@aroman22/codegraph-vba-darwin-arm64 1.5.1 → 1.6.0

package/lib/dist/upgrade/update-check.js

@@ -0,0 +1,258 @@
+"use strict";
+/**
+ * Background update-availability check for long-lived servers (#1243).
+ *
+ * The recommended MCP config launches the LOCAL `codegraph` binary, so the
+ * server (and the prompt hook alongside it) silently stays on whatever version
+ * was last manually upgraded — users discover the drift only when something
+ * breaks. This module gives the running server *visibility* without changing
+ * behavior: a non-blocking check against the latest GitHub release, surfaced
+ * as a one-line notice (stderr log, MCP initialize instructions, and
+ * `codegraph_status`) telling the user to run `codegraph upgrade`.
+ *
+ * Invariants (mirrors the telemetry module's contract):
+ *   - Never stdout — stdio is the MCP protocol channel.
+ *   - Never blocking: the network refresh is fire-and-forget; every reader
+ *     (`getUpdateNotice`) is a cheap synchronous cache read, so the #172
+ *     respond-fast handshake contract holds.
+ *   - Fail silent: offline / rate-limited / disk-full all degrade to "no
+ *     notice", never an error, never a retry loop.
+ *   - Off is off: `CODEGRAPH_NO_UPDATE_CHECK` (dedicated) or `DO_NOT_TRACK`
+ *     (broad don't-phone-home convention — set by e.g. the Pro container's
+ *     data plane) suppresses the network call AND the notice entirely.
+ *
+ * The check itself reuses `resolveLatestVersion` — the GitHub release-redirect
+ * trick with the API fallback — so version resolution can't drift from what
+ * `codegraph upgrade` installs. Results are cached in `~/.codegraph/` (the
+ * same global state dir telemetry and the daemon registry use) with a 24h TTL
+ * on success and a 1h backoff after failure, shared across every proxy /
+ * daemon process on the machine.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.UPDATE_CHECK_FAILURE_BACKOFF_MS = exports.UPDATE_CHECK_TTL_MS = void 0;
+exports.updateCheckDisabled = updateCheckDisabled;
+exports.updateCheckCachePath = updateCheckCachePath;
+exports.readUpdateCheckCache = readUpdateCheckCache;
+exports.canonicalVersionTag = canonicalVersionTag;
+exports.formatUpdateNotice = formatUpdateNotice;
+exports.refreshUpdateCheck = refreshUpdateCheck;
+exports.getUpdateNotice = getUpdateNotice;
+exports.resetUpdateNoticeMemo = resetUpdateNoticeMemo;
+exports.checkForUpdateInBackground = checkForUpdateInBackground;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const os = __importStar(require("os"));
+const index_1 = require("./index");
+const version_1 = require("../mcp/version");
+/** Re-check the release feed after this long (successful checks). */
+exports.UPDATE_CHECK_TTL_MS = 24 * 60 * 60 * 1000;
+/** Back off this long after a failed check (offline, rate-limited). */
+exports.UPDATE_CHECK_FAILURE_BACKOFF_MS = 60 * 60 * 1000;
+/** Short network budget — the refresh is background work, not a handshake. */
+const UPDATE_CHECK_NETWORK_TIMEOUT_MS = 5000;
+function resolveDeps(deps = {}) {
+    return {
+        dir: deps.dir ?? path.join(os.homedir(), '.codegraph'),
+        env: deps.env ?? process.env,
+        now: deps.now ?? Date.now,
+        resolveLatest: deps.resolveLatest ?? (() => (0, index_1.resolveLatestVersion)(undefined, UPDATE_CHECK_NETWORK_TIMEOUT_MS)),
+        currentVersion: deps.currentVersion ?? version_1.CodeGraphPackageVersion,
+    };
+}
+function envTruthy(raw) {
+    return raw !== undefined && raw !== '' && raw !== '0' && raw.toLowerCase() !== 'false';
+}
+/**
+ * True when the update check must not run at all — no network call, no
+ * notice. `DO_NOT_TRACK` uses the same truthiness the telemetry opt-out does.
+ */
+function updateCheckDisabled(env = process.env) {
+    return envTruthy(env.CODEGRAPH_NO_UPDATE_CHECK) || envTruthy(env.DO_NOT_TRACK);
+}
+function updateCheckCachePath(dir) {
+    return path.join(dir, 'update-check.json');
+}
+function readUpdateCheckCache(dir) {
+    try {
+        const raw = fs.readFileSync(updateCheckCachePath(dir), 'utf8');
+        const parsed = JSON.parse(raw);
+        if (typeof parsed?.lastAttemptAt !== 'number')
+            return null;
+        return parsed;
+    }
+    catch {
+        return null; // missing / torn / unparseable — same as no cache
+    }
+}
+function writeUpdateCheckCache(dir, cache) {
+    try {
+        fs.mkdirSync(dir, { recursive: true });
+        fs.writeFileSync(updateCheckCachePath(dir), JSON.stringify(cache));
+    }
+    catch {
+        /* fail silent — a read-only home dir must not break the server */
+    }
+}
+/**
+ * Rebuild a canonical `vX.Y.Z[-pre]` tag from the PARSED semver fields, or
+ * null when the input isn't version-shaped. The notice ends up inside the MCP
+ * initialize instructions — agent-visible, system-prompt-adjacent text — and
+ * the `latest` value arrives from a network redirect via an on-disk cache, so
+ * only a reconstructed canonical string may ever be interpolated, never the
+ * raw value. (`parseSemver`'s regex is not end-anchored: a value like
+ * `1.2.3-x <arbitrary text>` parses "valid" while the raw string would carry
+ * the trailing text straight into every session's instructions.)
+ */
+function canonicalVersionTag(v) {
+    const s = (0, index_1.parseSemver)(v);
+    if (!s)
+        return null;
+    return `v${s.major}.${s.minor}.${s.patch}${s.pre ? `-${s.pre}` : ''}`;
+}
+/** One user-facing sentence; every surface (stderr, instructions, status) shows this. */
+function formatUpdateNotice(current, latest) {
+    return (`CodeGraph ${latest} is available (this server is running ` +
+        `${current}). Update with \`codegraph upgrade\`.`);
+}
+function noticeFrom(cache, d) {
+    if (!cache?.latest)
+        return null;
+    // A dev build whose package.json couldn't be read reports the sentinel
+    // version; any comparison against it would always claim an update.
+    if (d.currentVersion === '0.0.0-unknown')
+        return null;
+    // Canonicalize BOTH sides before comparing or rendering — a non-semver
+    // `latest` (garbage redirect, tampered cache) yields no notice at all
+    // rather than flowing into agent-visible text.
+    const latest = canonicalVersionTag(cache.latest);
+    const current = canonicalVersionTag(d.currentVersion);
+    if (!latest || !current)
+        return null;
+    return (0, index_1.isUpdateAvailable)(current, latest) ? formatUpdateNotice(current, latest) : null;
+}
+function cacheIsFresh(cache, nowMs) {
+    if (!cache)
+        return false;
+    if (cache.lastSuccessAt !== undefined && nowMs - cache.lastSuccessAt < exports.UPDATE_CHECK_TTL_MS) {
+        return true;
+    }
+    // No recent success: only the failure backoff holds the network call off.
+    return nowMs - cache.lastAttemptAt < exports.UPDATE_CHECK_FAILURE_BACKOFF_MS;
+}
+/**
+ * Ensure the on-disk cache is fresh (hitting the network only past the TTL /
+ * backoff) and return the current notice, or null. Never throws.
+ */
+async function refreshUpdateCheck(deps = {}) {
+    const d = resolveDeps(deps);
+    if (updateCheckDisabled(d.env))
+        return null;
+    const cached = readUpdateCheckCache(d.dir);
+    const nowMs = d.now();
+    if (cacheIsFresh(cached, nowMs))
+        return noticeFrom(cached, d);
+    try {
+        const latest = canonicalVersionTag(await d.resolveLatest());
+        // A response that isn't version-shaped is a failure, not a result —
+        // fall through to the backoff path and keep the previous known-good tag.
+        if (!latest)
+            throw new Error('release feed returned a non-version tag');
+        const next = { lastAttemptAt: nowMs, lastSuccessAt: nowMs, latest };
+        writeUpdateCheckCache(d.dir, next);
+        return noticeFrom(next, d);
+    }
+    catch {
+        // Record the attempt (starts the backoff) but KEEP the previous latest —
+        // a transient outage must not hide an already-known update.
+        const next = {
+            lastAttemptAt: nowMs,
+            lastSuccessAt: cached?.lastSuccessAt,
+            latest: cached?.latest,
+        };
+        writeUpdateCheckCache(d.dir, next);
+        return noticeFrom(next, d);
+    }
+}
+// Per-process memo so the sync read path (MCP initialize, codegraph_status)
+// touches the disk at most once a minute, not once per handshake.
+const NOTICE_MEMO_TTL_MS = 60 * 1000;
+let noticeMemo = null;
+/**
+ * The current update notice from the on-disk cache — synchronous and cheap
+ * (memoized disk read), safe on the initialize respond-fast path. When the
+ * cache has gone stale (e.g. a daemon that has been up for weeks), kicks a
+ * background refresh so the NEXT reader sees a current answer; this call
+ * still returns immediately from the stale cache.
+ */
+function getUpdateNotice(deps = {}) {
+    const d = resolveDeps(deps);
+    if (updateCheckDisabled(d.env))
+        return null;
+    const useMemo = deps.dir === undefined && deps.now === undefined;
+    const nowMs = d.now();
+    if (useMemo && noticeMemo && nowMs - noticeMemo.at < NOTICE_MEMO_TTL_MS) {
+        return noticeMemo.value;
+    }
+    const cached = readUpdateCheckCache(d.dir);
+    if (!cacheIsFresh(cached, nowMs)) {
+        void refreshUpdateCheck(deps).catch(() => { });
+    }
+    const value = noticeFrom(cached, d);
+    if (useMemo)
+        noticeMemo = { at: nowMs, value };
+    return value;
+}
+/** Test hook: clear the per-process memo. */
+function resetUpdateNoticeMemo() {
+    noticeMemo = null;
+}
+/**
+ * Fire-and-forget entry point for server startup: refresh the cache in the
+ * background and, if an update is available, emit ONE stderr line (stderr is
+ * the MCP-safe channel; hosts surface it in their server logs). Never throws,
+ * never blocks, never writes stdout.
+ */
+function checkForUpdateInBackground(deps = {}, log = (line) => process.stderr.write(line)) {
+    refreshUpdateCheck(deps)
+        .then((notice) => {
+        // The shared notice sentence starts with "CodeGraph …"; drop the word
+        // after the log tag so the line doesn't read "[CodeGraph] CodeGraph …".
+        if (notice)
+            log(`[CodeGraph] ${notice.replace(/^CodeGraph /, '')}\n`);
+    })
+        .catch(() => { });
+}
+//# sourceMappingURL=update-check.js.map

package/lib/dist/upgrade/update-check.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"update-check.js","sourceRoot":"","sources":["../../src/upgrade/update-check.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA4BG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA4DH,kDAEC;AAED,oDAEC;AAED,oDASC;AAqBD,kDAIC;AAGD,gDAKC;AA6BD,gDA2BC;AAcD,0CAiBC;AAGD,sDAEC;AAQD,gEAWC;AA3ND,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,mCAA+E;AAC/E,4CAAyD;AAEzD,qEAAqE;AACxD,QAAA,mBAAmB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AACvD,uEAAuE;AAC1D,QAAA,+BAA+B,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAC9D,8EAA8E;AAC9E,MAAM,+BAA+B,GAAG,IAAI,CAAC;AA4B7C,SAAS,WAAW,CAAC,OAAwB,EAAE;IAC7C,OAAO;QACL,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC;QACtD,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG;QAC5B,GAAG,EAAE,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG;QACzB,aAAa,EACX,IAAI,CAAC,aAAa,IAAI,CAAC,GAAG,EAAE,CAAC,IAAA,4BAAoB,EAAC,SAAS,EAAE,+BAA+B,CAAC,CAAC;QAChG,cAAc,EAAE,IAAI,CAAC,cAAc,IAAI,iCAAuB;KAC/D,CAAC;AACJ,CAAC;AAED,SAAS,SAAS,CAAC,GAAuB;IACxC,OAAO,GAAG,KAAK,SAAS,IAAI,GAAG,KAAK,EAAE,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,CAAC,WAAW,EAAE,KAAK,OAAO,CAAC;AACzF,CAAC;AAED;;;GAGG;AACH,SAAgB,mBAAmB,CAAC,MAAyB,OAAO,CAAC,GAAG;IACtE,OAAO,SAAS,CAAC,GAAG,CAAC,yBAAyB,CAAC,IAAI,SAAS,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC;AACjF,CAAC;AAED,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,OAAO,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,mBAAmB,CAAC,CAAC;AAC7C,CAAC;AAED,SAAgB,oBAAoB,CAAC,GAAW;IAC9C,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,MAAM,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAyB,CAAC;QACvD,IAAI,OAAO,MAAM,EAAE,aAAa,KAAK,QAAQ;YAAE,OAAO,IAAI,CAAC;QAC3D,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC,CAAC,kDAAkD;IACjE,CAAC;AACH,CAAC;AAED,SAAS,qBAAqB,CAAC,GAAW,EAAE,KAA2B;IACrE,IAAI,CAAC;QACH,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACvC,EAAE,CAAC,aAAa,CAAC,oBAAoB,CAAC,GAAG,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC,CAAC;IACrE,CAAC;IAAC,MAAM,CAAC;QACP,kEAAkE;IACpE,CAAC;AACH,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,mBAAmB,CAAC,CAAS;IAC3C,MAAM,CAAC,GAAG,IAAA,mBAAW,EAAC,CAAC,CAAC,CAAC;IACzB,IAAI,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IACpB,OAAO,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;AACxE,CAAC;AAED,yFAAyF;AACzF,SAAgB,kBAAkB,CAAC,OAAe,EAAE,MAAc;IAChE,OAAO,CACL,aAAa,MAAM,wCAAwC;QAC3D,GAAG,OAAO,uCAAuC,CAClD,CAAC;AACJ,CAAC;AAED,SAAS,UAAU,CAAC,KAAkC,EAAE,CAAe;IACrE,IAAI,CAAC,KAAK,EAAE,MAAM;QAAE,OAAO,IAAI,CAAC;IAChC,uEAAuE;IACvE,mEAAmE;IACnE,IAAI,CAAC,CAAC,cAAc,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IACtD,uEAAuE;IACvE,sEAAsE;IACtE,+CAA+C;IAC/C,MAAM,MAAM,GAAG,mBAAmB,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;IACjD,MAAM,OAAO,GAAG,mBAAmB,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;IACtD,IAAI,CAAC,MAAM,IAAI,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,OAAO,IAAA,yBAAiB,EAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,kBAAkB,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC;AACzF,CAAC;AAED,SAAS,YAAY,CAAC,KAAkC,EAAE,KAAa;IACrE,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC;IACzB,IAAI,KAAK,CAAC,aAAa,KAAK,SAAS,IAAI,KAAK,GAAG,KAAK,CAAC,aAAa,GAAG,2BAAmB,EAAE,CAAC;QAC3F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,0EAA0E;IAC1E,OAAO,KAAK,GAAG,KAAK,CAAC,aAAa,GAAG,uCAA+B,CAAC;AACvE,CAAC;AAED;;;GAGG;AACI,KAAK,UAAU,kBAAkB,CAAC,OAAwB,EAAE;IACjE,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,MAAM,GAAG,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACtB,IAAI,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC;QAAE,OAAO,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IAE9D,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,mBAAmB,CAAC,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC,CAAC;QAC5D,oEAAoE;QACpE,yEAAyE;QACzE,IAAI,CAAC,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,yCAAyC,CAAC,CAAC;QACxE,MAAM,IAAI,GAAyB,EAAE,aAAa,EAAE,KAAK,EAAE,aAAa,EAAE,KAAK,EAAE,MAAM,EAAE,CAAC;QAC1F,qBAAqB,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnC,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,yEAAyE;QACzE,4DAA4D;QAC5D,MAAM,IAAI,GAAyB;YACjC,aAAa,EAAE,KAAK;YACpB,aAAa,EAAE,MAAM,EAAE,aAAa;YACpC,MAAM,EAAE,MAAM,EAAE,MAAM;SACvB,CAAC;QACF,qBAAqB,CAAC,CAAC,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACnC,OAAO,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC;IAC7B,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,kEAAkE;AAClE,MAAM,kBAAkB,GAAG,EAAE,GAAG,IAAI,CAAC;AACrC,IAAI,UAAU,GAAgD,IAAI,CAAC;AAEnE;;;;;;GAMG;AACH,SAAgB,eAAe,CAAC,OAAwB,EAAE;IACxD,MAAM,CAAC,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC;IAC5B,IAAI,mBAAmB,CAAC,CAAC,CAAC,GAAG,CAAC;QAAE,OAAO,IAAI,CAAC;IAE5C,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,KAAK,SAAS,IAAI,IAAI,CAAC,GAAG,KAAK,SAAS,CAAC;IACjE,MAAM,KAAK,GAAG,CAAC,CAAC,GAAG,EAAE,CAAC;IACtB,IAAI,OAAO,IAAI,UAAU,IAAI,KAAK,GAAG,UAAU,CAAC,EAAE,GAAG,kBAAkB,EAAE,CAAC;QACxE,OAAO,UAAU,CAAC,KAAK,CAAC;IAC1B,CAAC;IAED,MAAM,MAAM,GAAG,oBAAoB,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;IAC3C,IAAI,CAAC,YAAY,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;QACjC,KAAK,kBAAkB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAqB,CAAC,CAAC,CAAC;IACnE,CAAC;IACD,MAAM,KAAK,GAAG,UAAU,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC;IACpC,IAAI,OAAO;QAAE,UAAU,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC;IAC/C,OAAO,KAAK,CAAC;AACf,CAAC;AAED,6CAA6C;AAC7C,SAAgB,qBAAqB;IACnC,UAAU,GAAG,IAAI,CAAC;AACpB,CAAC;AAED;;;;;GAKG;AACH,SAAgB,0BAA0B,CACxC,OAAwB,EAAE,EAC1B,MAA8B,CAAC,IAAI,EAAE,EAAE,CAAC,OAAO,CAAC,MAAM,CAAC,KAAK,CAAC,IAAI,CAAC;IAElE,kBAAkB,CAAC,IAAI,CAAC;SACrB,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE;QACf,sEAAsE;QACtE,wEAAwE;QACxE,IAAI,MAAM;YAAE,GAAG,CAAC,eAAe,MAAM,CAAC,OAAO,CAAC,aAAa,EAAE,EAAE,CAAC,IAAI,CAAC,CAAC;IACxE,CAAC,CAAC;SACD,KAAK,CAAC,GAAG,EAAE,GAAqB,CAAC,CAAC,CAAC;AACxC,CAAC"}

package/lib/node_modules/.modules.yaml

@@ -34,7 +34,7 @@ layoutVersion: 5
 nodeLinker: hoisted
 packageManager: pnpm@10.16.1
 pendingBuilds: []
-prunedAt: Sat, 04 Jul 2026 15:36:16 GMT
+prunedAt: Sat, 11 Jul 2026 14:30:46 GMT
 publicHoistPattern: []
 registries:
   '@jsr': https://npm.jsr.io/

package/lib/node_modules/.pnpm-workspace-state-v1.json

@@ -1,5 +1,5 @@
 {
-  "lastValidatedTimestamp": 1783179376942,
+  "lastValidatedTimestamp": 1783780246823,
   "projects": {},
   "pnpmfiles": [],
   "settings": {

package/lib/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aroman22/codegraph-vba",
-  "version": "1.5.1",
+  "version": "1.6.0",
   "description": "Supercharge AI coding agents with semantic code intelligence — surgical context, fewer tool calls, faster answers. 100% local.",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aroman22/codegraph-vba-darwin-arm64",
-  "version": "1.5.1",
+  "version": "1.6.0",
   "description": "CodeGraph self-contained bundle for darwin-arm64",
   "os": [
     "darwin"

package/lib/dist/reasoning/config.d.ts

@@ -1,45 +0,0 @@
-/** Managed tier ("CodeGraph AI") — the metered gateway used when logged in. */
-export declare const MANAGED_DEFAULT_URL = "https://ai.getcodegraph.com/v1";
-/** The gateway's public model id (it translates this to the upstream provider id). */
-export declare const MANAGED_DEFAULT_MODEL = "openai/gpt-oss-120b";
-export interface OffloadConfig {
-    /** Managed tier: route through CodeGraph AI (metered) with the logged-in org token. */
-    managed?: boolean;
-    /** OpenAI-compatible base URL ending in `/v1` (e.g. https://api.cerebras.ai/v1). */
-    url?: string;
-    /** Model id to request (default `gpt-oss-120b` BYO, `openai/gpt-oss-120b` managed). */
-    model?: string;
-    /** Name of the env var holding the provider API key (never persisted). BYO only. */
-    keyEnv?: string;
-    /** reasoning_effort: low | medium | high (default `low`). */
-    effort?: string;
-    /** Output style: plain | report (default `plain`). */
-    style?: string;
-}
-export interface ResolvedOffload {
-    /** True when the offload is usable (endpoint present; for managed, a token too). */
-    enabled: boolean;
-    /** Managed tier (CodeGraph AI, metered) vs BYO endpoint. */
-    managed: boolean;
-    url?: string;
-    model: string;
-    /** Resolved API key / org token (from env, the configured `keyEnv`, or login), if any. */
-    apiKey?: string;
-    /** Where the key/token came from (for `status` display) — never the secret itself. */
-    keySource?: string;
-    effort: string;
-    style: string;
-    timeoutMs: number;
-    maxTokens: number;
-    strip: boolean;
-    debug: boolean;
-    /** Where the endpoint came from — drives `codegraph offload status`. */
-    origin: 'env' | 'config' | 'none';
-}
-/** The persisted offload block (empty object if none). */
-export declare function readOffloadConfig(): OffloadConfig;
-/** Persist (or, with `null`, clear) the offload block, leaving other config keys intact. */
-export declare function writeOffloadConfig(offload: OffloadConfig | null): void;
-/** Merge the persisted config with `CODEGRAPH_OFFLOAD_*` env overrides (env wins). */
-export declare function resolveOffload(env?: NodeJS.ProcessEnv): ResolvedOffload;
-//# sourceMappingURL=config.d.ts.map

package/lib/dist/reasoning/config.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.d.ts","sourceRoot":"","sources":["../../src/reasoning/config.ts"],"names":[],"mappings":"AAqBA,+EAA+E;AAC/E,eAAO,MAAM,mBAAmB,mCAAmC,CAAC;AACpE,sFAAsF;AACtF,eAAO,MAAM,qBAAqB,wBAAwB,CAAC;AAE3D,MAAM,WAAW,aAAa;IAC5B,uFAAuF;IACvF,OAAO,CAAC,EAAE,OAAO,CAAC;IAClB,oFAAoF;IACpF,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,uFAAuF;IACvF,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,oFAAoF;IACpF,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,6DAA6D;IAC7D,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sDAAsD;IACtD,KAAK,CAAC,EAAE,MAAM,CAAC;CAChB;AAED,MAAM,WAAW,eAAe;IAC9B,oFAAoF;IACpF,OAAO,EAAE,OAAO,CAAC;IACjB,4DAA4D;IAC5D,OAAO,EAAE,OAAO,CAAC;IACjB,GAAG,CAAC,EAAE,MAAM,CAAC;IACb,KAAK,EAAE,MAAM,CAAC;IACd,0FAA0F;IAC1F,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,sFAAsF;IACtF,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,MAAM,CAAC;IACd,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,KAAK,EAAE,OAAO,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,wEAAwE;IACxE,MAAM,EAAE,KAAK,GAAG,QAAQ,GAAG,MAAM,CAAC;CACnC;AAsBD,0DAA0D;AAC1D,wBAAgB,iBAAiB,IAAI,aAAa,CAIjD;AAED,4FAA4F;AAC5F,wBAAgB,kBAAkB,CAAC,OAAO,EAAE,aAAa,GAAG,IAAI,GAAG,IAAI,CAKtE;AAOD,sFAAsF;AACtF,wBAAgB,cAAc,CAAC,GAAG,GAAE,MAAM,CAAC,UAAwB,GAAG,eAAe,CAwDpF"}

package/lib/dist/reasoning/config.js

@@ -1,171 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.MANAGED_DEFAULT_MODEL = exports.MANAGED_DEFAULT_URL = void 0;
-exports.readOffloadConfig = readOffloadConfig;
-exports.writeOffloadConfig = writeOffloadConfig;
-exports.resolveOffload = resolveOffload;
-/**
- * Reasoning-offload configuration: the persistent, machine-level settings the
- * `codegraph offload` CLI writes, merged with `CODEGRAPH_OFFLOAD_*` env overrides.
- *
- * Stored in `~/.codegraph/config.json` under the `offload` key — the same global
- * home CodeGraph already uses for the daemon registry — because the reasoning
- * endpoint is a per-machine choice (the model you bring), not per-project state.
- * Every codegraph MCP server on the machine picks it up, so a user configures it
- * once. Env vars override the file (CI / ephemeral / advanced use).
- *
- * For a BYO endpoint, the API key is NEVER written to disk: the CLI stores the
- * NAME of an env var (`keyEnv`) and reads the key from it at call time. The
- * MANAGED tier ("CodeGraph AI") instead authenticates with a revocable, org-scoped
- * token from `codegraph offload login`, stored separately in `credentials.json`
- * (see ./credentials) — so `config.json` itself never carries a secret either way.
- */
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const os = __importStar(require("os"));
-const credentials_1 = require("./credentials");
-/** Managed tier ("CodeGraph AI") — the metered gateway used when logged in. */
-exports.MANAGED_DEFAULT_URL = 'https://ai.getcodegraph.com/v1';
-/** The gateway's public model id (it translates this to the upstream provider id). */
-exports.MANAGED_DEFAULT_MODEL = 'openai/gpt-oss-120b';
-function configDir() {
-    return path.join(os.homedir(), '.codegraph');
-}
-function configPath() {
-    return path.join(configDir(), 'config.json');
-}
-function readUserConfig() {
-    try {
-        return JSON.parse(fs.readFileSync(configPath(), 'utf8'));
-    }
-    catch {
-        return {};
-    }
-}
-function writeUserConfig(cfg) {
-    fs.mkdirSync(configDir(), { recursive: true });
-    fs.writeFileSync(configPath(), JSON.stringify(cfg, null, 2) + '\n');
-}
-/** The persisted offload block (empty object if none). */
-function readOffloadConfig() {
-    const cfg = readUserConfig();
-    const o = cfg.offload;
-    return o && typeof o === 'object' ? o : {};
-}
-/** Persist (or, with `null`, clear) the offload block, leaving other config keys intact. */
-function writeOffloadConfig(offload) {
-    const cfg = readUserConfig();
-    if (offload === null)
-        delete cfg.offload;
-    else
-        cfg.offload = offload;
-    writeUserConfig(cfg);
-}
-const trimmed = (v) => {
-    const t = v?.trim();
-    return t ? t : undefined;
-};
-/** Merge the persisted config with `CODEGRAPH_OFFLOAD_*` env overrides (env wins). */
-function resolveOffload(env = process.env) {
-    // Hard kill-switch: disable the offload for this process/session without touching
-    // the persisted config or the stored login — e.g. one A/B arm, or a user who wants
-    // codegraph_explore to return raw source for a session. Env-only by design.
-    if (env.CODEGRAPH_OFFLOAD_DISABLE === '1') {
-        return {
-            enabled: false, managed: false, url: undefined, model: exports.MANAGED_DEFAULT_MODEL,
-            apiKey: undefined, keySource: undefined, effort: 'low', style: 'plain',
-            timeoutMs: 20000, maxTokens: 12000, strip: false,
-            debug: env.CODEGRAPH_OFFLOAD_DEBUG === '1', origin: 'none',
-        };
-    }
-    const c = readOffloadConfig();
-    const managed = !!c.managed;
-    const envUrl = trimmed(env.CODEGRAPH_OFFLOAD_URL);
-    const envKey = trimmed(env.CODEGRAPH_OFFLOAD_KEY);
-    let url;
-    let apiKey;
-    let keySource;
-    let model;
-    if (managed) {
-        // Managed tier: default to the CodeGraph AI gateway + its public model id; the
-        // bearer is the org token from `codegraph offload login` (or an env override).
-        url = envUrl ?? trimmed(c.url) ?? exports.MANAGED_DEFAULT_URL;
-        model = trimmed(env.CODEGRAPH_OFFLOAD_MODEL) ?? trimmed(c.model) ?? exports.MANAGED_DEFAULT_MODEL;
-        if (envKey) {
-            apiKey = envKey;
-            keySource = 'CODEGRAPH_OFFLOAD_KEY';
-        }
-        else {
-            const t = (0, credentials_1.readOffloadToken)();
-            if (t) {
-                apiKey = t;
-                keySource = 'codegraph login';
-            }
-        }
-    }
-    else {
-        // BYO: endpoint + (optional) provider key resolved from env or the named env var.
-        url = envUrl ?? trimmed(c.url);
-        model = trimmed(env.CODEGRAPH_OFFLOAD_MODEL) ?? trimmed(c.model) ?? 'gpt-oss-120b';
-        if (envKey) {
-            apiKey = envKey;
-            keySource = 'CODEGRAPH_OFFLOAD_KEY';
-        }
-        else if (c.keyEnv && trimmed(env[c.keyEnv])) {
-            apiKey = trimmed(env[c.keyEnv]);
-            keySource = c.keyEnv;
-        }
-    }
-    const origin = envUrl ? 'env' : (managed || trimmed(c.url)) ? 'config' : 'none';
-    return {
-        // Managed needs both an endpoint AND a token (no token → effectively logged out);
-        // BYO needs only an endpoint (some endpoints require no auth).
-        enabled: managed ? (!!url && !!apiKey) : !!url,
-        managed,
-        url,
-        model,
-        apiKey,
-        keySource,
-        effort: trimmed(env.CODEGRAPH_OFFLOAD_EFFORT) ?? trimmed(c.effort) ?? 'low',
-        style: trimmed(env.CODEGRAPH_OFFLOAD_STYLE) ?? trimmed(c.style) ?? 'plain',
-        timeoutMs: Number(env.CODEGRAPH_OFFLOAD_TIMEOUT_MS) || 20000,
-        maxTokens: Number(env.CODEGRAPH_OFFLOAD_MAXTOKENS) || 12000,
-        strip: env.CODEGRAPH_OFFLOAD_STRIP === '1',
-        debug: env.CODEGRAPH_OFFLOAD_DEBUG === '1',
-        origin,
-    };
-}
-//# sourceMappingURL=config.js.map

package/lib/dist/reasoning/config.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../../src/reasoning/config.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAmFA,8CAIC;AAGD,gDAKC;AAQD,wCAwDC;AA/JD;;;;;;;;;;;;;;;GAeG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AACzB,+CAAiD;AAEjD,+EAA+E;AAClE,QAAA,mBAAmB,GAAG,gCAAgC,CAAC;AACpE,sFAAsF;AACzE,QAAA,qBAAqB,GAAG,qBAAqB,CAAC;AAsC3D,SAAS,SAAS;IAChB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,CAAC,CAAC;AAC/C,CAAC;AACD,SAAS,UAAU;IACjB,OAAO,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,aAAa,CAAC,CAAC;AAC/C,CAAC;AAED,SAAS,cAAc;IACrB,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,UAAU,EAAE,EAAE,MAAM,CAAC,CAA4B,CAAC;IACtF,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,GAA4B;IACnD,EAAE,CAAC,SAAS,CAAC,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC/C,EAAE,CAAC,aAAa,CAAC,UAAU,EAAE,EAAE,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC;AACtE,CAAC;AAED,0DAA0D;AAC1D,SAAgB,iBAAiB;IAC/B,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,MAAM,CAAC,GAAG,GAAG,CAAC,OAAO,CAAC;IACtB,OAAO,CAAC,IAAI,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,CAAmB,CAAC,CAAC,CAAC,EAAE,CAAC;AAChE,CAAC;AAED,4FAA4F;AAC5F,SAAgB,kBAAkB,CAAC,OAA6B;IAC9D,MAAM,GAAG,GAAG,cAAc,EAAE,CAAC;IAC7B,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,GAAG,CAAC,OAAO,CAAC;;QACpC,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;IAC3B,eAAe,CAAC,GAAG,CAAC,CAAC;AACvB,CAAC;AAED,MAAM,OAAO,GAAG,CAAC,CAAqB,EAAsB,EAAE;IAC5D,MAAM,CAAC,GAAG,CAAC,EAAE,IAAI,EAAE,CAAC;IACpB,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3B,CAAC,CAAC;AAEF,sFAAsF;AACtF,SAAgB,cAAc,CAAC,MAAyB,OAAO,CAAC,GAAG;IACjE,kFAAkF;IAClF,mFAAmF;IACnF,4EAA4E;IAC5E,IAAI,GAAG,CAAC,yBAAyB,KAAK,GAAG,EAAE,CAAC;QAC1C,OAAO;YACL,OAAO,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,SAAS,EAAE,KAAK,EAAE,6BAAqB;YAC5E,MAAM,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,KAAK,EAAE,OAAO;YACtE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK;YAChD,KAAK,EAAE,GAAG,CAAC,uBAAuB,KAAK,GAAG,EAAE,MAAM,EAAE,MAAM;SAC3D,CAAC;IACJ,CAAC;IACD,MAAM,CAAC,GAAG,iBAAiB,EAAE,CAAC;IAC9B,MAAM,OAAO,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC;IAC5B,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IAElD,IAAI,GAAuB,CAAC;IAC5B,IAAI,MAA0B,CAAC;IAC/B,IAAI,SAA6B,CAAC;IAClC,IAAI,KAAa,CAAC;IAElB,IAAI,OAAO,EAAE,CAAC;QACZ,+EAA+E;QAC/E,+EAA+E;QAC/E,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,2BAAmB,CAAC;QACtD,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,6BAAqB,CAAC;QAC1F,IAAI,MAAM,EAAE,CAAC;YAAC,MAAM,GAAG,MAAM,CAAC;YAAC,SAAS,GAAG,uBAAuB,CAAC;QAAC,CAAC;aAChE,CAAC;YAAC,MAAM,CAAC,GAAG,IAAA,8BAAgB,GAAE,CAAC;YAAC,IAAI,CAAC,EAAE,CAAC;gBAAC,MAAM,GAAG,CAAC,CAAC;gBAAC,SAAS,GAAG,iBAAiB,CAAC;YAAC,CAAC;QAAC,CAAC;IAC9F,CAAC;SAAM,CAAC;QACN,kFAAkF;QAClF,GAAG,GAAG,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC;QAC/B,KAAK,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,cAAc,CAAC;QACnF,IAAI,MAAM,EAAE,CAAC;YAAC,MAAM,GAAG,MAAM,CAAC;YAAC,SAAS,GAAG,uBAAuB,CAAC;QAAC,CAAC;aAChE,IAAI,CAAC,CAAC,MAAM,IAAI,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YAAC,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC;YAAC,SAAS,GAAG,CAAC,CAAC,MAAM,CAAC;QAAC,CAAC;IACzG,CAAC;IAED,MAAM,MAAM,GAA8B,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC;IAE3G,OAAO;QACL,kFAAkF;QAClF,+DAA+D;QAC/D,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG;QAC9C,OAAO;QACP,GAAG;QACH,KAAK;QACL,MAAM;QACN,SAAS;QACT,MAAM,EAAE,OAAO,CAAC,GAAG,CAAC,wBAAwB,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,KAAK;QAC3E,KAAK,EAAE,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,KAAK,CAAC,IAAI,OAAO;QAC1E,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,4BAA4B,CAAC,IAAI,KAAK;QAC5D,SAAS,EAAE,MAAM,CAAC,GAAG,CAAC,2BAA2B,CAAC,IAAI,KAAK;QAC3D,KAAK,EAAE,GAAG,CAAC,uBAAuB,KAAK,GAAG;QAC1C,KAAK,EAAE,GAAG,CAAC,uBAAuB,KAAK,GAAG;QAC1C,MAAM;KACP,CAAC;AACJ,CAAC"}

package/lib/dist/reasoning/credentials.d.ts

@@ -1,5 +0,0 @@
-/** The stored managed-offload org token, if the machine is logged in. */
-export declare function readOffloadToken(): string | undefined;
-/** Persist (or, with `null`, clear) the managed-offload org token at `0600`. */
-export declare function writeOffloadToken(token: string | null): void;
-//# sourceMappingURL=credentials.d.ts.map

package/lib/dist/reasoning/credentials.d.ts.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentials.d.ts","sourceRoot":"","sources":["../../src/reasoning/credentials.ts"],"names":[],"mappings":"AA0BA,yEAAyE;AACzE,wBAAgB,gBAAgB,IAAI,MAAM,GAAG,SAAS,CAGrD;AAED,gFAAgF;AAChF,wBAAgB,iBAAiB,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,IAAI,CAS5D"}

package/lib/dist/reasoning/credentials.js

@@ -1,83 +0,0 @@
-"use strict";
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
-    Object.defineProperty(o, "default", { enumerable: true, value: v });
-}) : function(o, v) {
-    o["default"] = v;
-});
-var __importStar = (this && this.__importStar) || (function () {
-    var ownKeys = function(o) {
-        ownKeys = Object.getOwnPropertyNames || function (o) {
-            var ar = [];
-            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
-            return ar;
-        };
-        return ownKeys(o);
-    };
-    return function (mod) {
-        if (mod && mod.__esModule) return mod;
-        var result = {};
-        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
-        __setModuleDefault(result, mod);
-        return result;
-    };
-})();
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.readOffloadToken = readOffloadToken;
-exports.writeOffloadToken = writeOffloadToken;
-/**
- * Managed-offload credentials: the CodeGraph org token that authenticates the
- * managed reasoning tier against `codegraph-ai` (the metered gateway).
- *
- * Unlike a BYO provider key (which is never persisted — the config stores only the
- * NAME of an env var), the org token IS a revocable, org-scoped auth token issued
- * to this machine — like the token `gh auth` or `npm login` stores. So it lives in
- * its own file, `~/.codegraph/credentials.json`, written `0600`, kept out of the
- * shareable `config.json`.
- */
-const fs = __importStar(require("fs"));
-const path = __importStar(require("path"));
-const os = __importStar(require("os"));
-function credentialsPath() {
-    return path.join(os.homedir(), '.codegraph', 'credentials.json');
-}
-function read() {
-    try {
-        return JSON.parse(fs.readFileSync(credentialsPath(), 'utf8'));
-    }
-    catch {
-        return {};
-    }
-}
-/** The stored managed-offload org token, if the machine is logged in. */
-function readOffloadToken() {
-    const t = read().offloadToken;
-    return typeof t === 'string' && t.trim() ? t.trim() : undefined;
-}
-/** Persist (or, with `null`, clear) the managed-offload org token at `0600`. */
-function writeOffloadToken(token) {
-    const p = credentialsPath();
-    fs.mkdirSync(path.dirname(p), { recursive: true });
-    const creds = read();
-    if (token === null)
-        delete creds.offloadToken;
-    else
-        creds.offloadToken = token;
-    // Write restrictively: create at 0600, and tighten an existing file too.
-    fs.writeFileSync(p, JSON.stringify(creds, null, 2) + '\n', { mode: 0o600 });
-    try {
-        fs.chmodSync(p, 0o600);
-    }
-    catch { /* best-effort on platforms without POSIX modes */ }
-}
-//# sourceMappingURL=credentials.js.map

package/lib/dist/reasoning/credentials.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"credentials.js","sourceRoot":"","sources":["../../src/reasoning/credentials.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA2BA,4CAGC;AAGD,8CASC;AA1CD;;;;;;;;;GASG;AACH,uCAAyB;AACzB,2CAA6B;AAC7B,uCAAyB;AAEzB,SAAS,eAAe;IACtB,OAAO,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,OAAO,EAAE,EAAE,YAAY,EAAE,kBAAkB,CAAC,CAAC;AACnE,CAAC;AAED,SAAS,IAAI;IACX,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,YAAY,CAAC,eAAe,EAAE,EAAE,MAAM,CAAC,CAA4B,CAAC;IAC3F,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,CAAC;IACZ,CAAC;AACH,CAAC;AAED,yEAAyE;AACzE,SAAgB,gBAAgB;IAC9B,MAAM,CAAC,GAAG,IAAI,EAAE,CAAC,YAAY,CAAC;IAC9B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAClE,CAAC;AAED,gFAAgF;AAChF,SAAgB,iBAAiB,CAAC,KAAoB;IACpD,MAAM,CAAC,GAAG,eAAe,EAAE,CAAC;IAC5B,EAAE,CAAC,SAAS,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,MAAM,KAAK,GAAG,IAAI,EAAE,CAAC;IACrB,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,KAAK,CAAC,YAAY,CAAC;;QACzC,KAAK,CAAC,YAAY,GAAG,KAAK,CAAC;IAChC,yEAAyE;IACzE,EAAE,CAAC,aAAa,CAAC,CAAC,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,GAAG,IAAI,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;IAC5E,IAAI,CAAC;QAAC,EAAE,CAAC,SAAS,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;IAAC,CAAC;IAAC,MAAM,CAAC,CAAC,kDAAkD,CAAC,CAAC;AAC9F,CAAC"}

package/lib/dist/reasoning/login.d.ts

@@ -1,21 +0,0 @@
-/** Dashboard base for the device-login endpoints; override for testing via CODEGRAPH_LOGIN_URL. */
-export declare function loginBaseUrl(): string;
-/** The dashboard's response to a device-authorization start request. */
-export interface DeviceStart {
-    device_code: string;
-    user_code: string;
-    verification_uri: string;
-    /** Same URL with the code prefilled, for one-click open. */
-    verification_uri_complete?: string;
-    /** Seconds the CLI should wait between polls. */
-    interval?: number;
-    /** Seconds until the request expires. */
-    expires_in?: number;
-}
-/** Begin a device-authorization request. */
-export declare function startDeviceLogin(): Promise<DeviceStart>;
-/** Poll until the user approves in the browser; resolves with the org token. */
-export declare function pollForToken(deviceCode: string, intervalSec: number, expiresInSec: number): Promise<string>;
-/** Best-effort: open a URL in the default browser. Never throws — the URL is also printed. */
-export declare function openBrowser(url: string): Promise<void>;
-//# sourceMappingURL=login.d.ts.map