ctxman 3.1.0 → 3.2.7

package/.ctxman/llm-profiles.json

@@ -1,6 +1,6 @@
 {
   "version": "4.0.0",
-  "lastUpdated": "2026-10-09",
+  "lastUpdated": "2026-10-30",
   "description": "Context windows, output limits and list prices (USD per 1M tokens, standard tier) of current models. Check prices with the provider before budgeting.",
   "sources": {
     "Anthropic": [
@@ -390,7 +390,7 @@
           {
             "above": 272000,
             "input": 20,
-            "output": 75.0
+            "output": 75
           }
         ]
       },
@@ -421,7 +421,7 @@
           {
             "above": 272000,
             "input": 4,
-            "output": 15.0
+            "output": 15
           }
         ]
       },
@@ -485,7 +485,7 @@
           {
             "above": 272000,
             "input": 4,
-            "output": 18.0
+            "output": 18
           }
         ]
       },
@@ -515,7 +515,7 @@
           {
             "above": 272000,
             "input": 10,
-            "output": 45.0
+            "output": 45
           }
         ]
       },
@@ -606,7 +606,7 @@
       "supportedLanguages": "all",
       "strengths": ["json-mode", "function-calling"],
       "tier": "frontier",
-      "status": "deprecated",
+      "status": "retired",
       "pricing": {
         "input": 10,
         "output": 30

package/README.md

@@ -81,14 +81,18 @@ If you find this tool helpful, consider buying me a coffee! Your support helps m
 
 ### 🧰 Context Commands
 
-- 📦 **`ctxman pack`** - File contents in one LLM-ready document (Claude XML, Markdown, JSON) with signatures-only compression and a hard token budget
-- 🗺️ **`ctxman map`** - Ranked repository map (import graph + git history) within a token budget
-- 🔍 **`ctxman pr`** - Review context for a branch: log, changed methods, diff, related tests
-- 🧭 **`ctxman why`** - Why code looks as it does: commits, linked issues and PRs, owners, co-changed files, ADRs and tests from local git history
-- 🔎 **`ctxman search`** - Ranked (BM25) search over functions and code chunks
+- 📦 **`ctxman pack`** - File contents in one LLM-ready document (Claude XML, Markdown, JSON) with signatures-only compression, a hard token budget, and multi-repo `--repo` packing
+- 🎯 **`ctxman focus`** - Pack a file or `file:symbol` together with its `N`-hop import and AST symbol call neighborhood within a token budget (`--repo` for multi-repo; `docs/commands/focus.md`)
+- 🧭 **`ctxman task`** - Task-driven auto context bundle: hybrid search seeds, 1-hop AST call & import code, 2-hop compressed signatures, and repo map (`--repo` for multi-repo; `docs/commands/task.md`)
+- 🩺 **`ctxman diagnose`** - Stack-trace & failure root-cause bundle: implicated frames, enclosing methods, 1-hop AST call & import neighbors, and git history (`--repo` for multi-repo; `docs/commands/diagnose.md`)
+- 👥 **`ctxman who`** - Rank domain experts via surviving `git blame -w` share, recency-decayed commits, and `CODEOWNERS` (`--repo` for multi-repo; `docs/commands/who.md`)
+- 🗺️ **`ctxman map`** - Ranked repository map (import graph + git history) within a token budget (`--repo` for multi-repo)
+- 🔍 **`ctxman pr`** - Review context for a branch: log, changed methods, diff, related tests (`--repo` for multi-repo; `docs/commands/pr.md`)
+- 🧭 **`ctxman why`** - Why code looks as it does: commits, linked issues and PRs, optional GitHub/GitLab discussions (`--discussions`), owners, co-changed files, ADRs and tests (`--repo` for multi-repo; `docs/commands/why.md`)
+- 🔎 **`ctxman search`** - Ranked (BM25) and hybrid BM25 + semantic vector RRF (`--hybrid`) search over functions and code chunks across one or more `--repo` roots
 - 🔢 **`ctxman count`** - Token count for one model, exact for Claude through Anthropic's API
 - 🔌 **`ctxman mcp`** - MCP server with one-command setup for Claude Desktop, Claude Code, Cursor, VS Code and Windsurf
-- 🛡️ **`ctxman policy` / `ctxman audit`** - Export policy (deny rules, required redaction, token limits) and an audit log
+- 🛡️ **`ctxman policy` / `ctxman audit`** - Export policy (deny rules, required redaction, token limits) and an audit log (`--repo` for multi-repo workspace checks and merged audit trails)
 - 🤖 **GitHub Action and Docker image** - Token budgets and model fit as a CI check
 
 ### 🎨 User Interface
@@ -184,7 +188,7 @@ ctxman --cli --target-model claude-sonnet-5-5
 #    ✅ PERFECT FIT! Your entire codebase fits in one context.
 ```
 
-Some of the supported models (run `ctxman --list-llms` for the full list, checked 2026-10-09):
+Some of the supported models (run `ctxman --list-llms` for the full list, checked 2026-10-30):
 
 | Vendor    | Model ID                 | Context | Output | $ in/out per 1M tokens |
 | --------- | ------------------------ | ------- | ------ | ---------------------- |
@@ -275,6 +279,7 @@ tests, with your question last.
 ctxman pr                                    # HEAD against origin/HEAD, main or master
 ctxman pr --base release/2.x --budget 30k    # drops the least important parts to fit
 ctxman pr --staged --ask "Is this safe to merge?" --copy
+ctxman pr --base main --repo ../billing-api --repo ../checkout-web --budget 24k
 ctxman pr --style xml -o review.xml
 ```
 
@@ -289,6 +294,7 @@ repository record about a file, a function or a line range.
 ctxman why src/cart.js:total                   # function / method / class (Class.method)
 ctxman why src/cart.js#L40-L72 --patches       # line range, with each commit's diff
 ctxman why lib/server.js --since "1 year ago"  # whole file, following renames
+ctxman why billing-api/src/invoice.js:createInvoice --repo ../billing-api --repo ../checkout-web
 ctxman why src/cart.js:total --ask "Why round here?" --budget 8k --copy
 ```
 
@@ -322,7 +328,8 @@ ctxman mcp                                   # run the server (stdio)
 The installer merges into the client's configuration and keeps a `.bak` of the previous file.
 `--root` confines every tool to one directory. Tools: `analyze_codebase`, `generate_context`,
 `git_diff`, `search_code`, `list_methods`, `repo_map`, `pr_context`, `get_symbol`,
-`count_tokens`, `explain_history`, `pack_context`. Details:
+`count_tokens`, `explain_history`, `pack_context`, `focus_context`, `check_policy`, `audit_log`, `ask_codebase`, `task_context`, `diagnose_failure`, `find_experts`, `query_knowledge_graph`.
+Details:
 [docs/commands/mcp.md](docs/commands/mcp.md).
 
 ### 🛡️ Export Policy and Audit Log
@@ -332,8 +339,8 @@ A policy in the repository (`.ctxman/policy.json`), or one an organisation point
 
 ```bash
 ctxman policy init       # starter policy: deny .env, keys and secrets/, require redaction
-ctxman policy check      # validate and show the effective policy
-ctxman audit             # what was exported, when, by whom, how many tokens
+ctxman policy check      # validate and show the effective policy (--repo DIR for multi-repo)
+ctxman audit             # what was exported, when, by whom, how many tokens (--repo DIR for multi-repo)
 ctxman --cli --respect-ignore-files .cursorignore,.aiexclude   # honour other AI tools' ignore files
 ```
 

package/bin/cli.js

@@ -94,11 +94,31 @@ async function main() {
     return;
   }
 
+  if (command === 'who') {
+    runSubcommand('./cm-who.js', args.slice(1));
+    return;
+  }
+
   if (command === 'pack') {
     runSubcommand('./cm-pack.js', args.slice(1));
     return;
   }
 
+  if (command === 'focus') {
+    runSubcommand('./cm-focus.js', args.slice(1));
+    return;
+  }
+
+  if (command === 'task') {
+    runSubcommand('./cm-task.js', args.slice(1));
+    return;
+  }
+
+  if (command === 'diagnose') {
+    runSubcommand('./cm-diagnose.js', args.slice(1));
+    return;
+  }
+
   if (args.includes('--help') || args.includes('-h')) {
     printHelp();
     return;
@@ -708,14 +728,33 @@ function printHelp() {
   console.log('  --changed-only           Analyze only files with uncommitted changes');
   console.log('  --changed-since REF      Analyze files changed since commit/branch');
   console.log();
+  console.log('Task-Driven Context (v3.2.0):');
+  console.log('  task "<goal>" [options]  Build task-driven context bundle around a goal');
+  console.log('    --repo DIR             Additional repository root for workspace (repeatable)');
+  console.log('    --budget TOKENS        Token budget (default: 32000, supports 32k)');
+  console.log('    --model MODEL          Optimize for specific target model');
+  console.log('    --format FORMAT        markdown (default), json, xml');
+  console.log();
+  console.log('Failure Diagnosis (v3.2.0):');
+  console.log('  diagnose [file|text]     Analyze stack traces and failure logs');
+  console.log('    --repo DIR             Additional repository root for workspace (repeatable)');
+  console.log('    --stdin                Read failure log or stack trace from stdin');
+  console.log('    --budget TOKENS        Token budget (default: 24000)');
+  console.log('    --json                 Output in JSON format');
+  console.log();
   console.log('Platform Features (v3.0.0):');
   console.log('  serve [options]          Start REST API server');
   console.log('    --port PORT            Server port (default: 3000)');
   console.log('    --auth-token TOKEN     API authentication token');
   console.log('    --host HOST            Address to bind (default: localhost)');
   console.log('    --cors                 Send CORS headers (off by default)');
-  console.log('  watch [options]          Watch mode with auto-analysis');
+  console.log('  watch [options]          Watch mode with auto-analysis & live RAG/graph sync');
+  console.log('    --repo DIR             Additional repository root to watch (repeatable)');
   console.log('    --debounce MS          Debounce delay (default: 1000ms)');
+  console.log('    --bootstrap            Seed full SQLite vector & graph store on startup');
+  console.log('    --no-sync              Disable incremental SQLite vector & graph sync');
+  console.log('    --no-sync-rag          Disable incremental SQLite vector embedding sync');
+  console.log('    --no-sync-graph        Disable incremental SQLite knowledge-graph sync');
   console.log();
   console.log('General Options:');
   console.log('  -h, --help               Show this help');
@@ -754,22 +793,34 @@ function printHelp() {
   console.log('  pack [path] [options]    File contents in one LLM-ready document (xml, markdown,');
   console.log('                           plain, json); --compress, --budget, --split');
   console.log('                           (ctxman pack --help for options)');
+  console.log(
+    '  focus FILE [path]        Target file plus its imports and importers up to --depth N'
+  );
+  console.log('                           (ctxman focus --help for options)');
   console.log('  map [path] [options]     Ranked repository map within a token budget');
   console.log('                           (ctxman map --help for options)');
   console.log('  pr [--base REF] [--head REF] [path]');
   console.log('                           Review context for a branch: log, changed methods,');
-  console.log('                           diff, related tests (ctxman pr --help)');
+  console.log('                           diff, related tests (--repo DIR, ctxman pr --help)');
   console.log('  why FILE[:SYMBOL|#L10-L40] [options]');
   console.log('                           Why the code looks like this: commits, references,');
-  console.log('                           owners, co-changes, docs and tests (ctxman why --help)');
+  console.log(
+    '                           owners, co-changes, docs and tests (--repo DIR, ctxman why --help)'
+  );
+  console.log('  who TARGET [options]     Find code & domain experts across git blame, history,');
+  console.log('                           and CODEOWNERS (--repo DIR for multi-repo workspaces)');
   console.log('  search QUERY [path]      Ranked (BM25) search over methods and code chunks');
   console.log('  count [path|-] [--model ID] [--api]');
   console.log('                           Count tokens for a model (exact for Claude with --api)');
   console.log('  mcp [install|uninstall|config]');
   console.log('                           Start the MCP server or add it to an MCP client');
-  console.log('  policy [check|init]      Show or create the export policy (.ctxman/policy.json)');
-  console.log('  audit [--since DATE]     Show the export audit log written under a policy');
-  console.log('  ask QUESTION             Answer a question from the indexed codebase');
+  console.log(
+    '  policy [check|init]      Show or create the export policy (--repo DIR for workspaces)'
+  );
+  console.log('  audit [--since DATE]     Show the export audit log (--repo DIR for workspaces)');
+  console.log(
+    '  ask QUESTION [options]   Answer a question from the indexed codebase (--repo DIR)'
+  );
   console.log('  update [check|install|rollback|channel NAME|info]');
   console.log('                           Check for and manage ctxman updates');
   console.log();
@@ -971,8 +1022,39 @@ async function runWatchMode(args) {
     ? parseInt(args[args.indexOf('--debounce') + 1], 10) || 1000
     : 1000;
 
-  const watcher = new FileWatcher(projectRoot, { debounce });
-  const analyzer = new IncrementalAnalyzer({ methodLevel: args.includes('-m') });
+  const repos = [];
+  for (let i = 0; i < args.length; i++) {
+    if (args[i] === '--repo' && args[i + 1] && !args[i + 1].startsWith('-')) {
+      repos.push(resolve(projectRoot, args[i + 1]));
+      i++;
+    }
+  }
+
+  const noSync = args.includes('--no-sync');
+  const syncRag = !noSync && !args.includes('--no-sync-rag');
+  const syncGraph = !noSync && !args.includes('--no-sync-graph');
+
+  const watcher = new FileWatcher(projectRoot, { debounce, repos });
+  const analyzer = new IncrementalAnalyzer({
+    projectRoot,
+    repos,
+    methodLevel: args.includes('-m'),
+    syncRag,
+    syncGraph,
+  });
+
+  if (repos.length > 0) {
+    console.log(
+      `   🔗 Multi-repo workspace: ${watcher.repos.map((r) => `${r.alias} (${r.root})`).join(', ')}`
+    );
+  }
+
+  if (args.includes('--bootstrap')) {
+    const boot = await analyzer.bootstrapSync(projectRoot, { repos });
+    console.log(
+      `   🔄 Bootstrapped SQLite store: ${boot.ragUpserted} embedded (${boot.ragSkipped} unchanged), ${boot.graphNodes} graph nodes, ${boot.graphEdges} edges`
+    );
+  }
 
   // Handle file changes
   watcher.on('file:changed', async (event) => {
@@ -984,6 +1066,17 @@ async function runWatchMode(args) {
   analyzer.on('analysis:complete', (event) => {
     console.log(`   ✅ Analysis complete: ${event.analysis.tokens} tokens (${event.elapsed}ms)`);
 
+    if (event.sync?.rag) {
+      console.log(
+        `   🧠 Vector store (${event.sync.rag.action}): ${event.sync.rag.totalDocuments} indexed files`
+      );
+    }
+    if (event.sync?.graph) {
+      console.log(
+        `   🕸️  Knowledge graph (${event.sync.graph.action}): ${event.sync.graph.totalNodes} nodes, ${event.sync.graph.totalEdges} edges`
+      );
+    }
+
     const stats = analyzer.getStats();
     console.log(
       `   📊 Total: ${stats.totalFiles} files, ${stats.totalTokens.toLocaleString()} tokens`
@@ -993,6 +1086,11 @@ async function runWatchMode(args) {
   // Handle file deletion
   analyzer.on('file:deleted', (event) => {
     console.log(`   🗑️  File deleted: ${event.file} (-${event.oldTokens} tokens)`);
+    if (event.sync?.rag || event.sync?.graph) {
+      console.log(
+        `   🧹 Synced deletion: ${event.sync.rag?.totalDocuments ?? 0} indexed docs, ${event.sync.graph?.totalNodes ?? 0} graph nodes`
+      );
+    }
   });
 
   // Start watching
@@ -1005,6 +1103,7 @@ async function runWatchMode(args) {
   process.on('SIGINT', () => {
     console.log('\n\n🛑 Stopping watch mode...');
     watcher.stop();
+    analyzer.close();
     process.exit(0);
   });
 }

package/bin/cm-ask.js

@@ -1,100 +1,104 @@
 #!/usr/bin/env node
-import { VectorStoreFactory } from '../lib/rag/VectorStoreFactory.js';
-import { TransformersEmbeddingProvider } from '../lib/rag/EmbeddingProvider.js';
-import { Indexer } from '../lib/rag/Indexer.js';
-import { FileDataSource } from '../lib/rag/sources/FileDataSource.js';
-import path from 'path';
-import fs from 'fs/promises';
+import { parseArgs } from 'node:util';
+import path from 'node:path';
+import { askCodebase, DEFAULT_ASK_LIMIT } from '../lib/rag/ask.js';
+
+const HELP = `Usage: ctxman ask "<question>" [options]
+
+Semantic search over the codebase (single-repo or multi-repo workspace) using the
+local SQLite embedding index (.ctxman/self-knowledge/index.sqlite).
+
+Options:
+      --root <dir>      Primary project root (default: cwd)
+      --repo <dir>      Additional repository root for multi-repo workspace (repeatable)
+  -n, --limit <n>       Maximum snippets to return (default: ${DEFAULT_ASK_LIMIT})
+      --json            Output result as JSON
+  -h, --help            Show this help
+`;
+
+const OPTIONS = {
+  root: { type: 'string' },
+  repo: { type: 'string', multiple: true },
+  limit: { type: 'string', short: 'n' },
+  json: { type: 'boolean' },
+  help: { type: 'boolean', short: 'h' },
+};
 
 async function main() {
-  const args = process.argv.slice(2);
-  const query = args.join(' ');
+  const rawArgs = process.argv.slice(2);
+  let values = {};
+  let positionals = rawArgs;
 
-  if (!query) {
-    console.error('Usage: ctxman ask "Your query here"');
-    process.exit(1);
+  try {
+    const parsed = parseArgs({ args: rawArgs, options: OPTIONS, allowPositionals: true });
+    values = parsed.values;
+    positionals = parsed.positionals;
+  } catch {
+    // Allow unquoted queries that might contain dashes if parseArgs fails
+    positionals = rawArgs;
   }
 
-  // 1. Initialize RAG Components
-  let provider;
-  try {
-    // Try to load local transformers
-    provider = new TransformersEmbeddingProvider();
-    // Lazy init will handle model download on first use
-  } catch (e) {
-    console.error('⚠️ Failed to initialize embedding provider:', e.message);
-    process.exit(1);
+  if (values.help) {
+    process.stdout.write(HELP);
+    return;
   }
 
-  // Use LanceDB in .ctxman/self-knowledge
-  const storePath = path.join(process.cwd(), '.ctxman', 'self-knowledge');
-  const store = VectorStoreFactory.create('lancedb', provider, { path: storePath });
+  const query = positionals.join(' ').trim();
+
+  if (!query) {
+    console.error('Usage: ctxman ask "Your query here" [--repo <dir>] [--limit <n>] [--json]');
+    process.exit(1);
+  }
 
-  // 2. Check if indexed
-  const isIndexed = await checkIndexExists(storePath);
+  const rootDir = values.root ? path.resolve(process.cwd(), values.root) : process.cwd();
+  const extraRepos = Array.isArray(values.repo)
+    ? values.repo.map((r) => path.resolve(process.cwd(), r))
+    : undefined;
+  const limit = values.limit ? Number.parseInt(values.limit, 10) : undefined;
 
-  if (!isIndexed) {
-    console.log('📚 Index not found. Auto-indexing current project...');
-    await indexProject(store);
+  if (!values.json) {
+    console.log(`🔍 Searching for: "${query}"...`);
   }
 
-  // 3. Search
-  console.log(`🔍 Searching for: "${query}"...`);
-  const results = await store.search(query, 5); // Get top 5
+  const result = await askCodebase(rootDir, query, {
+    repos: extraRepos,
+    limit,
+    onProgress: (event) => {
+      if (values.json) return;
+      if (event === 'indexing') {
+        console.log('📚 Index not found. Auto-indexing current project...');
+        console.log('⏳ Indexing files (this may take a moment)...');
+      } else if (event === 'indexed') {
+        console.log('✅ Indexing complete.');
+      }
+    },
+  });
 
+  if (values.json) {
+    process.stdout.write(`${JSON.stringify(result, null, 2)}\n`);
+    return;
+  }
+
+  const { results, removedByPolicy } = result;
+  if (removedByPolicy > 0) {
+    console.log(`🛡️  Removed ${removedByPolicy} results denied by the export policy`);
+  }
   if (results.length === 0) {
     console.log('❌ No relevant context found.');
     return;
   }
 
-  // 4. Display Results (or feed to LLM if we had one configured)
   console.log(`\nFound ${results.length} relevant snippets:\n`);
-
   results.forEach((r, i) => {
-    console.log(`[${i + 1}] ${r.metadata.filename} (Score: ${r.score?.toFixed(4)})`);
+    console.log(`[${i + 1}] ${r.file} (Score: ${r.score?.toFixed(4)})`);
     console.log('─'.repeat(40));
-    // Show a small snippet around the match if possible, but we stored full text.
-    // Let's just show the first 200 chars or so.
     console.log(r.text.substring(0, 300).replace(/\n/g, ' ') + '...');
     console.log('\n');
   });
-
-  // Future: Pass `results` to an LLM API to generate a real answer.
-  // For now, this validates the retrieval pipeline works from CLI.
-}
-
-async function checkIndexExists(storePath) {
-  try {
-    await fs.access(storePath);
-    // Also check if it has tables (LanceDB creates folders)
-    const files = await fs.readdir(storePath);
-    return files.length > 0;
-  } catch {
-    return false;
-  }
-}
-
-async function indexProject(store) {
-  const indexer = new Indexer(store);
-  const fileSource = new FileDataSource();
-  indexer.registerSource(fileSource);
-
-  console.log('⏳ Indexing files (this may take a moment)...');
-  try {
-    await indexer.index('local-files', {
-      targetDir: process.cwd(),
-      include: ['.js', '.md', '.ts', '.json'], // Configurable?
-      exclude: ['node_modules', '.git', 'dist', 'coverage', '.ctxman'],
-    });
-  } catch (error) {
-    console.error(`❌ ${error.message}`);
-    process.exit(1);
-  }
-  console.log('✅ Indexing complete.');
 }
 
 main().catch((err) => {
-  // Message only: missing optional dependencies surface here with an install hint
+  // Message only: missing optional dependencies and indexing failures surface here
   console.error('❌ Error:', err.message);
   process.exit(1);
 });

package/bin/cm-audit.js

@@ -6,8 +6,9 @@
 
 import path from 'path';
 import {
-  loadPolicy,
+  auditLogFiles,
   readAuditLog,
+  readWorkspaceAuditLogs,
   filterAuditEvents,
   formatAuditTable,
   parseSince,
@@ -17,6 +18,27 @@ import {
 
 const DEFAULT_TABLE_LIMIT = 50;
 
+function collectRepos(args) {
+  const repos = [];
+  for (let i = 0; i < args.length; i++) {
+    const arg = args[i];
+    if (arg === '--repo') {
+      const value = args[++i];
+      if (value === undefined || value.startsWith('--')) {
+        throw new Error('--repo needs a value');
+      }
+      repos.push(value);
+    } else if (arg.startsWith('--repo=')) {
+      const value = arg.slice('--repo='.length);
+      if (!value) {
+        throw new Error('--repo needs a value');
+      }
+      repos.push(value);
+    }
+  }
+  return repos;
+}
+
 function main() {
   const args = process.argv.slice(2);
 
@@ -29,6 +51,7 @@ function main() {
   let since = null;
   let limit = json ? 0 : DEFAULT_TABLE_LIMIT;
   let file = null;
+  let repos = [];
 
   try {
     const sinceValue = valueOf(args, '--since');
@@ -43,12 +66,21 @@ function main() {
     }
 
     file = valueOf(args, '--file') ?? null;
+    repos = collectRepos(args);
+    if (file && repos.length > 0) {
+      throw new Error('Cannot combine --file and --repo');
+    }
   } catch (error) {
     console.error(`❌ ${error.message}`);
     process.exitCode = 2;
     return;
   }
 
+  if (repos.length > 0) {
+    runWorkspaceAudit({ repos, since, limit, json });
+    return;
+  }
+
   const files = file ? [path.resolve(file)] : auditFiles();
   const { events, skipped, missing } = readAuditLog(files);
   const selected = filterAuditEvents(events, { since, limit });
@@ -82,17 +114,56 @@ function main() {
   }
 }
 
-// The policy's audit logs; the default location when no policy names one
-function auditFiles() {
-  const root = process.cwd();
+function runWorkspaceAudit({ repos, since, limit, json }) {
+  let result;
   try {
-    const policy = loadPolicy(root);
-    if (policy.audit.paths.length > 0) return policy.audit.paths;
+    result = readWorkspaceAuditLogs(process.cwd(), repos, { since, limit });
   } catch (error) {
+    console.error(`❌ ${error.message}`);
+    process.exitCode = 2;
+    return;
+  }
+
+  for (const err of result.policyErrors) {
+    console.error(`⚠️  [${err.repo}] ${err.message}`);
+  }
+
+  if (json) {
+    console.log(JSON.stringify(result.events, null, 2));
+  } else if (result.files.length === 0) {
+    console.log(`No audit logs found across ${result.repos.length} repositories.`);
+    console.log(
+      `Exports are logged while ${POLICY_FILE} has "audit": {"enabled": true} (ctxman policy init).`
+    );
+  } else if (result.events.length === 0) {
+    console.log(
+      since ? `No exports recorded since ${since.toISOString()}.` : 'No exports recorded.'
+    );
+  } else {
+    console.log(formatAuditTable(result.events));
+    console.log();
+    const shown =
+      result.events.length < result.total
+        ? `Showing the last ${result.events.length} of ${result.total} events (--limit 0 shows all)`
+        : `${result.events.length} event${result.events.length === 1 ? '' : 's'}`;
+    console.log(`${shown} across ${result.repos.length} repositories (${result.files.join(', ')})`);
+  }
+
+  if (result.skippedLines > 0) {
+    console.error(
+      `⚠️  Skipped ${result.skippedLines} line${result.skippedLines === 1 ? '' : 's'} that are not JSON events`
+    );
+  }
+}
+
+// The policy's audit logs; the default location when no policy names one
+function auditFiles() {
+  const { files, error } = auditLogFiles(process.cwd());
+  if (error) {
     console.error(`⚠️  ${error.message}`);
     console.error(`   Reading the default log ${DEFAULT_AUDIT_PATH} instead.`);
   }
-  return [path.join(root, DEFAULT_AUDIT_PATH)];
+  return files;
 }
 
 function valueOf(args, flag) {
@@ -109,6 +180,8 @@ function printHelp() {
   console.log('ctxman audit - show the export audit log\n');
   console.log('Usage: ctxman audit [options]\n');
   console.log('Options:');
+  console.log('  --repo DIR           Include another repository in the merged audit log');
+  console.log('                       (repeatable)');
   console.log('  --since DATE         Only exports at or after DATE: a date (2026-10-01), an ISO');
   console.log('                       time, or an age such as 30m, 12h, 7d, 2w');
   console.log(`  --limit N            Show the last N exports (default: ${DEFAULT_TABLE_LIMIT};`);