@oxagen/cli 0.6.2 → 0.7.0

package/oxagen.mjs

@@ -3039,7 +3039,7 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@oxagen/cli",
-      version: "0.6.2",
+      version: "0.7.0",
       description: "Oxagen CLI \u2014 agentic coding powered by Oxagen's knowledge-graph context engine",
       type: "module",
       main: "./dist/index.js",
@@ -21479,7 +21479,7 @@ var init_dist3 = __esm({
         {}
       ) : void 0;
       const name24 = typeof options === "string" ? options : (options == null ? void 0 : options.nameStrategy) === "title" ? void 0 : options == null ? void 0 : options.name;
-      const main2 = (_a24 = parseDef(
+      const main3 = (_a24 = parseDef(
         schema._def,
         name24 === void 0 ? refs : {
           ...refs,
@@ -21489,12 +21489,12 @@ var init_dist3 = __esm({
       )) != null ? _a24 : parseAnyDef();
       const title = typeof options === "object" && options.name !== void 0 && options.nameStrategy === "title" ? options.name : void 0;
       if (title !== void 0) {
-        main2.title = title;
+        main3.title = title;
       }
       const combined = name24 === void 0 ? definitions ? {
-        ...main2,
+        ...main3,
         [refs.definitionPath]: definitions
-      } : main2 : {
+      } : main3 : {
         $ref: [
           ...refs.$refStrategy === "relative" ? [] : refs.basePath,
           refs.definitionPath,
@@ -21502,7 +21502,7 @@ var init_dist3 = __esm({
         ].join("/"),
         [refs.definitionPath]: {
           ...definitions,
-          [name24]: main2
+          [name24]: main3
         }
       };
       combined.$schema = "http://json-schema.org/draft-07/schema#";
@@ -32595,51 +32595,382 @@ var init_dist5 = __esm({
   }
 });
 
+// src/daemon/code-graph/store.ts
+var store_exports = {};
+__export(store_exports, {
+  CodeGraphStore: () => CodeGraphStore,
+  computeEdgeId: () => computeEdgeId,
+  createCodeGraphStore: () => createCodeGraphStore,
+  defaultCodeGraphDbPath: () => defaultCodeGraphDbPath,
+  hashContent: () => hashContent
+});
+import { createHash } from "node:crypto";
+import { homedir } from "node:os";
+import { join } from "node:path";
+function defaultCodeGraphDbPath() {
+  return join(homedir(), ".config", "oxagen", "code-graph.duckdb");
+}
+function computeEdgeId(source, target2, type) {
+  return createHash("sha256").update(`${source}:${target2}:${type}`).digest("hex").slice(0, 32);
+}
+function hashContent(content) {
+  return createHash("sha256").update(content).digest("hex");
+}
+function rowToNode(row) {
+  return {
+    id: row["id"],
+    kind: row["kind"],
+    name: row["name"],
+    path: row["path"],
+    range: { start: Number(row["range_start"]), end: Number(row["range_end"]) },
+    language: row["language"],
+    signature: row["signature"] ?? void 0,
+    docstring: row["docstring"] ?? void 0
+  };
+}
+function createCodeGraphStore(opts) {
+  return new CodeGraphStore(opts);
+}
+var CREATE_NODES_SQL, CREATE_EDGES_SQL, CREATE_FILES_SQL, CodeGraphStore;
+var init_store = __esm({
+  "src/daemon/code-graph/store.ts"() {
+    CREATE_NODES_SQL = `
+  CREATE TABLE IF NOT EXISTS code_nodes (
+    root        VARCHAR NOT NULL,
+    id          VARCHAR NOT NULL,
+    kind        VARCHAR NOT NULL,
+    name        VARCHAR NOT NULL,
+    path        VARCHAR NOT NULL,
+    range_start INTEGER NOT NULL,
+    range_end   INTEGER NOT NULL,
+    language    VARCHAR NOT NULL,
+    signature   VARCHAR,
+    docstring   VARCHAR,
+    PRIMARY KEY (root, id)
+  )
+`;
+    CREATE_EDGES_SQL = `
+  CREATE TABLE IF NOT EXISTS code_edges (
+    root      VARCHAR NOT NULL,
+    id        VARCHAR NOT NULL,
+    file_path VARCHAR NOT NULL,
+    source    VARCHAR NOT NULL,
+    target    VARCHAR NOT NULL,
+    type      VARCHAR NOT NULL,
+    PRIMARY KEY (root, id)
+  )
+`;
+    CREATE_FILES_SQL = `
+  CREATE TABLE IF NOT EXISTS code_files (
+    root         VARCHAR NOT NULL,
+    path         VARCHAR NOT NULL,
+    content_hash VARCHAR NOT NULL,
+    indexed_at   BIGINT  NOT NULL,
+    PRIMARY KEY (root, path)
+  )
+`;
+    CodeGraphStore = class {
+      db;
+      conn;
+      ready;
+      constructor(opts) {
+        const duckdb = __require("duckdb");
+        this.db = new duckdb.Database(opts.duckdbPath);
+        this.conn = this.db.connect();
+        this.ready = this.initialize();
+        void this.ready.catch(() => {
+        });
+      }
+      initialize() {
+        return new Promise((resolve6, reject) => {
+          this.conn.run(CREATE_NODES_SQL, (e1) => {
+            if (e1) return reject(e1);
+            this.conn.run(CREATE_EDGES_SQL, (e2) => {
+              if (e2) return reject(e2);
+              this.conn.run(CREATE_FILES_SQL, (e3) => {
+                if (e3) return reject(e3);
+                resolve6();
+              });
+            });
+          });
+        });
+      }
+      /** Resolve once the schema is ready (or reject if the DB could not open). */
+      whenReady() {
+        return this.ready;
+      }
+      runSql(sql, params = []) {
+        return new Promise((resolve6, reject) => {
+          this.conn.run(sql, ...params, (err) => {
+            if (err) reject(err);
+            else resolve6();
+          });
+        });
+      }
+      querySql(sql, params = []) {
+        return new Promise((resolve6, reject) => {
+          this.conn.all(sql, ...params, (err, rows) => {
+            if (err) reject(err);
+            else resolve6(rows ?? []);
+          });
+        });
+      }
+      // -------------------------------------------------------------------------
+      // Incremental write
+      // -------------------------------------------------------------------------
+      /** Stored content hash for a file, or null if never indexed. */
+      async fileHash(root, relPath) {
+        await this.ready;
+        const rows = await this.querySql(
+          "SELECT content_hash FROM code_files WHERE root = ? AND path = ?",
+          [root, relPath]
+        );
+        return rows.length ? rows[0]["content_hash"] : null;
+      }
+      /** All file paths currently indexed for a root (used to detect deletions). */
+      async indexedFiles(root) {
+        await this.ready;
+        const rows = await this.querySql("SELECT path FROM code_files WHERE root = ?", [root]);
+        return rows.map((r) => r["path"]);
+      }
+      /**
+       * Replace one file's nodes/edges atomically. Deletes the file's prior nodes
+       * (matched by `path`) and the edges it declared (matched by `file_path`),
+       * inserts the new subgraph, and records the content hash. Idempotent: calling
+       * twice with the same hash yields the same rows.
+       */
+      async replaceFile(root, relPath, fileGraph) {
+        await this.ready;
+        await this.runSql("BEGIN TRANSACTION");
+        try {
+          await this.runSql("DELETE FROM code_nodes WHERE root = ? AND path = ?", [root, relPath]);
+          await this.runSql("DELETE FROM code_edges WHERE root = ? AND file_path = ?", [root, relPath]);
+          for (const n of fileGraph.nodes) {
+            await this.runSql(
+              `INSERT INTO code_nodes
+             (root, id, kind, name, path, range_start, range_end, language, signature, docstring)
+           VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+           ON CONFLICT (root, id) DO UPDATE SET
+             kind = excluded.kind, name = excluded.name, path = excluded.path,
+             range_start = excluded.range_start, range_end = excluded.range_end,
+             language = excluded.language, signature = excluded.signature,
+             docstring = excluded.docstring`,
+              [
+                root,
+                n.id,
+                n.kind,
+                n.name,
+                n.path,
+                n.range.start,
+                n.range.end,
+                n.language,
+                n.signature ?? null,
+                n.docstring ?? null
+              ]
+            );
+          }
+          for (const e of fileGraph.edges) {
+            const id = computeEdgeId(e.source, e.target, e.type);
+            await this.runSql(
+              `INSERT INTO code_edges (root, id, file_path, source, target, type)
+           VALUES (?, ?, ?, ?, ?, ?)
+           ON CONFLICT (root, id) DO UPDATE SET
+             file_path = excluded.file_path, source = excluded.source,
+             target = excluded.target, type = excluded.type`,
+              [root, id, relPath, e.source, e.target, e.type]
+            );
+          }
+          await this.runSql(
+            `INSERT INTO code_files (root, path, content_hash, indexed_at)
+         VALUES (?, ?, ?, ?)
+         ON CONFLICT (root, path) DO UPDATE SET
+           content_hash = excluded.content_hash, indexed_at = excluded.indexed_at`,
+            [root, relPath, fileGraph.contentHash, Date.now()]
+          );
+          await this.runSql("COMMIT");
+        } catch (err) {
+          await this.runSql("ROLLBACK");
+          throw err;
+        }
+      }
+      /** Drop a file that no longer exists on disk, with its nodes and edges. */
+      async removeFile(root, relPath) {
+        await this.ready;
+        await this.runSql("BEGIN TRANSACTION");
+        try {
+          await this.runSql("DELETE FROM code_nodes WHERE root = ? AND path = ?", [root, relPath]);
+          await this.runSql("DELETE FROM code_edges WHERE root = ? AND file_path = ?", [root, relPath]);
+          await this.runSql("DELETE FROM code_files WHERE root = ? AND path = ?", [root, relPath]);
+          await this.runSql("COMMIT");
+        } catch (err) {
+          await this.runSql("ROLLBACK");
+          throw err;
+        }
+      }
+      // -------------------------------------------------------------------------
+      // Read
+      // -------------------------------------------------------------------------
+      /** Reconstruct the full in-memory CodeGraph for a root. */
+      async loadGraph(root) {
+        await this.ready;
+        const nodeRows = await this.querySql(
+          `SELECT id, kind, name, path, range_start, range_end, language, signature, docstring
+       FROM code_nodes WHERE root = ?`,
+          [root]
+        );
+        const edgeRows = await this.querySql(
+          "SELECT source, target, type FROM code_edges WHERE root = ?",
+          [root]
+        );
+        const nodes = /* @__PURE__ */ new Map();
+        for (const r of nodeRows) nodes.set(r["id"], rowToNode(r));
+        const edges = edgeRows.map((r) => ({
+          source: r["source"],
+          target: r["target"],
+          type: r["type"]
+        }));
+        return { nodes, edges };
+      }
+      async stats(root) {
+        await this.ready;
+        const fileRows = await this.querySql(
+          "SELECT COUNT(*) AS cnt FROM code_nodes WHERE root = ? AND kind = 'file'",
+          [root]
+        );
+        const symRows = await this.querySql(
+          "SELECT COUNT(*) AS cnt FROM code_nodes WHERE root = ? AND kind <> 'file'",
+          [root]
+        );
+        const edgeRows = await this.querySql(
+          "SELECT COUNT(*) AS cnt FROM code_edges WHERE root = ?",
+          [root]
+        );
+        return {
+          files: Number(fileRows[0]["cnt"] ?? 0),
+          symbols: Number(symRows[0]["cnt"] ?? 0),
+          edges: Number(edgeRows[0]["cnt"] ?? 0)
+        };
+      }
+      // -------------------------------------------------------------------------
+      // Lifecycle
+      // -------------------------------------------------------------------------
+      async close() {
+        await this.ready.catch(() => {
+        });
+        return new Promise((resolve6, reject) => {
+          this.conn.close((err) => {
+            if (err) return reject(err);
+            this.db.close((err2) => {
+              if (err2) return reject(err2);
+              resolve6();
+            });
+          });
+        });
+      }
+    };
+  }
+});
+
 // src/daemon/code-graph/builder.ts
+var builder_exports = {};
+__export(builder_exports, {
+  buildAndPersistCodeGraph: () => buildAndPersistCodeGraph,
+  buildCodeGraph: () => buildCodeGraph,
+  extractFileGraph: () => extractFileGraph,
+  fileGraphFromContent: () => fileGraphFromContent,
+  listSourceFiles: () => listSourceFiles
+});
 import * as fs from "node:fs";
 import * as path from "node:path";
-import { createHash } from "node:crypto";
+import { createHash as createHash2 } from "node:crypto";
 async function buildCodeGraph(workspaceRoot) {
   const graph2 = { nodes: /* @__PURE__ */ new Map(), edges: [] };
-  await walkDirectory(workspaceRoot, workspaceRoot, graph2);
+  for (const rel of await listSourceFiles(workspaceRoot)) {
+    const fg = await extractFileGraph(path.join(workspaceRoot, rel), workspaceRoot);
+    if (!fg) continue;
+    for (const node of fg.nodes) graph2.nodes.set(node.id, node);
+    graph2.edges.push(...fg.edges);
+  }
   return graph2;
 }
-async function walkDirectory(dir, root, graph2) {
-  const entries = await fs.promises.readdir(dir, { withFileTypes: true });
+async function listSourceFiles(workspaceRoot) {
+  const out2 = [];
+  await walkDirectory(workspaceRoot, workspaceRoot, out2);
+  return out2;
+}
+async function walkDirectory(dir, root, out2) {
+  let entries;
+  try {
+    entries = await fs.promises.readdir(dir, { withFileTypes: true });
+  } catch {
+    return;
+  }
   for (const entry of entries) {
     if (IGNORE_DIRS.has(entry.name)) continue;
     const fullPath = path.join(dir, entry.name);
     if (entry.isDirectory()) {
-      await walkDirectory(fullPath, root, graph2);
+      await walkDirectory(fullPath, root, out2);
     } else if (entry.isFile() && SUPPORTED_EXTENSIONS.has(path.extname(entry.name))) {
-      await processFile(fullPath, root, graph2);
+      out2.push(path.relative(root, fullPath));
     }
   }
 }
-async function processFile(filePath, root, graph2) {
-  const relativePath = path.relative(root, filePath);
-  const ext = path.extname(filePath);
-  const language = extensionToLanguage(ext);
+function fileGraphFromContent(relativePath, content, root) {
+  const language = extensionToLanguage(path.extname(relativePath));
+  const nodes = [];
+  const edges = [];
   const fileNode = {
-    id: computeNodeId(relativePath, path.basename(filePath), "file"),
+    id: computeNodeId(relativePath, path.basename(relativePath), "file"),
     kind: "file",
-    name: path.basename(filePath),
+    name: path.basename(relativePath),
     path: relativePath,
     range: { start: 0, end: 0 },
     language
   };
-  graph2.nodes.set(fileNode.id, fileNode);
+  nodes.push(fileNode);
+  for (const symbol21 of extractSymbols(content, relativePath, language)) {
+    nodes.push(symbol21);
+    edges.push({ source: fileNode.id, target: symbol21.id, type: "contains" });
+  }
+  edges.push(...extractImports(content, relativePath, root));
+  return { contentHash: hashContent(content), nodes, edges };
+}
+async function extractFileGraph(filePath, root) {
+  let content;
   try {
-    const content = await fs.promises.readFile(filePath, "utf-8");
-    const symbols = extractSymbols(content, relativePath, language);
-    for (const symbol21 of symbols) {
-      graph2.nodes.set(symbol21.id, symbol21);
-      graph2.edges.push({ source: fileNode.id, target: symbol21.id, type: "contains" });
-    }
-    const imports2 = extractImports(content, relativePath, root);
-    graph2.edges.push(...imports2);
+    content = await fs.promises.readFile(filePath, "utf-8");
   } catch {
+    return null;
   }
+  return fileGraphFromContent(path.relative(root, filePath), content, root);
+}
+async function buildAndPersistCodeGraph(root, store) {
+  const onDisk = await listSourceFiles(root);
+  const onDiskSet = new Set(onDisk);
+  let indexed = 0;
+  let skipped = 0;
+  for (const rel of onDisk) {
+    let content;
+    try {
+      content = await fs.promises.readFile(path.join(root, rel), "utf-8");
+    } catch {
+      continue;
+    }
+    if (await store.fileHash(root, rel) === hashContent(content)) {
+      skipped++;
+      continue;
+    }
+    await store.replaceFile(root, rel, fileGraphFromContent(rel, content, root));
+    indexed++;
+  }
+  let removed = 0;
+  for (const rel of await store.indexedFiles(root)) {
+    if (!onDiskSet.has(rel)) {
+      await store.removeFile(root, rel);
+      removed++;
+    }
+  }
+  return { indexed, skipped, removed };
 }
 function extractSymbols(content, filePath, language) {
   const symbols = [];
@@ -32719,7 +33050,7 @@ function extractImports(content, filePath, root) {
   return edges;
 }
 function computeNodeId(path2, name21, kind) {
-  return createHash("sha256").update(`${path2}:${name21}:${kind}`).digest("hex").slice(0, 32);
+  return createHash2("sha256").update(`${path2}:${name21}:${kind}`).digest("hex").slice(0, 32);
 }
 function findEndLine(lines, startLine) {
   let braceCount = 0;
@@ -32757,6 +33088,7 @@ function extensionToLanguage(ext) {
 var SUPPORTED_EXTENSIONS, IGNORE_DIRS, RESOLVE_EXTENSIONS;
 var init_builder = __esm({
   "src/daemon/code-graph/builder.ts"() {
+    init_store();
     SUPPORTED_EXTENSIONS = /* @__PURE__ */ new Set([
       ".ts",
       ".tsx",
@@ -32785,6 +33117,49 @@ var init_builder = __esm({
 });
 
 // src/daemon/code-graph/query.ts
+var query_exports = {};
+__export(query_exports, {
+  callees: () => callees,
+  callers: () => callers,
+  dependents: () => dependents,
+  imports: () => imports,
+  neighbors: () => neighbors,
+  searchSymbols: () => searchSymbols
+});
+function neighbors(graph2, nodeId, hops = 1, edgeTypes) {
+  const visitedNodes = /* @__PURE__ */ new Set();
+  const resultEdges = [];
+  let frontier = /* @__PURE__ */ new Set([nodeId]);
+  for (let hop = 0; hop < hops; hop++) {
+    const nextFrontier = /* @__PURE__ */ new Set();
+    for (const id of frontier) {
+      visitedNodes.add(id);
+      for (const edge of graph2.edges) {
+        if (edgeTypes && !edgeTypes.includes(edge.type)) continue;
+        if (edge.source === id && !visitedNodes.has(edge.target)) {
+          nextFrontier.add(edge.target);
+          resultEdges.push(edge);
+        }
+        if (edge.target === id && !visitedNodes.has(edge.source)) {
+          nextFrontier.add(edge.source);
+          resultEdges.push(edge);
+        }
+      }
+    }
+    frontier = nextFrontier;
+  }
+  for (const id of frontier) visitedNodes.add(id);
+  const nodes = [...visitedNodes].map((id) => graph2.nodes.get(id)).filter((n) => n !== void 0);
+  return { nodes, edges: resultEdges };
+}
+function callers(graph2, functionId) {
+  const callerIds = graph2.edges.filter((e) => e.target === functionId && e.type === "calls").map((e) => e.source);
+  return callerIds.map((id) => graph2.nodes.get(id)).filter((n) => n !== void 0);
+}
+function callees(graph2, functionId) {
+  const calleeIds = graph2.edges.filter((e) => e.source === functionId && e.type === "calls").map((e) => e.target);
+  return calleeIds.map((id) => graph2.nodes.get(id)).filter((n) => n !== void 0);
+}
 function imports(graph2, fileId) {
   const importedIds = graph2.edges.filter((e) => e.source === fileId && e.type === "imports").map((e) => e.target);
   return importedIds.map((id) => graph2.nodes.get(id)).filter((n) => n !== void 0);
@@ -32813,14 +33188,36 @@ var init_query = __esm({
 });
 
 // src/agent/code-graph.ts
+import { mkdirSync } from "node:fs";
+import { dirname as dirname2 } from "node:path";
 function getCodeGraph(cwd2) {
   let graph2 = cache.get(cwd2);
   if (!graph2) {
-    graph2 = buildCodeGraph(cwd2);
+    graph2 = loadOrBuildCodeGraph(cwd2);
     cache.set(cwd2, graph2);
   }
   return graph2;
 }
+async function loadOrBuildCodeGraph(cwd2) {
+  let store = null;
+  try {
+    const dbPath2 = defaultCodeGraphDbPath();
+    mkdirSync(dirname2(dbPath2), { recursive: true });
+    store = createCodeGraphStore({ duckdbPath: dbPath2 });
+    await store.whenReady();
+    await buildAndPersistCodeGraph(cwd2, store);
+    return await store.loadGraph(cwd2);
+  } catch {
+    return buildCodeGraph(cwd2);
+  } finally {
+    if (store) {
+      try {
+        await store.close();
+      } catch {
+      }
+    }
+  }
+}
 function fileNodeFor(graph2, query) {
   const q = query.replace(/^\.\//, "");
   let suffixMatch = null;
@@ -32883,6 +33280,7 @@ var init_code_graph = __esm({
   "src/agent/code-graph.ts"() {
     init_builder();
     init_query();
+    init_store();
     cache = /* @__PURE__ */ new Map();
   }
 });
@@ -32891,7 +33289,7 @@ var init_code_graph = __esm({
 import { promises as fs2 } from "node:fs";
 import { exec } from "node:child_process";
 import { promisify } from "node:util";
-import { resolve as resolve4, relative as relative3, join as join2, isAbsolute as isAbsolute2 } from "node:path";
+import { resolve as resolve4, relative as relative3, join as join3, isAbsolute as isAbsolute2 } from "node:path";
 function clip(text2) {
   if (text2.length <= MAX_OUTPUT) return text2;
   return text2.slice(0, MAX_OUTPUT) + `
@@ -32932,7 +33330,7 @@ async function* walk(dir, cwd2) {
   }
   for (const entry of entries) {
     if (entry.isDir && IGNORE_DIRS2.has(entry.name)) continue;
-    const abs = join2(dir, entry.name);
+    const abs = join3(dir, entry.name);
     const rel = relative3(cwd2, abs);
     if (entry.isDir) {
       yield* walk(abs, cwd2);
@@ -33219,9 +33617,9 @@ var init_system_prompt = __esm({
 });
 
 // src/lib/config.ts
-import { homedir } from "os";
-import { join as join3 } from "path";
-import { readFileSync, writeFileSync, mkdirSync, existsSync } from "fs";
+import { homedir as homedir2 } from "os";
+import { join as join4 } from "path";
+import { readFileSync, writeFileSync, mkdirSync as mkdirSync2, existsSync } from "fs";
 function readConfig() {
   if (!existsSync(CONFIG_FILE)) return {};
   try {
@@ -33239,7 +33637,7 @@ Run \`oxagen auth login\` to re-authenticate.
 function writeConfig(patch) {
   const current = readConfig();
   const next = { ...current, ...patch };
-  if (!existsSync(CONFIG_DIR)) mkdirSync(CONFIG_DIR, { recursive: true });
+  if (!existsSync(CONFIG_DIR)) mkdirSync2(CONFIG_DIR, { recursive: true });
   writeFileSync(CONFIG_FILE, JSON.stringify(next, null, 2), "utf8");
 }
 function getToken() {
@@ -33257,8 +33655,8 @@ function getApiUrl() {
 var CONFIG_DIR, CONFIG_FILE;
 var init_config = __esm({
   "src/lib/config.ts"() {
-    CONFIG_DIR = join3(homedir(), ".config", "oxagen");
-    CONFIG_FILE = join3(CONFIG_DIR, "config.json");
+    CONFIG_DIR = join4(homedir2(), ".config", "oxagen");
+    CONFIG_FILE = join4(CONFIG_DIR, "config.json");
   }
 });
 
@@ -33276,12 +33674,12 @@ var init_model = __esm({
 
 // src/agent/env.ts
 import { readFileSync as readFileSync2, existsSync as existsSync2 } from "node:fs";
-import { dirname as dirname2, join as join4, parse as parsePath } from "node:path";
+import { dirname as dirname3, join as join5, parse as parsePath } from "node:path";
 function findInEnvLocal(startDir) {
   let dir = startDir;
   const { root } = parsePath(startDir);
   for (; ; ) {
-    const candidate = join4(dir, ".env.local");
+    const candidate = join5(dir, ".env.local");
     if (existsSync2(candidate)) {
       try {
         const text2 = readFileSync2(candidate, "utf8");
@@ -33297,7 +33695,7 @@ function findInEnvLocal(startDir) {
       }
     }
     if (dir === root) return void 0;
-    dir = dirname2(dir);
+    dir = dirname3(dir);
   }
 }
 function ensureGatewayKey(cwd2 = process.cwd()) {
@@ -33445,8 +33843,8 @@ var init_schema = __esm({
 });
 
 // ../../packages/mcp-config/src/resolve.ts
-import { join as join5 } from "node:path";
-import { homedir as homedir2 } from "node:os";
+import { join as join6 } from "node:path";
+import { homedir as homedir3 } from "node:os";
 function expandEnvVars(value, env4 = process.env, warnings = /* @__PURE__ */ new Set()) {
   if (typeof value === "string") {
     return value.replace(ENV_VAR_PATTERN, (_, varName) => {
@@ -33475,8 +33873,8 @@ var init_resolve = __esm({
   "../../packages/mcp-config/src/resolve.ts"() {
     "use strict";
     init_schema();
-    USER_CONFIG_DIR = join5(homedir2(), ".config", "oxagen");
-    USER_SETTINGS_FILE = join5(USER_CONFIG_DIR, "settings.json");
+    USER_CONFIG_DIR = join6(homedir3(), ".config", "oxagen");
+    USER_SETTINGS_FILE = join6(USER_CONFIG_DIR, "settings.json");
     ENV_VAR_PATTERN = /\$\{([^}]+)\}/g;
   }
 });
@@ -33556,18 +33954,18 @@ var init_schema2 = __esm({
 
 // src/settings/resolve.ts
 import { readFileSync as readFileSync3, existsSync as existsSync3 } from "node:fs";
-import { join as join6 } from "node:path";
-import { homedir as homedir3 } from "node:os";
+import { join as join7 } from "node:path";
+import { homedir as homedir4 } from "node:os";
 function userSettingsFile() {
-  return join6(homedir3(), ".config", "oxagen", "settings.json");
+  return join7(homedir4(), ".config", "oxagen", "settings.json");
 }
 function getScopePaths(opts = {}) {
   const root = opts.cwd ?? process.cwd();
   const dir = opts.projectDirName ?? DEFAULT_PROJECT_DIR;
   return {
     user: opts.userSettingsPath ?? userSettingsFile(),
-    project: join6(root, dir, "settings.json"),
-    local: join6(root, dir, "settings.local.json")
+    project: join7(root, dir, "settings.json"),
+    local: join7(root, dir, "settings.local.json")
   };
 }
 function loadScope(scope, path2) {
@@ -36539,7 +36937,7 @@ var init_protocol = __esm({
               return;
             }
             const pollInterval = task2.pollInterval ?? this._options?.defaultTaskPollInterval ?? 1e3;
-            await new Promise((resolve5) => setTimeout(resolve5, pollInterval));
+            await new Promise((resolve6) => setTimeout(resolve6, pollInterval));
             options?.signal?.throwIfAborted();
           }
         } catch (error40) {
@@ -36556,7 +36954,7 @@ var init_protocol = __esm({
        */
       request(request, resultSchema, options) {
         const { relatedRequestId, resumptionToken, onresumptiontoken, task, relatedTask } = options ?? {};
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           const earlyReject = (error40) => {
             reject(error40);
           };
@@ -36634,7 +37032,7 @@ var init_protocol = __esm({
               if (!parseResult.success) {
                 reject(parseResult.error);
               } else {
-                resolve5(parseResult.data);
+                resolve6(parseResult.data);
               }
             } catch (error40) {
               reject(error40);
@@ -36895,12 +37293,12 @@ var init_protocol = __esm({
           }
         } catch {
         }
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           if (signal.aborted) {
             reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
             return;
           }
-          const timeoutId = setTimeout(resolve5, interval);
+          const timeoutId = setTimeout(resolve6, interval);
           signal.addEventListener("abort", () => {
             clearTimeout(timeoutId);
             reject(new McpError(ErrorCode.InvalidRequest, "Request cancelled"));
@@ -39927,7 +40325,7 @@ var require_compile = __commonJS({
       const schOrFunc = root.refs[ref];
       if (schOrFunc)
         return schOrFunc;
-      let _sch = resolve5.call(this, root, ref);
+      let _sch = resolve6.call(this, root, ref);
       if (_sch === void 0) {
         const schema = (_a21 = root.localRefs) === null || _a21 === void 0 ? void 0 : _a21[ref];
         const { schemaId } = this.opts;
@@ -39954,7 +40352,7 @@ var require_compile = __commonJS({
     function sameSchemaEnv(s1, s2) {
       return s1.schema === s2.schema && s1.root === s2.root && s1.baseId === s2.baseId;
     }
-    function resolve5(root, ref) {
+    function resolve6(root, ref) {
       let sch;
       while (typeof (sch = this.refs[ref]) == "string")
         ref = sch;
@@ -40585,7 +40983,7 @@ var require_fast_uri = __commonJS({
       }
       return uri;
     }
-    function resolve5(baseURI, relativeURI, options) {
+    function resolve6(baseURI, relativeURI, options) {
       const schemelessOptions = options ? Object.assign({ scheme: "null" }, options) : { scheme: "null" };
       const resolved = resolveComponent(parse3(baseURI, schemelessOptions), parse3(relativeURI, schemelessOptions), schemelessOptions, true);
       schemelessOptions.skipEscape = true;
@@ -40843,7 +41241,7 @@ var require_fast_uri = __commonJS({
     var fastUri = {
       SCHEMES,
       normalize,
-      resolve: resolve5,
+      resolve: resolve6,
       resolveComponent,
       equal,
       serialize,
@@ -44729,12 +45127,12 @@ var require_isexe = __commonJS({
         if (typeof Promise !== "function") {
           throw new TypeError("callback not provided");
         }
-        return new Promise(function(resolve5, reject) {
+        return new Promise(function(resolve6, reject) {
           isexe(path2, options || {}, function(er, is) {
             if (er) {
               reject(er);
             } else {
-              resolve5(is);
+              resolve6(is);
             }
           });
         });
@@ -44800,27 +45198,27 @@ var require_which = __commonJS({
         opt = {};
       const { pathEnv, pathExt, pathExtExe } = getPathInfo(cmd, opt);
       const found = [];
-      const step = (i) => new Promise((resolve5, reject) => {
+      const step = (i) => new Promise((resolve6, reject) => {
         if (i === pathEnv.length)
-          return opt.all && found.length ? resolve5(found) : reject(getNotFoundError(cmd));
+          return opt.all && found.length ? resolve6(found) : reject(getNotFoundError(cmd));
         const ppRaw = pathEnv[i];
         const pathPart = /^".*"$/.test(ppRaw) ? ppRaw.slice(1, -1) : ppRaw;
         const pCmd = path2.join(pathPart, cmd);
         const p = !pathPart && /^\.[\\\/]/.test(cmd) ? cmd.slice(0, 2) + pCmd : pCmd;
-        resolve5(subStep(p, i, 0));
+        resolve6(subStep(p, i, 0));
       });
-      const subStep = (p, i, ii) => new Promise((resolve5, reject) => {
+      const subStep = (p, i, ii) => new Promise((resolve6, reject) => {
         if (ii === pathExt.length)
-          return resolve5(step(i + 1));
+          return resolve6(step(i + 1));
         const ext = pathExt[ii];
         isexe(p + ext, { pathExt: pathExtExe }, (er, is) => {
           if (!er && is) {
             if (opt.all)
               found.push(p + ext);
             else
-              return resolve5(p + ext);
+              return resolve6(p + ext);
           }
-          return resolve5(subStep(p, i, ii + 1));
+          return resolve6(subStep(p, i, ii + 1));
         });
       });
       return cb ? step(0).then((res) => cb(null, res), cb) : step(0);
@@ -45221,7 +45619,7 @@ var init_stdio2 = __esm({
         if (this._process) {
           throw new Error("StdioClientTransport already started! If using Client class, note that connect() calls start() automatically.");
         }
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           this._process = (0, import_cross_spawn.default)(this._serverParams.command, this._serverParams.args ?? [], {
             // merge default env with server env because mcp server needs some env vars
             env: {
@@ -45238,7 +45636,7 @@ var init_stdio2 = __esm({
             this.onerror?.(error40);
           });
           this._process.on("spawn", () => {
-            resolve5();
+            resolve6();
           });
           this._process.on("close", (_code) => {
             this._process = void 0;
@@ -45297,22 +45695,22 @@ var init_stdio2 = __esm({
         if (this._process) {
           const processToClose = this._process;
           this._process = void 0;
-          const closePromise = new Promise((resolve5) => {
+          const closePromise = new Promise((resolve6) => {
             processToClose.once("close", () => {
-              resolve5();
+              resolve6();
             });
           });
           try {
             processToClose.stdin?.end();
           } catch {
           }
-          await Promise.race([closePromise, new Promise((resolve5) => setTimeout(resolve5, 2e3).unref())]);
+          await Promise.race([closePromise, new Promise((resolve6) => setTimeout(resolve6, 2e3).unref())]);
           if (processToClose.exitCode === null) {
             try {
               processToClose.kill("SIGTERM");
             } catch {
             }
-            await Promise.race([closePromise, new Promise((resolve5) => setTimeout(resolve5, 2e3).unref())]);
+            await Promise.race([closePromise, new Promise((resolve6) => setTimeout(resolve6, 2e3).unref())]);
           }
           if (processToClose.exitCode === null) {
             try {
@@ -45324,15 +45722,15 @@ var init_stdio2 = __esm({
         this._readBuffer.clear();
       }
       send(message) {
-        return new Promise((resolve5) => {
+        return new Promise((resolve6) => {
           if (!this._process?.stdin) {
             throw new Error("Not connected");
           }
           const json3 = serializeMessage(message);
           if (this._process.stdin.write(json3)) {
-            resolve5();
+            resolve6();
           } else {
-            this._process.stdin.once("drain", resolve5);
+            this._process.stdin.once("drain", resolve6);
           }
         });
       }
@@ -46995,7 +47393,7 @@ var init_sse = __esm({
       }
       _startOrAuth() {
         const fetchImpl = this?._eventSourceInit?.fetch ?? this._fetch ?? fetch;
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           this._eventSource = new EventSource(this._url.href, {
             ...this._eventSourceInit,
             fetch: async (url2, init) => {
@@ -47016,7 +47414,7 @@ var init_sse = __esm({
           this._abortController = new AbortController();
           this._eventSource.onerror = (event) => {
             if (event.code === 401 && this._authProvider) {
-              this._authThenStart().then(resolve5, reject);
+              this._authThenStart().then(resolve6, reject);
               return;
             }
             const error40 = new SseError(event.code, event.message, event);
@@ -47038,7 +47436,7 @@ var init_sse = __esm({
               void this.close();
               return;
             }
-            resolve5();
+            resolve6();
           });
           this._eventSource.onmessage = (event) => {
             const messageEvent = event;
@@ -47143,7 +47541,7 @@ var init_websocket = __esm({
         if (this._socket) {
           throw new Error("WebSocketClientTransport already started! If using Client class, note that connect() calls start() automatically.");
         }
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           this._socket = new WebSocket(this._url, SUBPROTOCOL);
           this._socket.onerror = (event) => {
             const error40 = "error" in event ? event.error : new Error(`WebSocket error: ${JSON.stringify(event)}`);
@@ -47151,7 +47549,7 @@ var init_websocket = __esm({
             this.onerror?.(error40);
           };
           this._socket.onopen = () => {
-            resolve5();
+            resolve6();
           };
           this._socket.onclose = () => {
             this.onclose?.();
@@ -47172,13 +47570,13 @@ var init_websocket = __esm({
         this._socket?.close();
       }
       send(message) {
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           if (!this._socket) {
             reject(new Error("Not connected"));
             return;
           }
           this._socket?.send(JSON.stringify(message));
-          resolve5();
+          resolve6();
         });
       }
     };
@@ -47190,13 +47588,13 @@ import {
   readFileSync as readFileSync4,
   writeFileSync as writeFileSync2,
   existsSync as existsSync4,
-  mkdirSync as mkdirSync2,
+  mkdirSync as mkdirSync3,
   unlinkSync
 } from "node:fs";
-import { join as join7 } from "node:path";
-import { homedir as homedir4 } from "node:os";
+import { join as join8 } from "node:path";
+import { homedir as homedir5 } from "node:os";
 function getCredentialFilePath(serverName) {
-  return join7(CREDENTIALS_DIR, `${serverName}.json`);
+  return join8(CREDENTIALS_DIR, `${serverName}.json`);
 }
 function readCredential(serverName) {
   const filePath = getCredentialFilePath(serverName);
@@ -47210,7 +47608,7 @@ function readCredential(serverName) {
 }
 function writeCredential(serverName, credential) {
   if (!existsSync4(CREDENTIALS_DIR)) {
-    mkdirSync2(CREDENTIALS_DIR, { recursive: true, mode: 448 });
+    mkdirSync3(CREDENTIALS_DIR, { recursive: true, mode: 448 });
   }
   const filePath = getCredentialFilePath(serverName);
   const data = {
@@ -47298,7 +47696,7 @@ var CREDENTIALS_DIR;
 var init_credentials = __esm({
   "../../packages/mcp-config/src/credentials.ts"() {
     "use strict";
-    CREDENTIALS_DIR = join7(homedir4(), ".config", "oxagen", "credentials");
+    CREDENTIALS_DIR = join8(homedir5(), ".config", "oxagen", "credentials");
   }
 });
 
@@ -47488,8 +47886,8 @@ var init_tools2 = __esm({
 
 // src/agents/loader.ts
 import { readFileSync as readFileSync5, readdirSync, existsSync as existsSync5 } from "node:fs";
-import { join as join8, basename as basename2 } from "node:path";
-import { homedir as homedir5 } from "node:os";
+import { join as join9, basename as basename2 } from "node:path";
+import { homedir as homedir6 } from "node:os";
 function parseFrontmatter(raw) {
   const text2 = raw.replace(/^/, "");
   if (!text2.startsWith("---")) return { data: {}, body: text2.trim() };
@@ -47547,17 +47945,17 @@ function loadDir(dir, into) {
     return;
   }
   for (const file2 of files.sort()) {
-    const def = defFromMarkdown(join8(dir, file2));
+    const def = defFromMarkdown(join9(dir, file2));
     if (def) into.set(def.name, def);
   }
 }
 function loadAgents(opts = {}) {
   const cwd2 = opts.cwd ?? process.cwd();
-  const userDir = opts.userAgentsDir ?? join8(homedir5(), ".config", "oxagen", "agents");
+  const userDir = opts.userAgentsDir ?? join9(homedir6(), ".config", "oxagen", "agents");
   const registry2 = /* @__PURE__ */ new Map();
   loadDir(userDir, registry2);
-  loadDir(join8(cwd2, ".claude", "agents"), registry2);
-  loadDir(join8(cwd2, ".oxagen", "agents"), registry2);
+  loadDir(join9(cwd2, ".claude", "agents"), registry2);
+  loadDir(join9(cwd2, ".oxagen", "agents"), registry2);
   const settings2 = loadSettings({ cwd: cwd2, ...opts.settingsOptions, noCache: true }).settings;
   const inline = settings2.agents;
   if (inline && typeof inline === "object") {
@@ -47588,8 +47986,8 @@ var init_loader = __esm({
 
 // src/rules/loader.ts
 import { readdirSync as readdirSync2, existsSync as existsSync6, readFileSync as readFileSync6 } from "node:fs";
-import { join as join9, basename as basename3 } from "node:path";
-import { homedir as homedir6 } from "node:os";
+import { join as join10, basename as basename3 } from "node:path";
+import { homedir as homedir7 } from "node:os";
 function guardFrom(data) {
   const tool2 = data["guard-tool"];
   const denyPathGlob = data["guard-deny-path"];
@@ -47628,17 +48026,17 @@ function loadDir2(dir, into) {
     return;
   }
   for (const file2 of files.sort()) {
-    const rule = ruleFromFile(join9(dir, file2));
+    const rule = ruleFromFile(join10(dir, file2));
     if (rule) into.set(rule.id, rule);
   }
 }
 function loadRules(opts = {}) {
   const cwd2 = opts.cwd ?? process.cwd();
-  const userDir = opts.userRulesDir ?? join9(homedir6(), ".config", "oxagen", "rules");
+  const userDir = opts.userRulesDir ?? join10(homedir7(), ".config", "oxagen", "rules");
   const registry2 = /* @__PURE__ */ new Map();
   loadDir2(userDir, registry2);
-  loadDir2(join9(cwd2, ".claude", "rules"), registry2);
-  loadDir2(join9(cwd2, ".oxagen", "rules"), registry2);
+  loadDir2(join10(cwd2, ".claude", "rules"), registry2);
+  loadDir2(join10(cwd2, ".oxagen", "rules"), registry2);
   return [...registry2.values()];
 }
 var init_loader2 = __esm({
@@ -47683,13 +48081,13 @@ var init_enforce = __esm({
 });
 
 // src/rules/write.ts
-import { writeFileSync as writeFileSync3, existsSync as existsSync7, mkdirSync as mkdirSync3 } from "node:fs";
-import { join as join10, dirname as dirname3 } from "node:path";
+import { writeFileSync as writeFileSync3, existsSync as existsSync7, mkdirSync as mkdirSync4 } from "node:fs";
+import { join as join11, dirname as dirname4 } from "node:path";
 function scaffoldRule(opts) {
-  const dir = opts.dir ?? join10(opts.cwd ?? process.cwd(), ".oxagen", "rules");
-  const path2 = join10(dir, `${opts.name}.md`);
+  const dir = opts.dir ?? join11(opts.cwd ?? process.cwd(), ".oxagen", "rules");
+  const path2 = join11(dir, `${opts.name}.md`);
   if (existsSync7(path2)) return { path: path2, created: false };
-  mkdirSync3(dirname3(path2), { recursive: true });
+  mkdirSync4(dirname4(path2), { recursive: true });
   writeFileSync3(path2, TEMPLATE(opts.name), "utf8");
   return { path: path2, created: true };
 }
@@ -48301,14 +48699,14 @@ var init_judge = __esm({
 });
 
 // src/agent/fleet/memory.ts
-import { mkdirSync as mkdirSync4, appendFileSync, readFileSync as readFileSync7, existsSync as existsSync8 } from "node:fs";
-import { homedir as homedir7 } from "node:os";
-import { basename as basename4, dirname as dirname4, join as join11 } from "node:path";
+import { mkdirSync as mkdirSync5, appendFileSync, readFileSync as readFileSync7, existsSync as existsSync8 } from "node:fs";
+import { homedir as homedir8 } from "node:os";
+import { basename as basename4, dirname as dirname5, join as join12 } from "node:path";
 function projectKey(cwd2) {
   return basename4(cwd2) || "default";
 }
 function memoryPath(cwd2) {
-  return join11(homedir7(), ".config", "oxagen", "memories", `${projectKey(cwd2)}.jsonl`);
+  return join12(homedir8(), ".config", "oxagen", "memories", `${projectKey(cwd2)}.jsonl`);
 }
 function terms(text2) {
   return (text2.toLowerCase().match(/[a-z0-9_]+/g) ?? []).filter(
@@ -48346,7 +48744,7 @@ function openFleetMemory(cwd2) {
     record(rec) {
       const full = { ...rec, id: newId(), createdAt: Date.now() };
       try {
-        mkdirSync4(dirname4(path2), { recursive: true });
+        mkdirSync5(dirname5(path2), { recursive: true });
         appendFileSync(path2, JSON.stringify(full) + "\n", "utf8");
         if (cache6) cache6.push(full);
         else cache6 = [full];
@@ -48857,7 +49255,7 @@ var init_pipeline2 = __esm({
 
 // src/agent/project-context.ts
 import { readFileSync as readFileSync8, existsSync as existsSync9 } from "node:fs";
-import { dirname as dirname5, join as join12, parse as parsePath2, relative as relative4 } from "node:path";
+import { dirname as dirname6, join as join13, parse as parsePath2, relative as relative4 } from "node:path";
 function loadProjectContext(cwd2) {
   const chunks = [];
   const sources = [];
@@ -48866,7 +49264,7 @@ function loadProjectContext(cwd2) {
   const { root } = parsePath2(cwd2);
   for (let depth = 0; depth < MAX_DEPTH; depth++) {
     for (const rel of RULE_FILES) {
-      const full = join12(dir, rel);
+      const full = join13(dir, rel);
       if (!existsSync9(full)) continue;
       let text2;
       try {
@@ -48886,7 +49284,7 @@ ${clipped}`);
     }
     if (total >= MAX_TOTAL) break;
     if (dir === root) break;
-    dir = dirname5(dir);
+    dir = dirname6(dir);
   }
   return { text: chunks.join("\n\n"), sources };
 }
@@ -49284,32 +49682,32 @@ var init_duckdb_adapter = __esm({
         });
       }
       initialize() {
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           this.conn.run(CREATE_TABLE_SQL, (err) => {
             if (err) return reject(err);
             this.conn.run(INDEX_SQL, (err2) => {
               if (err2) return reject(err2);
-              resolve5();
+              resolve6();
             });
           });
         });
       }
       runSql(sql, params = []) {
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           this.conn.run(sql, ...params, (err) => {
             if (err) reject(err);
-            else resolve5();
+            else resolve6();
           });
         });
       }
       querySql(sql, params = []) {
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           this.conn.all(
             sql,
             ...params,
             (err, rows) => {
               if (err) reject(err);
-              else resolve5(rows ?? []);
+              else resolve6(rows ?? []);
             }
           );
         });
@@ -49412,12 +49810,12 @@ var init_duckdb_adapter = __esm({
       async close() {
         await this.ready.catch(() => {
         });
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           this.conn.close((err) => {
             if (err) return reject(err);
             this.db.close((err2) => {
               if (err2) return reject(err2);
-              resolve5();
+              resolve6();
             });
           });
         });
@@ -51022,8 +51420,8 @@ var require_sleep = __commonJS({
     Object.defineProperty(exports, "__esModule", { value: true });
     exports.sleep = sleep;
     async function sleep(ms) {
-      await new Promise((resolve5) => setTimeout(() => {
-        resolve5(void 0);
+      await new Promise((resolve6) => setTimeout(() => {
+        resolve6(void 0);
       }, ms));
     }
   }
@@ -51542,24 +51940,24 @@ var require_stream3 = __commonJS({
     exports.drainStreamInternal = drainStreamInternal;
     var client_common_1 = require_dist3();
     async function drainStream(stream) {
-      return new Promise((resolve5, reject) => {
+      return new Promise((resolve6, reject) => {
         if (stream.errored) {
           reject(stream.errored);
           return;
         }
         if (stream.readableEnded) {
-          resolve5();
+          resolve6();
           return;
         }
         if (stream.closed) {
-          resolve5();
+          resolve6();
           return;
         }
         function dropData() {
         }
         function onEnd() {
           removeListeners();
-          resolve5();
+          resolve6();
         }
         function onError(err) {
           removeListeners();
@@ -51567,7 +51965,7 @@ var require_stream3 = __commonJS({
         }
         function onClose() {
           removeListeners();
-          resolve5();
+          resolve6();
         }
         function removeListeners() {
           stream.removeListener("data", dropData);
@@ -51582,7 +51980,7 @@ var require_stream3 = __commonJS({
       });
     }
     async function drainStreamInternal(ctx, stream) {
-      return new Promise((resolve5, reject) => {
+      return new Promise((resolve6, reject) => {
         const startTime = Date.now();
         let bytesReceived = 0;
         let chunkCount = 0;
@@ -51624,7 +52022,7 @@ var require_stream3 = __commonJS({
               }
             });
           }
-          resolve5();
+          resolve6();
           return;
         }
         if (stream.closed) {
@@ -51638,7 +52036,7 @@ var require_stream3 = __commonJS({
               }
             });
           }
-          resolve5();
+          resolve6();
           return;
         }
         function dropData(chunk) {
@@ -51671,7 +52069,7 @@ var require_stream3 = __commonJS({
               }
             });
           }
-          resolve5();
+          resolve6();
         }
         function onError(err) {
           removeListeners();
@@ -51704,7 +52102,7 @@ var require_stream3 = __commonJS({
               }
             });
           }
-          resolve5();
+          resolve6();
         }
         function removeListeners() {
           stream.removeListener("data", dropData);
@@ -51852,7 +52250,7 @@ var require_socket_pool = __commonJS({
         const start = Date.now();
         const request = this.createClientRequest(params);
         const request_id = this.getNewRequestId();
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           const onError = (e) => {
             removeRequestListeners();
             if (e instanceof Error) {
@@ -51993,7 +52391,7 @@ var require_socket_pool = __commonJS({
                 reject(err);
               }
             } else {
-              return resolve5({
+              return resolve6({
                 stream: responseStream,
                 summary: params.parse_summary ? this.parseSummary(op, _response) : void 0,
                 response_headers: { ..._response.headers },
@@ -53577,7 +53975,7 @@ function detectAdapter() {
   if (process.env["CLICKHOUSE_URL"]) return "clickhouse";
   return "duckdb";
 }
-var init_store = __esm({
+var init_store2 = __esm({
   "../../packages/engram/src/store/index.ts"() {
     "use strict";
     init_duckdb_adapter();
@@ -53588,7 +53986,7 @@ var init_store = __esm({
 });
 
 // ../../packages/engram/src/store/graph-store.ts
-function rowToNode(row) {
+function rowToNode2(row) {
   return {
     id: row["id"],
     labels: JSON.parse(row["labels"]),
@@ -53604,11 +54002,11 @@ function rowToNode(row) {
 function createGraphStore(opts) {
   return new GraphStore({ duckdbPath: opts.duckdbPath });
 }
-var CREATE_NODES_SQL, CREATE_EDGES_SQL, CREATE_CURSOR_SQL, GraphStore;
+var CREATE_NODES_SQL2, CREATE_EDGES_SQL2, CREATE_CURSOR_SQL, CREATE_CODE_CURSOR_SQL, CREATE_LINEAGE_CURSOR_SQL, GraphStore;
 var init_graph_store = __esm({
   "../../packages/engram/src/store/graph-store.ts"() {
     "use strict";
-    CREATE_NODES_SQL = `
+    CREATE_NODES_SQL2 = `
   CREATE TABLE IF NOT EXISTS graph_nodes (
     id           VARCHAR PRIMARY KEY,
     labels       JSON    NOT NULL,
@@ -53621,7 +54019,7 @@ var init_graph_store = __esm({
     workspace    VARCHAR NOT NULL
   )
 `;
-    CREATE_EDGES_SQL = `
+    CREATE_EDGES_SQL2 = `
   CREATE TABLE IF NOT EXISTS graph_edges (
     id        VARCHAR PRIMARY KEY,
     source_id VARCHAR NOT NULL,
@@ -53643,6 +54041,25 @@ var init_graph_store = __esm({
     synced_at  BIGINT  NOT NULL,
     PRIMARY KEY (org, workspace)
   )
+`;
+    CREATE_CODE_CURSOR_SQL = `
+  CREATE TABLE IF NOT EXISTS code_push_cursor (
+    org        VARCHAR NOT NULL,
+    workspace  VARCHAR NOT NULL,
+    repo       VARCHAR NOT NULL,
+    sha        VARCHAR NOT NULL,
+    pushed_at  BIGINT  NOT NULL,
+    PRIMARY KEY (org, workspace, repo)
+  )
+`;
+    CREATE_LINEAGE_CURSOR_SQL = `
+  CREATE TABLE IF NOT EXISTS lineage_sync_cursor (
+    org              VARCHAR NOT NULL,
+    workspace        VARCHAR NOT NULL,
+    last_synced_at   BIGINT  NOT NULL,
+    synced_at        BIGINT  NOT NULL,
+    PRIMARY KEY (org, workspace)
+  )
 `;
     GraphStore = class {
       db;
@@ -53657,35 +54074,41 @@ var init_graph_store = __esm({
         });
       }
       initialize() {
-        return new Promise((resolve5, reject) => {
-          this.conn.run(CREATE_NODES_SQL, (err) => {
+        return new Promise((resolve6, reject) => {
+          this.conn.run(CREATE_NODES_SQL2, (err) => {
             if (err) return reject(err);
-            this.conn.run(CREATE_EDGES_SQL, (err2) => {
+            this.conn.run(CREATE_EDGES_SQL2, (err2) => {
               if (err2) return reject(err2);
               this.conn.run(CREATE_CURSOR_SQL, (err3) => {
                 if (err3) return reject(err3);
-                resolve5();
+                this.conn.run(CREATE_CODE_CURSOR_SQL, (err4) => {
+                  if (err4) return reject(err4);
+                  this.conn.run(CREATE_LINEAGE_CURSOR_SQL, (err5) => {
+                    if (err5) return reject(err5);
+                    resolve6();
+                  });
+                });
               });
             });
           });
         });
       }
       runSql(sql, params = []) {
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           this.conn.run(sql, ...params, (err) => {
             if (err) reject(err);
-            else resolve5();
+            else resolve6();
           });
         });
       }
       querySql(sql, params = []) {
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           this.conn.all(
             sql,
             ...params,
             (err, rows) => {
               if (err) reject(err);
-              else resolve5(rows ?? []);
+              else resolve6(rows ?? []);
             }
           );
         });
@@ -53786,6 +54209,64 @@ var init_graph_store = __esm({
         );
       }
       // ---------------------------------------------------------------------------
+      // Code push cursor — git SHA tracking for 'oxagen graph push'
+      // ---------------------------------------------------------------------------
+      async getCodeCursor(org, workspace, repo) {
+        await this.ready;
+        const rows = await this.querySql(
+          "SELECT sha FROM code_push_cursor WHERE org = ? AND workspace = ? AND repo = ?",
+          [org, workspace, repo]
+        );
+        if (rows.length === 0) return null;
+        return rows[0]["sha"];
+      }
+      async setCodeCursor(org, workspace, repo, sha) {
+        await this.ready;
+        await this.runSql(
+          "DELETE FROM code_push_cursor WHERE org = ? AND workspace = ? AND repo = ?",
+          [org, workspace, repo]
+        );
+        await this.runSql(
+          `INSERT INTO code_push_cursor (org, workspace, repo, sha, pushed_at)
+       VALUES (?, ?, ?, ?, ?)`,
+          [org, workspace, repo, sha, Date.now()]
+        );
+      }
+      // ---------------------------------------------------------------------------
+      // Lineage push cursor (TurnTrace sync tracking for `oxagen graph lineage`)
+      // ---------------------------------------------------------------------------
+      /**
+       * Return the `createdAt` epoch-ms of the most recently synced TurnTrace, or
+       * `null` if no lineage sync has been run yet.
+       *
+       * Traces with `createdAt > lastSyncedAt` are candidates for the next push.
+       */
+      async getLineageCursor(org, workspace) {
+        await this.ready;
+        const rows = await this.querySql(
+          "SELECT last_synced_at FROM lineage_sync_cursor WHERE org = ? AND workspace = ?",
+          [org, workspace]
+        );
+        if (rows.length === 0) return null;
+        return Number(rows[0]["last_synced_at"]);
+      }
+      /**
+       * Persist the `createdAt` epoch-ms of the latest TurnTrace that was
+       * successfully pushed to the workspace graph.
+       */
+      async setLineageCursor(org, workspace, lastSyncedAt) {
+        await this.ready;
+        await this.runSql(
+          "DELETE FROM lineage_sync_cursor WHERE org = ? AND workspace = ?",
+          [org, workspace]
+        );
+        await this.runSql(
+          `INSERT INTO lineage_sync_cursor (org, workspace, last_synced_at, synced_at)
+       VALUES (?, ?, ?, ?)`,
+          [org, workspace, lastSyncedAt, Date.now()]
+        );
+      }
+      // ---------------------------------------------------------------------------
       // Read API
       // ---------------------------------------------------------------------------
       async stats(org, workspace) {
@@ -53816,7 +54297,7 @@ var init_graph_store = __esm({
        LIMIT ?`,
           [org, workspace, q, q, limit]
         );
-        return rows.map(rowToNode);
+        return rows.map(rowToNode2);
       }
       async getNode(org, workspace, id) {
         await this.ready;
@@ -53825,7 +54306,7 @@ var init_graph_store = __esm({
           [org, workspace, id]
         );
         if (rows.length === 0) return null;
-        return rowToNode(rows[0]);
+        return rowToNode2(rows[0]);
       }
       // ---------------------------------------------------------------------------
       // Lifecycle
@@ -53833,12 +54314,12 @@ var init_graph_store = __esm({
       async close() {
         await this.ready.catch(() => {
         });
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           this.conn.close((err) => {
             if (err) return reject(err);
             this.db.close((err2) => {
               if (err2) return reject(err2);
-              resolve5();
+              resolve6();
             });
           });
         });
@@ -56662,6 +57143,335 @@ var init_report = __esm({
   }
 });
 
+// ../../packages/engram/src/eval/golden-fixtures.ts
+function hex64(seed) {
+  let out2 = "";
+  for (let lane = 0; lane < 8; lane++) {
+    let h = 2166136261 ^ lane * 16777619;
+    const s = `${seed}#${lane}`;
+    for (let i = 0; i < s.length; i++) {
+      h ^= s.charCodeAt(i);
+      h = Math.imul(h, 16777619) >>> 0;
+    }
+    out2 += h.toString(16).padStart(8, "0");
+  }
+  return out2.slice(0, 64);
+}
+function semantic(seed, fact, domain2, salience = 0.7) {
+  return {
+    id: hex64(seed),
+    kind: "semantic",
+    namespace: { org: "oxagen", workspace: "eval" },
+    body: { fact, domain: domain2 },
+    salience,
+    confidence: 0.95,
+    provenance: {
+      author: "golden-fixtures",
+      derivedFrom: [],
+      timestamp: 17e11
+    },
+    causality: [],
+    createdAt: 17e11
+  };
+}
+function frame(taskDescription, workingSet = []) {
+  return {
+    namespace: { org: "oxagen", workspace: "eval" },
+    taskDescription,
+    workingSet,
+    recentEventIds: [],
+    modelId: "claude-sonnet-4.5"
+  };
+}
+var GOLDEN_CORPUS, SIGNAL_BUDGET, BASELINE, GOLDEN_TRACES, GOLDEN_GROUND_TRUTH;
+var init_golden_fixtures = __esm({
+  "../../packages/engram/src/eval/golden-fixtures.ts"() {
+    "use strict";
+    GOLDEN_CORPUS = [
+      semantic(
+        "cli-default-model",
+        "The DEFAULT_MODEL constant in apps/cli/src/agent/model.ts is set to anthropic/claude-sonnet-4.5.",
+        "cli-config",
+        0.8
+      ),
+      semantic(
+        "cli-oneshot-runturn",
+        "apps/cli/src/repl/one-shot.ts imports runTurn from ../agent/pipeline.js to run a single agent turn.",
+        "cli-oneshot"
+      ),
+      semantic(
+        "cli-mutating-tools",
+        "The MUTATING_TOOLS constant in apps/cli/src/agent/permissions.ts lists write_file, edit_file, and bash.",
+        "cli-permissions"
+      ),
+      semantic(
+        "cli-codegraph-builder",
+        "apps/cli/src/agent/code-graph.ts imports buildCodeGraph from daemon/code-graph/builder.",
+        "cli-codegraph"
+      ),
+      semantic(
+        "app-proxy-file",
+        "apps/app intercepts requests via proxy.ts, which replaces the old middleware.ts convention.",
+        "app-routing"
+      ),
+      // --- noise: correct facts about other domains, but irrelevant to CLI questions ---
+      semantic(
+        "noise-billing",
+        "Billing credits are the customer-facing currency, bought in US dollars and priced at a cent each.",
+        "billing"
+      ),
+      semantic(
+        "noise-rls",
+        "Tenant isolation is enforced by withTenantDb / withSystemDb; raw db() is banned.",
+        "database"
+      ),
+      semantic(
+        "noise-brand",
+        "The Oxagen Graphite skin pairs graphite grays with an ember accent (#F87854).",
+        "brand"
+      )
+    ];
+    SIGNAL_BUDGET = {
+      total: 4e3,
+      reserved: { system: 200, procedural: 200, volatile: 3400, working: 200 }
+    };
+    BASELINE = {
+      contextPrecision: 0.9,
+      contextRecall: 0.9,
+      retrievalHitRate: 0.9,
+      cacheHitRate: 0,
+      tokensToSuccess: 0,
+      costPerTask: 0,
+      turnLatency: { p50: 0, p95: 0, p99: 0 }
+    };
+    GOLDEN_TRACES = [
+      {
+        id: "repo-structural-qa",
+        name: "Repo-structural Q&A (CLI context engine)",
+        description: "Five repo-grounded lookups that a code-aware context engine should answer by retrieving exactly the relevant fact and excluding unrelated tenant/domain noise.",
+        expectedRecords: GOLDEN_CORPUS.slice(0, 5).map((r) => r.id),
+        excludedRecords: GOLDEN_CORPUS.slice(5).map((r) => r.id),
+        baseline: BASELINE,
+        lastValidated: "2026-06-28",
+        turns: [
+          {
+            taskFrame: frame(
+              "What is the value of the DEFAULT_MODEL constant in the CLI agent model module?"
+            ),
+            budget: SIGNAL_BUDGET,
+            requiredInContext: [hex64("cli-default-model")],
+            forbiddenInContext: [hex64("noise-billing")],
+            expectedToolCalls: [],
+            expectedOutcome: "success"
+          },
+          {
+            taskFrame: frame(
+              "Which function does one-shot.ts import from pipeline to run a single turn? Mention runTurn."
+            ),
+            budget: SIGNAL_BUDGET,
+            requiredInContext: [hex64("cli-oneshot-runturn")],
+            forbiddenInContext: [hex64("noise-brand")],
+            expectedToolCalls: [],
+            expectedOutcome: "success"
+          },
+          {
+            taskFrame: frame(
+              "Name the three tools in the MUTATING_TOOLS constant in the CLI permissions module."
+            ),
+            budget: SIGNAL_BUDGET,
+            requiredInContext: [hex64("cli-mutating-tools")],
+            forbiddenInContext: [hex64("noise-rls")],
+            expectedToolCalls: [],
+            expectedOutcome: "success"
+          },
+          {
+            taskFrame: frame(
+              "Where does the CLI code-graph module import buildCodeGraph from?"
+            ),
+            budget: SIGNAL_BUDGET,
+            requiredInContext: [hex64("cli-codegraph-builder")],
+            forbiddenInContext: [hex64("noise-billing")],
+            expectedToolCalls: [],
+            expectedOutcome: "success"
+          },
+          {
+            taskFrame: frame(
+              "Which file does apps/app use for request interception that replaces middleware.ts? It is proxy.ts."
+            ),
+            budget: SIGNAL_BUDGET,
+            requiredInContext: [hex64("app-proxy-file")],
+            forbiddenInContext: [hex64("noise-brand")],
+            expectedToolCalls: [],
+            expectedOutcome: "success"
+          }
+        ]
+      }
+    ];
+    GOLDEN_GROUND_TRUTH = {
+      [hex64("cli-default-model")]: "anthropic/claude-sonnet-4.5",
+      [hex64("cli-oneshot-runturn")]: "runTurn",
+      [hex64("cli-mutating-tools")]: "write_file, edit_file, bash",
+      [hex64("cli-codegraph-builder")]: "daemon/code-graph/builder",
+      [hex64("app-proxy-file")]: "proxy.ts"
+    };
+  }
+});
+
+// ../../packages/engram/src/eval/golden-compile.ts
+function terms2(text2) {
+  const out2 = /* @__PURE__ */ new Set();
+  for (const raw of text2.toLowerCase().split(/[^a-z0-9]+/)) {
+    if (raw.length >= 3 && !STOPWORDS2.has(raw)) out2.add(raw);
+  }
+  return out2;
+}
+function factText(record2) {
+  const body = record2.body;
+  return `${body.fact ?? ""} ${body.domain ?? ""}`.trim();
+}
+function rankCorpus(corpus, taskFrame) {
+  const query = terms2(`${taskFrame.taskDescription} ${taskFrame.workingSet.join(" ")}`);
+  return corpus.map((record2) => {
+    const text2 = factText(record2);
+    let score = 0;
+    for (const term of terms2(text2)) if (query.has(term)) score++;
+    return { id: record2.id, score, text: text2, tokens: countTokens(text2, taskFrame.modelId) };
+  }).filter((c) => c.score > 0).sort((a, b) => b.score - a.score || a.id.localeCompare(b.id));
+}
+function makeGoldenCompileFn(corpus) {
+  return async function compileGolden(taskFrame, budget) {
+    const ranked = rankCorpus(corpus, taskFrame);
+    const cap = budget.reserved.volatile;
+    const packed = [];
+    let used = 0;
+    for (const candidate of ranked) {
+      if (used + candidate.tokens > cap) continue;
+      packed.push(candidate.id);
+      used += candidate.tokens;
+    }
+    return packed;
+  };
+}
+var STOPWORDS2;
+var init_golden_compile = __esm({
+  "../../packages/engram/src/eval/golden-compile.ts"() {
+    "use strict";
+    init_tokenizer();
+    STOPWORDS2 = /* @__PURE__ */ new Set([
+      "the",
+      "and",
+      "for",
+      "from",
+      "with",
+      "that",
+      "this",
+      "what",
+      "which",
+      "does",
+      "where",
+      "who",
+      "whom",
+      "into",
+      "onto",
+      "are",
+      "was",
+      "were",
+      "has",
+      "have",
+      "its",
+      "value",
+      "constant",
+      "module",
+      "file",
+      "mention",
+      "answer",
+      "just",
+      "name",
+      "give",
+      "list",
+      "used",
+      "use",
+      "uses",
+      "set",
+      "their",
+      "you"
+    ]);
+  }
+});
+
+// ../../packages/engram/src/eval/run-golden.ts
+import { fileURLToPath } from "node:url";
+import { dirname as dirname7, resolve as resolve5 } from "node:path";
+import { mkdirSync as mkdirSync6, writeFileSync as writeFileSync4 } from "node:fs";
+function runGoldenSuite() {
+  return runEvalSuite(GOLDEN_TRACES, makeGoldenCompileFn(GOLDEN_CORPUS));
+}
+async function buildRagDataset() {
+  const compile2 = makeGoldenCompileFn(GOLDEN_CORPUS);
+  const byId = new Map(GOLDEN_CORPUS.map((r) => [r.id, r]));
+  const records = [];
+  for (const trace2 of GOLDEN_TRACES) {
+    for (const [i, turn] of trace2.turns.entries()) {
+      const packedIds = await compile2(turn.taskFrame, turn.budget);
+      const contexts = packedIds.map((id) => {
+        const body = byId.get(id)?.body;
+        return body?.fact ?? "";
+      });
+      const requiredId = turn.requiredInContext[0] ?? `${trace2.id}-${i}`;
+      const groundTruth = GOLDEN_GROUND_TRUTH[requiredId] ?? "";
+      records.push({
+        id: `${trace2.id}-${i}`,
+        question: turn.taskFrame.taskDescription,
+        contexts,
+        answer: groundTruth,
+        ground_truth: groundTruth
+      });
+    }
+  }
+  return records;
+}
+function repoRoot() {
+  return resolve5(dirname7(fileURLToPath(import.meta.url)), "../../../..");
+}
+async function writeRagDataset(outPath) {
+  const dest = outPath ?? resolve5(repoRoot(), "bench/rag-eval/dataset.engram.jsonl");
+  mkdirSync6(dirname7(dest), { recursive: true });
+  const rows = await buildRagDataset();
+  writeFileSync4(dest, rows.map((r) => JSON.stringify(r)).join("\n") + "\n", "utf8");
+  return dest;
+}
+async function main() {
+  const result = await runGoldenSuite();
+  process.stdout.write(generateTextReport(result) + "\n");
+  if (process.argv.includes("--export")) {
+    const dest = await writeRagDataset();
+    process.stdout.write(`
+Exported RAGAS/DeepEval dataset \u2192 ${dest}
+`);
+  }
+  if (!result.overallPassed) process.exitCode = 1;
+}
+function isDirectCliEntry() {
+  try {
+    const entry = process.argv[1];
+    return entry !== void 0 && fileURLToPath(import.meta.url) === resolve5(entry);
+  } catch {
+    return false;
+  }
+}
+var init_run_golden = __esm({
+  "../../packages/engram/src/eval/run-golden.ts"() {
+    "use strict";
+    init_harness();
+    init_report();
+    init_golden_fixtures();
+    init_golden_compile();
+    if (isDirectCliEntry()) {
+      void main();
+    }
+  }
+});
+
 // ../../packages/engram/src/index.ts
 var src_exports = {};
 __export(src_exports, {
@@ -56675,6 +57485,9 @@ __export(src_exports, {
   EdgeBodySchema: () => EdgeBodySchema,
   EntityBodySchema: () => EntityBodySchema,
   EpisodicBodySchema: () => EpisodicBodySchema,
+  GOLDEN_CORPUS: () => GOLDEN_CORPUS,
+  GOLDEN_GROUND_TRUTH: () => GOLDEN_GROUND_TRUTH,
+  GOLDEN_TRACES: () => GOLDEN_TRACES,
   GraphRetrievalEngine: () => GraphRetrievalEngine,
   GraphStore: () => GraphStore,
   IntentLedger: () => IntentLedger,
@@ -56702,6 +57515,7 @@ __export(src_exports, {
   batchByPriority: () => batchByPriority,
   buildLayout: () => buildLayout,
   buildMerkleTree: () => buildMerkleTree,
+  buildRagDataset: () => buildRagDataset,
   clearCompileTelemetrySinkForTests: () => clearCompileTelemetrySinkForTests,
   clearGraphSyncClientForTests: () => clearGraphSyncClientForTests,
   clusterEvents: () => clusterEvents,
@@ -56756,6 +57570,7 @@ __export(src_exports, {
   identifyEvictionCandidates: () => identifyEvictionCandidates,
   initHash: () => initHash,
   isWithinNamespace: () => isWithinNamespace,
+  makeGoldenCompileFn: () => makeGoldenCompileFn,
   mapBody: () => mapBody,
   mapKind: () => mapKind,
   mapNamespace: () => mapNamespace,
@@ -56770,10 +57585,12 @@ __export(src_exports, {
   prioritizeForSync: () => prioritizeForSync,
   promotePatterns: () => promotePatterns,
   quantizeToInt8: () => quantizeToInt8,
+  rankCorpus: () => rankCorpus,
   relate: () => relate,
   remember: () => remember,
   resolveConflict: () => resolveConflict,
   runEvalSuite: () => runEvalSuite,
+  runGoldenSuite: () => runGoldenSuite,
   sessionNamespace: () => sessionNamespace,
   setCompileTelemetrySink: () => setCompileTelemetrySink,
   setGraphSyncClient: () => setGraphSyncClient,
@@ -56784,7 +57601,8 @@ __export(src_exports, {
   validateNamespace: () => validateNamespace,
   validateTurn: () => validateTurn,
   verifyRecordIntegrity: () => verifyRecordIntegrity,
-  workspaceNamespace: () => workspaceNamespace
+  workspaceNamespace: () => workspaceNamespace,
+  writeRagDataset: () => writeRagDataset
 });
 function createEngram(store) {
   return {
@@ -56804,7 +57622,7 @@ var init_src = __esm({
     init_record2();
     init_namespace();
     init_salience();
-    init_store();
+    init_store2();
     init_graph_store();
     init_remember();
     init_assert();
@@ -56858,15 +57676,18 @@ var init_src = __esm({
     init_metrics();
     init_golden_traces();
     init_report();
+    init_run_golden();
+    init_golden_fixtures();
+    init_golden_compile();
   }
 });
 
 // src/agent/memory.ts
-import { mkdirSync as mkdirSync5 } from "node:fs";
-import { homedir as homedir8 } from "node:os";
-import { basename as basename5, dirname as dirname6, join as join13 } from "node:path";
+import { mkdirSync as mkdirSync7 } from "node:fs";
+import { homedir as homedir9 } from "node:os";
+import { basename as basename5, dirname as dirname8, join as join14 } from "node:path";
 function dbPath() {
-  return join13(homedir8(), ".config", "oxagen", "context.duckdb");
+  return join14(homedir9(), ".config", "oxagen", "context.duckdb");
 }
 function projectKey2(cwd2) {
   return basename5(cwd2) || "default";
@@ -56875,7 +57696,7 @@ async function openSessionMemory(cwd2, sessionId) {
   let store;
   try {
     const path2 = dbPath();
-    mkdirSync5(dirname6(path2), { recursive: true });
+    mkdirSync7(dirname8(path2), { recursive: true });
     store = createStore({ adapter: "duckdb", duckdbPath: path2 });
   } catch (err) {
     if (process.env["OXAGEN_DEBUG"])
@@ -56953,14 +57774,14 @@ var init_memory2 = __esm({
 });
 
 // src/agent/trace-store.ts
-import { mkdirSync as mkdirSync6, readFileSync as readFileSync9, writeFileSync as writeFileSync4, existsSync as existsSync10 } from "node:fs";
-import { homedir as homedir9 } from "node:os";
-import { basename as basename6, dirname as dirname7, join as join14 } from "node:path";
+import { mkdirSync as mkdirSync8, readFileSync as readFileSync9, writeFileSync as writeFileSync5, existsSync as existsSync10 } from "node:fs";
+import { homedir as homedir10 } from "node:os";
+import { basename as basename6, dirname as dirname9, join as join15 } from "node:path";
 function projectKey3(cwd2) {
   return basename6(cwd2) || "default";
 }
 function storePath(cwd2) {
-  return join14(homedir9(), ".config", "oxagen", "traces", `${projectKey3(cwd2)}.json`);
+  return join15(homedir10(), ".config", "oxagen", "traces", `${projectKey3(cwd2)}.json`);
 }
 function read(cwd2) {
   const path2 = storePath(cwd2);
@@ -56975,8 +57796,8 @@ function read(cwd2) {
 function write(cwd2, data) {
   const path2 = storePath(cwd2);
   try {
-    mkdirSync6(dirname7(path2), { recursive: true });
-    writeFileSync4(path2, JSON.stringify(data, null, 2), "utf8");
+    mkdirSync8(dirname9(path2), { recursive: true });
+    writeFileSync5(path2, JSON.stringify(data, null, 2), "utf8");
   } catch {
   }
 }
@@ -57019,19 +57840,19 @@ var init_trace_store = __esm({
 });
 
 // src/agent/verbose-log.ts
-import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync7, existsSync as existsSync11, readFileSync as readFileSync10 } from "node:fs";
-import { homedir as homedir10 } from "node:os";
-import { basename as basename7, dirname as dirname8, join as join15 } from "node:path";
+import { appendFileSync as appendFileSync2, mkdirSync as mkdirSync9, existsSync as existsSync11, readFileSync as readFileSync10 } from "node:fs";
+import { homedir as homedir11 } from "node:os";
+import { basename as basename7, dirname as dirname10, join as join16 } from "node:path";
 function projectKey4(cwd2) {
   return basename7(cwd2) || "default";
 }
 function verboseLogPath(cwd2) {
-  return join15(homedir10(), ".config", "oxagen", "verbose", `${projectKey4(cwd2)}.jsonl`);
+  return join16(homedir11(), ".config", "oxagen", "verbose", `${projectKey4(cwd2)}.jsonl`);
 }
 function appendVerboseLog(cwd2, trace2) {
   const path2 = verboseLogPath(cwd2);
   try {
-    mkdirSync7(dirname8(path2), { recursive: true });
+    mkdirSync9(dirname10(path2), { recursive: true });
     appendFileSync2(path2, JSON.stringify(trace2) + "\n", "utf8");
   } catch {
   }
@@ -58209,21 +59030,21 @@ var require_react_development = __commonJS({
         );
         actScopeDepth = prevActScopeDepth;
       }
-      function recursivelyFlushAsyncActWork(returnValue, resolve5, reject) {
+      function recursivelyFlushAsyncActWork(returnValue, resolve6, reject) {
         var queue = ReactSharedInternals.actQueue;
         if (null !== queue)
           if (0 !== queue.length)
             try {
               flushActQueue(queue);
               enqueueTask(function() {
-                return recursivelyFlushAsyncActWork(returnValue, resolve5, reject);
+                return recursivelyFlushAsyncActWork(returnValue, resolve6, reject);
               });
               return;
             } catch (error40) {
               ReactSharedInternals.thrownErrors.push(error40);
             }
           else ReactSharedInternals.actQueue = null;
-        0 < ReactSharedInternals.thrownErrors.length ? (queue = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, reject(queue)) : resolve5(returnValue);
+        0 < ReactSharedInternals.thrownErrors.length ? (queue = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, reject(queue)) : resolve6(returnValue);
       }
       function flushActQueue(queue) {
         if (!isFlushing) {
@@ -58410,7 +59231,7 @@ var require_react_development = __commonJS({
             ));
           });
           return {
-            then: function(resolve5, reject) {
+            then: function(resolve6, reject) {
               didAwaitActCall = true;
               thenable.then(
                 function(returnValue) {
@@ -58420,7 +59241,7 @@ var require_react_development = __commonJS({
                       flushActQueue(queue), enqueueTask(function() {
                         return recursivelyFlushAsyncActWork(
                           returnValue,
-                          resolve5,
+                          resolve6,
                           reject
                         );
                       });
@@ -58434,7 +59255,7 @@ var require_react_development = __commonJS({
                       ReactSharedInternals.thrownErrors.length = 0;
                       reject(_thrownError);
                     }
-                  } else resolve5(returnValue);
+                  } else resolve6(returnValue);
                 },
                 function(error40) {
                   popActScope(prevActQueue, prevActScopeDepth);
@@ -58456,15 +59277,15 @@ var require_react_development = __commonJS({
         if (0 < ReactSharedInternals.thrownErrors.length)
           throw callback = aggregateErrors(ReactSharedInternals.thrownErrors), ReactSharedInternals.thrownErrors.length = 0, callback;
         return {
-          then: function(resolve5, reject) {
+          then: function(resolve6, reject) {
             didAwaitActCall = true;
             0 === prevActScopeDepth ? (ReactSharedInternals.actQueue = queue, enqueueTask(function() {
               return recursivelyFlushAsyncActWork(
                 returnValue$jscomp$0,
-                resolve5,
+                resolve6,
                 reject
               );
-            })) : resolve5(returnValue$jscomp$0);
+            })) : resolve6(returnValue$jscomp$0);
           }
         };
       };
@@ -62986,9 +63807,9 @@ var require_react_reconciler_production = __commonJS({
                 if (1 !== RunInRootFrame || 1 !== namePropDescriptor) {
                   do
                     if (RunInRootFrame--, namePropDescriptor--, 0 > namePropDescriptor || sampleLines[RunInRootFrame] !== controlLines[namePropDescriptor]) {
-                      var frame = "\n" + sampleLines[RunInRootFrame].replace(" at new ", " at ");
-                      fn.displayName && frame.includes("<anonymous>") && (frame = frame.replace("<anonymous>", fn.displayName));
-                      return frame;
+                      var frame2 = "\n" + sampleLines[RunInRootFrame].replace(" at new ", " at ");
+                      fn.displayName && frame2.includes("<anonymous>") && (frame2 = frame2.replace("<anonymous>", fn.displayName));
+                      return frame2;
                     }
                   while (1 <= RunInRootFrame && 0 <= namePropDescriptor);
                 }
@@ -63493,8 +64314,8 @@ var require_react_reconciler_production = __commonJS({
           currentEntangledActionThenable = {
             status: "pending",
             value: void 0,
-            then: function(resolve5) {
-              entangledListeners.push(resolve5);
+            then: function(resolve6) {
+              entangledListeners.push(resolve6);
             }
           };
         }
@@ -63517,8 +64338,8 @@ var require_react_reconciler_production = __commonJS({
           status: "pending",
           value: null,
           reason: null,
-          then: function(resolve5) {
-            listeners.push(resolve5);
+          then: function(resolve6) {
+            listeners.push(resolve6);
           }
         };
         thenable.then(
@@ -71890,10 +72711,10 @@ var require_react_reconciler_development = __commonJS({
       }
       function describeNativeComponentFrame(fn, construct) {
         if (!fn || reentry) return "";
-        var frame = componentFrameCache.get(fn);
-        if (void 0 !== frame) return frame;
+        var frame2 = componentFrameCache.get(fn);
+        if (void 0 !== frame2) return frame2;
         reentry = true;
-        frame = Error.prepareStackTrace;
+        frame2 = Error.prepareStackTrace;
         Error.prepareStackTrace = void 0;
         var previousDispatcher = null;
         previousDispatcher = ReactSharedInternals.H;
@@ -71986,7 +72807,7 @@ var require_react_reconciler_development = __commonJS({
               }
           }
         } finally {
-          reentry = false, ReactSharedInternals.H = previousDispatcher, reenableLogs(), Error.prepareStackTrace = frame;
+          reentry = false, ReactSharedInternals.H = previousDispatcher, reenableLogs(), Error.prepareStackTrace = frame2;
         }
         sampleLines = (sampleLines = fn ? fn.displayName || fn.name : "") ? describeBuiltInComponentFrame(sampleLines) : "";
         "function" === typeof fn && componentFrameCache.set(fn, sampleLines);
@@ -73117,8 +73938,8 @@ var require_react_reconciler_development = __commonJS({
           currentEntangledActionThenable = {
             status: "pending",
             value: void 0,
-            then: function(resolve5) {
-              entangledListeners.push(resolve5);
+            then: function(resolve6) {
+              entangledListeners.push(resolve6);
             }
           };
         }
@@ -73141,8 +73962,8 @@ var require_react_reconciler_development = __commonJS({
           status: "pending",
           value: null,
           reason: null,
-          then: function(resolve5) {
-            listeners.push(resolve5);
+          then: function(resolve6) {
+            listeners.push(resolve6);
           }
         };
         thenable.then(
@@ -88591,7 +89412,7 @@ var require_websocket = __commonJS({
     var http = __require("http");
     var net3 = __require("net");
     var tls = __require("tls");
-    var { randomBytes, createHash: createHash2 } = __require("crypto");
+    var { randomBytes, createHash: createHash5 } = __require("crypto");
     var { Duplex, Readable } = __require("stream");
     var { URL: URL2 } = __require("url");
     var PerMessageDeflate2 = require_permessage_deflate();
@@ -89259,7 +90080,7 @@ var require_websocket = __commonJS({
           abortHandshake(websocket, socket, "Invalid Upgrade header");
           return;
         }
-        const digest = createHash2("sha1").update(key + GUID).digest("base64");
+        const digest = createHash5("sha1").update(key + GUID).digest("base64");
         if (res.headers["sec-websocket-accept"] !== digest) {
           abortHandshake(websocket, socket, "Invalid Sec-WebSocket-Accept header");
           return;
@@ -89628,7 +90449,7 @@ var require_websocket_server = __commonJS({
     var EventEmitter4 = __require("events");
     var http = __require("http");
     var { Duplex } = __require("stream");
-    var { createHash: createHash2 } = __require("crypto");
+    var { createHash: createHash5 } = __require("crypto");
     var extension2 = require_extension();
     var PerMessageDeflate2 = require_permessage_deflate();
     var subprotocol2 = require_subprotocol();
@@ -89935,7 +90756,7 @@ var require_websocket_server = __commonJS({
           );
         }
         if (this._state > RUNNING) return abortHandshake(socket, 503);
-        const digest = createHash2("sha1").update(key + GUID).digest("base64");
+        const digest = createHash5("sha1").update(key + GUID).digest("base64");
         const headers = [
           "HTTP/1.1 101 Switching Protocols",
           "Upgrade: websocket",
@@ -90118,22 +90939,22 @@ var init_devtools = __esm({
     init_devtools_window_polyfill();
     init_wrapper();
     init_react_devtools_core();
-    isDevToolsReachable = async () => new Promise((resolve5) => {
+    isDevToolsReachable = async () => new Promise((resolve6) => {
       const socket = new wrapper_default("ws://localhost:8097");
       const timeout = setTimeout(() => {
         socket.terminate();
-        resolve5(false);
+        resolve6(false);
       }, 2e3);
       timeout.unref();
       socket.on("open", () => {
         clearTimeout(timeout);
         socket.terminate();
-        resolve5(true);
+        resolve6(true);
       });
       socket.on("error", () => {
         clearTimeout(timeout);
         socket.terminate();
-        resolve5(false);
+        resolve6(false);
       });
     });
     if (await isDevToolsReachable()) {
@@ -93901,8 +94722,8 @@ var init_ink = __esm({
     noop2 = () => {
     };
     textEncoder = new TextEncoder();
-    yieldImmediate = async () => new Promise((resolve5) => {
-      setImmediate(resolve5);
+    yieldImmediate = async () => new Promise((resolve6) => {
+      setImmediate(resolve6);
     });
     kittyQueryEscapeByte = 27;
     kittyQueryOpenBracketByte = 91;
@@ -94119,8 +94940,8 @@ var init_ink = __esm({
           };
         }
         this.initKittyKeyboard();
-        this.exitPromise = new Promise((resolve5, reject) => {
-          this.resolveExitPromise = resolve5;
+        this.exitPromise = new Promise((resolve6, reject) => {
+          this.resolveExitPromise = resolve6;
           this.rejectExitPromise = reject;
         });
         void this.exitPromise.catch(noop2);
@@ -94431,9 +95252,9 @@ var init_ink = __esm({
         settleThrottle(this.throttledOnRender, canWriteToStdout);
         settleThrottle(this.throttledLog, canWriteToStdout);
         if (canWriteToStdout && hasWritableState) {
-          await new Promise((resolve5) => {
+          await new Promise((resolve6) => {
             this.options.stdout.write("", () => {
-              resolve5();
+              resolve6();
             });
           });
           return;
@@ -94519,8 +95340,8 @@ var init_ink = __esm({
       async awaitNextRender() {
         if (!this.nextRenderCommit) {
           let resolveRender;
-          const promise2 = new Promise((resolve5) => {
-            resolveRender = resolve5;
+          const promise2 = new Promise((resolve6) => {
+            resolveRender = resolve6;
           });
           this.nextRenderCommit = { promise: promise2, resolve: resolveRender };
         }
@@ -95826,8 +96647,8 @@ var init_theme = __esm({
 
 // src/slash/loader.ts
 import { readdirSync as readdirSync3, existsSync as existsSync13 } from "node:fs";
-import { join as join16, basename as basename8 } from "node:path";
-import { homedir as homedir11 } from "node:os";
+import { join as join17, basename as basename8 } from "node:path";
+import { homedir as homedir12 } from "node:os";
 import { readFileSync as readFileSync12 } from "node:fs";
 function defFromFile(path2) {
   let raw;
@@ -95857,17 +96678,17 @@ function loadDir3(dir, into) {
     return;
   }
   for (const file2 of files.sort()) {
-    const def = defFromFile(join16(dir, file2));
+    const def = defFromFile(join17(dir, file2));
     if (def) into.set(def.name, def);
   }
 }
 function loadCommands(opts = {}) {
   const cwd2 = opts.cwd ?? process.cwd();
-  const userDir = opts.userCommandsDir ?? join16(homedir11(), ".config", "oxagen", "commands");
+  const userDir = opts.userCommandsDir ?? join17(homedir12(), ".config", "oxagen", "commands");
   const registry2 = /* @__PURE__ */ new Map();
   loadDir3(userDir, registry2);
-  loadDir3(join16(cwd2, ".claude", "commands"), registry2);
-  loadDir3(join16(cwd2, ".oxagen", "commands"), registry2);
+  loadDir3(join17(cwd2, ".claude", "commands"), registry2);
+  loadDir3(join17(cwd2, ".oxagen", "commands"), registry2);
   return registry2;
 }
 var init_loader3 = __esm({
@@ -95979,14 +96800,14 @@ function ThinkingIndicator({
   startedAt,
   getTokens
 }) {
-  const [frame, setFrame] = (0, import_react34.useState)(0);
+  const [frame2, setFrame] = (0, import_react34.useState)(0);
   (0, import_react34.useEffect)(() => {
     const id = setInterval(() => setFrame((f) => f + 1), 100);
     return () => clearInterval(id);
   }, []);
   const elapsed2 = Math.max(0, Math.round((Date.now() - startedAt) / 1e3));
   const tokens = getTokens();
-  return /* @__PURE__ */ import_react34.default.createElement(Box_default, { paddingX: 1 }, /* @__PURE__ */ import_react34.default.createElement(Text, { color: "#FBBF24", bold: true }, SPINNER[frame % SPINNER.length], " "), /* @__PURE__ */ import_react34.default.createElement(Text, { color: "#FBBF24" }, "Thinking\u2026 "), /* @__PURE__ */ import_react34.default.createElement(Text, { dimColor: true }, elapsed2, "s", tokens > 0 ? ` \xB7 ~${humanizeTokens(tokens)} tok` : "", " \xB7 esc to cancel"));
+  return /* @__PURE__ */ import_react34.default.createElement(Box_default, { paddingX: 1 }, /* @__PURE__ */ import_react34.default.createElement(Text, { color: "#FBBF24", bold: true }, SPINNER[frame2 % SPINNER.length], " "), /* @__PURE__ */ import_react34.default.createElement(Text, { color: "#FBBF24" }, "Thinking\u2026 "), /* @__PURE__ */ import_react34.default.createElement(Text, { dimColor: true }, elapsed2, "s", tokens > 0 ? ` \xB7 ~${humanizeTokens(tokens)} tok` : "", " \xB7 esc to cancel"));
 }
 function StatusLine({
   model,
@@ -96156,7 +96977,7 @@ function ReplApp({
     brokerRef.current = new PermissionBroker({
       mode: modeRef.current,
       cwd: cwd2,
-      approver: (req) => new Promise((resolve5) => setApproval({ req, resolve: resolve5 }))
+      approver: (req) => new Promise((resolve6) => setApproval({ req, resolve: resolve6 }))
     });
   }
   (0, import_react35.useEffect)(() => {
@@ -96915,8 +97736,8 @@ var init_orchestrator = __esm({
       /** Begin scheduling. Resolves when every task has reached a terminal state. */
       start() {
         if (!this.donePromise) {
-          this.donePromise = new Promise((resolve5) => {
-            this.settle = resolve5;
+          this.donePromise = new Promise((resolve6) => {
+            this.settle = resolve6;
           });
         }
         this.pump();
@@ -97263,14 +98084,14 @@ var init_planner = __esm({
 });
 
 // src/agent/fleet/store.ts
-import { mkdirSync as mkdirSync8, readFileSync as readFileSync13, writeFileSync as writeFileSync5, existsSync as existsSync14 } from "node:fs";
-import { homedir as homedir12 } from "node:os";
-import { basename as basename9, dirname as dirname9, join as join17 } from "node:path";
+import { mkdirSync as mkdirSync10, readFileSync as readFileSync13, writeFileSync as writeFileSync6, existsSync as existsSync14 } from "node:fs";
+import { homedir as homedir13 } from "node:os";
+import { basename as basename9, dirname as dirname11, join as join18 } from "node:path";
 function projectKey5(cwd2) {
   return basename9(cwd2) || "default";
 }
 function storePath2(cwd2) {
-  return join17(homedir12(), ".config", "oxagen", "fleet", `${projectKey5(cwd2)}.json`);
+  return join18(homedir13(), ".config", "oxagen", "fleet", `${projectKey5(cwd2)}.json`);
 }
 function read2(cwd2) {
   const path2 = storePath2(cwd2);
@@ -97284,8 +98105,8 @@ function read2(cwd2) {
 function write2(cwd2, data) {
   const path2 = storePath2(cwd2);
   try {
-    mkdirSync8(dirname9(path2), { recursive: true });
-    writeFileSync5(path2, JSON.stringify(data, null, 2), "utf8");
+    mkdirSync10(dirname11(path2), { recursive: true });
+    writeFileSync6(path2, JSON.stringify(data, null, 2), "utf8");
   } catch {
   }
 }
@@ -97322,21 +98143,21 @@ function openPlanStore(cwd2) {
     }
   };
 }
-var init_store2 = __esm({
+var init_store3 = __esm({
   "src/agent/fleet/store.ts"() {
   }
 });
 
 // src/agent/fleet/git-isolation.ts
 import { execFile } from "node:child_process";
-import { mkdirSync as mkdirSync9, existsSync as existsSync15, readFileSync as readFileSync14, appendFileSync as appendFileSync3 } from "node:fs";
-import { join as join18 } from "node:path";
+import { mkdirSync as mkdirSync11, existsSync as existsSync15, readFileSync as readFileSync14, appendFileSync as appendFileSync3 } from "node:fs";
+import { join as join19 } from "node:path";
 import { promisify as promisify2 } from "node:util";
-function defaultGitRunner(repoRoot) {
+function defaultGitRunner(repoRoot2) {
   return async (args, cwd2) => {
     try {
       const { stdout, stderr } = await pexec("git", args, {
-        cwd: cwd2 ?? repoRoot,
+        cwd: cwd2 ?? repoRoot2,
         maxBuffer: 64 * 1024 * 1024
       });
       return { stdout, stderr, code: 0 };
@@ -97380,7 +98201,7 @@ var init_git_isolation = __esm({
         this.git = opts.git ?? defaultGitRunner(opts.repoRoot);
         this.ns = safeSegment(opts.namespace ?? "fleet");
         this.repoRoot = opts.repoRoot;
-        this.root = opts.root ?? join18(opts.repoRoot, ".oxagen", "worktrees");
+        this.root = opts.root ?? join19(opts.repoRoot, ".oxagen", "worktrees");
       }
       /**
        * Resolve the repo toplevel, freeze the base ref, enable `rerere`, and keep
@@ -97393,13 +98214,13 @@ var init_git_isolation = __esm({
           throw new Error(`git isolation: not a git repository (${top.stderr.trim()})`);
         }
         this.repoRoot = top.stdout.trim();
-        if (!this.opts.root) this.root = join18(this.repoRoot, ".oxagen", "worktrees");
+        if (!this.opts.root) this.root = join19(this.repoRoot, ".oxagen", "worktrees");
         const head = await this.git(["rev-parse", "HEAD"]);
         if (head.code !== 0) throw new Error(`git isolation: cannot resolve HEAD (${head.stderr.trim()})`);
         this.baseRef = head.stdout.trim();
         await this.git(["config", "rerere.enabled", "true"]);
         this.excludeWorktreeRoot();
-        mkdirSync9(this.root, { recursive: true });
+        mkdirSync11(this.root, { recursive: true });
         this.initialized = true;
       }
       /** The frozen base every task fans out from. */
@@ -97414,7 +98235,7 @@ var init_git_isolation = __esm({
         await this.init();
         const seg = safeSegment(taskId);
         const branch = `fleet/${this.ns}/t/${seg}`;
-        const path2 = join18(this.root, this.ns, `t-${seg}`);
+        const path2 = join19(this.root, this.ns, `t-${seg}`);
         await this.removeWorktree(path2);
         await this.git(["branch", "-D", branch]);
         const add = await this.git(["worktree", "add", "-b", branch, path2, this.baseRef]);
@@ -97517,7 +98338,7 @@ var init_git_isolation = __esm({
       async ensureIntegration() {
         if (this.integration) return this.integration;
         const branch = `fleet/${this.ns}/integration`;
-        const path2 = join18(this.root, this.ns, "integration");
+        const path2 = join19(this.root, this.ns, "integration");
         await this.removeWorktree(path2);
         await this.git(["branch", "-D", branch]);
         const add = await this.git(["worktree", "add", "-b", branch, path2, this.baseRef]);
@@ -97542,7 +98363,7 @@ var init_git_isolation = __esm({
       /** Keep `.oxagen/` out of git's untracked list without touching tracked .gitignore. */
       excludeWorktreeRoot() {
         try {
-          const exclude = join18(this.repoRoot, ".git", "info", "exclude");
+          const exclude = join19(this.repoRoot, ".git", "info", "exclude");
           if (!existsSync15(exclude)) return;
           const body = readFileSync14(exclude, "utf8");
           if (!body.split("\n").some((l) => l.trim() === ".oxagen/")) {
@@ -97578,10 +98399,10 @@ var init_fleet_summary = __esm({
 function tierColor(tier) {
   return tier === "fast" ? "#34D399" : tier === "balanced" ? theme.cyan : theme.violet;
 }
-function glyphFor(status, frame) {
+function glyphFor(status, frame2) {
   switch (status) {
     case "running":
-      return { ch: SPINNER2[frame % SPINNER2.length] ?? "\u280B", color: theme.cyan };
+      return { ch: SPINNER2[frame2 % SPINNER2.length] ?? "\u280B", color: theme.cyan };
     case "done":
       return { ch: "\u2713", color: "#34D399" };
     case "failed":
@@ -97605,12 +98426,12 @@ function RosterHeader() {
 }
 function AgentRow({
   agent: agent2,
-  frame,
+  frame: frame2,
   showDetail
 }) {
   const running = agent2.status === "running";
   const dim = agent2.status === "queued" || agent2.status === "cancelled";
-  const { ch, color } = glyphFor(agent2.status, frame);
+  const { ch, color } = glyphFor(agent2.status, frame2);
   const tokens = agent2.usage.inputTokens + agent2.usage.outputTokens;
   const tool2 = agent2.lastTool ?? (running ? "thinking\u2026" : agent2.status === "queued" ? "waiting" : "\u2014");
   const detail = agent2.status === "failed" && agent2.error ? agent2.error : agent2.logTail.replace(/\s+/g, " ").trim();
@@ -97668,7 +98489,7 @@ function DispatchInput({
       setValue((v) => v + input);
     }
   });
-  return /* @__PURE__ */ import_react45.default.createElement(Box_default, { borderStyle: "round", borderColor: theme.cyan, paddingX: 1 }, /* @__PURE__ */ import_react45.default.createElement(Text, { color: theme.cyan, bold: true }, theme.pointer, " "), /* @__PURE__ */ import_react45.default.createElement(Text, null, value, /* @__PURE__ */ import_react45.default.createElement(Text, { color: theme.cyan }, "\u2588")), value ? null : /* @__PURE__ */ import_react45.default.createElement(Text, { dimColor: true }, " describe a task and press enter to dispatch an agent"));
+  return /* @__PURE__ */ import_react45.default.createElement(Box_default, { borderStyle: "round", borderColor: theme.cyan, paddingX: 1 }, /* @__PURE__ */ import_react45.default.createElement(Text, { color: theme.cyan, bold: true }, theme.pointer, " "), /* @__PURE__ */ import_react45.default.createElement(Text, null, value, /* @__PURE__ */ import_react45.default.createElement(Text, { color: theme.cyan }, "\u2588")), value ? null : /* @__PURE__ */ import_react45.default.createElement(Text, { dimColor: true }, " submit a prompt using enter to dispatch an agent"));
 }
 var import_react45;
 var init_dispatch_input = __esm({
@@ -97687,7 +98508,7 @@ function FleetApp({
 }) {
   const { exit } = use_app_default();
   const [snap, setSnap] = (0, import_react46.useState)(() => fleet.snapshot());
-  const [frame, setFrame] = (0, import_react46.useState)(0);
+  const [frame2, setFrame] = (0, import_react46.useState)(0);
   const [phase, setPhase] = (0, import_react46.useState)(goal && plan ? "planning" : "running");
   const [error40, setError] = (0, import_react46.useState)("");
   const [showDetail, setShowDetail] = (0, import_react46.useState)(false);
@@ -97744,12 +98565,12 @@ function FleetApp({
     return /* @__PURE__ */ import_react46.default.createElement(Box_default, { paddingX: 1, marginY: 1 }, /* @__PURE__ */ import_react46.default.createElement(Text, { color: "#F87171", bold: true }, "\u2717", " "), /* @__PURE__ */ import_react46.default.createElement(Text, { wrap: "wrap" }, error40));
   }
   const agents = snap.agents;
-  return /* @__PURE__ */ import_react46.default.createElement(Box_default, { flexDirection: "column", paddingX: 1 }, /* @__PURE__ */ import_react46.default.createElement(FleetSummary, { snap }), phase === "planning" ? /* @__PURE__ */ import_react46.default.createElement(Box_default, { paddingX: 1, marginBottom: 1 }, /* @__PURE__ */ import_react46.default.createElement(Text, { color: "#FBBF24", bold: true }, SPINNER3[frame % SPINNER3.length] ?? "\u280B", " "), /* @__PURE__ */ import_react46.default.createElement(Text, { color: "#FBBF24" }, "Planning "), /* @__PURE__ */ import_react46.default.createElement(Text, { dimColor: true, wrap: "truncate" }, goal), /* @__PURE__ */ import_react46.default.createElement(Text, { dimColor: true }, " \u2026")) : null, agents.length > 0 ? /* @__PURE__ */ import_react46.default.createElement(RosterHeader, null) : null, agents.length === 0 && phase !== "planning" ? /* @__PURE__ */ import_react46.default.createElement(Box_default, { paddingX: 1, marginBottom: 1 }, /* @__PURE__ */ import_react46.default.createElement(Text, { dimColor: true }, "No agents yet \u2014 type a task below and press Enter.")) : null, agents.map((a) => /* @__PURE__ */ import_react46.default.createElement(
+  return /* @__PURE__ */ import_react46.default.createElement(Box_default, { flexDirection: "column", paddingX: 1 }, /* @__PURE__ */ import_react46.default.createElement(FleetSummary, { snap }), phase === "planning" ? /* @__PURE__ */ import_react46.default.createElement(Box_default, { paddingX: 1, marginBottom: 1 }, /* @__PURE__ */ import_react46.default.createElement(Text, { color: "#FBBF24", bold: true }, SPINNER3[frame2 % SPINNER3.length] ?? "\u280B", " "), /* @__PURE__ */ import_react46.default.createElement(Text, { color: "#FBBF24" }, "Planning "), /* @__PURE__ */ import_react46.default.createElement(Text, { dimColor: true, wrap: "truncate" }, goal), /* @__PURE__ */ import_react46.default.createElement(Text, { dimColor: true }, " \u2026")) : null, agents.length > 0 ? /* @__PURE__ */ import_react46.default.createElement(RosterHeader, null) : null, agents.length === 0 && phase !== "planning" ? /* @__PURE__ */ import_react46.default.createElement(Box_default, { paddingX: 1, marginBottom: 1 }, /* @__PURE__ */ import_react46.default.createElement(Text, { dimColor: true }, "No agents yet \u2014 type a task below and press Enter.")) : null, agents.map((a) => /* @__PURE__ */ import_react46.default.createElement(
     AgentRow,
     {
       key: a.taskId,
       agent: a,
-      frame,
+      frame: frame2,
       showDetail
     }
   )), /* @__PURE__ */ import_react46.default.createElement(Box_default, { marginTop: 1 }, /* @__PURE__ */ import_react46.default.createElement(
@@ -97817,7 +98638,7 @@ var init_fleet_view = __esm({
     init_orchestrator();
     init_planner();
     init_memory();
-    init_store2();
+    init_store3();
     init_git_isolation();
     init_project_context();
     init_loader();
@@ -97853,7 +98674,7 @@ var init_client4 = __esm({
        * Throws if the daemon is unreachable.
        */
       async send(request) {
-        return new Promise((resolve5, reject) => {
+        return new Promise((resolve6, reject) => {
           const socket = net.createConnection(this.socketPath);
           let buffer = "";
           socket.on("connect", () => {
@@ -97867,7 +98688,7 @@ var init_client4 = __esm({
               try {
                 const response = JSON.parse(line);
                 socket.destroy();
-                resolve5(response);
+                resolve6(response);
                 return;
               } catch {
               }
@@ -97906,6 +98727,39 @@ var init_client4 = __esm({
         if (response.error) throw new Error(response.error.message);
         return response.result;
       }
+      /**
+       * Incrementally (re)build + persist the code graph for `root` (defaults to the
+       * daemon's workspace root). Returns the index delta + totals.
+       */
+      async buildCodeGraph(root) {
+        const response = await this.send({
+          id: crypto.randomUUID(),
+          method: "graph.build",
+          params: root ? { root } : {}
+        });
+        if (response.error) throw new Error(response.error.message);
+        return response.result;
+      }
+      /** Fuzzy symbol search across the persisted code graph. */
+      async searchCodeGraph(pattern, limit = 20, root) {
+        const response = await this.send({
+          id: crypto.randomUUID(),
+          method: "graph.search",
+          params: { pattern, limit, ...root ? { root } : {} }
+        });
+        if (response.error) throw new Error(response.error.message);
+        return response.result;
+      }
+      /** k-hop neighborhood of a code node from the persisted code graph. */
+      async queryCodeGraph(nodeId, opts = {}) {
+        const response = await this.send({
+          id: crypto.randomUUID(),
+          method: "graph.query",
+          params: { nodeId, ...opts }
+        });
+        if (response.error) throw new Error(response.error.message);
+        return response.result;
+      }
       /**
        * Ask the daemon to shut down gracefully.
        */
@@ -97965,8 +98819,8 @@ var init_server = __esm({
         this.server = net2.createServer((socket) => {
           this.handleConnection(socket);
         });
-        await new Promise((resolve5, reject) => {
-          this.server.listen(this.config.socketPath, () => resolve5());
+        await new Promise((resolve6, reject) => {
+          this.server.listen(this.config.socketPath, () => resolve6());
           this.server.on("error", reject);
         });
         fs6.writeFileSync(this.config.pidFile, String(process.pid));
@@ -98047,6 +98901,8 @@ var init_server = __esm({
             return this.handleQuery(request.params);
           case "recall":
             return this.handleRecall(request.params);
+          case "graph.build":
+            return this.handleGraphBuild(request.params);
           case "graph.query":
             return this.handleGraphQuery(request.params);
           case "graph.search":
@@ -98079,11 +98935,54 @@ var init_server = __esm({
         await store.close();
         return { record: record2 };
       }
-      async handleGraphQuery(_params) {
-        return { nodes: [], edges: [] };
+      /**
+       * Open the persistent code-graph store, ensure `root` is indexed (building it
+       * on first use so even the very first query after a cold daemon start
+       * answers), load the graph, run `fn`, and always close the store. Opening
+       * per-request — like the engram handlers above — keeps the DuckDB write lock
+       * short so a co-located `oxagen` agent process can use the same store between
+       * requests instead of being starved.
+       */
+      async withCodeGraph(root, fn) {
+        const { createCodeGraphStore: createCodeGraphStore2 } = await Promise.resolve().then(() => (init_store(), store_exports));
+        const { buildAndPersistCodeGraph: buildAndPersistCodeGraph2 } = await Promise.resolve().then(() => (init_builder(), builder_exports));
+        const store = createCodeGraphStore2({ duckdbPath: this.config.codeGraphDbPath });
+        try {
+          if ((await store.stats(root)).files === 0) {
+            await buildAndPersistCodeGraph2(root, store);
+          }
+          return fn(await store.loadGraph(root));
+        } finally {
+          await store.close();
+        }
       }
-      async handleGraphSearch(_params) {
-        return { results: [] };
+      /** Incrementally (re)build + persist the code graph; report the delta + totals. */
+      async handleGraphBuild(params) {
+        const root = params.root ?? this.config.workspaceRoot;
+        const { createCodeGraphStore: createCodeGraphStore2 } = await Promise.resolve().then(() => (init_store(), store_exports));
+        const { buildAndPersistCodeGraph: buildAndPersistCodeGraph2 } = await Promise.resolve().then(() => (init_builder(), builder_exports));
+        const store = createCodeGraphStore2({ duckdbPath: this.config.codeGraphDbPath });
+        try {
+          const delta = await buildAndPersistCodeGraph2(root, store);
+          return { root, ...delta, ...await store.stats(root) };
+        } finally {
+          await store.close();
+        }
+      }
+      async handleGraphQuery(params) {
+        const root = params.root ?? this.config.workspaceRoot;
+        const { neighbors: neighbors2 } = await Promise.resolve().then(() => (init_query(), query_exports));
+        return this.withCodeGraph(
+          root,
+          (graph2) => neighbors2(graph2, params.nodeId, params.hops ?? 1, params.edgeTypes)
+        );
+      }
+      async handleGraphSearch(params) {
+        const root = params.root ?? this.config.workspaceRoot;
+        const { searchSymbols: searchSymbols2 } = await Promise.resolve().then(() => (init_query(), query_exports));
+        return this.withCodeGraph(root, (graph2) => ({
+          results: searchSymbols2(graph2, params.pattern, params.limit ?? 20)
+        }));
       }
       sendResponse(socket, response) {
         try {
@@ -98102,8 +99001,8 @@ __export(lifecycle_exports, {
   startDaemon: () => startDaemon,
   stopDaemon: () => stopDaemon
 });
-import { join as join19 } from "node:path";
-import { homedir as homedir13 } from "node:os";
+import { join as join20 } from "node:path";
+import { homedir as homedir14 } from "node:os";
 import { existsSync as existsSync18, readFileSync as readFileSync15 } from "node:fs";
 import { spawn as spawn3 } from "node:child_process";
 function getClient() {
@@ -98124,19 +99023,20 @@ async function startDaemon(opts) {
       logFile: LOG_FILE,
       idleTimeoutMs: 30 * 60 * 1e3,
       workspaceRoot: process.cwd(),
-      dbPath: DB_PATH
+      dbPath: DB_PATH,
+      codeGraphDbPath: CODE_GRAPH_DB_PATH
     });
     console.log("Starting context daemon (foreground)\u2026");
     console.log(`  Socket: ${SOCKET_PATH}`);
     console.log(`  DB:     ${DB_PATH}`);
     await daemon2.start();
     console.log("\u2713 Daemon running. Press Ctrl+C to stop.");
-    await new Promise((resolve5) => {
+    await new Promise((resolve6) => {
       process.on("SIGINT", () => {
-        void daemon2.shutdown().then(resolve5);
+        void daemon2.shutdown().then(resolve6);
       });
       process.on("SIGTERM", () => {
-        void daemon2.shutdown().then(resolve5);
+        void daemon2.shutdown().then(resolve6);
       });
     });
   } else {
@@ -98157,6 +99057,7 @@ async function startDaemon(opts) {
           OXAGEN_DAEMON_PID: PID_FILE,
           OXAGEN_DAEMON_LOG: LOG_FILE,
           OXAGEN_DAEMON_DB: DB_PATH,
+          OXAGEN_DAEMON_CODE_GRAPH_DB: CODE_GRAPH_DB_PATH,
           OXAGEN_DAEMON_CWD: process.cwd()
         }
       }
@@ -98219,15 +99120,16 @@ function formatUptime2(seconds) {
   if (m > 0) return `${m}m ${s}s`;
   return `${s}s`;
 }
-var DAEMON_DIR, SOCKET_PATH, PID_FILE, LOG_FILE, DB_PATH;
+var DAEMON_DIR, SOCKET_PATH, PID_FILE, LOG_FILE, DB_PATH, CODE_GRAPH_DB_PATH;
 var init_lifecycle = __esm({
   "src/daemon/lifecycle.ts"() {
     init_client4();
-    DAEMON_DIR = join19(homedir13(), ".config", "oxagen");
-    SOCKET_PATH = join19(DAEMON_DIR, "daemon.sock");
-    PID_FILE = join19(DAEMON_DIR, "daemon.pid");
-    LOG_FILE = join19(DAEMON_DIR, "daemon.log");
-    DB_PATH = join19(DAEMON_DIR, "context.duckdb");
+    DAEMON_DIR = join20(homedir14(), ".config", "oxagen");
+    SOCKET_PATH = join20(DAEMON_DIR, "daemon.sock");
+    PID_FILE = join20(DAEMON_DIR, "daemon.pid");
+    LOG_FILE = join20(DAEMON_DIR, "daemon.log");
+    DB_PATH = join20(DAEMON_DIR, "context.duckdb");
+    CODE_GRAPH_DB_PATH = join20(DAEMON_DIR, "code-graph.duckdb");
   }
 });
 
@@ -98471,11 +99373,11 @@ __export(graph_pull_exports, {
   graphStorePath: () => graphStorePath,
   handleGraphPull: () => handleGraphPull
 });
-import { mkdirSync as mkdirSync10 } from "node:fs";
-import { homedir as homedir14 } from "node:os";
-import { dirname as dirname10, join as join20 } from "node:path";
+import { mkdirSync as mkdirSync12 } from "node:fs";
+import { homedir as homedir15 } from "node:os";
+import { dirname as dirname12, join as join21 } from "node:path";
 function graphStorePath(workspaceSlug) {
-  return join20(homedir14(), ".config", "oxagen", "graph", `${workspaceSlug}.duckdb`);
+  return join21(homedir15(), ".config", "oxagen", "graph", `${workspaceSlug}.duckdb`);
 }
 function splitCsv2(value) {
   if (!value) return void 0;
@@ -98494,7 +99396,7 @@ async function handleGraphPull(opts) {
   }
   const duckdbPath = opts._duckdbPath ?? graphStorePath(workspace);
   if (duckdbPath !== ":memory:") {
-    mkdirSync10(dirname10(duckdbPath), { recursive: true });
+    mkdirSync12(dirname12(duckdbPath), { recursive: true });
   }
   const store = createGraphStore({ duckdbPath });
   try {
@@ -98669,6 +99571,505 @@ var init_graph_status = __esm({
   }
 });
 
+// src/commands/graph.push.ts
+var graph_push_exports = {};
+__export(graph_push_exports, {
+  getCodePushCursor: () => getCodePushCursor,
+  handleGraphPush: () => handleGraphPush,
+  homedir: () => homedir16,
+  join: () => join22
+});
+import { execFileSync as execFileSync2 } from "node:child_process";
+import { mkdirSync as mkdirSync13 } from "node:fs";
+import { dirname as dirname13, join as join22 } from "node:path";
+import { homedir as homedir16 } from "node:os";
+import { createHash as createHash3 } from "node:crypto";
+function git(args, cwd2) {
+  return execFileSync2("git", args, { cwd: cwd2, encoding: "utf-8" }).trim();
+}
+function headSha(cwd2) {
+  return git(["rev-parse", "HEAD"], cwd2);
+}
+function gitRoot(cwd2) {
+  return git(["rev-parse", "--show-toplevel"], cwd2);
+}
+function repoId(root) {
+  try {
+    const url2 = git(["remote", "get-url", "origin"], root);
+    if (url2) return url2;
+  } catch {
+  }
+  return createHash3("sha256").update(root).digest("hex").slice(0, 16);
+}
+function changedFiles(fromSha, toSha, root) {
+  const raw = git(["diff", "--name-status", `${fromSha}..${toSha}`], root);
+  const added = [];
+  const deleted = [];
+  for (const line of raw.split("\n")) {
+    if (!line.trim()) continue;
+    const [status, ...rest] = line.split("	");
+    const file2 = rest.join("	").trim();
+    if (!file2 || !SUPPORTED_EXTENSIONS_RE.test(file2)) continue;
+    if (status === "D") {
+      deleted.push(file2);
+    } else {
+      added.push(file2);
+    }
+  }
+  return { added, deleted };
+}
+function allTrackedFiles(root) {
+  const raw = git(["ls-files"], root);
+  return raw.split("\n").map((f) => f.trim()).filter((f) => f && SUPPORTED_EXTENSIONS_RE.test(f));
+}
+async function buildEnvelopeForFiles(files, root, repo) {
+  if (files.length === 0) return { nodes: [], edges: [] };
+  const graph2 = await buildCodeGraph(root);
+  const nodeMap = /* @__PURE__ */ new Map();
+  const edgeList = [];
+  const nodesByPath = /* @__PURE__ */ new Map();
+  for (const [, n] of graph2.nodes) {
+    if (n.kind === "file") {
+      const fileKey = `code:${repo}:${n.path}`;
+      const pushNode = {
+        key: fileKey,
+        labels: ["SourceFile"],
+        displayName: n.name,
+        properties: { path: n.path, language: n.language },
+        isSystem: true
+      };
+      nodeMap.set(fileKey, pushNode);
+      const existing = nodesByPath.get(n.path) ?? [];
+      existing.push(fileKey);
+      nodesByPath.set(n.path, existing);
+    } else {
+      const symbolKey = `code:${repo}:${n.path}#${n.name}:${n.kind}`;
+      const props = {
+        path: n.path,
+        language: n.language,
+        kind: n.kind,
+        lineStart: n.range.start,
+        lineEnd: n.range.end
+      };
+      if (n.signature) props["signature"] = n.signature;
+      if (n.docstring) props["docstring"] = n.docstring;
+      const pushNode = {
+        key: symbolKey,
+        labels: ["Symbol"],
+        displayName: n.name,
+        properties: props,
+        isSystem: true
+      };
+      nodeMap.set(symbolKey, pushNode);
+      const existing = nodesByPath.get(n.path) ?? [];
+      existing.push(symbolKey);
+      nodesByPath.set(n.path, existing);
+      nodeMap.set(n.id, pushNode);
+    }
+  }
+  const idToKey = /* @__PURE__ */ new Map();
+  for (const [, n] of graph2.nodes) {
+    if (n.kind === "file") {
+      idToKey.set(n.id, `code:${repo}:${n.path}`);
+    } else {
+      idToKey.set(n.id, `code:${repo}:${n.path}#${n.name}:${n.kind}`);
+    }
+  }
+  const fileSet = new Set(files);
+  const filteredNodeKeys = /* @__PURE__ */ new Set();
+  for (const [, n] of graph2.nodes) {
+    if (fileSet.has(n.path)) {
+      const key = idToKey.get(n.id);
+      if (key) filteredNodeKeys.add(key);
+    }
+  }
+  for (const e of graph2.edges) {
+    const srcKey = idToKey.get(e.source);
+    const tgtKey = idToKey.get(e.target);
+    if (!srcKey || !tgtKey) continue;
+    if (!filteredNodeKeys.has(srcKey) && !filteredNodeKeys.has(tgtKey)) continue;
+    const relType = EDGE_TYPE_MAP[e.type] ?? e.type.toUpperCase();
+    edgeList.push({ sourceKey: srcKey, targetKey: tgtKey, type: relType });
+  }
+  const nodesInEdges = /* @__PURE__ */ new Set();
+  for (const e of edgeList) {
+    nodesInEdges.add(e.sourceKey);
+    nodesInEdges.add(e.targetKey);
+  }
+  const finalNodeKeys = /* @__PURE__ */ new Set([...filteredNodeKeys, ...nodesInEdges]);
+  const nodes = [];
+  for (const key of finalNodeKeys) {
+    const n = nodeMap.get(key);
+    if (n) nodes.push(n);
+  }
+  return { nodes, edges: edgeList };
+}
+async function handleGraphPush(opts) {
+  const org = getOrgId();
+  const workspace = getWorkspaceId();
+  if (!org || !workspace) {
+    process.stderr.write(
+      "Missing org or workspace. Run `oxagen config` or set OXAGEN_ORG_ID / OXAGEN_WORKSPACE_ID.\n"
+    );
+    process.exitCode = 1;
+    return;
+  }
+  let root;
+  try {
+    root = opts._gitRoot ?? gitRoot(process.cwd());
+  } catch {
+    process.stderr.write(
+      "Not inside a git repository. `oxagen graph push` requires a git repo.\n"
+    );
+    process.exitCode = 1;
+    return;
+  }
+  const repo = opts.repo ?? repoId(root);
+  const duckdbPath = opts._duckdbPath ?? graphStorePath(workspace);
+  if (duckdbPath !== ":memory:") {
+    mkdirSync13(dirname13(duckdbPath), { recursive: true });
+  }
+  const store = createGraphStore({ duckdbPath });
+  try {
+    const currentSha = headSha(root);
+    const lastSha = opts.full ? null : await store.getCodeCursor(org, workspace, repo);
+    let addedFiles;
+    let deletedFiles;
+    if (!lastSha) {
+      addedFiles = allTrackedFiles(root);
+      deletedFiles = [];
+    } else if (lastSha === currentSha) {
+      if (opts.json) {
+        process.stdout.write(
+          JSON.stringify({ upToDate: true, sha: currentSha, repo }) + "\n"
+        );
+      } else {
+        process.stdout.write(
+          `Already up to date (HEAD: ${currentSha.slice(0, 8)}).
+`
+        );
+      }
+      return;
+    } else {
+      const changed = changedFiles(lastSha, currentSha, root);
+      addedFiles = changed.added;
+      deletedFiles = changed.deleted;
+    }
+    const { nodes, edges } = await buildEnvelopeForFiles(addedFiles, root, repo);
+    const tombstones = deletedFiles.map((f) => ({ key: `code:${repo}:${f}` }));
+    const idempotencyKey = lastSha ? `code:${repo}:${lastSha}:${currentSha}` : `code:${repo}:full:${currentSha}`;
+    const envelope = {
+      source: "code",
+      idempotencyKey,
+      nodes,
+      edges,
+      ...tombstones.length > 0 ? { tombstones } : {}
+    };
+    if (nodes.length === 0 && edges.length === 0 && tombstones.length === 0) {
+      if (opts.json) {
+        process.stdout.write(
+          JSON.stringify({ pushed: false, reason: "no changes", sha: currentSha, repo }) + "\n"
+        );
+      } else {
+        process.stdout.write(`No source file changes since ${lastSha?.slice(0, 8) ?? "start"}.
+`);
+      }
+      await store.setCodeCursor(org, workspace, repo, currentSha);
+      return;
+    }
+    process.stderr.write(
+      `Pushing ${nodes.length} node(s), ${edges.length} edge(s), ${tombstones.length} tombstone(s)...
+`
+    );
+    const result = await apiPost("graph/sync/push", envelope);
+    await store.setCodeCursor(org, workspace, repo, currentSha);
+    const summary = {
+      nodesUpserted: result.nodesUpserted,
+      edgesUpserted: result.edgesUpserted,
+      tombstoned: result.tombstoned,
+      sha: currentSha,
+      repo,
+      fromSha: lastSha ?? "(full)"
+    };
+    if (opts.json) {
+      process.stdout.write(JSON.stringify(summary, null, 2) + "\n");
+    } else {
+      process.stdout.write(
+        `Pushed to workspace graph:
+  Nodes upserted:  ${result.nodesUpserted}
+  Edges upserted:  ${result.edgesUpserted}
+  Tombstoned:      ${result.tombstoned}
+  From SHA:        ${(lastSha ?? "(full)").toString().slice(0, 8)}
+  To SHA (HEAD):   ${currentSha.slice(0, 8)}
+  Repo:            ${repo}
+`
+      );
+    }
+  } finally {
+    await store.close();
+  }
+}
+async function getCodePushCursor(org, workspace, repo, duckdbPath) {
+  const store = createGraphStore({ duckdbPath });
+  try {
+    return await store.getCodeCursor(org, workspace, repo);
+  } finally {
+    await store.close();
+  }
+}
+var EDGE_TYPE_MAP, SUPPORTED_EXTENSIONS_RE;
+var init_graph_push = __esm({
+  "src/commands/graph.push.ts"() {
+    init_builder();
+    init_api2();
+    init_config();
+    init_src();
+    init_graph_pull();
+    EDGE_TYPE_MAP = {
+      calls: "CALLS",
+      imports: "IMPORTS",
+      exports: "EXPORTS",
+      extends: "EXTENDS",
+      implements: "IMPLEMENTS",
+      contains: "CONTAINS",
+      references: "REFERENCES"
+    };
+    SUPPORTED_EXTENSIONS_RE = /\.(ts|tsx|js|jsx|mjs|cjs|py|go|rs|java|kt)$/;
+  }
+});
+
+// src/agent/lineage-projection.ts
+import { basename as basename10 } from "node:path";
+function sessionNodeKey(sessionKey) {
+  return `lineage:session:${sessionKey}`;
+}
+function turnNodeKey(turnId) {
+  return `lineage:turn:${turnId}`;
+}
+function toolNodeKey(turnId, idx) {
+  return `lineage:tool:${turnId}:${idx}`;
+}
+function modelNodeKey(slug) {
+  return `lineage:model:${slug}`;
+}
+function fileNodeKey(repo, relativePath) {
+  return `code:${repo}:${relativePath}`;
+}
+function projectTrace(trace2, opts = {}) {
+  const sessionKey = opts.sessionKey ?? (trace2.cwd ? basename10(trace2.cwd) || "default" : "default");
+  const nodes = [];
+  const edges = [];
+  const emittedKeys = /* @__PURE__ */ new Set();
+  function pushNode(n) {
+    if (!emittedKeys.has(n.key)) {
+      emittedKeys.add(n.key);
+      nodes.push(n);
+    }
+  }
+  const sKey = sessionNodeKey(sessionKey);
+  pushNode({
+    key: sKey,
+    labels: ["AgentSession"],
+    displayName: sessionKey,
+    properties: { cwd: trace2.cwd ?? "" },
+    isSystem: true
+  });
+  const tKey = turnNodeKey(trace2.id);
+  pushNode({
+    key: tKey,
+    labels: ["AgentTurn"],
+    displayName: `Turn ${trace2.id.slice(0, 8)}`,
+    properties: {
+      turnId: trace2.id,
+      createdAt: trace2.createdAt,
+      originalPrompt: trace2.originalPrompt.slice(0, 500),
+      selectedModel: trace2.selectedModel,
+      selectedTier: trace2.selectedTier,
+      inputTokens: trace2.usage.inputTokens ?? 0,
+      outputTokens: trace2.usage.outputTokens ?? 0,
+      totalTokens: trace2.usage.inputTokens + trace2.usage.outputTokens,
+      costUsd: trace2.usage.costUsd,
+      durationMs: trace2.durationMs,
+      finalComplete: trace2.finalComplete,
+      steps: trace2.steps
+    },
+    isSystem: true
+  });
+  edges.push({ sourceKey: sKey, targetKey: tKey, type: "HAS_TURN" });
+  if (trace2.selectedModel) {
+    const mKey = modelNodeKey(trace2.selectedModel);
+    pushNode({
+      key: mKey,
+      labels: ["AIModel"],
+      displayName: trace2.selectedModel,
+      properties: { slug: trace2.selectedModel, tier: trace2.selectedTier },
+      isSystem: true
+    });
+    edges.push({ sourceKey: tKey, targetKey: mKey, type: "USED_MODEL" });
+  }
+  if (opts.repo && trace2.filesTouched.length > 0) {
+    for (const relativePath of trace2.filesTouched) {
+      if (!relativePath) continue;
+      const fKey = fileNodeKey(opts.repo, relativePath);
+      pushNode({
+        key: fKey,
+        labels: ["SourceFile"],
+        displayName: basename10(relativePath),
+        properties: { path: relativePath },
+        isSystem: true
+      });
+      edges.push({ sourceKey: tKey, targetKey: fKey, type: "TOUCHED_FILE" });
+    }
+  }
+  const toolEvents = trace2.toolEvents ?? [];
+  for (let idx = 0; idx < toolEvents.length; idx++) {
+    const te = toolEvents[idx];
+    const teKey = toolNodeKey(trace2.id, idx);
+    pushNode({
+      key: teKey,
+      labels: ["AgentToolCall"],
+      displayName: te.name,
+      properties: {
+        name: te.name,
+        durationMs: te.durationMs,
+        ok: te.ok,
+        // input is already truncated by the loop — safe to store
+        input: te.input
+      },
+      isSystem: true
+    });
+    edges.push({ sourceKey: tKey, targetKey: teKey, type: "USED_TOOL" });
+  }
+  return { nodes, edges };
+}
+function mergeEnvelopes(envelopes) {
+  const nodeMap = /* @__PURE__ */ new Map();
+  const edges = [];
+  for (const env4 of envelopes) {
+    for (const n of env4.nodes) {
+      if (!nodeMap.has(n.key)) nodeMap.set(n.key, n);
+    }
+    edges.push(...env4.edges);
+  }
+  return { nodes: Array.from(nodeMap.values()), edges };
+}
+var init_lineage_projection = __esm({
+  "src/agent/lineage-projection.ts"() {
+  }
+});
+
+// src/commands/graph.lineage.ts
+var graph_lineage_exports = {};
+__export(graph_lineage_exports, {
+  handleGraphLineage: () => handleGraphLineage
+});
+import { mkdirSync as mkdirSync14 } from "node:fs";
+import { dirname as dirname14 } from "node:path";
+import { execFileSync as execFileSync3 } from "node:child_process";
+import { createHash as createHash4 } from "node:crypto";
+function runGit(args, cwd2) {
+  return execFileSync3("git", args, { cwd: cwd2, encoding: "utf-8" }).trim();
+}
+function resolveGitRoot(cwd2) {
+  try {
+    return runGit(["rev-parse", "--show-toplevel"], cwd2);
+  } catch {
+    return null;
+  }
+}
+function resolveRepoId(root) {
+  try {
+    const url2 = runGit(["remote", "get-url", "origin"], root);
+    if (url2) return url2;
+  } catch {
+  }
+  return createHash4("sha256").update(root).digest("hex").slice(0, 16);
+}
+async function handleGraphLineage(opts) {
+  const org = getOrgId();
+  const workspace = getWorkspaceId();
+  if (!org || !workspace) {
+    process.stderr.write(
+      "Missing org or workspace. Run `oxagen config` or set OXAGEN_ORG_ID / OXAGEN_WORKSPACE_ID.\n"
+    );
+    process.exitCode = 1;
+    return;
+  }
+  const cwd2 = opts._gitRoot ?? process.cwd();
+  const gitRoot2 = opts._gitRoot ?? resolveGitRoot(cwd2);
+  const repo = opts.repo ?? (gitRoot2 ? resolveRepoId(gitRoot2) : void 0);
+  const duckdbPath = opts._duckdbPath ?? graphStorePath(workspace);
+  if (duckdbPath !== ":memory:") {
+    mkdirSync14(dirname14(duckdbPath), { recursive: true });
+  }
+  const store = createGraphStore({ duckdbPath });
+  try {
+    const lastSyncedAt = await store.getLineageCursor(org, workspace);
+    const traceStore = opts._traceStore ?? openTraceStore(cwd2);
+    const allTraces = traceStore.list();
+    const pendingTraces = lastSyncedAt ? allTraces.filter((t) => t.createdAt > lastSyncedAt) : allTraces;
+    if (pendingTraces.length === 0) {
+      const msg = lastSyncedAt ? `Lineage up to date \u2014 no new turns since ${new Date(lastSyncedAt).toISOString()}.
+` : "No turns found in the local trace store. Run at least one CLI query first.\n";
+      if (opts.json) {
+        process.stdout.write(JSON.stringify({ upToDate: true }) + "\n");
+      } else {
+        process.stdout.write(msg);
+      }
+      return;
+    }
+    const envelopes = pendingTraces.map(
+      (trace2) => projectTrace(trace2, { repo })
+    );
+    const merged = mergeEnvelopes(envelopes);
+    const minCreatedAt = Math.min(...pendingTraces.map((t) => t.createdAt));
+    const maxCreatedAt = Math.max(...pendingTraces.map((t) => t.createdAt));
+    const idempotencyKey = `lineage:${org}:${workspace}:${minCreatedAt}:${maxCreatedAt}`;
+    process.stderr.write(
+      `Syncing ${pendingTraces.length} turn(s): ${merged.nodes.length} node(s), ${merged.edges.length} edge(s)...
+`
+    );
+    const result = await apiPost("graph/sync/push", {
+      source: "lineage",
+      idempotencyKey,
+      nodes: merged.nodes,
+      edges: merged.edges
+    });
+    await store.setLineageCursor(org, workspace, maxCreatedAt);
+    const summary = {
+      nodesUpserted: result.nodesUpserted,
+      edgesUpserted: result.edgesUpserted,
+      tombstoned: result.tombstoned,
+      turnsSynced: pendingTraces.length,
+      lastSyncedAt: maxCreatedAt
+    };
+    if (opts.json) {
+      process.stdout.write(JSON.stringify(summary, null, 2) + "\n");
+    } else {
+      process.stdout.write(
+        `Lineage synced to workspace graph:
+  Turns synced:    ${pendingTraces.length}
+  Nodes upserted:  ${result.nodesUpserted}
+  Edges upserted:  ${result.edgesUpserted}
+  Last turn at:    ${new Date(maxCreatedAt).toISOString()}
+`
+      );
+    }
+  } finally {
+    await store.close();
+  }
+}
+var init_graph_lineage = __esm({
+  "src/commands/graph.lineage.ts"() {
+    init_api2();
+    init_config();
+    init_trace_store();
+    init_lineage_projection();
+    init_src();
+    init_graph_pull();
+  }
+});
+
 // src/commands/config.ts
 var config_exports = {};
 __export(config_exports, {
@@ -98771,8 +100172,8 @@ var init_runtime = __esm({
 });
 
 // src/settings/write.ts
-import { readFileSync as readFileSync16, writeFileSync as writeFileSync7, existsSync as existsSync20, mkdirSync as mkdirSync11 } from "node:fs";
-import { dirname as dirname11 } from "node:path";
+import { readFileSync as readFileSync16, writeFileSync as writeFileSync8, existsSync as existsSync20, mkdirSync as mkdirSync15 } from "node:fs";
+import { dirname as dirname15 } from "node:path";
 function readScopeDoc(path2) {
   if (!existsSync20(path2)) return {};
   const parsed = JSON.parse(readFileSync16(path2, "utf8"));
@@ -98783,8 +100184,8 @@ function readScopeDoc(path2) {
 }
 function writeScopeDoc(path2, doc) {
   const validated = oxagenSettingsSchema.parse(doc);
-  mkdirSync11(dirname11(path2), { recursive: true });
-  writeFileSync7(path2, JSON.stringify(validated, null, 2) + "\n", "utf8");
+  mkdirSync15(dirname15(path2), { recursive: true });
+  writeFileSync8(path2, JSON.stringify(validated, null, 2) + "\n", "utf8");
   clearSettingsCache();
 }
 function writeSettingsValue(opts) {
@@ -99015,14 +100416,14 @@ var init_settings2 = __esm({
 });
 
 // src/agents/write.ts
-import { writeFileSync as writeFileSync8, existsSync as existsSync22, mkdirSync as mkdirSync12 } from "node:fs";
-import { join as join21, dirname as dirname12 } from "node:path";
+import { writeFileSync as writeFileSync9, existsSync as existsSync22, mkdirSync as mkdirSync16 } from "node:fs";
+import { join as join23, dirname as dirname16 } from "node:path";
 function scaffoldAgent(opts) {
-  const dir = opts.dir ?? join21(opts.cwd ?? process.cwd(), ".oxagen", "agents");
-  const path2 = join21(dir, `${opts.name}.md`);
+  const dir = opts.dir ?? join23(opts.cwd ?? process.cwd(), ".oxagen", "agents");
+  const path2 = join23(dir, `${opts.name}.md`);
   if (existsSync22(path2)) return { path: path2, created: false };
-  mkdirSync12(dirname12(path2), { recursive: true });
-  writeFileSync8(path2, TEMPLATE2(opts.name), "utf8");
+  mkdirSync16(dirname16(path2), { recursive: true });
+  writeFileSync9(path2, TEMPLATE2(opts.name), "utf8");
   return { path: path2, created: true };
 }
 var TEMPLATE2;
@@ -99110,14 +100511,14 @@ var init_agent = __esm({
 });
 
 // src/slash/write.ts
-import { writeFileSync as writeFileSync9, existsSync as existsSync23, mkdirSync as mkdirSync13 } from "node:fs";
-import { join as join22, dirname as dirname13 } from "node:path";
+import { writeFileSync as writeFileSync10, existsSync as existsSync23, mkdirSync as mkdirSync17 } from "node:fs";
+import { join as join24, dirname as dirname17 } from "node:path";
 function scaffoldCommand(opts) {
-  const dir = opts.dir ?? join22(opts.cwd ?? process.cwd(), ".oxagen", "commands");
-  const path2 = join22(dir, `${opts.name}.md`);
+  const dir = opts.dir ?? join24(opts.cwd ?? process.cwd(), ".oxagen", "commands");
+  const path2 = join24(dir, `${opts.name}.md`);
   if (existsSync23(path2)) return { path: path2, created: false };
-  mkdirSync13(dirname13(path2), { recursive: true });
-  writeFileSync9(path2, TEMPLATE3(opts.name), "utf8");
+  mkdirSync17(dirname17(path2), { recursive: true });
+  writeFileSync10(path2, TEMPLATE3(opts.name), "utf8");
   return { path: path2, created: true };
 }
 var TEMPLATE3;
@@ -99698,8 +101099,8 @@ async function handleSecretExport(opts) {
   );
   process.stderr.write("\u26A0 access recorded (actor, time)\n");
   if (opts.out) {
-    const { writeFileSync: writeFileSync10 } = await import("fs");
-    writeFileSync10(opts.out, dotenv, "utf8");
+    const { writeFileSync: writeFileSync11 } = await import("fs");
+    writeFileSync11(opts.out, dotenv, "utf8");
     process.stdout.write(`\u2713 wrote ${env4.length} key(s) to ${opts.out}
 `);
   } else {
@@ -99876,6 +101277,21 @@ graph.command("status").description("Show the state of the local workspace-graph
   const { handleGraphStatus: handleGraphStatus2 } = await Promise.resolve().then(() => (init_graph_status(), graph_status_exports));
   await handleGraphStatus2(opts);
 });
+graph.command("push").description(
+  "Compute a git code delta and push it to the workspace knowledge graph (ADR-018 up-sync)"
+).option("--full", "Ignore the saved cursor and push all tracked source files", false).option("--repo <id>", "Override the repo identifier").option("--json", "Output summary as JSON").action(async (opts) => {
+  const { handleGraphPush: handleGraphPush2 } = await Promise.resolve().then(() => (init_graph_push(), graph_push_exports));
+  await handleGraphPush2({ full: opts.full, repo: opts.repo, json: opts.json });
+});
+graph.command("lineage").description(
+  "Push CLI session execution lineage into the workspace knowledge graph (ADR-018 slice 3)"
+).option(
+  "--repo <id>",
+  "Override the repo identifier used to link touched files to the code subgraph"
+).option("--json", "Output summary as JSON").action(async (opts) => {
+  const { handleGraphLineage: handleGraphLineage2 } = await Promise.resolve().then(() => (init_graph_lineage(), graph_lineage_exports));
+  await handleGraphLineage2({ repo: opts.repo, json: opts.json });
+});
 program2.command("config").description("View or set configuration (api key, model, etc.)").argument("[key]", "Config key to get/set").argument("[value]", "Value to set (omit to read)").action(async (key, value) => {
   const { handleConfig: handleConfig2 } = await Promise.resolve().then(() => (init_config2(), config_exports));
   await handleConfig2(key, value);
@@ -100048,9 +101464,9 @@ secret.command("export").description("Export resolved secrets as .env (recorded
   const { handleSecretExport: handleSecretExport2 } = await Promise.resolve().then(() => (init_secret(), secret_exports));
   await handleSecretExport2(opts);
 });
-async function main() {
+async function main2() {
   const { applySettingsToEnv: applySettingsToEnv2 } = await Promise.resolve().then(() => (init_runtime(), runtime_exports));
   applySettingsToEnv2();
   await program2.parseAsync(process.argv);
 }
-void main();
+void main2();