repowisestage 0.0.65 → 0.0.66

package/dist/bin/repowise.js

@@ -22,1391 +22,1398 @@ var init_config_dir = __esm({
   }
 });
 
-// ../listener/dist/process-manager.js
-import { spawn } from "child_process";
-import { openSync, closeSync } from "fs";
-import { readFile as readFile6, writeFile as writeFile7, mkdir as mkdir7, unlink as unlink5 } from "fs/promises";
-import { homedir as homedir2 } from "os";
-import { join as join10 } from "path";
-import { createRequire } from "module";
-import { fileURLToPath } from "url";
-function repowiseDir() {
-  return getConfigDir();
-}
-function pidPath() {
-  return join10(repowiseDir(), "listener.pid");
-}
-function logDirPath() {
-  return join10(repowiseDir(), "logs");
-}
-function resolveListenerCommand() {
-  try {
-    const require2 = createRequire(import.meta.url);
-    const mainPath = require2.resolve("@repowise/listener/main");
-    return { script: mainPath, args: [] };
-  } catch {
-    const bundlePath = fileURLToPath(import.meta.url);
-    return { script: bundlePath, args: ["__listener"] };
-  }
-}
-async function readPid() {
-  try {
-    const content = await readFile6(pidPath(), "utf-8");
-    const pid = parseInt(content.trim(), 10);
-    return Number.isNaN(pid) ? null : pid;
-  } catch (err) {
-    if (err.code === "ENOENT")
-      return null;
-    throw err;
-  }
-}
-function isAlive(pid) {
-  try {
-    process.kill(pid, 0);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function startBackground() {
-  if (await isRunning()) {
-    const pid2 = await readPid();
-    if (pid2)
-      return pid2;
-  }
-  const logDir2 = logDirPath();
-  await mkdir7(logDir2, { recursive: true });
-  const cmd = resolveListenerCommand();
-  const stdoutFd = openSync(join10(logDir2, "listener-stdout.log"), "a");
-  const stderrFd = openSync(join10(logDir2, "listener-stderr.log"), "a");
-  const child = spawn(process.execPath, [cmd.script, ...cmd.args], {
-    detached: true,
-    stdio: ["ignore", stdoutFd, stderrFd],
-    cwd: homedir2(),
-    env: { ...process.env }
-  });
-  child.unref();
-  closeSync(stdoutFd);
-  closeSync(stderrFd);
-  const pid = child.pid;
-  if (!pid)
-    throw new Error("Failed to spawn listener process");
-  await writeFile7(pidPath(), String(pid));
-  return pid;
+// ../../packages/shared/src/types/typed-resolution.ts
+function typedResolutionKey(filePath, propertyName, line, column) {
+  return `${filePath}\0${propertyName}\0${line.toString()}\0${column.toString()}`;
 }
-async function stopProcess() {
-  const pid = await readPid();
-  if (pid === null)
-    return;
-  if (!isAlive(pid)) {
-    await removePidFile();
-    return;
-  }
-  try {
-    process.kill(pid, "SIGTERM");
-  } catch {
+var TYPED_RESOLUTION_SCHEMA_VERSION, ACCEPTED_TYPED_RESOLUTION_SCHEMA_VERSIONS;
+var init_typed_resolution = __esm({
+  "../../packages/shared/src/types/typed-resolution.ts"() {
+    "use strict";
+    TYPED_RESOLUTION_SCHEMA_VERSION = 2;
+    ACCEPTED_TYPED_RESOLUTION_SCHEMA_VERSIONS = [1, 2];
   }
-  const deadline = Date.now() + 5e3;
-  while (Date.now() < deadline && isAlive(pid)) {
-    await new Promise((r) => setTimeout(r, 200));
+});
+
+// ../../packages/shared/src/types/billing.ts
+var init_billing = __esm({
+  "../../packages/shared/src/types/billing.ts"() {
+    "use strict";
   }
-  if (isAlive(pid)) {
-    try {
-      process.kill(pid, "SIGKILL");
-    } catch {
-    }
+});
+
+// ../../packages/shared/src/constants/platforms.ts
+var init_platforms = __esm({
+  "../../packages/shared/src/constants/platforms.ts"() {
+    "use strict";
   }
-  await removePidFile();
-}
-async function isRunning() {
-  const pid = await readPid();
-  if (pid === null)
-    return false;
-  return isAlive(pid);
+});
+
+// ../../packages/shared/src/constants/tiers.ts
+function hasFeature(plan, feature) {
+  const features = TIER_FEATURES[plan] ?? TIER_FEATURES[SUBSCRIPTION_TIERS.FREE];
+  return features[feature] ?? false;
 }
-async function removePidFile() {
-  try {
-    await unlink5(pidPath());
-  } catch {
-  }
+function agentInstructionsVariantForPlan(plan) {
+  return hasFeature(plan, "context") ? "full" : "graph";
 }
-var init_process_manager = __esm({
-  "../listener/dist/process-manager.js"() {
+var SUBSCRIPTION_TIERS, TIER_LIMITS, TIER_FEATURES;
+var init_tiers = __esm({
+  "../../packages/shared/src/constants/tiers.ts"() {
     "use strict";
-    init_config_dir();
+    SUBSCRIPTION_TIERS = {
+      FREE: "free",
+      // `starter` is the legacy $15 tier — kept as a migration alias (with its OLD limits)
+      // until existing Starter subs are price-swapped to Free (pricing v3). Removed after M7.
+      STARTER: "starter",
+      PRO: "pro",
+      TEAM: "team"
+    };
+    TIER_LIMITS = {
+      [SUBSCRIPTION_TIERS.FREE]: {
+        maxRepos: 1,
+        maxSeats: 1,
+        minSeats: 1,
+        maxSyncsPerMonth: 4,
+        // manual-only, hard cap (no overage)
+        maxConcurrentSyncs: 1,
+        freeFullScans: 0,
+        // graph-only: no LLM full scan
+        bedrockEndpoint: "public"
+      },
+      // Legacy alias — retains the OLD Starter limits until existing Starter subs are
+      // migrated to Free, then removed (M7). Do NOT reference for new logic.
+      [SUBSCRIPTION_TIERS.STARTER]: {
+        maxRepos: 1,
+        maxSeats: 1,
+        minSeats: 1,
+        maxSyncsPerMonth: 10,
+        maxConcurrentSyncs: 1,
+        freeFullScans: 1,
+        bedrockEndpoint: "public"
+      },
+      [SUBSCRIPTION_TIERS.PRO]: {
+        maxRepos: 1,
+        maxSeats: 1,
+        minSeats: 1,
+        maxSyncsPerMonth: 20,
+        maxConcurrentSyncs: 2,
+        freeFullScans: 1,
+        bedrockEndpoint: "public"
+      },
+      [SUBSCRIPTION_TIERS.TEAM]: {
+        maxRepos: 1,
+        maxSeats: 999999,
+        minSeats: 3,
+        maxSyncsPerMonth: 30,
+        maxConcurrentSyncs: 10,
+        freeFullScans: 1,
+        bedrockEndpoint: "public"
+      }
+    };
+    TIER_FEATURES = {
+      [SUBSCRIPTION_TIERS.FREE]: {
+        knowledgeGraph: true,
+        mcp: true,
+        context: false,
+        // LLM-generated narrative context docs
+        docs: false,
+        // RepoWise Docs
+        autoSync: false,
+        // auto-sync on merge (Free is manual-only)
+        overage: false
+        // pay-as-you-go syncs (Free is hard-capped)
+      },
+      // Legacy alias — full features until existing Starter subs migrate to Free.
+      [SUBSCRIPTION_TIERS.STARTER]: {
+        knowledgeGraph: true,
+        mcp: true,
+        context: true,
+        docs: true,
+        autoSync: true,
+        overage: true
+      },
+      [SUBSCRIPTION_TIERS.PRO]: {
+        knowledgeGraph: true,
+        mcp: true,
+        context: true,
+        docs: true,
+        autoSync: true,
+        overage: true
+      },
+      [SUBSCRIPTION_TIERS.TEAM]: {
+        knowledgeGraph: true,
+        mcp: true,
+        context: true,
+        docs: true,
+        autoSync: true,
+        overage: true
+      }
+    };
   }
 });
 
-// ../listener/dist/service-installer.js
-var service_installer_exports = {};
-__export(service_installer_exports, {
-  install: () => install,
-  isInstalled: () => isInstalled,
-  isServiceRunning: () => isServiceRunning,
-  stopService: () => stopService,
-  uninstall: () => uninstall
-});
-import { execFile as execFile4 } from "child_process";
-import { writeFile as writeFile8, mkdir as mkdir8, unlink as unlink6 } from "fs/promises";
-import { homedir as homedir3 } from "os";
-import { join as join13 } from "path";
-function exec(cmd, args) {
-  return new Promise((resolve5, reject) => {
-    execFile4(cmd, args, (err, stdout) => {
-      if (err) {
-        reject(err);
-        return;
-      }
-      resolve5(String(stdout ?? ""));
-    });
-  });
+// ../../packages/shared/src/constants/roles.ts
+function hasPermission(role, permission) {
+  return PERMISSIONS[role][permission];
 }
-function plistPath() {
-  return join13(homedir3(), "Library", "LaunchAgents", `${PLIST_LABEL}.plist`);
+function resolveRole(groups) {
+  for (const role of ROLE_PRIORITY) {
+    if (groups.includes(role)) return role;
+  }
+  return ROLES.MEMBER;
 }
-function logDir() {
-  return join13(getConfigDir(), "logs");
-}
-function buildPlist() {
-  const cmd = resolveListenerCommand();
-  const logs = logDir();
-  const programArgs = [process.execPath, cmd.script, ...cmd.args].map((a) => `        <string>${a}</string>`).join("\n");
-  return `<?xml version="1.0" encoding="UTF-8"?>
-<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
-  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
-<plist version="1.0">
-<dict>
-    <key>Label</key>
-    <string>${PLIST_LABEL}</string>
-    <key>ProgramArguments</key>
-    <array>
-${programArgs}
-    </array>
-    <key>RunAtLoad</key>
-    <true/>
-    <key>KeepAlive</key>
-    <true/>
-    <key>StandardOutPath</key>
-    <string>${join13(logs, "listener-stdout.log")}</string>
-    <key>StandardErrorPath</key>
-    <string>${join13(logs, "listener-stderr.log")}</string>
-    <key>ProcessType</key>
-    <string>Background</string>
-    <!--
-      SoftResourceLimits: raise the open-file descriptor limit from the macOS
-      default of 256 to 4096. When multiple LSP child processes (rust-analyzer,
-      jdtls, etc.) share the listener's fd budget they can exhaust the default
-      very quickly, causing EMFILE errors. 4096 matches the system-wide default
-      set by /etc/launchd.conf on modern macOS and gives enough headroom for
-      ~10 concurrent LSP servers each opening ~300 fds.
-
-      MemoryLimit: intentionally NOT set here. The launchd MemoryLimit key
-      (available since macOS 12.3) terminates the entire LaunchAgent when RSS
-      exceeds the threshold \u2014 it cannot be scoped to individual child processes.
-      Killing the listener to evict a memory-hungry rust-analyzer instance is
-      undesirable. Per-child memory pressure is better handled by the LSP
-      process manager (process-manager.ts) or by OS-level memory pressure
-      signals (SIGTERM on macOS, OOM killer on Linux).
-    -->
-    <key>SoftResourceLimits</key>
-    <dict>
-        <key>NumberOfFiles</key>
-        <integer>4096</integer>
-    </dict>
-</dict>
-</plist>`;
-}
-async function darwinInstall() {
-  await mkdir8(logDir(), { recursive: true });
-  await mkdir8(join13(homedir3(), "Library", "LaunchAgents"), { recursive: true });
-  try {
-    await exec("launchctl", ["unload", plistPath()]);
-  } catch {
-  }
-  await writeFile8(plistPath(), buildPlist());
-  await exec("launchctl", ["load", plistPath()]);
-}
-async function darwinUninstall() {
-  try {
-    await exec("launchctl", ["unload", plistPath()]);
-  } catch {
-  }
-  try {
-    await unlink6(plistPath());
-  } catch {
-  }
-}
-async function darwinIsInstalled() {
-  try {
-    const stdout = await exec("launchctl", ["list"]);
-    return stdout.includes(PLIST_LABEL);
-  } catch {
-    return false;
+var ROLES, PERMISSIONS, ROLE_PRIORITY;
+var init_roles = __esm({
+  "../../packages/shared/src/constants/roles.ts"() {
+    "use strict";
+    ROLES = {
+      OWNER: "owner",
+      ADMIN: "admin",
+      REPO_MANAGER: "repo_manager",
+      MEMBER: "member"
+    };
+    PERMISSIONS = {
+      [ROLES.OWNER]: {
+        connectRepos: true,
+        viewSync: true,
+        triggerRetry: true,
+        configWatcher: true,
+        inviteMembers: true,
+        manageBilling: true,
+        configAiTools: true,
+        manageTeam: true
+      },
+      [ROLES.ADMIN]: {
+        connectRepos: true,
+        viewSync: true,
+        triggerRetry: true,
+        configWatcher: true,
+        inviteMembers: true,
+        manageBilling: false,
+        configAiTools: true,
+        manageTeam: true
+      },
+      [ROLES.REPO_MANAGER]: {
+        connectRepos: true,
+        viewSync: true,
+        triggerRetry: true,
+        configWatcher: true,
+        inviteMembers: false,
+        manageBilling: false,
+        configAiTools: true,
+        manageTeam: false
+      },
+      [ROLES.MEMBER]: {
+        connectRepos: false,
+        viewSync: true,
+        triggerRetry: true,
+        configWatcher: false,
+        inviteMembers: false,
+        manageBilling: false,
+        configAiTools: true,
+        manageTeam: false
+      }
+    };
+    ROLE_PRIORITY = [
+      ROLES.OWNER,
+      ROLES.ADMIN,
+      ROLES.REPO_MANAGER,
+      ROLES.MEMBER
+    ];
   }
-}
-function unitPath() {
-  return join13(homedir3(), ".config", "systemd", "user", `${SYSTEMD_SERVICE}.service`);
-}
-function buildUnit() {
-  const cmd = resolveListenerCommand();
-  const execStart = [process.execPath, cmd.script, ...cmd.args].join(" ");
-  const logs = logDir();
-  return `[Unit]
-Description=RepoWise Listener
-After=network-online.target
-Wants=network-online.target
-
-[Service]
-Type=simple
-ExecStart=${execStart}
-Restart=always
-RestartSec=10
-StandardOutput=append:${join13(logs, "listener-stdout.log")}
-StandardError=append:${join13(logs, "listener-stderr.log")}
+});
 
-[Install]
-WantedBy=default.target`;
-}
-async function linuxInstall() {
-  await mkdir8(logDir(), { recursive: true });
-  await mkdir8(join13(homedir3(), ".config", "systemd", "user"), { recursive: true });
-  await writeFile8(unitPath(), buildUnit());
-  await exec("systemctl", ["--user", "daemon-reload"]);
-  await exec("systemctl", ["--user", "enable", SYSTEMD_SERVICE]);
-  await exec("systemctl", ["--user", "start", SYSTEMD_SERVICE]);
-}
-async function linuxUninstall() {
-  try {
-    await exec("systemctl", ["--user", "stop", SYSTEMD_SERVICE]);
-  } catch {
-  }
-  try {
-    await exec("systemctl", ["--user", "disable", SYSTEMD_SERVICE]);
-  } catch {
-  }
-  try {
-    await unlink6(unitPath());
-  } catch {
-  }
-  try {
-    await exec("systemctl", ["--user", "daemon-reload"]);
-  } catch {
-  }
-}
-async function linuxIsInstalled() {
-  try {
-    const stdout = await exec("systemctl", ["--user", "is-enabled", SYSTEMD_SERVICE]);
-    return stdout.trim() === "enabled";
-  } catch {
-    return false;
-  }
-}
-async function win32Install() {
-  await mkdir8(logDir(), { recursive: true });
-  const cmd = resolveListenerCommand();
-  const taskCmd = [process.execPath, cmd.script, ...cmd.args].map((a) => `"${a}"`).join(" ");
-  await exec("schtasks", [
-    "/create",
-    "/tn",
-    TASK_NAME,
-    "/tr",
-    taskCmd,
-    "/sc",
-    "onlogon",
-    "/ru",
-    process.env.USERNAME ?? "",
-    "/f"
-  ]);
-  await exec("schtasks", ["/run", "/tn", TASK_NAME]);
-}
-async function win32Uninstall() {
-  try {
-    await exec("schtasks", ["/end", "/tn", TASK_NAME]);
-  } catch {
-  }
-  try {
-    await exec("schtasks", ["/delete", "/tn", TASK_NAME, "/f"]);
-  } catch {
-  }
-}
-async function win32IsInstalled() {
-  try {
-    await exec("schtasks", ["/query", "/tn", TASK_NAME]);
-    return true;
-  } catch {
-    return false;
-  }
-}
-async function darwinStop() {
-  try {
-    await exec("launchctl", ["unload", plistPath()]);
-  } catch {
-  }
-}
-async function linuxStop() {
-  await exec("systemctl", ["--user", "stop", SYSTEMD_SERVICE]);
-}
-async function win32Stop() {
-  await exec("schtasks", ["/end", "/tn", TASK_NAME]);
+// ../../packages/shared/src/constants/lsp-versions.ts
+function getCurrentPlatformKey(platform = process.platform, arch = process.arch) {
+  const platformMap = {
+    darwin: "darwin",
+    linux: "linux",
+    win32: "win32"
+  };
+  const archMap = {
+    x64: "x64",
+    arm64: "arm64"
+  };
+  const p = platformMap[platform];
+  const a = archMap[arch];
+  if (!p || !a) return null;
+  return `${p}-${a}`;
 }
-async function darwinIsServiceRunning() {
-  try {
-    const stdout = await exec("launchctl", ["list", PLIST_LABEL]);
-    const pidMatch = stdout.match(/"PID"\s*=\s*(\d+)/);
-    return pidMatch !== null && parseInt(pidMatch[1], 10) > 0;
-  } catch {
-    return false;
-  }
-}
-async function linuxIsServiceRunning() {
-  try {
-    const stdout = await exec("systemctl", ["--user", "is-active", SYSTEMD_SERVICE]);
-    return stdout.trim() === "active";
-  } catch {
-    return false;
-  }
-}
-async function win32IsServiceRunning() {
-  try {
-    const stdout = await exec("schtasks", ["/query", "/tn", TASK_NAME, "/fo", "CSV"]);
-    return stdout.includes("Running");
-  } catch {
-    return false;
-  }
-}
-async function stopService() {
-  switch (process.platform) {
-    case "darwin":
-      await darwinStop();
-      break;
-    case "linux":
-      await linuxStop();
-      break;
-    case "win32":
-      await win32Stop();
-      break;
-    default:
-      throw new Error(`Unsupported platform: ${process.platform}`);
-  }
-}
-async function install() {
-  switch (process.platform) {
-    case "darwin":
-      await darwinInstall();
-      break;
-    case "linux":
-      await linuxInstall();
-      break;
-    case "win32":
-      await win32Install();
-      break;
-    default:
-      throw new Error(`Unsupported platform: ${process.platform}`);
-  }
-}
-async function uninstall() {
-  switch (process.platform) {
-    case "darwin":
-      await darwinUninstall();
-      break;
-    case "linux":
-      await linuxUninstall();
-      break;
-    case "win32":
-      await win32Uninstall();
-      break;
-    default:
-      throw new Error(`Unsupported platform: ${process.platform}`);
-  }
-}
-async function isInstalled() {
-  switch (process.platform) {
-    case "darwin":
-      return darwinIsInstalled();
-    case "linux":
-      return linuxIsInstalled();
-    case "win32":
-      return win32IsInstalled();
-    default:
-      return false;
-  }
-}
-async function isServiceRunning() {
-  switch (process.platform) {
-    case "darwin":
-      return darwinIsServiceRunning();
-    case "linux":
-      return linuxIsServiceRunning();
-    case "win32":
-      return win32IsServiceRunning();
-    default:
-      return false;
-  }
-}
-var IS_STAGING, PLIST_LABEL, SYSTEMD_SERVICE, TASK_NAME;
-var init_service_installer = __esm({
-  "../listener/dist/service-installer.js"() {
-    "use strict";
-    init_config_dir();
-    init_process_manager();
-    IS_STAGING = true ? true : false;
-    PLIST_LABEL = IS_STAGING ? "com.repowise-staging.listener" : "com.repowise.listener";
-    SYSTEMD_SERVICE = IS_STAGING ? "repowise-staging-listener" : "repowise-listener";
-    TASK_NAME = IS_STAGING ? "RepoWise Staging Listener" : "RepoWise Listener";
-  }
-});
-
-// ../listener/dist/lsp/registry.js
-function resolvePhpLspOverride(env = process.env, configOverrides) {
-  const envChoice = env["PHP_LSP"];
-  const configChoice = configOverrides?.["php"];
-  const choice = envChoice ?? configChoice;
-  if (choice !== "intelephense")
-    return null;
-  return {
-    id: "intelephense",
-    displayName: "intelephense (user-provided)",
-    command: "intelephense",
-    args: ["--stdio"],
-    extensions: [".php"],
-    lspLanguageId: "php",
-    installHint: "Intelephense override is enabled \u2014 install it yourself: `npm i -g intelephense` (commercial licence required for premium features)."
-  };
-}
-function getEffectiveConfig(lang, env = process.env, configOverrides) {
-  if (lang === "php") {
-    const override = resolvePhpLspOverride(env, configOverrides);
-    if (override)
-      return override;
-  }
-  return LSP_REGISTRY[lang]?.[0];
-}
-function getEffectiveConfigList(lang, env = process.env, configOverrides) {
-  if (lang === "php") {
-    const override = resolvePhpLspOverride(env, configOverrides);
-    if (override)
-      return [override];
-  }
-  return LSP_REGISTRY[lang] ?? [];
-}
-function detectLanguage(path) {
-  const dot = path.lastIndexOf(".");
-  if (dot < 0)
-    return null;
-  const ext = path.slice(dot).toLowerCase();
-  for (const [lang, configs] of Object.entries(LSP_REGISTRY)) {
-    if (configs.some((c) => c.extensions.includes(ext))) {
-      return lang;
-    }
-  }
-  return null;
-}
-async function probeServers(isAvailable, env = process.env, configOverrides) {
-  const out = [];
-  for (const lang of Object.keys(LSP_REGISTRY)) {
-    const configs = getEffectiveConfigList(lang, env, configOverrides);
-    const checkedCommands = configs.map((c) => c.command);
-    let found = null;
-    for (const config2 of configs) {
-      if (await isAvailable(config2.command)) {
-        found = config2;
-        break;
-      }
-    }
-    out.push({ language: lang, config: found, checkedCommands });
-  }
-  return out;
-}
-function getBuildSpec(language) {
-  return BUILD_SPECS[language] ?? null;
-}
-var LSP_REGISTRY, BUILD_SPECS;
-var init_registry = __esm({
-  "../listener/dist/lsp/registry.js"() {
+var NATIVE_LSP_VERSIONS, COURSIER_LSPS, TOOLCHAIN_LSPS;
+var init_lsp_versions = __esm({
+  "../../packages/shared/src/constants/lsp-versions.ts"() {
     "use strict";
-    LSP_REGISTRY = {
-      typescript: [
-        {
-          id: "typescript-language-server",
-          displayName: "typescript-language-server",
-          command: "typescript-language-server",
-          args: ["--stdio"],
-          extensions: [".ts", ".tsx", ".mts", ".cts"],
-          lspLanguageId: "typescript",
-          installHint: "npm i -g typescript typescript-language-server",
-          npmPackage: "typescript-language-server"
-        }
-      ],
-      javascript: [
-        {
-          id: "typescript-language-server-js",
-          displayName: "typescript-language-server (for JS)",
-          command: "typescript-language-server",
-          args: ["--stdio"],
-          extensions: [".js", ".jsx", ".mjs", ".cjs"],
-          lspLanguageId: "javascript",
-          installHint: "npm i -g typescript typescript-language-server",
-          npmPackage: "typescript-language-server"
+    NATIVE_LSP_VERSIONS = {
+      "rust-analyzer": {
+        source: { kind: "github-release", repo: "rust-lang/rust-analyzer" },
+        version: "2026-05-11",
+        license: "MIT OR Apache-2.0",
+        assets: {
+          "darwin-arm64": {
+            filename: "rust-analyzer-aarch64-apple-darwin.gz",
+            sha256: "eeb6367cd2c6cc9217ae06cea2e0c7e9cf20cdac5e934a1b272b13c76ece5aee",
+            binaryPath: "rust-analyzer-aarch64-apple-darwin"
+          },
+          "darwin-x64": {
+            filename: "rust-analyzer-x86_64-apple-darwin.gz",
+            sha256: "718398822ec2f282bca36f6f109bbbb33746437e1a63946fe7fd3d84d502a67d",
+            binaryPath: "rust-analyzer-x86_64-apple-darwin"
+          },
+          "linux-x64": {
+            filename: "rust-analyzer-x86_64-unknown-linux-gnu.gz",
+            sha256: "ede62b8536a37c90d804850d0bed3623e3d6af90a1195e4930a1627e5d8ae33f",
+            binaryPath: "rust-analyzer-x86_64-unknown-linux-gnu"
+          },
+          "linux-arm64": {
+            filename: "rust-analyzer-aarch64-unknown-linux-gnu.gz",
+            sha256: "dbe8c4c0bed79f36133c9d0a0eb629709d91343e065a179cd4a5f8137817de1c",
+            binaryPath: "rust-analyzer-aarch64-unknown-linux-gnu"
+          },
+          "win32-x64": {
+            filename: "rust-analyzer-x86_64-pc-windows-msvc.zip",
+            sha256: "1600365f2d8b0e42a811eafb5e129b75b991ddf9d9955d19d8fc2f4f2b9c19ef",
+            binaryPath: "rust-analyzer.exe"
+          },
+          "win32-arm64": {
+            filename: "rust-analyzer-aarch64-pc-windows-msvc.zip",
+            sha256: "3cd63d31e9abfea89488eebfd2c29d41550af6cb6f6b32f52e455fb783215fd0",
+            binaryPath: "rust-analyzer.exe"
+          }
         }
-      ],
-      python: [
-        {
-          id: "pyright",
-          displayName: "pyright",
-          command: "pyright-langserver",
-          args: ["--stdio"],
-          extensions: [".py", ".pyi"],
-          lspLanguageId: "python",
-          installHint: "npm i -g pyright",
-          npmPackage: "pyright",
-          // Phase 7L: strict-mode Pyright. Default `basic` mode suppresses
-          // definition/hover for un-annotated locals which kneecaps the
-          // upgrade rate on real codebases. `useLibraryCodeForTypes`
-          // unlocks stdlib member lookups, `autoSearchPaths` lets Pyright
-          // find venv site-packages without per-project pyrightconfig.json,
-          // and `diagnosticMode: 'workspace'` forces full-workspace symbol
-          // materialization so the first `workspace/symbol` query doesn't
-          // race the indexer.
-          //
-          // Disable `publishDiagnostics` — we don't render lint output
-          // and the noise slows Pyright on large projects (plan §Python
-          // risks).
-          initializationOptions: {
-            python: {
-              analysis: {
-                typeCheckingMode: "strict",
-                useLibraryCodeForTypes: true,
-                autoSearchPaths: true,
-                diagnosticMode: "workspace"
-                // Pyright honours either `disableLanguageServices` or
-                // simply not subscribing to diagnostics; the conservative
-                // path is to send the request handshake without
-                // publishDiagnostics in our capabilities (already the
-                // case in workspace-session.ts) and avoid extra knobs
-                // here that would diverge from Pyright defaults.
-              }
-            }
+      },
+      clangd: {
+        source: { kind: "github-release", repo: "clangd/clangd" },
+        version: "18.1.3",
+        license: "Apache-2.0 WITH LLVM-exception",
+        assets: {
+          // clangd ships a single universal macOS binary covering both
+          // architectures — same filename for darwin-arm64 and darwin-x64.
+          "darwin-arm64": {
+            filename: "clangd-mac-18.1.3.zip",
+            sha256: "442c18d98671d8b5d811b25002ad1f2fd0b9efb07e7905a41502f1f1311dc566",
+            binaryPath: "clangd_18.1.3/bin/clangd"
+          },
+          "darwin-x64": {
+            filename: "clangd-mac-18.1.3.zip",
+            sha256: "442c18d98671d8b5d811b25002ad1f2fd0b9efb07e7905a41502f1f1311dc566",
+            binaryPath: "clangd_18.1.3/bin/clangd"
+          },
+          "linux-x64": {
+            filename: "clangd-linux-18.1.3.zip",
+            sha256: "775f6ac798d9c599258e3f4fa14d0af908b1801d38250e72a18fb907b28a1be6",
+            binaryPath: "clangd_18.1.3/bin/clangd"
+          },
+          "win32-x64": {
+            filename: "clangd-windows-18.1.3.zip",
+            sha256: "3d287d39bab29406f002ff80b939668e59e25ef72346d8f38826305016e45896",
+            binaryPath: "clangd_18.1.3/bin/clangd.exe"
           }
-        },
-        {
-          id: "pylsp",
-          displayName: "python-lsp-server",
-          command: "pylsp",
-          args: [],
-          extensions: [".py", ".pyi"],
-          lspLanguageId: "python",
-          installHint: 'pipx install "python-lsp-server[all]"'
-        }
-      ],
-      go: [
-        {
-          id: "gopls",
-          displayName: "gopls",
-          command: "gopls",
-          // Modern gopls uses stdio by default; `serve` is the legacy
-          // subcommand and no longer needed (review finding).
-          args: [],
-          extensions: [".go"],
-          lspLanguageId: "go",
-          installHint: "go install golang.org/x/tools/gopls@latest",
-          toolchainInstallKey: "gopls"
         }
-      ],
-      rust: [
-        {
-          id: "rust-analyzer",
-          displayName: "rust-analyzer",
-          command: "rust-analyzer",
-          args: [],
-          extensions: [".rs"],
-          lspLanguageId: "rust",
-          nativeInstallKey: "rust-analyzer",
-          // `rustup component add rust-analyzer` installs a rustup proxy
-          // — the binary may not be on PATH directly. `brew install
-          // rust-analyzer` or a release tarball is more reliable.
-          installHint: "brew install rust-analyzer (or 'rustup component add rust-analyzer' and ensure it is on PATH)",
-          // Phase 7L: rust-analyzer init options. `cargo.buildScripts.enable`
-          // and `procMacro.enable` are critical — without them, half of
-          // Serde's call graph is invisible (proc-macro-expanded code is
-          // skipped and `derive(Serialize)` impl trait methods disappear).
-          // `checkOnSave.enable: false` keeps the server quiet on workspace
-          // edits since we don't render diagnostics.
-          initializationOptions: {
-            cargo: {
-              buildScripts: { enable: true }
-            },
-            procMacro: { enable: true },
-            checkOnSave: { enable: false }
+      },
+      // Coursier — single-file JVM launcher that we install once and then
+      // use to install any JVM-based LSP (metals, future kotlin LSPs, etc.).
+      // Tier 2 of the install plan: the binary itself is just another
+      // GitHub-release Tier 1 entry; the magic is what we DO with it after
+      // install (see coursier-installer.ts).
+      coursier: {
+        source: { kind: "github-release", repo: "coursier/coursier" },
+        version: "v2.1.24",
+        license: "Apache-2.0",
+        assets: {
+          "darwin-arm64": {
+            filename: "cs-aarch64-apple-darwin.gz",
+            sha256: "53a5728c2016118c8296fa7d5678ddfe122e22dc6c36deb554d771b3b9295b4f",
+            binaryPath: "cs"
+          },
+          "darwin-x64": {
+            filename: "cs-x86_64-apple-darwin.gz",
+            sha256: "33913cd6b61658035d9e6fe971e919cb0ef1f659aa7bff7deeded963a2d36385",
+            binaryPath: "cs"
+          },
+          "linux-x64": {
+            filename: "cs-x86_64-pc-linux.gz",
+            sha256: "d2c0572a17fb6146ea65349b59dd216b38beff60ae22bce6e549867c6ed2eda6",
+            binaryPath: "cs"
+          },
+          // coursier v2.1.24 ships no aarch64-linux build — Scala dev on
+          // ARM Linux falls back to the toolchain-installed Metals path.
+          "win32-x64": {
+            filename: "cs-x86_64-pc-win32.zip",
+            sha256: "c16b4f95b59fbe035cdda4353cfca78befcbbef5a20a3b151c679717c1504c9f",
+            binaryPath: "cs.exe"
           }
         }
-      ],
-      java: [
-        // The `jdtls` binary exists when installed via Homebrew (which
-        // ships a wrapper over the Eclipse JDT launcher) or the nvim
-        // jdtls scripts. Raw Eclipse downloads require invoking
-        // `java -jar org.eclipse.equinox.launcher_*.jar`; doctor needs
-        // to surface that when the bare `jdtls` binary is absent.
-        //
-        // Phase 7L init options:
-        //   - autobuild disabled — per-edit work the listener doesn't
-        //     need; saves CPU + memory on the cold start path.
-        //   - completion disabled — same rationale.
-        //   - progressReportProvider true — needed so waitForIndex can
-        //     subscribe to "Importing projects" / "Building workspace"
-        //     progress and block receiver queries until end-of-progress.
-        //
-        // JVM args:
-        //   - `-Xmx2G` — JDTLS OOMs on real-world repos with the default
-        //     `-Xmx256m`. Without this the OOM kills the server inside
-        //     workspace import, which opens the Java per-repo circuit
-        //     breaker (plan §Java failure modes).
-        //   - `-data <repoSha-scoped workspace>` — added at spawn time by
-        //     workspace-session.ts so JDTLS skips the Maven/Gradle import
-        //     on subsequent runs. Watch pom.xml/build.gradle mtime to
-        //     invalidate stale incremental state.
-        {
-          id: "jdtls",
-          displayName: "Eclipse JDT Language Server",
-          command: "jdtls",
-          args: ["--jvm-arg=-Xmx2G"],
-          extensions: [".java"],
-          lspLanguageId: "java",
-          installHint: "brew install jdtls (see https://github.com/eclipse-jdtls/eclipse.jdt.ls)",
-          nativeInstallKey: "jdtls",
-          initializationOptions: {
-            bundles: [],
-            extendedClientCapabilities: {
-              progressReportProvider: true,
-              classFileContentsSupport: true
-            },
-            settings: {
-              java: {
-                autobuild: { enabled: false },
-                completion: { enabled: false },
-                // Don't render diagnostics — listener doesn't surface
-                // Java lint output and the firehose slows JDTLS.
-                errors: { incompleteClasspath: { severity: "ignore" } }
-              }
-            }
+      },
+      // Eclipse JDT Language Server — single cross-platform tarball
+      // hosted at download.eclipse.org. Ships as an Equinox launcher jar
+      // that must be invoked via `java -jar`, so the installer generates
+      // a `bin/jdtls` shim that selects the right config_{platform} dir.
+      // Requires JDK 17+ (jdtls 1.51 minimum).
+      jdtls: {
+        source: { kind: "direct-url" },
+        version: "1.51.0",
+        license: "EPL-2.0",
+        requiresJdk: 17,
+        assets: {
+          "darwin-arm64": {
+            url: "https://download.eclipse.org/jdtls/milestones/1.51.0/jdt-language-server-1.51.0-202510022025.tar.gz",
+            filename: "jdt-language-server-1.51.0-202510022025.tar.gz",
+            sha256: "8a59372117881bf5bdc0220f2254472846b88137c058f344b00a7d41427745a1",
+            binaryPath: "plugins/org.eclipse.equinox.launcher_*.jar",
+            launcherJarGlob: "plugins/org.eclipse.equinox.launcher_*.jar",
+            wrapperBinaryName: "jdtls"
+          },
+          "darwin-x64": {
+            url: "https://download.eclipse.org/jdtls/milestones/1.51.0/jdt-language-server-1.51.0-202510022025.tar.gz",
+            filename: "jdt-language-server-1.51.0-202510022025.tar.gz",
+            sha256: "8a59372117881bf5bdc0220f2254472846b88137c058f344b00a7d41427745a1",
+            binaryPath: "plugins/org.eclipse.equinox.launcher_*.jar",
+            launcherJarGlob: "plugins/org.eclipse.equinox.launcher_*.jar",
+            wrapperBinaryName: "jdtls"
+          },
+          "linux-x64": {
+            url: "https://download.eclipse.org/jdtls/milestones/1.51.0/jdt-language-server-1.51.0-202510022025.tar.gz",
+            filename: "jdt-language-server-1.51.0-202510022025.tar.gz",
+            sha256: "8a59372117881bf5bdc0220f2254472846b88137c058f344b00a7d41427745a1",
+            binaryPath: "plugins/org.eclipse.equinox.launcher_*.jar",
+            launcherJarGlob: "plugins/org.eclipse.equinox.launcher_*.jar",
+            wrapperBinaryName: "jdtls"
+          },
+          "linux-arm64": {
+            url: "https://download.eclipse.org/jdtls/milestones/1.51.0/jdt-language-server-1.51.0-202510022025.tar.gz",
+            filename: "jdt-language-server-1.51.0-202510022025.tar.gz",
+            sha256: "8a59372117881bf5bdc0220f2254472846b88137c058f344b00a7d41427745a1",
+            binaryPath: "plugins/org.eclipse.equinox.launcher_*.jar",
+            launcherJarGlob: "plugins/org.eclipse.equinox.launcher_*.jar",
+            wrapperBinaryName: "jdtls"
+          },
+          "win32-x64": {
+            url: "https://download.eclipse.org/jdtls/milestones/1.51.0/jdt-language-server-1.51.0-202510022025.tar.gz",
+            filename: "jdt-language-server-1.51.0-202510022025.tar.gz",
+            sha256: "8a59372117881bf5bdc0220f2254472846b88137c058f344b00a7d41427745a1",
+            binaryPath: "plugins/org.eclipse.equinox.launcher_*.jar",
+            launcherJarGlob: "plugins/org.eclipse.equinox.launcher_*.jar",
+            wrapperBinaryName: "jdtls"
           }
         }
-      ],
-      csharp: [
-        // Issue #352 item #5 — csharp-ls listed FIRST. Both are MIT-OSS
-        // and Roslyn-backed, but csharp-ls is significantly lighter (~10 MB
-        // dotnet-tool install vs. OmniSharp's ~200 MB native binary). On
-        // user machines with `dotnet` on PATH, csharp-ls is installable in
-        // one command with no native-binary fetch. OmniSharp stays as the
-        // installed-elsewhere fallback (Roslyn-build farms, JetBrains
-        // Rider tool dirs, etc.).
-        {
-          id: "csharp-ls",
-          displayName: "csharp-ls",
-          command: "csharp-ls",
-          args: [],
-          extensions: [".cs"],
-          lspLanguageId: "csharp",
-          installHint: "dotnet tool install -g csharp-ls",
-          toolchainInstallKey: "csharp-ls"
-        },
-        {
-          id: "omnisharp",
-          displayName: "OmniSharp",
-          command: "omnisharp",
-          args: ["-lsp"],
-          extensions: [".cs"],
-          lspLanguageId: "csharp",
-          installHint: "https://github.com/OmniSharp/omnisharp-roslyn/releases"
-        }
-      ],
-      php: [
-        // Phase 7L++: Phpactor only. Phpactor is MIT-licensed, free, and
-        // ships as a single phar via Composer. We DO NOT bundle
-        // Intelephense — its premium tier is commercial and its community
-        // licence is not redistributable. Customers who already own an
-        // Intelephense licence can opt-in via the `PHP_LSP=intelephense`
-        // environment variable, which the CLI swaps into the registry at
-        // runtime (see apps/cli/src/commands/lsp.ts step 7). The escape
-        // hatch requires the user to provision an `intelephense` binary
-        // on PATH themselves.
-        //
-        // Confidence floor on PHP is 0.7 (see lsp-upgrade-strategy.ts).
-        // Phpactor's static analysis is solid for PSR-4 resolvable calls
-        // but stumbles on Laravel-style facades / magic accessors — those
-        // surface as null definitions, recorded as `kind: 'definition'`
-        // with `targets.length === 0` (no upgrade, telemetry preserved).
-        {
-          id: "phpactor",
-          displayName: "phpactor",
-          command: "phpactor",
-          args: ["language-server"],
-          extensions: [".php"],
-          lspLanguageId: "php",
-          installHint: "composer global require phpactor/phpactor (see https://phpactor.readthedocs.io/en/master/usage/standalone.html)",
-          toolchainInstallKey: "phpactor"
-        }
-      ],
-      ruby: [
-        {
-          id: "ruby-lsp",
-          displayName: "ruby-lsp",
-          command: "ruby-lsp",
-          args: [],
-          extensions: [".rb"],
-          lspLanguageId: "ruby",
-          installHint: "gem install ruby-lsp",
-          toolchainInstallKey: "ruby-lsp"
-        },
-        {
-          id: "solargraph",
-          displayName: "solargraph",
-          command: "solargraph",
-          args: ["stdio"],
-          extensions: [".rb"],
-          lspLanguageId: "ruby",
-          installHint: "gem install solargraph"
-        }
-      ],
-      kotlin: [
-        // Phase 7L++: fwcd Kotlin LSP. JVM cold-start is ~30s on the first
-        // Gradle/Maven import — the language server materialises the
-        // build's classpath before symbol lookups return. On mixed
-        // Kotlin/Java repos the WorkspaceManager spawns BOTH `jdtls` and
-        // `kotlin-language-server` — each owns its own file-type filter
-        // and they coexist without contention. Per-language LRU eviction
-        // (5-min idle, RSS soft-cap) prevents the two JVMs from pinning
-        // memory on long-lived listeners.
-        //
-        // Future: when JetBrains' Kotlin LSP exits preview, drop a
-        // higher-priority entry above this one with the JB binary; we
-        // keep fwcd as the fallback because JB's LSP requires a JetBrains
-        // account.
-        {
-          id: "kotlin-language-server",
-          displayName: "kotlin-language-server (fwcd)",
-          command: "kotlin-language-server",
-          args: [],
-          extensions: [".kt", ".kts"],
-          lspLanguageId: "kotlin",
-          installHint: "brew install kotlin-language-server (or see https://github.com/fwcd/kotlin-language-server)",
-          nativeInstallKey: "kotlin-language-server"
-        }
-      ],
-      swift: [
-        {
-          id: "sourcekit-lsp",
-          displayName: "sourcekit-lsp",
-          command: "sourcekit-lsp",
-          args: [],
-          extensions: [".swift"],
-          lspLanguageId: "swift",
-          installHint: "Bundled with Xcode Command Line Tools on macOS",
-          toolchainInstallKey: "sourcekit-lsp",
-          requiresBuild: true
-        }
-      ],
-      dart: [
-        // Phase 7L++: the official Dart Analysis Server ships inside the
-        // Dart SDK as `dart language-server --protocol=lsp`. There's no
-        // separate binary to install — installing Dart (or Flutter, which
-        // bundles Dart) is sufficient. Confidence floor is 0.9: the Dart
-        // analyzer is authoritative, derives types from sound null safety,
-        // and is the same server that powers the official IDE plugins.
-        // No `initializationOptions` — Dart's analyzer derives everything
-        // from `pubspec.yaml` / `analysis_options.yaml` at the repo root.
-        {
-          id: "dart-language-server",
-          displayName: "dart language-server",
-          command: "dart",
-          args: ["language-server", "--protocol=lsp"],
-          extensions: [".dart"],
-          lspLanguageId: "dart",
-          installHint: "Install Dart SDK from https://dart.dev/get-dart (or Flutter from https://flutter.dev \u2014 bundles Dart).",
-          toolchainInstallKey: "dart-language-server"
-        }
-      ],
-      // Scala via Metals (Phase 7L+).
-      //
-      // Metals is the de-facto Scala language server. It coordinates with
-      // a build server (Bloop by default; SBT/Mill/Gradle alternatives are
-      // discovered from the project's build files) to obtain the project's
-      // classpath, semantic database, and compiler diagnostics. The Bloop
-      // daemon is a separate JVM process that Metals spawns on its first
-      // `initialize`, then keeps warm; the listener's WorkspaceManager
-      // pairs Bloop lifecycle to Metals' (see bloop-lifecycle.ts) so they
-      // are spawned together on lazy `getOrOpen` and torn down together
-      // on idle eviction.
-      //
-      // Install hint: `coursier install metals` — Coursier (`cs`) is the
-      // canonical Scala launcher and is typically already on a Scala
-      // developer's machine. The Coursier-managed `metals` shim resolves
-      // Bloop on first use, so no separate Bloop install is required.
-      // Macro-expanded code can mis-locate definitions (Scala 3 inline /
-      // quote macros, scala-compat shims) — the per-language strategy
-      // pins confidence at 0.85 to reflect that limitation.
-      scala: [
-        {
-          id: "metals",
-          displayName: "Metals (Scala)",
-          command: "metals",
-          args: [],
-          extensions: [".scala", ".sc", ".sbt"],
-          lspLanguageId: "scala",
-          installHint: "coursier install metals (see https://scalameta.org/metals \u2014 Coursier-managed binary coordinates with Bloop automatically)",
-          coursierInstallKey: "metals"
-        }
-      ],
-      c: [
-        {
-          id: "clangd-c",
-          displayName: "clangd",
-          command: "clangd",
-          // `--compile-commands-dir=.repowise` lets clangd pick up the
-          // stub compile_commands.json the listener writes for repos
-          // that don't ship one (header-only libs, single-file repos).
-          // clangd still finds repo-root or build/ compile_commands.json
-          // first when present — this is a fallback location, not an
-          // override (task #1).
-          args: ["--background-index", "--compile-commands-dir=.repowise"],
-          extensions: [".c", ".h"],
-          lspLanguageId: "c",
-          installHint: "brew install llvm (includes clangd)",
-          nativeInstallKey: "clangd"
-        }
-      ],
-      cpp: [
-        {
-          id: "clangd-cpp",
-          displayName: "clangd",
-          command: "clangd",
-          // `--compile-commands-dir=.repowise` lets clangd pick up the
-          // stub compile_commands.json the listener writes for repos
-          // that don't ship one (header-only libs, single-file repos).
-          // clangd still finds repo-root or build/ compile_commands.json
-          // first when present — this is a fallback location, not an
-          // override (task #1).
-          args: ["--background-index", "--compile-commands-dir=.repowise"],
-          extensions: [".cpp", ".cc", ".cxx", ".hpp", ".hh", ".hxx"],
-          lspLanguageId: "cpp",
-          installHint: "brew install llvm (includes clangd)",
-          nativeInstallKey: "clangd"
-        }
-      ],
-      vue: [
-        {
-          id: "vue-language-server",
-          displayName: "Vue Language Server (volar)",
-          command: "vue-language-server",
-          args: ["--stdio"],
-          extensions: [".vue"],
-          lspLanguageId: "vue",
-          installHint: "npm i -g @vue/language-server",
-          npmPackage: "@vue/language-server"
-        }
-      ],
-      svelte: [
-        {
-          id: "svelte-language-server",
-          displayName: "svelte-language-server",
-          command: "svelteserver",
-          args: ["--stdio"],
-          extensions: [".svelte"],
-          lspLanguageId: "svelte",
-          installHint: "npm i -g svelte-language-server",
-          npmPackage: "svelte-language-server"
+      },
+      // fwcd/kotlin-language-server — single cross-platform zip on GitHub
+      // releases. Ships a `bin/kotlin-language-server` shell script + a
+      // matching `.bat` for Windows — both invoke `java` internally, so
+      // we just chmod+x and symlink (no shim needed). Requires JDK 11+.
+      "kotlin-language-server": {
+        source: { kind: "github-release", repo: "fwcd/kotlin-language-server" },
+        version: "1.3.13",
+        license: "MIT",
+        requiresJdk: 11,
+        assets: {
+          "darwin-arm64": {
+            filename: "server.zip",
+            sha256: "4fe7d71d087b307c7869036171bd9d8c6a4284cd7c25b89098b0a24eb2d9b6d2",
+            binaryPath: "server/bin/kotlin-language-server"
+          },
+          "darwin-x64": {
+            filename: "server.zip",
+            sha256: "4fe7d71d087b307c7869036171bd9d8c6a4284cd7c25b89098b0a24eb2d9b6d2",
+            binaryPath: "server/bin/kotlin-language-server"
+          },
+          "linux-x64": {
+            filename: "server.zip",
+            sha256: "4fe7d71d087b307c7869036171bd9d8c6a4284cd7c25b89098b0a24eb2d9b6d2",
+            binaryPath: "server/bin/kotlin-language-server"
+          },
+          "linux-arm64": {
+            filename: "server.zip",
+            sha256: "4fe7d71d087b307c7869036171bd9d8c6a4284cd7c25b89098b0a24eb2d9b6d2",
+            binaryPath: "server/bin/kotlin-language-server"
+          },
+          "win32-x64": {
+            filename: "server.zip",
+            sha256: "4fe7d71d087b307c7869036171bd9d8c6a4284cd7c25b89098b0a24eb2d9b6d2",
+            binaryPath: "server/bin/kotlin-language-server.bat"
+          }
         }
-      ]
+      }
     };
-    BUILD_SPECS = {
-      swift: {
-        gateCommands: ["swift", "xcrun"],
-        gateExecs: [{ command: "xcode-select", args: ["-p"] }],
-        manifests: ["Package.swift", "*.xcodeproj", "*.xcworkspace"],
-        platform: "darwin",
-        command: "swift",
-        args: ["build"],
-        indexStoreProbe: ".build/index/store"
+    COURSIER_LSPS = {
+      metals: {
+        appName: "metals",
+        displayName: "Metals (Scala)",
+        license: "Apache-2.0"
       }
     };
+    TOOLCHAIN_LSPS = {
+      gopls: {
+        toolchain: "go",
+        installArgs: ["install", "golang.org/x/tools/gopls@latest"],
+        binaryName: "gopls",
+        toolchainBinDir: "go/bin",
+        displayName: "gopls",
+        license: "BSD-3-Clause"
+      },
+      "ruby-lsp": {
+        toolchain: "gem",
+        installArgs: ["install", "--user-install", "ruby-lsp"],
+        binaryName: "ruby-lsp",
+        // gem userdir is version-dependent — resolved at install time.
+        displayName: "ruby-lsp",
+        license: "MIT"
+      },
+      "csharp-ls": {
+        toolchain: "dotnet",
+        installArgs: ["tool", "install", "-g", "csharp-ls"],
+        binaryName: "csharp-ls",
+        toolchainBinDir: ".dotnet/tools",
+        displayName: "csharp-ls",
+        license: "MIT"
+      },
+      phpactor: {
+        toolchain: "composer",
+        installArgs: ["global", "require", "phpactor/phpactor"],
+        binaryName: "phpactor",
+        toolchainBinDir: ".composer/vendor/bin",
+        displayName: "phpactor",
+        license: "MIT"
+      },
+      "dart-language-server": {
+        bundled: true,
+        binaryName: "dart",
+        displayName: "dart language-server (Dart SDK)",
+        license: "BSD-3-Clause"
+      },
+      "sourcekit-lsp": {
+        bundled: true,
+        binaryName: "sourcekit-lsp",
+        displayName: "sourcekit-lsp (Xcode CLT)",
+        license: "Apache-2.0"
+      }
+    };
+  }
+});
+
+// ../../packages/shared/src/index.ts
+var init_src = __esm({
+  "../../packages/shared/src/index.ts"() {
+    "use strict";
+    init_typed_resolution();
+    init_billing();
+    init_platforms();
+    init_tiers();
+    init_roles();
+    init_lsp_versions();
+  }
+});
+
+// ../listener/dist/process-manager.js
+import { spawn } from "child_process";
+import { openSync, closeSync } from "fs";
+import { readFile as readFile6, writeFile as writeFile7, mkdir as mkdir7, unlink as unlink5 } from "fs/promises";
+import { homedir as homedir2 } from "os";
+import { join as join10 } from "path";
+import { createRequire } from "module";
+import { fileURLToPath } from "url";
+function repowiseDir() {
+  return getConfigDir();
+}
+function pidPath() {
+  return join10(repowiseDir(), "listener.pid");
+}
+function logDirPath() {
+  return join10(repowiseDir(), "logs");
+}
+function resolveListenerCommand() {
+  try {
+    const require2 = createRequire(import.meta.url);
+    const mainPath = require2.resolve("@repowise/listener/main");
+    return { script: mainPath, args: [] };
+  } catch {
+    const bundlePath = fileURLToPath(import.meta.url);
+    return { script: bundlePath, args: ["__listener"] };
+  }
+}
+async function readPid() {
+  try {
+    const content = await readFile6(pidPath(), "utf-8");
+    const pid = parseInt(content.trim(), 10);
+    return Number.isNaN(pid) ? null : pid;
+  } catch (err) {
+    if (err.code === "ENOENT")
+      return null;
+    throw err;
+  }
+}
+function isAlive(pid) {
+  try {
+    process.kill(pid, 0);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function startBackground() {
+  if (await isRunning()) {
+    const pid2 = await readPid();
+    if (pid2)
+      return pid2;
+  }
+  const logDir2 = logDirPath();
+  await mkdir7(logDir2, { recursive: true });
+  const cmd = resolveListenerCommand();
+  const stdoutFd = openSync(join10(logDir2, "listener-stdout.log"), "a");
+  const stderrFd = openSync(join10(logDir2, "listener-stderr.log"), "a");
+  const child = spawn(process.execPath, [cmd.script, ...cmd.args], {
+    detached: true,
+    stdio: ["ignore", stdoutFd, stderrFd],
+    cwd: homedir2(),
+    env: { ...process.env }
+  });
+  child.unref();
+  closeSync(stdoutFd);
+  closeSync(stderrFd);
+  const pid = child.pid;
+  if (!pid)
+    throw new Error("Failed to spawn listener process");
+  await writeFile7(pidPath(), String(pid));
+  return pid;
+}
+async function stopProcess() {
+  const pid = await readPid();
+  if (pid === null)
+    return;
+  if (!isAlive(pid)) {
+    await removePidFile();
+    return;
+  }
+  try {
+    process.kill(pid, "SIGTERM");
+  } catch {
+  }
+  const deadline = Date.now() + 5e3;
+  while (Date.now() < deadline && isAlive(pid)) {
+    await new Promise((r) => setTimeout(r, 200));
+  }
+  if (isAlive(pid)) {
+    try {
+      process.kill(pid, "SIGKILL");
+    } catch {
+    }
+  }
+  await removePidFile();
+}
+async function isRunning() {
+  const pid = await readPid();
+  if (pid === null)
+    return false;
+  return isAlive(pid);
+}
+async function removePidFile() {
+  try {
+    await unlink5(pidPath());
+  } catch {
+  }
+}
+var init_process_manager = __esm({
+  "../listener/dist/process-manager.js"() {
+    "use strict";
+    init_config_dir();
+  }
+});
+
+// ../listener/dist/service-installer.js
+var service_installer_exports = {};
+__export(service_installer_exports, {
+  install: () => install,
+  isInstalled: () => isInstalled,
+  isServiceRunning: () => isServiceRunning,
+  stopService: () => stopService,
+  uninstall: () => uninstall
+});
+import { execFile as execFile4 } from "child_process";
+import { writeFile as writeFile8, mkdir as mkdir8, unlink as unlink6 } from "fs/promises";
+import { homedir as homedir3 } from "os";
+import { join as join13 } from "path";
+function exec(cmd, args) {
+  return new Promise((resolve5, reject) => {
+    execFile4(cmd, args, (err, stdout) => {
+      if (err) {
+        reject(err);
+        return;
+      }
+      resolve5(String(stdout ?? ""));
+    });
+  });
+}
+function plistPath() {
+  return join13(homedir3(), "Library", "LaunchAgents", `${PLIST_LABEL}.plist`);
+}
+function logDir() {
+  return join13(getConfigDir(), "logs");
+}
+function buildPlist() {
+  const cmd = resolveListenerCommand();
+  const logs = logDir();
+  const programArgs = [process.execPath, cmd.script, ...cmd.args].map((a) => `        <string>${a}</string>`).join("\n");
+  return `<?xml version="1.0" encoding="UTF-8"?>
+<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN"
+  "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
+<plist version="1.0">
+<dict>
+    <key>Label</key>
+    <string>${PLIST_LABEL}</string>
+    <key>ProgramArguments</key>
+    <array>
+${programArgs}
+    </array>
+    <key>RunAtLoad</key>
+    <true/>
+    <key>KeepAlive</key>
+    <true/>
+    <key>StandardOutPath</key>
+    <string>${join13(logs, "listener-stdout.log")}</string>
+    <key>StandardErrorPath</key>
+    <string>${join13(logs, "listener-stderr.log")}</string>
+    <key>ProcessType</key>
+    <string>Background</string>
+    <!--
+      SoftResourceLimits: raise the open-file descriptor limit from the macOS
+      default of 256 to 4096. When multiple LSP child processes (rust-analyzer,
+      jdtls, etc.) share the listener's fd budget they can exhaust the default
+      very quickly, causing EMFILE errors. 4096 matches the system-wide default
+      set by /etc/launchd.conf on modern macOS and gives enough headroom for
+      ~10 concurrent LSP servers each opening ~300 fds.
+
+      MemoryLimit: intentionally NOT set here. The launchd MemoryLimit key
+      (available since macOS 12.3) terminates the entire LaunchAgent when RSS
+      exceeds the threshold \u2014 it cannot be scoped to individual child processes.
+      Killing the listener to evict a memory-hungry rust-analyzer instance is
+      undesirable. Per-child memory pressure is better handled by the LSP
+      process manager (process-manager.ts) or by OS-level memory pressure
+      signals (SIGTERM on macOS, OOM killer on Linux).
+    -->
+    <key>SoftResourceLimits</key>
+    <dict>
+        <key>NumberOfFiles</key>
+        <integer>4096</integer>
+    </dict>
+</dict>
+</plist>`;
+}
+async function darwinInstall() {
+  await mkdir8(logDir(), { recursive: true });
+  await mkdir8(join13(homedir3(), "Library", "LaunchAgents"), { recursive: true });
+  try {
+    await exec("launchctl", ["unload", plistPath()]);
+  } catch {
+  }
+  await writeFile8(plistPath(), buildPlist());
+  await exec("launchctl", ["load", plistPath()]);
+}
+async function darwinUninstall() {
+  try {
+    await exec("launchctl", ["unload", plistPath()]);
+  } catch {
+  }
+  try {
+    await unlink6(plistPath());
+  } catch {
+  }
+}
+async function darwinIsInstalled() {
+  try {
+    const stdout = await exec("launchctl", ["list"]);
+    return stdout.includes(PLIST_LABEL);
+  } catch {
+    return false;
+  }
+}
+function unitPath() {
+  return join13(homedir3(), ".config", "systemd", "user", `${SYSTEMD_SERVICE}.service`);
+}
+function buildUnit() {
+  const cmd = resolveListenerCommand();
+  const execStart = [process.execPath, cmd.script, ...cmd.args].join(" ");
+  const logs = logDir();
+  return `[Unit]
+Description=RepoWise Listener
+After=network-online.target
+Wants=network-online.target
+
+[Service]
+Type=simple
+ExecStart=${execStart}
+Restart=always
+RestartSec=10
+StandardOutput=append:${join13(logs, "listener-stdout.log")}
+StandardError=append:${join13(logs, "listener-stderr.log")}
+
+[Install]
+WantedBy=default.target`;
+}
+async function linuxInstall() {
+  await mkdir8(logDir(), { recursive: true });
+  await mkdir8(join13(homedir3(), ".config", "systemd", "user"), { recursive: true });
+  await writeFile8(unitPath(), buildUnit());
+  await exec("systemctl", ["--user", "daemon-reload"]);
+  await exec("systemctl", ["--user", "enable", SYSTEMD_SERVICE]);
+  await exec("systemctl", ["--user", "start", SYSTEMD_SERVICE]);
+}
+async function linuxUninstall() {
+  try {
+    await exec("systemctl", ["--user", "stop", SYSTEMD_SERVICE]);
+  } catch {
+  }
+  try {
+    await exec("systemctl", ["--user", "disable", SYSTEMD_SERVICE]);
+  } catch {
+  }
+  try {
+    await unlink6(unitPath());
+  } catch {
+  }
+  try {
+    await exec("systemctl", ["--user", "daemon-reload"]);
+  } catch {
+  }
+}
+async function linuxIsInstalled() {
+  try {
+    const stdout = await exec("systemctl", ["--user", "is-enabled", SYSTEMD_SERVICE]);
+    return stdout.trim() === "enabled";
+  } catch {
+    return false;
+  }
+}
+async function win32Install() {
+  await mkdir8(logDir(), { recursive: true });
+  const cmd = resolveListenerCommand();
+  const taskCmd = [process.execPath, cmd.script, ...cmd.args].map((a) => `"${a}"`).join(" ");
+  await exec("schtasks", [
+    "/create",
+    "/tn",
+    TASK_NAME,
+    "/tr",
+    taskCmd,
+    "/sc",
+    "onlogon",
+    "/ru",
+    process.env.USERNAME ?? "",
+    "/f"
+  ]);
+  await exec("schtasks", ["/run", "/tn", TASK_NAME]);
+}
+async function win32Uninstall() {
+  try {
+    await exec("schtasks", ["/end", "/tn", TASK_NAME]);
+  } catch {
+  }
+  try {
+    await exec("schtasks", ["/delete", "/tn", TASK_NAME, "/f"]);
+  } catch {
+  }
+}
+async function win32IsInstalled() {
+  try {
+    await exec("schtasks", ["/query", "/tn", TASK_NAME]);
+    return true;
+  } catch {
+    return false;
+  }
+}
+async function darwinStop() {
+  try {
+    await exec("launchctl", ["unload", plistPath()]);
+  } catch {
+  }
+}
+async function linuxStop() {
+  await exec("systemctl", ["--user", "stop", SYSTEMD_SERVICE]);
+}
+async function win32Stop() {
+  await exec("schtasks", ["/end", "/tn", TASK_NAME]);
+}
+async function darwinIsServiceRunning() {
+  try {
+    const stdout = await exec("launchctl", ["list", PLIST_LABEL]);
+    const pidMatch = stdout.match(/"PID"\s*=\s*(\d+)/);
+    return pidMatch !== null && parseInt(pidMatch[1], 10) > 0;
+  } catch {
+    return false;
+  }
+}
+async function linuxIsServiceRunning() {
+  try {
+    const stdout = await exec("systemctl", ["--user", "is-active", SYSTEMD_SERVICE]);
+    return stdout.trim() === "active";
+  } catch {
+    return false;
   }
-});
-
-// ../../packages/shared/src/types/typed-resolution.ts
-function typedResolutionKey(filePath, propertyName, line, column) {
-  return `${filePath}\0${propertyName}\0${line.toString()}\0${column.toString()}`;
 }
-var TYPED_RESOLUTION_SCHEMA_VERSION, ACCEPTED_TYPED_RESOLUTION_SCHEMA_VERSIONS;
-var init_typed_resolution = __esm({
-  "../../packages/shared/src/types/typed-resolution.ts"() {
-    "use strict";
-    TYPED_RESOLUTION_SCHEMA_VERSION = 2;
-    ACCEPTED_TYPED_RESOLUTION_SCHEMA_VERSIONS = [1, 2];
+async function win32IsServiceRunning() {
+  try {
+    const stdout = await exec("schtasks", ["/query", "/tn", TASK_NAME, "/fo", "CSV"]);
+    return stdout.includes("Running");
+  } catch {
+    return false;
   }
-});
-
-// ../../packages/shared/src/types/billing.ts
-var init_billing = __esm({
-  "../../packages/shared/src/types/billing.ts"() {
-    "use strict";
+}
+async function stopService() {
+  switch (process.platform) {
+    case "darwin":
+      await darwinStop();
+      break;
+    case "linux":
+      await linuxStop();
+      break;
+    case "win32":
+      await win32Stop();
+      break;
+    default:
+      throw new Error(`Unsupported platform: ${process.platform}`);
   }
-});
-
-// ../../packages/shared/src/constants/platforms.ts
-var init_platforms = __esm({
-  "../../packages/shared/src/constants/platforms.ts"() {
-    "use strict";
+}
+async function install() {
+  switch (process.platform) {
+    case "darwin":
+      await darwinInstall();
+      break;
+    case "linux":
+      await linuxInstall();
+      break;
+    case "win32":
+      await win32Install();
+      break;
+    default:
+      throw new Error(`Unsupported platform: ${process.platform}`);
   }
-});
-
-// ../../packages/shared/src/constants/tiers.ts
-var SUBSCRIPTION_TIERS, TIER_LIMITS, TIER_FEATURES;
-var init_tiers = __esm({
-  "../../packages/shared/src/constants/tiers.ts"() {
-    "use strict";
-    SUBSCRIPTION_TIERS = {
-      FREE: "free",
-      // `starter` is the legacy $15 tier — kept as a migration alias (with its OLD limits)
-      // until existing Starter subs are price-swapped to Free (pricing v3). Removed after M7.
-      STARTER: "starter",
-      PRO: "pro",
-      TEAM: "team"
-    };
-    TIER_LIMITS = {
-      [SUBSCRIPTION_TIERS.FREE]: {
-        maxRepos: 1,
-        maxSeats: 1,
-        minSeats: 1,
-        maxSyncsPerMonth: 4,
-        // manual-only, hard cap (no overage)
-        maxConcurrentSyncs: 1,
-        freeFullScans: 0,
-        // graph-only: no LLM full scan
-        bedrockEndpoint: "public"
-      },
-      // Legacy alias — retains the OLD Starter limits until existing Starter subs are
-      // migrated to Free, then removed (M7). Do NOT reference for new logic.
-      [SUBSCRIPTION_TIERS.STARTER]: {
-        maxRepos: 1,
-        maxSeats: 1,
-        minSeats: 1,
-        maxSyncsPerMonth: 10,
-        maxConcurrentSyncs: 1,
-        freeFullScans: 1,
-        bedrockEndpoint: "public"
-      },
-      [SUBSCRIPTION_TIERS.PRO]: {
-        maxRepos: 1,
-        maxSeats: 1,
-        minSeats: 1,
-        maxSyncsPerMonth: 20,
-        maxConcurrentSyncs: 2,
-        freeFullScans: 1,
-        bedrockEndpoint: "public"
-      },
-      [SUBSCRIPTION_TIERS.TEAM]: {
-        maxRepos: 1,
-        maxSeats: 999999,
-        minSeats: 3,
-        maxSyncsPerMonth: 30,
-        maxConcurrentSyncs: 10,
-        freeFullScans: 1,
-        bedrockEndpoint: "public"
-      }
-    };
-    TIER_FEATURES = {
-      [SUBSCRIPTION_TIERS.FREE]: {
-        knowledgeGraph: true,
-        mcp: true,
-        context: false,
-        // LLM-generated narrative context docs
-        docs: false,
-        // RepoWise Docs
-        autoSync: false,
-        // auto-sync on merge (Free is manual-only)
-        overage: false
-        // pay-as-you-go syncs (Free is hard-capped)
-      },
-      // Legacy alias — full features until existing Starter subs migrate to Free.
-      [SUBSCRIPTION_TIERS.STARTER]: {
-        knowledgeGraph: true,
-        mcp: true,
-        context: true,
-        docs: true,
-        autoSync: true,
-        overage: true
-      },
-      [SUBSCRIPTION_TIERS.PRO]: {
-        knowledgeGraph: true,
-        mcp: true,
-        context: true,
-        docs: true,
-        autoSync: true,
-        overage: true
-      },
-      [SUBSCRIPTION_TIERS.TEAM]: {
-        knowledgeGraph: true,
-        mcp: true,
-        context: true,
-        docs: true,
-        autoSync: true,
-        overage: true
-      }
-    };
+}
+async function uninstall() {
+  switch (process.platform) {
+    case "darwin":
+      await darwinUninstall();
+      break;
+    case "linux":
+      await linuxUninstall();
+      break;
+    case "win32":
+      await win32Uninstall();
+      break;
+    default:
+      throw new Error(`Unsupported platform: ${process.platform}`);
   }
-});
-
-// ../../packages/shared/src/constants/roles.ts
-function hasPermission(role, permission) {
-  return PERMISSIONS[role][permission];
 }
-function resolveRole(groups) {
-  for (const role of ROLE_PRIORITY) {
-    if (groups.includes(role)) return role;
+async function isInstalled() {
+  switch (process.platform) {
+    case "darwin":
+      return darwinIsInstalled();
+    case "linux":
+      return linuxIsInstalled();
+    case "win32":
+      return win32IsInstalled();
+    default:
+      return false;
   }
-  return ROLES.MEMBER;
 }
-var ROLES, PERMISSIONS, ROLE_PRIORITY;
-var init_roles = __esm({
-  "../../packages/shared/src/constants/roles.ts"() {
-    "use strict";
-    ROLES = {
-      OWNER: "owner",
-      ADMIN: "admin",
-      REPO_MANAGER: "repo_manager",
-      MEMBER: "member"
-    };
-    PERMISSIONS = {
-      [ROLES.OWNER]: {
-        connectRepos: true,
-        viewSync: true,
-        triggerRetry: true,
-        configWatcher: true,
-        inviteMembers: true,
-        manageBilling: true,
-        configAiTools: true,
-        manageTeam: true
-      },
-      [ROLES.ADMIN]: {
-        connectRepos: true,
-        viewSync: true,
-        triggerRetry: true,
-        configWatcher: true,
-        inviteMembers: true,
-        manageBilling: false,
-        configAiTools: true,
-        manageTeam: true
-      },
-      [ROLES.REPO_MANAGER]: {
-        connectRepos: true,
-        viewSync: true,
-        triggerRetry: true,
-        configWatcher: true,
-        inviteMembers: false,
-        manageBilling: false,
-        configAiTools: true,
-        manageTeam: false
-      },
-      [ROLES.MEMBER]: {
-        connectRepos: false,
-        viewSync: true,
-        triggerRetry: true,
-        configWatcher: false,
-        inviteMembers: false,
-        manageBilling: false,
-        configAiTools: true,
-        manageTeam: false
-      }
-    };
-    ROLE_PRIORITY = [
-      ROLES.OWNER,
-      ROLES.ADMIN,
-      ROLES.REPO_MANAGER,
-      ROLES.MEMBER
-    ];
+async function isServiceRunning() {
+  switch (process.platform) {
+    case "darwin":
+      return darwinIsServiceRunning();
+    case "linux":
+      return linuxIsServiceRunning();
+    case "win32":
+      return win32IsServiceRunning();
+    default:
+      return false;
+  }
+}
+var IS_STAGING, PLIST_LABEL, SYSTEMD_SERVICE, TASK_NAME;
+var init_service_installer = __esm({
+  "../listener/dist/service-installer.js"() {
+    "use strict";
+    init_config_dir();
+    init_process_manager();
+    IS_STAGING = true ? true : false;
+    PLIST_LABEL = IS_STAGING ? "com.repowise-staging.listener" : "com.repowise.listener";
+    SYSTEMD_SERVICE = IS_STAGING ? "repowise-staging-listener" : "repowise-listener";
+    TASK_NAME = IS_STAGING ? "RepoWise Staging Listener" : "RepoWise Listener";
   }
 });
 
-// ../../packages/shared/src/constants/lsp-versions.ts
-function getCurrentPlatformKey(platform = process.platform, arch = process.arch) {
-  const platformMap = {
-    darwin: "darwin",
-    linux: "linux",
-    win32: "win32"
-  };
-  const archMap = {
-    x64: "x64",
-    arm64: "arm64"
+// ../listener/dist/lsp/registry.js
+function resolvePhpLspOverride(env = process.env, configOverrides) {
+  const envChoice = env["PHP_LSP"];
+  const configChoice = configOverrides?.["php"];
+  const choice = envChoice ?? configChoice;
+  if (choice !== "intelephense")
+    return null;
+  return {
+    id: "intelephense",
+    displayName: "intelephense (user-provided)",
+    command: "intelephense",
+    args: ["--stdio"],
+    extensions: [".php"],
+    lspLanguageId: "php",
+    installHint: "Intelephense override is enabled \u2014 install it yourself: `npm i -g intelephense` (commercial licence required for premium features)."
   };
-  const p = platformMap[platform];
-  const a = archMap[arch];
-  if (!p || !a) return null;
-  return `${p}-${a}`;
 }
-var NATIVE_LSP_VERSIONS, COURSIER_LSPS, TOOLCHAIN_LSPS;
-var init_lsp_versions = __esm({
-  "../../packages/shared/src/constants/lsp-versions.ts"() {
+function getEffectiveConfig(lang, env = process.env, configOverrides) {
+  if (lang === "php") {
+    const override = resolvePhpLspOverride(env, configOverrides);
+    if (override)
+      return override;
+  }
+  return LSP_REGISTRY[lang]?.[0];
+}
+function getEffectiveConfigList(lang, env = process.env, configOverrides) {
+  if (lang === "php") {
+    const override = resolvePhpLspOverride(env, configOverrides);
+    if (override)
+      return [override];
+  }
+  return LSP_REGISTRY[lang] ?? [];
+}
+function detectLanguage(path) {
+  const dot = path.lastIndexOf(".");
+  if (dot < 0)
+    return null;
+  const ext = path.slice(dot).toLowerCase();
+  for (const [lang, configs] of Object.entries(LSP_REGISTRY)) {
+    if (configs.some((c) => c.extensions.includes(ext))) {
+      return lang;
+    }
+  }
+  return null;
+}
+async function probeServers(isAvailable, env = process.env, configOverrides) {
+  const out = [];
+  for (const lang of Object.keys(LSP_REGISTRY)) {
+    const configs = getEffectiveConfigList(lang, env, configOverrides);
+    const checkedCommands = configs.map((c) => c.command);
+    let found = null;
+    for (const config2 of configs) {
+      if (await isAvailable(config2.command)) {
+        found = config2;
+        break;
+      }
+    }
+    out.push({ language: lang, config: found, checkedCommands });
+  }
+  return out;
+}
+function getBuildSpec(language) {
+  return BUILD_SPECS[language] ?? null;
+}
+var LSP_REGISTRY, BUILD_SPECS;
+var init_registry = __esm({
+  "../listener/dist/lsp/registry.js"() {
     "use strict";
-    NATIVE_LSP_VERSIONS = {
-      "rust-analyzer": {
-        source: { kind: "github-release", repo: "rust-lang/rust-analyzer" },
-        version: "2026-05-11",
-        license: "MIT OR Apache-2.0",
-        assets: {
-          "darwin-arm64": {
-            filename: "rust-analyzer-aarch64-apple-darwin.gz",
-            sha256: "eeb6367cd2c6cc9217ae06cea2e0c7e9cf20cdac5e934a1b272b13c76ece5aee",
-            binaryPath: "rust-analyzer-aarch64-apple-darwin"
-          },
-          "darwin-x64": {
-            filename: "rust-analyzer-x86_64-apple-darwin.gz",
-            sha256: "718398822ec2f282bca36f6f109bbbb33746437e1a63946fe7fd3d84d502a67d",
-            binaryPath: "rust-analyzer-x86_64-apple-darwin"
-          },
-          "linux-x64": {
-            filename: "rust-analyzer-x86_64-unknown-linux-gnu.gz",
-            sha256: "ede62b8536a37c90d804850d0bed3623e3d6af90a1195e4930a1627e5d8ae33f",
-            binaryPath: "rust-analyzer-x86_64-unknown-linux-gnu"
-          },
-          "linux-arm64": {
-            filename: "rust-analyzer-aarch64-unknown-linux-gnu.gz",
-            sha256: "dbe8c4c0bed79f36133c9d0a0eb629709d91343e065a179cd4a5f8137817de1c",
-            binaryPath: "rust-analyzer-aarch64-unknown-linux-gnu"
-          },
-          "win32-x64": {
-            filename: "rust-analyzer-x86_64-pc-windows-msvc.zip",
-            sha256: "1600365f2d8b0e42a811eafb5e129b75b991ddf9d9955d19d8fc2f4f2b9c19ef",
-            binaryPath: "rust-analyzer.exe"
-          },
-          "win32-arm64": {
-            filename: "rust-analyzer-aarch64-pc-windows-msvc.zip",
-            sha256: "3cd63d31e9abfea89488eebfd2c29d41550af6cb6f6b32f52e455fb783215fd0",
-            binaryPath: "rust-analyzer.exe"
+    LSP_REGISTRY = {
+      typescript: [
+        {
+          id: "typescript-language-server",
+          displayName: "typescript-language-server",
+          command: "typescript-language-server",
+          args: ["--stdio"],
+          extensions: [".ts", ".tsx", ".mts", ".cts"],
+          lspLanguageId: "typescript",
+          installHint: "npm i -g typescript typescript-language-server",
+          npmPackage: "typescript-language-server"
+        }
+      ],
+      javascript: [
+        {
+          id: "typescript-language-server-js",
+          displayName: "typescript-language-server (for JS)",
+          command: "typescript-language-server",
+          args: ["--stdio"],
+          extensions: [".js", ".jsx", ".mjs", ".cjs"],
+          lspLanguageId: "javascript",
+          installHint: "npm i -g typescript typescript-language-server",
+          npmPackage: "typescript-language-server"
+        }
+      ],
+      python: [
+        {
+          id: "pyright",
+          displayName: "pyright",
+          command: "pyright-langserver",
+          args: ["--stdio"],
+          extensions: [".py", ".pyi"],
+          lspLanguageId: "python",
+          installHint: "npm i -g pyright",
+          npmPackage: "pyright",
+          // Phase 7L: strict-mode Pyright. Default `basic` mode suppresses
+          // definition/hover for un-annotated locals which kneecaps the
+          // upgrade rate on real codebases. `useLibraryCodeForTypes`
+          // unlocks stdlib member lookups, `autoSearchPaths` lets Pyright
+          // find venv site-packages without per-project pyrightconfig.json,
+          // and `diagnosticMode: 'workspace'` forces full-workspace symbol
+          // materialization so the first `workspace/symbol` query doesn't
+          // race the indexer.
+          //
+          // Disable `publishDiagnostics` — we don't render lint output
+          // and the noise slows Pyright on large projects (plan §Python
+          // risks).
+          initializationOptions: {
+            python: {
+              analysis: {
+                typeCheckingMode: "strict",
+                useLibraryCodeForTypes: true,
+                autoSearchPaths: true,
+                diagnosticMode: "workspace"
+                // Pyright honours either `disableLanguageServices` or
+                // simply not subscribing to diagnostics; the conservative
+                // path is to send the request handshake without
+                // publishDiagnostics in our capabilities (already the
+                // case in workspace-session.ts) and avoid extra knobs
+                // here that would diverge from Pyright defaults.
+              }
+            }
           }
+        },
+        {
+          id: "pylsp",
+          displayName: "python-lsp-server",
+          command: "pylsp",
+          args: [],
+          extensions: [".py", ".pyi"],
+          lspLanguageId: "python",
+          installHint: 'pipx install "python-lsp-server[all]"'
         }
-      },
-      clangd: {
-        source: { kind: "github-release", repo: "clangd/clangd" },
-        version: "18.1.3",
-        license: "Apache-2.0 WITH LLVM-exception",
-        assets: {
-          // clangd ships a single universal macOS binary covering both
-          // architectures — same filename for darwin-arm64 and darwin-x64.
-          "darwin-arm64": {
-            filename: "clangd-mac-18.1.3.zip",
-            sha256: "442c18d98671d8b5d811b25002ad1f2fd0b9efb07e7905a41502f1f1311dc566",
-            binaryPath: "clangd_18.1.3/bin/clangd"
-          },
-          "darwin-x64": {
-            filename: "clangd-mac-18.1.3.zip",
-            sha256: "442c18d98671d8b5d811b25002ad1f2fd0b9efb07e7905a41502f1f1311dc566",
-            binaryPath: "clangd_18.1.3/bin/clangd"
-          },
-          "linux-x64": {
-            filename: "clangd-linux-18.1.3.zip",
-            sha256: "775f6ac798d9c599258e3f4fa14d0af908b1801d38250e72a18fb907b28a1be6",
-            binaryPath: "clangd_18.1.3/bin/clangd"
-          },
-          "win32-x64": {
-            filename: "clangd-windows-18.1.3.zip",
-            sha256: "3d287d39bab29406f002ff80b939668e59e25ef72346d8f38826305016e45896",
-            binaryPath: "clangd_18.1.3/bin/clangd.exe"
+      ],
+      go: [
+        {
+          id: "gopls",
+          displayName: "gopls",
+          command: "gopls",
+          // Modern gopls uses stdio by default; `serve` is the legacy
+          // subcommand and no longer needed (review finding).
+          args: [],
+          extensions: [".go"],
+          lspLanguageId: "go",
+          installHint: "go install golang.org/x/tools/gopls@latest",
+          toolchainInstallKey: "gopls"
+        }
+      ],
+      rust: [
+        {
+          id: "rust-analyzer",
+          displayName: "rust-analyzer",
+          command: "rust-analyzer",
+          args: [],
+          extensions: [".rs"],
+          lspLanguageId: "rust",
+          nativeInstallKey: "rust-analyzer",
+          // `rustup component add rust-analyzer` installs a rustup proxy
+          // — the binary may not be on PATH directly. `brew install
+          // rust-analyzer` or a release tarball is more reliable.
+          installHint: "brew install rust-analyzer (or 'rustup component add rust-analyzer' and ensure it is on PATH)",
+          // Phase 7L: rust-analyzer init options. `cargo.buildScripts.enable`
+          // and `procMacro.enable` are critical — without them, half of
+          // Serde's call graph is invisible (proc-macro-expanded code is
+          // skipped and `derive(Serialize)` impl trait methods disappear).
+          // `checkOnSave.enable: false` keeps the server quiet on workspace
+          // edits since we don't render diagnostics.
+          initializationOptions: {
+            cargo: {
+              buildScripts: { enable: true }
+            },
+            procMacro: { enable: true },
+            checkOnSave: { enable: false }
           }
         }
-      },
-      // Coursier — single-file JVM launcher that we install once and then
-      // use to install any JVM-based LSP (metals, future kotlin LSPs, etc.).
-      // Tier 2 of the install plan: the binary itself is just another
-      // GitHub-release Tier 1 entry; the magic is what we DO with it after
-      // install (see coursier-installer.ts).
-      coursier: {
-        source: { kind: "github-release", repo: "coursier/coursier" },
-        version: "v2.1.24",
-        license: "Apache-2.0",
-        assets: {
-          "darwin-arm64": {
-            filename: "cs-aarch64-apple-darwin.gz",
-            sha256: "53a5728c2016118c8296fa7d5678ddfe122e22dc6c36deb554d771b3b9295b4f",
-            binaryPath: "cs"
-          },
-          "darwin-x64": {
-            filename: "cs-x86_64-apple-darwin.gz",
-            sha256: "33913cd6b61658035d9e6fe971e919cb0ef1f659aa7bff7deeded963a2d36385",
-            binaryPath: "cs"
-          },
-          "linux-x64": {
-            filename: "cs-x86_64-pc-linux.gz",
-            sha256: "d2c0572a17fb6146ea65349b59dd216b38beff60ae22bce6e549867c6ed2eda6",
-            binaryPath: "cs"
-          },
-          // coursier v2.1.24 ships no aarch64-linux build — Scala dev on
-          // ARM Linux falls back to the toolchain-installed Metals path.
-          "win32-x64": {
-            filename: "cs-x86_64-pc-win32.zip",
-            sha256: "c16b4f95b59fbe035cdda4353cfca78befcbbef5a20a3b151c679717c1504c9f",
-            binaryPath: "cs.exe"
+      ],
+      java: [
+        // The `jdtls` binary exists when installed via Homebrew (which
+        // ships a wrapper over the Eclipse JDT launcher) or the nvim
+        // jdtls scripts. Raw Eclipse downloads require invoking
+        // `java -jar org.eclipse.equinox.launcher_*.jar`; doctor needs
+        // to surface that when the bare `jdtls` binary is absent.
+        //
+        // Phase 7L init options:
+        //   - autobuild disabled — per-edit work the listener doesn't
+        //     need; saves CPU + memory on the cold start path.
+        //   - completion disabled — same rationale.
+        //   - progressReportProvider true — needed so waitForIndex can
+        //     subscribe to "Importing projects" / "Building workspace"
+        //     progress and block receiver queries until end-of-progress.
+        //
+        // JVM args:
+        //   - `-Xmx2G` — JDTLS OOMs on real-world repos with the default
+        //     `-Xmx256m`. Without this the OOM kills the server inside
+        //     workspace import, which opens the Java per-repo circuit
+        //     breaker (plan §Java failure modes).
+        //   - `-data <repoSha-scoped workspace>` — added at spawn time by
+        //     workspace-session.ts so JDTLS skips the Maven/Gradle import
+        //     on subsequent runs. Watch pom.xml/build.gradle mtime to
+        //     invalidate stale incremental state.
+        {
+          id: "jdtls",
+          displayName: "Eclipse JDT Language Server",
+          command: "jdtls",
+          args: ["--jvm-arg=-Xmx2G"],
+          extensions: [".java"],
+          lspLanguageId: "java",
+          installHint: "brew install jdtls (see https://github.com/eclipse-jdtls/eclipse.jdt.ls)",
+          nativeInstallKey: "jdtls",
+          initializationOptions: {
+            bundles: [],
+            extendedClientCapabilities: {
+              progressReportProvider: true,
+              classFileContentsSupport: true
+            },
+            settings: {
+              java: {
+                autobuild: { enabled: false },
+                completion: { enabled: false },
+                // Don't render diagnostics — listener doesn't surface
+                // Java lint output and the firehose slows JDTLS.
+                errors: { incompleteClasspath: { severity: "ignore" } }
+              }
+            }
           }
         }
-      },
-      // Eclipse JDT Language Server — single cross-platform tarball
-      // hosted at download.eclipse.org. Ships as an Equinox launcher jar
-      // that must be invoked via `java -jar`, so the installer generates
-      // a `bin/jdtls` shim that selects the right config_{platform} dir.
-      // Requires JDK 17+ (jdtls 1.51 minimum).
-      jdtls: {
-        source: { kind: "direct-url" },
-        version: "1.51.0",
-        license: "EPL-2.0",
-        requiresJdk: 17,
-        assets: {
-          "darwin-arm64": {
-            url: "https://download.eclipse.org/jdtls/milestones/1.51.0/jdt-language-server-1.51.0-202510022025.tar.gz",
-            filename: "jdt-language-server-1.51.0-202510022025.tar.gz",
-            sha256: "8a59372117881bf5bdc0220f2254472846b88137c058f344b00a7d41427745a1",
-            binaryPath: "plugins/org.eclipse.equinox.launcher_*.jar",
-            launcherJarGlob: "plugins/org.eclipse.equinox.launcher_*.jar",
-            wrapperBinaryName: "jdtls"
-          },
-          "darwin-x64": {
-            url: "https://download.eclipse.org/jdtls/milestones/1.51.0/jdt-language-server-1.51.0-202510022025.tar.gz",
-            filename: "jdt-language-server-1.51.0-202510022025.tar.gz",
-            sha256: "8a59372117881bf5bdc0220f2254472846b88137c058f344b00a7d41427745a1",
-            binaryPath: "plugins/org.eclipse.equinox.launcher_*.jar",
-            launcherJarGlob: "plugins/org.eclipse.equinox.launcher_*.jar",
-            wrapperBinaryName: "jdtls"
-          },
-          "linux-x64": {
-            url: "https://download.eclipse.org/jdtls/milestones/1.51.0/jdt-language-server-1.51.0-202510022025.tar.gz",
-            filename: "jdt-language-server-1.51.0-202510022025.tar.gz",
-            sha256: "8a59372117881bf5bdc0220f2254472846b88137c058f344b00a7d41427745a1",
-            binaryPath: "plugins/org.eclipse.equinox.launcher_*.jar",
-            launcherJarGlob: "plugins/org.eclipse.equinox.launcher_*.jar",
-            wrapperBinaryName: "jdtls"
-          },
-          "linux-arm64": {
-            url: "https://download.eclipse.org/jdtls/milestones/1.51.0/jdt-language-server-1.51.0-202510022025.tar.gz",
-            filename: "jdt-language-server-1.51.0-202510022025.tar.gz",
-            sha256: "8a59372117881bf5bdc0220f2254472846b88137c058f344b00a7d41427745a1",
-            binaryPath: "plugins/org.eclipse.equinox.launcher_*.jar",
-            launcherJarGlob: "plugins/org.eclipse.equinox.launcher_*.jar",
-            wrapperBinaryName: "jdtls"
-          },
-          "win32-x64": {
-            url: "https://download.eclipse.org/jdtls/milestones/1.51.0/jdt-language-server-1.51.0-202510022025.tar.gz",
-            filename: "jdt-language-server-1.51.0-202510022025.tar.gz",
-            sha256: "8a59372117881bf5bdc0220f2254472846b88137c058f344b00a7d41427745a1",
-            binaryPath: "plugins/org.eclipse.equinox.launcher_*.jar",
-            launcherJarGlob: "plugins/org.eclipse.equinox.launcher_*.jar",
-            wrapperBinaryName: "jdtls"
-          }
+      ],
+      csharp: [
+        // Issue #352 item #5 — csharp-ls listed FIRST. Both are MIT-OSS
+        // and Roslyn-backed, but csharp-ls is significantly lighter (~10 MB
+        // dotnet-tool install vs. OmniSharp's ~200 MB native binary). On
+        // user machines with `dotnet` on PATH, csharp-ls is installable in
+        // one command with no native-binary fetch. OmniSharp stays as the
+        // installed-elsewhere fallback (Roslyn-build farms, JetBrains
+        // Rider tool dirs, etc.).
+        {
+          id: "csharp-ls",
+          displayName: "csharp-ls",
+          command: "csharp-ls",
+          args: [],
+          extensions: [".cs"],
+          lspLanguageId: "csharp",
+          installHint: "dotnet tool install -g csharp-ls",
+          toolchainInstallKey: "csharp-ls"
+        },
+        {
+          id: "omnisharp",
+          displayName: "OmniSharp",
+          command: "omnisharp",
+          args: ["-lsp"],
+          extensions: [".cs"],
+          lspLanguageId: "csharp",
+          installHint: "https://github.com/OmniSharp/omnisharp-roslyn/releases"
+        }
+      ],
+      php: [
+        // Phase 7L++: Phpactor only. Phpactor is MIT-licensed, free, and
+        // ships as a single phar via Composer. We DO NOT bundle
+        // Intelephense — its premium tier is commercial and its community
+        // licence is not redistributable. Customers who already own an
+        // Intelephense licence can opt-in via the `PHP_LSP=intelephense`
+        // environment variable, which the CLI swaps into the registry at
+        // runtime (see apps/cli/src/commands/lsp.ts step 7). The escape
+        // hatch requires the user to provision an `intelephense` binary
+        // on PATH themselves.
+        //
+        // Confidence floor on PHP is 0.7 (see lsp-upgrade-strategy.ts).
+        // Phpactor's static analysis is solid for PSR-4 resolvable calls
+        // but stumbles on Laravel-style facades / magic accessors — those
+        // surface as null definitions, recorded as `kind: 'definition'`
+        // with `targets.length === 0` (no upgrade, telemetry preserved).
+        {
+          id: "phpactor",
+          displayName: "phpactor",
+          command: "phpactor",
+          args: ["language-server"],
+          extensions: [".php"],
+          lspLanguageId: "php",
+          installHint: "composer global require phpactor/phpactor (see https://phpactor.readthedocs.io/en/master/usage/standalone.html)",
+          toolchainInstallKey: "phpactor"
+        }
+      ],
+      ruby: [
+        {
+          id: "ruby-lsp",
+          displayName: "ruby-lsp",
+          command: "ruby-lsp",
+          args: [],
+          extensions: [".rb"],
+          lspLanguageId: "ruby",
+          installHint: "gem install ruby-lsp",
+          toolchainInstallKey: "ruby-lsp"
+        },
+        {
+          id: "solargraph",
+          displayName: "solargraph",
+          command: "solargraph",
+          args: ["stdio"],
+          extensions: [".rb"],
+          lspLanguageId: "ruby",
+          installHint: "gem install solargraph"
+        }
+      ],
+      kotlin: [
+        // Phase 7L++: fwcd Kotlin LSP. JVM cold-start is ~30s on the first
+        // Gradle/Maven import — the language server materialises the
+        // build's classpath before symbol lookups return. On mixed
+        // Kotlin/Java repos the WorkspaceManager spawns BOTH `jdtls` and
+        // `kotlin-language-server` — each owns its own file-type filter
+        // and they coexist without contention. Per-language LRU eviction
+        // (5-min idle, RSS soft-cap) prevents the two JVMs from pinning
+        // memory on long-lived listeners.
+        //
+        // Future: when JetBrains' Kotlin LSP exits preview, drop a
+        // higher-priority entry above this one with the JB binary; we
+        // keep fwcd as the fallback because JB's LSP requires a JetBrains
+        // account.
+        {
+          id: "kotlin-language-server",
+          displayName: "kotlin-language-server (fwcd)",
+          command: "kotlin-language-server",
+          args: [],
+          extensions: [".kt", ".kts"],
+          lspLanguageId: "kotlin",
+          installHint: "brew install kotlin-language-server (or see https://github.com/fwcd/kotlin-language-server)",
+          nativeInstallKey: "kotlin-language-server"
+        }
+      ],
+      swift: [
+        {
+          id: "sourcekit-lsp",
+          displayName: "sourcekit-lsp",
+          command: "sourcekit-lsp",
+          args: [],
+          extensions: [".swift"],
+          lspLanguageId: "swift",
+          installHint: "Bundled with Xcode Command Line Tools on macOS",
+          toolchainInstallKey: "sourcekit-lsp",
+          requiresBuild: true
+        }
+      ],
+      dart: [
+        // Phase 7L++: the official Dart Analysis Server ships inside the
+        // Dart SDK as `dart language-server --protocol=lsp`. There's no
+        // separate binary to install — installing Dart (or Flutter, which
+        // bundles Dart) is sufficient. Confidence floor is 0.9: the Dart
+        // analyzer is authoritative, derives types from sound null safety,
+        // and is the same server that powers the official IDE plugins.
+        // No `initializationOptions` — Dart's analyzer derives everything
+        // from `pubspec.yaml` / `analysis_options.yaml` at the repo root.
+        {
+          id: "dart-language-server",
+          displayName: "dart language-server",
+          command: "dart",
+          args: ["language-server", "--protocol=lsp"],
+          extensions: [".dart"],
+          lspLanguageId: "dart",
+          installHint: "Install Dart SDK from https://dart.dev/get-dart (or Flutter from https://flutter.dev \u2014 bundles Dart).",
+          toolchainInstallKey: "dart-language-server"
+        }
+      ],
+      // Scala via Metals (Phase 7L+).
+      //
+      // Metals is the de-facto Scala language server. It coordinates with
+      // a build server (Bloop by default; SBT/Mill/Gradle alternatives are
+      // discovered from the project's build files) to obtain the project's
+      // classpath, semantic database, and compiler diagnostics. The Bloop
+      // daemon is a separate JVM process that Metals spawns on its first
+      // `initialize`, then keeps warm; the listener's WorkspaceManager
+      // pairs Bloop lifecycle to Metals' (see bloop-lifecycle.ts) so they
+      // are spawned together on lazy `getOrOpen` and torn down together
+      // on idle eviction.
+      //
+      // Install hint: `coursier install metals` — Coursier (`cs`) is the
+      // canonical Scala launcher and is typically already on a Scala
+      // developer's machine. The Coursier-managed `metals` shim resolves
+      // Bloop on first use, so no separate Bloop install is required.
+      // Macro-expanded code can mis-locate definitions (Scala 3 inline /
+      // quote macros, scala-compat shims) — the per-language strategy
+      // pins confidence at 0.85 to reflect that limitation.
+      scala: [
+        {
+          id: "metals",
+          displayName: "Metals (Scala)",
+          command: "metals",
+          args: [],
+          extensions: [".scala", ".sc", ".sbt"],
+          lspLanguageId: "scala",
+          installHint: "coursier install metals (see https://scalameta.org/metals \u2014 Coursier-managed binary coordinates with Bloop automatically)",
+          coursierInstallKey: "metals"
+        }
+      ],
+      c: [
+        {
+          id: "clangd-c",
+          displayName: "clangd",
+          command: "clangd",
+          // `--compile-commands-dir=.repowise` lets clangd pick up the
+          // stub compile_commands.json the listener writes for repos
+          // that don't ship one (header-only libs, single-file repos).
+          // clangd still finds repo-root or build/ compile_commands.json
+          // first when present — this is a fallback location, not an
+          // override (task #1).
+          args: ["--background-index", "--compile-commands-dir=.repowise"],
+          extensions: [".c", ".h"],
+          lspLanguageId: "c",
+          installHint: "brew install llvm (includes clangd)",
+          nativeInstallKey: "clangd"
         }
-      },
-      // fwcd/kotlin-language-server — single cross-platform zip on GitHub
-      // releases. Ships a `bin/kotlin-language-server` shell script + a
-      // matching `.bat` for Windows — both invoke `java` internally, so
-      // we just chmod+x and symlink (no shim needed). Requires JDK 11+.
-      "kotlin-language-server": {
-        source: { kind: "github-release", repo: "fwcd/kotlin-language-server" },
-        version: "1.3.13",
-        license: "MIT",
-        requiresJdk: 11,
-        assets: {
-          "darwin-arm64": {
-            filename: "server.zip",
-            sha256: "4fe7d71d087b307c7869036171bd9d8c6a4284cd7c25b89098b0a24eb2d9b6d2",
-            binaryPath: "server/bin/kotlin-language-server"
-          },
-          "darwin-x64": {
-            filename: "server.zip",
-            sha256: "4fe7d71d087b307c7869036171bd9d8c6a4284cd7c25b89098b0a24eb2d9b6d2",
-            binaryPath: "server/bin/kotlin-language-server"
-          },
-          "linux-x64": {
-            filename: "server.zip",
-            sha256: "4fe7d71d087b307c7869036171bd9d8c6a4284cd7c25b89098b0a24eb2d9b6d2",
-            binaryPath: "server/bin/kotlin-language-server"
-          },
-          "linux-arm64": {
-            filename: "server.zip",
-            sha256: "4fe7d71d087b307c7869036171bd9d8c6a4284cd7c25b89098b0a24eb2d9b6d2",
-            binaryPath: "server/bin/kotlin-language-server"
-          },
-          "win32-x64": {
-            filename: "server.zip",
-            sha256: "4fe7d71d087b307c7869036171bd9d8c6a4284cd7c25b89098b0a24eb2d9b6d2",
-            binaryPath: "server/bin/kotlin-language-server.bat"
-          }
+      ],
+      cpp: [
+        {
+          id: "clangd-cpp",
+          displayName: "clangd",
+          command: "clangd",
+          // `--compile-commands-dir=.repowise` lets clangd pick up the
+          // stub compile_commands.json the listener writes for repos
+          // that don't ship one (header-only libs, single-file repos).
+          // clangd still finds repo-root or build/ compile_commands.json
+          // first when present — this is a fallback location, not an
+          // override (task #1).
+          args: ["--background-index", "--compile-commands-dir=.repowise"],
+          extensions: [".cpp", ".cc", ".cxx", ".hpp", ".hh", ".hxx"],
+          lspLanguageId: "cpp",
+          installHint: "brew install llvm (includes clangd)",
+          nativeInstallKey: "clangd"
         }
-      }
-    };
-    COURSIER_LSPS = {
-      metals: {
-        appName: "metals",
-        displayName: "Metals (Scala)",
-        license: "Apache-2.0"
-      }
+      ],
+      vue: [
+        {
+          id: "vue-language-server",
+          displayName: "Vue Language Server (volar)",
+          command: "vue-language-server",
+          args: ["--stdio"],
+          extensions: [".vue"],
+          lspLanguageId: "vue",
+          installHint: "npm i -g @vue/language-server",
+          npmPackage: "@vue/language-server"
+        }
+      ],
+      svelte: [
+        {
+          id: "svelte-language-server",
+          displayName: "svelte-language-server",
+          command: "svelteserver",
+          args: ["--stdio"],
+          extensions: [".svelte"],
+          lspLanguageId: "svelte",
+          installHint: "npm i -g svelte-language-server",
+          npmPackage: "svelte-language-server"
+        }
+      ]
     };
-    TOOLCHAIN_LSPS = {
-      gopls: {
-        toolchain: "go",
-        installArgs: ["install", "golang.org/x/tools/gopls@latest"],
-        binaryName: "gopls",
-        toolchainBinDir: "go/bin",
-        displayName: "gopls",
-        license: "BSD-3-Clause"
-      },
-      "ruby-lsp": {
-        toolchain: "gem",
-        installArgs: ["install", "--user-install", "ruby-lsp"],
-        binaryName: "ruby-lsp",
-        // gem userdir is version-dependent — resolved at install time.
-        displayName: "ruby-lsp",
-        license: "MIT"
-      },
-      "csharp-ls": {
-        toolchain: "dotnet",
-        installArgs: ["tool", "install", "-g", "csharp-ls"],
-        binaryName: "csharp-ls",
-        toolchainBinDir: ".dotnet/tools",
-        displayName: "csharp-ls",
-        license: "MIT"
-      },
-      phpactor: {
-        toolchain: "composer",
-        installArgs: ["global", "require", "phpactor/phpactor"],
-        binaryName: "phpactor",
-        toolchainBinDir: ".composer/vendor/bin",
-        displayName: "phpactor",
-        license: "MIT"
-      },
-      "dart-language-server": {
-        bundled: true,
-        binaryName: "dart",
-        displayName: "dart language-server (Dart SDK)",
-        license: "BSD-3-Clause"
-      },
-      "sourcekit-lsp": {
-        bundled: true,
-        binaryName: "sourcekit-lsp",
-        displayName: "sourcekit-lsp (Xcode CLT)",
-        license: "Apache-2.0"
+    BUILD_SPECS = {
+      swift: {
+        gateCommands: ["swift", "xcrun"],
+        gateExecs: [{ command: "xcode-select", args: ["-p"] }],
+        manifests: ["Package.swift", "*.xcodeproj", "*.xcworkspace"],
+        platform: "darwin",
+        command: "swift",
+        args: ["build"],
+        indexStoreProbe: ".build/index/store"
       }
     };
   }
 });
 
-// ../../packages/shared/src/index.ts
-var init_src = __esm({
-  "../../packages/shared/src/index.ts"() {
-    "use strict";
-    init_typed_resolution();
-    init_billing();
-    init_platforms();
-    init_tiers();
-    init_roles();
-    init_lsp_versions();
-  }
-});
-
 // ../listener/dist/lsp/jdk-probe.js
 import { spawn as spawn3 } from "child_process";
 function parseJavaMajorVersion(stderr) {
@@ -3105,17 +3112,53 @@ Treat RepoWise as your default starting point for every task that touches this c
 
 6. **Don't edit \`repowise-context/\` files manually.** They're regenerated by RepoWise on every sync. Manual edits will be overwritten. Update source code; let the next sync regenerate.
 
-7. **Mark every response that used RepoWise.** When your work used any RepoWise resource \u2014 a file under \`repowise-context/\`, or a RepoWise MCP tool \u2014 begin your response with a single tag line:
+7. **Mark a response with \`_Powered by RepoWise._\` \u2014 and ONLY when you actually used RepoWise this turn.** Begin the response with a single tag line:
 
        _Powered by RepoWise._
 
-   That's it \u2014 one short line, no longer preamble. The host's tool-call UI already shows RepoWise MCP calls visibly; this tag adds the same surface for context-file reads. If you didn't use RepoWise on this turn, omit the tag \u2014 never fake it.
+   ONLY on a turn where you genuinely used a RepoWise resource THIS turn: a RepoWise MCP/LSP tool call, OR a read of a \`repowise-context/\` file. One short line, no longer preamble. The host's tool-call UI already shows MCP/LSP calls visibly; this tag adds the same surface for the otherwise-invisible context-file reads. If the turn did not actually use RepoWise, omit the tag entirely \u2014 never add it out of habit, never fake it.
 
 8. **MCP unavailable vs. a RepoWise miss \u2014 handle them differently.** If RepoWise MCP is entirely unavailable (no \`.mcp.json\` configured, listener not running), tell the user. But if RepoWise IS available and simply does not cover a specific question, just continue with Tier 3 \u2014 do NOT announce that "RepoWise doesn't have it." That fallback is normal and expected; the system records it on its own to improve coverage.
 ${END_MARKER}`;
-function injectAgentInstructions(content) {
+var AI_AGENT_USAGE_INSTRUCTIONS_GRAPH = `${START_MARKER}
+## How AI Agents Should Use This Context
+
+RepoWise provides a live, pre-analyzed **knowledge graph** of this codebase through its MCP server \u2014 symbol resolution, callers, references, call graphs, refactor impact, dependency graphs, and type info \u2014 plus language-server (LSP) intelligence. Use it to navigate and reason about the code structurally instead of guessing from raw text.
+
+Treat RepoWise as your default starting point for every task that touches this codebase, not a Q&A reference.
+
+**Rules for using RepoWise:**
+
+1. **Always start with RepoWise.** Before any task \u2014 questions, planning, coding, debugging, refactoring, tests, code review \u2014 resolve the relevant symbols and their blast radius via RepoWise FIRST. Skipping it leads to wrong assumptions, duplicated abstractions, and missed call sites.
+
+2. **Use the two-tier hierarchy in this order:**
+   - **Tier 1 \u2014 RepoWise MCP + LSP** for all structural queries: symbol resolution, callers, references, call graphs, refactor impact, dependency graphs, type info (\`find_symbol\`, \`get_impact\`, \`find_callers\`, \`find_references\`, \`lsp_definition\`, \`lsp_references\`, \`lsp_hover\`, etc. \u2014 the server is named "RepoWise MCP for <repo>", so hosts that prefix tool names expose them accordingly). Each tool's description tells you when to use it.
+   - **Tier 2 \u2014 Native code search** (\`read_file\` / \`grep\` / \`glob\` on raw source) to read implementation bodies and for anything the graph does not cover (recent commits, in-flight branches, exact strings). An enforcement hook may DENY a native search until you have used a RepoWise MCP/LSP tool this turn \u2014 that is expected, not an error: query RepoWise first, then retry the same search and it will proceed.
+
+3. **Batch tool calls in parallel.** Whenever you need multiple independent lookups, invoke all relevant tools SIMULTANEOUSLY rather than sequentially (e.g. confirm a symbol's shape AND its callers in one turn). Only chain serially when one tool's output is genuinely the input to another (e.g. \`find_symbol\` \u2192 then \`lsp_definition\` on the match).
+
+4. **Apply per-task patterns** (always batch the gathering step):
+   - Planning / refactoring \u2192 \`get_impact\`, \`get_deps\`, \`find_references\` to size the blast radius first.
+   - Implementing \u2192 \`find_symbol\`, \`lsp_definition\`, \`lsp_hover\` to land on the exact definition and its type.
+   - Debugging \u2192 \`find_callers\`, \`get_call_graph\` to trace the path.
+   - Writing tests \u2192 \`find_tests_for_symbol\` to find existing coverage.
+
+5. **Propagate to subagents.** When delegating work, explicitly instruct the sub-task to use the RepoWise MCP/LSP tools FIRST. Subagents don't inherit parent instructions automatically.
+
+6. **Mark a response with \`_Powered by RepoWise._\` \u2014 and ONLY when you actually used RepoWise this turn.** Begin the response with a single tag line:
+
+       _Powered by RepoWise._
+
+   ONLY on a turn where you genuinely called a RepoWise MCP/LSP tool. One short line, no longer preamble. The host's tool-call UI already shows MCP/LSP calls visibly, so this only confirms what the turn did \u2014 if the turn did not call a RepoWise tool, omit the tag entirely; never add it out of habit, never fake it.
+
+7. **MCP unavailable vs. a RepoWise miss \u2014 handle them differently.** If RepoWise MCP is entirely unavailable (no \`.mcp.json\` configured, listener not running), tell the user. But if RepoWise IS available and simply does not cover a specific question, just continue with native search \u2014 do NOT announce that "RepoWise doesn't have it." That fallback is normal and expected; the system records it on its own to improve coverage.
+${END_MARKER}`;
+function agentInstructionsFor(variant = "full") {
+  return variant === "graph" ? AI_AGENT_USAGE_INSTRUCTIONS_GRAPH : AI_AGENT_USAGE_INSTRUCTIONS;
+}
+function injectAgentInstructions(content, variant = "full") {
   const lineEnding = content.includes("\r\n") ? "\r\n" : "\n";
-  const canonicalBlock = AI_AGENT_USAGE_INSTRUCTIONS.replace(/\n/g, lineEnding);
+  const canonicalBlock = agentInstructionsFor(variant).replace(/\n/g, lineEnding);
   const startIdx = content.indexOf(START_MARKER);
   const endIdx = content.indexOf(END_MARKER);
   if (startIdx >= 0 && endIdx > startIdx) {
@@ -3159,14 +3202,20 @@ function claudeToolPrefix(repoName) {
 }
 var GRAPH_TOOLS = "find_symbol, get_symbol, get_impact, find_callers, find_references, batch_query";
 var LSP_TOOLS = "lsp_definition, lsp_references, lsp_hover";
-function buildRepoWiseFirstDirective(repoName, contextFolder, style = "generic") {
+function buildRepoWiseFirstDirective(repoName, contextFolder, style = "generic", variant = "full") {
   const repo = sanitizeForShellText(repoName);
   const folder = sanitizeForShellText(contextFolder);
   const toolNaming = style === "claude" ? `${claudeToolPrefix(repo)}<tool>, e.g. ${claudeToolPrefix(repo)}find_symbol` : `the "${mcpServerName(repo)}" MCP server`;
+  if (variant === "graph") {
+    return `RepoWise-first: before any codebase task, query the RepoWise knowledge graph first. Tier 1: RepoWise MCP graph tools (${toolNaming}; tools: ${GRAPH_TOOLS}) and LSP tools (${LSP_TOOLS}) for symbol resolution and blast radius. Tier 2: native file search only when the graph does not cover the question. If these tools are deferred in your environment, load them via tool search before calling.`;
+  }
   return `RepoWise-first: before any codebase task, gather context from RepoWise first. Tier 1: RepoWise MCP graph tools (${toolNaming}; tools: ${GRAPH_TOOLS}) and LSP tools (${LSP_TOOLS}) for symbol resolution and blast radius. Tier 2: ${folder}/ files, starting with ${folder}/project-overview.md. Tier 3: native file search only when tiers 1-2 do not cover the question. If these tools are deferred in your environment, load them via tool search before calling.`;
 }
-function buildSubagentDirective(contextFolder) {
+function buildSubagentDirective(contextFolder, variant = "full") {
   const folder = sanitizeForShellText(contextFolder);
+  if (variant === "graph") {
+    return `IMPORTANT: Use the RepoWise MCP/LSP tools (find_symbol, get_impact, find_callers, lsp_definition) to resolve symbols and blast radius before performing any work.`;
+  }
   return `IMPORTANT: Read ${folder}/project-overview.md before performing any work. This file maps every context file to its domain.`;
 }
 var GATE_SCRIPT_REL = ".claude/repowise-gate.cjs";
@@ -3175,9 +3224,10 @@ var GATE_MAX_DENIES = 2;
 function buildGateHookCommand() {
   return `node "$CLAUDE_PROJECT_DIR/${GATE_SCRIPT_REL}" ${REPOWISE_MANAGED_COMMENT}`;
 }
-function buildGateScript(contextFolder) {
+function buildGateScript(contextFolder, variant = "full") {
   const folder = contextFolder.replace(/[^A-Za-z0-9_./-]/g, "");
-  return GATE_SCRIPT_TEMPLATE.replace(/__CONTEXT_FOLDER__/g, folder).replace(/__MAX_DENIES__/g, String(GATE_MAX_DENIES));
+  const denyReason = variant === "graph" ? "RepoWise-first: this codebase has RepoWise. Query its MCP tools (find_symbol/get_impact/lsp_*) to answer this before native search. Retry this search and it will be allowed." : "RepoWise-first: this codebase has RepoWise. Use Tier 1 (RepoWise MCP tools find_symbol/get_impact/lsp_*) or Tier 2 (" + folder + "/ docs) to answer this before native search. Retry this search and it will be allowed.";
+  return GATE_SCRIPT_TEMPLATE.replace(/__CONTEXT_FOLDER__/g, folder).replace(/__MAX_DENIES__/g, String(GATE_MAX_DENIES)).replace(/__DENY_REASON__/g, () => denyReason);
 }
 var GATE_SCRIPT_TEMPLATE = [
   "#!/usr/bin/env node",
@@ -3216,7 +3266,7 @@ var GATE_SCRIPT_TEMPLATE = [
   "if (state.consulted) { logMiss(); process.exit(0); }",
   "if ((state.denies || 0) >= MAX_DENIES) { process.exit(0); }",
   "state.denies = (state.denies || 0) + 1; writeState(state);",
-  'var reason = "RepoWise-first: this codebase has RepoWise. Use Tier 1 (RepoWise MCP tools find_symbol/get_impact/lsp_*) or Tier 2 (" + CONTEXT_FOLDER + "/ docs) to answer this before native search. Retry this search and it will be allowed.";',
+  'var reason = "__DENY_REASON__";',
   'process.stdout.write(JSON.stringify({ hookSpecificOutput: { hookEventName: "PreToolUse", permissionDecision: "deny", permissionDecisionReason: reason } }));',
   "process.exit(0);",
   ""
@@ -3325,7 +3375,7 @@ function mergeClaudeHookSettings(existingContent, params) {
       hooks: [
         {
           type: "command",
-          command: buildHookEchoCommand("SubagentStart", buildSubagentDirective(params.contextFolder))
+          command: buildHookEchoCommand("SubagentStart", buildSubagentDirective(params.contextFolder, params.variant))
         }
       ]
     },
@@ -3333,7 +3383,7 @@ function mergeClaudeHookSettings(existingContent, params) {
       hooks: [
         {
           type: "command",
-          command: buildHookEchoCommand("UserPromptSubmit", buildRepoWiseFirstDirective(params.repoName, params.contextFolder, "claude"))
+          command: buildHookEchoCommand("UserPromptSubmit", buildRepoWiseFirstDirective(params.repoName, params.contextFolder, "claude", params.variant))
         },
         // Re-arm the per-question gate (silent; the echo above carries the reminder).
         { type: "command", command: buildGateHookCommand() }
@@ -3358,7 +3408,7 @@ function mergeGeminiHookSettings(existingContent, params) {
           name: "repowise-first",
           command: buildPlainJsonEchoCommand({
             hookSpecificOutput: {
-              additionalContext: buildRepoWiseFirstDirective(params.repoName, params.contextFolder)
+              additionalContext: buildRepoWiseFirstDirective(params.repoName, params.contextFolder, "generic", params.variant)
             }
           })
         }
@@ -3375,7 +3425,7 @@ function mergeCodexHookSettings(existingContent, params) {
       hooks: [
         {
           type: "command",
-          command: buildHookEchoCommand("UserPromptSubmit", buildRepoWiseFirstDirective(params.repoName, params.contextFolder))
+          command: buildHookEchoCommand("UserPromptSubmit", buildRepoWiseFirstDirective(params.repoName, params.contextFolder, "generic", params.variant))
         }
       ]
     }
@@ -3386,7 +3436,7 @@ function removeCodexHookSettings(existingContent) {
 }
 function buildCopilotHooksFile(params) {
   const command = buildPlainJsonEchoCommand({
-    additionalContext: buildRepoWiseFirstDirective(params.repoName, params.contextFolder)
+    additionalContext: buildRepoWiseFirstDirective(params.repoName, params.contextFolder, "generic", params.variant)
   });
   return JSON.stringify({
     version: 1,
@@ -3397,7 +3447,7 @@ function buildCopilotHooksFile(params) {
 }
 function buildClineHookScript(params) {
   const command = buildPlainJsonEchoCommand({
-    contextModification: buildRepoWiseFirstDirective(params.repoName, params.contextFolder)
+    contextModification: buildRepoWiseFirstDirective(params.repoName, params.contextFolder, "generic", params.variant)
   });
   return [
     "#!/bin/sh",
@@ -3482,7 +3532,7 @@ async function applyGitignoreChanges(repoRoot, changes) {
     await writeFile(path, next, "utf-8");
   }
 }
-async function writeClaudeHooksToRepo(repoRoot, contextFolder) {
+async function writeClaudeHooksToRepo(repoRoot, contextFolder, variant = "full") {
   const repoName = basename(repoRoot);
   const projectTracked = await isGitTracked(repoRoot, CLAUDE_PROJECT_SETTINGS);
   if (projectTracked) {
@@ -3506,14 +3556,14 @@ async function writeClaudeHooksToRepo(repoRoot, contextFolder) {
     existing = await readFile(targetPath, "utf-8");
   } catch {
   }
-  const merged = mergeClaudeHookSettings(existing, { repoName, contextFolder });
+  const merged = mergeClaudeHookSettings(existing, { repoName, contextFolder, variant });
   let status2 = "unchanged";
   if (merged !== existing) {
     await mkdir(join2(repoRoot, ".claude"), { recursive: true });
     await writeFile(targetPath, merged, "utf-8");
     status2 = "written";
   }
-  const gateScript = buildGateScript(contextFolder);
+  const gateScript = buildGateScript(contextFolder, variant);
   const gatePath = join2(repoRoot, GATE_SCRIPT_REL);
   let gateExisting = null;
   try {
@@ -3559,8 +3609,8 @@ async function removeClaudeHooksFromRepo(repoRoot) {
 }
 
 // ../../packages/shared/dist/lib/ai-tools.js
-var AI_TOOLS_REFERENCE_REV = 3;
-var AGENT_INSTRUCTIONS_HASH = createHash("sha256").update(AI_AGENT_USAGE_INSTRUCTIONS).digest("hex").slice(0, 12);
+var AI_TOOLS_REFERENCE_REV = 4;
+var AGENT_INSTRUCTIONS_HASH = createHash("sha256").update(AI_AGENT_USAGE_INSTRUCTIONS).update(" ").update(AI_AGENT_USAGE_INSTRUCTIONS_GRAPH).digest("hex").slice(0, 12);
 var AI_TOOL_CONFIG = {
   cursor: {
     label: "Cursor",
@@ -3702,7 +3752,7 @@ function sanitizeRepoName(name) {
 function fileDescriptionFromName(fileName) {
   return fileName.replace(/\.md$/, "").split("-").map((w) => w.charAt(0).toUpperCase() + w.slice(1)).join(" ");
 }
-function generateReference(tool, repoName, contextFolder, contextFiles) {
+function generateReference(tool, repoName, contextFolder, contextFiles, variant = "full") {
   const config2 = AI_TOOL_CONFIG[tool];
   const safeName = sanitizeRepoName(repoName);
   const fileLines = contextFiles.map((f) => {
@@ -3714,19 +3764,21 @@ function generateReference(tool, repoName, contextFolder, contextFiles) {
   const hasFiles = fileLines.length > 0;
   const mcpName = repoName.replace(/`/g, "");
   const mcpNamingNote = tool === "claude-code" ? `**RepoWise MCP tool naming in this repo:** tools are exposed as \`${claudeToolPrefix(mcpName)}<tool>\`, e.g. \`${claudeToolPrefix(mcpName)}find_symbol\`, \`${claudeToolPrefix(mcpName)}get_impact\`, \`${claudeToolPrefix(mcpName)}lsp_definition\`.` : `**RepoWise MCP server for this repo:** "${mcpServerName(mcpName)}" \u2014 graph tools: find_symbol, get_symbol, get_impact, find_callers, find_references, batch_query; LSP tools: lsp_definition, lsp_references, lsp_hover.`;
+  const isGraph = variant === "graph";
+  const introLine = isGraph ? `This repository has a RepoWise knowledge graph (MCP + LSP) available to AI tools.` : `This repository has AI-optimized context files generated by RepoWise.`;
   const contentLines = [
     `## Project Context \u2014 ${safeName}`,
     "",
-    `This repository has AI-optimized context files generated by RepoWise.`,
-    "",
-    AI_AGENT_USAGE_INSTRUCTIONS,
+    introLine,
     "",
-    `**Start here:** \`${contextFolder}/project-overview.md\` \u2014 the routing document that maps every context file to its domain.`,
-    "",
-    mcpNamingNote,
+    agentInstructionsFor(variant),
     ""
   ];
-  if (hasFiles) {
+  if (!isGraph) {
+    contentLines.push(`**Start here:** \`${contextFolder}/project-overview.md\` \u2014 the routing document that maps every context file to its domain.`, "");
+  }
+  contentLines.push(mcpNamingNote, "");
+  if (!isGraph && hasFiles) {
     contentLines.push(`**Context File Routing Map:**`, "", ...fileLines.map((f) => `- \`${f.path}\` \u2014 ${f.desc}`), "", `> Additional context files may exist beyond this list. Check \`project-overview.md\` for the complete index.`);
   }
   if (config2.owned) {
@@ -3739,14 +3791,14 @@ function generateReference(tool, repoName, contextFolder, contextFiles) {
   }
   return [config2.markerStart, "", ...contentLines, "", config2.markerEnd].join("\n");
 }
-async function updateToolConfig(repoRoot, tool, repoName, contextFolder, contextFiles) {
+async function updateToolConfig(repoRoot, tool, repoName, contextFolder, contextFiles, variant = "full") {
   const config2 = AI_TOOL_CONFIG[tool];
   const fullPath = join3(repoRoot, config2.filePath);
   const dir = dirname(fullPath);
   if (dir !== repoRoot) {
     await mkdir2(dir, { recursive: true });
   }
-  const referenceBlock = generateReference(tool, repoName, contextFolder, contextFiles);
+  const referenceBlock = generateReference(tool, repoName, contextFolder, contextFiles, variant);
   if (config2.owned) {
     let created2 = true;
     try {
@@ -3809,7 +3861,7 @@ async function removeToolConfig(repoRoot, tool) {
   const content = (before + after).replace(/\n{3,}/g, "\n\n").trim() + "\n";
   await writeFile2(fullPath, content, "utf-8");
 }
-async function migrateToolConfig(repoRoot, tool, repoName, contextFolder, contextFiles) {
+async function migrateToolConfig(repoRoot, tool, repoName, contextFolder, contextFiles, variant = "full") {
   const config2 = AI_TOOL_CONFIG[tool];
   if (!config2.legacyFilePath)
     return { migrated: false, legacyRemoved: false };
@@ -3819,11 +3871,11 @@ async function migrateToolConfig(repoRoot, tool, repoName, contextFolder, contex
     const s = await stat(legacyPath);
     legacyIsFile = s.isFile();
   } catch {
-    await updateToolConfig(repoRoot, tool, repoName, contextFolder, contextFiles);
+    await updateToolConfig(repoRoot, tool, repoName, contextFolder, contextFiles, variant);
     return { migrated: false, legacyRemoved: false };
   }
   if (!legacyIsFile) {
-    await updateToolConfig(repoRoot, tool, repoName, contextFolder, contextFiles);
+    await updateToolConfig(repoRoot, tool, repoName, contextFolder, contextFiles, variant);
     return { migrated: false, legacyRemoved: false };
   }
   const legacyContent = await readFile2(legacyPath, "utf-8");
@@ -3853,7 +3905,7 @@ async function migrateToolConfig(repoRoot, tool, repoName, contextFolder, contex
   } else {
     await unlink2(legacyPath);
   }
-  await updateToolConfig(repoRoot, tool, repoName, contextFolder, contextFiles);
+  await updateToolConfig(repoRoot, tool, repoName, contextFolder, contextFiles, variant);
   return { migrated: true, legacyRemoved: cleaned.length === 0 };
 }
 async function fileExists(path) {
@@ -3929,6 +3981,9 @@ async function scanLocalContextFiles(repoRoot, contextFolder) {
   }
 }
 
+// ../listener/dist/main.js
+init_src();
+
 // ../listener/dist/lib/config.js
 init_config_dir();
 import { readFile as readFile3, writeFile as writeFile3, rename, unlink as unlink3, mkdir as mkdir3, chmod, open } from "fs/promises";
@@ -3964,7 +4019,8 @@ async function getListenerConfig() {
       noAutoUpdate: raw.noAutoUpdate ?? false,
       lspEnabled: raw.lspEnabled ?? true,
       lspAutoWarm: raw.lspAutoWarm ?? true,
-      ...lspOverrides ? { lspOverrides } : {}
+      ...lspOverrides ? { lspOverrides } : {},
+      ...typeof raw.graphOnly === "boolean" ? { graphOnly: raw.graphOnly } : {}
     };
   } catch {
     return {
@@ -4004,7 +4060,10 @@ async function saveListenerConfig(config2) {
       // the listener round-trips them here unchanged.
       lspEnabled: config2.lspEnabled,
       lspAutoWarm: config2.lspAutoWarm,
-      ...config2.lspOverrides ? { lspOverrides: config2.lspOverrides } : {}
+      ...config2.lspOverrides ? { lspOverrides: config2.lspOverrides } : {},
+      // Persist the tier signal when set so a listener-driven plan-change save
+      // round-trips it; absent ⇒ `...raw` preserves any CLI-written value.
+      ...config2.graphOnly !== void 0 ? { graphOnly: config2.graphOnly } : {}
     };
     const tmpPath = configPath + ".tmp";
     try {
@@ -8015,7 +8074,7 @@ var claudeCodeHooksWriter = {
     return await fileExists3(join24(repoRoot, "CLAUDE.md")) || await fileExists3(join24(home, ".claude.json"));
   },
   async write(ctx) {
-    const result = await writeClaudeHooksToRepo(ctx.repoRoot, ctx.contextFolder ?? "repowise-context");
+    const result = await writeClaudeHooksToRepo(ctx.repoRoot, ctx.contextFolder ?? "repowise-context", ctx.variant);
     return { status: result.status, path: join24(ctx.repoRoot, result.relPath) };
   },
   async remove(ctx) {
@@ -8085,7 +8144,8 @@ var clineHooksWriter = {
     const path = join26(ctx.repoRoot, SCRIPT_REL);
     const next = buildClineHookScript({
       repoName: ctx.repoName,
-      contextFolder: ctx.contextFolder ?? "repowise-context"
+      contextFolder: ctx.contextFolder ?? "repowise-context",
+      variant: ctx.variant
     });
     const existing = await readOrNull(path);
     if (existing !== null && !existing.includes(OWNERSHIP_MARKER)) {
@@ -8197,7 +8257,8 @@ var codexHooksWriter = {
     const existing = await readOrNull2(path);
     const merged = mergeCodexHookSettings(existing, {
       repoName: ctx.repoName,
-      contextFolder: ctx.contextFolder ?? "repowise-context"
+      contextFolder: ctx.contextFolder ?? "repowise-context",
+      variant: ctx.variant
     });
     if (merged === existing) {
       return { status: "unchanged", path };
@@ -8283,7 +8344,8 @@ var copilotHooksWriter = {
     const path = join30(ctx.repoRoot, HOOKS_REL2);
     const next = buildCopilotHooksFile({
       repoName: ctx.repoName,
-      contextFolder: ctx.contextFolder ?? "repowise-context"
+      contextFolder: ctx.contextFolder ?? "repowise-context",
+      variant: ctx.variant
     });
     const existing = await readOrNull3(path);
     if (await isGitTracked(ctx.repoRoot, HOOKS_REL2)) {
@@ -8422,7 +8484,8 @@ var geminiHooksWriter = {
     const existing = await readOrNull4(path);
     const merged = mergeGeminiHookSettings(existing, {
       repoName: ctx.repoName,
-      contextFolder: ctx.contextFolder ?? "repowise-context"
+      contextFolder: ctx.contextFolder ?? "repowise-context",
+      variant: ctx.variant
     });
     if (merged === existing) {
       return { status: "unchanged", path };
@@ -8587,7 +8650,8 @@ async function runAutoConfig(opts) {
         shimCmd: opts.shimCmd,
         home,
         contextFolder: opts.contextFolder,
-        selectedTools: opts.selectedTools
+        selectedTools: opts.selectedTools,
+        variant: opts.variant
       });
       results.push({ tool: writer.tool, detected: true, outcome });
     } catch (err) {
@@ -10233,7 +10297,8 @@ async function readRawToolConfig() {
     const raw = JSON.parse(data);
     return {
       aiTools: Array.isArray(raw["aiTools"]) ? raw["aiTools"] : void 0,
-      contextFolder: typeof raw["contextFolder"] === "string" ? raw["contextFolder"] : void 0
+      contextFolder: typeof raw["contextFolder"] === "string" ? raw["contextFolder"] : void 0,
+      graphOnly: typeof raw["graphOnly"] === "boolean" ? raw["graphOnly"] : void 0
     };
   } catch {
     return {};
@@ -10254,12 +10319,14 @@ async function updateToolConfigsForRepo(localPath, config2, state, repoId) {
   }
   await migrateRooToKilo(localPath).catch(() => {
   });
+  const variant = config2.graphOnly ? "graph" : "full";
   const contextFiles = await scanLocalContextFiles(localPath, contextFolder);
-  if (contextFiles.length === 0)
+  if (contextFiles.length === 0 && variant === "full")
     return;
   const hash = JSON.stringify({
     rev: AI_TOOLS_REFERENCE_REV,
     block: AGENT_INSTRUCTIONS_HASH,
+    variant,
     tools,
     files: contextFiles.map((f) => f.fileName)
   });
@@ -10274,13 +10341,13 @@ async function updateToolConfigsForRepo(localPath, config2, state, repoId) {
       continue;
     written.add(toolConfig.filePath);
     if (toolConfig.legacyFilePath) {
-      await migrateToolConfig(localPath, tool, repoName, contextFolder, contextFiles);
+      await migrateToolConfig(localPath, tool, repoName, contextFolder, contextFiles, variant);
     } else {
-      await updateToolConfig(localPath, tool, repoName, contextFolder, contextFiles);
+      await updateToolConfig(localPath, tool, repoName, contextFolder, contextFiles, variant);
     }
   }
   if (!written.has("AGENTS.md")) {
-    await updateToolConfig(localPath, "codex", repoName, contextFolder, contextFiles);
+    await updateToolConfig(localPath, "codex", repoName, contextFolder, contextFiles, variant);
   }
   if (!state.repos[repoId]) {
     state.repos[repoId] = { lastSyncTimestamp: "", lastSyncCommitSha: null };
@@ -10599,7 +10666,8 @@ async function checkStaleContext(repos, state, groups) {
 }
 async function reconcileMcpConfigs(repos, packageName) {
   const shimCmd = packageName;
-  const { contextFolder, aiTools } = await readRawToolConfig();
+  const { contextFolder, aiTools, graphOnly } = await readRawToolConfig();
+  const variant = graphOnly ? "graph" : "full";
   for (const repo of repos) {
     if (!repo.localPath)
       continue;
@@ -10616,7 +10684,8 @@ async function reconcileMcpConfigs(repos, packageName) {
         repoId: repo.repoId,
         shimCmd,
         contextFolder,
-        selectedTools: aiTools
+        selectedTools: aiTools,
+        variant
       });
       const written = results.filter((r) => r.detected && r.outcome?.status === "written");
       if (written.length > 0) {
@@ -10628,6 +10697,8 @@ async function reconcileMcpConfigs(repos, packageName) {
   }
 }
 async function reconcileAgentInstructions(repos) {
+  const { graphOnly } = await readRawToolConfig();
+  const variant = graphOnly ? "graph" : "full";
   for (const repo of repos) {
     const path = join40(repo.localPath, "repowise-context", "project-overview.md");
     let content;
@@ -10641,7 +10712,7 @@ async function reconcileAgentInstructions(repos) {
       console.warn(`[reconcile] read failed for ${repo.repoId}:`, err instanceof Error ? err.message : String(err));
       continue;
     }
-    const injected = injectAgentInstructions(content);
+    const injected = injectAgentInstructions(content, variant);
     if (injected === content)
       continue;
     try {
@@ -11075,6 +11146,22 @@ async function startListener() {
         if (response.latestCliVersion && /^\d+\.\d+\.\d+(?:-[A-Za-z0-9.-]+)?(?:\+[A-Za-z0-9.-]+)?$/.test(response.latestCliVersion)) {
           latestCliVersion = response.latestCliVersion;
         }
+        if (typeof response.plan === "string") {
+          const planGraphOnly = agentInstructionsVariantForPlan(response.plan) === "graph";
+          const currentGraphOnly = config2.graphOnly ?? false;
+          if (currentGraphOnly !== planGraphOnly) {
+            console.log(`[tier] Plan change detected (plan=${response.plan}); graphOnly ${String(currentGraphOnly)} \u2192 ${String(planGraphOnly)} \u2014 re-reconciling`);
+            try {
+              await saveListenerConfig({ ...config2, graphOnly: planGraphOnly });
+              config2.graphOnly = planGraphOnly;
+              await reconcileToolConfigs(config2.repos, state);
+              await reconcileAgentInstructions(config2.repos);
+              await reconcileMcpConfigs(config2.repos, packageName);
+            } catch (err) {
+              console.warn("[tier] Plan-change reconcile failed:", err instanceof Error ? err.message : String(err));
+            }
+          }
+        }
         if (shouldReconcile) {
           try {
             const freshConfig = await getListenerConfig();
@@ -13117,7 +13204,7 @@ async function create() {
     let graphOnly = false;
     try {
       const usage = await apiRequest("/v1/account/usage");
-      graphOnly = usage.plan === "free";
+      graphOnly = agentInstructionsVariantForPlan(usage.plan ?? "free") === "graph";
     } catch {
     }
     let pollAttempts = 0;
@@ -13369,19 +13456,28 @@ Files are stored on our servers (not in git). Retry when online.`
       spinner.start("Configuring AI tools...");
       const results = [];
       const written = /* @__PURE__ */ new Set();
+      const toolVariant = graphOnly ? "graph" : "full";
       for (const tool of tools) {
         const config2 = AI_TOOL_CONFIG[tool];
         if (written.has(config2.filePath)) continue;
         written.add(config2.filePath);
         if (config2.legacyFilePath) {
-          await migrateToolConfig(repoRoot, tool, repoName, contextFolder, contextFiles);
+          await migrateToolConfig(
+            repoRoot,
+            tool,
+            repoName,
+            contextFolder,
+            contextFiles,
+            toolVariant
+          );
         }
         const { created: wasCreated } = await updateToolConfig(
           repoRoot,
           tool,
           repoName,
           contextFolder,
-          contextFiles
+          contextFiles,
+          toolVariant
         );
         const action = wasCreated ? "Created" : "Updated";
         results.push(`  ${action} ${config2.filePath}`);
@@ -13392,12 +13488,13 @@ Files are stored on our servers (not in git). Retry when online.`
           "codex",
           repoName,
           contextFolder,
-          contextFiles
+          contextFiles,
+          toolVariant
         );
         results.push(`  ${wasCreated ? "Created" : "Updated"} AGENTS.md`);
       }
       if (tools.includes("claude-code")) {
-        const { relPath } = await writeClaudeHooksToRepo(repoRoot, contextFolder);
+        const { relPath } = await writeClaudeHooksToRepo(repoRoot, contextFolder, toolVariant);
         results.push(`  Configured ${relPath} (RepoWise-first + SubagentStart hooks, local-only)`);
       }
       spinner.succeed("AI tools configured");
@@ -13416,7 +13513,7 @@ Files are stored on our servers (not in git). Retry when online.`
         })
       );
     }
-    const configUpdate = { aiTools: tools, contextFolder };
+    const configUpdate = { aiTools: tools, contextFolder, graphOnly };
     if (updatedRepos.length > 0) configUpdate.repos = updatedRepos;
     await mergeAndSaveConfig(configUpdate);
     let listenerRunning = false;
@@ -14230,7 +14327,8 @@ async function sync() {
           const aiTools = (existingConfig.aiTools ?? []).map((t) => t === "roo-code" ? "kilo" : t).filter((t, i, arr) => arr.indexOf(t) === i);
           if (aiTools.length > 0) {
             const contextFiles = await scanLocalContextFiles(repoRoot, DEFAULT_CONTEXT_FOLDER3);
-            if (contextFiles.length > 0) {
+            const toolVariant = existingConfig.graphOnly ? "graph" : "full";
+            if (toolVariant === "graph" || contextFiles.length > 0) {
               const written = /* @__PURE__ */ new Set();
               for (const tool of aiTools) {
                 const config2 = AI_TOOL_CONFIG[tool];
@@ -14241,7 +14339,8 @@ async function sync() {
                   tool,
                   repoName,
                   DEFAULT_CONTEXT_FOLDER3,
-                  contextFiles
+                  contextFiles,
+                  toolVariant
                 );
               }
               if (!written.has("AGENTS.md")) {
@@ -14250,7 +14349,8 @@ async function sync() {
                   "codex",
                   repoName,
                   DEFAULT_CONTEXT_FOLDER3,
-                  contextFiles
+                  contextFiles,
+                  toolVariant
                 );
               }
             }