@vibgrate/cli 2026.710.1 → 2026.711.2

package/dist/{chunk-ZNCJZVNT.js → chunk-NNU2PW2H.js}

@@ -13,14 +13,13 @@ import { readFile, mkdir, writeFile, mkdtemp, rm } from 'fs/promises';
 import { XMLParser } from 'fast-xml-parser';
 import { parse as parse$1 } from 'smol-toml';
 import * as crypto from 'crypto';
-import ts from 'typescript';
 import * as fs5 from 'fs';
 import { mkdirSync, writeFileSync } from 'fs';
 import * as zlib from 'zlib';
 import { promisify } from 'util';
 
 // src/version.ts
-var VERSION = "2026.710.1";
+var VERSION = "2026.711.2";
 var TOP_LEVEL_NODE_MODULES = /^node_modules\/((?:@[^/]+\/)?[^/]+)$/;
 function parsePackageLock(json) {
   const out = /* @__PURE__ */ new Map();
@@ -1055,14 +1054,14 @@ function rank(v) {
 }
 function isReleased(cycle, now) {
   if (typeof cycle.releaseDate !== "string") return true;
-  const ts2 = Date.parse(cycle.releaseDate);
-  return Number.isNaN(ts2) ? true : ts2 <= now;
+  const ts = Date.parse(cycle.releaseDate);
+  return Number.isNaN(ts) ? true : ts <= now;
 }
 function isLts(cycle, now) {
   if (cycle.lts === true) return true;
   if (typeof cycle.lts === "string") {
-    const ts2 = Date.parse(cycle.lts);
-    return !Number.isNaN(ts2) && ts2 <= now;
+    const ts = Date.parse(cycle.lts);
+    return !Number.isNaN(ts) && ts <= now;
   }
   return false;
 }
@@ -7264,14 +7263,14 @@ function formatExtended(ext) {
     }
   }
   if (ext.tsModernity && ext.tsModernity.typescriptVersion) {
-    const ts2 = ext.tsModernity;
+    const ts = ext.tsModernity;
     lines.push(chalk3.bold.underline("  TypeScript"));
     const parts = [];
-    parts.push(`v${ts2.typescriptVersion}`);
-    if (ts2.strict === true) parts.push(chalk3.green("strict \u2714"));
-    else if (ts2.strict === false) parts.push(chalk3.yellow("strict \u2716"));
-    if (ts2.moduleType) parts.push(ts2.moduleType.toUpperCase());
-    if (ts2.target) parts.push(`target: ${ts2.target}`);
+    parts.push(`v${ts.typescriptVersion}`);
+    if (ts.strict === true) parts.push(chalk3.green("strict \u2714"));
+    else if (ts.strict === false) parts.push(chalk3.yellow("strict \u2716"));
+    if (ts.moduleType) parts.push(ts.moduleType.toUpperCase());
+    if (ts.target) parts.push(`target: ${ts.target}`);
     lines.push(`    ${parts.join(chalk3.dim(" \xB7 "))}`);
     lines.push("");
   }
@@ -7851,11 +7850,19 @@ var CONFIG_FILES = [
   "vibgrate.config.json"
 ];
 var TRUSTED_CONFIG_ENV = "VIBGRATE_TRUST_CONFIG";
+var tsPromise = null;
+function loadTypeScript() {
+  tsPromise ??= import('typescript').then((m) => {
+    const mod = m;
+    return mod.default ?? m;
+  });
+  return tsPromise;
+}
 function isRecord(value) {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
-function toStaticValue(expr, constBindings) {
-  if (ts.isParenthesizedExpression(expr)) return toStaticValue(expr.expression, constBindings);
+function toStaticValue(expr, constBindings, ts) {
+  if (ts.isParenthesizedExpression(expr)) return toStaticValue(expr.expression, constBindings, ts);
   if (ts.isStringLiteralLike(expr)) return expr.text;
   if (ts.isNumericLiteral(expr)) return Number(expr.text);
   if (expr.kind === ts.SyntaxKind.TrueKeyword) return true;
@@ -7864,7 +7871,7 @@ function toStaticValue(expr, constBindings) {
   if (ts.isArrayLiteralExpression(expr)) {
     return expr.elements.map((el) => {
       if (ts.isSpreadElement(el)) throw new Error("Spread not supported in static config arrays");
-      return toStaticValue(el, constBindings);
+      return toStaticValue(el, constBindings, ts);
     });
   }
   if (ts.isObjectLiteralExpression(expr)) {
@@ -7880,18 +7887,19 @@ function toStaticValue(expr, constBindings) {
       if (key === null) {
         throw new Error("Unsupported object key in static config");
       }
-      out[key] = toStaticValue(prop.initializer, constBindings);
+      out[key] = toStaticValue(prop.initializer, constBindings, ts);
     }
     return out;
   }
   if (ts.isIdentifier(expr)) {
     const bound = constBindings.get(expr.text);
     if (!bound) throw new Error(`Unknown identifier in static config: ${expr.text}`);
-    return toStaticValue(bound, constBindings);
+    return toStaticValue(bound, constBindings, ts);
   }
   throw new Error("Non-static expression in config");
 }
-function tryParseStaticConfig(text, configPath) {
+async function tryParseStaticConfig(text, configPath) {
+  const ts = await loadTypeScript();
   const scriptKind = configPath.endsWith(".ts") ? ts.ScriptKind.TS : ts.ScriptKind.JS;
   const source = ts.createSourceFile(configPath, text, ts.ScriptTarget.ESNext, true, scriptKind);
   const constBindings = /* @__PURE__ */ new Map();
@@ -7906,7 +7914,7 @@ function tryParseStaticConfig(text, configPath) {
   }
   for (const stmt of source.statements) {
     if (!ts.isExportAssignment(stmt)) continue;
-    const parsed = toStaticValue(stmt.expression, constBindings);
+    const parsed = toStaticValue(stmt.expression, constBindings, ts);
     if (!isRecord(parsed)) return null;
     return { ...DEFAULT_CONFIG, ...parsed };
   }
@@ -7943,7 +7951,7 @@ async function loadConfig(rootDir) {
       const txt = await readTextFile(configPath);
       let staticConfig = null;
       try {
-        staticConfig = tryParseStaticConfig(txt, configPath);
+        staticConfig = await tryParseStaticConfig(txt, configPath);
       } catch {
         staticConfig = null;
       }
@@ -8227,7 +8235,7 @@ var ROBOT = [
 function getBrand(version) {
   return [
     chalk3.bold.white("  V I B G R A T E"),
-    chalk3.dim(`  Code Intelligence Engine`) + chalk3.dim(` v${version}`)
+    chalk3.dim(`  Drift Intelligence Engine`) + chalk3.dim(` v${version}`)
   ];
 }
 var SPINNER_FRAMES = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
@@ -11314,6 +11322,48 @@ async function fetchScanPreflight(parsed, ingestHost, options) {
   }
   return body;
 }
+
+// src/core-open/utils/symbols-preflight.ts
+var PROJECT_TYPE_TO_OSV_ECOSYSTEM = {
+  node: "npm",
+  typescript: "npm",
+  dotnet: "NuGet",
+  "visual-basic": "NuGet",
+  python: "PyPI",
+  ruby: "RubyGems",
+  java: "Maven",
+  kotlin: "Maven",
+  scala: "Maven",
+  groovy: "Maven",
+  clojure: "Maven",
+  go: "Go",
+  rust: "crates.io",
+  php: "Packagist",
+  dart: "Pub",
+  elixir: "Hex"
+};
+var MAX_DEPENDENCIES = 4e3;
+async function fetchRiskySymbols(parsed, ingestHost, dependencies) {
+  const url = `${parsed.scheme}://${ingestHost}/v1/ingest/scan/preflight/symbols`;
+  const body = JSON.stringify({
+    schemaVersion: "1",
+    dependencies: dependencies.slice(0, MAX_DEPENDENCIES)
+  });
+  const response = await fetch(url, {
+    method: "POST",
+    headers: {
+      "Content-Type": "application/json",
+      "X-Vibgrate-Timestamp": String(Date.now()),
+      Authorization: `VibgrateDSN ${parsed.keyId}:${parsed.secret}`
+    },
+    body
+  });
+  const payload = await response.json();
+  if (!response.ok && payload.status !== "error") {
+    throw new Error(`HTTP ${response.status}: ${JSON.stringify(payload)}`);
+  }
+  return payload;
+}
 var SKIP_DIRS2 = /* @__PURE__ */ new Set([
   "node_modules",
   ".git",
@@ -11417,6 +11467,6 @@ async function writeTextFile2(filePath, content) {
   await fs2.writeFile(filePath, content, "utf8");
 }
 
-export { VERSION, brandProgressBar, buildVersionTimelines, compactUiPurpose, computeDriftScore, computeRepoFingerprint, computeUpgradeImpact, detectVcs, driftBar, ensureDir2 as ensureDir, fetchScanPreflight, findPackageAnyEcosystem, findPackageTimeline, findVersionCrossings, getChangelogSignals, gitHistoryAvailable, normalizeConstraint, parseDsn, pathExists2 as pathExists, prepareCompressedUpload, projectTypeToVulnEcosystem, readJsonFile2 as readJsonFile, resolveHead, resolveRepositoryName, runCoreScan, severityRank, titleBox, versionSatisfies, workingTreeDirty, writeDefaultConfig, writeJsonFile2 as writeJsonFile, writeTextFile2 as writeTextFile };
-//# sourceMappingURL=chunk-ZNCJZVNT.js.map
-//# sourceMappingURL=chunk-ZNCJZVNT.js.map
+export { PROJECT_TYPE_TO_OSV_ECOSYSTEM, VERSION, brandProgressBar, buildVersionTimelines, compactUiPurpose, computeDriftScore, computeRepoFingerprint, computeUpgradeImpact, detectVcs, driftBar, ensureDir2 as ensureDir, fetchRiskySymbols, fetchScanPreflight, findPackageAnyEcosystem, findPackageTimeline, findVersionCrossings, getChangelogSignals, gitHistoryAvailable, normalizeConstraint, parseDsn, pathExists2 as pathExists, prepareCompressedUpload, projectTypeToVulnEcosystem, readJsonFile2 as readJsonFile, resolveHead, resolveRepositoryName, runCoreScan, severityRank, titleBox, versionSatisfies, workingTreeDirty, writeDefaultConfig, writeJsonFile2 as writeJsonFile, writeTextFile2 as writeTextFile };
+//# sourceMappingURL=chunk-NNU2PW2H.js.map
+//# sourceMappingURL=chunk-NNU2PW2H.js.map