tracer-sh 0.3.1 → 0.3.3

package/bin/tracer.mjs

@@ -1,7 +1,7 @@
 #!/usr/bin/env node
 
 import { spawnSync } from "node:child_process";
-import { existsSync, readdirSync, statSync } from "node:fs";
+import { existsSync, readdirSync, statSync, readFileSync } from "node:fs";
 import { fileURLToPath } from "node:url";
 import { dirname, join, resolve } from "node:path";
 
@@ -12,14 +12,68 @@ const serverPath = resolve(repoRoot, "packages/server/dist/index.js");
 // Must match RESTART_EXIT_CODE in packages/server/src/updater.ts
 const RESTART_EXIT_CODE = 75;
 
+const cmd = process.argv[2];
+
+// `tracer-sh --help` / `-h` / `help` — usage for every subcommand.
+if (cmd === "--help" || cmd === "-h" || cmd === "help") {
+  printHelp();
+  process.exit(0);
+}
+
+// `tracer-sh --version` / `-v` — print the installed version.
+if (cmd === "--version" || cmd === "-v" || cmd === "version") {
+  process.stdout.write(getVersion() + "\n");
+  process.exit(0);
+}
+
 // `tracer analyze "<message>" [--session <id>] [--provider <name>] [--json]`
 // Runs the investigation agent on the already-running local server and prints
 // the final analysis. Lets other local agents (e.g. Claude Code) drive Tracer.
-if (process.argv[2] === "analyze") {
+if (cmd === "analyze") {
   await runAnalyze(process.argv.slice(3));
   process.exit(0);
 }
 
+/** Read the package version (best-effort; "unknown" if package.json is unreadable). */
+function getVersion() {
+  try {
+    return JSON.parse(readFileSync(join(repoRoot, "package.json"), "utf8")).version ?? "unknown";
+  } catch {
+    return "unknown";
+  }
+}
+
+function printHelp() {
+  process.stdout.write(`Tracer ${getVersion()} — local-first AI observability agent
+
+Usage:
+  tracer-sh                                  Start the Tracer server (default http://127.0.0.1:3579)
+  tracer-sh analyze "<message>" [options]    Run a headless investigation on a running server
+  tracer-sh --help                           Show this help
+  tracer-sh --version                        Print the version
+
+analyze options:
+  -s, --session <id>     Resume an existing session by id (preserves full context)
+  -p, --provider <name>  Scope to one provider (newrelic, gcp, posthog); omit for unified mode
+      --json             Print the full JSON envelope:
+                         { sessionId, status, analysis, queries, usage, model }.
+                         The "queries" array holds the FULL raw rows and can be very
+                         large. Without --json, stdout is just the analysis prose and the
+                         line "session <id> · <model>" is written to stderr.
+
+Environment:
+  TRACER_PORT            Server port (default 3579)
+  TRACER_HOST            Bind/target host (default 127.0.0.1)
+  TRACER_SKIP_BUILD      Skip the source-checkout rebuild-on-launch check
+
+Examples:
+  tracer-sh
+  tracer-sh analyze "Why did checkout error rate spike after 14:00 UTC?"
+  tracer-sh analyze "Now break that down by service." --session <id>
+  tracer-sh analyze "Top 5 slowest GCP Cloud Run requests." --provider gcp
+`);
+}
+
 async function runAnalyze(args) {
   let message;
   let sessionId;
@@ -28,7 +82,8 @@ async function runAnalyze(args) {
 
   for (let i = 0; i < args.length; i++) {
     const a = args[i];
-    if (a === "--json") asJson = true;
+    if (a === "--help" || a === "-h") { printHelp(); process.exit(0); }
+    else if (a === "--json") asJson = true;
     else if (a === "--session" || a === "-s") sessionId = args[++i];
     else if (a === "--provider" || a === "-p") provider = args[++i];
     else if (message === undefined) message = a;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "tracer-sh",
-  "version": "0.3.1",
+  "version": "0.3.3",
   "type": "module",
   "description": "Local-first debugging & analysis platform",
   "license": "SEE LICENSE IN LICENSE",
@@ -39,7 +39,11 @@
     "overrides": {
       "mermaid": "^11.15.0",
       "postcss": "^8.5.10",
-      "uuid": "^11.1.1"
+      "uuid": "^11.1.1",
+      "shell-quote": "^1.8.4",
+      "dompurify": "^3.4.9",
+      "@babel/core": "^7.29.6",
+      "esbuild": "^0.28.1"
     }
   },
   "devDependencies": {

package/packages/server/dist/{chunk-YL5JSOUN.js → chunk-N2HWGQP2.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'module'; const require = __cre
 import {
   __commonJS,
   __require
-} from "./chunk-5GQDB6U7.js";
+} from "./chunk-ZAYYPDZP.js";
 
 // ../../node_modules/.pnpm/@vercel+oidc@3.2.0/node_modules/@vercel/oidc/dist/token-error.js
 var require_token_error = __commonJS({

package/packages/server/dist/{chunk-IAWOYD5E.js → chunk-XTJ4UUIY.js}

@@ -4,7 +4,7 @@ import {
   __esm,
   __require,
   __toESM
-} from "./chunk-5GQDB6U7.js";
+} from "./chunk-ZAYYPDZP.js";
 
 // ../../node_modules/.pnpm/web-streams-polyfill@3.3.3/node_modules/web-streams-polyfill/dist/ponyfill.es2018.js
 var require_ponyfill_es2018 = __commonJS({

package/packages/server/dist/{chunk-5GQDB6U7.js → chunk-ZAYYPDZP.js}

@@ -11,11 +11,20 @@ var __require = /* @__PURE__ */ ((x) => typeof require !== "undefined" ? require
   if (typeof require !== "undefined") return require.apply(this, arguments);
   throw Error('Dynamic require of "' + x + '" is not supported');
 });
-var __esm = (fn, res) => function __init() {
-  return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+var __esm = (fn, res, err) => function __init() {
+  if (err) throw err[0];
+  try {
+    return fn && (res = (0, fn[__getOwnPropNames(fn)[0]])(fn = 0)), res;
+  } catch (e) {
+    throw err = [e], e;
+  }
 };
 var __commonJS = (cb, mod) => function __require2() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  try {
+    return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
+  } catch (e) {
+    throw mod = 0, e;
+  }
 };
 var __export = (target, all) => {
   for (var name in all)

package/packages/server/dist/{dist-ZMUHFP5T.js → dist-L5BLKJXH.js}

@@ -2,7 +2,7 @@ import { createRequire as __createRequire } from 'module'; const require = __cre
 import {
   __commonJS,
   __require
-} from "./chunk-5GQDB6U7.js";
+} from "./chunk-ZAYYPDZP.js";
 
 // ../../node_modules/.pnpm/ms@2.1.3/node_modules/ms/index.js
 var require_ms = __commonJS({

package/packages/server/dist/{domain-knowledge-B2IREATL.js → domain-knowledge-6MEHHDWL.js}

@@ -5,7 +5,7 @@ import {
   NR_INSIDE_OUT_DEBUGGING,
   NR_SERVICE_HEALTH_RUNBOOK
 } from "./chunk-XFJVNMJI.js";
-import "./chunk-5GQDB6U7.js";
+import "./chunk-ZAYYPDZP.js";
 export {
   NR_AUTH_STOP_RULE,
   NR_DOMAIN_KNOWLEDGE,

package/packages/server/dist/{domain-knowledge-U2RLSFM2.js → domain-knowledge-HC2HKQB3.js}

@@ -7,7 +7,7 @@ import {
   GCP_PAGE_SIZE_RULE,
   GCP_TOOL_REFERENCE
 } from "./chunk-IKD3ICQK.js";
-import "./chunk-5GQDB6U7.js";
+import "./chunk-ZAYYPDZP.js";
 export {
   GCP_AUTH_STOP_RULE,
   GCP_CROSS_SIGNAL,

package/packages/server/dist/{domain-knowledge-K3OB4NDB.js → domain-knowledge-RET7XGI5.js}

@@ -4,7 +4,7 @@ import {
   POSTHOG_DOMAIN_KNOWLEDGE,
   POSTHOG_INSIDE_OUT_DEBUGGING
 } from "./chunk-L7TO4UJ4.js";
-import "./chunk-5GQDB6U7.js";
+import "./chunk-ZAYYPDZP.js";
 export {
   POSTHOG_AUTH_STOP_RULE,
   POSTHOG_DOMAIN_KNOWLEDGE,

package/packages/server/dist/index.js

@@ -8,7 +8,7 @@ import {
   require_auth_errors,
   require_token_error,
   require_token_util
-} from "./chunk-YL5JSOUN.js";
+} from "./chunk-N2HWGQP2.js";
 import {
   NR_AUTH_STOP_RULE,
   NR_DOMAIN_KNOWLEDGE,
@@ -26,7 +26,7 @@ import {
   __export,
   __require,
   __toESM
-} from "./chunk-5GQDB6U7.js";
+} from "./chunk-ZAYYPDZP.js";
 
 // ../../node_modules/.pnpm/better-sqlite3@12.9.0/node_modules/better-sqlite3/lib/util.js
 var require_util = __commonJS({
@@ -876,8 +876,8 @@ var require_get_vercel_oidc_token = __commonJS({
       }
       try {
         const [{ getTokenPayload, isExpired }, { refreshToken }] = await Promise.all([
-          await import("./token-util-CTKMWUIG.js"),
-          await import("./token-4YFRZJYT.js")
+          await import("./token-util-BJYJMNB3.js"),
+          await import("./token-R3E2IC23.js")
         ]);
         if (!token || isExpired(getTokenPayload(token), options?.expirationBufferMs)) {
           await refreshToken(options);
@@ -1950,12 +1950,12 @@ Content-Type: ${partContentType}\r
        * @returns A proxy agent
        */
       static async #getProxyAgent() {
-        this.#proxyAgent ||= (await import("./dist-ZMUHFP5T.js")).HttpsProxyAgent;
+        this.#proxyAgent ||= (await import("./dist-L5BLKJXH.js")).HttpsProxyAgent;
         return this.#proxyAgent;
       }
       static async #getFetch() {
         const hasWindow = typeof window !== "undefined" && !!window;
-        this.#fetch ||= hasWindow ? window.fetch : (await import("./src-434DTNEL.js")).default;
+        this.#fetch ||= hasWindow ? window.fetch : (await import("./src-TVEEC6CW.js")).default;
         return this.#fetch;
       }
       /**
@@ -11718,7 +11718,7 @@ var require_src4 = __commonJS({
   }
 });
 
-// ../../node_modules/.pnpm/@hono+node-server@1.19.14_hono@4.12.23/node_modules/@hono/node-server/dist/index.mjs
+// ../../node_modules/.pnpm/@hono+node-server@1.19.14_hono@4.12.25/node_modules/@hono/node-server/dist/index.mjs
 import { createServer as createServerHTTP } from "http";
 import { Http2ServerRequest as Http2ServerRequest2, constants as h2constants } from "http2";
 import { Http2ServerRequest } from "http2";
@@ -63435,9 +63435,9 @@ function createDeleteMemoryTool(memoryExecute, opts) {
 
 // src/agents/utility/memory-domain-knowledge.ts
 var DOMAIN_LOADERS = {
-  newrelic: async () => (await import("./domain-knowledge-B2IREATL.js")).NR_DOMAIN_KNOWLEDGE,
-  gcp: async () => (await import("./domain-knowledge-U2RLSFM2.js")).GCP_DOMAIN_KNOWLEDGE,
-  posthog: async () => (await import("./domain-knowledge-K3OB4NDB.js")).POSTHOG_DOMAIN_KNOWLEDGE
+  newrelic: async () => (await import("./domain-knowledge-6MEHHDWL.js")).NR_DOMAIN_KNOWLEDGE,
+  gcp: async () => (await import("./domain-knowledge-HC2HKQB3.js")).GCP_DOMAIN_KNOWLEDGE,
+  posthog: async () => (await import("./domain-knowledge-RET7XGI5.js")).POSTHOG_DOMAIN_KNOWLEDGE
 };
 async function getDomainKnowledge(providerType) {
   const loader = DOMAIN_LOADERS[providerType];
@@ -66691,6 +66691,8 @@ var McpProvider = class extends BaseProvider {
     this.name = providerType;
     this.type = providerType;
   }
+  definition;
+  config;
   name;
   type;
   clients = [];
@@ -67760,7 +67762,7 @@ function createContext(deps) {
   };
 }
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/compose.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/compose.js
 var compose = (middleware, onError, onNotFound) => {
   return (context2, next) => {
     let index2 = -1;
@@ -67804,10 +67806,10 @@ var compose = (middleware, onError, onNotFound) => {
   };
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/request/constants.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/request/constants.js
 var GET_MATCH_RESULT = /* @__PURE__ */ Symbol();
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/utils/body.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/utils/body.js
 var parseBody = async (request, options = /* @__PURE__ */ Object.create(null)) => {
   const { all = false, dot = false } = options;
   const headers = request instanceof HonoRequest ? request.raw.headers : request.headers;
@@ -67879,7 +67881,7 @@ var handleParsingNestedValues = (form, key, value) => {
   });
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/utils/url.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/utils/url.js
 var splitPath = (path) => {
   const paths = path.split("/");
   if (paths[0] === "") {
@@ -68083,7 +68085,7 @@ var getQueryParams = (url2, key) => {
 };
 var decodeURIComponent_ = decodeURIComponent;
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/request.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/request.js
 var tryDecodeURIComponent = (str) => tryDecode(str, decodeURIComponent_);
 var HonoRequest = class {
   /**
@@ -68366,7 +68368,7 @@ var HonoRequest = class {
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/utils/html.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/utils/html.js
 var HtmlEscapedCallbackPhase = {
   Stringify: 1,
   BeforeStream: 2,
@@ -68408,7 +68410,7 @@ var resolveCallback = async (str, phase, preserveCallbacks, context2, buffer) =>
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/context.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/context.js
 var TEXT_PLAIN = "text/plain; charset=UTF-8";
 var setDefaultContentType = (contentType, headers) => {
   return {
@@ -68815,7 +68817,7 @@ var Context = class {
   };
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/router.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/router.js
 var METHOD_NAME_ALL = "ALL";
 var METHOD_NAME_ALL_LOWERCASE = "all";
 var METHODS = ["get", "post", "put", "delete", "options", "patch"];
@@ -68823,10 +68825,10 @@ var MESSAGE_MATCHER_IS_ALREADY_BUILT = "Can not add a route since the matcher is
 var UnsupportedPathError = class extends Error {
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/utils/constants.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/utils/constants.js
 var COMPOSED_HANDLER = "__COMPOSED_HANDLER";
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/hono-base.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/hono-base.js
 var notFoundHandler = (c) => {
   return c.text("404 Not Found", 404);
 };
@@ -69202,7 +69204,7 @@ var Hono = class _Hono {
   };
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/router/reg-exp-router/matcher.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/matcher.js
 var emptyParam = [];
 function match(method, path) {
   const matchers = this.buildAllMatchers();
@@ -69223,7 +69225,7 @@ function match(method, path) {
   return match2(method, path);
 }
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/router/reg-exp-router/node.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/node.js
 var LABEL_REG_EXP_STR = "[^/]+";
 var ONLY_WILDCARD_REG_EXP_STR = ".*";
 var TAIL_WILDCARD_REG_EXP_STR = "(?:|/.*)";
@@ -69331,7 +69333,7 @@ var Node = class _Node {
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/router/reg-exp-router/trie.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/trie.js
 var Trie = class {
   #context = { varIndex: 0 };
   #root = new Node();
@@ -69387,7 +69389,7 @@ var Trie = class {
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/router/reg-exp-router/router.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/router/reg-exp-router/router.js
 var nullMatcher = [/^$/, [], /* @__PURE__ */ Object.create(null)];
 var wildcardRegExpCache = /* @__PURE__ */ Object.create(null);
 function buildWildcardRegExp(path) {
@@ -69566,7 +69568,7 @@ var RegExpRouter = class {
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/router/smart-router/router.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/router/smart-router/router.js
 var SmartRouter = class {
   name = "SmartRouter";
   #routers = [];
@@ -69621,7 +69623,7 @@ var SmartRouter = class {
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/router/trie-router/node.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/router/trie-router/node.js
 var emptyParams = /* @__PURE__ */ Object.create(null);
 var hasChildren = (children) => {
   for (const _ in children) {
@@ -69796,7 +69798,7 @@ var Node2 = class _Node2 {
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/router/trie-router/router.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/router/trie-router/router.js
 var TrieRouter = class {
   name = "TrieRouter";
   #node;
@@ -69818,7 +69820,7 @@ var TrieRouter = class {
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/hono.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/hono.js
 var Hono2 = class extends Hono {
   /**
    * Creates an instance of the Hono class.
@@ -69833,7 +69835,7 @@ var Hono2 = class extends Hono {
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/utils/accept.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/utils/accept.js
 var isWhitespace = (char) => char === 32 || char === 9 || char === 10 || char === 13;
 var consumeWhitespace = (acceptHeader, startIndex) => {
   while (startIndex < acceptHeader.length) {
@@ -70054,10 +70056,10 @@ var parseQuality = (qVal) => {
   return num;
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/utils/compress.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/utils/compress.js
 var COMPRESSIBLE_CONTENT_TYPE_REGEX = /^\s*(?:text\/(?!event-stream(?:[;\s]|$))[^;\s]+|application\/(?:javascript|json|xml|xml-dtd|ecmascript|dart|msgpack|postscript|rtf|tar|toml|vnd\.dart|vnd\.ms-fontobject|vnd\.ms-opentype|vnd\.msgpack|wasm|x-httpd-php|x-javascript|x-msgpack|x-ns-proxy-autoconfig|x-sh|x-tar|x-virtualbox-hdd|x-virtualbox-ova|x-virtualbox-ovf|x-virtualbox-vbox|x-virtualbox-vdi|x-virtualbox-vhd|x-virtualbox-vmdk|x-www-form-urlencoded)|font\/(?:otf|ttf)|image\/(?:bmp|vnd\.adobe\.photoshop|vnd\.microsoft\.icon|vnd\.ms-dds|x-icon|x-ms-bmp)|message\/rfc822|model\/gltf-binary|x-shader\/x-fragment|x-shader\/x-vertex|[^;\s]+?\+(?:json|text|xml|yaml|msgpack))(?:[;\s]|$)/i;
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/middleware/compress/index.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/middleware/compress/index.js
 var ENCODING_TYPES = ["gzip", "deflate"];
 var cacheControlNoTransformRegExp = /(?:^|,)\s*?no-transform\s*?(?:,|$)/i;
 var selectEncoding = (header, candidates) => {
@@ -72449,14 +72451,14 @@ async function fetchRequestHandler(opts) {
   }));
 }
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/helper/route/index.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/helper/route/index.js
 var matchedRoutes = (c) => (
   // @ts-expect-error c.req[GET_MATCH_RESULT] is not typed
   c.req[GET_MATCH_RESULT][0].map(([[, route]]) => route)
 );
 var routePath = (c, index2) => matchedRoutes(c).at(index2 ?? c.req.routeIndex)?.path ?? "";
 
-// ../../node_modules/.pnpm/@hono+trpc-server@0.4.2_@trpc+server@11.16.0_typescript@5.9.3__hono@4.12.23/node_modules/@hono/trpc-server/dist/index.js
+// ../../node_modules/.pnpm/@hono+trpc-server@0.4.2_@trpc+server@11.16.0_typescript@5.9.3__hono@4.12.25/node_modules/@hono/trpc-server/dist/index.js
 var trpcServer = ({ endpoint, createContext: createContext2, ...rest }) => {
   const bodyProps = /* @__PURE__ */ new Set([
     "arrayBuffer",
@@ -74621,6 +74623,7 @@ var updateRouter = router({
 });
 
 // src/integrations/jira/jira.client.ts
+var ISSUE_FIELDS = "summary,description,status,issuetype,priority,assignee,reporter,labels,components,fixVersions,created,updated,duedate,resolution,comment";
 function normalizeJiraDomain(raw2) {
   return raw2.trim().replace(/^https?:\/\//i, "").replace(/\/+$/, "").replace(/\.atlassian\.net$/i, "");
 }
@@ -74670,19 +74673,41 @@ var JiraClient = class {
       return { ok: false, error: err instanceof Error ? err.message : String(err) };
     }
   }
+  /** Read a single issue's details (summary, description, status, and the Details
+   *  panel fields: type, priority, assignee, reporter, labels, etc.) plus its
+   *  comment thread. Read-only. */
   async getIssue(key) {
     const res = await this.request(
-      `/rest/api/2/issue/${encodeURIComponent(key)}?fields=summary,description,status`
+      `/rest/api/2/issue/${encodeURIComponent(key)}?fields=${ISSUE_FIELDS}`
     );
     const data = await res.json();
-    const fields = data.fields ?? {};
+    const f = data.fields ?? {};
+    const names = (arr) => (arr ?? []).map((x) => x.name).filter((n) => !!n);
     return {
       key: data.key ?? key,
-      summary: fields.summary ?? "",
-      description: toPlainText(fields.description),
-      status: fields.status?.name ?? "Unknown"
+      summary: f.summary ?? "",
+      description: toPlainText(f.description),
+      status: f.status?.name ?? "Unknown",
+      issueType: f.issuetype?.name ?? null,
+      priority: f.priority?.name ?? null,
+      assignee: f.assignee?.displayName ?? null,
+      reporter: f.reporter?.displayName ?? null,
+      labels: f.labels ?? [],
+      components: names(f.components),
+      fixVersions: names(f.fixVersions),
+      created: f.created ?? null,
+      updated: f.updated ?? null,
+      dueDate: f.duedate ?? null,
+      resolution: f.resolution?.name ?? null,
+      comments: (f.comment?.comments ?? []).map((c) => ({
+        id: c.id ?? null,
+        author: c.author?.displayName ?? null,
+        body: toPlainText(c.body),
+        created: c.created ?? null
+      }))
     };
   }
+  /** Post a single plain-text comment to an issue. The only write operation. */
   async addComment(key, body) {
     const res = await this.request(`/rest/api/2/issue/${encodeURIComponent(key)}/comment`, {
       method: "POST",
@@ -74726,6 +74751,10 @@ var integrationsRouter = router({
       }
     };
   }),
+  // Accepts a classic Atlassian API token (email + token). The token authenticates
+  // against the site host with the account's permissions; Tracer constrains what it
+  // can do at the code/tool layer (read one issue, post one comment). Validated with
+  // a /myself call before persisting.
   saveJira: publicProcedure.input(
     external_exports.object({
       domain: external_exports.string().min(1),
@@ -74768,7 +74797,7 @@ var appRouter = router({
   update: updateRouter
 });
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/middleware/cors/index.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/middleware/cors/index.js
 var cors = (options) => {
   const opts = {
     origin: "*",
@@ -74780,9 +74809,6 @@ var cors = (options) => {
   const findAllowOrigin = ((optsOrigin) => {
     if (typeof optsOrigin === "string") {
       if (optsOrigin === "*") {
-        if (opts.credentials) {
-          return (origin) => origin || null;
-        }
         return () => optsOrigin;
       } else {
         return (origin) => optsOrigin === origin ? origin : null;
@@ -74817,7 +74843,7 @@ var cors = (options) => {
       set2("Access-Control-Expose-Headers", opts.exposeHeaders.join(","));
     }
     if (c.req.method === "OPTIONS") {
-      if (opts.origin !== "*" || opts.credentials) {
+      if (opts.origin !== "*") {
         set2("Vary", "Origin");
       }
       if (opts.maxAge != null) {
@@ -74847,13 +74873,13 @@ var cors = (options) => {
       });
     }
     await next();
-    if (opts.origin !== "*" || opts.credentials) {
+    if (opts.origin !== "*") {
       c.header("Vary", "Origin", { append: true });
     }
   };
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/utils/color.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/utils/color.js
 function getColorEnabled() {
   const { process: process3, Deno } = globalThis;
   const isNoColor = typeof Deno?.noColor === "boolean" ? Deno.noColor : process3 !== void 0 ? (
@@ -74875,7 +74901,7 @@ async function getColorEnabledAsync() {
   return !isNoColor;
 }
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/middleware/logger/index.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/middleware/logger/index.js
 var humanize = (times) => {
   const [delimiter, separator] = [",", "."];
   const orderTimes = times.map((v) => v.replace(/(\d)(?=(\d\d\d)+(?!\d))/g, "$1" + delimiter));
@@ -74924,7 +74950,7 @@ function applyMiddleware(app) {
   app.use("*", cors({ origin: CONFIG.corsOrigin ?? `http://localhost:${CONFIG.port}` }));
 }
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/utils/stream.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/utils/stream.js
 var StreamingApi = class {
   writer;
   encoder;
@@ -75003,7 +75029,7 @@ var StreamingApi = class {
   }
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/helper/streaming/utils.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/helper/streaming/utils.js
 var isOldBunVersion = () => {
   const version3 = typeof Bun !== "undefined" ? Bun.version : void 0;
   if (version3 === void 0) {
@@ -75014,7 +75040,7 @@ var isOldBunVersion = () => {
   return result;
 };
 
-// ../../node_modules/.pnpm/hono@4.12.23/node_modules/hono/dist/helper/streaming/sse.js
+// ../../node_modules/.pnpm/hono@4.12.25/node_modules/hono/dist/helper/streaming/sse.js
 var SSEStreamingApi = class extends StreamingApi {
   constructor(writable, readable) {
     super(writable, readable);
@@ -75448,7 +75474,7 @@ function getJiraChatTools(db2) {
   const client = new JiraClient(config2);
   const tools = {
     get_jira_issue: tool({
-      description: "Read a Jira issue's summary, description, and status by its issue key (e.g. PROJ-123).",
+      description: "Read a Jira issue's details by its issue key (e.g. PROJ-123): summary, description, status, type, priority, assignee, reporter, labels, components, fix versions, resolution, created/updated/due dates, and its comment thread.",
       inputSchema: external_exports.object({
         issueKey: external_exports.string().describe("Jira issue key, e.g. PROJ-123")
       }),
@@ -75841,6 +75867,7 @@ var Parser = class {
   constructor(tokens) {
     this.tokens = tokens;
   }
+  tokens;
   pos = 0;
   peek() {
     return this.tokens[this.pos] ?? { type: "eof", value: "" };
@@ -76334,10 +76361,25 @@ var MAX_RESULT_CHARS = 4e3;
 function renderToolPart(p, queries) {
   const tool3 = p.type.replace(/^tool-/, "");
   const queryParts = (p.output?.parts ?? []).filter((x) => typeof x?.query === "string");
+  for (const qp of queryParts) {
+    queries.push({ tool: tool3, query: qp.query ?? p.input?.query ?? "", results: qp.results });
+  }
+  const queryText = queryParts.map((qp) => qp.query ?? p.input?.query ?? "").filter((q) => !!q).join("\n---\n");
+  if (p.output?.analysis) {
+    if (queryParts.length === 0 && p.input?.query) {
+      queries.push({ tool: tool3, query: p.input.query, results: p.output.analysis });
+    }
+    const displayQuery = queryText || p.input?.query || "";
+    return `Query (${tool3}):${displayQuery ? `
+\`\`\`
+${displayQuery}
+\`\`\`` : ""}
+Result:
+${p.output.analysis}`;
+  }
   const blocks = [];
   for (const qp of queryParts) {
     const query = qp.query ?? p.input?.query ?? "";
-    queries.push({ tool: tool3, query, results: qp.results });
     let resultStr;
     try {
       resultStr = JSON.stringify(qp.results);
@@ -76355,16 +76397,6 @@ Result:
 \`\`\`json
 ${resultStr}
 \`\`\``);
-  }
-  if (queryParts.length === 0 && p.output?.analysis) {
-    const query = p.input?.query;
-    if (query) queries.push({ tool: tool3, query, results: p.output.analysis });
-    blocks.push(`Query (${tool3}):${query ? `
-\`\`\`
-${query}
-\`\`\`` : ""}
-Result:
-${p.output.analysis}`);
   }
   return blocks.join("\n\n");
 }
@@ -76601,6 +76633,8 @@ var MonitorScheduler = class {
     this.db = db2;
     this.providers = providers;
   }
+  db;
+  providers;
   interval = null;
   tickPromise = null;
   start() {