRACTED:
+      case import_types61.Provenance.EXTRACTED:
         cur.extracted = e;
         break;
-      case import_types60.Provenance.OBSERVED:
+      case import_types61.Provenance.OBSERVED:
         cur.observed = e;
         break;
-      case import_types60.Provenance.INFERRED:
+      case import_types61.Provenance.INFERRED:
         cur.inferred = e;
         break;
       default:
-        if (e.provenance === import_types60.Provenance.STALE) cur.stale = e;
+        if (e.provenance === import_types61.Provenance.STALE) cur.stale = e;
     }
     buckets2.set(key, cur);
   });
@@ -16891,22 +17043,22 @@ function bucketEdges(graph) {
 function nodeIsFrontier(graph, nodeId) {
   if (!graph.hasNode(nodeId)) return false;
   const attrs = graph.getNodeAttributes(nodeId);
-  return attrs.type === import_types60.NodeType.FrontierNode;
+  return attrs.type === import_types61.NodeType.FrontierNode;
 }
 function nodeIsWebsocketChannel(graph, nodeId) {
   if (!graph.hasNode(nodeId)) return false;
   const attrs = graph.getNodeAttributes(nodeId);
-  return attrs.type === import_types60.NodeType.WebSocketChannelNode;
+  return attrs.type === import_types61.NodeType.WebSocketChannelNode;
 }
 function nodeIsServerAction(graph, nodeId) {
   if (!graph.hasNode(nodeId)) return false;
   const attrs = graph.getNodeAttributes(nodeId);
-  return attrs.type === import_types60.NodeType.ServerActionNode;
+  return attrs.type === import_types61.NodeType.ServerActionNode;
 }
 function nodeIsSymbol(graph, nodeId) {
   if (!graph.hasNode(nodeId)) return false;
   const attrs = graph.getNodeAttributes(nodeId);
-  return attrs.type === import_types60.NodeType.SymbolNode;
+  return attrs.type === import_types61.NodeType.SymbolNode;
 }
 function clampConfidence(n) {
   if (!Number.isFinite(n)) return 0;
@@ -16926,14 +17078,14 @@ function gradedConfidence(edge) {
   return clampConfidence(confidenceForEdge(edge));
 }
 var OBSERVABLE_EDGE_TYPES = /* @__PURE__ */ new Set([
-  import_types60.EdgeType.CALLS,
-  import_types60.EdgeType.CONNECTS_TO,
-  import_types60.EdgeType.PUBLISHES_TO,
-  import_types60.EdgeType.CONSUMES_FROM
+  import_types61.EdgeType.CALLS,
+  import_types61.EdgeType.CONNECTS_TO,
+  import_types61.EdgeType.PUBLISHES_TO,
+  import_types61.EdgeType.CONSUMES_FROM
 ]);
 function detectMissingDivergences(graph, bucket) {
   const out = [];
-  if (bucket.type === import_types60.EdgeType.CONTAINS) return out;
+  if (bucket.type === import_types61.EdgeType.CONTAINS) return out;
   if (nodeIsSymbol(graph, bucket.source) || nodeIsSymbol(graph, bucket.target)) return out;
   if (bucket.extracted && !bucket.observed && OBSERVABLE_EDGE_TYPES.has(bucket.type)) {
     if (!nodeIsFrontier(graph, bucket.target) && !nodeIsServerAction(graph, bucket.target)) {
@@ -16975,7 +17127,7 @@ function declaredHostFor(svc) {
 function hasExtractedConfiguredBy(graph, svcId) {
   for (const edgeId of graph.outboundEdges(svcId)) {
     const e = graph.getEdgeAttributes(edgeId);
-    if (e.type === import_types60.EdgeType.CONFIGURED_BY && e.provenance === import_types60.Provenance.EXTRACTED) {
+    if (e.type === import_types61.EdgeType.CONFIGURED_BY && e.provenance === import_types61.Provenance.EXTRACTED) {
       return true;
     }
   }
@@ -16988,10 +17140,10 @@ function detectHostMismatch(graph, svcId, svc) {
   const out = [];
   for (const edgeId of graph.outboundEdges(svcId)) {
     const edge = graph.getEdgeAttributes(edgeId);
-    if (edge.type !== import_types60.EdgeType.CONNECTS_TO) continue;
-    if (edge.provenance !== import_types60.Provenance.OBSERVED) continue;
+    if (edge.type !== import_types61.EdgeType.CONNECTS_TO) continue;
+    if (edge.provenance !== import_types61.Provenance.OBSERVED) continue;
     const target = graph.getNodeAttributes(edge.target);
-    if (target.type !== import_types60.NodeType.DatabaseNode) continue;
+    if (target.type !== import_types61.NodeType.DatabaseNode) continue;
     const observedHost = target.host?.trim();
     if (!observedHost) continue;
     if (observedHost === declaredHost) continue;
@@ -17013,10 +17165,10 @@ function detectCompatDivergences(graph, svcId, svc) {
   const deps = svc.dependencies ?? {};
   for (const edgeId of graph.outboundEdges(svcId)) {
     const edge = graph.getEdgeAttributes(edgeId);
-    if (edge.type !== import_types60.EdgeType.CONNECTS_TO) continue;
-    if (edge.provenance !== import_types60.Provenance.OBSERVED) continue;
+    if (edge.type !== import_types61.EdgeType.CONNECTS_TO) continue;
+    if (edge.provenance !== import_types61.Provenance.OBSERVED) continue;
     const target = graph.getNodeAttributes(edge.target);
-    if (target.type !== import_types60.NodeType.DatabaseNode) continue;
+    if (target.type !== import_types61.NodeType.DatabaseNode) continue;
     for (const pair of compatPairs()) {
       if (pair.engine !== target.engine) continue;
       const declared = deps[pair.driver];
@@ -17179,11 +17331,11 @@ function symbolLocus(graph, ev) {
   const location = filepath ? `${filepath}${lineno !== void 0 ? `:${lineno}` : ""}` : void 0;
   const affected = ev.affectedNode;
   const affectedInGraph = affected.length > 0 && graph.hasNode(affected);
-  const affectedIsCode = affectedInGraph && ((0, import_types60.parseSymbolId)(affected) !== null || (0, import_types60.parseFileId)(affected) !== null);
+  const affectedIsCode = affectedInGraph && ((0, import_types61.parseSymbolId)(affected) !== null || (0, import_types61.parseFileId)(affected) !== null);
   if (affectedIsCode) return { node: affected, ...location ? { location } : {} };
   if (!location) return null;
   if (affectedInGraph) return { node: affected, location };
-  const svc = (0, import_types60.serviceId)(ev.service);
+  const svc = (0, import_types61.serviceId)(ev.service);
   if (graph.hasNode(svc)) return { node: svc, location };
   return null;
 }
@@ -17226,7 +17378,7 @@ function detectSymbolMismatches(graph, incidents) {
       mismatchKind: g.kind,
       ...g.symbol ? { symbol: g.symbol } : {},
       ...g.location ? { location: g.location } : {},
-      provenance: import_types60.Provenance.INFERRED,
+      provenance: import_types61.Provenance.INFERRED,
       incidentId: g.latest.id,
       errorMessage: g.latest.errorMessage,
       incidentCount: g.count,
@@ -17243,7 +17395,7 @@ var OBSERVED_FAILING_CONFIDENCE = 0.6;
 function detectObservedFailingEdge(graph, bucket) {
   if (!bucket.extracted || !bucket.observed) return [];
   if (!OBSERVABLE_EDGE_TYPES.has(bucket.type)) return [];
-  if (bucket.observed.provenance !== import_types60.Provenance.OBSERVED) return [];
+  if (bucket.observed.provenance !== import_types61.Provenance.OBSERVED) return [];
   const signal = bucket.observed.signal;
   if (!signal) return [];
   const { spanCount, errorCount } = signal;
@@ -17257,7 +17409,7 @@ function detectObservedFailingEdge(graph, bucket) {
       source: bucket.source,
       target: bucket.target,
       failureKind: "error-rate",
-      provenance: import_types60.Provenance.INFERRED,
+      provenance: import_types61.Provenance.INFERRED,
       edgeType: bucket.type,
       observed: bucket.observed,
       spanCount,
@@ -17362,7 +17514,7 @@ function detectObservedFailingIncidents(graph, incidents) {
       source: g.node,
       target: g.node,
       failureKind: g.kind,
-      provenance: import_types60.Provenance.INFERRED,
+      provenance: import_types61.Provenance.INFERRED,
       ...g.location ? { location: g.location } : {},
       incidentId: g.latest.id,
       errorMessage: g.latest.errorMessage,
@@ -17381,24 +17533,24 @@ function involvesNode(d, nodeId) {
 function datastoreEverObserved(graph, nodeId) {
   if (!graph.hasNode(nodeId)) return false;
   const n = graph.getNodeAttributes(nodeId);
-  if (n.type === import_types60.NodeType.DatabaseNode) {
+  if (n.type === import_types61.NodeType.DatabaseNode) {
     const via = n.discoveredVia;
     if (via === "otel" || via === "merged") return true;
   }
   for (const edgeId of graph.inboundEdges(nodeId)) {
     const e = graph.getEdgeAttributes(edgeId);
-    if (e.provenance === import_types60.Provenance.OBSERVED || e.provenance === import_types60.Provenance.STALE) return true;
+    if (e.provenance === import_types61.Provenance.OBSERVED || e.provenance === import_types61.Provenance.STALE) return true;
   }
   return false;
 }
 function serviceHasObservedSameEngineStore(graph, buckets2, serviceId17, engine, excludeTarget) {
   for (const bucket of buckets2.values()) {
-    if (bucket.type !== import_types60.EdgeType.CONNECTS_TO) continue;
+    if (bucket.type !== import_types61.EdgeType.CONNECTS_TO) continue;
     if (bucket.source !== serviceId17) continue;
     if (bucket.target === excludeTarget) continue;
     if (!graph.hasNode(bucket.target)) continue;
     const target = graph.getNodeAttributes(bucket.target);
-    if (target.type !== import_types60.NodeType.DatabaseNode) continue;
+    if (target.type !== import_types61.NodeType.DatabaseNode) continue;
     if (target.engine !== engine) continue;
     if (bucket.observed || datastoreEverObserved(graph, bucket.target)) return true;
   }
@@ -17408,10 +17560,10 @@ var DEAD_CODE_PROBE_CONFIDENCE = 0.1;
 function dampenDeadCodeProbes(graph, buckets2, all) {
   return all.map((d) => {
     if (d.type !== "missing-observed") return d;
-    if (!d.extracted || d.edgeType !== import_types60.EdgeType.CONNECTS_TO) return d;
+    if (!d.extracted || d.edgeType !== import_types61.EdgeType.CONNECTS_TO) return d;
     if (!graph.hasNode(d.target)) return d;
     const target = graph.getNodeAttributes(d.target);
-    if (target.type !== import_types60.NodeType.DatabaseNode) return d;
+    if (target.type !== import_types61.NodeType.DatabaseNode) return d;
     if (d.extracted.evidence?.hostSource !== "literal") return d;
     if (datastoreEverObserved(graph, d.target)) return d;
     const engine = target.engine;
@@ -17431,7 +17583,7 @@ function suppressHostMismatchHalves(all) {
   for (const d of all) {
     if (d.type !== "host-mismatch") continue;
     observedHalf.add(`${d.source}->${d.target}`);
-    declaredHalf.add((0, import_types60.databaseId)(d.extractedHost));
+    declaredHalf.add((0, import_types61.databaseId)(d.extractedHost));
   }
   if (observedHalf.size === 0) return all;
   return all.filter((d) => {
@@ -17451,14 +17603,14 @@ function computeDivergences(graph, opts = {}) {
   }
   graph.forEachNode((nodeId, attrs) => {
     const n = attrs;
-    if (n.type === import_types60.NodeType.ServiceNode) {
+    if (n.type === import_types61.NodeType.ServiceNode) {
       const svc = n;
       for (const d of detectHostMismatch(graph, nodeId, svc)) all.push(d);
       for (const d of detectCompatDivergences(graph, nodeId, svc)) all.push(d);
       for (const d of detectDeployDivergence(svc)) all.push(d);
       return;
     }
-    if (n.type === import_types60.NodeType.InfraNode && n.kind === "sql-table") {
+    if (n.type === import_types61.NodeType.InfraNode && n.kind === "sql-table") {
       for (const d of detectColumnDrift(n)) all.push(d);
     }
   });
@@ -17523,7 +17675,7 @@ function computeDivergences(graph, opts = {}) {
     const bloc = "location" in b && b.location ? b.location : "";
     return aloc.localeCompare(bloc);
   });
-  return import_types60.DivergenceResultSchema.parse({
+  return import_types61.DivergenceResultSchema.parse({
     divergences: filtered,
     totalAffected: filtered.length,
     computedAt: (/* @__PURE__ */ new Date()).toISOString()
@@ -17534,7 +17686,7 @@ function computeDivergences(graph, opts = {}) {
 init_cjs_shims();
 var import_node_fs36 = require("fs");
 var import_node_path72 = __toESM(require("path"), 1);
-var import_types61 = require("@neat.is/types");
+var import_types62 = require("@neat.is/types");
 var SCHEMA_VERSION = 7;
 function migrateV1ToV2(payload) {
   const nodes = payload.graph.nodes;
@@ -17558,7 +17710,7 @@ function migrateV5ToV6(payload) {
   if (Array.isArray(nodes)) {
     for (const node of nodes) {
       const attrs = node.attributes;
-      if (!attrs || attrs.type !== import_types61.NodeType.InfraNode) continue;
+      if (!attrs || attrs.type !== import_types62.NodeType.InfraNode) continue;
       if (attrs.kind !== "sql-table" && attrs.kind !== "supabase-table") continue;
       if (!Array.isArray(attrs.columns)) attrs.columns = [];
     }
@@ -17574,12 +17726,12 @@ function migrateV2ToV3(payload) {
     for (const edge of edges) {
       const attrs = edge.attributes;
       if (!attrs || attrs.provenance !== "FRONTIER") continue;
-      attrs.provenance = import_types61.Provenance.OBSERVED;
+      attrs.provenance = import_types62.Provenance.OBSERVED;
       const type = typeof attrs.type === "string" ? attrs.type : void 0;
       const source = typeof attrs.source === "string" ? attrs.source : void 0;
       const target = typeof attrs.target === "string" ? attrs.target : void 0;
       if (type && source && target) {
-        const newId = (0, import_types61.observedEdgeId)(source, target, type);
+        const newId = (0, import_types62.observedEdgeId)(source, target, type);
         attrs.id = newId;
         if (edge.key) edge.key = newId;
       }
@@ -17767,7 +17919,7 @@ ${NEAT_OUT_LINE}
 
 // src/summary.ts
 init_cjs_shims();
-var import_types62 = require("@neat.is/types");
+var import_types63 = require("@neat.is/types");
 
 // src/otlp-headers.ts
 init_cjs_shims();
@@ -17786,19 +17938,19 @@ function renderOtelEnvBlock() {
 }
 function findIncompatServices(nodes) {
   return nodes.filter(
-    (n) => n.type === import_types62.NodeType.ServiceNode && Array.isArray(n.incompatibilities) && (n.incompatibilities ?? []).length > 0
+    (n) => n.type === import_types63.NodeType.ServiceNode && Array.isArray(n.incompatibilities) && (n.incompatibilities ?? []).length > 0
   );
 }
 function servicesWithoutObserved(nodes, edges) {
   const seen = /* @__PURE__ */ new Set();
   for (const e of edges) {
-    if (e.provenance === import_types62.Provenance.OBSERVED) {
+    if (e.provenance === import_types63.Provenance.OBSERVED) {
       seen.add(e.source);
       seen.add(e.target);
     }
   }
   return nodes.filter(
-    (n) => n.type === import_types62.NodeType.ServiceNode && !seen.has(n.id)
+    (n) => n.type === import_types63.NodeType.ServiceNode && !seen.has(n.id)
   );
 }
 function formatDivergence(d) {
@@ -17821,8 +17973,8 @@ function computeLanguageCoverage(nodes, edges) {
   const nodeById = /* @__PURE__ */ new Map();
   for (const n of nodes) {
     nodeById.set(n.id, n);
-    if (n.type === import_types62.NodeType.ServiceNode) serviceLang.set(n.name, n.language);
-    else if (n.type === import_types62.NodeType.FileNode) fileService.set(n.id, n.service);
+    if (n.type === import_types63.NodeType.ServiceNode) serviceLang.set(n.name, n.language);
+    else if (n.type === import_types63.NodeType.FileNode) fileService.set(n.id, n.service);
   }
   const cov = /* @__PURE__ */ new Map();
   const ensure = (lang) => {
@@ -17835,25 +17987,25 @@ function computeLanguageCoverage(nodes, edges) {
   };
   for (const lang of serviceLang.values()) ensure(lang);
   for (const n of nodes) {
-    if (n.type === import_types62.NodeType.SymbolNode) {
+    if (n.type === import_types63.NodeType.SymbolNode) {
       if (n.discoveredVia === "otel") continue;
       const lang = serviceLang.get(n.service);
       if (lang) ensure(lang).symbols = true;
-    } else if (n.type === import_types62.NodeType.RouteNode) {
+    } else if (n.type === import_types63.NodeType.RouteNode) {
       if (n.discoveredVia === "otel") continue;
       const lang = serviceLang.get(n.service);
       if (lang) ensure(lang).routes = true;
     }
   }
   for (const e of edges) {
-    if (e.type !== import_types62.EdgeType.CALLS || e.provenance !== import_types62.Provenance.EXTRACTED) continue;
+    if (e.type !== import_types63.EdgeType.CALLS || e.provenance !== import_types63.Provenance.EXTRACTED) continue;
     const svc = fileService.get(e.source);
     const lang = svc ? serviceLang.get(svc) : void 0;
     if (!lang) continue;
     const target = nodeById.get(e.target);
     if (!target) continue;
-    if (target.type === import_types62.NodeType.RouteNode) ensure(lang).crossServiceCalls = true;
-    else if (target.type === import_types62.NodeType.InfraNode && isTableInfra(target.kind)) ensure(lang).data = true;
+    if (target.type === import_types63.NodeType.RouteNode) ensure(lang).crossServiceCalls = true;
+    else if (target.type === import_types63.NodeType.InfraNode && isTableInfra(target.kind)) ensure(lang).data = true;
   }
   return cov;
 }
@@ -17953,7 +18105,7 @@ init_cjs_shims();
 var import_fastify2 = __toESM(require("fastify"), 1);
 var import_node_crypto6 = require("crypto");
 var import_cors = __toESM(require("@fastify/cors"), 1);
-var import_types105 = require("@neat.is/types");
+var import_types106 = require("@neat.is/types");
 
 // src/extend/index.ts
 init_cjs_shims();
@@ -18345,10 +18497,40 @@ function queryLogEntries(opts) {
 
 // src/goodybag.ts
 init_cjs_shims();
-var import_types63 = require("@neat.is/types");
+var import_types64 = require("@neat.is/types");
 var CODE_FILEPATH_ATTR2 = "code.filepath";
 var CODE_LINENO_ATTR2 = "code.lineno";
 var BLAST_NEAREST_LIMIT = 5;
+function deployContextOf(ev) {
+  const a = ev.attributes;
+  if (!a) return void 0;
+  const str = (k) => typeof a[k] === "string" ? a[k] : void 0;
+  const int = (k) => typeof a[k] === "number" && Number.isFinite(a[k]) ? Math.trunc(a[k]) : void 0;
+  const strs = (k) => {
+    const v = a[k];
+    return Array.isArray(v) && v.every((x) => typeof x === "string") && v.length > 0 ? v : void 0;
+  };
+  const ctx = {};
+  const fault = str("k8s.fault");
+  if (fault) ctx.fault = fault;
+  const waiting = str("k8s.waitingReason");
+  if (waiting) ctx.waitingReason = waiting;
+  const image = str("k8s.image");
+  if (image) ctx.image = image;
+  const restarts = int("k8s.restartCount");
+  if (restarts !== void 0) ctx.restartCount = restarts;
+  const termReason = str("k8s.terminatedReason");
+  if (termReason) ctx.terminatedReason = termReason;
+  const exitCode = int("k8s.exitCode");
+  if (exitCode !== void 0) ctx.exitCode = exitCode;
+  const env = strs("k8s.containerEnv");
+  if (env) ctx.containerEnv = env;
+  const args = strs("k8s.containerArgs");
+  if (args) ctx.containerArgs = args;
+  const log = str("k8s.processLog");
+  if (log) ctx.processLog = log;
+  return Object.keys(ctx).length > 0 ? ctx : void 0;
+}
 function grainOf2(graph, nodeId) {
   if (graph.hasNode(nodeId)) {
     const t = graph.getNodeAttributes(nodeId).type;
@@ -18371,7 +18553,7 @@ function locusOf(graph, ev) {
     ...Number.isFinite(line) ? { lineStart: line, lineEnd: line } : {},
     ...symbol ? { symbol } : {},
     service: node?.service ?? ev.service,
-    provenance: import_types63.Provenance.OBSERVED
+    provenance: import_types64.Provenance.OBSERVED
   };
 }
 function locusFromNode(graph, nodeId) {
@@ -18387,7 +18569,7 @@ function locusFromNode(graph, nodeId) {
     ...typeof end === "number" ? { lineEnd: end } : {},
     ...n.qualname ? { symbol: shortLabel(graph, nodeId) } : {},
     ...n.service ? { service: n.service } : {},
-    provenance: import_types63.Provenance.INFERRED
+    provenance: import_types64.Provenance.INFERRED
   };
 }
 function promoteCauseLocus(graph, causeNode, incidents) {
@@ -18396,11 +18578,16 @@ function promoteCauseLocus(graph, causeNode, incidents) {
   );
   if (native) {
     const l = locusOf(graph, native);
-    if (l) return { ...l, symbol: shortLabel(graph, causeNode), provenance: import_types63.Provenance.INFERRED };
+    if (l) return { ...l, symbol: shortLabel(graph, causeNode), provenance: import_types64.Provenance.INFERRED };
   }
   return locusFromNode(graph, causeNode);
 }
 function divergenceSummary(d) {
+  if (d.type === "observed-symbol-mismatch" || d.source === d.target) {
+    const symbol = "symbol" in d && d.symbol ? d.symbol : d.source;
+    const at = "location" in d && d.location ? ` at ${d.location}` : "";
+    return `${symbol}${at}`;
+  }
   const column = "column" in d && d.column ? `.${d.column}` : "";
   const label = "table" in d && d.table ? `${d.table}${column}` : `${d.source} \u2192 ${d.target}`;
   return label;
@@ -18445,7 +18632,7 @@ function buildIncidentCard(graph, errorEvent, incidents, policies) {
     const chain = (rc.traversalPath ?? []).map((node, i) => ({
       node,
       grain: grainOf2(graph, node),
-      provenance: provs[i] ?? provs[provs.length - 1] ?? import_types63.Provenance.INFERRED
+      provenance: provs[i] ?? provs[provs.length - 1] ?? import_types64.Provenance.INFERRED
     }));
     rootCause = {
       node: rc.rootCauseNode,
@@ -18476,7 +18663,7 @@ function buildIncidentCard(graph, errorEvent, incidents, policies) {
     kind: "incident",
     id: errorEvent.id,
     at: errorEvent.timestamp,
-    incidentKind: (0, import_types63.incidentKindOf)(errorEvent),
+    incidentKind: (0, import_types64.incidentKindOf)(errorEvent),
     service: errorEvent.service,
     affectedNode: affected,
     message: errorEvent.errorMessage,
@@ -18491,10 +18678,14 @@ function buildIncidentCard(graph, errorEvent, incidents, policies) {
     ...nearest.length > 0 ? { blastRadius: { totalAffected: blast.totalAffected, nearest } } : {},
     ...policyCards.length > 0 ? { policies: policyCards } : {},
     ...divergences.length > 0 ? { divergence: divergences } : {},
+    ...(() => {
+      const dc = deployContextOf(errorEvent);
+      return dc ? { deployContext: dc } : {};
+    })(),
     headline: renderHeadline(graph, errorEvent, locus, rootCause?.node ?? null)
   };
   card.grade = gradeIncidentCard(card);
-  return import_types63.IncidentCardSchema.parse(card);
+  return import_types64.IncidentCardSchema.parse(card);
 }
 var GRADE_PRIORS_VERSION = "sniper-architecture-priors-2026-10-08";
 var GRADE_WEIGHTS = {
@@ -18601,7 +18792,7 @@ function gradeIncidentCard(card) {
 
 // src/ask.ts
 init_cjs_shims();
-var import_types64 = require("@neat.is/types");
+var import_types65 = require("@neat.is/types");
 var DEFAULT_MAX_NODES = 3;
 var MAX_FACTS_PER_SECTION = 6;
 var INTENT_RULES = [
@@ -18837,14 +19028,23 @@ function idBody(id) {
   return colon >= 0 ? id.slice(colon + 1) : id;
 }
 var TYPE_NOUNS = [
-  { nouns: ["database", "db", "table"], type: import_types64.NodeType.DatabaseNode },
-  { nouns: ["service", "api", "backend"], type: import_types64.NodeType.ServiceNode },
-  { nouns: ["route", "endpoint"], type: import_types64.NodeType.RouteNode },
-  { nouns: ["file"], type: import_types64.NodeType.FileNode },
-  { nouns: ["config"], type: import_types64.NodeType.ConfigNode }
+  { nouns: ["database", "db", "table"], type: import_types65.NodeType.DatabaseNode },
+  { nouns: ["service", "api", "backend"], type: import_types65.NodeType.ServiceNode },
+  { nouns: ["route", "endpoint"], type: import_types65.NodeType.RouteNode },
+  { nouns: ["file"], type: import_types65.NodeType.FileNode },
+  { nouns: ["config"], type: import_types65.NodeType.ConfigNode }
 ];
 var EMBED_MIN_SCORE = 0.35;
 async function resolveEntities(graph, question, searchIndex, maxNodes) {
+  const verbatim = [];
+  for (const word of question.split(/\s+/)) {
+    const id = word.replace(/^["'`(<]+|["'`)>?!.,;]+$/g, "");
+    if (!id || !graph.hasNode(id) || verbatim.some((m) => m.nodeId === id)) continue;
+    const node = graph.getNodeAttributes(id);
+    if (node.type === import_types65.NodeType.FrontierNode) continue;
+    verbatim.push({ nodeId: id, label: nodeName(node), via: "id", score: 1 });
+  }
+  if (verbatim.length > 0) return { matched: verbatim.slice(0, maxNodes) };
   const qTokens = queryTokens(question);
   const normalized = question.toLowerCase();
   const best = /* @__PURE__ */ new Map();
@@ -18855,7 +19055,7 @@ async function resolveEntities(graph, question, searchIndex, maxNodes) {
   };
   graph.forEachNode((id, attrs) => {
     const node = attrs;
-    if (node.type === import_types64.NodeType.FrontierNode) return;
+    if (node.type === import_types65.NodeType.FrontierNode) return;
     const name = nodeName(node);
     const body = idBody(id);
     const labelTokens = /* @__PURE__ */ new Set([...tokens(body), ...tokens(name)]);
@@ -18874,7 +19074,7 @@ async function resolveEntities(graph, question, searchIndex, maxNodes) {
       const res = await searchIndex.search(question, 10);
       if (res.provider !== "substring") {
         for (const m of res.matches) {
-          if (m.node.type === import_types64.NodeType.FrontierNode) continue;
+          if (m.node.type === import_types65.NodeType.FrontierNode) continue;
           if (!graph.hasNode(m.node.id)) continue;
           const already = best.get(m.node.id);
           if (!already && m.score < EMBED_MIN_SCORE) continue;
@@ -18934,7 +19134,7 @@ function edgeSignalNote(e) {
 function buildRootCauseSection(graph, node, incidents, now) {
   const result = getRootCause(graph, node, void 0, incidents, { now });
   if (!result) return null;
-  const lastProv = result.edgeProvenances[result.edgeProvenances.length - 1] ?? import_types64.Provenance.OBSERVED;
+  const lastProv = result.edgeProvenances[result.edgeProvenances.length - 1] ?? import_types65.Provenance.OBSERVED;
   const facts = [
     {
       text: `Root cause: ${result.rootCauseNode} \u2014 ${result.rootCauseReason}`,
@@ -18984,7 +19184,7 @@ function buildObservedSection(graph, node) {
     if (result.observed && result.inboundObservedCount > 0) {
       facts.push({
         text: `no outbound runtime calls, but OTel observed ${result.inboundObservedCount} inbound call path${result.inboundObservedCount === 1 ? "" : "s"} \u2014 a pure receiver`,
-        provenance: import_types64.Provenance.OBSERVED
+        provenance: import_types65.Provenance.OBSERVED
       });
     } else {
       return null;
@@ -19007,10 +19207,10 @@ function buildBlastSection(graph, node) {
 }
 function buildDatabaseCallersSection(graph, node) {
   const callers = getBlastRadius(graph, node).affectedNodes.filter((item) => {
-    if (graph.getNodeAttributes(item.nodeId).type !== import_types64.NodeType.ServiceNode) return false;
+    if (graph.getNodeAttributes(item.nodeId).type !== import_types65.NodeType.ServiceNode) return false;
     return item.path.slice(1, -1).every((id) => {
       const type = graph.getNodeAttributes(id).type;
-      return type === import_types64.NodeType.FileNode || type === import_types64.NodeType.SymbolNode;
+      return type === import_types65.NodeType.FileNode || type === import_types65.NodeType.SymbolNode;
     });
   });
   return {
@@ -19029,7 +19229,7 @@ function buildIncidentsSection(node, incidents) {
   const facts = ordered.map((ev) => ({
     text: `${ev.timestamp} \u2014 ${ev.service}: ${ev.errorMessage}`,
     // ErrorEvents are observation records — OBSERVED by definition.
-    provenance: import_types64.Provenance.OBSERVED
+    provenance: import_types65.Provenance.OBSERVED
   }));
   return { heading: `Recent incidents (OBSERVED) \u2014 ${relevant.length} recorded`, facts };
 }
@@ -19052,8 +19252,8 @@ function runtimeEdgeState(graph) {
   let observed = false;
   let stale = false;
   graph.forEachEdge((_id, attrs) => {
-    if (attrs.provenance === import_types64.Provenance.OBSERVED) observed = true;
-    if (attrs.provenance === import_types64.Provenance.STALE) stale = true;
+    if (attrs.provenance === import_types65.Provenance.OBSERVED) observed = true;
+    if (attrs.provenance === import_types65.Provenance.STALE) stale = true;
   });
   return { observed, stale };
 }
@@ -19121,7 +19321,7 @@ function buildGlobalIncidentsSection(incidents) {
   }
   const byKey = /* @__PURE__ */ new Map();
   for (const ev of incidents) {
-    const key = ev.affectedNode || (0, import_types64.serviceId)(ev.service);
+    const key = ev.affectedNode || (0, import_types65.serviceId)(ev.service);
     const cur = byKey.get(key);
     if (!cur) {
       byKey.set(key, { key, count: 1, latest: ev.timestamp, sampleMsg: ev.errorMessage });
@@ -19136,7 +19336,7 @@ function buildGlobalIncidentsSection(incidents) {
   const rows = [...byKey.values()].sort((a, b) => b.count - a.count || b.latest.localeCompare(a.latest) || a.key.localeCompare(b.key)).slice(0, MAX_FACTS_PER_SECTION);
   const facts = rows.map((r) => ({
     text: `${r.key} \u2014 ${r.count} incident${r.count === 1 ? "" : "s"}, latest ${r.latest}: ${r.sampleMsg}`,
-    provenance: import_types64.Provenance.OBSERVED
+    provenance: import_types65.Provenance.OBSERVED
   }));
   return {
     heading: `Incidents across the system \u2014 ${incidents.length} recorded`,
@@ -19149,7 +19349,7 @@ function buildOverviewSections(graph, incidents) {
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
     nodeByType.set(node.type, (nodeByType.get(node.type) ?? 0) + 1);
-    if (node.type === import_types64.NodeType.ServiceNode) services.push(node.id);
+    if (node.type === import_types65.NodeType.ServiceNode) services.push(node.id);
   });
   const edgeByProv = /* @__PURE__ */ new Map();
   graph.forEachEdge((_id, attrs) => {
@@ -19161,10 +19361,10 @@ function buildOverviewSections(graph, incidents) {
   const shapeFacts = [
     { text: `${graph.order} nodes, ${graph.size} edges` },
     {
-      text: `${count(import_types64.NodeType.ServiceNode)} services, ${count(import_types64.NodeType.FileNode)} files, ${count(import_types64.NodeType.SymbolNode)} symbols, ${count(import_types64.NodeType.DatabaseNode)} databases`
+      text: `${count(import_types65.NodeType.ServiceNode)} services, ${count(import_types65.NodeType.FileNode)} files, ${count(import_types65.NodeType.SymbolNode)} symbols, ${count(import_types65.NodeType.DatabaseNode)} databases`
     }
   ];
-  for (const p of [import_types64.Provenance.EXTRACTED, import_types64.Provenance.OBSERVED, import_types64.Provenance.INFERRED, import_types64.Provenance.STALE]) {
+  for (const p of [import_types65.Provenance.EXTRACTED, import_types65.Provenance.OBSERVED, import_types65.Provenance.INFERRED, import_types65.Provenance.STALE]) {
     const n = edgeByProv.get(p) ?? 0;
     if (n > 0) shapeFacts.push({ text: `${n} ${p} edge${n === 1 ? "" : "s"}`, provenance: p });
   }
@@ -19181,7 +19381,7 @@ function buildOverviewSections(graph, incidents) {
   if (incidents && incidents.length > 0) {
     const incCount = /* @__PURE__ */ new Map();
     for (const ev of incidents) {
-      const key = ev.affectedNode || (0, import_types64.serviceId)(ev.service);
+      const key = ev.affectedNode || (0, import_types65.serviceId)(ev.service);
       incCount.set(key, (incCount.get(key) ?? 0) + 1);
     }
     const top = [...incCount.entries()].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).slice(0, MAX_FACTS_PER_SECTION);
@@ -19189,7 +19389,7 @@ function buildOverviewSections(graph, incidents) {
       heading: `Nodes with incidents \u2014 ${incidents.length} recorded`,
       facts: top.map(([k, n]) => ({
         text: `${k} \u2014 ${n} incident${n === 1 ? "" : "s"}`,
-        provenance: import_types64.Provenance.OBSERVED
+        provenance: import_types65.Provenance.OBSERVED
       }))
     });
   }
@@ -19320,7 +19520,7 @@ async function askGraph(graph, question, opts = {}) {
   let scope;
   if (primary) {
     scope = "node";
-    const callersQuestion = intent === "dependencies" && graph.getNodeAttributes(primary).type === import_types64.NodeType.DatabaseNode && /\b(?:which|what)\s+services?\s+(?:talks?\s+to|connects?\s+to|uses?|hits?|calls?|reads?\s+from|writes?\s+to)\b/i.test(question);
+    const callersQuestion = intent === "dependencies" && graph.getNodeAttributes(primary).type === import_types65.NodeType.DatabaseNode && /\b(?:which|what)\s+services?\s+(?:talks?\s+to|connects?\s+to|uses?|hits?|calls?|reads?\s+from|writes?\s+to)\b/i.test(question);
     if (callersQuestion) sections.push(buildDatabaseCallersSection(graph, primary));
     for (const kind of SECTION_ORDER[intent]) {
       if (callersQuestion && kind === "blast") continue;
@@ -19338,7 +19538,7 @@ async function askGraph(graph, question, opts = {}) {
   const provSet = /* @__PURE__ */ new Set();
   for (const s of sections) for (const f of s.facts) if (f.provenance) provSet.add(f.provenance);
   const confidence = sections[0]?.facts[0]?.confidence;
-  return import_types64.AskResultSchema.parse({
+  return import_types65.AskResultSchema.parse({
     question,
     intent,
     matched,
@@ -19485,7 +19685,7 @@ init_cjs_shims();
 var import_node_fs41 = require("fs");
 var import_node_os3 = __toESM(require("os"), 1);
 var import_node_path77 = __toESM(require("path"), 1);
-var import_types65 = require("@neat.is/types");
+var import_types66 = require("@neat.is/types");
 var LOCK_TIMEOUT_MS = 5e3;
 var LOCK_RETRY_MS = 50;
 function neatHome() {
@@ -19755,10 +19955,10 @@ async function readRegistry() {
     throw err;
   }
   const parsed = JSON.parse(raw);
-  return import_types65.RegistryFileSchema.parse(parsed);
+  return import_types66.RegistryFileSchema.parse(parsed);
 }
 async function writeRegistry(reg) {
-  const validated = import_types65.RegistryFileSchema.parse(reg);
+  const validated = import_types66.RegistryFileSchema.parse(reg);
   await writeAtomically(registryPath(), JSON.stringify(validated, null, 2) + "\n");
 }
 var RegistryError = class extends Error {
@@ -19908,11 +20108,11 @@ async function pruneRegistry(opts = {}) {
 init_cjs_shims();
 var import_node_fs42 = require("fs");
 var import_zod = require("zod");
-var import_types66 = require("@neat.is/types");
+var import_types67 = require("@neat.is/types");
 var SSE_HEARTBEAT_MS = 3e4;
 var SSE_BACKPRESSURE_CAP = 1e3;
 var INCIDENT_TRIGGER_STREAM_SCOPE = "incident-only-v1";
-var IncidentTriggerSchema = import_types66.IncidentEventPayloadSchema.extend({
+var IncidentTriggerSchema = import_types67.IncidentEventPayloadSchema.extend({
   incidentId: import_zod.z.string().regex(/^[A-Za-z0-9:_-]{1,100}$/),
   affectedNode: import_zod.z.string().min(1).max(512),
   service: import_zod.z.string().min(1).max(256),
@@ -19940,12 +20140,12 @@ function loadIncidentReplay(errorsPath, cursor) {
         if (!isExtractionFailure(row)) throw new Error("incident replay unavailable");
         continue;
       }
-      const event = import_types66.ErrorEventSchema.parse(row);
+      const event = import_types67.ErrorEventSchema.parse(row);
       const trigger = IncidentTriggerSchema.parse({
         incidentId: event.id,
         affectedNode: event.affectedNode,
         service: event.service,
-        incidentKind: (0, import_types66.incidentKindOf)(event),
+        incidentKind: (0, import_types67.incidentKindOf)(event),
         at: event.timestamp
       });
       const prior = seen.get(trigger.incidentId), encoded = JSON.stringify(trigger);
@@ -20320,7 +20520,7 @@ function renderVerdict({
 }
 
 // src/pr-verdict.ts
-var import_types67 = require("@neat.is/types");
+var import_types68 = require("@neat.is/types");
 
 // src/connectors/hosted-repos.ts
 init_cjs_shims();
@@ -20393,7 +20593,7 @@ var PrVerdictError = class extends Error {
   details;
 };
 function parsePrVerdictRequest(body) {
-  const parsed = import_types67.PrVerdictBodySchema.safeParse(body);
+  const parsed = import_types68.PrVerdictBodySchema.safeParse(body);
   if (!parsed.success) {
     throw new PrVerdictError("invalid pr-verdict body", 400, void 0, parsed.error.issues);
   }
@@ -20863,15 +21063,15 @@ function getConnectorStatus(id, now = Date.now(), thresholdMs = CONNECTOR_STALE_
 
 // src/connectors/index.ts
 init_cjs_shims();
-var import_types68 = require("@neat.is/types");
+var import_types69 = require("@neat.is/types");
 var NO_ENV = "unknown";
 function staticCallSiteFor(graph, serviceName, targetNodeId) {
   if (!graph.hasNode(targetNodeId)) return void 0;
   const sites = [];
   for (const edgeId of graph.inboundEdges(targetNodeId)) {
     const edge = graph.getEdgeAttributes(edgeId);
-    if (edge.provenance !== import_types68.Provenance.EXTRACTED) continue;
-    const parsed = (0, import_types68.parseFileId)(edge.source);
+    if (edge.provenance !== import_types69.Provenance.EXTRACTED) continue;
+    const parsed = (0, import_types69.parseFileId)(edge.source);
     if (!parsed || parsed.service !== serviceName || !edge.evidence) continue;
     const site = { relPath: edge.evidence.file };
     if (edge.evidence.line !== void 0) site.line = edge.evidence.line;
@@ -20882,7 +21082,7 @@ function staticCallSiteFor(graph, serviceName, targetNodeId) {
 function routeCallSiteFor(graph, targetNodeId) {
   if (!graph.hasNode(targetNodeId)) return void 0;
   const attrs = graph.getNodeAttributes(targetNodeId);
-  if (attrs.type !== import_types68.NodeType.RouteNode || !attrs.path) return void 0;
+  if (attrs.type !== import_types69.NodeType.RouteNode || !attrs.path) return void 0;
   const site = { relPath: attrs.path };
   if (attrs.line !== void 0) site.line = attrs.line;
   return site;
@@ -21606,23 +21806,23 @@ async function fetchPgStatStatements(connectionString, limit = DEFAULT_STATEMENT
 
 // src/connectors/supabase/resolve.ts
 init_cjs_shims();
-var import_types70 = require("@neat.is/types");
+var import_types71 = require("@neat.is/types");
 function createSupabaseResolveTarget(graph, config) {
   return (signal, _ctx) => {
     if (signal.targetKind !== SUPABASE_TABLE_TARGET_KIND && signal.targetKind !== SUPABASE_RPC_TARGET_KIND) {
       return null;
     }
-    const subResourceId = (0, import_types70.infraId)(signal.targetKind, `${config.nodeRef}/${signal.targetName}`);
+    const subResourceId = (0, import_types71.infraId)(signal.targetKind, `${config.nodeRef}/${signal.targetName}`);
     if (graph.hasNode(subResourceId)) {
-      return { targetNodeId: subResourceId, serviceName: config.serviceName, edgeType: import_types70.EdgeType.CALLS };
+      return { targetNodeId: subResourceId, serviceName: config.serviceName, edgeType: import_types71.EdgeType.CALLS };
     }
-    const bareResourceId = (0, import_types70.infraId)(signal.targetKind, signal.targetName);
+    const bareResourceId = (0, import_types71.infraId)(signal.targetKind, signal.targetName);
     if (graph.hasNode(bareResourceId)) {
-      return { targetNodeId: bareResourceId, serviceName: config.serviceName, edgeType: import_types70.EdgeType.CALLS };
+      return { targetNodeId: bareResourceId, serviceName: config.serviceName, edgeType: import_types71.EdgeType.CALLS };
     }
-    const projectLevelId = (0, import_types70.infraId)("supabase", config.nodeRef);
+    const projectLevelId = (0, import_types71.infraId)("supabase", config.nodeRef);
     if (graph.hasNode(projectLevelId)) {
-      return { targetNodeId: projectLevelId, serviceName: config.serviceName, edgeType: import_types70.EdgeType.CALLS };
+      return { targetNodeId: projectLevelId, serviceName: config.serviceName, edgeType: import_types71.EdgeType.CALLS };
     }
     return null;
   };
@@ -21715,7 +21915,7 @@ function createSupabaseConnector(graph, config, deps = {}) {
 
 // src/connectors/railway/index.ts
 init_cjs_shims();
-var import_types74 = require("@neat.is/types");
+var import_types75 = require("@neat.is/types");
 
 // src/connectors/railway/client.ts
 init_cjs_shims();
@@ -21866,7 +22066,7 @@ function buildRailwayRouteIndex(graph, serviceName) {
   const out = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types74.NodeType.RouteNode) return;
+    if (node.type !== import_types75.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     out.push({
@@ -21970,12 +22170,12 @@ function createRailwayResolveTarget(config) {
     const serviceName = config.serviceNameById[config.serviceId];
     if (!serviceName) return null;
     if (signal.targetKind === ROUTE_TARGET_KIND) {
-      return { targetNodeId: signal.targetName, serviceName, edgeType: import_types74.EdgeType.CALLS };
+      return { targetNodeId: signal.targetName, serviceName, edgeType: import_types75.EdgeType.CALLS };
     }
     if (signal.targetKind === PEER_SERVICE_TARGET_KIND) {
       const peerName = config.serviceNameById[signal.targetName];
       if (!peerName) return null;
-      return { targetNodeId: (0, import_types74.serviceId)(peerName), serviceName, edgeType: import_types74.EdgeType.CONNECTS_TO };
+      return { targetNodeId: (0, import_types75.serviceId)(peerName), serviceName, edgeType: import_types75.EdgeType.CONNECTS_TO };
     }
     return null;
   };
@@ -22163,11 +22363,11 @@ function mapLogEntriesToSignals(entries) {
 
 // src/connectors/firebase/resolve.ts
 init_cjs_shims();
-var import_types76 = require("@neat.is/types");
+var import_types77 = require("@neat.is/types");
 
 // src/connectors/infer-service.ts
 init_cjs_shims();
-var import_types75 = require("@neat.is/types");
+var import_types76 = require("@neat.is/types");
 function normalizeName(name) {
   return name.toLowerCase().replace(/[^a-z0-9]/g, "");
 }
@@ -22178,11 +22378,11 @@ function inferServiceName(graph, resourceName, method, path104) {
   const owners = /* @__PURE__ */ new Set();
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type === import_types75.NodeType.ServiceNode && typeof node.name === "string") {
+    if (node.type === import_types76.NodeType.ServiceNode && typeof node.name === "string") {
       services.push(node.name);
       return;
     }
-    if (node.type !== import_types75.NodeType.RouteNode) return;
+    if (node.type !== import_types76.NodeType.RouteNode) return;
     const route = attrs;
     if (!route.pathTemplate || normalizePathTemplate(route.pathTemplate) !== wantedPath) return;
     const routeMethod = route.method.toUpperCase();
@@ -22209,7 +22409,7 @@ function routeEntriesFor(graph, serviceName) {
   const entries = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types76.NodeType.RouteNode) return;
+    if (node.type !== import_types77.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     entries.push({
@@ -22241,7 +22441,7 @@ function createFirebaseResolveTarget(graph, serviceMap) {
     return {
       targetNodeId: match.routeNodeId,
       serviceName,
-      edgeType: import_types76.EdgeType.CALLS
+      edgeType: import_types77.EdgeType.CALLS
     };
   };
 }
@@ -22274,7 +22474,7 @@ init_cjs_shims();
 
 // src/connectors/cloudflare/connector.ts
 init_cjs_shims();
-var import_types78 = require("@neat.is/types");
+var import_types79 = require("@neat.is/types");
 
 // src/connectors/cloudflare/client.ts
 init_cjs_shims();
@@ -22438,7 +22638,7 @@ function findTaggedWorkerFileNode(graph, workerName) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type === import_types78.NodeType.FileNode && a.platform === "cloudflare" && a.platformName === workerName) {
+    if (a.type === import_types79.NodeType.FileNode && a.platform === "cloudflare" && a.platformName === workerName) {
       found = id;
     }
   });
@@ -22450,7 +22650,7 @@ function findMatchingRouteNode(graph, serviceName, method, path104) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type !== import_types78.NodeType.RouteNode || a.service !== serviceName) return;
+    if (a.type !== import_types79.NodeType.RouteNode || a.service !== serviceName) return;
     if (!a.pathTemplate || normalizePathTemplate(a.pathTemplate) !== normalizedPath) return;
     const routeMethod = (a.method ?? "").toUpperCase();
     if (routeMethod !== "ALL" && routeMethod !== method) return;
@@ -22469,11 +22669,11 @@ function createCloudflareResolveTarget(config, graph) {
     };
     const mapping = config.workers?.[scriptName];
     if (mapping) {
-      const wholeFileId = (0, import_types78.fileId)(mapping.service, mapping.entryFile);
+      const wholeFileId = (0, import_types79.fileId)(mapping.service, mapping.entryFile);
       return {
         targetNodeId: resolveRouteGrain(mapping.service, wholeFileId),
         serviceName: mapping.service,
-        edgeType: import_types78.EdgeType.CALLS
+        edgeType: import_types79.EdgeType.CALLS
       };
     }
     const taggedFileId = findTaggedWorkerFileNode(graph, scriptName);
@@ -22482,13 +22682,13 @@ function createCloudflareResolveTarget(config, graph) {
       return {
         targetNodeId: resolveRouteGrain(fileNode.service, taggedFileId),
         serviceName: fileNode.service,
-        edgeType: import_types78.EdgeType.CALLS
+        edgeType: import_types79.EdgeType.CALLS
       };
     }
     return {
-      targetNodeId: (0, import_types78.infraId)("cloudflare-worker", scriptName),
+      targetNodeId: (0, import_types79.infraId)("cloudflare-worker", scriptName),
       serviceName: scriptName,
-      edgeType: import_types78.EdgeType.CALLS,
+      edgeType: import_types79.EdgeType.CALLS,
       ensureInfraNode: { kind: "cloudflare-worker", name: scriptName, provider: "cloudflare" }
     };
   };
@@ -22684,14 +22884,14 @@ function diffNeonStatementsToSignals(rows, previous, observedAtIso) {
 
 // src/connectors/neon/resolve.ts
 init_cjs_shims();
-var import_types82 = require("@neat.is/types");
+var import_types83 = require("@neat.is/types");
 function createNeonResolveTarget(config) {
   return (signal) => {
     if (signal.targetKind !== NEON_SQL_TABLE_TARGET_KIND || !signal.targetName) return null;
     return {
-      targetNodeId: (0, import_types82.infraId)("sql-table", signal.targetName),
+      targetNodeId: (0, import_types83.infraId)("sql-table", signal.targetName),
       serviceName: config.serviceName,
-      edgeType: import_types82.EdgeType.CALLS,
+      edgeType: import_types83.EdgeType.CALLS,
       ensureInfraNode: { kind: "sql-table", name: signal.targetName, provider: "neon" }
     };
   };
@@ -22872,14 +23072,14 @@ function mapLogEntriesToSignals2(entries) {
 
 // src/connectors/cloud-run/resolve.ts
 init_cjs_shims();
-var import_types86 = require("@neat.is/types");
+var import_types87 = require("@neat.is/types");
 var CLOUD_RUN_SERVICE_INFRA_KIND = "cloud-run-service";
 function findMatchingRouteNode2(graph, serviceName, method, normalizedPath) {
   let found = null;
   graph.forEachNode((_id, attrs) => {
     if (found) return;
     const node = attrs;
-    if (node.type !== import_types86.NodeType.RouteNode) return;
+    if (node.type !== import_types87.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName || !route.pathTemplate) return;
     if (normalizePathTemplate(route.pathTemplate) !== normalizedPath) return;
@@ -22904,13 +23104,13 @@ function createCloudRunResolveTarget(graph, config) {
         normalizePathTemplate(path104)
       );
       if (routeNodeId) {
-        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types86.EdgeType.CALLS };
+        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types87.EdgeType.CALLS };
       }
     }
     return {
-      targetNodeId: (0, import_types86.infraId)(CLOUD_RUN_SERVICE_INFRA_KIND, gcpServiceName),
+      targetNodeId: (0, import_types87.infraId)(CLOUD_RUN_SERVICE_INFRA_KIND, gcpServiceName),
       serviceName: mappedService ?? gcpServiceName,
-      edgeType: import_types86.EdgeType.CALLS,
+      edgeType: import_types87.EdgeType.CALLS,
       ensureInfraNode: {
         kind: CLOUD_RUN_SERVICE_INFRA_KIND,
         name: gcpServiceName,
@@ -23092,14 +23292,14 @@ function mapLogEntriesToSignals3(entries) {
 
 // src/connectors/gcp-lb/resolve.ts
 init_cjs_shims();
-var import_types90 = require("@neat.is/types");
+var import_types91 = require("@neat.is/types");
 var GCP_LB_BACKEND_INFRA_KIND = "gcp-lb-backend";
 function findMatchingRouteNode3(graph, serviceName, method, normalizedPath) {
   let found = null;
   graph.forEachNode((_id, attrs) => {
     if (found) return;
     const node = attrs;
-    if (node.type !== import_types90.NodeType.RouteNode) return;
+    if (node.type !== import_types91.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName || !route.pathTemplate) return;
     if (normalizePathTemplate(route.pathTemplate) !== normalizedPath) return;
@@ -23124,13 +23324,13 @@ function createGcpLbResolveTarget(graph, config) {
         normalizePathTemplate(path104)
       );
       if (routeNodeId) {
-        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types90.EdgeType.CALLS };
+        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types91.EdgeType.CALLS };
       }
     }
     return {
-      targetNodeId: (0, import_types90.infraId)(GCP_LB_BACKEND_INFRA_KIND, backendServiceName),
+      targetNodeId: (0, import_types91.infraId)(GCP_LB_BACKEND_INFRA_KIND, backendServiceName),
       serviceName: mappedService ?? backendServiceName,
-      edgeType: import_types90.EdgeType.CALLS,
+      edgeType: import_types91.EdgeType.CALLS,
       ensureInfraNode: {
         kind: GCP_LB_BACKEND_INFRA_KIND,
         name: backendServiceName,
@@ -23171,7 +23371,7 @@ function createGcpLbConnector(graph, config = {}) {
 
 // src/connectors/render/index.ts
 init_cjs_shims();
-var import_types93 = require("@neat.is/types");
+var import_types94 = require("@neat.is/types");
 
 // src/connectors/render/types.ts
 init_cjs_shims();
@@ -23249,7 +23449,7 @@ function buildRenderRouteIndex(graph, serviceName) {
   const out = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types93.NodeType.RouteNode) return;
+    if (node.type !== import_types94.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     out.push({
@@ -23334,7 +23534,7 @@ function mapRenderRequestLogsToSignals(entries, routeIndex) {
 function createRenderResolveTarget(config) {
   return (signal) => {
     if (signal.targetKind === ROUTE_TARGET_KIND2) {
-      return { targetNodeId: signal.targetName, serviceName: config.serviceName, edgeType: import_types93.EdgeType.CALLS };
+      return { targetNodeId: signal.targetName, serviceName: config.serviceName, edgeType: import_types94.EdgeType.CALLS };
     }
     return null;
   };
@@ -23472,21 +23672,21 @@ function mapInsightsToSignals(rows, observedAtIso) {
 
 // src/connectors/planetscale/resolve.ts
 init_cjs_shims();
-var import_types97 = require("@neat.is/types");
+var import_types98 = require("@neat.is/types");
 var PLANETSCALE_DATABASE_KIND = "planetscale-database";
 function createPlanetscaleResolveTarget(graph, config) {
   const databaseName = `${config.organization}/${config.database}`;
   return (signal, _ctx) => {
     if (signal.targetKind !== PLANETSCALE_SQL_TABLE_TARGET_KIND || !signal.targetName) return null;
-    const tableId = (0, import_types97.infraId)("sql-table", signal.targetName);
+    const tableId = (0, import_types98.infraId)("sql-table", signal.targetName);
     if (graph.hasNode(tableId)) {
-      return { targetNodeId: tableId, serviceName: config.serviceName, edgeType: import_types97.EdgeType.CALLS };
+      return { targetNodeId: tableId, serviceName: config.serviceName, edgeType: import_types98.EdgeType.CALLS };
     }
-    const providerId = (0, import_types97.infraId)(PLANETSCALE_DATABASE_KIND, databaseName);
+    const providerId = (0, import_types98.infraId)(PLANETSCALE_DATABASE_KIND, databaseName);
     return {
       targetNodeId: providerId,
       serviceName: config.serviceName,
-      edgeType: import_types97.EdgeType.CALLS,
+      edgeType: import_types98.EdgeType.CALLS,
       ensureInfraNode: { kind: PLANETSCALE_DATABASE_KIND, name: databaseName, provider: "planetscale" }
     };
   };
@@ -23751,7 +23951,7 @@ function mapBuildsToSignals(builds, serviceName) {
 
 // src/connectors/eas/resolve.ts
 init_cjs_shims();
-var import_types102 = require("@neat.is/types");
+var import_types103 = require("@neat.is/types");
 var NO_ENV2 = "unknown";
 var EAS_JSON_PHASES = /* @__PURE__ */ new Set(["READ_EAS_JSON"]);
 var APP_CONFIG_PHASES = /* @__PURE__ */ new Set([
@@ -23767,8 +23967,8 @@ function configBasenamesForPhase(phase) {
 function configNodeService(graph, configNodeId) {
   for (const edgeId of graph.inboundEdges(configNodeId)) {
     const edge = graph.getEdgeAttributes(edgeId);
-    if (edge.type !== import_types102.EdgeType.CONFIGURED_BY) continue;
-    const parsed = (0, import_types102.parseFileId)(edge.source);
+    if (edge.type !== import_types103.EdgeType.CONFIGURED_BY) continue;
+    const parsed = (0, import_types103.parseFileId)(edge.source);
     if (parsed) return parsed.service;
   }
   return null;
@@ -23779,7 +23979,7 @@ function findConfigNode(graph, basenames, serviceName) {
   graph.forEachNode((id, attrs) => {
     if (scoped) return;
     const node = attrs;
-    if (node.type !== import_types102.NodeType.ConfigNode) return;
+    if (node.type !== import_types103.NodeType.ConfigNode) return;
     if (typeof node.name !== "string" || !basenames.includes(node.name)) return;
     if (anyMatch === null) anyMatch = id;
     if (configNodeService(graph, id) === serviceName) scoped = id;
@@ -23796,13 +23996,13 @@ function createEasResolveTarget(graph) {
     if (basenames.length > 0) {
       const configNodeId = findConfigNode(graph, basenames, serviceName);
       if (configNodeId) {
-        return { targetNodeId: configNodeId, serviceName, edgeType: import_types102.EdgeType.CALLS };
+        return { targetNodeId: configNodeId, serviceName, edgeType: import_types103.EdgeType.CALLS };
       }
     }
     return {
       targetNodeId: resolveFusedServiceId(graph, serviceName, NO_ENV2),
       serviceName,
-      edgeType: import_types102.EdgeType.CALLS
+      edgeType: import_types103.EdgeType.CALLS
     };
   };
 }
@@ -24521,7 +24721,7 @@ function serializeGraph(graph) {
   graph.forEachEdge((_id, attrs) => {
     edges.push(attrs);
   });
-  return { nodes, edges };
+  return { nodes, edges, sourceBaselines: readSourceBaselines(graph) };
 }
 function projectFromReq(req, singleProject, registry) {
   const params = req.params;
@@ -24704,11 +24904,11 @@ function registerRoutes(scope, ctx) {
       const candidates = req.query.type.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
       const parsed = [];
       for (const c of candidates) {
-        const r = import_types105.DivergenceTypeSchema.safeParse(c);
+        const r = import_types106.DivergenceTypeSchema.safeParse(c);
         if (!r.success) {
           return reply.code(400).send({
             error: `unknown divergence type "${c}"`,
-            allowed: import_types105.DivergenceTypeSchema.options
+            allowed: import_types106.DivergenceTypeSchema.options
           });
         }
         parsed.push(r.data);
@@ -25145,7 +25345,7 @@ function registerRoutes(scope, ctx) {
     const log = new PolicyViolationsLog(proj.paths.policyViolationsPath);
     let violations = await log.readAll();
     if (req.query.severity) {
-      const sev = import_types105.PolicySeveritySchema.safeParse(req.query.severity);
+      const sev = import_types106.PolicySeveritySchema.safeParse(req.query.severity);
       if (!sev.success) {
         return reply.code(400).send({
           error: "invalid severity",
@@ -25184,7 +25384,7 @@ function registerRoutes(scope, ctx) {
   scope.post("/policies/check", async (req, reply) => {
     const proj = resolveProject(registry, req, reply, ctx.bootstrap, ctx.singleProject);
     if (!proj) return;
-    const parsed = import_types105.PoliciesCheckBodySchema.safeParse(req.body ?? {});
+    const parsed = import_types106.PoliciesCheckBodySchema.safeParse(req.body ?? {});
     if (!parsed.success) {
       return reply.code(400).send({
         error: "invalid /policies/check body",
@@ -25545,7 +25745,7 @@ init_auth();
 
 // src/hang-sensor.ts
 init_cjs_shims();
-var import_types106 = require("@neat.is/types");
+var import_types107 = require("@neat.is/types");
 var RECONCILE_INCIDENT_LIMIT = 500;
 function stageHangSurfaces(graph, incidents) {
   const boundaries = /* @__PURE__ */ new Set();
@@ -25558,7 +25758,7 @@ function stageHangSurfaces(graph, incidents) {
     if (!isBoundaryTimeoutSymptom(ctx)) continue;
     const hop = resolveHangHop(graph, boundary, incidents);
     if (!hop) continue;
-    if (stageFrontierEdge(graph, hop.source, hop.target, import_types106.EdgeType.CALLS)) staged++;
+    if (stageFrontierEdge(graph, hop.source, hop.target, import_types107.EdgeType.CALLS)) staged++;
   }
   return staged;
 }
@@ -25691,6 +25891,15 @@ async function fetchPodLog(transport, namespace, podName, opts = {}) {
     return void 0;
   }
 }
+function hasLogContent(text) {
+  return typeof text === "string" && text.trim().length > 0;
+}
+async function fetchPodProcessLog(transport, namespace, podName, opts = {}) {
+  const previous = await fetchPodLog(transport, namespace, podName, { ...opts, previous: true });
+  if (hasLogContent(previous)) return previous;
+  const current = await fetchPodLog(transport, namespace, podName, { ...opts, previous: false });
+  return hasLogContent(current) ? current : void 0;
+}
 
 // src/connectors/kubernetes/kubeconfig.ts
 init_cjs_shims();
@@ -26116,7 +26325,7 @@ function mapWorkloadsToSignals(deployments, pods, config, logs) {
 
 // src/connectors/kubernetes/resolve.ts
 init_cjs_shims();
-var import_types108 = require("@neat.is/types");
+var import_types109 = require("@neat.is/types");
 var NO_ENV3 = "unknown";
 function createK8sResolveTarget(graph) {
   return (signal) => {
@@ -26127,7 +26336,7 @@ function createK8sResolveTarget(graph) {
     return {
       targetNodeId: resolveFusedServiceId(graph, serviceName, NO_ENV3),
       serviceName,
-      edgeType: import_types108.EdgeType.CALLS
+      edgeType: import_types109.EdgeType.CALLS
     };
   };
 }
@@ -26237,11 +26446,10 @@ var KubernetesConnector = class {
     const targets = faultedPods(deployments, pods, this.config);
     await Promise.all(
       targets.map(async (t) => {
-        const text = await fetchPodLog(transport, namespace, t.podName, {
+        const text = await fetchPodProcessLog(transport, namespace, t.podName, {
           ...t.container ? { container: t.container } : {},
           tailLines: PROCESS_LOG_TAIL_LINES,
           limitBytes: PROCESS_LOG_LIMIT_BYTES,
-          previous: true,
           ...opts
         });
         if (typeof text === "string" && text.length > 0) logs.set(podLogKey(t.podName, t.container), text);
@@ -26281,7 +26489,7 @@ var import_node_fs47 = require("fs");
 var import_node_path83 = __toESM(require("path"), 1);
 
 // src/daemon.ts
-var import_types111 = require("@neat.is/types");
+var import_types112 = require("@neat.is/types");
 function daemonJsonPath(scanPath) {
   return import_node_path84.default.join(scanPath, "neat-out", "daemon.json");
 }
@@ -31344,7 +31552,7 @@ async function connectorAdd(args, deps) {
   }
   const { replaced } = await upsertConnectorEntry(entry2, deps.home);
   const verb = replaced ? "updated" : "added";
-  const where = project ? `project "${project}"` : "the bootstrapping project";
+  const where = project ? `project "${project}"` : "every project (no --project set)";
   deps.out(`${verb} connector "${id}" (${provider}) for ${where}.`);
   if (push) {
     deps.out("The drain is live \u2014 traces arrive at the daemon's OTLP receiver. No poll or restart needed.");
@@ -31407,7 +31615,7 @@ async function connectorList(deps, filterProject, json = false) {
   }
   deps.out("id	provider	project	credential");
   for (const e of entries) {
-    const project = e.project ?? "(bootstrapping project)";
+    const project = e.project ?? "(every project)";
     const credential = describeCredential(e.credential, deps.env).map((c) => {
       const status2 = c.status ? ` (${c.status})` : c.kind === "plaintext" ? " (plaintext)" : "";
       return c.field ? `${c.field}=${c.display}${status2}` : `${c.display}${status2}`;
@@ -32420,7 +32628,48 @@ var import_node_path96 = __toESM(require("path"), 1);
 
 // src/cli-client.ts
 init_cjs_shims();
-var import_types112 = require("@neat.is/types");
+var import_types113 = require("@neat.is/types");
+
+// src/incidents-render.ts
+init_cjs_shims();
+function deployHintLines(ev) {
+  const a = ev.attributes;
+  if (!a) return [];
+  const s = (k) => typeof a[k] === "string" ? a[k] : void 0;
+  const n = (k) => typeof a[k] === "number" ? a[k] : void 0;
+  const arr = (k) => Array.isArray(a[k]) ? a[k].filter((x) => typeof x === "string") : [];
+  const fault = s("k8s.fault");
+  const env = arr("k8s.containerEnv");
+  const args = arr("k8s.containerArgs");
+  const log = s("k8s.processLog");
+  if (!fault && env.length === 0 && args.length === 0 && !log) return [];
+  const out = [];
+  if (fault) {
+    const bits = [fault];
+    const wr = s("k8s.waitingReason");
+    if (wr) bits.push(wr);
+    const rc = n("k8s.restartCount");
+    if (rc !== void 0) bits.push(`restarts=${rc}`);
+    const ec = n("k8s.exitCode");
+    if (ec !== void 0) bits.push(`exit=${ec}`);
+    const tr = s("k8s.terminatedReason");
+    if (tr) bits.push(tr);
+    out.push(`deploy: ${bits.join(" ")}`);
+  }
+  const cap = (xs, max) => {
+    const joined = xs.join("  ");
+    return joined.length > max ? `${joined.slice(0, max)}\u2026(+${xs.length} entries)` : joined;
+  };
+  if (env.length > 0) out.push(`env: ${cap(env, 700)}`);
+  if (args.length > 0) out.push(`args: ${cap(args, 300)}`);
+  if (log) {
+    const tail = log.split("\n").filter((l) => l.trim().length > 0).slice(-4);
+    if (tail.length > 0) out.push(`log: ${tail.join(" \u23CE ")}`);
+  }
+  return out;
+}
+
+// src/cli-client.ts
 var HttpError = class extends Error {
   constructor(status2, message, responseBody = "") {
     super(message);
@@ -32562,7 +32811,7 @@ async function runBlastRadius(client, input) {
   }
 }
 function formatBlastEntry(n) {
-  const tag = n.edgeProvenance === import_types112.Provenance.STALE ? " [STALE \u2014 last seen too long ago]" : "";
+  const tag = n.edgeProvenance === import_types113.Provenance.STALE ? " [STALE \u2014 last seen too long ago]" : "";
   return `  \u2022 ${n.nodeId} (distance ${n.distance}, ${n.edgeProvenance})${tag}`;
 }
 async function runDependencies(client, input) {
@@ -32619,7 +32868,7 @@ async function runObservedDependencies(client, input) {
       if (result.observed) {
         return {
           summary: `${input.nodeId} makes no outbound runtime calls, but OTel has observed it receiving traffic on ${result.inboundObservedCount} inbound call path${result.inboundObservedCount === 1 ? "" : "s"} \u2014 it's a pure receiver.`,
-          provenance: import_types112.Provenance.OBSERVED
+          provenance: import_types113.Provenance.OBSERVED
         };
       }
       const note = result.hasExtractedOutbound ? " Static (EXTRACTED) dependencies exist but no runtime traffic has been seen \u2014 is OTel running?" : "";
@@ -32629,7 +32878,7 @@ async function runObservedDependencies(client, input) {
     return {
       summary: `${input.nodeId} has ${result.dependencies.length} runtime dependenc${result.dependencies.length === 1 ? "y" : "ies"} confirmed by OTel.`,
       block: blockLines.join("\n"),
-      provenance: import_types112.Provenance.OBSERVED
+      provenance: import_types113.Provenance.OBSERVED
     };
   } catch (err) {
     if (err instanceof HttpError && err.status === 404) {
@@ -32677,13 +32926,15 @@ async function runIncidents(client, input) {
     const blockLines = [];
     for (const ev of ordered) {
       blockLines.push(`  ${ev.timestamp} \u2014 ${ev.service}: ${ev.errorMessage}`);
+      if (ev.exceptionType) blockLines.push(`    exception: ${ev.exceptionType}`);
+      for (const l of deployHintLines(ev)) blockLines.push(`    ${l}`);
       blockLines.push(`    trace=${ev.traceId} span=${ev.spanId}`);
     }
     const target = input.nodeId ?? "the project";
     return {
       summary: `${target} has ${body.total} recorded incident${body.total === 1 ? "" : "s"}; showing the ${ordered.length} most recent.`,
       block: blockLines.join("\n"),
-      provenance: import_types112.Provenance.OBSERVED
+      provenance: import_types113.Provenance.OBSERVED
     };
   } catch (err) {
     if (err instanceof HttpError && err.status === 404) {
@@ -32792,7 +33043,7 @@ async function runStaleEdges(client, input) {
   return {
     summary: `${events.length} stale-edge transition${events.length === 1 ? "" : "s"} recorded${input.edgeType ? ` for ${input.edgeType}` : ""}.`,
     block: blockLines.join("\n"),
-    provenance: import_types112.Provenance.STALE
+    provenance: import_types113.Provenance.STALE
   };
 }
 async function runPolicies(client, input) {
@@ -33532,7 +33783,7 @@ var import_promises5 = __toESM(require("readline/promises"), 1);
 
 // src/agent-directive.generated.ts
 init_cjs_shims();
-var AGENT_DIRECTIVE = '## Query NEAT before searching files\n\nThis project has a live NEAT graph: code, data and infrastructure declarations\nfused with runtime traffic, incidents and supported provider telemetry. It can\nshow what exists, what actually ran, where a failure began, and what may break\nwhen a node changes. The graph is deterministic: the agent supplies the model;\nNEAT resolves named nodes and traverses recorded evidence rather than asking an\nLLM to infer architecture from file names.\n\nEvery claim carries provenance and confidence. `EXTRACTED` comes from recognized\nsource or configuration, `OBSERVED` from spans or supported provider signals,\n`INFERRED` from a bridged relationship, and `STALE` marks an observed edge that\nwent quiet. Missing runtime evidence does not prove a path never runs.\n\n**For questions about this system\'s behavior, structure, data dependencies,\nfailures, or change impact, call the MCP `ask` tool (`mcp__neat__ask`) before\nRead/Grep/Glob/Bash.** You do not need an exact node id. `ask` resolves names\nand routes to the relevant graph traversal, returning provenance-tagged facts.\nWhen MCP is unavailable, use the same door through the CLI:\n\n```\nnpx neat.is ask "why is checkout failing?"\nnpx neat.is ask "what breaks if I change the orders table?"\nnpx neat.is ask "what does the payments service depend on at runtime?"\n```\n\nFor a failure, ask first, then call `get_incident_card` on the named service,\nfile or symbol. The card combines the incident, likely cause, blast radius,\npolicies and divergence into a work order. Use `expand` one hop at a time and\n`relate` to test whether the suspected cause and symptom share a signal. Check\nprovenance and confidence before acting.\n\nBefore a change, use `get_blast_radius` and `check_policies` to see dependents\nand advisory architectural rules. Use `get_divergences` to compare declared\nintent with observed behavior, `get_graph_diff` to compare a saved snapshot\nwith the live graph, and `get_recent_stale_edges` when traffic goes quiet.\n`get_dependencies` maps a node\'s outgoing graph; `get_observed_dependencies`\nshows only seen runtime/provider calls. `semantic_search` finds node labels,\nnot arbitrary source text.\n\nRead source when the graph does not model what you need: comments, arbitrary\nstring literals, config details, unsupported syntax, or a repository that has\nnot been extracted or connected. If a graph answer is empty, check the daemon\nwith `npx neat.is list` or restart it with `npx neat.is up`; wire MCP with\n`npx neat.is skill --apply`.\n';
+var AGENT_DIRECTIVE = '## Let NEAT investigate before you search files\n\nThis project has NEAT. It does the investigation for this system so you can\nspend your effort on the code: what exists, what actually ran, where a failure\nbegan, and what a change will reach. It answers from a live graph that fuses\ncode, data and infrastructure declarations with runtime traffic, incidents and\nsupported provider telemetry. The graph is deterministic: you supply the\nreasoning about the fix; NEAT resolves named nodes and traverses recorded\nevidence rather than asking an LLM to infer architecture from file names.\n\nEvery claim carries provenance and confidence. `EXTRACTED` comes from recognized\nsource or configuration, `OBSERVED` from spans or supported provider signals,\n`INFERRED` from a bridged relationship, and `STALE` marks an observed edge that\nwent quiet. Missing runtime evidence does not prove a path never runs.\n\n**For questions about this system\'s behavior, structure, data dependencies,\nfailures, or change impact, call the MCP `ask` tool (`mcp__neat__ask`) before\nRead/Grep/Glob/Bash.** You do not need an exact node id. `ask` resolves names\nand routes to the relevant graph traversal, returning provenance-tagged facts.\nWhen MCP is unavailable, use the same door through the CLI:\n\n```\nnpx neat.is ask "why is checkout failing?"\nnpx neat.is ask "what breaks if I change the orders table?"\nnpx neat.is ask "what does the payments service depend on at runtime?"\n```\n\nFor a failure, call `get_incident_card` on the failing service, file or symbol\n(if you don\'t know which, `ask` what is failing first). The card is the\ninvestigation already done: the incident, its likely cause chain, blast radius,\nthe governing policies and divergence, in one work order. Use `expand` one hop\nat a time and `relate` to test whether the suspected cause and symptom share a\nsignal. Check provenance and confidence before acting.\n\nBefore a change, use `get_blast_radius` and `check_policies` to see dependents\nand advisory architectural rules. Use `get_divergences` to compare declared\nintent with observed behavior, `get_graph_diff` to compare a saved snapshot\nwith the live graph, and `get_recent_stale_edges` when traffic goes quiet.\n`get_dependencies` maps a node\'s outgoing graph; `get_observed_dependencies`\nshows only seen runtime/provider calls. `semantic_search` finds node labels,\nnot arbitrary source text.\n\nRead source when the graph does not model what you need: comments, arbitrary\nstring literals, config details, unsupported syntax, or a repository that has\nnot been extracted or connected. If a graph answer is empty, check the daemon\nwith `npx neat.is list` or restart it with `npx neat.is up`; wire MCP with\n`npx neat.is skill --apply`.\n';
 
 // src/welcome.ts
 var WORDMARK = [
@@ -33547,10 +33798,13 @@ function renderAgentSetupPrompt(project, restPort) {
   const endpoint2 = restPort === void 0 ? "The daemon endpoint is unavailable; run `npx neat.is up` to start it." : `The local daemon is serving it at http://127.0.0.1:${restPort}.`;
   return `NEAT is set up for project "${project}". ${endpoint2}
 
-NEAT models this software system as one graph: code, data, infrastructure,
-runtime traffic, incidents, and supported provider telemetry fused where evidence
-permits. Use it to see what exists, what actually ran, where a failure began, and
-what a change could affect. Missing observations do not prove a path never runs.
+NEAT does the investigation for this system, so you can spend your effort on the
+code. When something fails, call get_incident_card on the failing service, file
+or symbol: one work order with where the failure is, the cause chain (provenance
+on every hop), what a fix reaches, the policies that govern the code, and where
+code and runtime disagree. For anything else about how the system works, ask.
+NEAT answers from a live graph that fuses the code with what actually ran; a
+path it hasn't seen run is not proof the path never runs.
 
 1. Wire NEAT's MCP server into this agent session:
      npx neat.is skill --apply
@@ -33561,8 +33815,10 @@ what a change could affect. Missing observations do not prove a path never runs.
    If the daemon is unreachable, run \`npx neat.is up\`.
 
 ${AGENT_DIRECTIVE}
-As the app or tests run, traces fill the OBSERVED layer. Daemon log:
-neat-out/daemon.log. Reopen this door with \`npx neat.is welcome\`.`;
+Runtime evidence arrives once the app runs with NEAT attached: for Node, load
+.env.neat first (\`set -a; . ./.env.neat; set +a\`); for Python, start under
+\`opentelemetry-instrument\`. Daemon log: neat-out/daemon.log. Reopen this
+door with \`npx neat.is welcome\`.`;
 }
 function printHeader(out) {
   for (const line of WORDMARK) out(line);
@@ -34802,12 +35058,12 @@ async function runEditorCommand(clientId, args, projectDir = process.cwd()) {
 
 // src/monitor.ts
 init_cjs_shims();
-var import_types113 = require("@neat.is/types");
+var import_types114 = require("@neat.is/types");
 var OBSERVED_DEP_EDGE_TYPES = /* @__PURE__ */ new Set([
-  import_types113.EdgeType.CALLS,
-  import_types113.EdgeType.CONNECTS_TO,
-  import_types113.EdgeType.PUBLISHES_TO,
-  import_types113.EdgeType.CONSUMES_FROM
+  import_types114.EdgeType.CALLS,
+  import_types114.EdgeType.CONNECTS_TO,
+  import_types114.EdgeType.PUBLISHES_TO,
+  import_types114.EdgeType.CONSUMES_FROM
 ]);
 function divergenceKey(d) {
   const column = "column" in d && d.column ? d.column : "";
@@ -34877,7 +35133,7 @@ function formatDivergenceLine2(d) {
   }
 }
 function formatStaleLine(edgeId) {
-  const parsed = (0, import_types113.parseEdgeId)(edgeId);
+  const parsed = (0, import_types114.parseEdgeId)(edgeId);
   if (parsed) {
     return `\u22EF stale  ${parsed.source} \u2192 ${parsed.target}  (observed edge went quiet)`;
   }
@@ -34890,7 +35146,7 @@ function divergenceJson(d) {
   return JSON.stringify({ kind: "divergence", ...d });
 }
 function staleJson(edgeId) {
-  const parsed = (0, import_types113.parseEdgeId)(edgeId);
+  const parsed = (0, import_types114.parseEdgeId)(edgeId);
   return JSON.stringify({
     kind: "stale",
     edgeId,
@@ -34974,7 +35230,7 @@ var MonitorEmitter = class {
   // ignores non-OBSERVED edges and non-dependency edge types (structural
   // ownership), so only real runtime dependencies reach stdout.
   emitObservedEdge(edge) {
-    if (edge.provenance !== import_types113.Provenance.OBSERVED) return false;
+    if (edge.provenance !== import_types114.Provenance.OBSERVED) return false;
     if (!OBSERVED_DEP_EDGE_TYPES.has(edge.type)) return false;
     const key = `edge|${edge.id}`;
     if (this.seen.has(key)) return false;
@@ -35155,7 +35411,7 @@ async function runMonitor(opts) {
       case "edge-added": {
         const payload = safeParse(frame.data);
         const edge = payload?.edge;
-        if (edge && edge.provenance === import_types113.Provenance.OBSERVED) {
+        if (edge && edge.provenance === import_types114.Provenance.OBSERVED) {
           emitter.emitObservedEdge(edge);
           divergences.schedule();
         }
@@ -35426,7 +35682,7 @@ async function runSync(opts) {
 }
 
 // src/cli.ts
-var import_types114 = require("@neat.is/types");
+var import_types115 = require("@neat.is/types");
 init_auth();
 function usage5() {
   const neat = commandPrefix();
@@ -36338,10 +36594,15 @@ async function main() {
     return;
   }
   if (cmd === "sync") {
+    const syncTarget = await resolveClientTarget({
+      ...parsed.project ? { project: parsed.project } : {},
+      ...parsed.profile ? { profile: parsed.profile } : {}
+    });
     const result = await runSync({
       ...parsed.project ? { project: parsed.project } : {},
       ...parsed.to ? { to: parsed.to } : {},
       ...parsed.token ? { token: parsed.token } : {},
+      daemonUrl: syncTarget.endpoint,
       dryRun: parsed.dryRun,
       noInstrument: parsed.noInstrument,
       sourceEdit: parsed.sourceEdit,
@@ -36500,9 +36761,28 @@ async function resolveClientTarget(opts = {}) {
     if (daemon) {
       return { endpoint: `http://localhost:${daemon.record.ports.rest}`, source: "daemon-record" };
     }
+  } else {
+    const live = (await discoverDaemons()).filter((d) => d.live);
+    if (live.length === 1) {
+      return {
+        endpoint: `http://localhost:${live[0].record.ports.rest}`,
+        source: "sole-daemon"
+      };
+    }
   }
   return { endpoint: "http://localhost:8080", source: "default" };
 }
+async function loopbackResolutionHint() {
+  const live = (await discoverDaemons()).filter((d) => d.live);
+  if (live.length === 0) {
+    return "No NEAT daemon is running. Start one with `npx neat.is` in your project (or `neat up`), then re-run \u2014 or set NEAT_API_URL to a daemon.";
+  }
+  if (live.length > 1) {
+    const list = live.map((d) => `  ${d.record.project} \u2192 http://localhost:${d.record.ports.rest}`).join("\n");
+    return "This directory is not a registered NEAT project and several daemons are running, so NEAT cannot pick one. Run from the project directory, pass --project <name>, or set NEAT_API_URL:\n" + list;
+  }
+  return void 0;
+}
 async function projectForCwd(cwd = process.cwd()) {
   try {
     return (await findProjectByPath(cwd))?.name;
@@ -36511,7 +36791,7 @@ async function projectForCwd(cwd = process.cwd()) {
   }
 }
 function cwdProjectApplies(source) {
-  return source === "daemon-record" || source === "default";
+  return source === "daemon-record" || source === "sole-daemon" || source === "default";
 }
 async function resolveDaemonUrl(project, profile) {
   return (await resolveClientTarget({ project, profile })).endpoint;
@@ -36533,6 +36813,11 @@ async function runQueryVerb(cmd, parsed) {
     }
     throw err;
   }
+  if (target.source === "default" && !requestedProject && !cwdProject) {
+    const hint = await loopbackResolutionHint();
+    if (hint) process.stderr.write(`${hint}
+`);
+  }
   const client = createHttpClient(target.endpoint, target.authToken);
   const positional = parsed.positional;
   let makeWork;
@@ -36659,10 +36944,10 @@ async function runQueryVerb(cmd, parsed) {
         const parts = parsed.type.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
         const out = [];
         for (const p of parts) {
-          const r = import_types114.DivergenceTypeSchema.safeParse(p);
+          const r = import_types115.DivergenceTypeSchema.safeParse(p);
           if (!r.success) {
             console.error(
-              `neat divergences: unknown --type "${p}". allowed: ${import_types114.DivergenceTypeSchema.options.join(", ")}`
+              `neat divergences: unknown --type "${p}". allowed: ${import_types115.DivergenceTypeSchema.options.join(", ")}`
             );
             return 2;
           }
@@ -36780,6 +37065,7 @@ if (/[\\/](?:cli\.(?:cjs|js)|cli|neat|neat\.is)$/.test(entry)) {
   cwdProjectApplies,
   isLoopbackEndpoint,
   isNpxInvocation,
+  loopbackResolutionHint,
   main,
   parseArgs,
   printBanner,