@vibgrate/cli 2026.704.3 → 2026.708.2

package/dist/{chunk-WHQRV66O.js → chunk-GHLYQZWT.js}

@@ -1,4 +1,4 @@
-import { runCoreScan, writeJsonFile } from './chunk-YN5OGRWU.js';
+import { runCoreScan, writeJsonFile } from './chunk-ICBBG6U3.js';
 import * as path from 'path';
 import { Command } from 'commander';
 import chalk from 'chalk';
@@ -27,5 +27,5 @@ var baselineCommand = new Command("baseline").description("Create a drift baseli
 });
 
 export { baselineCommand, loadAdvancedScanHook, runBaseline };
-//# sourceMappingURL=chunk-WHQRV66O.js.map
-//# sourceMappingURL=chunk-WHQRV66O.js.map
+//# sourceMappingURL=chunk-GHLYQZWT.js.map
+//# sourceMappingURL=chunk-GHLYQZWT.js.map

package/dist/{chunk-WHQRV66O.js.map → chunk-GHLYQZWT.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/reporting/advanced-hook.ts","../src/reporting/commands/baseline.ts"],"names":[],"mappings":";;;;;;AAUA,eAAsB,oBAAA,GAA8D;AAClF,EAAA,OAAO,MAAA;AACT;;;ACLA,eAAsB,YAAY,OAAA,EAAgC;AAChE,EAAA,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,GAAA,CAAI,sBAAsB,CAAC,CAAA;AAE7C,EAAA,MAAM,QAAA,GAAW,MAAM,oBAAA,EAAqB;AAC5C,EAAA,MAAM,QAAA,GAAW,MAAM,WAAA,CAAY,OAAA,EAAS;AAAA,IAC1C,MAAA,EAAQ,MAAA;AAAA,IACR,WAAA,EAAa;AAAA,KACZ,QAAQ,CAAA;AAEX,EAAA,MAAM,YAAA,GAAoB,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,WAAA,EAAa,eAAe,CAAA;AACpE,EAAA,MAAM,aAAA,CAAc,cAAc,QAAQ,CAAA;AAC1C,EAAA,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,KAAA,CAAM,QAAG,CAAA,GAAI,sBAAsB,KAAA,CAAM,IAAA,CAAK,yBAAyB,CAAC,CAAA,CAAE,CAAA;AAC5F,EAAA,OAAA,CAAQ,GAAA,CAAI,MAAM,GAAA,CAAI,CAAA,kBAAA,EAAqB,SAAS,KAAA,CAAM,KAAK,MAAM,CAAC,CAAA;AACxE;AAEO,IAAM,eAAA,GAAkB,IAAI,OAAA,CAAQ,UAAU,EAClD,WAAA,CAAY,kCAAkC,CAAA,CAC9C,QAAA,CAAS,UAAU,kBAAA,EAAoB,GAAG,CAAA,CAC1C,MAAA,CAAO,OAAO,UAAA,KAAuB;AACpC,EAAA,MAAM,OAAA,GAAe,aAAQ,UAAU,CAAA;AACvC,EAAA,MAAM,YAAY,OAAO,CAAA;AAC3B,CAAC","file":"chunk-WHQRV66O.js","sourcesContent":["import type { AdvancedScanHook } from '../core-open/index.js';\n\n/**\n * Open build: there is no proprietary advanced-analysis hook.\n *\n * In the public, Apache-2.0 distribution every reporting command runs purely on\n * the open base engine (`runCoreScan` from `@vibgrate/core-open`). This shim\n * keeps the call sites in `scan`/`baseline` unchanged while always resolving to\n * `undefined`, so the scan falls back to the open base engine.\n */\nexport async function loadAdvancedScanHook(): Promise<AdvancedScanHook | undefined> {\n  return undefined;\n}\n","import * as path from 'node:path';\nimport { Command } from 'commander';\nimport chalk from 'chalk';\nimport { runCoreScan } from '../../core-open/index.js';\nimport { writeJsonFile } from '../utils/fs.js';\nimport { loadAdvancedScanHook } from '../advanced-hook.js';\n\nexport async function runBaseline(rootDir: string): Promise<void> {\n  console.log(chalk.dim('Creating baseline...'));\n\n  const advanced = await loadAdvancedScanHook();\n  const artifact = await runCoreScan(rootDir, {\n    format: 'text',\n    concurrency: 8,\n  }, advanced);\n\n  const baselinePath = path.join(rootDir, '.vibgrate', 'baseline.json');\n  await writeJsonFile(baselinePath, artifact);\n  console.log(chalk.green('✔') + ` Baseline saved to ${chalk.bold('.vibgrate/baseline.json')}`);\n  console.log(chalk.dim(`  Baseline score: ${artifact.drift.score}/100`));\n}\n\nexport const baselineCommand = new Command('baseline')\n  .description('Create a drift baseline snapshot')\n  .argument('[path]', 'Path to baseline', '.')\n  .action(async (targetPath: string) => {\n    const rootDir = path.resolve(targetPath);\n    await runBaseline(rootDir);\n  });\n"]}
+{"version":3,"sources":["../src/reporting/advanced-hook.ts","../src/reporting/commands/baseline.ts"],"names":[],"mappings":";;;;;;AAUA,eAAsB,oBAAA,GAA8D;AAClF,EAAA,OAAO,MAAA;AACT;;;ACLA,eAAsB,YAAY,OAAA,EAAgC;AAChE,EAAA,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,GAAA,CAAI,sBAAsB,CAAC,CAAA;AAE7C,EAAA,MAAM,QAAA,GAAW,MAAM,oBAAA,EAAqB;AAC5C,EAAA,MAAM,QAAA,GAAW,MAAM,WAAA,CAAY,OAAA,EAAS;AAAA,IAC1C,MAAA,EAAQ,MAAA;AAAA,IACR,WAAA,EAAa;AAAA,KACZ,QAAQ,CAAA;AAEX,EAAA,MAAM,YAAA,GAAoB,IAAA,CAAA,IAAA,CAAK,OAAA,EAAS,WAAA,EAAa,eAAe,CAAA;AACpE,EAAA,MAAM,aAAA,CAAc,cAAc,QAAQ,CAAA;AAC1C,EAAA,OAAA,CAAQ,GAAA,CAAI,KAAA,CAAM,KAAA,CAAM,QAAG,CAAA,GAAI,sBAAsB,KAAA,CAAM,IAAA,CAAK,yBAAyB,CAAC,CAAA,CAAE,CAAA;AAC5F,EAAA,OAAA,CAAQ,GAAA,CAAI,MAAM,GAAA,CAAI,CAAA,kBAAA,EAAqB,SAAS,KAAA,CAAM,KAAK,MAAM,CAAC,CAAA;AACxE;AAEO,IAAM,eAAA,GAAkB,IAAI,OAAA,CAAQ,UAAU,EAClD,WAAA,CAAY,kCAAkC,CAAA,CAC9C,QAAA,CAAS,UAAU,kBAAA,EAAoB,GAAG,CAAA,CAC1C,MAAA,CAAO,OAAO,UAAA,KAAuB;AACpC,EAAA,MAAM,OAAA,GAAe,aAAQ,UAAU,CAAA;AACvC,EAAA,MAAM,YAAY,OAAO,CAAA;AAC3B,CAAC","file":"chunk-GHLYQZWT.js","sourcesContent":["import type { AdvancedScanHook } from '../core-open/index.js';\n\n/**\n * Open build: there is no proprietary advanced-analysis hook.\n *\n * In the public, Apache-2.0 distribution every reporting command runs purely on\n * the open base engine (`runCoreScan` from `@vibgrate/core-open`). This shim\n * keeps the call sites in `scan`/`baseline` unchanged while always resolving to\n * `undefined`, so the scan falls back to the open base engine.\n */\nexport async function loadAdvancedScanHook(): Promise<AdvancedScanHook | undefined> {\n  return undefined;\n}\n","import * as path from 'node:path';\nimport { Command } from 'commander';\nimport chalk from 'chalk';\nimport { runCoreScan } from '../../core-open/index.js';\nimport { writeJsonFile } from '../utils/fs.js';\nimport { loadAdvancedScanHook } from '../advanced-hook.js';\n\nexport async function runBaseline(rootDir: string): Promise<void> {\n  console.log(chalk.dim('Creating baseline...'));\n\n  const advanced = await loadAdvancedScanHook();\n  const artifact = await runCoreScan(rootDir, {\n    format: 'text',\n    concurrency: 8,\n  }, advanced);\n\n  const baselinePath = path.join(rootDir, '.vibgrate', 'baseline.json');\n  await writeJsonFile(baselinePath, artifact);\n  console.log(chalk.green('✔') + ` Baseline saved to ${chalk.bold('.vibgrate/baseline.json')}`);\n  console.log(chalk.dim(`  Baseline score: ${artifact.drift.score}/100`));\n}\n\nexport const baselineCommand = new Command('baseline')\n  .description('Create a drift baseline snapshot')\n  .argument('[path]', 'Path to baseline', '.')\n  .action(async (targetPath: string) => {\n    const rootDir = path.resolve(targetPath);\n    await runBaseline(rootDir);\n  });\n"]}

package/dist/{chunk-YN5OGRWU.js → chunk-ICBBG6U3.js}

@@ -20,7 +20,7 @@ import * as zlib from 'zlib';
 import { promisify } from 'util';
 
 // src/version.ts
-var VERSION = "2026.704.3";
+var VERSION = "2026.708.2";
 var TOP_LEVEL_NODE_MODULES = /^node_modules\/((?:@[^/]+\/)?[^/]+)$/;
 function parsePackageLock(json) {
   const out = /* @__PURE__ */ new Map();
@@ -6932,12 +6932,16 @@ var ANSI_SGR = /\[[0-9;]*m/g;
 function visibleLength(s) {
   return s.replace(ANSI_SGR, "").length;
 }
-function panelBox(title, body, color = chalk3.cyan, width = BOX_WIDTH) {
+function panelBox(title, body, color = chalk3.cyan, minWidth = BOX_WIDTH) {
   const out = [];
+  const indent = 1;
   const titleSegment = ` ${title} `;
+  const width = body.reduce(
+    (w, line) => Math.max(w, visibleLength(line) + indent),
+    Math.max(minWidth, titleSegment.length + 2)
+  );
   const dashes = Math.max(width - 1 - titleSegment.length, 0);
   out.push(color("\u256D\u2500") + chalk3.bold.white(titleSegment) + color("\u2500".repeat(dashes) + "\u256E"));
-  const indent = 1;
   for (const line of body) {
     const pad = Math.max(width - indent - visibleLength(line), 0);
     out.push(color("\u2502") + " ".repeat(indent) + line + " ".repeat(pad) + color("\u2502"));
@@ -7031,9 +7035,9 @@ function formatText(artifact, opts = {}) {
     lines.push("");
   }
   const scoreColor = artifact.drift.score <= 30 ? chalk3.green : artifact.drift.score <= 60 ? chalk3.yellow : chalk3.red;
-  lines.push(...titleBox("Drift Score Summary"));
+  lines.push(...titleBox("DriftScore Summary"));
   lines.push("");
-  lines.push(chalk3.bold("  Drift Score:  ") + scoreColor.bold(`${artifact.drift.score}/100`));
+  lines.push(chalk3.bold("  DriftScore:   ") + scoreColor.bold(`${artifact.drift.score}/100`));
   lines.push(chalk3.bold("  Risk Level:   ") + riskBadge(artifact.drift.riskLevel));
   lines.push(chalk3.bold("  Projects:     ") + `${artifact.projects.length}`);
   const billing = artifact.billing;
@@ -7094,7 +7098,11 @@ function formatText(artifact, opts = {}) {
   lines.push(chalk3.dim(`  ${scannedParts.join(" \xB7 ")}`));
   lines.push("");
   if (opts.free && artifact.billing) {
-    lines.push(...renderUpsellPanel(artifact.billing, opts.invocation ?? "vg"));
+    lines.push(...renderUpsellPanel(artifact.billing, {
+      authenticated: opts.authenticated === true,
+      invocation: opts.invocation ?? "vg",
+      upgradeUrl: opts.upgradeUrl ?? "https://dash.vibgrate.com"
+    }));
     lines.push("");
   }
   return lines.join("\n");
@@ -7118,27 +7126,44 @@ function estimateMonthly(billableProjects, rates) {
 function formatMoney(value) {
   return value === Math.floor(value) ? `$${value}` : `$${value.toFixed(2)}`;
 }
-function renderUpsellPanel(billing, invocation) {
+function renderUpsellPanel(billing, opts) {
   const raw = billing.billableProjectsRaw;
   const team = estimateMonthly(raw, PRICE_RATES.team);
   const business = estimateMonthly(raw, PRICE_RATES.business);
   const rawLabel = formatBillable(raw);
-  const body = [
+  const intro = opts.authenticated ? [
+    `You're on Vibgrate Free \u2014 your scans are tracked on`,
+    `Vibgrate Cloud, capped at the free plan's limits.`
+  ] : [
     `You're on Vibgrate Free \u2014 this scan ran locally and`,
-    `isn't tracked over time.`,
+    `isn't tracked over time.`
+  ];
+  const costLead = opts.authenticated ? `On Team or Business, this repo would cost:` : `Tracked monthly on Vibgrate Cloud, this repo would cost:`;
+  const addsLead = opts.authenticated ? `Upgrading adds:` : `Vibgrate Cloud adds:`;
+  const adds = opts.authenticated ? [
+    `  ${chalk3.cyan("\u2022")} More repositories and pushed scans`,
+    `  ${chalk3.cyan("\u2022")} Scheduled scans that run automatically \u2014 no CI wiring`,
+    `  ${chalk3.cyan("\u2022")} Alerts when drift crosses the budget you set`
+  ] : [
+    `  ${chalk3.cyan("\u2022")} DriftScore tracked over time \u2014 trends, not snapshots`,
+    `  ${chalk3.cyan("\u2022")} Scheduled scans that run automatically \u2014 no CI wiring`,
+    `  ${chalk3.cyan("\u2022")} Alerts when drift crosses the budget you set`
+  ];
+  const capacityLine = opts.authenticated ? `Free plan: 1 repository, 5 pushed scans / month.` : `Free forever: 1 repository, 5 pushed scans / month.`;
+  const cta = opts.authenticated ? `${chalk3.bold("More on Team or Business:")}  ${chalk3.cyan(opts.upgradeUrl)}` : `${chalk3.bold("Start tracking:")}  ${chalk3.cyan(`${opts.invocation} login`)}  \u2192  ${chalk3.cyan(`${opts.invocation} push`)}`;
+  const body = [
+    ...intro,
     ``,
-    chalk3.bold(`Tracked monthly on Vibgrate Cloud, this repo would cost:`),
+    chalk3.bold(costLead),
     `  ${chalk3.bold("Team")}       ${chalk3.bold.white(formatMoney(team))} / mo`,
     `  ${chalk3.bold("Business")}   ${chalk3.bold.white(formatMoney(business))} / mo`,
     chalk3.dim(`  (${rawLabel} billable project${raw === 1 ? "" : "s"}, banded per-project pricing)`),
     ``,
-    chalk3.bold(`Vibgrate Cloud adds:`),
-    `  ${chalk3.cyan("\u2022")} DriftScore tracked over time \u2014 trends, not snapshots`,
-    `  ${chalk3.cyan("\u2022")} Scheduled scans that run automatically \u2014 no CI wiring`,
-    `  ${chalk3.cyan("\u2022")} Alerts when drift crosses the budget you set`,
+    chalk3.bold(addsLead),
+    ...adds,
     ``,
-    chalk3.dim(`Free forever: 1 repository, 5 pushed scans / month.`),
-    `${chalk3.bold("Start tracking:")}  ${chalk3.cyan(`${invocation} login`)}  \u2192  ${chalk3.cyan(`${invocation} push`)}`
+    chalk3.dim(capacityLine),
+    cta
   ];
   return panelBox("KEEP TRACKING YOUR DRIFTSCORE", body, chalk3.hex("#3FB0A4"), 60);
 }
@@ -7703,7 +7728,7 @@ function formatMarkdown(artifact) {
   lines.push("");
   lines.push(`| Metric | Value |`);
   lines.push(`|--------|-------|`);
-  lines.push(`| **Drift Score** | ${artifact.drift.score}/100 |`);
+  lines.push(`| **DriftScore** | ${artifact.drift.score}/100 |`);
   lines.push(`| **Risk Level** | ${artifact.drift.riskLevel.toUpperCase()} |`);
   lines.push(`| **Projects** | ${artifact.projects.length} |`);
   if (billing) {
@@ -8202,7 +8227,7 @@ var ROBOT = [
 function getBrand(version) {
   return [
     chalk3.bold.white("  V I B G R A T E"),
-    chalk3.dim(`  Drift Intelligence Engine`) + chalk3.dim(` v${version}`)
+    chalk3.dim(`  Code Intelligence Engine`) + chalk3.dim(` v${version}`)
   ];
 }
 var SPINNER_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
@@ -10662,7 +10687,15 @@ async function runCoreScan(rootDir, opts, advanced) {
       await writeTextFile(path29.resolve(opts.out), markdown);
     }
   } else {
-    const text = formatText(artifact, { free: !parsedDsn && !opts.quiet, invocation: opts.invocation });
+    const authenticated = opts.authenticated ?? !!parsedDsn;
+    const freePlan = opts.planTier === "free";
+    const showUpsell = !opts.quiet && (!authenticated || freePlan);
+    const text = formatText(artifact, {
+      free: showUpsell,
+      authenticated,
+      invocation: opts.invocation,
+      upgradeUrl: opts.upgradeUrl
+    });
     console.log(text);
     if (opts.out) {
       await writeTextFile(path29.resolve(opts.out), text);
@@ -11384,6 +11417,6 @@ async function writeTextFile2(filePath, content) {
   await fs2.writeFile(filePath, content, "utf8");
 }
 
-export { VERSION, brandProgressBar, buildVersionTimelines, computeRepoFingerprint, computeUpgradeImpact, detectVcs, driftBar, ensureDir2 as ensureDir, fetchScanPreflight, findPackageAnyEcosystem, findPackageTimeline, findVersionCrossings, getChangelogSignals, gitHistoryAvailable, normalizeConstraint, parseDsn, pathExists2 as pathExists, prepareCompressedUpload, projectTypeToVulnEcosystem, readJsonFile2 as readJsonFile, resolveRepositoryName, runCoreScan, severityRank, titleBox, versionSatisfies, writeDefaultConfig, writeJsonFile2 as writeJsonFile, writeTextFile2 as writeTextFile };
-//# sourceMappingURL=chunk-YN5OGRWU.js.map
-//# sourceMappingURL=chunk-YN5OGRWU.js.map
+export { VERSION, brandProgressBar, buildVersionTimelines, computeDriftScore, computeRepoFingerprint, computeUpgradeImpact, detectVcs, driftBar, ensureDir2 as ensureDir, fetchScanPreflight, findPackageAnyEcosystem, findPackageTimeline, findVersionCrossings, getChangelogSignals, gitHistoryAvailable, normalizeConstraint, parseDsn, pathExists2 as pathExists, prepareCompressedUpload, projectTypeToVulnEcosystem, readJsonFile2 as readJsonFile, resolveHead, resolveRepositoryName, runCoreScan, severityRank, titleBox, versionSatisfies, workingTreeDirty, writeDefaultConfig, writeJsonFile2 as writeJsonFile, writeTextFile2 as writeTextFile };
+//# sourceMappingURL=chunk-ICBBG6U3.js.map
+//# sourceMappingURL=chunk-ICBBG6U3.js.map