@orquentra/codebuddy 2.5.0 → 2.6.2

package/dist/{main-BDVQAGAS.js → main-MTBQZGJV.js}

@@ -1,40 +1,53 @@
+import {
+  runPreToolHookCommand
+} from "./chunk-QBDJXGG5.js";
 import {
   loadLlmSummaries,
   summarizeRepository
-} from "./chunk-PCE4STAY.js";
+} from "./chunk-OWWCDRXW.js";
 import {
   chatJson,
   coolingDown,
   usageToday
-} from "./chunk-UFZD3JAA.js";
+} from "./chunk-5MQOE4J6.js";
+import {
+  isDockerDaemonRunning,
+  tryStartDockerDesktop,
+  waitForDockerDaemon
+} from "./chunk-5UH3BEQR.js";
+import {
+  postgresDown,
+  postgresStatus,
+  postgresUp
+} from "./chunk-CSRD5OQA.js";
 import {
   renderLeanBlock,
   runLeanHookCommand
-} from "./chunk-ROQTT5ZO.js";
-import {
-  runPreToolHookCommand
-} from "./chunk-WHZSVY2L.js";
+} from "./chunk-B6CO63SQ.js";
 import {
   failSoft,
   readHookInput,
   writeStdout
-} from "./chunk-PYLH4MH5.js";
+} from "./chunk-FJOTP632.js";
+import {
+  generateSuggestions,
+  migrateMemoryToFiles,
+  registerCodeBuddyTools,
+  startMcpServer,
+  watchRepository
+} from "./chunk-IMFUYEZA.js";
 import {
   PlanFileStore,
   PlanLifecycle,
   ReviewStore,
-  VERSION,
   WorklogStore,
   approveReviewItem,
   assessRisk,
   buildBeforeEditContext,
   buildBootstrapContext,
-  generateSuggestions,
-  migrateMemoryToFiles,
   openHookSemantics,
   parseTraceLines,
   readTraces,
-  registerCodeBuddyTools,
   renderContextBlock,
   resolveRiskPaths,
   runCaptureHook,
@@ -42,15 +55,14 @@ import {
   runResetHook,
   runStageHook,
   runSyncHook,
-  startMcpServer,
-  tracePath,
-  watchRepository
-} from "./chunk-Z5QB367W.js";
+  tracePath
+} from "./chunk-R7CD6EXS.js";
 import "./chunk-IHQM2ZDV.js";
 import {
   SessionCapsuleLedger,
-  estimateTokens
-} from "./chunk-CQPCHMBS.js";
+  estimateTokens,
+  hookRoot
+} from "./chunk-J2EAZ4MA.js";
 import {
   buildArchitectureMap,
   generateGraphifyGraph,
@@ -60,13 +72,12 @@ import {
   neighbours,
   queryMap,
   setupGraphify
-} from "./chunk-L5AYZC3F.js";
+} from "./chunk-NERKZSSE.js";
 import {
   extractSymbolTable,
   supportsSymbols
 } from "./chunk-PQK3GKZH.js";
 import {
-  MemoryFileStore,
   bootstrapDatabase,
   buildProviderFromConfig,
   createDatabaseClient,
@@ -77,39 +88,46 @@ import {
   pingDatabase,
   runDoctor,
   runMigrations
-} from "./chunk-JDZ3VK26.js";
+} from "./chunk-2XDPKFUW.js";
+import {
+  MemoryFileStore,
+  VERSION
+} from "./chunk-S6VEG4S2.js";
 import {
   redactPersisted
 } from "./chunk-GDJH7XJC.js";
 import {
   computeFactHash,
   generateEntityId
-} from "./chunk-4BYGTEJT.js";
-import "./chunk-KYK6RPAJ.js";
+} from "./chunk-XBJQKCLU.js";
+import "./chunk-JFDRBPYF.js";
 import {
+  localRuntimeInstalled,
   modelCacheDir
-} from "./chunk-3XYQGFPB.js";
+} from "./chunk-IBLJOHJL.js";
 import {
   DEFAULT_CLOUD_EMBEDDING_MODELS,
   DEFAULT_RERANK_MODELS,
   LOCAL_EMBEDDING_MODEL,
   getModelDefinition
-} from "./chunk-JMWJ7V6Y.js";
+} from "./chunk-JPHJBCZB.js";
 import {
   DEFAULT_ZVEC_MODEL,
   buildZvecIndex,
   zvecStatus
-} from "./chunk-QDBDYCM2.js";
+} from "./chunk-5FW3PMNP.js";
 import {
   resolveLlmConfig
-} from "./chunk-6MKEIDX5.js";
+} from "./chunk-RAJJSCIP.js";
 import {
   PLAN_POLICIES,
   configPath,
+  defaultNamespaceForCwd,
   initConfigFile,
   initProjectScaffold,
   loadPlanPolicy,
   loadRuntimeConfig,
+  migrateLegacyNamespace,
   readConfigFile,
   redactSecrets,
   resolveNamespaceFrom,
@@ -119,7 +137,7 @@ import {
   setZvecEnabled,
   writeAtomic,
   writeConfigFile
-} from "./chunk-776EQXDV.js";
+} from "./chunk-5KZY6OTG.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/cli/main.ts
@@ -338,7 +356,7 @@ function runTestCommand(command, source, repositoryRoot, timeoutMs) {
   if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
     throw new Error("--timeout must be a positive number of milliseconds.");
   }
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const startedAt = Date.now();
     const child = spawn(command, {
       cwd: repositoryRoot,
@@ -363,7 +381,7 @@ ${output.slice(-MAX_TEST_OUTPUT_CHARS)}`;
     }, timeoutMs);
     child.on("close", (exitCode, signal) => {
       clearTimeout(timer);
-      resolve14({
+      resolve13({
         status: timedOut ? "timed_out" : exitCode === 0 ? "passed" : "failed",
         command,
         source,
@@ -375,7 +393,7 @@ ${output.slice(-MAX_TEST_OUTPUT_CHARS)}`;
     });
     child.on("error", (error) => {
       clearTimeout(timer);
-      resolve14({
+      resolve13({
         status: "failed",
         command,
         source,
@@ -633,14 +651,17 @@ function resolveCliEntrypoint() {
 }
 function buildEntry(options) {
   const env = {
-    CODEBUDDY_NAMESPACE: options.namespace
+    CODEBUDDY_NAMESPACE: options.namespace,
+    CODEBUDDY_PROJECT_ROOT: resolve2(options.projectRoot ?? process.cwd())
   };
-  if (options.projectRoot) env.CODEBUDDY_PROJECT_ROOT = options.projectRoot;
   if (options.hfToken) env.HF_TOKEN = options.hfToken;
   if (options.groqApiKey) env.GROQ_API_KEY = options.groqApiKey;
   if (options.databaseUrl) env.DATABASE_URL = options.databaseUrl;
   return {
-    command: "node",
+    // Absolute: Claude Desktop is a GUI app and does not inherit the shell's
+    // PATH (nvm, Homebrew), so a bare "node" may not resolve or may be another
+    // version. Re-run `codebuddy claude install` after switching Node.
+    command: process.execPath,
     args: [resolveCliEntrypoint(), "serve"],
     env
   };
@@ -1034,6 +1055,8 @@ function hook(command, payload) {
       child = spawn("codebuddy", ["hooks", command], {
         cwd: payload.cwd,
         stdio: ["pipe", "pipe", "ignore"],
+        // npm installs a codebuddy.cmd shim on Windows, which spawn only runs through a shell.
+        shell: process.platform === "win32",
       });
     } catch {
       done("");
@@ -2938,7 +2961,13 @@ data: ${data}
 `);
   };
   watchFile(path, { interval: options.pollMs ?? 1e3 }, () => void onChange());
+  let boundPort = 0;
   const server = createServer(async (request, response) => {
+    const host = request.headers.host ?? "";
+    if (host !== `127.0.0.1:${boundPort}` && host !== `localhost:${boundPort}`) {
+      response.writeHead(403, { "content-type": "text/plain" }).end("Forbidden host");
+      return;
+    }
     const url = new URL(request.url ?? "/", "http://localhost");
     if (request.method !== "GET") {
       response.writeHead(405).end();
@@ -2978,18 +3007,19 @@ data: ${data}
     response.writeHead(404, { "content-type": "text/plain" }).end("Not found");
   });
   const port = await listen(server, options.port ?? 4777);
+  boundPort = port;
   const heartbeat = setInterval(() => {
     for (const client of clients) client.write(": ping\n\n");
   }, 25e3);
   heartbeat.unref();
   return {
     url: `http://127.0.0.1:${port}/`,
-    close: () => new Promise((resolve14) => {
+    close: () => new Promise((resolve13) => {
       clearInterval(heartbeat);
       unwatchFile(path);
       for (const client of clients) client.end();
       server.closeAllConnections();
-      server.close(() => resolve14());
+      server.close(() => resolve13());
     })
   };
 }
@@ -2997,11 +3027,11 @@ async function listen(server, port) {
   for (let attempt = 0; attempt < 10; attempt += 1) {
     const candidate = port === 0 ? 0 : port + attempt;
     try {
-      await new Promise((resolve14, reject) => {
+      await new Promise((resolve13, reject) => {
         server.once("error", reject);
         server.listen(candidate, "127.0.0.1", () => {
           server.off("error", reject);
-          resolve14();
+          resolve13();
         });
       });
       return server.address().port;
@@ -3039,8 +3069,8 @@ function registerDashboardCommand(program, runSafely2) {
       );
       console.log(pc4.dim("  Ctrl+C to stop."));
       if (opts.open) openBrowser(dashboard.url);
-      await new Promise((resolve14) => {
-        const stop = () => void dashboard.close().then(resolve14);
+      await new Promise((resolve13) => {
+        const stop = () => void dashboard.close().then(resolve13);
         process.once("SIGINT", stop);
         process.once("SIGTERM", stop);
       });
@@ -3146,7 +3176,7 @@ function registerGitHubCommands(program, runSafely2) {
 }
 
 // src/cli/commands/hooks.ts
-import { spawn as spawn3 } from "child_process";
+import { execFile as execFile2, spawn as spawn3 } from "child_process";
 import { relative as relative2 } from "path";
 import pc7 from "picocolors";
 function registerHooksCommands(program, runSafely2) {
@@ -3168,7 +3198,8 @@ function registerHooksCommands(program, runSafely2) {
         `${changed ? pc7.green("installed") : pc7.dim("unchanged")} CodeBuddy hooks in ${where}`
       );
       await reconcileRules(client, "hooks");
-      syncInBackground(process.cwd());
+      warnIfHookCommandStale();
+      syncInBackground(process.cwd(), true);
       console.log(
         pc7.dim(
           `  prompt\u2192recall \xB7 edit\u2192stage \xB7 turn end\u2192capture \xB7 compaction\u2192reset. Restart ${CLIENT_ADAPTERS[client].name} to activate.`
@@ -3226,18 +3257,18 @@ function registerHooksCommands(program, runSafely2) {
           `codebuddy: captured from ${changedFiles.length} changed file(s) \u2014 ${result.saved.length} saved, ${result.queuedForReview.length} queued
 `
         );
-        if (result.saved.length > 0) syncInBackground(input.cwd ?? process.cwd());
+        if (result.saved.length > 0) syncInBackground(hookRoot(input.cwd));
       }
     });
   });
   hooks.command("sync").description(
     "[hook] Reindex Markdown memory into PostgreSQL and embed it locally (runs detached after capture)."
-  ).action(async () => {
+  ).option("--respace", "Also re-embed vectors made by another embedding model.").action(async (opts) => {
     await failSoft(async () => {
-      const result = await runSyncHook(process.cwd());
+      const result = await runSyncHook(process.cwd(), opts.respace ? { respace: true } : {});
       process.stderr.write(
         result ? `codebuddy: synced ${result.reindex.facts.imported} new / ${result.reindex.facts.updated} updated fact(s)${result.reindex.reembedding ? `, ${result.reindex.reembedding} re-embedding` : ""}${result.drained ? "" : " (embeddings still pending)"}
-` : "codebuddy: no PostgreSQL configured; nothing to sync\n"
+` : "codebuddy: nothing to sync (no PostgreSQL configured, or another sync is running)\n"
       );
     });
   });
@@ -3271,15 +3302,42 @@ async function reconcileRules(client, mode) {
     );
   }
 }
-function syncInBackground(cwd) {
+function warnIfHookCommandStale() {
+  execFile2(
+    "codebuddy",
+    ["--version"],
+    { timeout: 1e4, shell: process.platform === "win32" },
+    (error, stdout) => {
+      const found = stdout.trim();
+      if (error || !found) {
+        console.log(
+          pc7.yellow(
+            "  ! `codebuddy` is not on PATH, so the hooks cannot run. Install it globally: npm i -g @orquentra/codebuddy"
+          )
+        );
+      } else if (found !== VERSION) {
+        console.log(
+          pc7.yellow(
+            `  ! The hooks will run codebuddy ${found} from PATH, not ${VERSION}. Update it: npm i -g @orquentra/codebuddy@${VERSION}`
+          )
+        );
+      }
+    }
+  );
+}
+function syncInBackground(cwd, respace = false) {
   const entry = process.argv[1];
   if (!entry) return;
   try {
-    spawn3(process.execPath, [...process.execArgv, entry, "hooks", "sync"], {
-      cwd,
-      detached: true,
-      stdio: "ignore"
-    }).unref();
+    spawn3(
+      process.execPath,
+      [...process.execArgv, entry, "hooks", "sync", ...respace ? ["--respace"] : []],
+      {
+        cwd,
+        detached: true,
+        stdio: "ignore"
+      }
+    ).unref();
   } catch {
   }
 }
@@ -3446,81 +3504,6 @@ function printResult(result, compact = false) {
 // src/cli/commands/init-wizard.ts
 import { writeFile as writeFile2 } from "fs/promises";
 import { confirm, isCancel, log, note, password, spinner, text } from "@clack/prompts";
-
-// src/cli/commands/postgres-docker.ts
-import { spawn as spawn4 } from "child_process";
-import { existsSync as existsSync3 } from "fs";
-import { dirname as dirname11, resolve as resolve12 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-function resolveBundledComposeFile() {
-  const here = dirname11(fileURLToPath2(import.meta.url));
-  const candidates = [
-    // installed package: dist/cli/commands/ -> root
-    resolve12(here, "..", "..", "..", "docker-compose.yml"),
-    // source layout:    src/cli/commands/ -> root
-    resolve12(here, "..", "..", "..", "..", "docker-compose.yml"),
-    resolve12(here, "..", "..", "docker-compose.yml"),
-    resolve12(process.cwd(), "docker-compose.yml")
-  ];
-  for (const candidate of candidates) {
-    if (existsSync3(candidate)) return candidate;
-  }
-  throw new Error(`Could not locate docker-compose.yml. Looked in:
-  ${candidates.join("\n  ")}`);
-}
-async function runDockerCompose(args, options = {}) {
-  const spawnImpl = options.spawnImpl ?? spawn4;
-  const composeFile = resolveBundledComposeFile();
-  const attempts = [
-    { kind: "v2", bin: "docker", args: ["compose", "-f", composeFile, ...args] },
-    { kind: "v1", bin: "docker-compose", args: ["-f", composeFile, ...args] }
-  ];
-  let lastSpawnError = null;
-  for (const attempt of attempts) {
-    try {
-      return await spawnOnce(spawnImpl, attempt);
-    } catch (error) {
-      const err = error;
-      if (err.code !== "ENOENT") throw err;
-      lastSpawnError = err;
-    }
-  }
-  throw new Error(
-    `Could not find docker. Install Docker Desktop (or docker-compose v1) and ensure it is on your PATH. (${lastSpawnError?.message ?? "spawn ENOENT"})`
-  );
-}
-function spawnOnce(spawnImpl, attempt) {
-  return new Promise((resolvePromise, rejectPromise) => {
-    const child = spawnImpl(attempt.bin, attempt.args, {
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    let stdout = "";
-    let stderr = "";
-    child.stdout?.on("data", (chunk) => {
-      stdout += String(chunk);
-    });
-    child.stderr?.on("data", (chunk) => {
-      stderr += String(chunk);
-    });
-    child.on("error", (error) => {
-      rejectPromise(error);
-    });
-    child.on("close", (code) => {
-      resolvePromise({ code: code ?? 0, stdout, stderr });
-    });
-  });
-}
-async function postgresUp(options) {
-  return runDockerCompose(["up", "-d"], options ?? {});
-}
-async function postgresDown(options) {
-  return runDockerCompose(["down"], options ?? {});
-}
-async function postgresStatus(options) {
-  return runDockerCompose(["ps"], options ?? {});
-}
-
-// src/cli/commands/init-wizard.ts
 function bail() {
   log.warn("Aborted. No config was written.");
   process.exit(1);
@@ -3540,6 +3523,7 @@ async function pingOnce(databaseUrl) {
   }
 }
 async function runInitWizard() {
+  const projectRoot = process.cwd();
   const sigintHandler = () => bail();
   process.on("SIGINT", sigintHandler);
   try {
@@ -3562,7 +3546,7 @@ async function runInitWizard() {
     const namespace = unwrap(
       await text({
         message: "Default namespace",
-        initialValue: process.env.CODEBUDDY_NAMESPACE ?? "default",
+        initialValue: process.env.CODEBUDDY_NAMESPACE ?? defaultNamespaceForCwd(projectRoot),
         validate: (value) => value && /^[a-zA-Z0-9_.:-]+$/.test(value) ? void 0 : "Letters, digits, _ . : - only."
       })
     );
@@ -3585,7 +3569,7 @@ async function runInitWizard() {
           if (result.code === 0) {
             dockerSpinner.stop("Postgres container started.");
             for (let attempt = 0; attempt < 10 && !connected; attempt++) {
-              await new Promise((resolve14) => setTimeout(resolve14, 500));
+              await new Promise((resolve13) => setTimeout(resolve13, 500));
               connected = await pingOnce(databaseUrl);
             }
             if (!connected) {
@@ -3638,6 +3622,7 @@ async function runInitWizard() {
       try {
         const install = await installClaudeEntry({
           namespace,
+          projectRoot,
           hfToken,
           databaseUrl
         });
@@ -3773,7 +3758,7 @@ function registerMapCommands(program, runSafely2) {
 }
 
 // src/cli/commands/memory-review.ts
-import { spawn as spawn5 } from "child_process";
+import { spawn as spawn4 } from "child_process";
 import { relative as relative3 } from "path";
 import pc12 from "picocolors";
 function registerMemoryCommands(program, runSafely2) {
@@ -3869,22 +3854,22 @@ function truncate(value, max) {
 function openEditor(path) {
   const editor = process.env.EDITOR ?? process.env.VISUAL ?? "vi";
   return new Promise((resolvePromise, reject) => {
-    const child = spawn5(editor, [path], { stdio: "inherit" });
+    const child = spawn4(editor, [path], { stdio: "inherit" });
     child.on("error", reject);
     child.on("close", () => resolvePromise());
   });
 }
 
 // src/cli/commands/models.ts
-import { existsSync as existsSync4 } from "fs";
+import { existsSync as existsSync3 } from "fs";
 import { join as join15 } from "path";
 import { spinner as spinner2 } from "@clack/prompts";
 import pc13 from "picocolors";
 
 // evals/fact-relevance.json
 var fact_relevance_default = {
-  version: 1,
-  note: "Task prompts vs durable project facts. Queries are paraphrased so most share few or no words with their fact; every unlisted (query, fact) pair is irrelevant.",
+  version: 2,
+  note: "Task prompts vs durable project facts. Queries are paraphrased so most share few or no words with their fact; every unlisted (query, fact) pair is irrelevant. Hard negatives share a subsystem with a relevant fact but do not answer its task. Queries alternate dev/test by position (even index = dev): floors are chosen on dev and reported on test.",
   facts: {
     cookie: "OAuth callback breaks unless the session cookie is SameSite=Lax; Strict drops it on the cross-site redirect.",
     pool: "Postgres connections go through one bounded pool of 10; never open ad-hoc clients in request handlers.",
@@ -3905,43 +3890,174 @@ var fact_relevance_default = {
     avatar: "Profile images are resized to 256px and stored as WebP in the media bucket.",
     flags: "Feature flags are read once at boot; changing one requires a restart of the worker.",
     pagination: "List endpoints use cursor pagination with an opaque base64url cursor of createdAt and id.",
-    i18n: "UI strings live in locales/en.json; never hard-code user-facing text in components."
+    i18n: "UI strings live in locales/en.json; never hard-code user-facing text in components.",
+    cookieDomain: "Session cookies are scoped to the app subdomain; never set them on the apex domain.",
+    poolMetrics: "Database pool metrics are exported to Prometheus under the codebuddy_pool_ prefix.",
+    releaseNotes: "Release notes are drafted from merged pull request titles by the changelog script.",
+    hookInstall: "Hooks are written to .claude/settings.json and merged idempotently with the user's own hooks.",
+    migrationNaming: "Migration files are numbered by drizzle-kit; never rename or edit a migration that has been applied.",
+    testsParallel: "Vitest runs test files in parallel, so every test must use its own temporary directory.",
+    logsStderr: "Server logs go to stderr through pino; never log full request bodies.",
+    retry5xx: "The HTTP client retries 5xx responses twice with jittered backoff.",
+    dateFormat: "Dates in the UI are formatted with the user's locale through Intl.DateTimeFormat.",
+    flagNames: "Feature flag names use kebab-case and are declared in flags.yaml."
   },
   queries: [
     {
       q: "users get bounced back to sign-in forever after the identity provider returns",
       relevant: ["cookie"]
     },
-    { q: "handlers are exhausting connections to the database under load", relevant: ["pool"] },
-    { q: "cut a new version and push the package to the registry", relevant: ["release"] },
-    { q: "the injected block sometimes never shows up in the chat", relevant: ["hook"] },
-    { q: "fresh database setup fails on the embedding column", relevant: ["migration"] },
-    { q: "an API key ended up in a saved note", relevant: ["redaction"] },
-    { q: "context is sent again after I switch tasks and come back", relevant: ["ledger"] },
-    { q: "semantic code search crashes and the agent gets no files", relevant: ["zvec"] },
-    { q: "why do the db tests not run on my machine", relevant: ["tests"] },
-    { q: "module not found when importing a sibling ts file at runtime", relevant: ["esm"] },
-    { q: "Claude Desktop says Unexpected token in the server response", relevant: ["stdout"] },
-    { q: "the summarizer quietly stopped calling Groq in the afternoon", relevant: ["budget"] },
-    { q: "my uncommitted changes vanished after another session ran", relevant: ["worktree"] },
+    {
+      q: "handlers are exhausting connections to the database under load",
+      relevant: ["pool"]
+    },
+    {
+      q: "cut a new version and push the package to the registry",
+      relevant: ["release"]
+    },
+    {
+      q: "the injected block sometimes never shows up in the chat",
+      relevant: ["hook"]
+    },
+    {
+      q: "fresh database setup fails on the embedding column",
+      relevant: ["migration"]
+    },
+    {
+      q: "an API key ended up in a saved note",
+      relevant: ["redaction"]
+    },
+    {
+      q: "context is sent again after I switch tasks and come back",
+      relevant: ["ledger"]
+    },
+    {
+      q: "semantic code search crashes and the agent gets no files",
+      relevant: ["zvec"]
+    },
+    {
+      q: "why do the db tests not run on my machine",
+      relevant: ["tests"]
+    },
+    {
+      q: "module not found when importing a sibling ts file at runtime",
+      relevant: ["esm"]
+    },
+    {
+      q: "Claude Desktop says Unexpected token in the server response",
+      relevant: ["stdout"]
+    },
+    {
+      q: "the summarizer quietly stopped calling Groq in the afternoon",
+      relevant: ["budget"]
+    },
+    {
+      q: "my uncommitted changes vanished after another session ran",
+      relevant: ["worktree"]
+    },
     {
       q: "clients see too many requests errors during the import job",
       relevant: ["rateLimit"]
     },
-    { q: "meeting times show up one hour off for users in Berlin", relevant: ["timezone"] },
-    { q: "uploaded profile pictures look blurry", relevant: ["avatar"] },
-    { q: "I toggled the new checkout switch but nothing changed", relevant: ["flags"] },
-    { q: "infinite scroll repeats items on the second page", relevant: ["pagination"] },
-    { q: "translate the onboarding screen to German", relevant: ["i18n"] },
-    { q: "format the code before I commit", relevant: ["biome"] },
-    { q: "make the sidebar collapsible", relevant: [] },
-    { q: "add dark mode to the dashboard", relevant: [] },
-    { q: "write a haiku about the project", relevant: [] },
-    { q: "rename the button label on the settings page", relevant: [] }
+    {
+      q: "meeting times show up one hour off for users in Berlin",
+      relevant: ["timezone"]
+    },
+    {
+      q: "uploaded profile pictures look blurry",
+      relevant: ["avatar"]
+    },
+    {
+      q: "I toggled the new checkout switch but nothing changed",
+      relevant: ["flags"]
+    },
+    {
+      q: "infinite scroll repeats items on the second page",
+      relevant: ["pagination"]
+    },
+    {
+      q: "translate the onboarding screen to German",
+      relevant: ["i18n"]
+    },
+    {
+      q: "format the code before I commit",
+      relevant: ["biome"]
+    },
+    {
+      q: "make the sidebar collapsible",
+      relevant: []
+    },
+    {
+      q: "add dark mode to the dashboard",
+      relevant: []
+    },
+    {
+      q: "write a haiku about the project",
+      relevant: []
+    },
+    {
+      q: "rename the button label on the settings page",
+      relevant: []
+    },
+    {
+      q: "where do I declare a new feature flag",
+      relevant: ["flagNames"]
+    },
+    {
+      q: "show dates in the user's own language and order",
+      relevant: ["dateFormat"]
+    },
+    {
+      q: "can I tidy up the name of the 0004 migration file",
+      relevant: ["migrationNaming"]
+    },
+    {
+      q: "tests interfere with each other when the whole suite runs",
+      relevant: ["testsParallel"]
+    },
+    {
+      q: "where can I see how busy the connection pool is",
+      relevant: ["poolMetrics"]
+    },
+    {
+      q: "how is the text for the changelog produced",
+      relevant: ["releaseNotes"]
+    },
+    {
+      q: "the login cookie shows up on example.com instead of app.example.com",
+      relevant: ["cookieDomain"]
+    },
+    {
+      q: "is it fine to print the incoming payload for debugging",
+      relevant: ["logsStderr"]
+    },
+    {
+      q: "our hook setup appears twice in the Claude settings file",
+      relevant: ["hookInstall"]
+    },
+    {
+      q: "flaky upstream 502s should not fail the request on the first try",
+      relevant: ["retry5xx"]
+    },
+    {
+      q: "rewrite the marketing copy on the landing page",
+      relevant: []
+    },
+    {
+      q: "upgrade React to the next major version",
+      relevant: []
+    },
+    {
+      q: "add a CSV export button to the reports table",
+      relevant: []
+    }
   ]
 };
 
 // src/providers/calibration.ts
+function splitOf(index) {
+  return index % 2 === 0 ? "dev" : "test";
+}
 async function calibrateEmbedder(embed) {
   const data = fact_relevance_default;
   const factIds = Object.keys(data.facts);
@@ -3950,47 +4066,59 @@ async function calibrateEmbedder(embed) {
   const dot = (a, b) => a.reduce((sum, value, index) => sum + value * (b[index] ?? 0), 0);
   const scores = queryVectors.map((query) => factVectors.map((fact) => dot(query, fact)));
   const relevant = (qi, fi) => data.queries[qi]?.relevant.includes(factIds[fi] ?? "") ?? false;
+  const answerable = (qi) => (data.queries[qi]?.relevant.length ?? 0) > 0;
+  const rows = (split) => scores.flatMap((row2, qi) => splitOf(qi) === split ? [{ row: row2, qi }] : []);
   const positives = [];
   const negatives = [];
-  for (const [qi, row2] of scores.entries()) {
-    for (const [fi, score] of row2.entries()) (relevant(qi, fi) ? positives : negatives).push(score);
-  }
-  const auc = positives.reduce((wins, p) => wins + negatives.filter((n) => p > n).length, 0) / (positives.length * negatives.length);
   let hits = 0;
   let reciprocal = 0;
-  let answerable = 0;
-  for (const [qi, row2] of scores.entries()) {
-    if (!data.queries[qi]?.relevant.length) continue;
-    answerable += 1;
+  let answered = 0;
+  for (const { row: row2, qi } of rows("test")) {
+    for (const [fi, score] of row2.entries()) (relevant(qi, fi) ? positives : negatives).push(score);
+    if (!answerable(qi)) continue;
+    answered += 1;
     const order = row2.map((score, fi) => ({ score, fi })).sort((a, b) => b.score - a.score);
     const rank = order.findIndex(({ fi }) => relevant(qi, fi)) + 1;
     if (rank === 1) hits += 1;
     reciprocal += 1 / rank;
   }
-  const at = (floor) => {
+  const auc = positives.reduce((wins, p) => wins + negatives.filter((n) => p > n).length, 0) / (positives.length * negatives.length);
+  const at = (floor, split = "test") => {
     let tp = 0;
     let fp = 0;
+    let relevantPairs = 0;
     let abstained = 0;
     let unrelated = 0;
-    for (const [qi, row2] of scores.entries()) {
+    for (const { row: row2, qi } of rows(split)) {
+      relevantPairs += data.queries[qi]?.relevant.length ?? 0;
       const admitted = row2.flatMap((score, fi) => score >= floor ? [fi] : []);
       for (const fi of admitted) {
         if (relevant(qi, fi)) tp += 1;
         else fp += 1;
       }
-      if (!data.queries[qi]?.relevant.length) {
+      if (!answerable(qi)) {
         unrelated += 1;
         if (admitted.length === 0) abstained += 1;
       }
     }
     const precision = tp + fp === 0 ? 1 : tp / (tp + fp);
-    const recall = tp / positives.length;
+    const recall = relevantPairs === 0 ? 0 : tp / relevantPairs;
     const f05 = precision + recall === 0 ? 0 : 1.25 * precision * recall / (0.25 * precision + recall);
-    return { floor, precision, recall, f05, abstain: abstained / unrelated };
+    return { floor, precision, recall, f05, abstain: unrelated === 0 ? 1 : abstained / unrelated };
   };
-  const sweep = Array.from({ length: 96 }, (_, i) => at(Math.round((0.05 + i * 0.01) * 100) / 100));
+  const sweep = Array.from(
+    { length: 96 },
+    (_, i) => at(Math.round((0.05 + i * 0.01) * 100) / 100, "dev")
+  );
   const best = sweep.reduce((left, right) => right.f05 > left.f05 ? right : left);
-  return { auc, recallAt1: hits / answerable, mrr: reciprocal / answerable, best, at };
+  return {
+    auc,
+    recallAt1: answered === 0 ? 0 : hits / answered,
+    mrr: answered === 0 ? 0 : reciprocal / answered,
+    best,
+    test: at(best.floor, "test"),
+    at
+  };
 }
 
 // src/cli/commands/models.ts
@@ -4008,7 +4136,7 @@ async function withSpinner(label, work, done) {
     progress.stop(done(value));
     return value;
   } catch (error) {
-    progress.stop(pc13.red(`\u2717 ${label}`), 1);
+    progress.error(pc13.red(`\u2717 ${label}`));
     throw error;
   }
 }
@@ -4017,7 +4145,7 @@ function keyPresent(provider, apiKey) {
 }
 function localModelDownloaded(id, revision) {
   const dir = join15(modelCacheDir(), id, ...revision ? [revision] : []);
-  return existsSync4(join15(dir, "onnx", "model_quantized.onnx"));
+  return existsSync3(join15(dir, "onnx", "model_quantized.onnx"));
 }
 async function vectorCounts(postgresUrl, namespace, space) {
   const client = createDatabaseClient({ postgresUrl, maxConnections: 1, connectTimeoutSeconds: 3 });
@@ -4049,7 +4177,12 @@ async function printStatus() {
   const next = [];
   console.log(pc13.bold("Embeddings"));
   console.log(row("provider", `${provider.type}  ${pc13.dim(model)}`));
-  if (provider.type === "local") {
+  if (provider.type === "local" && !localRuntimeInstalled()) {
+    console.log(
+      row("runtime", warn("@huggingface/transformers is not installed: dense recall is off"))
+    );
+    next.push("npm i -g @huggingface/transformers");
+  } else if (provider.type === "local") {
     const ready = localModelDownloaded(LOCAL_EMBEDDING_MODEL.id, LOCAL_EMBEDDING_MODEL.revision);
     console.log(
       row(
@@ -4185,7 +4318,7 @@ Examples:
         );
       }
       if (!missingKey) {
-        syncInBackground(process.cwd());
+        syncInBackground(process.cwd(), true);
         console.log(
           pc13.dim("  Re-embedding existing memory in the background (codebuddy hooks sync).")
         );
@@ -4225,7 +4358,7 @@ before keeping one on. A reranker never admits a fact, it only orders them.`
   });
   models.command("pull").description("Download the local models now instead of on first use.").action(async () => {
     await runSafely2(async () => {
-      const { LocalModelProvider, rerankLocally } = await import("./local-3NGNESNB.js");
+      const { LocalModelProvider, rerankLocally } = await import("./local-5MZURLCZ.js");
       const file = await readConfigFile();
       let started = Date.now();
       await withSpinner(
@@ -4261,13 +4394,13 @@ before keeping one on. A reranker never admits a fact, it only orders them.`
       console.log(
         row(
           "ranking",
-          `AUC ${result.auc.toFixed(3)} \xB7 right fact first ${pct(result.recallAt1)}`
+          `AUC ${result.auc.toFixed(3)} \xB7 right fact first ${pct(result.recallAt1)} ${pc13.dim("(held-out tasks)")}`
         )
       );
       console.log(
         row(
           "floor",
-          `${result.best.floor}: precision ${pct(result.best.precision)}, recall ${pct(result.best.recall)}, silent on ${pct(result.best.abstain)} of unrelated tasks`
+          `${result.best.floor}: precision ${pct(result.test.precision)}, recall ${pct(result.test.recall)}, silent on ${pct(result.test.abstain)} of unrelated tasks ${pc13.dim("(chosen on dev, measured on test)")}`
         )
       );
       if (opts.dryRun) return;
@@ -4282,7 +4415,7 @@ before keeping one on. A reranker never admits a fact, it only orders them.`
 }
 
 // src/cli/commands/plan.ts
-import { spawn as spawn6 } from "child_process";
+import { spawn as spawn5 } from "child_process";
 import { relative as relative4 } from "path";
 import pc14 from "picocolors";
 function makeLifecycle(cwd = process.cwd()) {
@@ -4344,15 +4477,15 @@ function renderPlan(plan) {
 }
 function openEditor2(path) {
   const editor = process.env.EDITOR ?? process.env.VISUAL ?? "vi";
-  return new Promise((resolve14, reject) => {
-    const child = spawn6(editor, [path], { stdio: "inherit" });
+  return new Promise((resolve13, reject) => {
+    const child = spawn5(editor, [path], { stdio: "inherit" });
     child.on("error", reject);
-    child.on("close", () => resolve14());
+    child.on("close", () => resolve13());
   });
 }
 function runGit(args) {
-  return new Promise((resolve14, reject) => {
-    const child = spawn6("git", args, { stdio: ["ignore", "pipe", "pipe"] });
+  return new Promise((resolve13, reject) => {
+    const child = spawn5("git", args, { stdio: ["ignore", "pipe", "pipe"] });
     let stdout = "";
     let stderr = "";
     child.stdout.on("data", (c) => {
@@ -4362,7 +4495,7 @@ function runGit(args) {
       stderr += String(c);
     });
     child.on("error", reject);
-    child.on("close", (code) => resolve14({ code: code ?? 0, stdout, stderr }));
+    child.on("close", (code) => resolve13({ code: code ?? 0, stdout, stderr }));
   });
 }
 function registerPlanCommands(program, runSafely2) {
@@ -4677,7 +4810,7 @@ function severityBadge2(severity) {
 
 // src/cli/commands/symbols.ts
 import { readFile as readFile13 } from "fs/promises";
-import { resolve as resolve13 } from "path";
+import { resolve as resolve12 } from "path";
 import pc18 from "picocolors";
 function registerSymbolsCommand(program, runSafely2) {
   program.command("symbols").argument("<path>", "Repo-relative or absolute path to a code file.").option("--json", "Print machine-readable JSON.").description("List a file's top-level symbols (functions, classes, types, exports).").action(async (path, opts) => {
@@ -4686,7 +4819,7 @@ function registerSymbolsCommand(program, runSafely2) {
         console.log(pc18.dim(`no symbol extraction for ${path} (unsupported language)`));
         return;
       }
-      const content = await readFile13(resolve13(path), "utf8");
+      const content = await readFile13(resolve12(path), "utf8");
       const table = extractSymbolTable(content);
       if (opts.json) {
         console.log(JSON.stringify({ path, symbols: table }, null, 2));
@@ -4716,7 +4849,7 @@ import pc19 from "picocolors";
 // src/core/global-config.ts
 import { chmod, mkdir as mkdir8, readFile as readFile14, writeFile as writeFile3 } from "fs/promises";
 import { homedir as homedir3 } from "os";
-import { dirname as dirname12, join as join16 } from "path";
+import { dirname as dirname11, join as join16 } from "path";
 import { z as z2 } from "zod";
 var GLOBAL_DIR = ".codebuddy";
 var GLOBAL_FILE = "global.json";
@@ -4743,7 +4876,7 @@ async function readGlobalConfig(home = homedir3()) {
 }
 async function writeGlobalConfig(next, home = homedir3()) {
   const path = globalConfigPath(home);
-  await mkdir8(dirname12(path), { recursive: true, mode: 448 });
+  await mkdir8(dirname11(path), { recursive: true, mode: 448 });
   await writeFile3(path, `${JSON.stringify(next, null, 2)}
 `, { mode: 384 });
   await chmod(path, 384);
@@ -4756,32 +4889,6 @@ async function mergeGlobalConfig(patch, home = homedir3()) {
   return { path, merged };
 }
 
-// src/cli/commands/docker-autostart.ts
-import { spawn as spawn7 } from "child_process";
-async function isDockerDaemonRunning() {
-  return new Promise((resolve14) => {
-    const child = spawn7("docker", ["info"], { stdio: "ignore" });
-    child.on("error", () => resolve14(false));
-    child.on("close", (code) => resolve14(code === 0));
-  });
-}
-async function tryStartDockerDesktop() {
-  if (process.platform !== "darwin") return { started: false };
-  return new Promise((resolve14) => {
-    const child = spawn7("open", ["-ga", "Docker"], { stdio: "ignore" });
-    child.on("error", () => resolve14({ started: false }));
-    child.on("close", (code) => resolve14({ started: code === 0 }));
-  });
-}
-async function waitForDockerDaemon(timeoutMs = 6e4) {
-  const deadline = Date.now() + timeoutMs;
-  while (Date.now() < deadline) {
-    if (await isDockerDaemonRunning()) return true;
-    await new Promise((resolve14) => setTimeout(resolve14, 1e3));
-  }
-  return false;
-}
-
 // src/cli/commands/use-command.ts
 function bail2() {
   log2.warn("Aborted.");
@@ -4812,6 +4919,7 @@ async function runUseCommand(options = {}) {
     const folderName = basename2(process.cwd());
     const namespace = sanitizeNamespace(options.namespace ?? folderName);
     await initProjectScaffold();
+    if (options.namespace === void 0) await migrateLegacyNamespace();
     const graphifyEnabled = options.graphify ?? unwrap2(
       await confirm2({
         message: "Set up Graphify for richer architecture context?",
@@ -4915,7 +5023,7 @@ Namespace:      ${pc19.bold(namespace)}`,
         if (result.code === 0) {
           composeSpinner.stop("Postgres container started.");
           for (let attempt = 0; attempt < 12 && !connected; attempt++) {
-            await new Promise((resolve14) => setTimeout(resolve14, 500));
+            await new Promise((resolve13) => setTimeout(resolve13, 500));
             connected = await pingOnce2(databaseUrl);
           }
           if (!connected) {
@@ -5326,7 +5434,7 @@ function createCli() {
       console.log(`Claude Desktop config: ${result.path}`);
       for (const entry of result.entries) {
         console.log(
-          `  ${entry.key}  namespace=${entry.namespace ?? "?"}  db=${entry.databaseUrl ?? "?"}`
+          `  ${entry.key}  namespace=${entry.namespace ?? "?"}  db=${entry.databaseUrl ? String(redactSecrets(entry.databaseUrl)) : "?"}`
         );
       }
     });
@@ -5371,7 +5479,7 @@ function createCli() {
       console.log(`Codex config: ${result.path}`);
       for (const entry of result.entries) {
         console.log(
-          `  ${entry.key}  namespace=${entry.namespace ?? "?"}  db=${entry.databaseUrl ?? "?"}`
+          `  ${entry.key}  namespace=${entry.namespace ?? "?"}  db=${entry.databaseUrl ? String(redactSecrets(entry.databaseUrl)) : "?"}`
         );
       }
     });
@@ -5557,6 +5665,9 @@ function printDoctor(report) {
   console.log(
     `  runtime=${report.namespace.runtime ?? "unset"} default=${report.namespace.expectedDefault}`
   );
+  if (report.namespace.migrated) {
+    console.log(`  migrated legacy namespace "default" to "${report.namespace.migrated}"`);
+  }
   if (report.namespace.warning) console.log(`  ${report.namespace.warning}`);
   console.log(
     `vectors: ${report.vectors.count} index=${report.vectors.index ?? "missing"} tuning=${report.vectors.needsTuning ? "recommended" : "not-needed"}`
@@ -5586,9 +5697,12 @@ function printDbDoctor(report) {
   if (report.pgvector.error) console.log(`  ${report.pgvector.error}`);
   console.log(`namespace: ${report.namespace.ok ? ok2 : warn2}`);
   console.log(`  runtime=${report.namespace.runtime ?? "unset"}`);
+  if (report.namespace.migrated) {
+    console.log(`  migrated legacy namespace "default" to "${report.namespace.migrated}"`);
+  }
   if (report.namespace.warning) console.log(`  ${report.namespace.warning}`);
 }
 export {
   createCli
 };
-//# sourceMappingURL=main-BDVQAGAS.js.map
+//# sourceMappingURL=main-MTBQZGJV.js.map