@neat.is/core 0.9.3-dev.20260823 → 0.9.4

package/dist/index.d.cts

@@ -441,7 +441,9 @@ interface StalenessLoopOptions {
     onPolicyTrigger?: (graph: NeatGraph) => Promise<void> | void;
 }
 declare function startStalenessLoop(graph: NeatGraph, options?: StalenessLoopOptions): () => void;
-declare function readErrorEvents(errorsPath: string): Promise<ErrorEvent[]>;
+declare function readErrorEvents(errorsPath: string, opts?: {
+    limit?: number;
+}): Promise<ErrorEvent[]>;
 
 declare function confidenceForEdge(edge: GraphEdge, now?: number): number;
 declare function getBlastRadius(graph: NeatGraph, nodeId: string, maxDepth?: number): BlastRadiusResult;

package/dist/index.d.ts

@@ -441,7 +441,9 @@ interface StalenessLoopOptions {
     onPolicyTrigger?: (graph: NeatGraph) => Promise<void> | void;
 }
 declare function startStalenessLoop(graph: NeatGraph, options?: StalenessLoopOptions): () => void;
-declare function readErrorEvents(errorsPath: string): Promise<ErrorEvent[]>;
+declare function readErrorEvents(errorsPath: string, opts?: {
+    limit?: number;
+}): Promise<ErrorEvent[]>;
 
 declare function confidenceForEdge(edge: GraphEdge, now?: number): number;
 declare function getBlastRadius(graph: NeatGraph, nodeId: string, maxDepth?: number): BlastRadiusResult;

package/dist/index.js

@@ -1,7 +1,7 @@
 import {
   routeSpanToProject,
   startDaemon
-} from "./chunk-WJGZYEUG.js";
+} from "./chunk-TGCWMMF6.js";
 import {
   ProjectNameCollisionError,
   addProject,
@@ -37,7 +37,7 @@ import {
   thresholdForEdgeType,
   touchLastSeen,
   writeAtomically
-} from "./chunk-LRYPKC3B.js";
+} from "./chunk-IVVF37OU.js";
 import {
   startOtelGrpcReceiver
 } from "./chunk-ERE47MCR.js";

package/dist/neatd.cjs

@@ -1888,6 +1888,47 @@ function classifyNode(ctx) {
 function isVictimSeed(ctx) {
   return ctx.errorsFromCallers > 0 && (ctx.stale || isSaturated(ctx)) && ctx.errorsEmittedHere <= ctx.errorsFromCallers;
 }
+var OUTBOUND_CONNECTION_FAILURE_PATTERNS = [
+  "name resolution",
+  "resolve host",
+  "getaddrinfo",
+  "enotfound",
+  "connection refused",
+  "econnrefused",
+  "connection reset",
+  "econnreset",
+  "able to connect",
+  "failed to connect",
+  "cannot connect",
+  "could not connect",
+  "unable to connect",
+  "connection timed out",
+  "etimedout",
+  "no route to host",
+  "host unreachable",
+  "network is unreachable",
+  "connection closed"
+];
+function incidentTextIndicatesOutboundFailure(ev) {
+  const haystack = [ev.errorMessage, ev.errorType, ev.exceptionType, ev.exceptionStacktrace].filter((s) => typeof s === "string").join(" ").toLowerCase();
+  return OUTBOUND_CONNECTION_FAILURE_PATTERNS.some((p) => haystack.includes(p));
+}
+function hasFailingOutbound(graph, nodeId, seedSource, incidents) {
+  for (const n of nodeScope(graph, nodeId)) {
+    if (!graph.hasNode(n)) continue;
+    for (const edgeId of graph.outboundEdges(n)) {
+      const e = graph.getEdgeAttributes(edgeId);
+      if (e.type === import_types.EdgeType.CONTAINS) continue;
+      if ((e.signal?.errorCount ?? 0) > 0) return true;
+    }
+  }
+  if (seedSource === "incident" && incidents) {
+    for (const ev of incidents) {
+      if (incidentMatchesNode(ev, nodeId) && incidentTextIndicatesOutboundFailure(ev)) return true;
+    }
+  }
+  return false;
+}
 function grainOf(graph, nodeId) {
   if (!graph.hasNode(nodeId)) return "unknown";
   const t = graph.getNodeAttributes(nodeId).type;
@@ -2051,7 +2092,8 @@ function enrichWithNavigation(graph, errorNodeId, tagged, incidents, now) {
   const candidates = [];
   const deadEndOnSymptom = tagged.source === "incident" && seedNode === errorNodeId && legacy.traversalPath.length === 1;
   const staleChain = deadEndOnSymptom && !(seedCtx && isVictimSeed(seedCtx)) ? followStaleCallChain(graph, errorNodeId, ROOT_CAUSE_MAX_DEPTH) : null;
-  if (seedCtx && isVictimSeed(seedCtx)) {
+  const seedFailsOutbound = seedCtx !== null && hasFailingOutbound(graph, seedNode, tagged.source, incidents);
+  if (seedCtx && isVictimSeed(seedCtx) && !seedFailsOutbound) {
     const origin = findLoadOrigin(graph, errorNodeId, incidents, now);
     const staleNote = seedCtx.stale ? "; it has gone STALE under load" : "";
     const satNote = isSaturated(seedCtx) ? `; its inbound p95 ${Math.round(seedCtx.latencyP95Ms)}ms is saturated` : "";
@@ -5377,6 +5419,64 @@ function latencyPercentiles(hist) {
   return { p50: round(quantile(hist, 0.5)), p95: round(quantile(hist, 0.95)) };
 }
 
+// src/stacktrace.ts
+init_cjs_shims();
+var FRAME_SHAPES = [
+  // `File "<path>", line <N>, in <func>` — the "most recent call last" shape.
+  { re: /File "([^"]+)", line (\d+)(?:, in (\S+))?/, file: 1, line: 2, fn: 3, deepest: "last" },
+  // `at <func> (<path>:<line>:<col>)` — named call frame, most recent first.
+  { re: /\bat\s+(.+?)\s+\((.+?):(\d+):\d+\)/, file: 2, line: 3, fn: 1, deepest: "first" },
+  // `at <path>:<line>:<col>` — anonymous call frame, most recent first.
+  { re: /\bat\s+(.+?):(\d+):\d+/, file: 1, line: 2, deepest: "first" },
+  // `at <qualified.method>(<File.ext>:<line>)` — JVM-style, most recent first.
+  { re: /\bat\s+(.+?)\((\S+\.\w+):(\d+)\)/, file: 2, line: 3, fn: 1, deepest: "first" }
+];
+var VENDOR_MARKERS = [
+  "node_modules",
+  // dependency root
+  "site-packages",
+  // installed-package root
+  "dist-packages",
+  // distro-packaged root
+  "node:"
+  // runtime-internal module scheme (a stdlib/runtime-root frame)
+];
+function matchFrame(line) {
+  for (const shape of FRAME_SHAPES) {
+    const m = shape.re.exec(line);
+    if (!m) continue;
+    const file = m[shape.file];
+    const lineNo = Number(m[shape.line]);
+    if (!file || !Number.isFinite(lineNo)) continue;
+    const fn = shape.fn !== void 0 ? m[shape.fn] : void 0;
+    return { frame: { file, line: lineNo, ...fn ? { fn } : {} }, deepest: shape.deepest };
+  }
+  return null;
+}
+function isApplicationFrame(file) {
+  if (file.startsWith("<")) return false;
+  const norm = file.split("\\").join("/");
+  for (const marker of VENDOR_MARKERS) {
+    if (norm.includes(marker)) return false;
+  }
+  return true;
+}
+function deepestApplicationFrame(stacktrace) {
+  if (!stacktrace) return null;
+  const appFrames = [];
+  for (const raw of stacktrace.split("\n")) {
+    const matched = matchFrame(raw);
+    if (!matched) continue;
+    if (!isApplicationFrame(matched.frame.file)) continue;
+    appFrames.push(matched);
+  }
+  if (appFrames.length === 0) return null;
+  const orientation = appFrames.some((f) => f.deepest === "last") ? "last" : "first";
+  const oriented = appFrames.filter((f) => f.deepest === orientation);
+  const chosen = orientation === "last" ? oriented[oriented.length - 1] : oriented[0];
+  return chosen ? chosen.frame : null;
+}
+
 // src/ingest.ts
 var HOUR_MS = 60 * 60 * 1e3;
 var DAY_MS = 24 * HOUR_MS;
@@ -6228,29 +6328,71 @@ async function appendConnectorIncident(errorsPath, input) {
   await import_node_fs7.promises.mkdir(import_node_path8.default.dirname(errorsPath), { recursive: true });
   await import_node_fs7.promises.appendFile(errorsPath, JSON.stringify(ev) + "\n", "utf8");
 }
-function incidentAffectedNode(span, graph, scanPath) {
+function landIncidentCallSite(span, callSite, trusted, graph) {
+  const relPath = graph ? reconcileObservedRelPath(graph, span.service, callSite.relPath) : callSite.relPath;
+  const canonicalService = serviceNodeName(graph, span) ?? span.service;
+  const recovered = !trusted;
+  if (graph) {
+    const fusedFileId = (0, import_types8.fileId)(canonicalService, relPath);
+    if (graph.hasNode(fusedFileId)) {
+      const node = landObservedSymbol(
+        graph,
+        fusedFileId,
+        canonicalService,
+        relPath,
+        { ...callSite, relPath },
+        false
+      );
+      return {
+        affectedNode: node,
+        ...recovered ? {
+          codeFilepath: relPath,
+          ...callSite.line !== void 0 ? { codeLineno: callSite.line } : {}
+        } : {}
+      };
+    }
+    if (recovered) return null;
+  }
+  return { affectedNode: (0, import_types8.fileId)(span.service, relPath) };
+}
+function serviceNodeName(graph, span) {
+  if (!graph) return void 0;
+  const sid = resolveFusedServiceId(graph, span.service, span.env);
+  if (!graph.hasNode(sid)) return void 0;
+  const node = graph.getNodeAttributes(sid);
+  return typeof node.name === "string" ? node.name : void 0;
+}
+function stacktraceCallSite(span, serviceNode, scanPath) {
+  const frame = deepestApplicationFrame(span.exception?.stacktrace);
+  if (!frame) return null;
+  const relPath = relPathForRuntimeFile(frame.file, serviceNode, scanPath);
+  if (!relPath) return null;
+  return { relPath, line: frame.line, ...frame.fn ? { fn: frame.fn } : {} };
+}
+function incidentLocus(span, graph, scanPath) {
   const sid = graph ? resolveFusedServiceId(graph, span.service, span.env) : (0, import_types8.serviceId)(span.service, span.env);
   const serviceNode = graph && graph.hasNode(sid) ? graph.getNodeAttributes(sid) : void 0;
   const callSite = callSiteFromSpan(span, serviceNode, scanPath);
   if (callSite) {
-    const relPath = graph ? reconcileObservedRelPath(graph, span.service, callSite.relPath) : callSite.relPath;
-    const canonicalService = serviceNode && typeof serviceNode.name === "string" ? serviceNode.name : span.service;
-    if (graph) {
-      const fusedFileId = (0, import_types8.fileId)(canonicalService, relPath);
-      if (graph.hasNode(fusedFileId)) {
-        return landObservedSymbol(
-          graph,
-          fusedFileId,
-          canonicalService,
-          relPath,
-          { ...callSite, relPath },
-          false
-        );
-      }
+    const landed = landIncidentCallSite(span, callSite, true, graph);
+    if (landed) return landed;
+  } else {
+    const recovered = stacktraceCallSite(span, serviceNode, scanPath);
+    if (recovered) {
+      const landed = landIncidentCallSite(span, recovered, false, graph);
+      if (landed) return landed;
     }
-    return (0, import_types8.fileId)(span.service, relPath);
   }
-  return sid;
+  return { affectedNode: sid };
+}
+function incidentAffectedNode(span, graph, scanPath) {
+  return incidentLocus(span, graph, scanPath).affectedNode;
+}
+function withRecoveredCodeAttrs(attrs, locus) {
+  if (locus.codeFilepath === void 0) return attrs;
+  attrs[CODE_FILEPATH_ATTR] = locus.codeFilepath;
+  if (locus.codeLineno !== void 0) attrs[CODE_LINENO_ATTR] = locus.codeLineno;
+  return attrs;
 }
 function sanitizeAttributes(attrs) {
   const out = {};
@@ -6263,7 +6405,8 @@ function sanitizeAttributes(attrs) {
 function buildErrorEventForReceiver(span, graph, scanPath) {
   if (span.statusCode !== 2) return null;
   const ts = span.startTimeIso ?? (/* @__PURE__ */ new Date()).toISOString();
-  const attrs = sanitizeAttributes(span.attributes);
+  const locus = incidentLocus(span, graph, scanPath);
+  const attrs = withRecoveredCodeAttrs(sanitizeAttributes(span.attributes), locus);
   return {
     id: `${span.traceId}:${span.spanId}`,
     timestamp: ts,
@@ -6274,7 +6417,7 @@ function buildErrorEventForReceiver(span, graph, scanPath) {
     ...span.exception?.type ? { exceptionType: span.exception.type } : {},
     ...span.exception?.stacktrace ? { exceptionStacktrace: span.exception.stacktrace } : {},
     ...Object.keys(attrs).length > 0 ? { attributes: attrs } : {},
-    affectedNode: incidentAffectedNode(span, graph, scanPath)
+    affectedNode: locus.affectedNode
   };
 }
 function makeErrorSpanWriter(errorsPath, graph, scanPath) {
@@ -6308,7 +6451,8 @@ async function recordFailingResponseIncident(ctx, span, affectedNode, timestamp,
   await appendErrorEvent(ctx, ev);
 }
 async function recordExceptionIncident(ctx, span, ts) {
-  const attrs = sanitizeAttributes(span.attributes);
+  const locus = incidentLocus(span, ctx.graph, ctx.scanPath);
+  const attrs = withRecoveredCodeAttrs(sanitizeAttributes(span.attributes), locus);
   const ev = {
     id: `${span.traceId}:${span.spanId}`,
     timestamp: ts,
@@ -6319,7 +6463,7 @@ async function recordExceptionIncident(ctx, span, ts) {
     ...span.exception?.type ? { exceptionType: span.exception.type } : {},
     ...span.exception?.stacktrace ? { exceptionStacktrace: span.exception.stacktrace } : {},
     ...Object.keys(attrs).length > 0 ? { attributes: attrs } : {},
-    affectedNode: incidentAffectedNode(span, ctx.graph, ctx.scanPath)
+    affectedNode: locus.affectedNode
   };
   await appendErrorEvent(ctx, ev);
 }
@@ -6622,7 +6766,8 @@ async function handleSpan(ctx, span) {
   if (span.statusCode === 2) {
     stitchTrace(ctx.graph, sourceId, ts);
     if (ctx.writeErrorEventInline !== false) {
-      const attrs = sanitizeAttributes(span.attributes);
+      const locus = incidentLocus(span, ctx.graph, ctx.scanPath);
+      const attrs = withRecoveredCodeAttrs(sanitizeAttributes(span.attributes), locus);
       const ev = {
         id: `${span.traceId}:${span.spanId}`,
         timestamp: ts,
@@ -6634,10 +6779,11 @@ async function handleSpan(ctx, span) {
         ...span.exception?.stacktrace ? { exceptionStacktrace: span.exception.stacktrace } : {},
         ...Object.keys(attrs).length > 0 ? { attributes: attrs } : {},
         // Attribute to where the failure originated — the symbol / file / service
-        // the throwing span named (incidentAffectedNode, ADR-191) — the same
-        // source-based attribution the durable receiver write uses, not the
-        // outbound edge target this span happened to mint.
-        affectedNode: incidentAffectedNode(span, ctx.graph, ctx.scanPath)
+        // the throwing span named (incidentAffectedNode / ADR-191, extended to
+        // recover the locus from the stacktrace when the span stamped no code.*
+        // attrs, ADR-216) — the same source-based attribution the durable
+        // receiver write uses, not the outbound edge target this span minted.
+        affectedNode: locus.affectedNode
       };
       await appendErrorEvent(ctx, ev);
     }
@@ -6808,15 +6954,36 @@ function startStalenessLoop(graph, options = {}) {
     clearInterval(interval);
   };
 }
-async function readErrorEvents(errorsPath) {
+var INCIDENT_READ_MAX_BYTES = 32 * 1024 * 1024;
+var INCIDENT_READ_MAX_EVENTS = 5e3;
+async function readErrorFileTail(errorsPath, maxBytes) {
+  const handle = await import_node_fs7.promises.open(errorsPath, "r");
   try {
-    const raw = await import_node_fs7.promises.readFile(errorsPath, "utf8");
-    const events = raw.split("\n").filter((line) => line.length > 0).map((line) => JSON.parse(line));
-    return dedupeIncidents(events);
+    const { size } = await handle.stat();
+    if (size <= maxBytes) {
+      return (await handle.readFile()).toString("utf8");
+    }
+    const buf = Buffer.alloc(maxBytes);
+    await handle.read(buf, 0, maxBytes, size - maxBytes);
+    const raw = buf.toString("utf8");
+    const firstNewline = raw.indexOf("\n");
+    return firstNewline === -1 ? "" : raw.slice(firstNewline + 1);
+  } finally {
+    await handle.close();
+  }
+}
+async function readErrorEvents(errorsPath, opts) {
+  let raw;
+  try {
+    raw = await readErrorFileTail(errorsPath, INCIDENT_READ_MAX_BYTES);
   } catch (err) {
     if (err.code === "ENOENT") return [];
     throw err;
   }
+  const events = raw.split("\n").filter((line) => line.length > 0).map((line) => JSON.parse(line));
+  const deduped = dedupeIncidents(events);
+  const cap = opts?.limit !== void 0 && opts.limit > 0 ? Math.min(opts.limit, INCIDENT_READ_MAX_EVENTS) : INCIDENT_READ_MAX_EVENTS;
+  return deduped.length > cap ? deduped.slice(deduped.length - cap) : deduped;
 }
 function isSynthesizedHttpIncident(ev) {
   if (ev.exceptionType || ev.exceptionStacktrace) return false;
@@ -16455,6 +16622,120 @@ function detectColumnDrift(node) {
   }
   return out;
 }
+var SYMBOL_MISMATCH_PATTERNS = [
+  {
+    // "'ListProductsResponse' object has no attribute 'products_list'" and kin.
+    kind: "missing-attribute",
+    patterns: [/\bhas no attribute\b[\s:=]*['"`]?([A-Za-z_$][\w$]*)['"`]?/i]
+  },
+  {
+    // "object has no field 'X'", "no such field X", "unknown field X".
+    kind: "missing-field",
+    patterns: [
+      /\b(?:has no field|no such field|unknown field)\b(?:\s+named)?[\s:=]*['"`]?([A-Za-z_$][\w$.]*)['"`]?/i
+    ]
+  },
+  {
+    // "has no property X", "no property named X".
+    kind: "missing-property",
+    patterns: [
+      /\b(?:has no property|no property named)\b[\s:=]*['"`]?([A-Za-z_$][\w$]*)['"`]?/i
+    ]
+  },
+  {
+    // "no such column: X", "unknown column 'X'", "column X does not exist".
+    kind: "missing-column",
+    patterns: [
+      /\bno such column\b[\s:=]*['"`]?([\w$.]+)['"`]?/i,
+      /\bunknown column\b[\s:=]*['"`]?([\w$.]+)['"`]?/i,
+      /\bcolumn\b[\s:=]*['"`]?([\w$.]+)['"`]?\s+does not exist/i
+    ]
+  },
+  {
+    // "undefined method `foo' for X" — kept to the unambiguous form so a generic
+    // "method not found" (an unimplemented RPC — an edge/route gap, not a symbol
+    // mismatch) does not get miscategorised here.
+    kind: "undefined-method",
+    patterns: [/\bundefined method\b\s*[`'"]?([\w$?!]+)/i]
+  }
+];
+function classifySymbolMismatch(message) {
+  for (const entry2 of SYMBOL_MISMATCH_PATTERNS) {
+    for (const re of entry2.patterns) {
+      const m = re.exec(message);
+      if (m) {
+        const captured = m[1];
+        return captured ? { kind: entry2.kind, symbol: captured } : { kind: entry2.kind };
+      }
+    }
+  }
+  return null;
+}
+function symbolLocus(graph, ev) {
+  const attrs = ev.attributes ?? {};
+  const filepath = codeFilepathOf(attrs);
+  const lineno = codeLinenoOf(attrs);
+  const location = filepath ? `${filepath}${lineno !== void 0 ? `:${lineno}` : ""}` : void 0;
+  const affected = ev.affectedNode;
+  const affectedInGraph = affected.length > 0 && graph.hasNode(affected);
+  const affectedIsCode = affectedInGraph && ((0, import_types58.parseSymbolId)(affected) !== null || (0, import_types58.parseFileId)(affected) !== null);
+  if (affectedIsCode) return { node: affected, ...location ? { location } : {} };
+  if (!location) return null;
+  if (affectedInGraph) return { node: affected, location };
+  const svc = (0, import_types58.serviceId)(ev.service);
+  if (graph.hasNode(svc)) return { node: svc, location };
+  return null;
+}
+var SYMBOL_MISMATCH_CONFIDENCE = 0.6;
+function detectSymbolMismatches(graph, incidents) {
+  const groups = /* @__PURE__ */ new Map();
+  for (const ev of incidents) {
+    const classified = classifySymbolMismatch(ev.errorMessage);
+    if (!classified) continue;
+    const locus = symbolLocus(graph, ev);
+    if (!locus) continue;
+    const key = `${locus.node}|${classified.kind}|${classified.symbol ?? ""}`;
+    const existing = groups.get(key);
+    if (!existing) {
+      groups.set(key, {
+        node: locus.node,
+        kind: classified.kind,
+        ...classified.symbol ? { symbol: classified.symbol } : {},
+        ...locus.location ? { location: locus.location } : {},
+        latest: ev,
+        count: 1
+      });
+    } else {
+      existing.count += 1;
+      if (ev.timestamp.localeCompare(existing.latest.timestamp) > 0) {
+        existing.latest = ev;
+        if (locus.location) existing.location = locus.location;
+      }
+    }
+  }
+  const out = [];
+  for (const g of groups.values()) {
+    const member = g.symbol ? `\`${g.symbol}\`` : "a member";
+    const where = g.location ? ` at ${g.location}` : "";
+    const times = g.count > 1 ? ` (${g.count} recorded incidents)` : " (1 recorded incident)";
+    out.push({
+      type: "observed-symbol-mismatch",
+      source: g.node,
+      target: g.node,
+      mismatchKind: g.kind,
+      ...g.symbol ? { symbol: g.symbol } : {},
+      ...g.location ? { location: g.location } : {},
+      provenance: import_types58.Provenance.INFERRED,
+      incidentId: g.latest.id,
+      errorMessage: g.latest.errorMessage,
+      incidentCount: g.count,
+      confidence: SYMBOL_MISMATCH_CONFIDENCE,
+      reason: `Code${where} declares access to ${member} the runtime object does not have \u2014 ${g.latest.service} raised "${g.latest.errorMessage}"${times}. The declared access (EXTRACTED) and the runtime shape (OBSERVED) disagree at symbol grain.`,
+      recommendation: "Reconcile the declared access with the runtime shape: a field, attribute, method, or column was renamed, removed, or never existed on the object this code reaches. Update the code to the current shape, or restore the member."
+    });
+  }
+  return out;
+}
 function involvesNode(d, nodeId) {
   return d.source === nodeId || d.target === nodeId;
 }
@@ -16540,6 +16821,9 @@ function computeDivergences(graph, opts = {}) {
       for (const d of detectColumnDrift(n)) all.push(d);
     }
   });
+  if (opts.incidents && opts.incidents.length > 0) {
+    for (const d of detectSymbolMismatches(graph, opts.incidents)) all.push(d);
+  }
   const reconciled = suppressHostMismatchHalves(all);
   const dampened = dampenDeadCodeProbes(graph, buckets2, reconciled);
   let filtered = dampened;
@@ -16560,7 +16844,12 @@ function computeDivergences(graph, opts = {}) {
     "missing-observed": 1,
     "version-mismatch": 2,
     "host-mismatch": 3,
-    "compat-violation": 4
+    "compat-violation": 4,
+    // Symbol/field-grain (ADR-215) rides the confidence sort like every other
+    // type; this only breaks a confidence tie, and it orders last so a same-
+    // confidence edge finding leads. In practice it carries the INFERRED grade
+    // (0.6), so it sits below the high-confidence edge divergences already.
+    "observed-symbol-mismatch": 5
   };
   filtered.sort((a, b) => {
     if (b.confidence !== a.confidence) return b.confidence - a.confidence;
@@ -16571,7 +16860,10 @@ function computeDivergences(graph, opts = {}) {
     if (a.target !== b.target) return a.target.localeCompare(b.target);
     const ac = "column" in a && a.column ? a.column : "";
     const bc = "column" in b && b.column ? b.column : "";
-    return ac.localeCompare(bc);
+    if (ac !== bc) return ac.localeCompare(bc);
+    const asym = "symbol" in a && a.symbol ? a.symbol : "";
+    const bsym = "symbol" in b && b.symbol ? b.symbol : "";
+    return asym.localeCompare(bsym);
   });
   return import_types58.DivergenceResultSchema.parse({
     divergences: filtered,
@@ -16998,10 +17290,15 @@ function divergenceLine(d) {
   if ((d.type === "missing-observed" || d.type === "missing-extracted") && d.column) {
     return `[${d.type}] ${d.table ?? d.source} column ${d.column} \u2014 ${d.reason}`;
   }
+  if (d.type === "observed-symbol-mismatch") {
+    const at = d.location ? ` at ${d.location}` : "";
+    const member = d.symbol ? ` ${d.symbol}` : "";
+    return `[${d.type}] ${d.source}${member}${at} \u2014 ${d.reason}`;
+  }
   return `[${d.type}] ${d.source} \u2192 ${d.target} \u2014 ${d.reason}`;
 }
-function buildDivergenceSection(graph, node) {
-  const result = computeDivergences(graph, { node });
+function buildDivergenceSection(graph, node, incidents) {
+  const result = computeDivergences(graph, { node, ...incidents ? { incidents } : {} });
   if (result.totalAffected === 0) return null;
   const facts = result.divergences.slice(0, MAX_FACTS_PER_SECTION).map((d) => ({
     text: divergenceLine(d),
@@ -17014,8 +17311,8 @@ function buildDivergenceSection(graph, node) {
     facts
   };
 }
-function buildGlobalDivergenceSection(graph) {
-  const result = computeDivergences(graph);
+function buildGlobalDivergenceSection(graph, incidents) {
+  const result = computeDivergences(graph, incidents ? { incidents } : {});
   if (result.totalAffected === 0) {
     return {
       heading: "Divergences (EXTRACTED vs OBSERVED)",
@@ -17113,7 +17410,7 @@ function buildOverviewSections(graph, incidents) {
       }))
     });
   }
-  const div = computeDivergences(graph);
+  const div = computeDivergences(graph, incidents ? { incidents } : {});
   sections.push({
     heading: "Divergences",
     facts: [
@@ -17127,7 +17424,7 @@ function buildOverviewSections(graph, incidents) {
 function buildGlobalSections(intent, graph, incidents) {
   switch (intent) {
     case "divergence":
-      return [buildGlobalDivergenceSection(graph)];
+      return [buildGlobalDivergenceSection(graph, incidents)];
     case "incidents":
       return [buildGlobalIncidentsSection(incidents)];
     case "overview":
@@ -17158,7 +17455,7 @@ function buildSection(kind, graph, node, incidents, now) {
     case "incidents":
       return buildIncidentsSection(node, incidents);
     case "divergence":
-      return buildDivergenceSection(graph, node);
+      return buildDivergenceSection(graph, node, incidents);
   }
 }
 function summarizeGlobal(intent, sections) {
@@ -21033,6 +21330,8 @@ async function startConnectorPolling(input) {
 }
 
 // src/api.ts
+var INCIDENT_LIST_DEFAULT_LIMIT = 50;
+var INCIDENT_LIST_MAX_LIMIT = 200;
 function serializeGraph(graph) {
   const nodes = [];
   graph.forEachNode((_id, attrs) => {
@@ -21212,10 +21511,13 @@ function registerRoutes(scope, ctx) {
       }
       minConfidence = n;
     }
+    const epath = errorsPathFor(proj);
+    const incidents = epath ? await readErrorEvents(epath) : [];
     return computeDivergences(proj.graph, {
       ...typeFilter ? { type: typeFilter } : {},
       ...minConfidence !== void 0 ? { minConfidence } : {},
-      ...req2.query.node ? { node: req2.query.node } : {}
+      ...req2.query.node ? { node: req2.query.node } : {},
+      incidents
     });
   });
   scope.get("/incidents", async (req2, reply) => {
@@ -21225,10 +21527,11 @@ function registerRoutes(scope, ctx) {
     if (!epath) return { count: 0, total: 0, events: [] };
     const events = await readErrorEvents(epath);
     const total = events.length;
-    const limit = req2.query.limit ? Number(req2.query.limit) : 50;
-    const safeLimit = Number.isFinite(limit) && limit > 0 ? Math.min(limit, 200) : 50;
+    const limit = req2.query.limit ? Number(req2.query.limit) : INCIDENT_LIST_DEFAULT_LIMIT;
+    const safeLimit = Number.isFinite(limit) && limit > 0 ? Math.min(limit, INCIDENT_LIST_MAX_LIMIT) : INCIDENT_LIST_DEFAULT_LIMIT;
     const sliced = events.slice(0, safeLimit);
-    return { count: sliced.length, total, events: sliced };
+    const omitted = total - sliced.length;
+    return { count: sliced.length, total, events: sliced, ...omitted > 0 ? { omitted } : {} };
   });
   scope.get("/stale-events", async (req2, reply) => {
     const proj = resolveProject(registry, req2, reply, ctx.bootstrap, ctx.singleProject);
@@ -21337,16 +21640,20 @@ function registerRoutes(scope, ctx) {
     const filtered = events.filter(
       (e) => e.affectedNode === nodeId || e.service === nodeId.replace(/^service:/, "")
     );
-    return { count: filtered.length, total: filtered.length, events: filtered };
+    const total = filtered.length;
+    const limit = req2.query.limit ? Number(req2.query.limit) : INCIDENT_LIST_DEFAULT_LIMIT;
+    const safeLimit = Number.isFinite(limit) && limit > 0 ? Math.min(limit, INCIDENT_LIST_MAX_LIMIT) : INCIDENT_LIST_DEFAULT_LIMIT;
+    const recent = [...filtered].sort((a, b) => (b.timestamp ?? "").localeCompare(a.timestamp ?? "")).slice(0, safeLimit);
+    const omitted = total - recent.length;
+    return {
+      count: recent.length,
+      total,
+      events: recent,
+      ...omitted > 0 ? { omitted } : {}
+    };
   };
-  scope.get(
-    "/incidents/:nodeId",
-    incidentHistoryHandler
-  );
-  scope.get(
-    "/graph/incident-history/:nodeId",
-    incidentHistoryHandler
-  );
+  scope.get("/incidents/:nodeId", incidentHistoryHandler);
+  scope.get("/graph/incident-history/:nodeId", incidentHistoryHandler);
   scope.get("/graph/root-cause/:nodeId", async (req2, reply) => {
     const proj = resolveProject(registry, req2, reply, ctx.bootstrap, ctx.singleProject);
     if (!proj) return;