@@ -451,7 +451,7 @@ PREPROCESSOR_SRC = $(CBM_DIR)/preprocessor.cpp
 SQLITE_WRITER_SRC = $(CBM_DIR)/sqlite_writer.c
 
 # Store module (new)
-STORE_SRCS = src/store/store.c src/store/architecture_projection.c src/store/store_impact.c src/store/store_graph_digest.c src/store/store_content_digest.c
+STORE_SRCS = src/store/store.c src/store/graph_mem.c src/store/architecture_projection.c src/store/store_impact.c src/store/store_graph_digest.c src/store/store_content_digest.c
 
 # Cypher module (new)
 CYPHER_SRCS = src/cypher/cypher.c
@@ -541,7 +541,9 @@ PIPELINE_SRCS = \
     src/pipeline/pass_operator.c \
     src/pipeline/pass_shell.c \
     src/pipeline/pass_terraform.c \
+    src/pipeline/pass_ansible.c \
     src/pipeline/pass_docker.c \
+    src/pipeline/pass_envjoin.c \
     src/pipeline/pass_ci.c \
     src/pipeline/pass_similarity.c \
     src/pipeline/pass_semantic_edges.c \
@@ -745,6 +747,7 @@ TEST_STORE_SRCS = \
     tests/test_store_impact.c \
     tests/test_store_scope.c \
     tests/test_store_graph_digest.c \
+    tests/test_graph_mem.c \
     tests/test_store_search.c \
     tests/test_store_arch.c \
     tests/test_architecture_projection.c \
@@ -760,6 +763,7 @@ TEST_OPERATION_SRCS = \
     tests/test_index_supervisor.c \
     tests/test_changes_operation.c \
     tests/test_trace_architecture_operations.c \
+    tests/test_source_search.c \
     $(wildcard tests/test_test_impact*.c)
 
 TEST_DAEMON_SRCS = \
 
@@ -60,6 +60,8 @@ It includes:
 - definitions, calls, imports, usages, routes, channels, and cross-service links;
 - architecture summaries, change-impact analysis, dead-code queries, ADRs, and Cypher queries;
 - BM25, semantic, structural, and graph-augmented source search;
+- infrastructure and configuration linking for Ansible, Kubernetes, Helm, Compose, Terraform, TOML and INI, including `CONNECTS_TO` topology;
+- in-memory adjacency acceleration for trace traversal and degree-filtered search;
 - cross-repository graph intelligence and the CBM Atlas web UI: an explorer and read-only reader, a semantic twin that follows the caret, flow, bug-hunt and change-scope reading modes, the 3D galaxy and project management, served by the binary on loopback (`localhost:9749`) through native `/api/*` endpoints and `POST /api/tool`;
 - a persistent local index with incremental updates and optional shared graph artifacts;
 - a coordination daemon, supervised workers, and filesystem watcher for reliable background indexing.
 
@@ -701,31 +701,44 @@ typedef struct {
 /* A fact a Kubernetes manifest states about other objects (extract_k8s.c),
  * resolved by the K8s pass against the objects of the source's bundle.
  *   CBM_K8S_FACT_REF: object def_index names a kind/ns/name object at a
- *     reference path (via), drawn as edge (USAGE, INFRA_MAPS or DEPENDS_ON);
- *     ns NULL = the source's own namespace.
+ *     reference path (via), drawn as edge (USAGE, INFRA_MAPS, DEPENDS_ON or
+ *     CONNECTS_TO); ns NULL = the source's own namespace. A CONNECTS_TO
+ *     reference (via "env") is the Service the value of environment variable
+ *     `key` of container `container` addresses -- the value is not kept.
  *   CBM_K8S_FACT_CRD: the CRD def_index declares kind `kind` in group `name`.
  *   CBM_K8S_FACT_DEPLOY: object def_index (a Flux Kustomization, an Argo
  *     Application) deploys the repository directory `name` into namespace
- *     `ns` (NULL: the objects' own); via "flux" / "argo".
+ *     `ns` (NULL: the objects' own); via "flux" / "argo". via "kustomize"
+ *     (def_index -1: the kustomization itself): a `helmCharts` entry
+ *     inflates chart `name` of repository `url` at `version` as release
+ *     `release` into namespace `ns`, with values file `path`.
  *   CBM_K8S_FACT_ROUTE: object def_index (an Ingress, an HTTPRoute) exposes
  *     `route` ("<host or *><path>") and sends it to the kind/ns/name backend
  *     (name NULL: none); via "ingress" / "httproute".
  *   CBM_K8S_FACT_SOURCE: object def_index (a Flux OCIRepository) fetches
  *     from the URL `name`; a HelmRelease whose chartRef names it deploys the
  *     chart there.
- *   CBM_K8S_FACT_IMAGE: object def_index runs a container of image `name`
- *     (a literal reference); via "container".
+ *   CBM_K8S_FACT_IMAGE: object def_index runs its container `container`
+ *     (NULL: unnamed) from image `name` (a literal reference); via "container".
  *   CBM_K8S_FACT_ENV: object def_index sets environment variable `name` in
  *     its container `container` (NULL: unnamed) at `line`; via = where the
- *     value comes from ("value", or the valueFrom kind) -- never the value. */
+ *     value comes from ("value", or the valueFrom kind) -- never the value.
+ *   CBM_K8S_FACT_PATCH: a kustomization's `patches` entry at `line` patches
+ *     the objects of its build named by kind / group / version / name / ns
+ *     (any NULL: any) -- its `target`, else an inline patch document's own
+ *     kind / group / name / ns; `path` is
+ *     the patch file (as written, relative to the kustomization), NULL for an
+ *     inline patch. kind and name both NULL: the patch file's documents name
+ *     them. def_index -1: the kustomization itself is the source. */
 typedef enum {
     CBM_K8S_FACT_REF = 0,
     CBM_K8S_FACT_CRD,
     CBM_K8S_FACT_DEPLOY,
     CBM_K8S_FACT_ROUTE,
     CBM_K8S_FACT_SOURCE,
     CBM_K8S_FACT_IMAGE,
-    CBM_K8S_FACT_ENV
+    CBM_K8S_FACT_ENV,
+    CBM_K8S_FACT_PATCH
 } CBMK8sFactKind;
 typedef struct {
     CBMK8sFactKind fact;
@@ -737,6 +750,13 @@ typedef struct {
     const char *edge;
     const char *route;
     const char *container;
+    const char *key;      /* CONNECTS_TO: the environment variable addressing it */
+    const char *group;    /* PATCH: the API group named ("core"), NULL: any */
+    const char *version;  /* PATCH: the API version named, NULL: any */
+    const char *path;     /* PATCH: the patch file, NULL: inline */
+    const char *selector; /* PATCH: the target's labelSelector, NULL: none */
+    const char *url;      /* DEPLOY (kustomize): the chart repository */
+    const char *release;  /* DEPLOY (kustomize): the release name */
     int line;
 } CBMK8sFact;
 
 
@@ -7197,18 +7197,19 @@ static char *find_hcl_block_name(CBMArena *a, TSNode node, const char *source) {
     // Append the block's quoted labels so each block gets a distinct,
     // query-friendly name: resource "aws_instance" "web" -> resource.aws_instance.web
     // rather than every resource collapsing to the bare keyword "resource" (#337).
-    // HCL stores labels as string_lit -> template_literal children.
+    // HCL stores quoted labels as string_lit -> template_literal children and
+    // bare ones (`variable region {}`, valid HCL) as identifiers after the
+    // keyword's own -- both name the block.
     uint32_t cc = ts_node_named_child_count(node);
     for (uint32_t i = 0; i < cc; i++) {
         TSNode ch = ts_node_named_child(node, i);
-        if (strcmp(ts_node_type(ch), "string_lit") != 0) {
-            continue;
-        }
-        TSNode lit = cbm_find_child_by_kind(ch, "template_literal");
-        if (ts_node_is_null(lit)) {
-            continue;
+        char *label = NULL;
+        if (strcmp(ts_node_type(ch), "string_lit") == 0) {
+            TSNode lit = cbm_find_child_by_kind(ch, "template_literal");
+            label = ts_node_is_null(lit) ? NULL : cbm_node_text(a, lit, source);
+        } else if (strcmp(ts_node_type(ch), "identifier") == 0 && !ts_node_eq(ch, id)) {
+            label = cbm_node_text(a, ch, source);
         }
-        char *label = cbm_node_text(a, lit, source);
         if (!label || !label[0]) {
             continue;
         }