@neat.is/core 0.9.8-dev.20260829 → 0.9.9

package/dist/server.cjs

@@ -787,7 +787,7 @@ function getGraph(project = DEFAULT_PROJECT) {
 init_cjs_shims();
 var import_fastify2 = __toESM(require("fastify"), 1);
 var import_cors = __toESM(require("@fastify/cors"), 1);
-var import_types97 = require("@neat.is/types");
+var import_types98 = require("@neat.is/types");
 
 // src/extend/index.ts
 init_cjs_shims();
@@ -5596,11 +5596,25 @@ function upsertInferredEdge(graph, type, source, target, ts) {
   };
   graph.addEdgeWithKey(id, source, target, edge);
 }
+function emitIncidentEvent(project, ev) {
+  emitNeatEvent({
+    type: "incident",
+    project,
+    payload: {
+      incidentId: ev.id,
+      affectedNode: ev.affectedNode,
+      service: ev.service,
+      incidentKind: (0, import_types7.incidentKindOf)(ev),
+      at: ev.timestamp
+    }
+  });
+}
 async function appendErrorEvent(ctx, ev) {
   await import_node_fs9.promises.mkdir(import_node_path10.default.dirname(ctx.errorsPath), { recursive: true });
   await import_node_fs9.promises.appendFile(ctx.errorsPath, JSON.stringify(ev) + "\n", "utf8");
+  emitIncidentEvent(ctx.project ?? DEFAULT_PROJECT, ev);
 }
-async function appendConnectorIncident(errorsPath, input) {
+async function appendConnectorIncident(errorsPath, input, project) {
   const ev = {
     id: input.id,
     timestamp: input.timestamp,
@@ -5614,6 +5628,7 @@ async function appendConnectorIncident(errorsPath, input) {
   };
   await import_node_fs9.promises.mkdir(import_node_path10.default.dirname(errorsPath), { recursive: true });
   await import_node_fs9.promises.appendFile(errorsPath, JSON.stringify(ev) + "\n", "utf8");
+  if (project) emitIncidentEvent(project, ev);
 }
 function landIncidentCallSite(span, callSite, trusted, graph) {
   const relPath = graph ? reconcileObservedRelPath(graph, span.service, callSite.relPath) : callSite.relPath;
@@ -16867,9 +16882,160 @@ async function extractFromDirectory(graph, scanPath, opts = {}) {
   return result;
 }
 
-// src/ask.ts
+// src/goodybag.ts
 init_cjs_shims();
 var import_types58 = require("@neat.is/types");
+var CODE_FILEPATH_ATTR2 = "code.filepath";
+var CODE_LINENO_ATTR2 = "code.lineno";
+var BLAST_NEAREST_LIMIT = 5;
+function grainOf2(graph, nodeId) {
+  if (graph.hasNode(nodeId)) {
+    const t = graph.getNodeAttributes(nodeId).type;
+    if (typeof t === "string" && t.length > 0) {
+      return (t.endsWith("Node") ? t.slice(0, -4) : t).toLowerCase();
+    }
+  }
+  const colon = nodeId.indexOf(":");
+  return colon > 0 ? nodeId.slice(0, colon) : "unknown";
+}
+function locusOf(graph, ev) {
+  const file = ev.attributes?.[CODE_FILEPATH_ATTR2];
+  if (typeof file !== "string" || file.length === 0) return null;
+  const rawLine = ev.attributes?.[CODE_LINENO_ATTR2];
+  const line = typeof rawLine === "number" ? rawLine : Number(rawLine);
+  const node = graph.hasNode(ev.affectedNode) ? graph.getNodeAttributes(ev.affectedNode) : void 0;
+  return {
+    file,
+    ...Number.isFinite(line) ? { lineStart: line, lineEnd: line } : {},
+    ...node?.name ? { symbol: node.name } : {},
+    service: node?.service ?? ev.service,
+    provenance: import_types58.Provenance.OBSERVED
+  };
+}
+function locusFromNode(graph, nodeId) {
+  if (!graph.hasNode(nodeId)) return null;
+  const n = graph.getNodeAttributes(nodeId);
+  const file = n.relPath ?? n.path;
+  if (typeof file !== "string" || file.length === 0) return null;
+  const start = n.span?.startLine;
+  const end = n.span?.endLine;
+  return {
+    file,
+    ...typeof start === "number" ? { lineStart: start } : {},
+    ...typeof end === "number" ? { lineEnd: end } : {},
+    ...n.qualname ? { symbol: shortLabel(graph, nodeId) } : {},
+    ...n.service ? { service: n.service } : {},
+    provenance: import_types58.Provenance.INFERRED
+  };
+}
+function promoteCauseLocus(graph, causeNode, incidents) {
+  const native = incidents.find(
+    (e) => e.affectedNode === causeNode && typeof e.attributes?.[CODE_FILEPATH_ATTR2] === "string"
+  );
+  if (native) {
+    const l = locusOf(graph, native);
+    if (l) return { ...l, symbol: shortLabel(graph, causeNode), provenance: import_types58.Provenance.INFERRED };
+  }
+  return locusFromNode(graph, causeNode);
+}
+function divergenceSummary(d) {
+  const column = "column" in d && d.column ? `.${d.column}` : "";
+  const label = "table" in d && d.table ? `${d.table}${column}` : `${d.source} \u2192 ${d.target}`;
+  return label;
+}
+function baseName(p) {
+  const parts = p.split(/[\\/]/);
+  return parts[parts.length - 1] || p;
+}
+function shortLabel(graph, nodeId) {
+  if (graph.hasNode(nodeId)) {
+    const name = graph.getNodeAttributes(nodeId).name;
+    if (typeof name === "string" && name.length > 0) return name;
+  }
+  const afterHash = nodeId.includes("#") ? nodeId.slice(nodeId.lastIndexOf("#") + 1) : nodeId;
+  return afterHash.includes(":") ? afterHash.slice(afterHash.lastIndexOf(":") + 1) : afterHash;
+}
+function renderHeadline(graph, ev, locus, causeNode) {
+  const what = ev.exceptionType ? `raised ${ev.exceptionType}` : ev.errorMessage || "failed";
+  const causeLabel = causeNode && causeNode !== ev.affectedNode ? shortLabel(graph, causeNode) : "";
+  if (locus) {
+    const base = baseName(locus.file);
+    const lines = locus.lineStart != null ? locus.lineEnd && locus.lineEnd !== locus.lineStart ? `LINES ${locus.lineStart}-${locus.lineEnd}` : `LINE ${locus.lineStart}` : "";
+    const symbol = locus.symbol ?? (grainOf2(graph, ev.affectedNode) === "symbol" ? shortLabel(graph, ev.affectedNode) : void 0);
+    const subject = symbol ? `SYMBOL ${symbol}` : `FILE ${base}`;
+    const at = symbol ? `${lines ? `${lines} in ` : ""}${base}` : lines;
+    const where = at ? ` at ${at}` : "";
+    const svc = locus.service ?? ev.service;
+    const cause2 = causeLabel && causeLabel !== symbol ? ` \u2192 root cause ${causeLabel}` : "";
+    return `${subject}${where} (SERVICE ${svc}) ${what} at ${ev.timestamp}${cause2}`;
+  }
+  const cause = causeLabel ? ` \u2192 root cause ${causeLabel}` : "";
+  return `SERVICE ${ev.service} ${what} at ${ev.timestamp}${cause}`;
+}
+function buildIncidentCard(graph, errorEvent, incidents, policies) {
+  const affected = errorEvent.affectedNode;
+  let locus = locusOf(graph, errorEvent);
+  const inGraph = graph.hasNode(affected);
+  const rc = inGraph ? getRootCause(graph, affected, errorEvent, incidents) : null;
+  let rootCause = null;
+  if (rc) {
+    const provs = rc.edgeProvenances ?? [];
+    const chain = (rc.traversalPath ?? []).map((node, i) => ({
+      node,
+      grain: grainOf2(graph, node),
+      provenance: provs[i] ?? provs[provs.length - 1] ?? import_types58.Provenance.INFERRED
+    }));
+    rootCause = {
+      node: rc.rootCauseNode,
+      ...rc.candidates?.[0]?.classification ? { classification: rc.candidates[0].classification } : {},
+      reason: rc.rootCauseReason,
+      confidence: rc.confidence,
+      fix: rc.fixRecommendation ?? null,
+      chain
+    };
+  }
+  if (locus === null && rootCause) {
+    locus = promoteCauseLocus(graph, rootCause.node, incidents);
+  }
+  const blast = inGraph ? getBlastRadius(graph, affected) : { origin: affected, affectedNodes: [], totalAffected: 0 };
+  const nearest = [...blast.affectedNodes].sort((a, b) => a.distance - b.distance).slice(0, BLAST_NEAREST_LIMIT).map((n) => ({ node: n.nodeId, distance: n.distance, provenance: n.edgeProvenance }));
+  const applicable = inGraph ? selectApplicablePolicies(graph, policies, affected) : [];
+  const policyCards = applicable.map((p) => ({
+    policyName: p.policyName,
+    severity: p.severity,
+    message: p.reason
+  }));
+  const divergences = inGraph ? computeDivergences(graph, { node: affected, incidents }).divergences.map((d) => ({
+    type: d.type,
+    summary: divergenceSummary(d)
+  })) : [];
+  const card = {
+    kind: "incident",
+    id: errorEvent.id,
+    at: errorEvent.timestamp,
+    incidentKind: (0, import_types58.incidentKindOf)(errorEvent),
+    service: errorEvent.service,
+    affectedNode: affected,
+    message: errorEvent.errorMessage,
+    ...errorEvent.exceptionType ? { exceptionType: errorEvent.exceptionType } : {},
+    ...errorEvent.httpStatusCode !== void 0 ? { httpStatusCode: errorEvent.httpStatusCode } : {},
+    ...errorEvent.incidentCount !== void 0 ? { count: errorEvent.incidentCount } : {},
+    ...errorEvent.firstTimestamp && errorEvent.lastTimestamp ? { window: { first: errorEvent.firstTimestamp, last: errorEvent.lastTimestamp } } : {},
+    ...errorEvent.traceId ? { traceId: errorEvent.traceId } : {},
+    ...errorEvent.spanId ? { spanId: errorEvent.spanId } : {},
+    locus,
+    rootCause,
+    ...nearest.length > 0 ? { blastRadius: { totalAffected: blast.totalAffected, nearest } } : {},
+    ...policyCards.length > 0 ? { policies: policyCards } : {},
+    ...divergences.length > 0 ? { divergence: divergences } : {},
+    headline: renderHeadline(graph, errorEvent, locus, rootCause?.node ?? null)
+  };
+  return import_types58.IncidentCardSchema.parse(card);
+}
+
+// src/ask.ts
+init_cjs_shims();
+var import_types59 = require("@neat.is/types");
 var DEFAULT_MAX_NODES = 3;
 var MAX_FACTS_PER_SECTION = 6;
 var INTENT_RULES = [
@@ -17097,7 +17263,7 @@ async function resolveEntities(graph, question, searchIndex, maxNodes) {
   };
   graph.forEachNode((id, attrs) => {
     const node = attrs;
-    if (node.type === import_types58.NodeType.FrontierNode) return;
+    if (node.type === import_types59.NodeType.FrontierNode) return;
     const name = nodeName(node);
     const body = idBody(id);
     const labelTokens = /* @__PURE__ */ new Set([...tokens(body), ...tokens(name)]);
@@ -17116,7 +17282,7 @@ async function resolveEntities(graph, question, searchIndex, maxNodes) {
       const res = await searchIndex.search(question, 10);
       if (res.provider !== "substring") {
         for (const m of res.matches) {
-          if (m.node.type === import_types58.NodeType.FrontierNode) continue;
+          if (m.node.type === import_types59.NodeType.FrontierNode) continue;
           const already = best.get(m.node.id);
           if (!already && m.score < EMBED_MIN_SCORE) continue;
           consider({
@@ -17154,7 +17320,7 @@ function edgeSignalNote(e) {
 function buildRootCauseSection(graph, node, incidents, now) {
   const result = getRootCause(graph, node, void 0, incidents, { now });
   if (!result) return null;
-  const lastProv = result.edgeProvenances[result.edgeProvenances.length - 1] ?? import_types58.Provenance.OBSERVED;
+  const lastProv = result.edgeProvenances[result.edgeProvenances.length - 1] ?? import_types59.Provenance.OBSERVED;
   const facts = [
     {
       text: `Root cause: ${result.rootCauseNode} \u2014 ${result.rootCauseReason}`,
@@ -17204,7 +17370,7 @@ function buildObservedSection(graph, node) {
     if (result.observed && result.inboundObservedCount > 0) {
       facts.push({
         text: `no outbound runtime calls, but OTel observed ${result.inboundObservedCount} inbound call path${result.inboundObservedCount === 1 ? "" : "s"} \u2014 a pure receiver`,
-        provenance: import_types58.Provenance.OBSERVED
+        provenance: import_types59.Provenance.OBSERVED
       });
     } else {
       return null;
@@ -17232,7 +17398,7 @@ function buildIncidentsSection(node, incidents) {
   const facts = ordered.map((ev) => ({
     text: `${ev.timestamp} \u2014 ${ev.service}: ${ev.errorMessage}`,
     // ErrorEvents are observation records — OBSERVED by definition.
-    provenance: import_types58.Provenance.OBSERVED
+    provenance: import_types59.Provenance.OBSERVED
   }));
   return { heading: `Recent incidents (OBSERVED) \u2014 ${relevant.length} recorded`, facts };
 }
@@ -17292,7 +17458,7 @@ function buildGlobalIncidentsSection(incidents) {
   }
   const byKey = /* @__PURE__ */ new Map();
   for (const ev of incidents) {
-    const key = ev.affectedNode || (0, import_types58.serviceId)(ev.service);
+    const key = ev.affectedNode || (0, import_types59.serviceId)(ev.service);
     const cur = byKey.get(key);
     if (!cur) {
       byKey.set(key, { key, count: 1, latest: ev.timestamp, sampleMsg: ev.errorMessage });
@@ -17307,7 +17473,7 @@ function buildGlobalIncidentsSection(incidents) {
   const rows = [...byKey.values()].sort((a, b) => b.count - a.count || b.latest.localeCompare(a.latest) || a.key.localeCompare(b.key)).slice(0, MAX_FACTS_PER_SECTION);
   const facts = rows.map((r) => ({
     text: `${r.key} \u2014 ${r.count} incident${r.count === 1 ? "" : "s"}, latest ${r.latest}: ${r.sampleMsg}`,
-    provenance: import_types58.Provenance.OBSERVED
+    provenance: import_types59.Provenance.OBSERVED
   }));
   return {
     heading: `Incidents across the system \u2014 ${incidents.length} recorded`,
@@ -17320,7 +17486,7 @@ function buildOverviewSections(graph, incidents) {
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
     nodeByType.set(node.type, (nodeByType.get(node.type) ?? 0) + 1);
-    if (node.type === import_types58.NodeType.ServiceNode) services.push(node.id);
+    if (node.type === import_types59.NodeType.ServiceNode) services.push(node.id);
   });
   const edgeByProv = /* @__PURE__ */ new Map();
   graph.forEachEdge((_id, attrs) => {
@@ -17332,10 +17498,10 @@ function buildOverviewSections(graph, incidents) {
   const shapeFacts = [
     { text: `${graph.order} nodes, ${graph.size} edges` },
     {
-      text: `${count(import_types58.NodeType.ServiceNode)} services, ${count(import_types58.NodeType.FileNode)} files, ${count(import_types58.NodeType.SymbolNode)} symbols, ${count(import_types58.NodeType.DatabaseNode)} databases`
+      text: `${count(import_types59.NodeType.ServiceNode)} services, ${count(import_types59.NodeType.FileNode)} files, ${count(import_types59.NodeType.SymbolNode)} symbols, ${count(import_types59.NodeType.DatabaseNode)} databases`
     }
   ];
-  for (const p of [import_types58.Provenance.EXTRACTED, import_types58.Provenance.OBSERVED, import_types58.Provenance.INFERRED, import_types58.Provenance.STALE]) {
+  for (const p of [import_types59.Provenance.EXTRACTED, import_types59.Provenance.OBSERVED, import_types59.Provenance.INFERRED, import_types59.Provenance.STALE]) {
     const n = edgeByProv.get(p) ?? 0;
     if (n > 0) shapeFacts.push({ text: `${n} ${p} edge${n === 1 ? "" : "s"}`, provenance: p });
   }
@@ -17352,7 +17518,7 @@ function buildOverviewSections(graph, incidents) {
   if (incidents && incidents.length > 0) {
     const incCount = /* @__PURE__ */ new Map();
     for (const ev of incidents) {
-      const key = ev.affectedNode || (0, import_types58.serviceId)(ev.service);
+      const key = ev.affectedNode || (0, import_types59.serviceId)(ev.service);
       incCount.set(key, (incCount.get(key) ?? 0) + 1);
     }
     const top = [...incCount.entries()].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).slice(0, MAX_FACTS_PER_SECTION);
@@ -17360,7 +17526,7 @@ function buildOverviewSections(graph, incidents) {
       heading: `Nodes with incidents \u2014 ${incidents.length} recorded`,
       facts: top.map(([k, n]) => ({
         text: `${k} \u2014 ${n} incident${n === 1 ? "" : "s"}`,
-        provenance: import_types58.Provenance.OBSERVED
+        provenance: import_types59.Provenance.OBSERVED
       }))
     });
   }
@@ -17496,7 +17662,7 @@ async function askGraph(graph, question, opts = {}) {
   const provSet = /* @__PURE__ */ new Set();
   for (const s of sections) for (const f of s.facts) if (f.provenance) provSet.add(f.provenance);
   const confidence = sections[0]?.facts[0]?.confidence;
-  return import_types58.AskResultSchema.parse({
+  return import_types59.AskResultSchema.parse({
     question,
     intent,
     matched,
@@ -17590,7 +17756,7 @@ function canonicalJson(value) {
 init_cjs_shims();
 var import_node_fs36 = require("fs");
 var import_node_path70 = __toESM(require("path"), 1);
-var import_types59 = require("@neat.is/types");
+var import_types60 = require("@neat.is/types");
 var SCHEMA_VERSION = 7;
 function migrateV1ToV2(payload) {
   const nodes = payload.graph.nodes;
@@ -17614,7 +17780,7 @@ function migrateV5ToV6(payload) {
   if (Array.isArray(nodes)) {
     for (const node of nodes) {
       const attrs = node.attributes;
-      if (!attrs || attrs.type !== import_types59.NodeType.InfraNode) continue;
+      if (!attrs || attrs.type !== import_types60.NodeType.InfraNode) continue;
       if (attrs.kind !== "sql-table" && attrs.kind !== "supabase-table") continue;
       if (!Array.isArray(attrs.columns)) attrs.columns = [];
     }
@@ -17630,12 +17796,12 @@ function migrateV2ToV3(payload) {
     for (const edge of edges) {
       const attrs = edge.attributes;
       if (!attrs || attrs.provenance !== "FRONTIER") continue;
-      attrs.provenance = import_types59.Provenance.OBSERVED;
+      attrs.provenance = import_types60.Provenance.OBSERVED;
       const type = typeof attrs.type === "string" ? attrs.type : void 0;
       const source = typeof attrs.source === "string" ? attrs.source : void 0;
       const target = typeof attrs.target === "string" ? attrs.target : void 0;
       if (type && source && target) {
-        const newId = (0, import_types59.observedEdgeId)(source, target, type);
+        const newId = (0, import_types60.observedEdgeId)(source, target, type);
         attrs.id = newId;
         if (edge.key) edge.key = newId;
       }
@@ -17793,7 +17959,7 @@ init_cjs_shims();
 var import_node_fs37 = require("fs");
 var import_node_os3 = __toESM(require("os"), 1);
 var import_node_path72 = __toESM(require("path"), 1);
-var import_types60 = require("@neat.is/types");
+var import_types61 = require("@neat.is/types");
 function neatHome() {
   const override = process.env.NEAT_HOME;
   if (override && override.length > 0) return import_node_path72.default.resolve(override);
@@ -17883,7 +18049,7 @@ async function readRegistry() {
     throw err;
   }
   const parsed = JSON.parse(raw);
-  return import_types60.RegistryFileSchema.parse(parsed);
+  return import_types61.RegistryFileSchema.parse(parsed);
 }
 async function getProject(name) {
   const reg = await readRegistry();
@@ -18164,15 +18330,15 @@ function getConnectorStatus(id, now = Date.now(), thresholdMs = CONNECTOR_STALE_
 
 // src/connectors/index.ts
 init_cjs_shims();
-var import_types61 = require("@neat.is/types");
+var import_types62 = require("@neat.is/types");
 var NO_ENV = "unknown";
 function staticCallSiteFor(graph, serviceName, targetNodeId) {
   if (!graph.hasNode(targetNodeId)) return void 0;
   const sites = [];
   for (const edgeId of graph.inboundEdges(targetNodeId)) {
     const edge = graph.getEdgeAttributes(edgeId);
-    if (edge.provenance !== import_types61.Provenance.EXTRACTED) continue;
-    const parsed = (0, import_types61.parseFileId)(edge.source);
+    if (edge.provenance !== import_types62.Provenance.EXTRACTED) continue;
+    const parsed = (0, import_types62.parseFileId)(edge.source);
     if (!parsed || parsed.service !== serviceName || !edge.evidence) continue;
     const site = { relPath: edge.evidence.file };
     if (edge.evidence.line !== void 0) site.line = edge.evidence.line;
@@ -18183,7 +18349,7 @@ function staticCallSiteFor(graph, serviceName, targetNodeId) {
 function routeCallSiteFor(graph, targetNodeId) {
   if (!graph.hasNode(targetNodeId)) return void 0;
   const attrs = graph.getNodeAttributes(targetNodeId);
-  if (attrs.type !== import_types61.NodeType.RouteNode || !attrs.path) return void 0;
+  if (attrs.type !== import_types62.NodeType.RouteNode || !attrs.path) return void 0;
   const site = { relPath: attrs.path };
   if (attrs.line !== void 0) site.line = attrs.line;
   return site;
@@ -18213,7 +18379,7 @@ async function runConnectorPoll(connector, ctx, graph, resolveTarget) {
         errorMessage: signal.incident.errorMessage,
         ...signal.incident.attributes ? { attributes: signal.incident.attributes } : {},
         affectedNode: resolved.targetNodeId
-      });
+      }, ctx.project);
       continue;
     }
     if (resolved.ensureInfraNode) {
@@ -18754,23 +18920,23 @@ async function fetchPgStatStatements(connectionString, limit = DEFAULT_STATEMENT
 
 // src/connectors/supabase/resolve.ts
 init_cjs_shims();
-var import_types63 = require("@neat.is/types");
+var import_types64 = require("@neat.is/types");
 function createSupabaseResolveTarget(graph, config) {
   return (signal, _ctx) => {
     if (signal.targetKind !== SUPABASE_TABLE_TARGET_KIND && signal.targetKind !== SUPABASE_RPC_TARGET_KIND) {
       return null;
     }
-    const subResourceId = (0, import_types63.infraId)(signal.targetKind, `${config.nodeRef}/${signal.targetName}`);
+    const subResourceId = (0, import_types64.infraId)(signal.targetKind, `${config.nodeRef}/${signal.targetName}`);
     if (graph.hasNode(subResourceId)) {
-      return { targetNodeId: subResourceId, serviceName: config.serviceName, edgeType: import_types63.EdgeType.CALLS };
+      return { targetNodeId: subResourceId, serviceName: config.serviceName, edgeType: import_types64.EdgeType.CALLS };
     }
-    const bareResourceId = (0, import_types63.infraId)(signal.targetKind, signal.targetName);
+    const bareResourceId = (0, import_types64.infraId)(signal.targetKind, signal.targetName);
     if (graph.hasNode(bareResourceId)) {
-      return { targetNodeId: bareResourceId, serviceName: config.serviceName, edgeType: import_types63.EdgeType.CALLS };
+      return { targetNodeId: bareResourceId, serviceName: config.serviceName, edgeType: import_types64.EdgeType.CALLS };
     }
-    const projectLevelId = (0, import_types63.infraId)("supabase", config.nodeRef);
+    const projectLevelId = (0, import_types64.infraId)("supabase", config.nodeRef);
     if (graph.hasNode(projectLevelId)) {
-      return { targetNodeId: projectLevelId, serviceName: config.serviceName, edgeType: import_types63.EdgeType.CALLS };
+      return { targetNodeId: projectLevelId, serviceName: config.serviceName, edgeType: import_types64.EdgeType.CALLS };
     }
     return null;
   };
@@ -18863,7 +19029,7 @@ function createSupabaseConnector(graph, config, deps = {}) {
 
 // src/connectors/railway/index.ts
 init_cjs_shims();
-var import_types67 = require("@neat.is/types");
+var import_types68 = require("@neat.is/types");
 
 // src/connectors/railway/client.ts
 init_cjs_shims();
@@ -19014,7 +19180,7 @@ function buildRailwayRouteIndex(graph, serviceName) {
   const out = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types67.NodeType.RouteNode) return;
+    if (node.type !== import_types68.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     out.push({
@@ -19118,12 +19284,12 @@ function createRailwayResolveTarget(config) {
     const serviceName = config.serviceNameById[config.serviceId];
     if (!serviceName) return null;
     if (signal.targetKind === ROUTE_TARGET_KIND) {
-      return { targetNodeId: signal.targetName, serviceName, edgeType: import_types67.EdgeType.CALLS };
+      return { targetNodeId: signal.targetName, serviceName, edgeType: import_types68.EdgeType.CALLS };
     }
     if (signal.targetKind === PEER_SERVICE_TARGET_KIND) {
       const peerName = config.serviceNameById[signal.targetName];
       if (!peerName) return null;
-      return { targetNodeId: (0, import_types67.serviceId)(peerName), serviceName, edgeType: import_types67.EdgeType.CONNECTS_TO };
+      return { targetNodeId: (0, import_types68.serviceId)(peerName), serviceName, edgeType: import_types68.EdgeType.CONNECTS_TO };
     }
     return null;
   };
@@ -19311,7 +19477,7 @@ function mapLogEntriesToSignals(entries) {
 
 // src/connectors/firebase/resolve.ts
 init_cjs_shims();
-var import_types68 = require("@neat.is/types");
+var import_types69 = require("@neat.is/types");
 function neatServiceNameFor(resourceType, resourceName, serviceMap) {
   switch (resourceType) {
     case "cloud_function":
@@ -19326,7 +19492,7 @@ function routeEntriesFor(graph, serviceName) {
   const entries = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types68.NodeType.RouteNode) return;
+    if (node.type !== import_types69.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     entries.push({
@@ -19358,7 +19524,7 @@ function createFirebaseResolveTarget(graph, serviceMap) {
     return {
       targetNodeId: match.routeNodeId,
       serviceName,
-      edgeType: import_types68.EdgeType.CALLS
+      edgeType: import_types69.EdgeType.CALLS
     };
   };
 }
@@ -19385,7 +19551,7 @@ init_cjs_shims();
 
 // src/connectors/cloudflare/connector.ts
 init_cjs_shims();
-var import_types70 = require("@neat.is/types");
+var import_types71 = require("@neat.is/types");
 
 // src/connectors/cloudflare/client.ts
 init_cjs_shims();
@@ -19549,7 +19715,7 @@ function findTaggedWorkerFileNode(graph, workerName) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type === import_types70.NodeType.FileNode && a.platform === "cloudflare" && a.platformName === workerName) {
+    if (a.type === import_types71.NodeType.FileNode && a.platform === "cloudflare" && a.platformName === workerName) {
       found = id;
     }
   });
@@ -19561,7 +19727,7 @@ function findMatchingRouteNode(graph, serviceName, method, path76) {
   graph.forEachNode((id, attrs) => {
     if (found) return;
     const a = attrs;
-    if (a.type !== import_types70.NodeType.RouteNode || a.service !== serviceName) return;
+    if (a.type !== import_types71.NodeType.RouteNode || a.service !== serviceName) return;
     if (!a.pathTemplate || normalizePathTemplate(a.pathTemplate) !== normalizedPath) return;
     const routeMethod = (a.method ?? "").toUpperCase();
     if (routeMethod !== "ALL" && routeMethod !== method) return;
@@ -19580,11 +19746,11 @@ function createCloudflareResolveTarget(config, graph) {
     };
     const mapping = config.workers?.[scriptName];
     if (mapping) {
-      const wholeFileId = (0, import_types70.fileId)(mapping.service, mapping.entryFile);
+      const wholeFileId = (0, import_types71.fileId)(mapping.service, mapping.entryFile);
       return {
         targetNodeId: resolveRouteGrain(mapping.service, wholeFileId),
         serviceName: mapping.service,
-        edgeType: import_types70.EdgeType.CALLS
+        edgeType: import_types71.EdgeType.CALLS
       };
     }
     const taggedFileId = findTaggedWorkerFileNode(graph, scriptName);
@@ -19593,13 +19759,13 @@ function createCloudflareResolveTarget(config, graph) {
       return {
         targetNodeId: resolveRouteGrain(fileNode.service, taggedFileId),
         serviceName: fileNode.service,
-        edgeType: import_types70.EdgeType.CALLS
+        edgeType: import_types71.EdgeType.CALLS
       };
     }
     return {
-      targetNodeId: (0, import_types70.infraId)("cloudflare-worker", scriptName),
+      targetNodeId: (0, import_types71.infraId)("cloudflare-worker", scriptName),
       serviceName: scriptName,
-      edgeType: import_types70.EdgeType.CALLS,
+      edgeType: import_types71.EdgeType.CALLS,
       ensureInfraNode: { kind: "cloudflare-worker", name: scriptName, provider: "cloudflare" }
     };
   };
@@ -19795,14 +19961,14 @@ function diffNeonStatementsToSignals(rows, previous, observedAtIso) {
 
 // src/connectors/neon/resolve.ts
 init_cjs_shims();
-var import_types74 = require("@neat.is/types");
+var import_types75 = require("@neat.is/types");
 function createNeonResolveTarget(config) {
   return (signal) => {
     if (signal.targetKind !== NEON_SQL_TABLE_TARGET_KIND || !signal.targetName) return null;
     return {
-      targetNodeId: (0, import_types74.infraId)("sql-table", signal.targetName),
+      targetNodeId: (0, import_types75.infraId)("sql-table", signal.targetName),
       serviceName: config.serviceName,
-      edgeType: import_types74.EdgeType.CALLS,
+      edgeType: import_types75.EdgeType.CALLS,
       ensureInfraNode: { kind: "sql-table", name: signal.targetName, provider: "neon" }
     };
   };
@@ -19983,14 +20149,14 @@ function mapLogEntriesToSignals2(entries) {
 
 // src/connectors/cloud-run/resolve.ts
 init_cjs_shims();
-var import_types78 = require("@neat.is/types");
+var import_types79 = require("@neat.is/types");
 var CLOUD_RUN_SERVICE_INFRA_KIND = "cloud-run-service";
 function findMatchingRouteNode2(graph, serviceName, method, normalizedPath) {
   let found = null;
   graph.forEachNode((_id, attrs) => {
     if (found) return;
     const node = attrs;
-    if (node.type !== import_types78.NodeType.RouteNode) return;
+    if (node.type !== import_types79.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName || !route.pathTemplate) return;
     if (normalizePathTemplate(route.pathTemplate) !== normalizedPath) return;
@@ -20015,13 +20181,13 @@ function createCloudRunResolveTarget(graph, config) {
         normalizePathTemplate(path76)
       );
       if (routeNodeId) {
-        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types78.EdgeType.CALLS };
+        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types79.EdgeType.CALLS };
       }
     }
     return {
-      targetNodeId: (0, import_types78.infraId)(CLOUD_RUN_SERVICE_INFRA_KIND, gcpServiceName),
+      targetNodeId: (0, import_types79.infraId)(CLOUD_RUN_SERVICE_INFRA_KIND, gcpServiceName),
       serviceName: mappedService ?? gcpServiceName,
-      edgeType: import_types78.EdgeType.CALLS,
+      edgeType: import_types79.EdgeType.CALLS,
       ensureInfraNode: {
         kind: CLOUD_RUN_SERVICE_INFRA_KIND,
         name: gcpServiceName,
@@ -20203,14 +20369,14 @@ function mapLogEntriesToSignals3(entries) {
 
 // src/connectors/gcp-lb/resolve.ts
 init_cjs_shims();
-var import_types82 = require("@neat.is/types");
+var import_types83 = require("@neat.is/types");
 var GCP_LB_BACKEND_INFRA_KIND = "gcp-lb-backend";
 function findMatchingRouteNode3(graph, serviceName, method, normalizedPath) {
   let found = null;
   graph.forEachNode((_id, attrs) => {
     if (found) return;
     const node = attrs;
-    if (node.type !== import_types82.NodeType.RouteNode) return;
+    if (node.type !== import_types83.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName || !route.pathTemplate) return;
     if (normalizePathTemplate(route.pathTemplate) !== normalizedPath) return;
@@ -20235,13 +20401,13 @@ function createGcpLbResolveTarget(graph, config) {
         normalizePathTemplate(path76)
       );
       if (routeNodeId) {
-        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types82.EdgeType.CALLS };
+        return { targetNodeId: routeNodeId, serviceName: mappedService, edgeType: import_types83.EdgeType.CALLS };
       }
     }
     return {
-      targetNodeId: (0, import_types82.infraId)(GCP_LB_BACKEND_INFRA_KIND, backendServiceName),
+      targetNodeId: (0, import_types83.infraId)(GCP_LB_BACKEND_INFRA_KIND, backendServiceName),
       serviceName: mappedService ?? backendServiceName,
-      edgeType: import_types82.EdgeType.CALLS,
+      edgeType: import_types83.EdgeType.CALLS,
       ensureInfraNode: {
         kind: GCP_LB_BACKEND_INFRA_KIND,
         name: backendServiceName,
@@ -20282,7 +20448,7 @@ function createGcpLbConnector(graph, config = {}) {
 
 // src/connectors/render/index.ts
 init_cjs_shims();
-var import_types85 = require("@neat.is/types");
+var import_types86 = require("@neat.is/types");
 
 // src/connectors/render/types.ts
 init_cjs_shims();
@@ -20360,7 +20526,7 @@ function buildRenderRouteIndex(graph, serviceName) {
   const out = [];
   graph.forEachNode((_id, attrs) => {
     const node = attrs;
-    if (node.type !== import_types85.NodeType.RouteNode) return;
+    if (node.type !== import_types86.NodeType.RouteNode) return;
     const route = attrs;
     if (route.service !== serviceName) return;
     out.push({
@@ -20445,7 +20611,7 @@ function mapRenderRequestLogsToSignals(entries, routeIndex) {
 function createRenderResolveTarget(config) {
   return (signal) => {
     if (signal.targetKind === ROUTE_TARGET_KIND2) {
-      return { targetNodeId: signal.targetName, serviceName: config.serviceName, edgeType: import_types85.EdgeType.CALLS };
+      return { targetNodeId: signal.targetName, serviceName: config.serviceName, edgeType: import_types86.EdgeType.CALLS };
     }
     return null;
   };
@@ -20583,21 +20749,21 @@ function mapInsightsToSignals(rows, observedAtIso) {
 
 // src/connectors/planetscale/resolve.ts
 init_cjs_shims();
-var import_types89 = require("@neat.is/types");
+var import_types90 = require("@neat.is/types");
 var PLANETSCALE_DATABASE_KIND = "planetscale-database";
 function createPlanetscaleResolveTarget(graph, config) {
   const databaseName = `${config.organization}/${config.database}`;
   return (signal, _ctx) => {
     if (signal.targetKind !== PLANETSCALE_SQL_TABLE_TARGET_KIND || !signal.targetName) return null;
-    const tableId = (0, import_types89.infraId)("sql-table", signal.targetName);
+    const tableId = (0, import_types90.infraId)("sql-table", signal.targetName);
     if (graph.hasNode(tableId)) {
-      return { targetNodeId: tableId, serviceName: config.serviceName, edgeType: import_types89.EdgeType.CALLS };
+      return { targetNodeId: tableId, serviceName: config.serviceName, edgeType: import_types90.EdgeType.CALLS };
     }
-    const providerId = (0, import_types89.infraId)(PLANETSCALE_DATABASE_KIND, databaseName);
+    const providerId = (0, import_types90.infraId)(PLANETSCALE_DATABASE_KIND, databaseName);
     return {
       targetNodeId: providerId,
       serviceName: config.serviceName,
-      edgeType: import_types89.EdgeType.CALLS,
+      edgeType: import_types90.EdgeType.CALLS,
       ensureInfraNode: { kind: PLANETSCALE_DATABASE_KIND, name: databaseName, provider: "planetscale" }
     };
   };
@@ -20862,7 +21028,7 @@ function mapBuildsToSignals(builds, serviceName) {
 
 // src/connectors/eas/resolve.ts
 init_cjs_shims();
-var import_types94 = require("@neat.is/types");
+var import_types95 = require("@neat.is/types");
 var NO_ENV2 = "unknown";
 var EAS_JSON_PHASES = /* @__PURE__ */ new Set(["READ_EAS_JSON"]);
 var APP_CONFIG_PHASES = /* @__PURE__ */ new Set([
@@ -20878,8 +21044,8 @@ function configBasenamesForPhase(phase) {
 function configNodeService(graph, configNodeId) {
   for (const edgeId of graph.inboundEdges(configNodeId)) {
     const edge = graph.getEdgeAttributes(edgeId);
-    if (edge.type !== import_types94.EdgeType.CONFIGURED_BY) continue;
-    const parsed = (0, import_types94.parseFileId)(edge.source);
+    if (edge.type !== import_types95.EdgeType.CONFIGURED_BY) continue;
+    const parsed = (0, import_types95.parseFileId)(edge.source);
     if (parsed) return parsed.service;
   }
   return null;
@@ -20890,7 +21056,7 @@ function findConfigNode(graph, basenames, serviceName) {
   graph.forEachNode((id, attrs) => {
     if (scoped) return;
     const node = attrs;
-    if (node.type !== import_types94.NodeType.ConfigNode) return;
+    if (node.type !== import_types95.NodeType.ConfigNode) return;
     if (typeof node.name !== "string" || !basenames.includes(node.name)) return;
     if (anyMatch === null) anyMatch = id;
     if (configNodeService(graph, id) === serviceName) scoped = id;
@@ -20907,13 +21073,13 @@ function createEasResolveTarget(graph) {
     if (basenames.length > 0) {
       const configNodeId = findConfigNode(graph, basenames, serviceName);
       if (configNodeId) {
-        return { targetNodeId: configNodeId, serviceName, edgeType: import_types94.EdgeType.CALLS };
+        return { targetNodeId: configNodeId, serviceName, edgeType: import_types95.EdgeType.CALLS };
       }
     }
     return {
       targetNodeId: resolveFusedServiceId(graph, serviceName, NO_ENV2),
       serviceName,
-      edgeType: import_types94.EdgeType.CALLS
+      edgeType: import_types95.EdgeType.CALLS
     };
   };
 }
@@ -21628,11 +21794,11 @@ function registerRoutes(scope, ctx) {
       const candidates = req.query.type.split(",").map((s) => s.trim()).filter((s) => s.length > 0);
       const parsed = [];
       for (const c of candidates) {
-        const r = import_types97.DivergenceTypeSchema.safeParse(c);
+        const r = import_types98.DivergenceTypeSchema.safeParse(c);
         if (!r.success) {
           return reply.code(400).send({
             error: `unknown divergence type "${c}"`,
-            allowed: import_types97.DivergenceTypeSchema.options
+            allowed: import_types98.DivergenceTypeSchema.options
           });
         }
         parsed.push(r.data);
@@ -21749,6 +21915,7 @@ function registerRoutes(scope, ctx) {
           reg.connector,
           {
             projectDir: proj.scanPath ?? "",
+            project: proj.name,
             credentials: reg.credentials,
             ...incidentsPath ? { errorsPath: incidentsPath } : {}
           },
@@ -21812,6 +21979,39 @@ function registerRoutes(scope, ctx) {
     if (!result) return reply.code(404).send({ error: "no root cause found", id: nodeId });
     return result;
   });
+  scope.get("/graph/incident-card/:nodeId", async (req, reply) => {
+    const proj = resolveProject(registry, req, reply, ctx.bootstrap, ctx.singleProject);
+    if (!proj) return;
+    const { nodeId } = req.params;
+    if (!proj.graph.hasNode(nodeId)) {
+      return reply.code(404).send({ error: "node not found", id: nodeId });
+    }
+    const epath = errorsPathFor(proj);
+    const incidents = epath ? await readErrorEvents(epath) : [];
+    let errorEvent;
+    if (req.query.errorId) {
+      errorEvent = incidents.find((e) => e.id === req.query.errorId);
+      if (!errorEvent) {
+        return reply.code(404).send({ error: "error event not found", id: req.query.errorId });
+      }
+    } else {
+      const svc = nodeId.replace(/^service:/, "");
+      errorEvent = [...incidents].filter((e) => e.affectedNode === nodeId || e.service === svc).sort((a, b) => (b.timestamp ?? "").localeCompare(a.timestamp ?? ""))[0];
+      if (!errorEvent) {
+        return reply.code(404).send({ error: "no incident found for node", id: nodeId });
+      }
+    }
+    const policyPath = ctx.policyFilePathFor(proj);
+    let policies = [];
+    if (policyPath) {
+      try {
+        policies = await loadPolicyFile(policyPath);
+      } catch {
+        policies = [];
+      }
+    }
+    return buildIncidentCard(proj.graph, errorEvent, incidents, policies);
+  });
   scope.get("/graph/blast-radius/:nodeId", async (req, reply) => {
     const proj = resolveProject(registry, req, reply, ctx.bootstrap, ctx.singleProject);
     if (!proj) return;
@@ -21994,7 +22194,7 @@ function registerRoutes(scope, ctx) {
     const log = new PolicyViolationsLog(proj.paths.policyViolationsPath);
     let violations = await log.readAll();
     if (req.query.severity) {
-      const sev = import_types97.PolicySeveritySchema.safeParse(req.query.severity);
+      const sev = import_types98.PolicySeveritySchema.safeParse(req.query.severity);
       if (!sev.success) {
         return reply.code(400).send({
           error: "invalid severity",
@@ -22033,7 +22233,7 @@ function registerRoutes(scope, ctx) {
   scope.post("/policies/check", async (req, reply) => {
     const proj = resolveProject(registry, req, reply, ctx.bootstrap, ctx.singleProject);
     if (!proj) return;
-    const parsed = import_types97.PoliciesCheckBodySchema.safeParse(req.body ?? {});
+    const parsed = import_types98.PoliciesCheckBodySchema.safeParse(req.body ?? {});
     if (!parsed.success) {
       return reply.code(400).send({
         error: "invalid /policies/check body",