@orquentra/codebuddy 2.6.0 → 2.7.0

package/dist/{main-HFHLGID4.js → main-AHNGHC4L.js}

@@ -1,72 +1,70 @@
 import {
-  loadLlmSummaries,
-  summarizeRepository
-} from "./chunk-PCE4STAY.js";
+  runPreToolHookCommand
+} from "./chunk-AQHPEJR6.js";
 import {
-  chatJson,
-  coolingDown,
-  usageToday
-} from "./chunk-UFZD3JAA.js";
+  isDockerDaemonRunning,
+  tryStartDockerDesktop,
+  waitForDockerDaemon
+} from "./chunk-5UH3BEQR.js";
+import {
+  postgresDown,
+  postgresStatus,
+  postgresUp
+} from "./chunk-CSRD5OQA.js";
 import {
   renderLeanBlock,
   runLeanHookCommand
-} from "./chunk-N34XHWBA.js";
-import {
-  runPreToolHookCommand
-} from "./chunk-WHZSVY2L.js";
+} from "./chunk-LCSBL5TT.js";
 import {
   failSoft,
   readHookInput,
   writeStdout
-} from "./chunk-PYLH4MH5.js";
+} from "./chunk-FJOTP632.js";
+import {
+  generateSuggestions,
+  migrateMemoryToFiles,
+  registerCodeBuddyTools,
+  startMcpServer,
+  watchRepository
+} from "./chunk-EEUFU7KV.js";
+import {
+  DEFAULT_ZVEC_MODEL,
+  buildZvecIndex,
+  zvecStatus
+} from "./chunk-MSUAVR3R.js";
 import {
   PlanFileStore,
   PlanLifecycle,
   ReviewStore,
-  VERSION,
   WorklogStore,
   approveReviewItem,
   assessRisk,
   buildBeforeEditContext,
   buildBootstrapContext,
-  generateSuggestions,
-  migrateMemoryToFiles,
   openHookSemantics,
-  parseTraceLines,
-  readTraces,
-  registerCodeBuddyTools,
   renderContextBlock,
   resolveRiskPaths,
   runCaptureHook,
   runContextHook,
   runResetHook,
   runStageHook,
-  runSyncHook,
-  startMcpServer,
-  tracePath,
-  watchRepository
-} from "./chunk-VAKBJV26.js";
-import "./chunk-IHQM2ZDV.js";
+  runSyncHook
+} from "./chunk-YJIA2MFL.js";
+import {
+  parseTraceLines,
+  readTraces,
+  tracePath
+} from "./chunk-TUR6YKEE.js";
+import "./chunk-DFV2SK6C.js";
 import {
   SessionCapsuleLedger,
+  detectTestCommand,
   estimateTokens
-} from "./chunk-SYWJG5NA.js";
+} from "./chunk-GKNYMNFM.js";
 import {
-  buildArchitectureMap,
-  generateGraphifyGraph,
-  indexRepository,
-  loadFreshIndex,
-  loadGraphifyMap,
-  neighbours,
-  queryMap,
-  setupGraphify
-} from "./chunk-L5AYZC3F.js";
-import {
-  extractSymbolTable,
-  supportsSymbols
-} from "./chunk-PQK3GKZH.js";
+  hookRoot
+} from "./chunk-TGFTKWOR.js";
 import {
-  MemoryFileStore,
   bootstrapDatabase,
   buildProviderFromConfig,
   createDatabaseClient,
@@ -77,32 +75,56 @@ import {
   pingDatabase,
   runDoctor,
   runMigrations
-} from "./chunk-UN57FKQX.js";
+} from "./chunk-AK2UAE32.js";
 import {
-  redactPersisted
-} from "./chunk-GDJH7XJC.js";
+  MemoryFileStore,
+  VERSION
+} from "./chunk-JUAFCLRB.js";
 import {
   computeFactHash,
   generateEntityId
-} from "./chunk-XBJQKCLU.js";
-import "./chunk-JFDRBPYF.js";
+} from "./chunk-CAEPHLHC.js";
+import "./chunk-6JCKMIQY.js";
 import {
+  localRuntimeInstalled,
   modelCacheDir
-} from "./chunk-U4HAJLIB.js";
+} from "./chunk-3QGW53GD.js";
+import {
+  loadLlmSummaries,
+  summarizeRepository
+} from "./chunk-BQM7FJ7D.js";
+import {
+  chatJson,
+  coolingDown,
+  usageToday
+} from "./chunk-ESZXCZIN.js";
+import {
+  buildArchitectureMap,
+  generateGraphifyGraph,
+  indexRepository,
+  loadFreshIndex,
+  loadGraphifyMap,
+  neighbours,
+  queryMap,
+  setupGraphify,
+  syncFileVectors
+} from "./chunk-5EDGAZQN.js";
+import {
+  extractSymbolTable,
+  supportsSymbols
+} from "./chunk-Y7D7PUBE.js";
+import {
+  redactPersisted
+} from "./chunk-AL6VBTNA.js";
 import {
   DEFAULT_CLOUD_EMBEDDING_MODELS,
   DEFAULT_RERANK_MODELS,
   LOCAL_EMBEDDING_MODEL,
   getModelDefinition
-} from "./chunk-JPHJBCZB.js";
-import {
-  DEFAULT_ZVEC_MODEL,
-  buildZvecIndex,
-  zvecStatus
-} from "./chunk-QDBDYCM2.js";
+} from "./chunk-HPOR6YXA.js";
 import {
   resolveLlmConfig
-} from "./chunk-6MKEIDX5.js";
+} from "./chunk-SFMIMLXR.js";
 import {
   PLAN_POLICIES,
   configPath,
@@ -111,6 +133,7 @@ import {
   initProjectScaffold,
   loadPlanPolicy,
   loadRuntimeConfig,
+  migrateLegacyNamespace,
   readConfigFile,
   redactSecrets,
   resolveNamespaceFrom,
@@ -118,9 +141,11 @@ import {
   setLlmEnabled,
   setPlanPolicy,
   setZvecEnabled,
-  writeAtomic,
   writeConfigFile
-} from "./chunk-776EQXDV.js";
+} from "./chunk-KNR2P2UY.js";
+import {
+  writeAtomic
+} from "./chunk-CG5B3LYG.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/cli/main.ts
@@ -226,9 +251,7 @@ import pc from "picocolors";
 
 // src/change/engine.ts
 import { spawn } from "child_process";
-import { constants as constants2 } from "fs";
-import { access as access2, readFile } from "fs/promises";
-import { extname, join as join2 } from "path";
+import { extname } from "path";
 var CODE_EXTENSIONS = /* @__PURE__ */ new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"]);
 var DEFAULT_TEST_TIMEOUT_MS = 12e4;
 var MAX_TEST_OUTPUT_CHARS = 12e3;
@@ -277,7 +300,7 @@ async function buildChangeReport(input) {
 }
 async function verifyChange(input) {
   const report = await buildChangeReport(input);
-  const detected = input.command ? { command: input.command, source: "explicit" } : await detectTestCommand(input.repositoryRoot ?? process.cwd());
+  const detected = input.command ? { command: input.command, source: "explicit" } : await detectedTestCommand(input.repositoryRoot ?? process.cwd());
   if (!detected) {
     return {
       report,
@@ -288,7 +311,7 @@ async function verifyChange(input) {
         exitCode: null,
         signal: null,
         durationMs: 0,
-        output: "No test command found. Pass --command or add a test script to package.json."
+        output: "No test command found. Pass --command, add a test script to package.json, or add pyproject.toml/pytest.ini/setup.cfg, go.mod or Cargo.toml."
       }
     };
   }
@@ -302,44 +325,19 @@ async function verifyChange(input) {
     )
   };
 }
-async function detectTestCommand(repositoryRoot) {
-  const packagePath = join2(repositoryRoot, "package.json");
-  try {
-    const packageJson = JSON.parse(await readFile(packagePath, "utf8"));
-    if (typeof packageJson.scripts?.test === "string") {
-      return {
-        command: `${packageManagerName(packageJson.packageManager)} test`,
-        source: "package_script"
-      };
-    }
-  } catch (error) {
-    if (error.code !== "ENOENT") throw error;
-  }
-  for (const candidate of [
-    ["pnpm-lock.yaml", "pnpm test"],
-    ["yarn.lock", "yarn test"],
-    ["bun.lockb", "bun test"],
-    ["bun.lock", "bun test"],
-    ["package-lock.json", "npm test"]
-  ]) {
-    try {
-      await access2(join2(repositoryRoot, candidate[0]), constants2.F_OK);
-      return { command: candidate[1], source: "package_manager" };
-    } catch {
-    }
-  }
-  return null;
-}
-function packageManagerName(value) {
-  if (typeof value !== "string") return "npm";
-  const name = value.split(/[\s@]/, 1)[0] ?? "npm";
-  return ["npm", "pnpm", "yarn", "bun"].includes(name) ? name : "npm";
+async function detectedTestCommand(repositoryRoot) {
+  const command = await detectTestCommand(repositoryRoot);
+  if (command === null) return null;
+  return {
+    command,
+    source: /^(npm|pnpm|yarn|bun) test$/.test(command) ? "package_script" : "project_marker"
+  };
 }
 function runTestCommand(command, source, repositoryRoot, timeoutMs) {
   if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
     throw new Error("--timeout must be a positive number of milliseconds.");
   }
-  return new Promise((resolve14) => {
+  return new Promise((resolve13) => {
     const startedAt = Date.now();
     const child = spawn(command, {
       cwd: repositoryRoot,
@@ -364,7 +362,7 @@ ${output.slice(-MAX_TEST_OUTPUT_CHARS)}`;
     }, timeoutMs);
     child.on("close", (exitCode, signal) => {
       clearTimeout(timer);
-      resolve14({
+      resolve13({
         status: timedOut ? "timed_out" : exitCode === 0 ? "passed" : "failed",
         command,
         source,
@@ -376,7 +374,7 @@ ${output.slice(-MAX_TEST_OUTPUT_CHARS)}`;
     });
     child.on("error", (error) => {
       clearTimeout(timer);
-      resolve14({
+      resolve13({
         status: "failed",
         command,
         source,
@@ -589,22 +587,22 @@ function testBadge(status) {
 
 // src/cli/commands/claude-desktop.ts
 import { existsSync } from "fs";
-import { mkdir as mkdir2, readFile as readFile2 } from "fs/promises";
-import { dirname as dirname2, join as join3, resolve as resolve2 } from "path";
+import { mkdir as mkdir2, readFile } from "fs/promises";
+import { dirname as dirname2, join as join2, resolve as resolve2 } from "path";
 import { fileURLToPath } from "url";
 function claudeDesktopConfigPath(home = process.env.HOME ?? "") {
   if (process.platform === "darwin") {
-    return join3(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
+    return join2(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
   }
   if (process.platform === "win32") {
-    return join3(process.env.APPDATA ?? home, "Claude", "claude_desktop_config.json");
+    return join2(process.env.APPDATA ?? home, "Claude", "claude_desktop_config.json");
   }
-  return join3(home, ".config", "Claude", "claude_desktop_config.json");
+  return join2(home, ".config", "Claude", "claude_desktop_config.json");
 }
 async function readClaudeConfig(path) {
   if (!existsSync(path)) return {};
   try {
-    return JSON.parse(await readFile2(path, "utf8"));
+    return JSON.parse(await readFile(path, "utf8"));
   } catch (error) {
     throw new Error(
       `Failed to parse Claude Desktop config at ${path}: ${error.message}`
@@ -641,7 +639,10 @@ function buildEntry(options) {
   if (options.groqApiKey) env.GROQ_API_KEY = options.groqApiKey;
   if (options.databaseUrl) env.DATABASE_URL = options.databaseUrl;
   return {
-    command: "node",
+    // Absolute: Claude Desktop is a GUI app and does not inherit the shell's
+    // PATH (nvm, Homebrew), so a bare "node" may not resolve or may be another
+    // version. Re-run `codebuddy claude install` after switching Node.
+    command: process.execPath,
     args: [resolveCliEntrypoint(), "serve"],
     env
   };
@@ -776,25 +777,25 @@ function sharedRulesReaders(client) {
 // src/clients/cost.ts
 import { mkdtemp, rm as rm3 } from "fs/promises";
 import { tmpdir } from "os";
-import { join as join8, resolve as resolve7 } from "path";
+import { join as join7, resolve as resolve7 } from "path";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { InMemoryTransport } from "@modelcontextprotocol/sdk/inMemory.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 // src/templates/install.ts
-import { readFile as readFile7, rm as rm2 } from "fs/promises";
-import { join as join7, resolve as resolve6 } from "path";
+import { readFile as readFile6, rm as rm2 } from "fs/promises";
+import { join as join6, resolve as resolve6 } from "path";
 
 // src/hooks/hermes-plugin.ts
-import { readFile as readFile4 } from "fs/promises";
-import { dirname as dirname4, join as join4, resolve as resolve3 } from "path";
+import { readFile as readFile3 } from "fs/promises";
+import { dirname as dirname4, join as join3, resolve as resolve3 } from "path";
 
 // src/hooks/managed-plugin.ts
-import { mkdir as mkdir3, readFile as readFile3, rm, rmdir } from "fs/promises";
+import { mkdir as mkdir3, readFile as readFile2, rm, rmdir } from "fs/promises";
 import { dirname as dirname3 } from "path";
 async function read(path) {
   try {
-    return await readFile3(path, "utf8");
+    return await readFile2(path, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return null;
     throw error;
@@ -990,7 +991,7 @@ def register(ctx):
 }
 var HERMES_PLUGIN_SOURCE = renderHermesPlugin("full");
 function hermesPluginDir(repositoryRoot) {
-  return join4(resolve3(repositoryRoot), ".hermes", "plugins", "codebuddy");
+  return join3(resolve3(repositoryRoot), ".hermes", "plugins", "codebuddy");
 }
 function plugin(repositoryRoot, variant = "full") {
   const dir = hermesPluginDir(repositoryRoot);
@@ -998,10 +999,10 @@ function plugin(repositoryRoot, variant = "full") {
     marker: HERMES_PLUGIN_MARKER,
     files: [
       {
-        path: join4(dir, "plugin.yaml"),
+        path: join3(dir, "plugin.yaml"),
         content: variant === "lean" ? HERMES_LEAN_MANIFEST : HERMES_PLUGIN_MANIFEST
       },
-      { path: join4(dir, "__init__.py"), content: renderHermesPlugin(variant) }
+      { path: join3(dir, "__init__.py"), content: renderHermesPlugin(variant) }
     ],
     dirs: [dir, dirname4(dir), dirname4(dirname4(dir))]
   };
@@ -1014,13 +1015,13 @@ function setHermesPlugin(repositoryRoot, enabled, variant = "full") {
 }
 async function hermesPluginVariant(repositoryRoot) {
   if (!await hermesPluginInstalled(repositoryRoot)) return null;
-  const source = await readFile4(join4(hermesPluginDir(repositoryRoot), "__init__.py"), "utf8");
+  const source = await readFile3(join3(hermesPluginDir(repositoryRoot), "__init__.py"), "utf8");
   return source.startsWith(`${HERMES_PLUGIN_MARKER} v1 lean`) ? "lean" : "full";
 }
 
 // src/hooks/opencode-plugin.ts
-import { readFile as readFile5 } from "fs/promises";
-import { dirname as dirname5, join as join5, resolve as resolve4 } from "path";
+import { readFile as readFile4 } from "fs/promises";
+import { dirname as dirname5, join as join4, resolve as resolve4 } from "path";
 var OPENCODE_PLUGIN_MARKER = "// codebuddy-managed: opencode-plugin";
 var OPENCODE_RUNTIME = `const ID_CHARS = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
 let lastMs = 0;
@@ -1035,6 +1036,8 @@ function hook(command, payload) {
       child = spawn("codebuddy", ["hooks", command], {
         cwd: payload.cwd,
         stdio: ["pipe", "pipe", "ignore"],
+        // npm installs a codebuddy.cmd shim on Windows, which spawn only runs through a shell.
+        shell: process.platform === "win32",
       });
     } catch {
       done("");
@@ -1184,7 +1187,7 @@ export const CodeBuddyPlugin = async ({ directory }) => {
 }
 var OPENCODE_PLUGIN_SOURCE = renderOpencodePlugin("full");
 function opencodePluginPath(repositoryRoot) {
-  return join5(resolve4(repositoryRoot), ".opencode", "plugins", "codebuddy.js");
+  return join4(resolve4(repositoryRoot), ".opencode", "plugins", "codebuddy.js");
 }
 function plugin2(repositoryRoot, variant = "full") {
   const path = opencodePluginPath(repositoryRoot);
@@ -1202,17 +1205,17 @@ function setOpencodePlugin(repositoryRoot, enabled, variant = "full") {
 }
 async function opencodePluginVariant(repositoryRoot) {
   if (!await opencodePluginInstalled(repositoryRoot)) return null;
-  const source = await readFile5(opencodePluginPath(repositoryRoot), "utf8");
+  const source = await readFile4(opencodePluginPath(repositoryRoot), "utf8");
   return source.startsWith(`${OPENCODE_PLUGIN_MARKER} v1 lean`) ? "lean" : "full";
 }
 
 // src/hooks/settings.ts
-import { mkdir as mkdir4, readFile as readFile6 } from "fs/promises";
-import { dirname as dirname6, join as join6, resolve as resolve5 } from "path";
+import { mkdir as mkdir4, readFile as readFile5 } from "fs/promises";
+import { dirname as dirname6, join as join5, resolve as resolve5 } from "path";
 var HOOK_COMMAND_PREFIX = "codebuddy hooks";
 var TOOL_GUARD_DEF = {
   event: "PreToolUse",
-  matcher: "Read|Grep",
+  matcher: "Read|Grep|Bash",
   command: `${HOOK_COMMAND_PREFIX} pretool`
 };
 var HOOK_DEFS = [
@@ -1234,7 +1237,7 @@ var LEAN_HOOK_DEFS = [
   TOOL_GUARD_DEF
 ];
 function claudeSettingsPath(repositoryRoot = process.cwd()) {
-  return join6(resolve5(repositoryRoot), ".claude", "settings.json");
+  return join5(resolve5(repositoryRoot), ".claude", "settings.json");
 }
 function upsertHooks(settings, variant = "full") {
   const defs = variant === "lean" ? LEAN_HOOK_DEFS : HOOK_DEFS;
@@ -1313,7 +1316,7 @@ function hooksVariant(settings) {
 }
 async function readSettings(path) {
   try {
-    return JSON.parse(await readFile6(path, "utf8"));
+    return JSON.parse(await readFile5(path, "utf8"));
   } catch (error) {
     if (error.code === "ENOENT") return {};
     throw error;
@@ -1417,12 +1420,16 @@ var START_HOOKS = [
   "follow the agent-driven flow: `context_pack` first, `context_after_turn` last.",
   "",
   "1. Start from the injected block; do not call `context_bootstrap` for orientation",
-  "   it already covers.",
-  "2. Call `context_pack` (or `context_before_edit` with exact paths) only when the",
+  "   it already covers. Its `task files` are CodeBuddy's best match; when it names",
+  "   none, call `context_pack` with the task before searching the repository yourself.",
+  "2. Read ranges, not whole files: `Read` with offset/limit, or `sed -n 'A,Bp'`.",
+  "   Large files read whole (`Read` without a range, `cat`, `less`) are denied with an",
+  "   outline of their symbols and line ranges; read the range you need from it.",
+  "3. Call `context_pack` (or `context_before_edit` with exact paths) when the",
   "   task needs symbols, neighbours, or file-level evidence the block lacks. Pass the",
   "   block's `session` value as `sessionId` and the previous `delivery.deliveryId`",
   "   as `ack` so unchanged sections are not resent.",
-  "3. Prior work from earlier chats arrives as handoffs with freshness; re-check",
+  "4. Prior work from earlier chats arrives as handoffs with freshness; re-check",
   "   those files before relying on it.",
   ""
 ];
@@ -1525,7 +1532,7 @@ ${END_MARKER}
 }
 async function installWorkflowRules(options) {
   const projectRoot = resolve6(options.projectRoot ?? process.cwd());
-  const path = options.targetPath ?? join7(projectRoot, defaultRulesFile(options.client));
+  const path = options.targetPath ?? join6(projectRoot, defaultRulesFile(options.client));
   const existing = await readIfPresent(path);
   const mode = options.mode ?? await defaultRulesMode(options.client, projectRoot);
   if (options.onlyIfManaged && (existing === null || !hasManagedBlock(existing))) {
@@ -1580,7 +1587,7 @@ function removeBlock(existing) {
 }
 async function readIfPresent(path) {
   try {
-    return await readFile7(path, "utf8");
+    return await readFile6(path, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return null;
     throw error;
@@ -1617,7 +1624,7 @@ async function hookBlockTokens(root, namespace) {
     namespace,
     useGit: true
   }).catch(() => null);
-  const scratch = await mkdtemp(join8(tmpdir(), "codebuddy-cost-"));
+  const scratch = await mkdtemp(join7(tmpdir(), "codebuddy-cost-"));
   try {
     const ledger = new SessionCapsuleLedger(scratch);
     const render = () => renderContextBlock(bootstrap, beforeEdit, ledger, "cost", true);
@@ -1670,14 +1677,14 @@ async function measureClientCosts(projectRoot = process.cwd(), namespace) {
 }
 
 // src/clients/install.ts
-import { access as access4 } from "fs/promises";
-import { join as join12, resolve as resolve9 } from "path";
+import { access as access3 } from "fs/promises";
+import { join as join11, resolve as resolve9 } from "path";
 
 // src/integrations/project-mcp.ts
-import { access as access3, mkdir as mkdir5, readFile as readFile8, rm as rm4 } from "fs/promises";
-import { dirname as dirname7, join as join9, resolve as resolve8 } from "path";
+import { access as access2, mkdir as mkdir5, readFile as readFile7, rm as rm4 } from "fs/promises";
+import { dirname as dirname7, join as join8, resolve as resolve8 } from "path";
 async function writeProjectMcpConfig(options) {
-  const path = join9(options.repositoryRoot, ".mcp.json");
+  const path = join8(options.repositoryRoot, ".mcp.json");
   const current = await readProjectMcpConfig(path);
   current.mcpServers ??= {};
   current.mcpServers[`codebuddy-${options.namespace}`] = codebuddyMcpServer(
@@ -1714,12 +1721,12 @@ function codebuddyMcpServer(repositoryRoot, namespace) {
   };
 }
 async function projectMcpPath(root, file, format) {
-  const path = join9(root, file);
+  const path = join8(root, file);
   if (format !== "opencode" || await exists(path)) return path;
   return await exists(`${path}c`) ? `${path}c` : path;
 }
 async function exists(path) {
-  return access3(path).then(
+  return access2(path).then(
     () => true,
     () => false
   );
@@ -1780,7 +1787,7 @@ function parseJsonc(raw) {
 }
 async function readConfig(path) {
   try {
-    const { value, comments } = parseJsonc(await readFile8(path, "utf8"));
+    const { value, comments } = parseJsonc(await readFile7(path, "utf8"));
     const config = value && typeof value === "object" ? value : {};
     return { config, comments };
   } catch (error) {
@@ -1794,15 +1801,15 @@ async function readProjectMcpConfig(path) {
 
 // src/cli/commands/codex.ts
 import { existsSync as existsSync2 } from "fs";
-import { mkdir as mkdir6, readFile as readFile9 } from "fs/promises";
+import { mkdir as mkdir6, readFile as readFile8 } from "fs/promises";
 import { homedir } from "os";
-import { dirname as dirname8, join as join10 } from "path";
+import { dirname as dirname8, join as join9 } from "path";
 function codexConfigPath(home = homedir()) {
-  return join10(home, ".codex", "config.toml");
+  return join9(home, ".codex", "config.toml");
 }
 async function readCodexConfig(path) {
   if (!existsSync2(path)) return "";
-  return readFile9(path, "utf8");
+  return readFile8(path, "utf8");
 }
 async function writeCodexConfig(path, content) {
   await mkdir6(dirname8(path), { recursive: true });
@@ -1908,17 +1915,17 @@ function escapeRegExp(value) {
 }
 
 // src/integrations/hermes-config.ts
-import { mkdir as mkdir7, readFile as readFile10 } from "fs/promises";
+import { mkdir as mkdir7, readFile as readFile9 } from "fs/promises";
 import { homedir as homedir2 } from "os";
-import { dirname as dirname9, join as join11 } from "path";
+import { dirname as dirname9, join as join10 } from "path";
 import { isDeepStrictEqual } from "util";
 import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
 function hermesConfigPath(home = homedir2()) {
-  return join11(process.env.HERMES_HOME ?? join11(home, ".hermes"), "config.yaml");
+  return join10(process.env.HERMES_HOME ?? join10(home, ".hermes"), "config.yaml");
 }
 async function readRaw(path) {
   try {
-    return await readFile10(path, "utf8");
+    return await readFile9(path, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return "";
     throw error;
@@ -2040,8 +2047,8 @@ async function installClient(options) {
   return apply(options, options.mode, options.mode !== "lean");
 }
 async function ensureIndex(root) {
-  const target = join12(root, ".codebuddy", "cache", "index.json");
-  const existed = await access4(target).then(
+  const target = join11(root, ".codebuddy", "cache", "index.json");
+  const existed = await access3(target).then(
     () => true,
     () => false
   );
@@ -2061,7 +2068,7 @@ async function apply(options, mode, keepMcp) {
   const shared = sharedRulesReaders(options.client);
   const liveSiblings = mode === "mcp-only" || mode === "lean" ? await installedWithMcp(root, shared, namespace) : [];
   if (liveSiblings.length > 0) {
-    const path = join12(root, adapter.rulesFile);
+    const path = join11(root, adapter.rulesFile);
     steps.push({ surface: "rules", target: path, action: "kept" });
     notes.push(
       `Kept the CodeBuddy block in ${adapter.rulesFile}: still used by ${liveSiblings.map((id) => CLIENT_ADAPTERS[id].name).join(", ")}.`
@@ -2141,7 +2148,7 @@ async function setHooks(root, enabled, client = "claude", variant = "full") {
 async function detectClient(client, projectRoot = process.cwd(), namespace) {
   const root = resolve9(projectRoot);
   const adapter = CLIENT_ADAPTERS[client];
-  const rulesMode = await readManagedMode(join12(root, adapter.rulesFile));
+  const rulesMode = await readManagedMode(join11(root, adapter.rulesFile));
   const hooks = await clientHooksInstalled(root, client);
   const name = `codebuddy-${namespace ?? await resolveNamespaceFrom(root)}`;
   const mcp = "file" in adapter.mcp ? await hasMcpServer(
@@ -2167,8 +2174,8 @@ async function detectClient(client, projectRoot = process.cwd(), namespace) {
 
 // src/clients/verify.ts
 import { execFile } from "child_process";
-import { readFile as readFile11, realpath } from "fs/promises";
-import { join as join13, resolve as resolve10 } from "path";
+import { readFile as readFile10, realpath } from "fs/promises";
+import { join as join12, resolve as resolve10 } from "path";
 import { pathToFileURL } from "url";
 var runHost = (bin, args, cwd) => new Promise((done) => {
   execFile(
@@ -2203,7 +2210,7 @@ var CONFORMANCE = {
     if (!config) return [fail("config", "opencode debug config returned no JSON")];
     const installed = await clientHooksInstalled(root, "opencode");
     const href = pathToFileURL(
-      join13(await realpath(root).catch(() => root), ".opencode", "plugins", "codebuddy.js")
+      join12(await realpath(root).catch(() => root), ".opencode", "plugins", "codebuddy.js")
     ).href;
     const loaded = config.plugin?.includes(href) === true;
     return [
@@ -2230,7 +2237,7 @@ var CONFORMANCE = {
       return checks;
     }
     const projectPlugins = /^(1|true|yes|on)$/i.test(env.HERMES_ENABLE_PROJECT_PLUGINS ?? "") || /^\s*HERMES_ENABLE_PROJECT_PLUGINS\s*=\s*["']?(1|true|yes|on)/im.test(
-      await readFile11(join13(hermesConfigPath(), "..", ".env"), "utf8").catch(() => "")
+      await readFile10(join12(hermesConfigPath(), "..", ".env"), "utf8").catch(() => "")
     );
     const plugins = (await readHermesConfig(hermesConfigPath()))?.plugins;
     const enabled = Array.isArray(plugins?.enabled) && plugins.enabled.includes("codebuddy");
@@ -2646,13 +2653,16 @@ th.n { text-align: right; }
 .chip { display: inline-block; font: 600 10px var(--mono); text-transform: uppercase; letter-spacing: .06em; padding: 2px 6px; border-radius: 4px; }
 .chip.recall { background: var(--recall-soft); color: var(--recall); }
 .chip.tool { background: var(--tool-soft); color: var(--tool); }
-.chip.capture, .chip.sync, .chip.kw { background: var(--line); color: var(--capture); }
+.chip.capture, .chip.sync, .chip.guard, .chip.kw { background: var(--line); color: var(--capture); }
 .chip.err { background: var(--bad-soft); color: var(--bad); }
 .feed { display: grid; gap: 10px; max-height: 520px; overflow: auto; }
 .prompt { border: 1px solid var(--line); border-radius: 8px; padding: 10px 12px; }
 .prompt .q { font-weight: 500; overflow-wrap: anywhere; }
 .prompt .meta { font: 12px var(--mono); color: var(--muted); margin-top: 4px; display: flex; flex-wrap: wrap; gap: 4px 12px; overflow-wrap: anywhere; }
 .prompt ul { margin: 6px 0 0; padding-left: 18px; font-size: 13px; }
+.prompt details { margin-top: 6px; font-size: 12px; }
+.prompt summary { cursor: pointer; color: var(--muted); }
+.prompt pre { margin: 6px 0 0; padding: 8px 10px; background: var(--bg); border: 1px solid var(--line); border-radius: 6px; font: 12px/1.45 var(--mono); white-space: pre-wrap; overflow-wrap: anywhere; max-height: 260px; overflow: auto; }
 .prompt .none { font-size: 13px; color: var(--muted); margin-top: 6px; }
 .mono { font-family: var(--mono); }
 .muted { color: var(--muted); }
@@ -2731,7 +2741,10 @@ th.n { text-align: right; }
   function kpis(list) {
     var recalls = list.filter(function (e) { return e.kind === "recall"; });
     var tools = list.filter(function (e) { return e.kind === "tool"; });
-    var delivered = list.reduce(function (s, e) { return s + (e.kind === "recall" || e.kind === "tool" ? e.tokensOut || 0 : 0); }, 0);
+    var injected = recalls.reduce(function (s, e) { return s + (e.tokensOut || 0); }, 0);
+    var returned = tools.reduce(function (s, e) { return s + (e.tokensOut || 0); }, 0);
+    var guards = list.filter(function (e) { return e.kind === "guard"; });
+    var avoided = guards.reduce(function (s, e) { return s + ((e.detail && e.detail.avoided) || 0); }, 0);
     var withFacts = recalls.filter(function (e) { return e.detail && e.detail.facts && e.detail.facts.length; });
     var factCount = withFacts.reduce(function (s, e) { return s + e.detail.facts.length; }, 0);
     var dense = recalls.reduce(function (s, e) { return s + ((e.detail && e.detail.dense) || 0); }, 0);
@@ -2742,7 +2755,8 @@ th.n { text-align: right; }
     var tiles = [
       ["Prompts recalled", num(recalls.length), recalls.length ? Math.round(100 * withFacts.length / recalls.length) + "% got facts" : "no prompts yet"],
       ["Facts injected", num(factCount), factCount ? Math.round(100 * dense / factCount) + "% matched by meaning" : "-"],
-      ["Tokens delivered", compact(delivered), recalls.length + tools.length ? "\u2248 " + num(delivered / (recalls.length + tools.length)) + " per event" : "-"],
+      ["Tokens added to context", compact(injected + returned), compact(injected) + " by hooks, " + compact(returned) + " by MCP tools"],
+      ["Tokens kept out (measured)", compact(avoided), guards.length ? guards.length + " large read" + (guards.length === 1 ? "" : "s") + " replaced by an outline" : "no large reads blocked"],
       ["MCP tool calls", num(tools.length), tools.length ? new Set(tools.map(function (e) { return e.name; })).size + " distinct tools" : "-"],
       ["Recall latency", lat.length ? ms(pct(lat, 0.5)) : "-", lat.length ? "p95 " + ms(pct(lat, 0.95)) : "-"],
       ["Memories saved", num(saved), captures.length + " capture" + (captures.length === 1 ? "" : "s")],
@@ -2812,6 +2826,7 @@ th.n { text-align: right; }
         (e.ok ? "" : '<span class="chip err">' + esc(d.dropped || "dropped") + "</span>") + "</div>" +
         (facts.length ? "<ul>" + facts.map(function (f) { return "<li>" + esc(f) + "</li>"; }).join("") + "</ul>" : '<div class="none">No new facts: nothing matched, or already sent this session.</div>') +
         (d.files && d.files.length ? '<div class="meta">files: ' + d.files.map(esc).join(", ") + "</div>" : "") +
+        (d.block ? '<details><summary>What the agent received</summary><pre>' + esc(d.block) + "</pre></details>" : "") +
         "</div>";
     }).join("");
   }
@@ -2836,6 +2851,7 @@ th.n { text-align: right; }
     var d = e.detail || {};
     if (e.kind === "recall") return (d.facts ? d.facts.length : 0) + " fact(s), " + (d.files ? d.files.length : 0) + " file(s)";
     if (e.kind === "capture") return (d.saved || 0) + " saved, " + (d.queued || 0) + " queued, " + (d.changedFiles || 0) + " changed file(s)";
+    if (e.kind === "guard") return "denied " + (d.file || "a large read") + ", \u2248" + num(d.avoided || 0) + " tokens kept out";
     if (e.kind === "sync") return (d.imported || 0) + " new, " + (d.updated || 0) + " updated" + (d.reembedding ? ", " + d.reembedding + " re-embedding" : "");
     return e.session ? "session " + e.session.slice(0, 12) : "";
   }
@@ -2939,7 +2955,13 @@ data: ${data}
 `);
   };
   watchFile(path, { interval: options.pollMs ?? 1e3 }, () => void onChange());
+  let boundPort = 0;
   const server = createServer(async (request, response) => {
+    const host = request.headers.host ?? "";
+    if (host !== `127.0.0.1:${boundPort}` && host !== `localhost:${boundPort}`) {
+      response.writeHead(403, { "content-type": "text/plain" }).end("Forbidden host");
+      return;
+    }
     const url = new URL(request.url ?? "/", "http://localhost");
     if (request.method !== "GET") {
       response.writeHead(405).end();
@@ -2979,18 +3001,19 @@ data: ${data}
     response.writeHead(404, { "content-type": "text/plain" }).end("Not found");
   });
   const port = await listen(server, options.port ?? 4777);
+  boundPort = port;
   const heartbeat = setInterval(() => {
     for (const client of clients) client.write(": ping\n\n");
   }, 25e3);
   heartbeat.unref();
   return {
     url: `http://127.0.0.1:${port}/`,
-    close: () => new Promise((resolve14) => {
+    close: () => new Promise((resolve13) => {
       clearInterval(heartbeat);
       unwatchFile(path);
       for (const client of clients) client.end();
       server.closeAllConnections();
-      server.close(() => resolve14());
+      server.close(() => resolve13());
     })
   };
 }
@@ -2998,11 +3021,11 @@ async function listen(server, port) {
   for (let attempt = 0; attempt < 10; attempt += 1) {
     const candidate = port === 0 ? 0 : port + attempt;
     try {
-      await new Promise((resolve14, reject) => {
+      await new Promise((resolve13, reject) => {
         server.once("error", reject);
         server.listen(candidate, "127.0.0.1", () => {
           server.off("error", reject);
-          resolve14();
+          resolve13();
         });
       });
       return server.address().port;
@@ -3040,8 +3063,8 @@ function registerDashboardCommand(program, runSafely2) {
       );
       console.log(pc4.dim("  Ctrl+C to stop."));
       if (opts.open) openBrowser(dashboard.url);
-      await new Promise((resolve14) => {
-        const stop = () => void dashboard.close().then(resolve14);
+      await new Promise((resolve13) => {
+        const stop = () => void dashboard.close().then(resolve13);
         process.once("SIGINT", stop);
         process.once("SIGTERM", stop);
       });
@@ -3053,13 +3076,13 @@ function registerDashboardCommand(program, runSafely2) {
 import pc5 from "picocolors";
 
 // src/eval/runner.ts
-import { readFile as readFile12 } from "fs/promises";
-import { dirname as dirname10, isAbsolute, join as join14, resolve as resolve11 } from "path";
+import { readFile as readFile11 } from "fs/promises";
+import { dirname as dirname10, isAbsolute, join as join13, resolve as resolve11 } from "path";
 async function runEvaluation(input = {}) {
   const datasetPath = resolve11(
-    input.datasetPath ?? join14(process.cwd(), "evals", "change-readiness.json")
+    input.datasetPath ?? join13(process.cwd(), "evals", "change-readiness.json")
   );
-  const dataset = JSON.parse(await readFile12(datasetPath, "utf8"));
+  const dataset = JSON.parse(await readFile11(datasetPath, "utf8"));
   if (dataset.version !== 1 || !Array.isArray(dataset.cases)) {
     throw new Error(`Unsupported evaluation dataset: ${datasetPath}`);
   }
@@ -3147,7 +3170,7 @@ function registerGitHubCommands(program, runSafely2) {
 }
 
 // src/cli/commands/hooks.ts
-import { spawn as spawn3 } from "child_process";
+import { execFile as execFile2, spawn as spawn3 } from "child_process";
 import { relative as relative2 } from "path";
 import pc7 from "picocolors";
 function registerHooksCommands(program, runSafely2) {
@@ -3168,8 +3191,9 @@ function registerHooksCommands(program, runSafely2) {
       console.log(
         `${changed ? pc7.green("installed") : pc7.dim("unchanged")} CodeBuddy hooks in ${where}`
       );
-      await reconcileRules(client, "hooks");
-      syncInBackground(process.cwd());
+      await reconcileRules(client, "hooks", { create: true });
+      warnIfHookCommandStale();
+      syncInBackground(process.cwd(), true);
       console.log(
         pc7.dim(
           `  prompt\u2192recall \xB7 edit\u2192stage \xB7 turn end\u2192capture \xB7 compaction\u2192reset. Restart ${CLIENT_ADAPTERS[client].name} to activate.`
@@ -3227,18 +3251,18 @@ function registerHooksCommands(program, runSafely2) {
           `codebuddy: captured from ${changedFiles.length} changed file(s) \u2014 ${result.saved.length} saved, ${result.queuedForReview.length} queued
 `
         );
-        if (result.saved.length > 0) syncInBackground(input.cwd ?? process.cwd());
+        if (result.saved.length > 0) syncInBackground(hookRoot(input.cwd));
       }
     });
   });
   hooks.command("sync").description(
     "[hook] Reindex Markdown memory into PostgreSQL and embed it locally (runs detached after capture)."
-  ).action(async () => {
+  ).option("--respace", "Also re-embed vectors made by another embedding model.").action(async (opts) => {
     await failSoft(async () => {
-      const result = await runSyncHook(process.cwd());
+      const result = await runSyncHook(process.cwd(), opts.respace ? { respace: true } : {});
       process.stderr.write(
         result ? `codebuddy: synced ${result.reindex.facts.imported} new / ${result.reindex.facts.updated} updated fact(s)${result.reindex.reembedding ? `, ${result.reindex.reembedding} re-embedding` : ""}${result.drained ? "" : " (embeddings still pending)"}
-` : "codebuddy: no PostgreSQL configured; nothing to sync\n"
+` : "codebuddy: nothing to sync (no PostgreSQL configured, or another sync is running)\n"
       );
     });
   });
@@ -3249,7 +3273,7 @@ function registerHooksCommands(program, runSafely2) {
   });
   hooks.command("reset").description("[hook] Forget what context was sent this session (after compaction or /clear).").action(async () => {
     await failSoft(async () => {
-      await runResetHook(await readHookInput());
+      await runResetHook(await readHookInput(), writeStdout);
     });
   });
 }
@@ -3263,24 +3287,55 @@ function assertHookClient(value) {
   }
   return client;
 }
-async function reconcileRules(client, mode) {
-  const result = await installWorkflowRules({ client, mode, onlyIfManaged: true });
+async function reconcileRules(client, mode, options = {}) {
+  const result = await installWorkflowRules({
+    client,
+    mode,
+    ...options.create ? {} : { onlyIfManaged: true }
+  });
   if (result.action !== "unchanged") {
     const where = relative2(process.cwd(), result.path) || result.path;
     console.log(
-      `${pc7.cyan("updated")} ${where} workflow to ${mode === "hooks" ? "hook" : "agent"}-driven mode`
+      `${pc7.cyan(result.action === "created" ? "added" : "updated")} ${where} workflow (${mode === "hooks" ? "hook" : "agent"}-driven mode)`
     );
   }
 }
-function syncInBackground(cwd) {
+function warnIfHookCommandStale() {
+  execFile2(
+    "codebuddy",
+    ["--version"],
+    { timeout: 1e4, shell: process.platform === "win32" },
+    (error, stdout) => {
+      const found = stdout.trim();
+      if (error || !found) {
+        console.log(
+          pc7.yellow(
+            "  ! `codebuddy` is not on PATH, so the hooks cannot run. Install it globally: npm i -g @orquentra/codebuddy"
+          )
+        );
+      } else if (found !== VERSION) {
+        console.log(
+          pc7.yellow(
+            `  ! The hooks will run codebuddy ${found} from PATH, not ${VERSION}. Update it: npm i -g @orquentra/codebuddy@${VERSION}`
+          )
+        );
+      }
+    }
+  );
+}
+function syncInBackground(cwd, respace = false) {
   const entry = process.argv[1];
   if (!entry) return;
   try {
-    spawn3(process.execPath, [...process.execArgv, entry, "hooks", "sync"], {
-      cwd,
-      detached: true,
-      stdio: "ignore"
-    }).unref();
+    spawn3(
+      process.execPath,
+      [...process.execArgv, entry, "hooks", "sync", ...respace ? ["--respace"] : []],
+      {
+        cwd,
+        detached: true,
+        stdio: "ignore"
+      }
+    ).unref();
   } catch {
   }
 }
@@ -3401,15 +3456,27 @@ function registerLlmCommands(program, runSafely2) {
 }
 
 // src/cli/commands/indexing.ts
+var VECTOR_BUDGET_MS = 10 * 6e4;
 function registerIndexCommands(program, runSafely2) {
-  program.command("index").option("--full", "Re-summarize every file, ignoring existing content hashes.").option("--json", "Print machine-readable JSON.").description("Index the repository: content hashes and lightweight file summaries.").action(async (opts) => {
+  program.command("index").option("--full", "Re-summarize every file, ignoring existing content hashes.").option("--json", "Print machine-readable JSON.").option("--no-vectors", "Skip embedding source files for task \u2192 file ordering.").description("Index the repository: content hashes and lightweight file summaries.").action(async (opts) => {
     await runSafely2(async () => {
       const result = await indexRepository({ ...opts.full ? { full: true } : {} });
+      const local = opts.vectors && (await loadRuntimeConfig(process.cwd(), { requireDatabase: false }).catch(() => null))?.provider.type === "local";
+      const vectors = local ? await syncFileVectors(process.cwd(), VECTOR_BUDGET_MS) : null;
       if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
+        console.log(JSON.stringify({ ...result, ...vectors ? { vectors } : {} }, null, 2));
         return;
       }
       printResult(result);
+      if (vectors) {
+        console.log(
+          pc9.dim(
+            `  file vectors: ${vectors.embedded} embedded, ${vectors.files} current` + (vectors.pending > 0 ? `, ${vectors.pending} left for the next run` : "")
+          )
+        );
+      } else if (local) {
+        console.log(pc9.dim("  file vectors: skipped (local embedding runtime not available)"));
+      }
     });
   });
   program.command("watch").option("--debounce <ms>", "Coalesce file-change bursts within this window.", Number).option("--no-llm", "Do not write BYOK model summaries after index passes.").description("Watch the repository and incrementally re-index on change (Ctrl+C to stop).").action(async (opts) => {
@@ -3447,81 +3514,6 @@ function printResult(result, compact = false) {
 // src/cli/commands/init-wizard.ts
 import { writeFile as writeFile2 } from "fs/promises";
 import { confirm, isCancel, log, note, password, spinner, text } from "@clack/prompts";
-
-// src/cli/commands/postgres-docker.ts
-import { spawn as spawn4 } from "child_process";
-import { existsSync as existsSync3 } from "fs";
-import { dirname as dirname11, resolve as resolve12 } from "path";
-import { fileURLToPath as fileURLToPath2 } from "url";
-function resolveBundledComposeFile() {
-  const here = dirname11(fileURLToPath2(import.meta.url));
-  const candidates = [
-    // installed package: dist/cli/commands/ -> root
-    resolve12(here, "..", "..", "..", "docker-compose.yml"),
-    // source layout:    src/cli/commands/ -> root
-    resolve12(here, "..", "..", "..", "..", "docker-compose.yml"),
-    resolve12(here, "..", "..", "docker-compose.yml"),
-    resolve12(process.cwd(), "docker-compose.yml")
-  ];
-  for (const candidate of candidates) {
-    if (existsSync3(candidate)) return candidate;
-  }
-  throw new Error(`Could not locate docker-compose.yml. Looked in:
-  ${candidates.join("\n  ")}`);
-}
-async function runDockerCompose(args, options = {}) {
-  const spawnImpl = options.spawnImpl ?? spawn4;
-  const composeFile = resolveBundledComposeFile();
-  const attempts = [
-    { kind: "v2", bin: "docker", args: ["compose", "-f", composeFile, ...args] },
-    { kind: "v1", bin: "docker-compose", args: ["-f", composeFile, ...args] }
-  ];
-  let lastSpawnError = null;
-  for (const attempt of attempts) {
-    try {
-      return await spawnOnce(spawnImpl, attempt);
-    } catch (error) {
-      const err = error;
-      if (err.code !== "ENOENT") throw err;
-      lastSpawnError = err;
-    }
-  }
-  throw new Error(
-    `Could not find docker. Install Docker Desktop (or docker-compose v1) and ensure it is on your PATH. (${lastSpawnError?.message ?? "spawn ENOENT"})`
-  );
-}
-function spawnOnce(spawnImpl, attempt) {
-  return new Promise((resolvePromise, rejectPromise) => {
-    const child = spawnImpl(attempt.bin, attempt.args, {
-      stdio: ["ignore", "pipe", "pipe"]
-    });
-    let stdout = "";
-    let stderr = "";
-    child.stdout?.on("data", (chunk) => {
-      stdout += String(chunk);
-    });
-    child.stderr?.on("data", (chunk) => {
-      stderr += String(chunk);
-    });
-    child.on("error", (error) => {
-      rejectPromise(error);
-    });
-    child.on("close", (code) => {
-      resolvePromise({ code: code ?? 0, stdout, stderr });
-    });
-  });
-}
-async function postgresUp(options) {
-  return runDockerCompose(["up", "-d"], options ?? {});
-}
-async function postgresDown(options) {
-  return runDockerCompose(["down"], options ?? {});
-}
-async function postgresStatus(options) {
-  return runDockerCompose(["ps"], options ?? {});
-}
-
-// src/cli/commands/init-wizard.ts
 function bail() {
   log.warn("Aborted. No config was written.");
   process.exit(1);
@@ -3587,7 +3579,7 @@ async function runInitWizard() {
           if (result.code === 0) {
             dockerSpinner.stop("Postgres container started.");
             for (let attempt = 0; attempt < 10 && !connected; attempt++) {
-              await new Promise((resolve14) => setTimeout(resolve14, 500));
+              await new Promise((resolve13) => setTimeout(resolve13, 500));
               connected = await pingOnce(databaseUrl);
             }
             if (!connected) {
@@ -3776,7 +3768,7 @@ function registerMapCommands(program, runSafely2) {
 }
 
 // src/cli/commands/memory-review.ts
-import { spawn as spawn5 } from "child_process";
+import { spawn as spawn4 } from "child_process";
 import { relative as relative3 } from "path";
 import pc12 from "picocolors";
 function registerMemoryCommands(program, runSafely2) {
@@ -3872,15 +3864,15 @@ function truncate(value, max) {
 function openEditor(path) {
   const editor = process.env.EDITOR ?? process.env.VISUAL ?? "vi";
   return new Promise((resolvePromise, reject) => {
-    const child = spawn5(editor, [path], { stdio: "inherit" });
+    const child = spawn4(editor, [path], { stdio: "inherit" });
     child.on("error", reject);
     child.on("close", () => resolvePromise());
   });
 }
 
 // src/cli/commands/models.ts
-import { existsSync as existsSync4 } from "fs";
-import { join as join15 } from "path";
+import { existsSync as existsSync3 } from "fs";
+import { join as join14 } from "path";
 import { spinner as spinner2 } from "@clack/prompts";
 import pc13 from "picocolors";
 
@@ -4129,12 +4121,15 @@ async function calibrateEmbedder(embed) {
     (_, i) => at(Math.round((0.05 + i * 0.01) * 100) / 100, "dev")
   );
   const best = sweep.reduce((left, right) => right.f05 > left.f05 ? right : left);
+  const f2 = ({ precision, recall }) => precision + recall === 0 ? 0 : 5 * precision * recall / (4 * precision + recall);
+  const recallBest = sweep.reduce((left, right) => f2(right) > f2(left) ? right : left);
   return {
     auc,
     recallAt1: answered === 0 ? 0 : hits / answered,
     mrr: answered === 0 ? 0 : reciprocal / answered,
     best,
     test: at(best.floor, "test"),
+    recall: { dev: recallBest, test: at(recallBest.floor, "test") },
     at
   };
 }
@@ -4154,7 +4149,7 @@ async function withSpinner(label, work, done) {
     progress.stop(done(value));
     return value;
   } catch (error) {
-    progress.stop(pc13.red(`\u2717 ${label}`), 1);
+    progress.error(pc13.red(`\u2717 ${label}`));
     throw error;
   }
 }
@@ -4162,8 +4157,8 @@ function keyPresent(provider, apiKey) {
   return Boolean(process.env[KEY_ENV2[provider]] || provider === "huggingface" && apiKey);
 }
 function localModelDownloaded(id, revision) {
-  const dir = join15(modelCacheDir(), id, ...revision ? [revision] : []);
-  return existsSync4(join15(dir, "onnx", "model_quantized.onnx"));
+  const dir = join14(modelCacheDir(), id, ...revision ? [revision] : []);
+  return existsSync3(join14(dir, "onnx", "model_quantized.onnx"));
 }
 async function vectorCounts(postgresUrl, namespace, space) {
   const client = createDatabaseClient({ postgresUrl, maxConnections: 1, connectTimeoutSeconds: 3 });
@@ -4195,7 +4190,12 @@ async function printStatus() {
   const next = [];
   console.log(pc13.bold("Embeddings"));
   console.log(row("provider", `${provider.type}  ${pc13.dim(model)}`));
-  if (provider.type === "local") {
+  if (provider.type === "local" && !localRuntimeInstalled()) {
+    console.log(
+      row("runtime", warn("@huggingface/transformers is not installed: dense recall is off"))
+    );
+    next.push("npm i -g @huggingface/transformers");
+  } else if (provider.type === "local") {
     const ready = localModelDownloaded(LOCAL_EMBEDDING_MODEL.id, LOCAL_EMBEDDING_MODEL.revision);
     console.log(
       row(
@@ -4331,7 +4331,7 @@ Examples:
         );
       }
       if (!missingKey) {
-        syncInBackground(process.cwd());
+        syncInBackground(process.cwd(), true);
         console.log(
           pc13.dim("  Re-embedding existing memory in the background (codebuddy hooks sync).")
         );
@@ -4371,7 +4371,7 @@ before keeping one on. A reranker never admits a fact, it only orders them.`
   });
   models.command("pull").description("Download the local models now instead of on first use.").action(async () => {
     await runSafely2(async () => {
-      const { LocalModelProvider, rerankLocally } = await import("./local-OTOY56B4.js");
+      const { LocalModelProvider, rerankLocally } = await import("./local-ST4WMRCG.js");
       const file = await readConfigFile();
       let started = Date.now();
       await withSpinner(
@@ -4416,19 +4416,30 @@ before keeping one on. A reranker never admits a fact, it only orders them.`
           `${result.best.floor}: precision ${pct(result.test.precision)}, recall ${pct(result.test.recall)}, silent on ${pct(result.test.abstain)} of unrelated tasks ${pc13.dim("(chosen on dev, measured on test)")}`
         )
       );
+      console.log(
+        row(
+          "recall floor",
+          `${result.recall.dev.floor}: precision ${pct(result.recall.test.precision)}, recall ${pct(result.recall.test.recall)} ` + pc13.dim("(explicit recall: best F2 on dev, measured on test)")
+        )
+      );
       if (opts.dryRun) return;
       const file = await readConfigFile();
       await setConfigBlock("provider", {
         ...file.provider ?? { type: config.provider.type },
-        relevanceFloor: result.best.floor
+        relevanceFloor: result.best.floor,
+        recallFloor: result.recall.dev.floor
       });
-      console.log(ok(`Saved relevanceFloor ${result.best.floor} to .codebuddy/config.json`));
+      console.log(
+        ok(
+          `Saved relevanceFloor ${result.best.floor} and recallFloor ${result.recall.dev.floor} to .codebuddy/config.json`
+        )
+      );
     });
   });
 }
 
 // src/cli/commands/plan.ts
-import { spawn as spawn6 } from "child_process";
+import { spawn as spawn5 } from "child_process";
 import { relative as relative4 } from "path";
 import pc14 from "picocolors";
 function makeLifecycle(cwd = process.cwd()) {
@@ -4490,15 +4501,15 @@ function renderPlan(plan) {
 }
 function openEditor2(path) {
   const editor = process.env.EDITOR ?? process.env.VISUAL ?? "vi";
-  return new Promise((resolve14, reject) => {
-    const child = spawn6(editor, [path], { stdio: "inherit" });
+  return new Promise((resolve13, reject) => {
+    const child = spawn5(editor, [path], { stdio: "inherit" });
     child.on("error", reject);
-    child.on("close", () => resolve14());
+    child.on("close", () => resolve13());
   });
 }
 function runGit(args) {
-  return new Promise((resolve14, reject) => {
-    const child = spawn6("git", args, { stdio: ["ignore", "pipe", "pipe"] });
+  return new Promise((resolve13, reject) => {
+    const child = spawn5("git", args, { stdio: ["ignore", "pipe", "pipe"] });
     let stdout = "";
     let stderr = "";
     child.stdout.on("data", (c) => {
@@ -4508,7 +4519,7 @@ function runGit(args) {
       stderr += String(c);
     });
     child.on("error", reject);
-    child.on("close", (code) => resolve14({ code: code ?? 0, stdout, stderr }));
+    child.on("close", (code) => resolve13({ code: code ?? 0, stdout, stderr }));
   });
 }
 function registerPlanCommands(program, runSafely2) {
@@ -4822,8 +4833,8 @@ function severityBadge2(severity) {
 }
 
 // src/cli/commands/symbols.ts
-import { readFile as readFile13 } from "fs/promises";
-import { resolve as resolve13 } from "path";
+import { readFile as readFile12 } from "fs/promises";
+import { resolve as resolve12 } from "path";
 import pc18 from "picocolors";
 function registerSymbolsCommand(program, runSafely2) {
   program.command("symbols").argument("<path>", "Repo-relative or absolute path to a code file.").option("--json", "Print machine-readable JSON.").description("List a file's top-level symbols (functions, classes, types, exports).").action(async (path, opts) => {
@@ -4832,8 +4843,8 @@ function registerSymbolsCommand(program, runSafely2) {
         console.log(pc18.dim(`no symbol extraction for ${path} (unsupported language)`));
         return;
       }
-      const content = await readFile13(resolve13(path), "utf8");
-      const table = extractSymbolTable(content);
+      const content = await readFile12(resolve12(path), "utf8");
+      const table = extractSymbolTable(content, path);
       if (opts.json) {
         console.log(JSON.stringify({ path, symbols: table }, null, 2));
         return;
@@ -4860,9 +4871,9 @@ import { confirm as confirm2, isCancel as isCancel2, log as log2, note as note2,
 import pc19 from "picocolors";
 
 // src/core/global-config.ts
-import { chmod, mkdir as mkdir8, readFile as readFile14, writeFile as writeFile3 } from "fs/promises";
+import { chmod, mkdir as mkdir8, readFile as readFile13, writeFile as writeFile3 } from "fs/promises";
 import { homedir as homedir3 } from "os";
-import { dirname as dirname12, join as join16 } from "path";
+import { dirname as dirname11, join as join15 } from "path";
 import { z as z2 } from "zod";
 var GLOBAL_DIR = ".codebuddy";
 var GLOBAL_FILE = "global.json";
@@ -4875,12 +4886,12 @@ var globalConfigSchema = z2.object({
   installPath: z2.string().optional()
 });
 function globalConfigPath(home = homedir3()) {
-  return join16(home, GLOBAL_DIR, GLOBAL_FILE);
+  return join15(home, GLOBAL_DIR, GLOBAL_FILE);
 }
 async function readGlobalConfig(home = homedir3()) {
   const path = globalConfigPath(home);
   try {
-    const raw = await readFile14(path, "utf8");
+    const raw = await readFile13(path, "utf8");
     return globalConfigSchema.parse(JSON.parse(raw));
   } catch (error) {
     if (error.code === "ENOENT") return {};
@@ -4889,7 +4900,7 @@ async function readGlobalConfig(home = homedir3()) {
 }
 async function writeGlobalConfig(next, home = homedir3()) {
   const path = globalConfigPath(home);
-  await mkdir8(dirname12(path), { recursive: true, mode: 448 });
+  await mkdir8(dirname11(path), { recursive: true, mode: 448 });
   await writeFile3(path, `${JSON.stringify(next, null, 2)}
 `, { mode: 384 });
   await chmod(path, 384);
@@ -4902,32 +4913,6 @@ async function mergeGlobalConfig(patch, home = homedir3()) {
   return { path, merged };
 }
 
-// src/cli/commands/docker-autostart.ts
-import { spawn as spawn7 } from "child_process";
-async function isDockerDaemonRunning() {
-  return new Promise((resolve14) => {
-    const child = spawn7("docker", ["info"], { stdio: "ignore" });
-    child.on("error", () => resolve14(false));
-    child.on("close", (code) => resolve14(code === 0));
-  });
-}
-async function tryStartDockerDesktop() {
-  if (process.platform !== "darwin") return { started: false };
-  return new Promise((resolve14) => {
-    const child = spawn7("open", ["-ga", "Docker"], { stdio: "ignore" });
-    child.on("error", () => resolve14({ started: false }));
-    child.on("close", (code) => resolve14({ started: code === 0 }));
-  });
-}
-async function waitForDockerDaemon(timeoutMs = 6e4) {
-  const deadline = Date.now() + timeoutMs;
-  while (Date.now() < deadline) {
-    if (await isDockerDaemonRunning()) return true;
-    await new Promise((resolve14) => setTimeout(resolve14, 1e3));
-  }
-  return false;
-}
-
 // src/cli/commands/use-command.ts
 function bail2() {
   log2.warn("Aborted.");
@@ -4955,15 +4940,17 @@ async function runUseCommand(options = {}) {
   const sigintHandler = () => bail2();
   process.on("SIGINT", sigintHandler);
   try {
+    const interactive = options.interactive ?? process.stdin.isTTY === true;
     const folderName = basename2(process.cwd());
     const namespace = sanitizeNamespace(options.namespace ?? folderName);
     await initProjectScaffold();
-    const graphifyEnabled = options.graphify ?? unwrap2(
+    if (options.namespace === void 0) await migrateLegacyNamespace();
+    const graphifyEnabled = options.graphify ?? (interactive && unwrap2(
       await confirm2({
         message: "Set up Graphify for richer architecture context?",
         initialValue: true
       })
-    );
+    ));
     note2(
       `Project folder: ${pc19.bold(process.cwd())}
 Namespace:      ${pc19.bold(namespace)}`,
@@ -4974,6 +4961,8 @@ Namespace:      ${pc19.bold(namespace)}`,
     let embeddings = projectConfig.provider?.type;
     if (embeddings) {
       log2.info(`Embeddings: ${embeddings} (change with ${pc19.cyan("codebuddy models use")}).`);
+    } else if (!interactive) {
+      embeddings = "local";
     } else {
       embeddings = unwrap2(
         await select({
@@ -5013,6 +5002,10 @@ Namespace:      ${pc19.bold(namespace)}`,
     } else if (stored.hfToken) {
       hfToken = stored.hfToken;
       log2.info(`Reusing saved Hugging Face token (${pc19.dim("~/.codebuddy/global.json")}).`);
+    } else if (!interactive) {
+      throw new Error(
+        "Hugging Face embeddings need a token: set HF_TOKEN (no terminal to prompt for it)."
+      );
     } else {
       hfToken = unwrap2(
         await password2({
@@ -5022,13 +5015,13 @@ Namespace:      ${pc19.bold(namespace)}`,
       if (!hfToken) log2.warn("No token: hosted embeddings will fail until HF_TOKEN is set.");
     }
     const initialUrl = options.postgresUrl ?? process.env.DATABASE_URL ?? stored.databaseUrl ?? DEFAULT_DB_URL;
-    const databaseUrl = unwrap2(
+    const databaseUrl = options.postgresUrl ?? (interactive ? unwrap2(
       await text2({
         message: "Postgres URL (press Enter to accept)",
         initialValue: initialUrl,
         validate: (value) => value && value.length > 0 ? void 0 : "Postgres URL is required."
       })
-    );
+    ) : initialUrl);
     const dbSpinner = spinner3();
     dbSpinner.start("Checking Postgres");
     let connected = await pingOnce2(databaseUrl);
@@ -5036,12 +5029,12 @@ Namespace:      ${pc19.bold(namespace)}`,
     if (!connected && databaseUrl === DEFAULT_DB_URL) {
       dbSpinner.stop("Postgres unreachable on the default local URL.");
     }
-    const shouldUseDocker = !connected && databaseUrl === DEFAULT_DB_URL && (options.useDocker ?? unwrap2(
+    const shouldUseDocker = !connected && databaseUrl === DEFAULT_DB_URL && (options.useDocker ?? (interactive && unwrap2(
       await confirm2({
         message: "Postgres is unavailable. Start the bundled Docker database now?",
         initialValue: true
       })
-    ));
+    )));
     if (shouldUseDocker) {
       if (!await isDockerDaemonRunning()) {
         const dockerSpinner = spinner3();
@@ -5061,7 +5054,7 @@ Namespace:      ${pc19.bold(namespace)}`,
         if (result.code === 0) {
           composeSpinner.stop("Postgres container started.");
           for (let attempt = 0; attempt < 12 && !connected; attempt++) {
-            await new Promise((resolve14) => setTimeout(resolve14, 500));
+            await new Promise((resolve13) => setTimeout(resolve13, 500));
             connected = await pingOnce2(databaseUrl);
           }
           if (!connected) {
@@ -5076,7 +5069,7 @@ Namespace:      ${pc19.bold(namespace)}`,
     } else if (!connected) {
       dbSpinner.stop(connected ? "Postgres reachable." : "Postgres unreachable at this URL.");
       log2.warn(
-        "Local Postgres is required. Start it, set DATABASE_URL, pass --postgres-url, or allow the bundled Docker database."
+        "Local Postgres is required. Start it, set DATABASE_URL, pass --postgres-url, or allow the bundled Docker database (--docker)."
       );
       bail2();
     }
@@ -5282,9 +5275,7 @@ function registerZvecCommands(program, runSafely2) {
         ...opts.rebuild ? { rebuild: true } : {}
       });
       if (code !== 0) throw new Error(`zg index exited with code ${code}`);
-      console.log(
-        pc21.dim("tip: add .zvec-grep/ to .gitignore; enable with `codebuddy zvec enable`")
-      );
+      console.log(pc21.dim("next: codebuddy zvec enable (.zvec-grep/ ignores itself in git)"));
     });
   });
   zvec.command("enable").description("Use zvec-grep candidates in context_pack / context_before_edit.").action(async () => {
@@ -5319,7 +5310,7 @@ function createCli() {
   ).argument("[namespace]", "Override the namespace (defaults to current folder name).").option("--postgres-url <url>", "Postgres URL to use for this project.").option("--skip-claude", "Do not register with Claude Desktop.").option("--skip-codex", "Do not register with Codex.").option("--graphify", "Enable Graphify setup without prompting.").option("--no-graphify", "Skip Graphify setup without prompting.").option(
     "--docker",
     "Start CodeBuddy's bundled Postgres container when the default DB is unavailable."
-  ).option("--no-docker", "Do not offer to start CodeBuddy's bundled Postgres container.").action(
+  ).option("--no-docker", "Do not offer to start CodeBuddy's bundled Postgres container.").option("-y, --yes", "Never prompt: use flags and defaults (automatic without a TTY).").option("--non-interactive", "Same as --yes.").action(
     async (namespace, opts) => {
       await runSafely(async () => {
         await runUseCommand({
@@ -5328,7 +5319,8 @@ function createCli() {
           ...opts.skipClaude !== void 0 ? { skipClaude: opts.skipClaude } : {},
           ...opts.skipCodex !== void 0 ? { skipCodex: opts.skipCodex } : {},
           ...opts.graphify !== void 0 ? { graphify: opts.graphify } : {},
-          ...opts.docker !== void 0 ? { useDocker: opts.docker } : {}
+          ...opts.docker !== void 0 ? { useDocker: opts.docker } : {},
+          ...opts.yes || opts.nonInteractive ? { interactive: false } : {}
         });
       });
     }
@@ -5472,7 +5464,7 @@ function createCli() {
       console.log(`Claude Desktop config: ${result.path}`);
       for (const entry of result.entries) {
         console.log(
-          `  ${entry.key}  namespace=${entry.namespace ?? "?"}  db=${entry.databaseUrl ?? "?"}`
+          `  ${entry.key}  namespace=${entry.namespace ?? "?"}  db=${entry.databaseUrl ? String(redactSecrets(entry.databaseUrl)) : "?"}`
         );
       }
     });
@@ -5517,7 +5509,7 @@ function createCli() {
       console.log(`Codex config: ${result.path}`);
       for (const entry of result.entries) {
         console.log(
-          `  ${entry.key}  namespace=${entry.namespace ?? "?"}  db=${entry.databaseUrl ?? "?"}`
+          `  ${entry.key}  namespace=${entry.namespace ?? "?"}  db=${entry.databaseUrl ? String(redactSecrets(entry.databaseUrl)) : "?"}`
         );
       }
     });
@@ -5703,6 +5695,9 @@ function printDoctor(report) {
   console.log(
     `  runtime=${report.namespace.runtime ?? "unset"} default=${report.namespace.expectedDefault}`
   );
+  if (report.namespace.migrated) {
+    console.log(`  migrated legacy namespace "default" to "${report.namespace.migrated}"`);
+  }
   if (report.namespace.warning) console.log(`  ${report.namespace.warning}`);
   console.log(
     `vectors: ${report.vectors.count} index=${report.vectors.index ?? "missing"} tuning=${report.vectors.needsTuning ? "recommended" : "not-needed"}`
@@ -5732,9 +5727,12 @@ function printDbDoctor(report) {
   if (report.pgvector.error) console.log(`  ${report.pgvector.error}`);
   console.log(`namespace: ${report.namespace.ok ? ok2 : warn2}`);
   console.log(`  runtime=${report.namespace.runtime ?? "unset"}`);
+  if (report.namespace.migrated) {
+    console.log(`  migrated legacy namespace "default" to "${report.namespace.migrated}"`);
+  }
   if (report.namespace.warning) console.log(`  ${report.namespace.warning}`);
 }
 export {
   createCli
 };
-//# sourceMappingURL=main-HFHLGID4.js.map
+//# sourceMappingURL=main-AHNGHC4L.js.map