@orquentra/codebuddy 2.6.2 → 2.7.0

package/dist/{main-MTBQZGJV.js → main-AHNGHC4L.js}

@@ -1,15 +1,6 @@
 import {
   runPreToolHookCommand
-} from "./chunk-QBDJXGG5.js";
-import {
-  loadLlmSummaries,
-  summarizeRepository
-} from "./chunk-OWWCDRXW.js";
-import {
-  chatJson,
-  coolingDown,
-  usageToday
-} from "./chunk-5MQOE4J6.js";
+} from "./chunk-AQHPEJR6.js";
 import {
   isDockerDaemonRunning,
   tryStartDockerDesktop,
@@ -23,7 +14,7 @@ import {
 import {
   renderLeanBlock,
   runLeanHookCommand
-} from "./chunk-B6CO63SQ.js";
+} from "./chunk-LCSBL5TT.js";
 import {
   failSoft,
   readHookInput,
@@ -35,7 +26,12 @@ import {
   registerCodeBuddyTools,
   startMcpServer,
   watchRepository
-} from "./chunk-IMFUYEZA.js";
+} from "./chunk-EEUFU7KV.js";
+import {
+  DEFAULT_ZVEC_MODEL,
+  buildZvecIndex,
+  zvecStatus
+} from "./chunk-MSUAVR3R.js";
 import {
   PlanFileStore,
   PlanLifecycle,
@@ -46,37 +42,28 @@ import {
   buildBeforeEditContext,
   buildBootstrapContext,
   openHookSemantics,
-  parseTraceLines,
-  readTraces,
   renderContextBlock,
   resolveRiskPaths,
   runCaptureHook,
   runContextHook,
   runResetHook,
   runStageHook,
-  runSyncHook,
+  runSyncHook
+} from "./chunk-YJIA2MFL.js";
+import {
+  parseTraceLines,
+  readTraces,
   tracePath
-} from "./chunk-R7CD6EXS.js";
-import "./chunk-IHQM2ZDV.js";
+} from "./chunk-TUR6YKEE.js";
+import "./chunk-DFV2SK6C.js";
 import {
   SessionCapsuleLedger,
-  estimateTokens,
-  hookRoot
-} from "./chunk-J2EAZ4MA.js";
+  detectTestCommand,
+  estimateTokens
+} from "./chunk-GKNYMNFM.js";
 import {
-  buildArchitectureMap,
-  generateGraphifyGraph,
-  indexRepository,
-  loadFreshIndex,
-  loadGraphifyMap,
-  neighbours,
-  queryMap,
-  setupGraphify
-} from "./chunk-NERKZSSE.js";
-import {
-  extractSymbolTable,
-  supportsSymbols
-} from "./chunk-PQK3GKZH.js";
+  hookRoot
+} from "./chunk-TGFTKWOR.js";
 import {
   bootstrapDatabase,
   buildProviderFromConfig,
@@ -88,37 +75,56 @@ import {
   pingDatabase,
   runDoctor,
   runMigrations
-} from "./chunk-2XDPKFUW.js";
+} from "./chunk-AK2UAE32.js";
 import {
   MemoryFileStore,
   VERSION
-} from "./chunk-S6VEG4S2.js";
-import {
-  redactPersisted
-} from "./chunk-GDJH7XJC.js";
+} from "./chunk-JUAFCLRB.js";
 import {
   computeFactHash,
   generateEntityId
-} from "./chunk-XBJQKCLU.js";
-import "./chunk-JFDRBPYF.js";
+} from "./chunk-CAEPHLHC.js";
+import "./chunk-6JCKMIQY.js";
 import {
   localRuntimeInstalled,
   modelCacheDir
-} from "./chunk-IBLJOHJL.js";
+} from "./chunk-3QGW53GD.js";
+import {
+  loadLlmSummaries,
+  summarizeRepository
+} from "./chunk-BQM7FJ7D.js";
+import {
+  chatJson,
+  coolingDown,
+  usageToday
+} from "./chunk-ESZXCZIN.js";
+import {
+  buildArchitectureMap,
+  generateGraphifyGraph,
+  indexRepository,
+  loadFreshIndex,
+  loadGraphifyMap,
+  neighbours,
+  queryMap,
+  setupGraphify,
+  syncFileVectors
+} from "./chunk-5EDGAZQN.js";
+import {
+  extractSymbolTable,
+  supportsSymbols
+} from "./chunk-Y7D7PUBE.js";
+import {
+  redactPersisted
+} from "./chunk-AL6VBTNA.js";
 import {
   DEFAULT_CLOUD_EMBEDDING_MODELS,
   DEFAULT_RERANK_MODELS,
   LOCAL_EMBEDDING_MODEL,
   getModelDefinition
-} from "./chunk-JPHJBCZB.js";
-import {
-  DEFAULT_ZVEC_MODEL,
-  buildZvecIndex,
-  zvecStatus
-} from "./chunk-5FW3PMNP.js";
+} from "./chunk-HPOR6YXA.js";
 import {
   resolveLlmConfig
-} from "./chunk-RAJJSCIP.js";
+} from "./chunk-SFMIMLXR.js";
 import {
   PLAN_POLICIES,
   configPath,
@@ -135,9 +141,11 @@ import {
   setLlmEnabled,
   setPlanPolicy,
   setZvecEnabled,
-  writeAtomic,
   writeConfigFile
-} from "./chunk-5KZY6OTG.js";
+} from "./chunk-KNR2P2UY.js";
+import {
+  writeAtomic
+} from "./chunk-CG5B3LYG.js";
 import "./chunk-PZ5AY32C.js";
 
 // src/cli/main.ts
@@ -243,9 +251,7 @@ import pc from "picocolors";
 
 // src/change/engine.ts
 import { spawn } from "child_process";
-import { constants as constants2 } from "fs";
-import { access as access2, readFile } from "fs/promises";
-import { extname, join as join2 } from "path";
+import { extname } from "path";
 var CODE_EXTENSIONS = /* @__PURE__ */ new Set([".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs"]);
 var DEFAULT_TEST_TIMEOUT_MS = 12e4;
 var MAX_TEST_OUTPUT_CHARS = 12e3;
@@ -294,7 +300,7 @@ async function buildChangeReport(input) {
 }
 async function verifyChange(input) {
   const report = await buildChangeReport(input);
-  const detected = input.command ? { command: input.command, source: "explicit" } : await detectTestCommand(input.repositoryRoot ?? process.cwd());
+  const detected = input.command ? { command: input.command, source: "explicit" } : await detectedTestCommand(input.repositoryRoot ?? process.cwd());
   if (!detected) {
     return {
       report,
@@ -305,7 +311,7 @@ async function verifyChange(input) {
         exitCode: null,
         signal: null,
         durationMs: 0,
-        output: "No test command found. Pass --command or add a test script to package.json."
+        output: "No test command found. Pass --command, add a test script to package.json, or add pyproject.toml/pytest.ini/setup.cfg, go.mod or Cargo.toml."
       }
     };
   }
@@ -319,38 +325,13 @@ async function verifyChange(input) {
     )
   };
 }
-async function detectTestCommand(repositoryRoot) {
-  const packagePath = join2(repositoryRoot, "package.json");
-  try {
-    const packageJson = JSON.parse(await readFile(packagePath, "utf8"));
-    if (typeof packageJson.scripts?.test === "string") {
-      return {
-        command: `${packageManagerName(packageJson.packageManager)} test`,
-        source: "package_script"
-      };
-    }
-  } catch (error) {
-    if (error.code !== "ENOENT") throw error;
-  }
-  for (const candidate of [
-    ["pnpm-lock.yaml", "pnpm test"],
-    ["yarn.lock", "yarn test"],
-    ["bun.lockb", "bun test"],
-    ["bun.lock", "bun test"],
-    ["package-lock.json", "npm test"]
-  ]) {
-    try {
-      await access2(join2(repositoryRoot, candidate[0]), constants2.F_OK);
-      return { command: candidate[1], source: "package_manager" };
-    } catch {
-    }
-  }
-  return null;
-}
-function packageManagerName(value) {
-  if (typeof value !== "string") return "npm";
-  const name = value.split(/[\s@]/, 1)[0] ?? "npm";
-  return ["npm", "pnpm", "yarn", "bun"].includes(name) ? name : "npm";
+async function detectedTestCommand(repositoryRoot) {
+  const command = await detectTestCommand(repositoryRoot);
+  if (command === null) return null;
+  return {
+    command,
+    source: /^(npm|pnpm|yarn|bun) test$/.test(command) ? "package_script" : "project_marker"
+  };
 }
 function runTestCommand(command, source, repositoryRoot, timeoutMs) {
   if (!Number.isFinite(timeoutMs) || timeoutMs <= 0) {
@@ -606,22 +587,22 @@ function testBadge(status) {
 
 // src/cli/commands/claude-desktop.ts
 import { existsSync } from "fs";
-import { mkdir as mkdir2, readFile as readFile2 } from "fs/promises";
-import { dirname as dirname2, join as join3, resolve as resolve2 } from "path";
+import { mkdir as mkdir2, readFile } from "fs/promises";
+import { dirname as dirname2, join as join2, resolve as resolve2 } from "path";
 import { fileURLToPath } from "url";
 function claudeDesktopConfigPath(home = process.env.HOME ?? "") {
   if (process.platform === "darwin") {
-    return join3(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
+    return join2(home, "Library", "Application Support", "Claude", "claude_desktop_config.json");
   }
   if (process.platform === "win32") {
-    return join3(process.env.APPDATA ?? home, "Claude", "claude_desktop_config.json");
+    return join2(process.env.APPDATA ?? home, "Claude", "claude_desktop_config.json");
   }
-  return join3(home, ".config", "Claude", "claude_desktop_config.json");
+  return join2(home, ".config", "Claude", "claude_desktop_config.json");
 }
 async function readClaudeConfig(path) {
   if (!existsSync(path)) return {};
   try {
-    return JSON.parse(await readFile2(path, "utf8"));
+    return JSON.parse(await readFile(path, "utf8"));
   } catch (error) {
     throw new Error(
       `Failed to parse Claude Desktop config at ${path}: ${error.message}`
@@ -796,25 +777,25 @@ function sharedRulesReaders(client) {
 // src/clients/cost.ts
 import { mkdtemp, rm as rm3 } from "fs/promises";
 import { tmpdir } from "os";
-import { join as join8, resolve as resolve7 } from "path";
+import { join as join7, resolve as resolve7 } from "path";
 import { Client } from "@modelcontextprotocol/sdk/client/index.js";
 import { InMemoryTransport } from "@modelcontextprotocol/sdk/inMemory.js";
 import { McpServer } from "@modelcontextprotocol/sdk/server/mcp.js";
 
 // src/templates/install.ts
-import { readFile as readFile7, rm as rm2 } from "fs/promises";
-import { join as join7, resolve as resolve6 } from "path";
+import { readFile as readFile6, rm as rm2 } from "fs/promises";
+import { join as join6, resolve as resolve6 } from "path";
 
 // src/hooks/hermes-plugin.ts
-import { readFile as readFile4 } from "fs/promises";
-import { dirname as dirname4, join as join4, resolve as resolve3 } from "path";
+import { readFile as readFile3 } from "fs/promises";
+import { dirname as dirname4, join as join3, resolve as resolve3 } from "path";
 
 // src/hooks/managed-plugin.ts
-import { mkdir as mkdir3, readFile as readFile3, rm, rmdir } from "fs/promises";
+import { mkdir as mkdir3, readFile as readFile2, rm, rmdir } from "fs/promises";
 import { dirname as dirname3 } from "path";
 async function read(path) {
   try {
-    return await readFile3(path, "utf8");
+    return await readFile2(path, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return null;
     throw error;
@@ -1010,7 +991,7 @@ def register(ctx):
 }
 var HERMES_PLUGIN_SOURCE = renderHermesPlugin("full");
 function hermesPluginDir(repositoryRoot) {
-  return join4(resolve3(repositoryRoot), ".hermes", "plugins", "codebuddy");
+  return join3(resolve3(repositoryRoot), ".hermes", "plugins", "codebuddy");
 }
 function plugin(repositoryRoot, variant = "full") {
   const dir = hermesPluginDir(repositoryRoot);
@@ -1018,10 +999,10 @@ function plugin(repositoryRoot, variant = "full") {
     marker: HERMES_PLUGIN_MARKER,
     files: [
       {
-        path: join4(dir, "plugin.yaml"),
+        path: join3(dir, "plugin.yaml"),
         content: variant === "lean" ? HERMES_LEAN_MANIFEST : HERMES_PLUGIN_MANIFEST
       },
-      { path: join4(dir, "__init__.py"), content: renderHermesPlugin(variant) }
+      { path: join3(dir, "__init__.py"), content: renderHermesPlugin(variant) }
     ],
     dirs: [dir, dirname4(dir), dirname4(dirname4(dir))]
   };
@@ -1034,13 +1015,13 @@ function setHermesPlugin(repositoryRoot, enabled, variant = "full") {
 }
 async function hermesPluginVariant(repositoryRoot) {
   if (!await hermesPluginInstalled(repositoryRoot)) return null;
-  const source = await readFile4(join4(hermesPluginDir(repositoryRoot), "__init__.py"), "utf8");
+  const source = await readFile3(join3(hermesPluginDir(repositoryRoot), "__init__.py"), "utf8");
   return source.startsWith(`${HERMES_PLUGIN_MARKER} v1 lean`) ? "lean" : "full";
 }
 
 // src/hooks/opencode-plugin.ts
-import { readFile as readFile5 } from "fs/promises";
-import { dirname as dirname5, join as join5, resolve as resolve4 } from "path";
+import { readFile as readFile4 } from "fs/promises";
+import { dirname as dirname5, join as join4, resolve as resolve4 } from "path";
 var OPENCODE_PLUGIN_MARKER = "// codebuddy-managed: opencode-plugin";
 var OPENCODE_RUNTIME = `const ID_CHARS = "0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz";
 let lastMs = 0;
@@ -1206,7 +1187,7 @@ export const CodeBuddyPlugin = async ({ directory }) => {
 }
 var OPENCODE_PLUGIN_SOURCE = renderOpencodePlugin("full");
 function opencodePluginPath(repositoryRoot) {
-  return join5(resolve4(repositoryRoot), ".opencode", "plugins", "codebuddy.js");
+  return join4(resolve4(repositoryRoot), ".opencode", "plugins", "codebuddy.js");
 }
 function plugin2(repositoryRoot, variant = "full") {
   const path = opencodePluginPath(repositoryRoot);
@@ -1224,17 +1205,17 @@ function setOpencodePlugin(repositoryRoot, enabled, variant = "full") {
 }
 async function opencodePluginVariant(repositoryRoot) {
   if (!await opencodePluginInstalled(repositoryRoot)) return null;
-  const source = await readFile5(opencodePluginPath(repositoryRoot), "utf8");
+  const source = await readFile4(opencodePluginPath(repositoryRoot), "utf8");
   return source.startsWith(`${OPENCODE_PLUGIN_MARKER} v1 lean`) ? "lean" : "full";
 }
 
 // src/hooks/settings.ts
-import { mkdir as mkdir4, readFile as readFile6 } from "fs/promises";
-import { dirname as dirname6, join as join6, resolve as resolve5 } from "path";
+import { mkdir as mkdir4, readFile as readFile5 } from "fs/promises";
+import { dirname as dirname6, join as join5, resolve as resolve5 } from "path";
 var HOOK_COMMAND_PREFIX = "codebuddy hooks";
 var TOOL_GUARD_DEF = {
   event: "PreToolUse",
-  matcher: "Read|Grep",
+  matcher: "Read|Grep|Bash",
   command: `${HOOK_COMMAND_PREFIX} pretool`
 };
 var HOOK_DEFS = [
@@ -1256,7 +1237,7 @@ var LEAN_HOOK_DEFS = [
   TOOL_GUARD_DEF
 ];
 function claudeSettingsPath(repositoryRoot = process.cwd()) {
-  return join6(resolve5(repositoryRoot), ".claude", "settings.json");
+  return join5(resolve5(repositoryRoot), ".claude", "settings.json");
 }
 function upsertHooks(settings, variant = "full") {
   const defs = variant === "lean" ? LEAN_HOOK_DEFS : HOOK_DEFS;
@@ -1335,7 +1316,7 @@ function hooksVariant(settings) {
 }
 async function readSettings(path) {
   try {
-    return JSON.parse(await readFile6(path, "utf8"));
+    return JSON.parse(await readFile5(path, "utf8"));
   } catch (error) {
     if (error.code === "ENOENT") return {};
     throw error;
@@ -1439,12 +1420,16 @@ var START_HOOKS = [
   "follow the agent-driven flow: `context_pack` first, `context_after_turn` last.",
   "",
   "1. Start from the injected block; do not call `context_bootstrap` for orientation",
-  "   it already covers.",
-  "2. Call `context_pack` (or `context_before_edit` with exact paths) only when the",
+  "   it already covers. Its `task files` are CodeBuddy's best match; when it names",
+  "   none, call `context_pack` with the task before searching the repository yourself.",
+  "2. Read ranges, not whole files: `Read` with offset/limit, or `sed -n 'A,Bp'`.",
+  "   Large files read whole (`Read` without a range, `cat`, `less`) are denied with an",
+  "   outline of their symbols and line ranges; read the range you need from it.",
+  "3. Call `context_pack` (or `context_before_edit` with exact paths) when the",
   "   task needs symbols, neighbours, or file-level evidence the block lacks. Pass the",
   "   block's `session` value as `sessionId` and the previous `delivery.deliveryId`",
   "   as `ack` so unchanged sections are not resent.",
-  "3. Prior work from earlier chats arrives as handoffs with freshness; re-check",
+  "4. Prior work from earlier chats arrives as handoffs with freshness; re-check",
   "   those files before relying on it.",
   ""
 ];
@@ -1547,7 +1532,7 @@ ${END_MARKER}
 }
 async function installWorkflowRules(options) {
   const projectRoot = resolve6(options.projectRoot ?? process.cwd());
-  const path = options.targetPath ?? join7(projectRoot, defaultRulesFile(options.client));
+  const path = options.targetPath ?? join6(projectRoot, defaultRulesFile(options.client));
   const existing = await readIfPresent(path);
   const mode = options.mode ?? await defaultRulesMode(options.client, projectRoot);
   if (options.onlyIfManaged && (existing === null || !hasManagedBlock(existing))) {
@@ -1602,7 +1587,7 @@ function removeBlock(existing) {
 }
 async function readIfPresent(path) {
   try {
-    return await readFile7(path, "utf8");
+    return await readFile6(path, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return null;
     throw error;
@@ -1639,7 +1624,7 @@ async function hookBlockTokens(root, namespace) {
     namespace,
     useGit: true
   }).catch(() => null);
-  const scratch = await mkdtemp(join8(tmpdir(), "codebuddy-cost-"));
+  const scratch = await mkdtemp(join7(tmpdir(), "codebuddy-cost-"));
   try {
     const ledger = new SessionCapsuleLedger(scratch);
     const render = () => renderContextBlock(bootstrap, beforeEdit, ledger, "cost", true);
@@ -1692,14 +1677,14 @@ async function measureClientCosts(projectRoot = process.cwd(), namespace) {
 }
 
 // src/clients/install.ts
-import { access as access4 } from "fs/promises";
-import { join as join12, resolve as resolve9 } from "path";
+import { access as access3 } from "fs/promises";
+import { join as join11, resolve as resolve9 } from "path";
 
 // src/integrations/project-mcp.ts
-import { access as access3, mkdir as mkdir5, readFile as readFile8, rm as rm4 } from "fs/promises";
-import { dirname as dirname7, join as join9, resolve as resolve8 } from "path";
+import { access as access2, mkdir as mkdir5, readFile as readFile7, rm as rm4 } from "fs/promises";
+import { dirname as dirname7, join as join8, resolve as resolve8 } from "path";
 async function writeProjectMcpConfig(options) {
-  const path = join9(options.repositoryRoot, ".mcp.json");
+  const path = join8(options.repositoryRoot, ".mcp.json");
   const current = await readProjectMcpConfig(path);
   current.mcpServers ??= {};
   current.mcpServers[`codebuddy-${options.namespace}`] = codebuddyMcpServer(
@@ -1736,12 +1721,12 @@ function codebuddyMcpServer(repositoryRoot, namespace) {
   };
 }
 async function projectMcpPath(root, file, format) {
-  const path = join9(root, file);
+  const path = join8(root, file);
   if (format !== "opencode" || await exists(path)) return path;
   return await exists(`${path}c`) ? `${path}c` : path;
 }
 async function exists(path) {
-  return access3(path).then(
+  return access2(path).then(
     () => true,
     () => false
   );
@@ -1802,7 +1787,7 @@ function parseJsonc(raw) {
 }
 async function readConfig(path) {
   try {
-    const { value, comments } = parseJsonc(await readFile8(path, "utf8"));
+    const { value, comments } = parseJsonc(await readFile7(path, "utf8"));
     const config = value && typeof value === "object" ? value : {};
     return { config, comments };
   } catch (error) {
@@ -1816,15 +1801,15 @@ async function readProjectMcpConfig(path) {
 
 // src/cli/commands/codex.ts
 import { existsSync as existsSync2 } from "fs";
-import { mkdir as mkdir6, readFile as readFile9 } from "fs/promises";
+import { mkdir as mkdir6, readFile as readFile8 } from "fs/promises";
 import { homedir } from "os";
-import { dirname as dirname8, join as join10 } from "path";
+import { dirname as dirname8, join as join9 } from "path";
 function codexConfigPath(home = homedir()) {
-  return join10(home, ".codex", "config.toml");
+  return join9(home, ".codex", "config.toml");
 }
 async function readCodexConfig(path) {
   if (!existsSync2(path)) return "";
-  return readFile9(path, "utf8");
+  return readFile8(path, "utf8");
 }
 async function writeCodexConfig(path, content) {
   await mkdir6(dirname8(path), { recursive: true });
@@ -1930,17 +1915,17 @@ function escapeRegExp(value) {
 }
 
 // src/integrations/hermes-config.ts
-import { mkdir as mkdir7, readFile as readFile10 } from "fs/promises";
+import { mkdir as mkdir7, readFile as readFile9 } from "fs/promises";
 import { homedir as homedir2 } from "os";
-import { dirname as dirname9, join as join11 } from "path";
+import { dirname as dirname9, join as join10 } from "path";
 import { isDeepStrictEqual } from "util";
 import { parse as parseYaml, stringify as stringifyYaml } from "yaml";
 function hermesConfigPath(home = homedir2()) {
-  return join11(process.env.HERMES_HOME ?? join11(home, ".hermes"), "config.yaml");
+  return join10(process.env.HERMES_HOME ?? join10(home, ".hermes"), "config.yaml");
 }
 async function readRaw(path) {
   try {
-    return await readFile10(path, "utf8");
+    return await readFile9(path, "utf8");
   } catch (error) {
     if (error.code === "ENOENT") return "";
     throw error;
@@ -2062,8 +2047,8 @@ async function installClient(options) {
   return apply(options, options.mode, options.mode !== "lean");
 }
 async function ensureIndex(root) {
-  const target = join12(root, ".codebuddy", "cache", "index.json");
-  const existed = await access4(target).then(
+  const target = join11(root, ".codebuddy", "cache", "index.json");
+  const existed = await access3(target).then(
     () => true,
     () => false
   );
@@ -2083,7 +2068,7 @@ async function apply(options, mode, keepMcp) {
   const shared = sharedRulesReaders(options.client);
   const liveSiblings = mode === "mcp-only" || mode === "lean" ? await installedWithMcp(root, shared, namespace) : [];
   if (liveSiblings.length > 0) {
-    const path = join12(root, adapter.rulesFile);
+    const path = join11(root, adapter.rulesFile);
     steps.push({ surface: "rules", target: path, action: "kept" });
     notes.push(
       `Kept the CodeBuddy block in ${adapter.rulesFile}: still used by ${liveSiblings.map((id) => CLIENT_ADAPTERS[id].name).join(", ")}.`
@@ -2163,7 +2148,7 @@ async function setHooks(root, enabled, client = "claude", variant = "full") {
 async function detectClient(client, projectRoot = process.cwd(), namespace) {
   const root = resolve9(projectRoot);
   const adapter = CLIENT_ADAPTERS[client];
-  const rulesMode = await readManagedMode(join12(root, adapter.rulesFile));
+  const rulesMode = await readManagedMode(join11(root, adapter.rulesFile));
   const hooks = await clientHooksInstalled(root, client);
   const name = `codebuddy-${namespace ?? await resolveNamespaceFrom(root)}`;
   const mcp = "file" in adapter.mcp ? await hasMcpServer(
@@ -2189,8 +2174,8 @@ async function detectClient(client, projectRoot = process.cwd(), namespace) {
 
 // src/clients/verify.ts
 import { execFile } from "child_process";
-import { readFile as readFile11, realpath } from "fs/promises";
-import { join as join13, resolve as resolve10 } from "path";
+import { readFile as readFile10, realpath } from "fs/promises";
+import { join as join12, resolve as resolve10 } from "path";
 import { pathToFileURL } from "url";
 var runHost = (bin, args, cwd) => new Promise((done) => {
   execFile(
@@ -2225,7 +2210,7 @@ var CONFORMANCE = {
     if (!config) return [fail("config", "opencode debug config returned no JSON")];
     const installed = await clientHooksInstalled(root, "opencode");
     const href = pathToFileURL(
-      join13(await realpath(root).catch(() => root), ".opencode", "plugins", "codebuddy.js")
+      join12(await realpath(root).catch(() => root), ".opencode", "plugins", "codebuddy.js")
     ).href;
     const loaded = config.plugin?.includes(href) === true;
     return [
@@ -2252,7 +2237,7 @@ var CONFORMANCE = {
       return checks;
     }
     const projectPlugins = /^(1|true|yes|on)$/i.test(env.HERMES_ENABLE_PROJECT_PLUGINS ?? "") || /^\s*HERMES_ENABLE_PROJECT_PLUGINS\s*=\s*["']?(1|true|yes|on)/im.test(
-      await readFile11(join13(hermesConfigPath(), "..", ".env"), "utf8").catch(() => "")
+      await readFile10(join12(hermesConfigPath(), "..", ".env"), "utf8").catch(() => "")
     );
     const plugins = (await readHermesConfig(hermesConfigPath()))?.plugins;
     const enabled = Array.isArray(plugins?.enabled) && plugins.enabled.includes("codebuddy");
@@ -2668,13 +2653,16 @@ th.n { text-align: right; }
 .chip { display: inline-block; font: 600 10px var(--mono); text-transform: uppercase; letter-spacing: .06em; padding: 2px 6px; border-radius: 4px; }
 .chip.recall { background: var(--recall-soft); color: var(--recall); }
 .chip.tool { background: var(--tool-soft); color: var(--tool); }
-.chip.capture, .chip.sync, .chip.kw { background: var(--line); color: var(--capture); }
+.chip.capture, .chip.sync, .chip.guard, .chip.kw { background: var(--line); color: var(--capture); }
 .chip.err { background: var(--bad-soft); color: var(--bad); }
 .feed { display: grid; gap: 10px; max-height: 520px; overflow: auto; }
 .prompt { border: 1px solid var(--line); border-radius: 8px; padding: 10px 12px; }
 .prompt .q { font-weight: 500; overflow-wrap: anywhere; }
 .prompt .meta { font: 12px var(--mono); color: var(--muted); margin-top: 4px; display: flex; flex-wrap: wrap; gap: 4px 12px; overflow-wrap: anywhere; }
 .prompt ul { margin: 6px 0 0; padding-left: 18px; font-size: 13px; }
+.prompt details { margin-top: 6px; font-size: 12px; }
+.prompt summary { cursor: pointer; color: var(--muted); }
+.prompt pre { margin: 6px 0 0; padding: 8px 10px; background: var(--bg); border: 1px solid var(--line); border-radius: 6px; font: 12px/1.45 var(--mono); white-space: pre-wrap; overflow-wrap: anywhere; max-height: 260px; overflow: auto; }
 .prompt .none { font-size: 13px; color: var(--muted); margin-top: 6px; }
 .mono { font-family: var(--mono); }
 .muted { color: var(--muted); }
@@ -2753,7 +2741,10 @@ th.n { text-align: right; }
   function kpis(list) {
     var recalls = list.filter(function (e) { return e.kind === "recall"; });
     var tools = list.filter(function (e) { return e.kind === "tool"; });
-    var delivered = list.reduce(function (s, e) { return s + (e.kind === "recall" || e.kind === "tool" ? e.tokensOut || 0 : 0); }, 0);
+    var injected = recalls.reduce(function (s, e) { return s + (e.tokensOut || 0); }, 0);
+    var returned = tools.reduce(function (s, e) { return s + (e.tokensOut || 0); }, 0);
+    var guards = list.filter(function (e) { return e.kind === "guard"; });
+    var avoided = guards.reduce(function (s, e) { return s + ((e.detail && e.detail.avoided) || 0); }, 0);
     var withFacts = recalls.filter(function (e) { return e.detail && e.detail.facts && e.detail.facts.length; });
     var factCount = withFacts.reduce(function (s, e) { return s + e.detail.facts.length; }, 0);
     var dense = recalls.reduce(function (s, e) { return s + ((e.detail && e.detail.dense) || 0); }, 0);
@@ -2764,7 +2755,8 @@ th.n { text-align: right; }
     var tiles = [
       ["Prompts recalled", num(recalls.length), recalls.length ? Math.round(100 * withFacts.length / recalls.length) + "% got facts" : "no prompts yet"],
       ["Facts injected", num(factCount), factCount ? Math.round(100 * dense / factCount) + "% matched by meaning" : "-"],
-      ["Tokens delivered", compact(delivered), recalls.length + tools.length ? "\u2248 " + num(delivered / (recalls.length + tools.length)) + " per event" : "-"],
+      ["Tokens added to context", compact(injected + returned), compact(injected) + " by hooks, " + compact(returned) + " by MCP tools"],
+      ["Tokens kept out (measured)", compact(avoided), guards.length ? guards.length + " large read" + (guards.length === 1 ? "" : "s") + " replaced by an outline" : "no large reads blocked"],
       ["MCP tool calls", num(tools.length), tools.length ? new Set(tools.map(function (e) { return e.name; })).size + " distinct tools" : "-"],
       ["Recall latency", lat.length ? ms(pct(lat, 0.5)) : "-", lat.length ? "p95 " + ms(pct(lat, 0.95)) : "-"],
       ["Memories saved", num(saved), captures.length + " capture" + (captures.length === 1 ? "" : "s")],
@@ -2834,6 +2826,7 @@ th.n { text-align: right; }
         (e.ok ? "" : '<span class="chip err">' + esc(d.dropped || "dropped") + "</span>") + "</div>" +
         (facts.length ? "<ul>" + facts.map(function (f) { return "<li>" + esc(f) + "</li>"; }).join("") + "</ul>" : '<div class="none">No new facts: nothing matched, or already sent this session.</div>') +
         (d.files && d.files.length ? '<div class="meta">files: ' + d.files.map(esc).join(", ") + "</div>" : "") +
+        (d.block ? '<details><summary>What the agent received</summary><pre>' + esc(d.block) + "</pre></details>" : "") +
         "</div>";
     }).join("");
   }
@@ -2858,6 +2851,7 @@ th.n { text-align: right; }
     var d = e.detail || {};
     if (e.kind === "recall") return (d.facts ? d.facts.length : 0) + " fact(s), " + (d.files ? d.files.length : 0) + " file(s)";
     if (e.kind === "capture") return (d.saved || 0) + " saved, " + (d.queued || 0) + " queued, " + (d.changedFiles || 0) + " changed file(s)";
+    if (e.kind === "guard") return "denied " + (d.file || "a large read") + ", \u2248" + num(d.avoided || 0) + " tokens kept out";
     if (e.kind === "sync") return (d.imported || 0) + " new, " + (d.updated || 0) + " updated" + (d.reembedding ? ", " + d.reembedding + " re-embedding" : "");
     return e.session ? "session " + e.session.slice(0, 12) : "";
   }
@@ -3082,13 +3076,13 @@ function registerDashboardCommand(program, runSafely2) {
 import pc5 from "picocolors";
 
 // src/eval/runner.ts
-import { readFile as readFile12 } from "fs/promises";
-import { dirname as dirname10, isAbsolute, join as join14, resolve as resolve11 } from "path";
+import { readFile as readFile11 } from "fs/promises";
+import { dirname as dirname10, isAbsolute, join as join13, resolve as resolve11 } from "path";
 async function runEvaluation(input = {}) {
   const datasetPath = resolve11(
-    input.datasetPath ?? join14(process.cwd(), "evals", "change-readiness.json")
+    input.datasetPath ?? join13(process.cwd(), "evals", "change-readiness.json")
   );
-  const dataset = JSON.parse(await readFile12(datasetPath, "utf8"));
+  const dataset = JSON.parse(await readFile11(datasetPath, "utf8"));
   if (dataset.version !== 1 || !Array.isArray(dataset.cases)) {
     throw new Error(`Unsupported evaluation dataset: ${datasetPath}`);
   }
@@ -3197,7 +3191,7 @@ function registerHooksCommands(program, runSafely2) {
       console.log(
         `${changed ? pc7.green("installed") : pc7.dim("unchanged")} CodeBuddy hooks in ${where}`
       );
-      await reconcileRules(client, "hooks");
+      await reconcileRules(client, "hooks", { create: true });
       warnIfHookCommandStale();
       syncInBackground(process.cwd(), true);
       console.log(
@@ -3279,7 +3273,7 @@ function registerHooksCommands(program, runSafely2) {
   });
   hooks.command("reset").description("[hook] Forget what context was sent this session (after compaction or /clear).").action(async () => {
     await failSoft(async () => {
-      await runResetHook(await readHookInput());
+      await runResetHook(await readHookInput(), writeStdout);
     });
   });
 }
@@ -3293,12 +3287,16 @@ function assertHookClient(value) {
   }
   return client;
 }
-async function reconcileRules(client, mode) {
-  const result = await installWorkflowRules({ client, mode, onlyIfManaged: true });
+async function reconcileRules(client, mode, options = {}) {
+  const result = await installWorkflowRules({
+    client,
+    mode,
+    ...options.create ? {} : { onlyIfManaged: true }
+  });
   if (result.action !== "unchanged") {
     const where = relative2(process.cwd(), result.path) || result.path;
     console.log(
-      `${pc7.cyan("updated")} ${where} workflow to ${mode === "hooks" ? "hook" : "agent"}-driven mode`
+      `${pc7.cyan(result.action === "created" ? "added" : "updated")} ${where} workflow (${mode === "hooks" ? "hook" : "agent"}-driven mode)`
     );
   }
 }
@@ -3458,15 +3456,27 @@ function registerLlmCommands(program, runSafely2) {
 }
 
 // src/cli/commands/indexing.ts
+var VECTOR_BUDGET_MS = 10 * 6e4;
 function registerIndexCommands(program, runSafely2) {
-  program.command("index").option("--full", "Re-summarize every file, ignoring existing content hashes.").option("--json", "Print machine-readable JSON.").description("Index the repository: content hashes and lightweight file summaries.").action(async (opts) => {
+  program.command("index").option("--full", "Re-summarize every file, ignoring existing content hashes.").option("--json", "Print machine-readable JSON.").option("--no-vectors", "Skip embedding source files for task \u2192 file ordering.").description("Index the repository: content hashes and lightweight file summaries.").action(async (opts) => {
     await runSafely2(async () => {
       const result = await indexRepository({ ...opts.full ? { full: true } : {} });
+      const local = opts.vectors && (await loadRuntimeConfig(process.cwd(), { requireDatabase: false }).catch(() => null))?.provider.type === "local";
+      const vectors = local ? await syncFileVectors(process.cwd(), VECTOR_BUDGET_MS) : null;
       if (opts.json) {
-        console.log(JSON.stringify(result, null, 2));
+        console.log(JSON.stringify({ ...result, ...vectors ? { vectors } : {} }, null, 2));
         return;
       }
       printResult(result);
+      if (vectors) {
+        console.log(
+          pc9.dim(
+            `  file vectors: ${vectors.embedded} embedded, ${vectors.files} current` + (vectors.pending > 0 ? `, ${vectors.pending} left for the next run` : "")
+          )
+        );
+      } else if (local) {
+        console.log(pc9.dim("  file vectors: skipped (local embedding runtime not available)"));
+      }
     });
   });
   program.command("watch").option("--debounce <ms>", "Coalesce file-change bursts within this window.", Number).option("--no-llm", "Do not write BYOK model summaries after index passes.").description("Watch the repository and incrementally re-index on change (Ctrl+C to stop).").action(async (opts) => {
@@ -3862,7 +3872,7 @@ function openEditor(path) {
 
 // src/cli/commands/models.ts
 import { existsSync as existsSync3 } from "fs";
-import { join as join15 } from "path";
+import { join as join14 } from "path";
 import { spinner as spinner2 } from "@clack/prompts";
 import pc13 from "picocolors";
 
@@ -4111,12 +4121,15 @@ async function calibrateEmbedder(embed) {
     (_, i) => at(Math.round((0.05 + i * 0.01) * 100) / 100, "dev")
   );
   const best = sweep.reduce((left, right) => right.f05 > left.f05 ? right : left);
+  const f2 = ({ precision, recall }) => precision + recall === 0 ? 0 : 5 * precision * recall / (4 * precision + recall);
+  const recallBest = sweep.reduce((left, right) => f2(right) > f2(left) ? right : left);
   return {
     auc,
     recallAt1: answered === 0 ? 0 : hits / answered,
     mrr: answered === 0 ? 0 : reciprocal / answered,
     best,
     test: at(best.floor, "test"),
+    recall: { dev: recallBest, test: at(recallBest.floor, "test") },
     at
   };
 }
@@ -4144,8 +4157,8 @@ function keyPresent(provider, apiKey) {
   return Boolean(process.env[KEY_ENV2[provider]] || provider === "huggingface" && apiKey);
 }
 function localModelDownloaded(id, revision) {
-  const dir = join15(modelCacheDir(), id, ...revision ? [revision] : []);
-  return existsSync3(join15(dir, "onnx", "model_quantized.onnx"));
+  const dir = join14(modelCacheDir(), id, ...revision ? [revision] : []);
+  return existsSync3(join14(dir, "onnx", "model_quantized.onnx"));
 }
 async function vectorCounts(postgresUrl, namespace, space) {
   const client = createDatabaseClient({ postgresUrl, maxConnections: 1, connectTimeoutSeconds: 3 });
@@ -4358,7 +4371,7 @@ before keeping one on. A reranker never admits a fact, it only orders them.`
   });
   models.command("pull").description("Download the local models now instead of on first use.").action(async () => {
     await runSafely2(async () => {
-      const { LocalModelProvider, rerankLocally } = await import("./local-5MZURLCZ.js");
+      const { LocalModelProvider, rerankLocally } = await import("./local-ST4WMRCG.js");
       const file = await readConfigFile();
       let started = Date.now();
       await withSpinner(
@@ -4403,13 +4416,24 @@ before keeping one on. A reranker never admits a fact, it only orders them.`
           `${result.best.floor}: precision ${pct(result.test.precision)}, recall ${pct(result.test.recall)}, silent on ${pct(result.test.abstain)} of unrelated tasks ${pc13.dim("(chosen on dev, measured on test)")}`
         )
       );
+      console.log(
+        row(
+          "recall floor",
+          `${result.recall.dev.floor}: precision ${pct(result.recall.test.precision)}, recall ${pct(result.recall.test.recall)} ` + pc13.dim("(explicit recall: best F2 on dev, measured on test)")
+        )
+      );
       if (opts.dryRun) return;
       const file = await readConfigFile();
       await setConfigBlock("provider", {
         ...file.provider ?? { type: config.provider.type },
-        relevanceFloor: result.best.floor
+        relevanceFloor: result.best.floor,
+        recallFloor: result.recall.dev.floor
       });
-      console.log(ok(`Saved relevanceFloor ${result.best.floor} to .codebuddy/config.json`));
+      console.log(
+        ok(
+          `Saved relevanceFloor ${result.best.floor} and recallFloor ${result.recall.dev.floor} to .codebuddy/config.json`
+        )
+      );
     });
   });
 }
@@ -4809,7 +4833,7 @@ function severityBadge2(severity) {
 }
 
 // src/cli/commands/symbols.ts
-import { readFile as readFile13 } from "fs/promises";
+import { readFile as readFile12 } from "fs/promises";
 import { resolve as resolve12 } from "path";
 import pc18 from "picocolors";
 function registerSymbolsCommand(program, runSafely2) {
@@ -4819,8 +4843,8 @@ function registerSymbolsCommand(program, runSafely2) {
         console.log(pc18.dim(`no symbol extraction for ${path} (unsupported language)`));
         return;
       }
-      const content = await readFile13(resolve12(path), "utf8");
-      const table = extractSymbolTable(content);
+      const content = await readFile12(resolve12(path), "utf8");
+      const table = extractSymbolTable(content, path);
       if (opts.json) {
         console.log(JSON.stringify({ path, symbols: table }, null, 2));
         return;
@@ -4847,9 +4871,9 @@ import { confirm as confirm2, isCancel as isCancel2, log as log2, note as note2,
 import pc19 from "picocolors";
 
 // src/core/global-config.ts
-import { chmod, mkdir as mkdir8, readFile as readFile14, writeFile as writeFile3 } from "fs/promises";
+import { chmod, mkdir as mkdir8, readFile as readFile13, writeFile as writeFile3 } from "fs/promises";
 import { homedir as homedir3 } from "os";
-import { dirname as dirname11, join as join16 } from "path";
+import { dirname as dirname11, join as join15 } from "path";
 import { z as z2 } from "zod";
 var GLOBAL_DIR = ".codebuddy";
 var GLOBAL_FILE = "global.json";
@@ -4862,12 +4886,12 @@ var globalConfigSchema = z2.object({
   installPath: z2.string().optional()
 });
 function globalConfigPath(home = homedir3()) {
-  return join16(home, GLOBAL_DIR, GLOBAL_FILE);
+  return join15(home, GLOBAL_DIR, GLOBAL_FILE);
 }
 async function readGlobalConfig(home = homedir3()) {
   const path = globalConfigPath(home);
   try {
-    const raw = await readFile14(path, "utf8");
+    const raw = await readFile13(path, "utf8");
     return globalConfigSchema.parse(JSON.parse(raw));
   } catch (error) {
     if (error.code === "ENOENT") return {};
@@ -4916,16 +4940,17 @@ async function runUseCommand(options = {}) {
   const sigintHandler = () => bail2();
   process.on("SIGINT", sigintHandler);
   try {
+    const interactive = options.interactive ?? process.stdin.isTTY === true;
     const folderName = basename2(process.cwd());
     const namespace = sanitizeNamespace(options.namespace ?? folderName);
     await initProjectScaffold();
     if (options.namespace === void 0) await migrateLegacyNamespace();
-    const graphifyEnabled = options.graphify ?? unwrap2(
+    const graphifyEnabled = options.graphify ?? (interactive && unwrap2(
       await confirm2({
         message: "Set up Graphify for richer architecture context?",
         initialValue: true
       })
-    );
+    ));
     note2(
       `Project folder: ${pc19.bold(process.cwd())}
 Namespace:      ${pc19.bold(namespace)}`,
@@ -4936,6 +4961,8 @@ Namespace:      ${pc19.bold(namespace)}`,
     let embeddings = projectConfig.provider?.type;
     if (embeddings) {
       log2.info(`Embeddings: ${embeddings} (change with ${pc19.cyan("codebuddy models use")}).`);
+    } else if (!interactive) {
+      embeddings = "local";
     } else {
       embeddings = unwrap2(
         await select({
@@ -4975,6 +5002,10 @@ Namespace:      ${pc19.bold(namespace)}`,
     } else if (stored.hfToken) {
       hfToken = stored.hfToken;
       log2.info(`Reusing saved Hugging Face token (${pc19.dim("~/.codebuddy/global.json")}).`);
+    } else if (!interactive) {
+      throw new Error(
+        "Hugging Face embeddings need a token: set HF_TOKEN (no terminal to prompt for it)."
+      );
     } else {
       hfToken = unwrap2(
         await password2({
@@ -4984,13 +5015,13 @@ Namespace:      ${pc19.bold(namespace)}`,
       if (!hfToken) log2.warn("No token: hosted embeddings will fail until HF_TOKEN is set.");
     }
     const initialUrl = options.postgresUrl ?? process.env.DATABASE_URL ?? stored.databaseUrl ?? DEFAULT_DB_URL;
-    const databaseUrl = unwrap2(
+    const databaseUrl = options.postgresUrl ?? (interactive ? unwrap2(
       await text2({
         message: "Postgres URL (press Enter to accept)",
         initialValue: initialUrl,
         validate: (value) => value && value.length > 0 ? void 0 : "Postgres URL is required."
       })
-    );
+    ) : initialUrl);
     const dbSpinner = spinner3();
     dbSpinner.start("Checking Postgres");
     let connected = await pingOnce2(databaseUrl);
@@ -4998,12 +5029,12 @@ Namespace:      ${pc19.bold(namespace)}`,
     if (!connected && databaseUrl === DEFAULT_DB_URL) {
       dbSpinner.stop("Postgres unreachable on the default local URL.");
     }
-    const shouldUseDocker = !connected && databaseUrl === DEFAULT_DB_URL && (options.useDocker ?? unwrap2(
+    const shouldUseDocker = !connected && databaseUrl === DEFAULT_DB_URL && (options.useDocker ?? (interactive && unwrap2(
       await confirm2({
         message: "Postgres is unavailable. Start the bundled Docker database now?",
         initialValue: true
       })
-    ));
+    )));
     if (shouldUseDocker) {
       if (!await isDockerDaemonRunning()) {
         const dockerSpinner = spinner3();
@@ -5038,7 +5069,7 @@ Namespace:      ${pc19.bold(namespace)}`,
     } else if (!connected) {
       dbSpinner.stop(connected ? "Postgres reachable." : "Postgres unreachable at this URL.");
       log2.warn(
-        "Local Postgres is required. Start it, set DATABASE_URL, pass --postgres-url, or allow the bundled Docker database."
+        "Local Postgres is required. Start it, set DATABASE_URL, pass --postgres-url, or allow the bundled Docker database (--docker)."
       );
       bail2();
     }
@@ -5244,9 +5275,7 @@ function registerZvecCommands(program, runSafely2) {
         ...opts.rebuild ? { rebuild: true } : {}
       });
       if (code !== 0) throw new Error(`zg index exited with code ${code}`);
-      console.log(
-        pc21.dim("tip: add .zvec-grep/ to .gitignore; enable with `codebuddy zvec enable`")
-      );
+      console.log(pc21.dim("next: codebuddy zvec enable (.zvec-grep/ ignores itself in git)"));
     });
   });
   zvec.command("enable").description("Use zvec-grep candidates in context_pack / context_before_edit.").action(async () => {
@@ -5281,7 +5310,7 @@ function createCli() {
   ).argument("[namespace]", "Override the namespace (defaults to current folder name).").option("--postgres-url <url>", "Postgres URL to use for this project.").option("--skip-claude", "Do not register with Claude Desktop.").option("--skip-codex", "Do not register with Codex.").option("--graphify", "Enable Graphify setup without prompting.").option("--no-graphify", "Skip Graphify setup without prompting.").option(
     "--docker",
     "Start CodeBuddy's bundled Postgres container when the default DB is unavailable."
-  ).option("--no-docker", "Do not offer to start CodeBuddy's bundled Postgres container.").action(
+  ).option("--no-docker", "Do not offer to start CodeBuddy's bundled Postgres container.").option("-y, --yes", "Never prompt: use flags and defaults (automatic without a TTY).").option("--non-interactive", "Same as --yes.").action(
     async (namespace, opts) => {
       await runSafely(async () => {
         await runUseCommand({
@@ -5290,7 +5319,8 @@ function createCli() {
           ...opts.skipClaude !== void 0 ? { skipClaude: opts.skipClaude } : {},
           ...opts.skipCodex !== void 0 ? { skipCodex: opts.skipCodex } : {},
           ...opts.graphify !== void 0 ? { graphify: opts.graphify } : {},
-          ...opts.docker !== void 0 ? { useDocker: opts.docker } : {}
+          ...opts.docker !== void 0 ? { useDocker: opts.docker } : {},
+          ...opts.yes || opts.nonInteractive ? { interactive: false } : {}
         });
       });
     }
@@ -5705,4 +5735,4 @@ function printDbDoctor(report) {
 export {
   createCli
 };
-//# sourceMappingURL=main-MTBQZGJV.js.map
+//# sourceMappingURL=main-AHNGHC4L.js.map