@vibgrate/cli 2026.720.1 → 2026.720.3

package/dist/{chunk-VQLOVQZP.js → chunk-ZFDVHKID.js}

@@ -1,8 +1,8 @@
-import { hashString, langById, shortId, canonicalize, grammarSetVersion, hashBytes, langForExtension, setGrammarsOverride, parseSource } from './chunk-VFO5UDAT.js';
-import { writeTextFile, pathExists, readJsonFile, loadConfig, computeUpgradeImpact, getChangelogSignals, gitHistoryAvailable, buildVersionTimelines, findPackageTimeline, severityRank, projectTypeToVulnEcosystem, VERSION } from './chunk-AJDUMRVI.js';
-import * as fs19 from 'fs';
+import { hashString, langById, shortId, canonicalize, grammarSetVersion, hashBytes, langForExtension, setGrammarsOverride, parseSource } from './chunk-BHA7QIPD.js';
+import { writeTextFile, pathExists, readJsonFile, loadConfig, computeUpgradeImpact, getChangelogSignals, gitHistoryAvailable, buildVersionTimelines, findPackageTimeline, severityRank, projectTypeToVulnEcosystem, VERSION } from './chunk-B6ZWB3WH.js';
+import * as fs17 from 'fs';
 import { spawnSync, execFileSync } from 'child_process';
-import * as path19 from 'path';
+import * as path17 from 'path';
 import ignore from 'ignore';
 import * as v8 from 'v8';
 import Graph from 'graphology';
@@ -41,9 +41,9 @@ function whichOnPath(cmd) {
 }
 function isOwnBinary(binPath) {
   try {
-    const real = fs19.realpathSync(binPath);
+    const real = fs17.realpathSync(binPath);
     if (/[\\/]@vibgrate[\\/]cli[\\/]/.test(real)) return true;
-    const head = fs19.readFileSync(real, { encoding: "utf8" }).slice(0, 2048);
+    const head = fs17.readFileSync(real, { encoding: "utf8" }).slice(0, 2048);
     return head.includes("@vibgrate/cli") || head.includes("vibgrate");
   } catch {
     return false;
@@ -53,7 +53,7 @@ function isEphemeralNpxBinary(binPath) {
   const NPX_SEGMENT = /[\\/]_npx[\\/]/;
   if (NPX_SEGMENT.test(binPath)) return true;
   try {
-    return NPX_SEGMENT.test(fs19.realpathSync(binPath));
+    return NPX_SEGMENT.test(fs17.realpathSync(binPath));
   } catch {
     return false;
   }
@@ -219,19 +219,19 @@ var SKIP_FILES = /* @__PURE__ */ new Set([
   "flake.lock"
 ]);
 function toPosix(p) {
-  return p.split(path19.sep).join("/");
+  return p.split(path17.sep).join("/");
 }
 function buildRootIgnore(root, exclude) {
   const ig = ignore();
-  const gitignorePath = path19.join(root, ".gitignore");
-  if (fs19.existsSync(gitignorePath)) {
-    ig.add(fs19.readFileSync(gitignorePath, "utf8"));
+  const gitignorePath = path17.join(root, ".gitignore");
+  if (fs17.existsSync(gitignorePath)) {
+    ig.add(fs17.readFileSync(gitignorePath, "utf8"));
   }
   if (exclude.length) ig.add(exclude);
   return ig;
 }
 function discover(options) {
-  const root = path19.resolve(options.root);
+  const root = path17.resolve(options.root);
   const onlyLangs = (options.only ?? []).filter(Boolean);
   const allowLang = (lang) => onlyLangs.length === 0 || onlyLangs.includes(lang.id);
   for (const id of onlyLangs) {
@@ -240,27 +240,27 @@ function discover(options) {
     }
   }
   const rootIg = buildRootIgnore(root, options.exclude ?? []);
-  const scopeAbs = (options.paths && options.paths.length ? options.paths.map((p) => path19.resolve(root, p)) : [root]).filter((p) => fs19.existsSync(p));
+  const scopeAbs = (options.paths && options.paths.length ? options.paths.map((p) => path17.resolve(root, p)) : [root]).filter((p) => fs17.existsSync(p));
   const found = /* @__PURE__ */ new Map();
   const considerFile = (abs) => {
-    const rel2 = toPosix(path19.relative(root, abs));
+    const rel2 = toPosix(path17.relative(root, abs));
     if (rel2.startsWith("..")) return;
     if (rel2 === "" || rootIg.ignores(rel2)) return;
-    if (SKIP_FILES.has(path19.basename(abs).toLowerCase())) return;
-    const lang = langForExtension(path19.extname(abs));
+    if (SKIP_FILES.has(path17.basename(abs).toLowerCase())) return;
+    const lang = langForExtension(path17.extname(abs));
     if (!lang || !allowLang(lang)) return;
     found.set(rel2, { rel: rel2, abs, lang });
   };
   const walk2 = (dir) => {
     let entries;
     try {
-      entries = fs19.readdirSync(dir, { withFileTypes: true });
+      entries = fs17.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
-      const abs = path19.join(dir, entry.name);
-      const rel2 = toPosix(path19.relative(root, abs));
+      const abs = path17.join(dir, entry.name);
+      const rel2 = toPosix(path17.relative(root, abs));
       if (entry.isDirectory()) {
         if (SKIP_DIRS.has(entry.name)) continue;
         if (rel2 && rootIg.ignores(`${rel2}/`)) continue;
@@ -271,7 +271,7 @@ function discover(options) {
     }
   };
   for (const scope of scopeAbs) {
-    const stat = fs19.statSync(scope);
+    const stat = fs17.statSync(scope);
     if (stat.isDirectory()) walk2(scope);
     else if (stat.isFile()) considerFile(scope);
   }
@@ -336,7 +336,7 @@ function formatBytes(n) {
   if (n >= 1024) return `${(n / 1024).toFixed(1)} KiB`;
   return `${n} B`;
 }
-var JS_TS_EXT = [".ts", ".tsx", ".mts", ".cts", ".js", ".jsx", ".mjs", ".cjs"];
+var JS_TS_EXT = [".ts", ".tsx", ".mts", ".cts", ".js", ".jsx", ".mjs", ".cjs", ".vue", ".svelte", ".astro"];
 var OTHER_EXT = [
   ".py",
   ".pyi",
@@ -365,7 +365,13 @@ var OTHER_EXT = [
   ".hpp",
   ".hh",
   ".hxx",
-  ".h"
+  ".h",
+  ".m",
+  ".mm",
+  ".ml",
+  ".mli",
+  ".res",
+  ".sol"
 ];
 var EXT_GROUPS = {
   ".py": [".py", ".pyi"],
@@ -399,7 +405,19 @@ Object.assign(EXT_GROUPS, {
   ".hpp": CPP_EXT,
   ".hh": CPP_EXT,
   ".hxx": CPP_EXT,
-  ".h": [...CPP_EXT, ".c"]
+  ".h": [...CPP_EXT, ".c"],
+  // ObjC #imports headers; ObjC++ additionally reaches C++ headers.
+  ".m": [".h", ".m", ".mm"],
+  ".mm": [".h", ".m", ".mm", ...CPP_EXT],
+  ".ml": [".ml", ".mli"],
+  ".mli": [".ml", ".mli"],
+  ".res": [".res"],
+  ".sol": [".sol"],
+  // Template containers: ERB fragments are Ruby; HTML/EJS script is JS.
+  ".erb": [".rb", ".erb"],
+  ".html": JS_TS_EXT,
+  ".htm": JS_TS_EXT,
+  ".ejs": JS_TS_EXT
 });
 function buildModuleResolver(root, relSet) {
   const probe = makeProbe(relSet);
@@ -437,10 +455,10 @@ function buildModuleResolver(root, relSet) {
     resolve(fromRel, source) {
       if (source.includes("\\")) source = source.split("\\").join(".");
       if (source.startsWith("./") || source.startsWith("../")) {
-        return probe(posixJoin(path19.posix.dirname(fromRel), source));
+        return probe(posixJoin(path17.posix.dirname(fromRel), source));
       }
       if (/\.[A-Za-z0-9]+$/.test(source) && !source.startsWith("<")) {
-        const hit = probe(posixJoin(path19.posix.dirname(fromRel), source));
+        const hit = probe(posixJoin(path17.posix.dirname(fromRel), source));
         if (hit) return hit;
       }
       if (source.startsWith(".")) {
@@ -511,8 +529,8 @@ function resolvePyRelative(probe, fromRel, source) {
   let dots = 0;
   while (source[dots] === ".") dots++;
   const rest = source.slice(dots);
-  let dir = path19.posix.dirname(fromRel);
-  for (let i = 1; i < dots; i++) dir = path19.posix.dirname(dir);
+  let dir = path17.posix.dirname(fromRel);
+  for (let i = 1; i < dots; i++) dir = path17.posix.dirname(dir);
   const sub = rest.replace(/\./g, "/");
   return probe(sub ? posixJoin(dir, sub) : dir);
 }
@@ -520,7 +538,7 @@ function relativeResolver(relSet) {
   const probe = makeProbe(relSet);
   return {
     resolve(fromRel, source) {
-      if (source.startsWith(".")) return probe(posixJoin(path19.posix.dirname(fromRel), source));
+      if (source.startsWith(".")) return probe(posixJoin(path17.posix.dirname(fromRel), source));
       return resolveDotted(probe, source);
     }
   };
@@ -538,12 +556,12 @@ function makeProbe(relSet) {
   };
 }
 function normalizeRel(p) {
-  const norm = path19.posix.normalize(p);
+  const norm = path17.posix.normalize(p);
   const stripped = norm.startsWith("./") ? norm.slice(2) : norm;
   return stripped.startsWith("..") ? "" : stripped;
 }
 function posixJoin(a, b) {
-  return path19.posix.normalize(path19.posix.join(a, b));
+  return path17.posix.normalize(path17.posix.join(a, b));
 }
 function matchPattern(pattern, source) {
   const star = pattern.indexOf("*");
@@ -556,8 +574,8 @@ function matchPattern(pattern, source) {
 }
 function loadTsconfigPaths(root) {
   for (const name of ["tsconfig.base.json", "tsconfig.json"]) {
-    const file = path19.join(root, name);
-    if (fs19.existsSync(file)) {
+    const file = path17.join(root, name);
+    if (fs17.existsSync(file)) {
       const merged = readTsconfigChain(root, file, /* @__PURE__ */ new Set());
       if (merged && merged.paths.length) return merged;
     }
@@ -569,21 +587,21 @@ function readTsconfigChain(root, file, seen) {
   seen.add(file);
   let cfg;
   try {
-    cfg = parseJsonc(fs19.readFileSync(file, "utf8"));
+    cfg = parseJsonc(fs17.readFileSync(file, "utf8"));
   } catch {
     return null;
   }
-  const dir = path19.dirname(file);
+  const dir = path17.dirname(file);
   let base = { baseUrlRel: "", paths: [] };
   if (cfg.extends && cfg.extends.startsWith(".")) {
-    const extPath = path19.resolve(dir, cfg.extends.endsWith(".json") ? cfg.extends : `${cfg.extends}.json`);
-    if (fs19.existsSync(extPath)) {
+    const extPath = path17.resolve(dir, cfg.extends.endsWith(".json") ? cfg.extends : `${cfg.extends}.json`);
+    if (fs17.existsSync(extPath)) {
       const inherited = readTsconfigChain(root, extPath, seen);
       if (inherited) base = inherited;
     }
   }
   const co = cfg.compilerOptions ?? {};
-  const baseUrlRel = co.baseUrl !== void 0 ? path19.relative(root, path19.resolve(dir, co.baseUrl)).split(path19.sep).join("/") : base.baseUrlRel;
+  const baseUrlRel = co.baseUrl !== void 0 ? path17.relative(root, path17.resolve(dir, co.baseUrl)).split(path17.sep).join("/") : base.baseUrlRel;
   const paths = [...base.paths];
   if (co.paths) for (const [k, v] of Object.entries(co.paths)) paths.push([k, v]);
   return { baseUrlRel, paths };
@@ -591,27 +609,27 @@ function readTsconfigChain(root, file, seen) {
 function loadWorkspacePackages(root) {
   const map = /* @__PURE__ */ new Map();
   const globs = [];
-  const rootPkg = path19.join(root, "package.json");
-  if (fs19.existsSync(rootPkg)) {
+  const rootPkg = path17.join(root, "package.json");
+  if (fs17.existsSync(rootPkg)) {
     try {
-      const pkg = JSON.parse(fs19.readFileSync(rootPkg, "utf8"));
+      const pkg = JSON.parse(fs17.readFileSync(rootPkg, "utf8"));
       const ws = Array.isArray(pkg.workspaces) ? pkg.workspaces : pkg.workspaces?.packages;
       if (ws) globs.push(...ws);
     } catch {
     }
   }
-  const pnpmWs = path19.join(root, "pnpm-workspace.yaml");
-  if (fs19.existsSync(pnpmWs)) {
-    for (const line of fs19.readFileSync(pnpmWs, "utf8").split("\n")) {
+  const pnpmWs = path17.join(root, "pnpm-workspace.yaml");
+  if (fs17.existsSync(pnpmWs)) {
+    for (const line of fs17.readFileSync(pnpmWs, "utf8").split("\n")) {
       const m = /^\s*-\s*['"]?([^'"\n]+)['"]?\s*$/.exec(line);
       if (m) globs.push(m[1].trim());
     }
   }
   for (const dir of expandWorkspaceGlobs(root, globs)) {
-    const pj = path19.join(dir, "package.json");
+    const pj = path17.join(dir, "package.json");
     try {
-      const name = JSON.parse(fs19.readFileSync(pj, "utf8")).name;
-      if (name) map.set(name, path19.relative(root, dir).split(path19.sep).join("/"));
+      const name = JSON.parse(fs17.readFileSync(pj, "utf8")).name;
+      if (name) map.set(name, path17.relative(root, dir).split(path17.sep).join("/"));
     } catch {
     }
   }
@@ -621,10 +639,10 @@ function expandWorkspaceGlobs(root, globs) {
   const out = /* @__PURE__ */ new Set();
   for (const glob of globs) {
     const clean = glob.replace(/\/\*\*$/, "").replace(/\/\*$/, "");
-    const baseDir = path19.join(root, clean);
+    const baseDir = path17.join(root, clean);
     const recurse = glob.endsWith("**");
     if (glob === clean) {
-      if (fs19.existsSync(path19.join(baseDir, "package.json"))) out.add(baseDir);
+      if (fs17.existsSync(path17.join(baseDir, "package.json"))) out.add(baseDir);
       continue;
     }
     collectPackageDirs(baseDir, recurse ? 4 : 1, out);
@@ -635,14 +653,14 @@ function collectPackageDirs(dir, depth, out) {
   if (depth < 0) return;
   let entries;
   try {
-    entries = fs19.readdirSync(dir, { withFileTypes: true });
+    entries = fs17.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const e of entries) {
     if (!e.isDirectory() || e.name === "node_modules" || e.name.startsWith(".")) continue;
-    const child = path19.join(dir, e.name);
-    if (fs19.existsSync(path19.join(child, "package.json"))) out.add(child);
+    const child = path17.join(dir, e.name);
+    if (fs17.existsSync(path17.join(child, "package.json"))) out.add(child);
     else collectPackageDirs(child, depth - 1, out);
   }
 }
@@ -1141,14 +1159,14 @@ var DEFAULT_PATHS = [
 ];
 function loadCoverage(root, explicit) {
   const candidates = (explicit && explicit.length ? explicit : DEFAULT_PATHS).map(
-    (p) => path19.resolve(root, p)
+    (p) => path17.resolve(root, p)
   );
-  const found = candidates.filter((p) => fs19.existsSync(p));
+  const found = candidates.filter((p) => fs17.existsSync(p));
   if (found.length === 0) return null;
   const map = /* @__PURE__ */ new Map();
   for (const file of found) {
     try {
-      const text = fs19.readFileSync(file, "utf8");
+      const text = fs17.readFileSync(file, "utf8");
       if (file.endsWith(".json")) mergeIstanbul(map, text, root);
       else mergeLcov(map, text, root);
     } catch {
@@ -1157,8 +1175,8 @@ function loadCoverage(root, explicit) {
   return map.size ? map : null;
 }
 function rel(root, p) {
-  const abs = path19.isAbsolute(p) ? p : path19.resolve(root, p);
-  return path19.relative(root, abs).split(path19.sep).join("/");
+  const abs = path17.isAbsolute(p) ? p : path17.resolve(root, p);
+  return path17.relative(root, abs).split(path17.sep).join("/");
 }
 function bump(map, file, line, hits) {
   let lh = map.get(file);
@@ -1494,7 +1512,7 @@ async function parseInline(files, options) {
   onProgress?.(0, files.length);
   for (const file of files) {
     try {
-      const source = fs19.readFileSync(file.abs, "utf8");
+      const source = fs17.readFileSync(file.abs, "utf8");
       out.push(await parseSource(file.rel, file.lang.id, source));
     } catch (err) {
       out.push(emptyParse(file, `parse failed: ${err.message}`));
@@ -1549,9 +1567,9 @@ function isWorkerOom(err) {
   return e?.code === "ERR_WORKER_OUT_OF_MEMORY" || /out of memory/i.test(e?.message ?? "");
 }
 function resolveWorkerFile() {
-  const here = path19.dirname(fileURLToPath(import.meta.url));
-  const candidate = path19.join(here, "parse-worker.js");
-  return fs19.existsSync(candidate) ? candidate : null;
+  const here = path17.dirname(fileURLToPath(import.meta.url));
+  const candidate = path17.join(here, "parse-worker.js");
+  return fs17.existsSync(candidate) ? candidate : null;
 }
 function chunk(items, buckets) {
   const out = Array.from({ length: Math.min(buckets, items.length || 1) }, () => []);
@@ -1590,7 +1608,7 @@ function resolve4(parses, resolver) {
     addNode(baseNodes, {
       id: fileId,
       kind: "file",
-      name: path19.posix.basename(p.rel),
+      name: path17.posix.basename(p.rel),
       qualifiedName: p.rel,
       file: p.rel,
       span: { start: 1, end: 1 },
@@ -2026,14 +2044,14 @@ function enclosing3(nodes, line) {
   return best;
 }
 function normalize2(p) {
-  return path19.resolve(p).split(path19.sep).join("/");
+  return path17.resolve(p).split(path17.sep).join("/");
 }
 var CACHE_VERSION = "vg-parse-cache/2";
 function cacheDir(root) {
-  return path19.join(root, ".vibgrate", "cache");
+  return path17.join(root, ".vibgrate", "cache");
 }
 function cachePath(root) {
-  return path19.join(cacheDir(root), "parse-cache.json");
+  return path17.join(cacheDir(root), "parse-cache.json");
 }
 function loadCache(root, opts) {
   const file = cachePath(root);
@@ -2043,9 +2061,9 @@ function loadCache(root, opts) {
     grammars: opts.grammars,
     entries: {}
   };
-  if (!opts.disabled && fs19.existsSync(file)) {
+  if (!opts.disabled && fs17.existsSync(file)) {
     try {
-      const loaded = JSON.parse(fs19.readFileSync(file, "utf8"));
+      const loaded = JSON.parse(fs17.readFileSync(file, "utf8"));
       if (loaded.version === CACHE_VERSION && loaded.toolVersion === opts.toolVersion && loaded.grammars === opts.grammars && loaded.entries) {
         data = loaded;
       }
@@ -2066,8 +2084,8 @@ function loadCache(root, opts) {
       }
     },
     save() {
-      fs19.mkdirSync(cacheDir(root), { recursive: true });
-      fs19.writeFileSync(file, stableStringify(data, 0));
+      fs17.mkdirSync(cacheDir(root), { recursive: true });
+      fs17.writeFileSync(file, stableStringify(data, 0));
     }
   };
 }
@@ -2099,7 +2117,7 @@ function epistemicBreakdown(edges) {
 // src/engine/build.ts
 async function buildGraph(options) {
   const start = nowMs();
-  const root = path19.resolve(options.root);
+  const root = path17.resolve(options.root);
   const files = discover({
     root,
     only: options.only,
@@ -2127,7 +2145,7 @@ async function buildGraph(options) {
   for (const file of files) {
     let stat;
     try {
-      stat = fs19.statSync(file.abs);
+      stat = fs17.statSync(file.abs);
     } catch {
       continue;
     }
@@ -2145,7 +2163,7 @@ async function buildGraph(options) {
     }
     let hash = "";
     try {
-      hash = hashBytes(fs19.readFileSync(file.abs));
+      hash = hashBytes(fs17.readFileSync(file.abs));
     } catch {
       continue;
     }
@@ -2237,7 +2255,7 @@ async function buildGraph(options) {
       toolchain
     },
     meta: {
-      root: path19.basename(root) === "" ? "." : ".",
+      root: path17.basename(root) === "" ? "." : ".",
       languages,
       counts: {
         nodes: analysis.nodes.length,
@@ -2283,14 +2301,14 @@ function toRepoRel(p) {
 function loadScipIndex(root, explicit) {
   const candidates = [
     explicit,
-    path19.join(root, "index.scip"),
-    path19.join(root, ".vibgrate", "index.scip")
+    path17.join(root, "index.scip"),
+    path17.join(root, ".vibgrate", "index.scip")
   ].filter((p) => Boolean(p));
   for (const file of candidates) {
-    const abs = path19.isAbsolute(file) ? file : path19.resolve(root, file);
-    if (!fs19.existsSync(abs)) continue;
+    const abs = path17.isAbsolute(file) ? file : path17.resolve(root, file);
+    if (!fs17.existsSync(abs)) continue;
     try {
-      const index = decodeScipIndex(new Uint8Array(fs19.readFileSync(abs)));
+      const index = decodeScipIndex(new Uint8Array(fs17.readFileSync(abs)));
       if (index.documents.length) {
         return { index, tool: index.toolVersion ? `${index.toolName} ${index.toolVersion}` : index.toolName };
       }
@@ -2451,46 +2469,46 @@ function esc(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
 function vibgrateDir(root) {
-  return path19.join(root, ".vibgrate");
+  return path17.join(root, ".vibgrate");
 }
 function defaultGraphPath(root) {
-  return path19.join(vibgrateDir(root), "graph.json");
+  return path17.join(vibgrateDir(root), "graph.json");
 }
 function writeArtifacts(graph, options) {
   const dir = vibgrateDir(options.root);
-  fs19.mkdirSync(dir, { recursive: true });
+  fs17.mkdirSync(dir, { recursive: true });
   const graphPath = options.graphPath ?? defaultGraphPath(options.root);
-  fs19.mkdirSync(path19.dirname(graphPath), { recursive: true });
+  fs17.mkdirSync(path17.dirname(graphPath), { recursive: true });
   const tmp = `${graphPath}.${process.pid}.tmp`;
   try {
-    fs19.writeFileSync(tmp, serializeGraph(graph));
-    fs19.renameSync(tmp, graphPath);
+    fs17.writeFileSync(tmp, serializeGraph(graph));
+    fs17.renameSync(tmp, graphPath);
   } catch (err) {
-    fs19.rmSync(tmp, { force: true });
+    fs17.rmSync(tmp, { force: true });
     throw err;
   }
   const written = { graphPath };
   if (options.report !== false) {
-    const reportPath = path19.join(dir, "GRAPH_REPORT.md");
-    fs19.writeFileSync(reportPath, renderReport(graph));
+    const reportPath = path17.join(dir, "GRAPH_REPORT.md");
+    fs17.writeFileSync(reportPath, renderReport(graph));
     written.reportPath = reportPath;
   }
   if (options.html !== false) {
-    const htmlPath = path19.join(dir, "graph.html");
-    fs19.writeFileSync(htmlPath, renderHtml(graph));
+    const htmlPath = path17.join(dir, "graph.html");
+    fs17.writeFileSync(htmlPath, renderHtml(graph));
     written.htmlPath = htmlPath;
   }
   if (graph.facts && graph.facts.length) {
-    const factsPath = path19.join(dir, "facts.jsonl");
-    fs19.writeFileSync(factsPath, graph.facts.map((f) => JSON.stringify(f)).join("\n") + "\n");
+    const factsPath = path17.join(dir, "facts.jsonl");
+    fs17.writeFileSync(factsPath, graph.facts.map((f) => JSON.stringify(f)).join("\n") + "\n");
     written.factsPath = factsPath;
   }
   return written;
 }
 function loadGraph(root, graphPath) {
   const file = graphPath ?? defaultGraphPath(root);
-  if (!fs19.existsSync(file)) return null;
-  return parseGraph(fs19.readFileSync(file, "utf8"));
+  if (!fs17.existsSync(file)) return null;
+  return parseGraph(fs17.readFileSync(file, "utf8"));
 }
 
 // src/engine/verify.ts
@@ -2567,7 +2585,7 @@ function isProcessAlive(pid) {
 }
 function lockIsStale(file, staleMs) {
   try {
-    const { pid, at } = JSON.parse(fs19.readFileSync(file, "utf8"));
+    const { pid, at } = JSON.parse(fs17.readFileSync(file, "utf8"));
     if (typeof at === "number" && Date.now() - at > staleMs) return true;
     if (typeof pid === "number" && !isProcessAlive(pid)) return true;
     return false;
@@ -2578,10 +2596,10 @@ function lockIsStale(file, staleMs) {
 function acquireLock(file, staleMs = DEFAULT_LOCK_STALE_MS) {
   const write = () => {
     try {
-      fs19.mkdirSync(path19.dirname(file), { recursive: true });
-      const fd = fs19.openSync(file, "wx");
-      fs19.writeFileSync(fd, JSON.stringify({ pid: process.pid, at: Date.now() }));
-      fs19.closeSync(fd);
+      fs17.mkdirSync(path17.dirname(file), { recursive: true });
+      const fd = fs17.openSync(file, "wx");
+      fs17.writeFileSync(fd, JSON.stringify({ pid: process.pid, at: Date.now() }));
+      fs17.closeSync(fd);
       return true;
     } catch {
       return false;
@@ -2590,7 +2608,7 @@ function acquireLock(file, staleMs = DEFAULT_LOCK_STALE_MS) {
   if (write()) return true;
   if (lockIsStale(file, staleMs)) {
     try {
-      fs19.rmSync(file, { force: true });
+      fs17.rmSync(file, { force: true });
     } catch {
     }
     return write();
@@ -2599,7 +2617,7 @@ function acquireLock(file, staleMs = DEFAULT_LOCK_STALE_MS) {
 }
 function releaseLock(file) {
   try {
-    fs19.rmSync(file, { force: true });
+    fs17.rmSync(file, { force: true });
   } catch {
   }
 }
@@ -2609,14 +2627,14 @@ function resolveEmbedModel(model) {
   return model ?? "bge-small-en-v1.5";
 }
 function modelCacheDir() {
-  const base = process.env.XDG_CACHE_HOME || path19.join(os.homedir(), ".cache");
-  return path19.join(base, "vibgrate", "models");
+  const base = process.env.XDG_CACHE_HOME || path17.join(os.homedir(), ".cache");
+  return path17.join(base, "vibgrate", "models");
 }
 function modelReadyMarker(modelId) {
-  return path19.join(modelCacheDir(), `.ready-${safe(modelId)}`);
+  return path17.join(modelCacheDir(), `.ready-${safe(modelId)}`);
 }
 function isModelReady(modelId = resolveEmbedModel()) {
-  return fs19.existsSync(modelReadyMarker(modelId));
+  return fs17.existsSync(modelReadyMarker(modelId));
 }
 function unavailableMessage(reason) {
   switch (reason) {
@@ -2633,13 +2651,13 @@ function unavailableMessage(reason) {
 }
 function modelCacheInfo(modelId = resolveEmbedModel()) {
   const dir = modelCacheDir();
-  return { dir, present: isModelReady(modelId) || fs19.existsSync(dir), bytes: dirSize(dir) };
+  return { dir, present: isModelReady(modelId) || fs17.existsSync(dir), bytes: dirSize(dir) };
 }
 function clearModelCache() {
   const dir = modelCacheDir();
   const bytes = dirSize(dir);
   try {
-    fs19.rmSync(dir, { recursive: true, force: true });
+    fs17.rmSync(dir, { recursive: true, force: true });
   } catch {
   }
   return bytes;
@@ -2648,16 +2666,16 @@ function dirSize(dir) {
   let total = 0;
   let entries;
   try {
-    entries = fs19.readdirSync(dir, { withFileTypes: true });
+    entries = fs17.readdirSync(dir, { withFileTypes: true });
   } catch {
     return 0;
   }
   for (const e of entries) {
-    const p = path19.join(dir, e.name);
+    const p = path17.join(dir, e.name);
     if (e.isDirectory()) total += dirSize(p);
     else {
       try {
-        total += fs19.statSync(p).size;
+        total += fs17.statSync(p).size;
       } catch {
       }
     }
@@ -2669,7 +2687,7 @@ function isPermissionError(e) {
   return code === "EACCES" || code === "EPERM" || code === "EROFS";
 }
 function embeddingsCached(root, modelId) {
-  return fs19.existsSync(path19.join(cacheDir(root), `embeddings-${safe(modelId)}.json`));
+  return fs17.existsSync(path17.join(cacheDir(root), `embeddings-${safe(modelId)}.json`));
 }
 async function loadEmbedder(options = {}) {
   if (options.local) return null;
@@ -2683,7 +2701,7 @@ async function loadEmbedder(options = {}) {
   if (!mod?.FlagEmbedding) return fail("not-installed");
   const cache = modelCacheDir();
   try {
-    fs19.mkdirSync(cache, { recursive: true });
+    fs17.mkdirSync(cache, { recursive: true });
   } catch (e) {
     return fail(isPermissionError(e) ? "no-permission" : "init-failed");
   }
@@ -2698,7 +2716,7 @@ async function loadEmbedder(options = {}) {
       "embedding model init timed out"
     );
     try {
-      fs19.writeFileSync(modelReadyMarker(modelId), (/* @__PURE__ */ new Date(0)).toISOString());
+      fs17.writeFileSync(modelReadyMarker(modelId), (/* @__PURE__ */ new Date(0)).toISOString());
     } catch {
     }
     return {
@@ -2723,7 +2741,7 @@ async function importEmbedBackend() {
   const hostDir = process.env.VIBGRATE_EMBEDDER_PATH;
   if (hostDir) {
     try {
-      const req = createRequire(path19.join(hostDir, "package.json"));
+      const req = createRequire(path17.join(hostDir, "package.json"));
       const mod = await import(pathToFileURL(req.resolve("fastembed")).href);
       const resolved = mod?.FlagEmbedding ? mod : mod?.default;
       if (resolved?.FlagEmbedding) return resolved;
@@ -2809,7 +2827,7 @@ function cosine(a, b) {
 var EMBED_CHUNK = 256;
 var CACHE_WRITE_INTERVAL_MS = 1500;
 function vectorCachePath(root, modelId) {
-  return path19.join(cacheDir(root), `embeddings-${safe(modelId)}.json`);
+  return path17.join(cacheDir(root), `embeddings-${safe(modelId)}.json`);
 }
 function countPending(graph, root, modelId) {
   const entries = readCacheEntries(vectorCachePath(root, modelId), modelId);
@@ -2824,9 +2842,9 @@ function countPending(graph, root, modelId) {
   return pending;
 }
 function readCacheEntries(file, modelId) {
-  if (!fs19.existsSync(file)) return {};
+  if (!fs17.existsSync(file)) return {};
   try {
-    const loaded = JSON.parse(fs19.readFileSync(file, "utf8"));
+    const loaded = JSON.parse(fs17.readFileSync(file, "utf8"));
     if (loaded.model === modelId && loaded.entries) return loaded.entries;
   } catch {
   }
@@ -2835,9 +2853,9 @@ function readCacheEntries(file, modelId) {
 async function getNodeEmbeddings(graph, embedder, root, onProgress) {
   const file = vectorCachePath(root, embedder.id);
   let cache = { model: embedder.id, entries: {} };
-  if (fs19.existsSync(file)) {
+  if (fs17.existsSync(file)) {
     try {
-      const loaded = JSON.parse(fs19.readFileSync(file, "utf8"));
+      const loaded = JSON.parse(fs17.readFileSync(file, "utf8"));
       if (loaded.model === embedder.id && loaded.entries) cache = loaded;
     } catch {
     }
@@ -2855,10 +2873,10 @@ async function getNodeEmbeddings(graph, embedder, root, onProgress) {
   }
   const persist = () => {
     try {
-      fs19.mkdirSync(cacheDir(root), { recursive: true });
+      fs17.mkdirSync(cacheDir(root), { recursive: true });
       const tmp = `${file}.tmp.${process.pid}`;
-      fs19.writeFileSync(tmp, JSON.stringify(cache));
-      fs19.renameSync(tmp, file);
+      fs17.writeFileSync(tmp, JSON.stringify(cache));
+      fs17.renameSync(tmp, file);
     } catch {
     }
   };
@@ -2896,21 +2914,21 @@ function safe(id) {
 }
 var SNAPSHOT_VERSION = "vg-freshness/1";
 function snapshotPath(root) {
-  return path19.join(cacheDir(root), "freshness.json");
+  return path17.join(cacheDir(root), "freshness.json");
 }
 function writeSnapshot(root, corpusHash, fileStats, scope = {}) {
   const files = {};
   for (const f of fileStats) files[f.rel] = { size: f.size, mtimeMs: f.mtimeMs, hash: f.hash };
   const snapshot = { version: SNAPSHOT_VERSION, corpusHash, scope: pruneScope(scope), files };
   try {
-    fs19.mkdirSync(cacheDir(root), { recursive: true });
-    fs19.writeFileSync(snapshotPath(root), stableStringify(snapshot, 0));
+    fs17.mkdirSync(cacheDir(root), { recursive: true });
+    fs17.writeFileSync(snapshotPath(root), stableStringify(snapshot, 0));
   } catch {
   }
 }
 function loadSnapshot(root) {
   try {
-    const loaded = JSON.parse(fs19.readFileSync(snapshotPath(root), "utf8"));
+    const loaded = JSON.parse(fs17.readFileSync(snapshotPath(root), "utf8"));
     if (loaded.version === SNAPSHOT_VERSION && loaded.files && typeof loaded.corpusHash === "string") {
       return { ...loaded, scope: loaded.scope ?? {} };
     }
@@ -2946,7 +2964,7 @@ function probeFreshness(root) {
     }
     let stat;
     try {
-      stat = fs19.statSync(file.abs);
+      stat = fs17.statSync(file.abs);
     } catch {
       drift.removed.push(file.rel);
       continue;
@@ -2954,7 +2972,7 @@ function probeFreshness(root) {
     if (stat.size === entry.size && stat.mtimeMs === entry.mtimeMs) continue;
     let hash = "";
     try {
-      hash = hashBytes(fs19.readFileSync(file.abs));
+      hash = hashBytes(fs17.readFileSync(file.abs));
     } catch {
       drift.removed.push(file.rel);
       continue;
@@ -2971,7 +2989,7 @@ function probeFreshness(root) {
   }
   if (absorbed && !hasDrift(drift)) {
     try {
-      fs19.writeFileSync(snapshotPath(root), stableStringify(snapshot, 0));
+      fs17.writeFileSync(snapshotPath(root), stableStringify(snapshot, 0));
     } catch {
     }
   }
@@ -3288,221 +3306,6 @@ function estimateTokens(text) {
 function round2(x) {
   return Math.round(x * 1e6) / 1e6;
 }
-var REFRESH_LOCK_STALE_MS = 10 * 60 * 1e3;
-function refreshLockPath(root) {
-  return path19.join(cacheDir(root), "refresh.lock");
-}
-async function refreshIfStale(root, opts = {}) {
-  const probe = probeFreshness(root);
-  if (!probe) return { status: "no-snapshot" };
-  if (!hasDrift(probe.drift)) return { status: "fresh" };
-  const lock = refreshLockPath(root);
-  if (!acquireLock(lock, REFRESH_LOCK_STALE_MS)) return { status: "locked" };
-  const start = process.hrtime.bigint();
-  try {
-    const { scope } = probe;
-    const result = await buildGraph({
-      root,
-      only: scope.only,
-      exclude: scope.exclude,
-      paths: scope.paths,
-      deep: scope.deep,
-      noGround: scope.noGround,
-      scip: scope.scip,
-      noScip: scope.noScip,
-      noTsc: scope.noTsc,
-      cluster: scope.cluster,
-      grammarsDir: scope.grammarsDir,
-      inline: opts.inline,
-      jobs: opts.jobs
-    });
-    const wrote = result.graph.provenance.corpusHash !== probe.corpusHash;
-    if (wrote) {
-      const dir = vibgrateDir(root);
-      writeArtifacts(result.graph, {
-        root,
-        report: fs19.existsSync(path19.join(dir, "GRAPH_REPORT.md")),
-        html: fs19.existsSync(path19.join(dir, "graph.html"))
-      });
-    }
-    writeSnapshot(root, result.graph.provenance.corpusHash, result.fileStats, scope);
-    const ms = Number((process.hrtime.bigint() - start) / 1000000n);
-    return {
-      status: "refreshed",
-      drift: probe.drift,
-      ms,
-      reparsed: result.reparsed,
-      totalFiles: result.totalFiles,
-      wrote
-    };
-  } catch (err) {
-    return { status: "error", message: err.message };
-  } finally {
-    releaseLock(lock);
-  }
-}
-var LEDGER = "savings.jsonl";
-var PER_FILE_TOKENS = 400;
-var SAVINGS_TOOLS = /* @__PURE__ */ new Set(["query_graph", "get_node"]);
-var CLI_TOOL_ALIASES = {
-  ask: "query_graph",
-  show: "get_node",
-  impact: "impact_of",
-  path: "find_path",
-  hubs: "list_hubs",
-  areas: "list_areas",
-  tree: "tree"
-};
-function sanitizeClient(name) {
-  if (typeof name !== "string") return "unknown";
-  const cleaned = name.trim().toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40);
-  return cleaned || "unknown";
-}
-function recordCliCall(root, entry, now) {
-  recordSaving(
-    root,
-    {
-      tool: entry.tool,
-      source: "cli",
-      client: sanitizeClient(entry.client),
-      outcome: entry.outcome,
-      vgTokens: entry.vgTokens ?? 0,
-      baselineTokens: (entry.baselineFiles ?? 0) * PER_FILE_TOKENS
-    },
-    now
-  );
-}
-function ledgerPath(root) {
-  return path19.join(cacheDir(root), LEDGER);
-}
-function savingsRecorded(root) {
-  return fs19.existsSync(ledgerPath(root));
-}
-function recordSaving(root, entry, now) {
-  try {
-    fs19.mkdirSync(cacheDir(root), { recursive: true });
-    const line = JSON.stringify({ ts: now, ...entry });
-    fs19.appendFileSync(ledgerPath(root), line + "\n");
-  } catch {
-  }
-}
-var DEFAULT_RATE_PER_M = 3;
-var DEFAULT_RATE_LABEL = "input @ $3/1M";
-function readSavings(root, days, now, ratePerM = DEFAULT_RATE_PER_M) {
-  const file = ledgerPath(root);
-  const cutoff = now - days * 24 * 60 * 60 * 1e3;
-  let queries = 0;
-  let vgTokens = 0;
-  let baselineTokens = 0;
-  if (fs19.existsSync(file)) {
-    for (const line of fs19.readFileSync(file, "utf8").split("\n")) {
-      if (!line.trim()) continue;
-      try {
-        const e = JSON.parse(line);
-        if (e.ts < cutoff) continue;
-        if (!SAVINGS_TOOLS.has(e.tool)) continue;
-        queries++;
-        vgTokens += e.vgTokens;
-        baselineTokens += e.baselineTokens;
-      } catch {
-      }
-    }
-  }
-  const estCostVg = vgTokens / 1e6 * ratePerM;
-  const estCostBaseline = baselineTokens / 1e6 * ratePerM;
-  return {
-    enabled: savingsRecorded(root),
-    days,
-    queries,
-    vgTokens,
-    baselineTokens,
-    ratio: vgTokens > 0 ? Math.round(baselineTokens / vgTokens * 100) / 100 : 0,
-    estCostVg: round22(estCostVg),
-    estCostBaseline: round22(estCostBaseline),
-    saved: round22(estCostBaseline - estCostVg),
-    rateLabel: DEFAULT_RATE_LABEL
-  };
-}
-function round22(x) {
-  return Math.round(x * 100) / 100;
-}
-function toDimensionStats(byKey) {
-  return [...byKey.entries()].map(([key, r]) => {
-    const calls = r.complete + r.partial + r.miss;
-    return {
-      key,
-      calls,
-      complete: r.complete,
-      partial: r.partial,
-      miss: r.miss,
-      successPct: calls ? Math.round((r.complete + r.partial) / calls * 100) : 0
-    };
-  }).sort((a, b) => b.calls - a.calls || a.key.localeCompare(b.key));
-}
-function readUsage(root, days, now) {
-  const file = ledgerPath(root);
-  const cutoff = now - days * 24 * 60 * 60 * 1e3;
-  const byTool = /* @__PURE__ */ new Map();
-  const bySource = /* @__PURE__ */ new Map();
-  const byClient = /* @__PURE__ */ new Map();
-  const msByTool = /* @__PURE__ */ new Map();
-  const bump2 = (m, key, outcome) => {
-    const row = m.get(key) ?? { complete: 0, partial: 0, miss: 0 };
-    row[outcome]++;
-    m.set(key, row);
-  };
-  if (fs19.existsSync(file)) {
-    for (const line of fs19.readFileSync(file, "utf8").split("\n")) {
-      if (!line.trim()) continue;
-      try {
-        const e = JSON.parse(line);
-        if (e.ts < cutoff) continue;
-        const outcome = e.outcome ?? "complete";
-        bump2(byTool, e.tool, outcome);
-        bump2(bySource, e.source ?? "mcp", outcome);
-        bump2(byClient, e.client ?? "unknown", outcome);
-        if (typeof e.ms === "number" && e.ms >= 0) {
-          const timing = msByTool.get(e.tool) ?? { sum: 0, n: 0 };
-          timing.sum += e.ms;
-          timing.n++;
-          msByTool.set(e.tool, timing);
-        }
-      } catch {
-      }
-    }
-  }
-  const commands = toDimensionStats(byTool).map((d) => {
-    const timing = msByTool.get(d.key);
-    return {
-      tool: d.key,
-      calls: d.calls,
-      complete: d.complete,
-      partial: d.partial,
-      miss: d.miss,
-      successPct: d.successPct,
-      avgMs: timing && timing.n > 0 ? Math.round(timing.sum / timing.n) : null
-    };
-  });
-  const totals = commands.reduce(
-    (t, c) => ({
-      calls: t.calls + c.calls,
-      complete: t.complete + c.complete,
-      partial: t.partial + c.partial,
-      miss: t.miss + c.miss
-    }),
-    { calls: 0, complete: 0, partial: 0, miss: 0 }
-  );
-  const avgSuccessPct = commands.length ? Math.round(commands.reduce((s, c) => s + c.successPct, 0) / commands.length) : 0;
-  return {
-    enabled: savingsRecorded(root),
-    days,
-    commands,
-    sources: toDimensionStats(bySource),
-    clients: toDimensionStats(byClient),
-    totals,
-    avgSuccessPct
-  };
-}
 
 // src/engine/lookup.ts
 function findNodes(graph, query) {
@@ -3660,10 +3463,10 @@ function testsToRun(graph, rootId, depth = 4) {
   };
 }
 function detectRunner(root, lang) {
-  const pkgPath = path19.join(root, "package.json");
-  if (fs19.existsSync(pkgPath)) {
+  const pkgPath = path17.join(root, "package.json");
+  if (fs17.existsSync(pkgPath)) {
     try {
-      const pkg = JSON.parse(fs19.readFileSync(pkgPath, "utf8"));
+      const pkg = JSON.parse(fs17.readFileSync(pkgPath, "utf8"));
       const deps = { ...pkg.dependencies, ...pkg.devDependencies };
       if (deps.vitest) return { name: "vitest", command: (f) => `npx vitest run ${f.join(" ")}`.trim() };
       if (deps.jest) return { name: "jest", command: (f) => `npx jest ${f.join(" ")}`.trim() };
@@ -3671,10 +3474,10 @@ function detectRunner(root, lang) {
     } catch {
     }
   }
-  if (lang === "py" || fs19.existsSync(path19.join(root, "pyproject.toml")) || fs19.existsSync(path19.join(root, "pytest.ini"))) {
+  if (lang === "py" || fs17.existsSync(path17.join(root, "pyproject.toml")) || fs17.existsSync(path17.join(root, "pytest.ini"))) {
     return { name: "pytest", command: (f) => `pytest ${f.join(" ")}`.trim() };
   }
-  if (lang === "go" || fs19.existsSync(path19.join(root, "go.mod"))) {
+  if (lang === "go" || fs17.existsSync(path17.join(root, "go.mod"))) {
     return { name: "go test", command: () => "go test ./..." };
   }
   if (lang === "cs" || hasFile(root, /\.csproj$/) || hasFile(root, /\.sln$/)) {
@@ -3685,7 +3488,7 @@ function detectRunner(root, lang) {
 }
 function hasFile(root, re) {
   try {
-    return fs19.readdirSync(root).some((f) => re.test(f));
+    return fs17.readdirSync(root).some((f) => re.test(f));
   } catch {
     return false;
   }
@@ -3757,7 +3560,7 @@ function findManifests(root) {
     if (depth > 8 || scanned > MAX_ENTRIES2) return;
     let entries;
     try {
-      entries = fs19.readdirSync(dir, { withFileTypes: true });
+      entries = fs17.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -3765,11 +3568,11 @@ function findManifests(root) {
       scanned++;
       if (scanned > MAX_ENTRIES2) break;
       if (e.isDirectory()) {
-        if (!SKIP_DIRS2.has(e.name) && !e.name.startsWith(".")) walk2(path19.join(dir, e.name), depth + 1);
+        if (!SKIP_DIRS2.has(e.name) && !e.name.startsWith(".")) walk2(path17.join(dir, e.name), depth + 1);
         continue;
       }
       const eco = MANIFEST_BY_FILE[e.name] ?? (/\.(cs|fs)proj$/i.test(e.name) ? "dotnet" : void 0);
-      if (eco) set[eco].push(path19.join(dir, e.name));
+      if (eco) set[eco].push(path17.join(dir, e.name));
     }
   };
   walk2(root, 0);
@@ -3781,11 +3584,11 @@ function npmDeps(files) {
   for (const file of files) {
     let pkg;
     try {
-      pkg = JSON.parse(fs19.readFileSync(file, "utf8"));
+      pkg = JSON.parse(fs17.readFileSync(file, "utf8"));
     } catch {
       continue;
     }
-    const dir = path19.dirname(file);
+    const dir = path17.dirname(file);
     const all = { ...pkg.dependencies, ...pkg.devDependencies };
     for (const [name, declared] of Object.entries(all)) {
       out.push({ name, ecosystem: "npm", declared, installed: installedNpmVersion(dir, name) });
@@ -3796,12 +3599,12 @@ function npmDeps(files) {
 function installedNpmVersion(dir, name) {
   let cur = dir;
   for (let i = 0; i < 12; i++) {
-    const p = path19.join(cur, "node_modules", name, "package.json");
+    const p = path17.join(cur, "node_modules", name, "package.json");
     try {
-      return JSON.parse(fs19.readFileSync(p, "utf8")).version;
+      return JSON.parse(fs17.readFileSync(p, "utf8")).version;
     } catch {
     }
-    const parent = path19.dirname(cur);
+    const parent = path17.dirname(cur);
     if (parent === cur) break;
     cur = parent;
   }
@@ -3818,21 +3621,21 @@ function normalizePep503(name) {
 function sitePackagesDirs(base) {
   const out = [];
   try {
-    for (const d of fs19.readdirSync(path19.join(base, "lib"))) {
-      if (d.startsWith("python")) out.push(path19.join(base, "lib", d, "site-packages"));
+    for (const d of fs17.readdirSync(path17.join(base, "lib"))) {
+      if (d.startsWith("python")) out.push(path17.join(base, "lib", d, "site-packages"));
     }
   } catch {
   }
-  out.push(path19.join(base, "Lib", "site-packages"));
+  out.push(path17.join(base, "Lib", "site-packages"));
   return out;
 }
 function installedPypiVersion(root, name) {
   const target = normalizePep503(name);
   for (const venv of [".venv", "venv", "env", ".tox"]) {
-    for (const sp of sitePackagesDirs(path19.join(root, venv))) {
+    for (const sp of sitePackagesDirs(path17.join(root, venv))) {
       let entries;
       try {
-        entries = fs19.readdirSync(sp);
+        entries = fs17.readdirSync(sp);
       } catch {
         continue;
       }
@@ -3847,7 +3650,7 @@ function installedPypiVersion(root, name) {
 function installedPhpVersion(root, name) {
   let data;
   try {
-    data = JSON.parse(fs19.readFileSync(path19.join(root, "vendor", "composer", "installed.json"), "utf8"));
+    data = JSON.parse(fs17.readFileSync(path17.join(root, "vendor", "composer", "installed.json"), "utf8"));
   } catch {
     return void 0;
   }
@@ -3866,11 +3669,11 @@ function pypiDeps(files) {
   for (const file of files) {
     let text;
     try {
-      text = fs19.readFileSync(file, "utf8");
+      text = fs17.readFileSync(file, "utf8");
     } catch {
       continue;
     }
-    if (path19.basename(file) === "requirements.txt") {
+    if (path17.basename(file) === "requirements.txt") {
       for (const line of text.split("\n")) {
         const t = line.trim();
         if (!t || t.startsWith("#") || t.startsWith("-")) continue;
@@ -3954,7 +3757,7 @@ function goDeps(files) {
   for (const mod of files) {
     let text;
     try {
-      text = fs19.readFileSync(mod, "utf8");
+      text = fs17.readFileSync(mod, "utf8");
     } catch {
       continue;
     }
@@ -3972,7 +3775,7 @@ function cargoDeps(files) {
   for (const file of files) {
     let text;
     try {
-      text = fs19.readFileSync(file, "utf8");
+      text = fs17.readFileSync(file, "utf8");
     } catch {
       continue;
     }
@@ -4004,7 +3807,7 @@ function rubyDeps(files) {
   for (const file of files) {
     let text;
     try {
-      text = fs19.readFileSync(file, "utf8");
+      text = fs17.readFileSync(file, "utf8");
     } catch {
       continue;
     }
@@ -4019,7 +3822,7 @@ function phpDeps(files) {
   for (const file of files) {
     let pkg;
     try {
-      pkg = JSON.parse(fs19.readFileSync(file, "utf8"));
+      pkg = JSON.parse(fs17.readFileSync(file, "utf8"));
     } catch {
       continue;
     }
@@ -4036,7 +3839,7 @@ function dotnetDeps(files) {
   for (const file of files) {
     let text;
     try {
-      text = fs19.readFileSync(file, "utf8");
+      text = fs17.readFileSync(file, "utf8");
     } catch {
       continue;
     }
@@ -4056,7 +3859,7 @@ function swiftDeps(files) {
   for (const file of files) {
     let text;
     try {
-      text = fs19.readFileSync(file, "utf8");
+      text = fs17.readFileSync(file, "utf8");
     } catch {
       continue;
     }
@@ -4078,7 +3881,7 @@ function dartDeps(files) {
   for (const file of files) {
     let text;
     try {
-      text = fs19.readFileSync(file, "utf8");
+      text = fs17.readFileSync(file, "utf8");
     } catch {
       continue;
     }
@@ -4103,11 +3906,11 @@ function javaDeps(files) {
   for (const file of files) {
     let text;
     try {
-      text = fs19.readFileSync(file, "utf8");
+      text = fs17.readFileSync(file, "utf8");
     } catch {
       continue;
     }
-    if (path19.basename(file) === "pom.xml") {
+    if (path17.basename(file) === "pom.xml") {
       for (const block of text.match(/<dependency>[\s\S]*?<\/dependency>/g) ?? []) {
         const g = /<groupId>([^<]+)<\/groupId>/.exec(block);
         const a = /<artifactId>([^<]+)<\/artifactId>/.exec(block);
@@ -4153,10 +3956,10 @@ function discoverModels(home = os.homedir()) {
   );
 }
 function ollama(home) {
-  const base = path19.join(home, ".ollama", "models", "manifests");
+  const base = path17.join(home, ".ollama", "models", "manifests");
   const out = [];
   walk(base, 4, (file) => {
-    const rel2 = path19.relative(base, file).split(path19.sep);
+    const rel2 = path17.relative(base, file).split(path17.sep);
     if (rel2.length >= 2) {
       const tag = rel2[rel2.length - 1];
       const model = rel2[rel2.length - 2];
@@ -4166,24 +3969,24 @@ function ollama(home) {
   return dedupe(out);
 }
 function lmStudio(home) {
-  const bases = [path19.join(home, ".lmstudio", "models"), path19.join(home, ".cache", "lm-studio", "models")];
+  const bases = [path17.join(home, ".lmstudio", "models"), path17.join(home, ".cache", "lm-studio", "models")];
   const out = [];
   for (const base of bases) {
     walk(base, 5, (file) => {
       if (!file.endsWith(".gguf")) return;
-      const rel2 = path19.relative(base, file).replace(/\\/g, "/");
+      const rel2 = path17.relative(base, file).replace(/\\/g, "/");
       out.push({ runtime: "lm-studio", name: rel2, path: file });
     });
   }
   return dedupe(out);
 }
 function looseGguf(home) {
-  const bases = [path19.join(home, "models"), path19.join(home, ".cache", "huggingface")];
+  const bases = [path17.join(home, "models"), path17.join(home, ".cache", "huggingface")];
   const out = [];
   for (const base of bases) {
     walk(base, 4, (file) => {
       if (!file.endsWith(".gguf")) return;
-      out.push({ runtime: "gguf", name: path19.basename(file), path: file });
+      out.push({ runtime: "gguf", name: path17.basename(file), path: file });
     });
   }
   return dedupe(out);
@@ -4192,12 +3995,12 @@ function walk(dir, depth, onFile) {
   if (depth < 0) return;
   let entries;
   try {
-    entries = fs19.readdirSync(dir, { withFileTypes: true });
+    entries = fs17.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
   for (const e of entries.sort((a, b) => a.name.localeCompare(b.name))) {
-    const abs = path19.join(dir, e.name);
+    const abs = path17.join(dir, e.name);
     if (e.isDirectory()) walk(abs, depth - 1, onFile);
     else if (e.isFile()) onFile(abs);
   }
@@ -4228,7 +4031,7 @@ function lockfileVersion(root, ecosystem, name) {
 function gradleLock(root, name) {
   let text;
   try {
-    text = fs19.readFileSync(path19.join(root, "gradle.lockfile"), "utf8");
+    text = fs17.readFileSync(path17.join(root, "gradle.lockfile"), "utf8");
   } catch {
     return void 0;
   }
@@ -4238,7 +4041,7 @@ function gradleLock(root, name) {
 function packageResolved(root, name) {
   let data;
   try {
-    data = JSON.parse(fs19.readFileSync(path19.join(root, "Package.resolved"), "utf8"));
+    data = JSON.parse(fs17.readFileSync(path17.join(root, "Package.resolved"), "utf8"));
   } catch {
     return void 0;
   }
@@ -4254,7 +4057,7 @@ function packageResolved(root, name) {
 function pubspecLock(root, name) {
   let text;
   try {
-    text = fs19.readFileSync(path19.join(root, "pubspec.lock"), "utf8");
+    text = fs17.readFileSync(path17.join(root, "pubspec.lock"), "utf8");
   } catch {
     return void 0;
   }
@@ -4278,7 +4081,7 @@ function escapeRegExp(s) {
 function gemfileLock(root, name) {
   let text;
   try {
-    text = fs19.readFileSync(path19.join(root, "Gemfile.lock"), "utf8");
+    text = fs17.readFileSync(path17.join(root, "Gemfile.lock"), "utf8");
   } catch {
     return void 0;
   }
@@ -4288,7 +4091,7 @@ function gemfileLock(root, name) {
 function composerLock(root, name) {
   let data;
   try {
-    data = JSON.parse(fs19.readFileSync(path19.join(root, "composer.lock"), "utf8"));
+    data = JSON.parse(fs17.readFileSync(path17.join(root, "composer.lock"), "utf8"));
   } catch {
     return void 0;
   }
@@ -4303,7 +4106,7 @@ function composerLock(root, name) {
 function packagesLock(root, name) {
   let data;
   try {
-    data = JSON.parse(fs19.readFileSync(path19.join(root, "packages.lock.json"), "utf8"));
+    data = JSON.parse(fs17.readFileSync(path17.join(root, "packages.lock.json"), "utf8"));
   } catch {
     return void 0;
   }
@@ -4328,7 +4131,7 @@ function pypiLockVersion(root, name) {
 function tomlPackageLock(root, file, name, normalize3) {
   let text;
   try {
-    text = fs19.readFileSync(path19.join(root, file), "utf8");
+    text = fs17.readFileSync(path17.join(root, file), "utf8");
   } catch {
     return void 0;
   }
@@ -4345,7 +4148,7 @@ function tomlPackageLock(root, file, name, normalize3) {
 function pipfileLock(root, name) {
   let data;
   try {
-    data = JSON.parse(fs19.readFileSync(path19.join(root, "Pipfile.lock"), "utf8"));
+    data = JSON.parse(fs17.readFileSync(path17.join(root, "Pipfile.lock"), "utf8"));
   } catch {
     return void 0;
   }
@@ -4364,7 +4167,7 @@ function pipfileLock(root, name) {
 function packageLockVersion(root, name) {
   let data;
   try {
-    data = JSON.parse(fs19.readFileSync(path19.join(root, "package-lock.json"), "utf8"));
+    data = JSON.parse(fs17.readFileSync(path17.join(root, "package-lock.json"), "utf8"));
   } catch {
     return void 0;
   }
@@ -4376,7 +4179,7 @@ function packageLockVersion(root, name) {
 function yarnLockVersion(root, name) {
   let text;
   try {
-    text = fs19.readFileSync(path19.join(root, "yarn.lock"), "utf8");
+    text = fs17.readFileSync(path17.join(root, "yarn.lock"), "utf8");
   } catch {
     return void 0;
   }
@@ -4404,19 +4207,19 @@ function headerNamesPackage(header, name) {
 // src/engine/lib.ts
 var LIB_SCHEMA = "vg-lib/1.0";
 function catalogPath(root) {
-  return path19.join(root, "vibgrate.lib.json");
+  return path17.join(root, "vibgrate.lib.json");
 }
 function libDir(root) {
-  return path19.join(root, ".vibgrate", "lib");
+  return path17.join(root, ".vibgrate", "lib");
 }
 function libId(name) {
   return name.trim().toLowerCase().replace(/^@/, "").replace(/[^a-z0-9]+/g, "-").replace(/(^-|-$)/g, "");
 }
 function loadCatalog(root) {
   const file = catalogPath(root);
-  if (fs19.existsSync(file)) {
+  if (fs17.existsSync(file)) {
     try {
-      const data = JSON.parse(fs19.readFileSync(file, "utf8"));
+      const data = JSON.parse(fs17.readFileSync(file, "utf8"));
       if (data.schemaVersion === LIB_SCHEMA && data.libraries) return data;
     } catch {
     }
@@ -4424,7 +4227,7 @@ function loadCatalog(root) {
   return { schemaVersion: LIB_SCHEMA, libraries: {} };
 }
 function saveCatalog(root, catalog) {
-  fs19.writeFileSync(catalogPath(root), `${stableStringify(catalog, 2)}
+  fs17.writeFileSync(catalogPath(root), `${stableStringify(catalog, 2)}
 `);
 }
 function resolveLib(catalog, name) {
@@ -4500,23 +4303,23 @@ async function addLibrary(source, opts) {
     content = await res.text();
     type = source.endsWith("llms.txt") ? "llms.txt" : source.endsWith(".json") ? "openapi" : "website";
   } else {
-    const abs = path19.resolve(root, source);
-    if (!fs19.existsSync(abs)) throw new Error(`source not found: ${source}`);
+    const abs = path17.resolve(root, source);
+    if (!fs17.existsSync(abs)) throw new Error(`source not found: ${source}`);
     content = readLocal(abs);
     type = "local";
   }
   const name = opts.name ?? inferName(source);
   const id = libId(name);
   const version = opts.version ?? installedVersion(root, name) ?? "*";
-  fs19.mkdirSync(libDir(root), { recursive: true });
-  const docFileAbs = path19.join(libDir(root), `${id}.md`);
-  fs19.writeFileSync(docFileAbs, content);
+  fs17.mkdirSync(libDir(root), { recursive: true });
+  const docFileAbs = path17.join(libDir(root), `${id}.md`);
+  fs17.writeFileSync(docFileAbs, content);
   const entry = {
     id,
     name,
     version,
     source: { type, location: source },
-    docFile: path19.relative(root, docFileAbs).split(path19.sep).join("/"),
+    docFile: path17.relative(root, docFileAbs).split(path17.sep).join("/"),
     docHash: hashString(content),
     bytes: Buffer.byteLength(content, "utf8")
   };
@@ -4526,15 +4329,15 @@ async function addLibrary(source, opts) {
   return entry;
 }
 function readDoc(root, entry) {
-  const abs = path19.resolve(root, entry.docFile);
-  return fs19.existsSync(abs) ? fs19.readFileSync(abs, "utf8") : "";
+  const abs = path17.resolve(root, entry.docFile);
+  return fs17.existsSync(abs) ? fs17.readFileSync(abs, "utf8") : "";
 }
 function npmPackageDir(root, name) {
   let cur = root;
   for (let i = 0; i < 12; i++) {
-    const dir = path19.join(cur, "node_modules", name);
-    if (fs19.existsSync(path19.join(dir, "package.json"))) return dir;
-    const parent = path19.dirname(cur);
+    const dir = path17.join(cur, "node_modules", name);
+    if (fs17.existsSync(path17.join(dir, "package.json"))) return dir;
+    const parent = path17.dirname(cur);
     if (parent === cur) break;
     cur = parent;
   }
@@ -4545,24 +4348,24 @@ function localPackageDocs(root, name) {
   if (!dir) return void 0;
   const version = resolveVersion(root, name).served;
   for (const f of ["llms.txt", "README.md", "README.mdx", "README", "readme.md"]) {
-    const p = path19.join(dir, f);
+    const p = path17.join(dir, f);
     try {
-      const docs = fs19.readFileSync(p, "utf8");
+      const docs = fs17.readFileSync(p, "utf8");
       if (docs.trim()) {
-        return { docs, version, source: path19.relative(root, p).split(path19.sep).join("/") };
+        return { docs, version, source: path17.relative(root, p).split(path17.sep).join("/") };
       }
     } catch {
     }
   }
   try {
-    const pkg = JSON.parse(fs19.readFileSync(path19.join(dir, "package.json"), "utf8"));
+    const pkg = JSON.parse(fs17.readFileSync(path17.join(dir, "package.json"), "utf8"));
     if (pkg.description?.trim()) {
       return {
         docs: `# ${name}
 
 ${pkg.description}`,
         version: version ?? pkg.version,
-        source: path19.relative(root, path19.join(dir, "package.json")).split(path19.sep).join("/")
+        source: path17.relative(root, path17.join(dir, "package.json")).split(path17.sep).join("/")
       };
     }
   } catch {
@@ -4571,17 +4374,17 @@ ${pkg.description}`,
 }
 function dtsEntry(dir) {
   try {
-    const pkg = JSON.parse(fs19.readFileSync(path19.join(dir, "package.json"), "utf8"));
+    const pkg = JSON.parse(fs17.readFileSync(path17.join(dir, "package.json"), "utf8"));
     const rel2 = pkg.types ?? pkg.typings;
     if (typeof rel2 === "string") {
-      const p = path19.join(dir, rel2);
-      if (fs19.existsSync(p)) return p;
+      const p = path17.join(dir, rel2);
+      if (fs17.existsSync(p)) return p;
     }
   } catch {
   }
   for (const c of ["index.d.ts", "dist/index.d.ts", "lib/index.d.ts", "types/index.d.ts"]) {
-    const p = path19.join(dir, c);
-    if (fs19.existsSync(p)) return p;
+    const p = path17.join(dir, c);
+    if (fs17.existsSync(p)) return p;
   }
   return void 0;
 }
@@ -4614,7 +4417,7 @@ function localApiSurface(root, name) {
   if (!dts) return void 0;
   let src;
   try {
-    src = fs19.readFileSync(dts, "utf8");
+    src = fs17.readFileSync(dts, "utf8");
   } catch {
     return void 0;
   }
@@ -4622,36 +4425,36 @@ function localApiSurface(root, name) {
   return decls.length ? decls.join("\n\n") : void 0;
 }
 function cloneAndReadGit(url) {
-  const dir = fs19.mkdtempSync(path19.join(os.tmpdir(), "vg-lib-git-"));
+  const dir = fs17.mkdtempSync(path17.join(os.tmpdir(), "vg-lib-git-"));
   try {
     execFileSync("git", ["clone", "--depth", "1", "--quiet", url, dir], {
       stdio: ["ignore", "ignore", "pipe"]
     });
   } catch (err) {
-    fs19.rmSync(dir, { recursive: true, force: true });
+    fs17.rmSync(dir, { recursive: true, force: true });
     const detail = err instanceof Error && err.message ? `: ${err.message.split("\n")[0]}` : "";
     throw new Error(`git clone failed for ${url}${detail}`);
   }
   try {
     return readGitDocs(dir);
   } finally {
-    fs19.rmSync(dir, { recursive: true, force: true });
+    fs17.rmSync(dir, { recursive: true, force: true });
   }
 }
 function readGitDocs(dir) {
-  const docsDir = path19.join(dir, "docs");
-  if (fs19.existsSync(docsDir) && fs19.statSync(docsDir).isDirectory()) return readLocal(docsDir);
-  const readme = ["README.md", "README.mdx", "README.txt", "README.rst", "readme.md"].map((f) => path19.join(dir, f)).find((p) => fs19.existsSync(p));
-  if (readme) return fs19.readFileSync(readme, "utf8");
+  const docsDir = path17.join(dir, "docs");
+  if (fs17.existsSync(docsDir) && fs17.statSync(docsDir).isDirectory()) return readLocal(docsDir);
+  const readme = ["README.md", "README.mdx", "README.txt", "README.rst", "readme.md"].map((f) => path17.join(dir, f)).find((p) => fs17.existsSync(p));
+  if (readme) return fs17.readFileSync(readme, "utf8");
   return readLocal(dir);
 }
 function readLocal(abs) {
-  const stat = fs19.statSync(abs);
-  if (stat.isFile()) return fs19.readFileSync(abs, "utf8");
+  const stat = fs17.statSync(abs);
+  if (stat.isFile()) return fs17.readFileSync(abs, "utf8");
   const parts = [];
-  const files = fs19.readdirSync(abs, { withFileTypes: true }).filter((e) => e.isFile() && /\.(md|mdx|txt|rst)$/i.test(e.name)).map((e) => e.name).sort();
+  const files = fs17.readdirSync(abs, { withFileTypes: true }).filter((e) => e.isFile() && /\.(md|mdx|txt|rst)$/i.test(e.name)).map((e) => e.name).sort();
   for (const f of files) parts.push(`<!-- ${f} -->
-${fs19.readFileSync(path19.join(abs, f), "utf8")}`);
+${fs17.readFileSync(path17.join(abs, f), "utf8")}`);
   return parts.join("\n\n");
 }
 function inferName(source) {
@@ -4660,10 +4463,10 @@ function inferName(source) {
   return base.replace(/\.(md|mdx|txt|rst|json)$/i, "").replace(/^llms$/, "docs");
 }
 function findGitRoot(startDir = process.cwd()) {
-  let dir = path19.resolve(startDir);
+  let dir = path17.resolve(startDir);
   for (; ; ) {
-    if (fs19.existsSync(path19.join(dir, ".git"))) return dir;
-    const parent = path19.dirname(dir);
+    if (fs17.existsSync(path17.join(dir, ".git"))) return dir;
+    const parent = path17.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -4674,19 +4477,19 @@ function normalizeEntry(line) {
 function ensureGitignored(entry, startDir = process.cwd()) {
   const root = findGitRoot(startDir);
   if (!root) return { status: "not-a-repo", entry };
-  const gitignorePath = path19.join(root, ".gitignore");
+  const gitignorePath = path17.join(root, ".gitignore");
   const target = normalizeEntry(entry);
   let existing = "";
   let fileExisted = true;
   try {
-    existing = fs19.readFileSync(gitignorePath, "utf8");
+    existing = fs17.readFileSync(gitignorePath, "utf8");
   } catch {
     fileExisted = false;
   }
   const alreadyPresent = existing.split(/\r?\n/).some((line) => normalizeEntry(line) === target);
   if (alreadyPresent) return { status: "present", entry, gitignorePath };
   const needsLeadingNewline = existing.length > 0 && !existing.endsWith("\n");
-  fs19.appendFileSync(gitignorePath, `${needsLeadingNewline ? "\n" : ""}${entry}
+  fs17.appendFileSync(gitignorePath, `${needsLeadingNewline ? "\n" : ""}${entry}
 `, "utf8");
   return { status: fileExisted ? "added" : "created", entry, gitignorePath };
 }
@@ -4840,14 +4643,14 @@ dsnCommand.command("create").description("Create a new DSN token").option("--ing
     console.log(chalk.dim("The secret must be registered on your Vibgrate ingest API."));
   }
   if (opts.write) {
-    const writePath = path19.resolve(opts.write);
+    const writePath = path17.resolve(opts.write);
     await writeTextFile(writePath, dsn + "\n");
     console.log("");
     console.log(chalk.green("\u2714") + ` DSN written to ${opts.write}`);
-    const root = findGitRoot(path19.dirname(writePath));
-    const rel2 = root ? path19.relative(root, writePath).split(path19.sep).join("/") : "";
+    const root = findGitRoot(path17.dirname(writePath));
+    const rel2 = root ? path17.relative(root, writePath).split(path17.sep).join("/") : "";
     if (root && rel2 && !rel2.startsWith("..")) {
-      const res = ensureGitignored(rel2, path19.dirname(writePath));
+      const res = ensureGitignored(rel2, path17.dirname(writePath));
       if (res.status === "created") {
         console.log(chalk.green("\u2714") + ` Created .gitignore and ignored ${rel2}`);
       } else if (res.status === "added") {
@@ -4865,30 +4668,30 @@ dsnCommand.command("create").description("Create a new DSN token").option("--ing
 var STORE_DIRNAME = ".vibgrate";
 var STORE_FILENAME = "credentials.json";
 function homeCredentialsPath() {
-  return path19.join(os.homedir(), STORE_DIRNAME, STORE_FILENAME);
+  return path17.join(os.homedir(), STORE_DIRNAME, STORE_FILENAME);
 }
 function projectCredentialsPath(cwd = process.cwd()) {
   const root = findGitRoot(cwd) ?? cwd;
-  return path19.join(root, STORE_DIRNAME, STORE_FILENAME);
+  return path17.join(root, STORE_DIRNAME, STORE_FILENAME);
 }
 function credentialsPath(opts = {}) {
   const override = process.env.VIBGRATE_CREDENTIALS?.trim();
-  if (override) return path19.resolve(override);
+  if (override) return path17.resolve(override);
   const local = projectCredentialsPath(opts.cwd);
   if (opts.local) return local;
-  if (fs19.existsSync(local)) return local;
+  if (fs17.existsSync(local)) return local;
   return homeCredentialsPath();
 }
 function gitignoreEntryForCredentials(repoRoot, credsFile = credentialsPath()) {
-  const rel2 = path19.relative(repoRoot, credsFile);
-  if (rel2 && !rel2.startsWith("..") && !path19.isAbsolute(rel2)) {
-    return rel2.split(path19.sep).join("/");
+  const rel2 = path17.relative(repoRoot, credsFile);
+  if (rel2 && !rel2.startsWith("..") && !path17.isAbsolute(rel2)) {
+    return rel2.split(path17.sep).join("/");
   }
   return `${STORE_DIRNAME}/${STORE_FILENAME}`;
 }
 function readStoredCredentials(opts = {}) {
   try {
-    const raw = fs19.readFileSync(credentialsPath(opts), "utf8");
+    const raw = fs17.readFileSync(credentialsPath(opts), "utf8");
     const parsed = JSON.parse(raw);
     return parsed && typeof parsed.dsn === "string" && parsed.dsn ? parsed : null;
   } catch {
@@ -4897,16 +4700,16 @@ function readStoredCredentials(opts = {}) {
 }
 function writeStoredCredentials(creds, opts = {}) {
   const file = credentialsPath(opts);
-  fs19.mkdirSync(path19.dirname(file), { recursive: true });
-  fs19.writeFileSync(file, JSON.stringify(creds, null, 2) + "\n", { encoding: "utf8", mode: 384 });
+  fs17.mkdirSync(path17.dirname(file), { recursive: true });
+  fs17.writeFileSync(file, JSON.stringify(creds, null, 2) + "\n", { encoding: "utf8", mode: 384 });
   try {
-    fs19.chmodSync(file, 384);
+    fs17.chmodSync(file, 384);
   } catch {
   }
 }
 function clearStoredCredentials(opts = {}) {
   try {
-    fs19.rmSync(credentialsPath(opts));
+    fs17.rmSync(credentialsPath(opts));
     return true;
   } catch {
     return false;
@@ -5277,7 +5080,7 @@ var pushCommand = new Command("push").description("Push scan results to Vibgrate
     if (opts.strict) process.exit(1);
     return;
   }
-  const filePath = path19.resolve(opts.file);
+  const filePath = path17.resolve(opts.file);
   if (!await pathExists(filePath)) {
     console.error(chalk.red(`Scan artifact not found: ${filePath}`));
     console.error(chalk.dim('Run "vibgrate scan" first.'));
@@ -5340,8 +5143,8 @@ var pushCommand = new Command("push").description("Push scan results to Vibgrate
 });
 function readScanArtifact(root) {
   try {
-    const file = path19.join(root, ".vibgrate", "scan_result.json");
-    return JSON.parse(fs19.readFileSync(file, "utf8"));
+    const file = path17.join(root, ".vibgrate", "scan_result.json");
+    return JSON.parse(fs17.readFileSync(file, "utf8"));
   } catch {
     return null;
   }
@@ -5731,7 +5534,7 @@ var CACHE_VERSION2 = "vg-hosted-docs/1";
 var HOSTED_DOCS_TTL_MS = 24 * 60 * 60 * 1e3;
 var MAX_ENTRIES = 64;
 function cachePath2(root) {
-  return path19.join(cacheDir(root), "hosted-docs.json");
+  return path17.join(cacheDir(root), "hosted-docs.json");
 }
 function hostedDocsCacheKey(req, opts = {}) {
   const material = JSON.stringify([
@@ -5747,7 +5550,7 @@ function hostedDocsCacheKey(req, opts = {}) {
 }
 function loadFile(root) {
   try {
-    const parsed = JSON.parse(fs19.readFileSync(cachePath2(root), "utf8"));
+    const parsed = JSON.parse(fs17.readFileSync(cachePath2(root), "utf8"));
     if (parsed && parsed.version === CACHE_VERSION2 && parsed.entries && typeof parsed.entries === "object") return parsed;
   } catch {
   }
@@ -5761,8 +5564,8 @@ function saveFile(root, file) {
         delete file.entries[k];
       }
     }
-    fs19.mkdirSync(cacheDir(root), { recursive: true });
-    fs19.writeFileSync(cachePath2(root), JSON.stringify(file));
+    fs17.mkdirSync(cacheDir(root), { recursive: true });
+    fs17.writeFileSync(cachePath2(root), JSON.stringify(file));
   } catch {
   }
 }
@@ -5881,7 +5684,7 @@ function measure(root, files) {
   for (const rel2 of files) {
     let size;
     try {
-      size = fs19.statSync(path19.join(root, rel2)).size;
+      size = fs17.statSync(path17.join(root, rel2)).size;
     } catch {
       continue;
     }
@@ -5904,9 +5707,9 @@ function matchLines(text, needleLower) {
 }
 function readCandidate(abs, knownSize) {
   try {
-    const size = knownSize ?? fs19.statSync(abs).size;
+    const size = knownSize ?? fs17.statSync(abs).size;
     if (size > MAX_FILE_BYTES) return null;
-    const text = fs19.readFileSync(abs, "utf8");
+    const text = fs17.readFileSync(abs, "utf8");
     return text.includes(NUL) ? null : text;
   } catch {
     return null;
@@ -5917,7 +5720,7 @@ function scanInline(root, files, needleLower, cap, stopAtCap, sizes) {
   let total = 0;
   let truncated = false;
   for (const rel2 of files) {
-    const text = readCandidate(path19.join(root, rel2), sizes?.get(rel2));
+    const text = readCandidate(path17.join(root, rel2), sizes?.get(rel2));
     if (text === null) continue;
     for (const h of matchLines(text, needleLower)) {
       total++;
@@ -6096,13 +5899,13 @@ function walkCandidates(root) {
     const dir = stack.pop();
     let entries;
     try {
-      entries = fs19.readdirSync(dir, { withFileTypes: true });
+      entries = fs17.readdirSync(dir, { withFileTypes: true });
     } catch {
       continue;
     }
     for (const e of entries) {
       if (e.name.startsWith(".") || IGNORE_DIRS.has(e.name)) continue;
-      const abs = path19.join(dir, e.name);
+      const abs = path17.join(dir, e.name);
       if (e.isDirectory()) {
         stack.push(abs);
         continue;
@@ -6111,7 +5914,7 @@ function walkCandidates(root) {
         truncated = true;
         continue;
       }
-      files.push(path19.relative(root, abs));
+      files.push(path17.relative(root, abs));
     }
   }
   files.sort();
@@ -6827,211 +6630,19 @@ function navigationToolsetConfig(serverName = "vibgrate") {
     configs: Object.fromEntries(HOT_TOOLS.map((n) => [n, { defer_loading: false }]))
   };
 }
-var PROBE_INTERVAL_MS = 2e3;
-var MAX_PROBE_INTERVAL_MS = 3e4;
-var PROBE_DUTY_FACTOR = 20;
-var REFRESH_BUDGET_MS = 5e3;
-var FAILURE_COOLDOWN_MS = 6e4;
-var GraphSource = class {
-  constructor(graphPath, refresh = false, tuning = {}) {
-    this.graphPath = graphPath;
-    this.refresh = refresh;
-    this.tuning = tuning;
-    this.root = path19.dirname(path19.dirname(graphPath));
-  }
-  graphPath;
-  refresh;
-  tuning;
-  cachedMtimeMs = -1;
-  cached = null;
-  root;
-  lastProbeAt = 0;
-  failedUntil = 0;
-  inflight = null;
-  /** Self-tuned: grows with measured probe cost so huge repos aren't penalized. */
-  probeIntervalMs = PROBE_INTERVAL_MS;
-  /** Current graph: auto-refreshed if the tree drifted, reloaded if the file changed. */
-  async get() {
-    if (this.refresh) await this.maybeRefresh();
-    const stat = fs19.statSync(this.graphPath);
-    if (stat.mtimeMs !== this.cachedMtimeMs || !this.cached) {
-      this.cached = parseGraph(fs19.readFileSync(this.graphPath, "utf8"));
-      this.cachedMtimeMs = stat.mtimeMs;
-    }
-    return this.cached;
-  }
-  /**
-   * Debounced, single-flight refresh. Never throws — a refresh problem must
-   * degrade to "answer from the current map", not break the tool call.
-   */
-  async maybeRefresh() {
-    const now = Date.now();
-    if (!this.inflight) {
-      const interval = this.tuning.probeIntervalMs ?? this.probeIntervalMs;
-      if (now < this.failedUntil || now - this.lastProbeAt < interval) return;
-      this.lastProbeAt = now;
-      this.inflight = refreshIfStale(this.root).then((r) => {
-        if (r.status === "error") this.failedUntil = Date.now() + FAILURE_COOLDOWN_MS;
-        if (r.status === "fresh" || r.status === "no-snapshot" || r.status === "locked") {
-          const cost = Date.now() - now;
-          this.probeIntervalMs = Math.min(
-            MAX_PROBE_INTERVAL_MS,
-            Math.max(PROBE_INTERVAL_MS, cost * PROBE_DUTY_FACTOR)
-          );
-        }
-      }).catch(() => {
-        this.failedUntil = Date.now() + FAILURE_COOLDOWN_MS;
-      }).finally(() => {
-        this.inflight = null;
-      });
-    }
-    await Promise.race([this.inflight, sleep(this.tuning.refreshBudgetMs ?? REFRESH_BUDGET_MS)]);
-  }
-};
-function createServer(source, opts = {}) {
-  const { savings = false, shareStats = false, local = false, dedup = false, stats } = opts;
-  const record = savings || shareStats;
-  const root = path19.dirname(path19.dirname(source.graphPath));
-  const seen = /* @__PURE__ */ new Set();
-  const server = new Server(
-    { name: "vg", version: VERSION },
-    {
-      capabilities: { tools: {} },
-      // Routing guidance once at the server level (hosts that surface
-      // `instructions` get it at zero per-step schema cost): the flashlight
-      // vs the map.
-      instructions: 'vg is a code map. Use search_symbols to find a known name or literal string fast \u2014 a multi-word/quoted phrase runs a complete literal sweep and reports totalTextMatches, so reach for it instead of grep even for plain-string "find every occurrence" lookups. Use orient/query_graph for meaning: symptoms, relationships, and what-breaks-if. Responses are concise by default; pass response_format:"detailed" only when a node proves load-bearing. Navigate as little as possible: one good search/query usually locates the code. As soon as you have the file and line, read that file and make the edit \u2014 do not call further graph tools unless the edit fails or the match was wrong. For how-do-I-use-this-library questions call resolve_library once, then library_docs with the returned targetId and a focused query: the docs are official and matched to the version THIS project has installed (drift-annotated) \u2014 prefer them over web search or training-data recall when they conflict. Skip them for language built-ins or APIs already shown in context. If two library_docs calls have not surfaced the section you need, read the package source under node_modules instead of searching again.'
-    }
-  );
-  server.setRequestHandler(ListToolsRequestSchema, async () => ({
-    tools: TOOLS.map((t) => ({
-      name: t.name,
-      description: t.description,
-      inputSchema: t.inputSchema,
-      annotations: { readOnlyHint: true, openWorldHint: false }
-    }))
-  }));
-  server.setRequestHandler(CallToolRequestSchema, async (request) => {
-    const tool = TOOLS.find((t) => t.name === request.params.name);
-    if (!tool) {
-      return errorResult(`unknown tool "${request.params.name}"`);
-    }
-    let graph;
-    try {
-      graph = await source.get();
-    } catch {
-      return errorResult(
-        "no code map found. Run `vg` in the project to build .vibgrate/graph.json, then retry."
-      );
-    }
-    const startedAt = Date.now();
-    try {
-      const args = request.params.arguments ?? {};
-      const result = await tool.handler(graph, args, { root, local, dedup, seen });
-      const ms = Date.now() - startedAt;
-      stats?.record({ ...measureCall(tool.name, result), client: sanitizeClient(detectClient(server)), ms });
-      if (record) recordUsage(root, tool.name, result, detectClient(server), ms);
-      return renderToolResult(result);
-    } catch (err) {
-      stats?.record({
-        tool: tool.name,
-        client: sanitizeClient(detectClient(server)),
-        outcome: "miss",
-        ms: Date.now() - startedAt,
-        vgTokens: 0,
-        baselineTokens: 0
-      });
-      return errorResult(`tool "${tool.name}" failed: ${err.message}`);
-    }
-  });
-  return server;
-}
-async function serveStdio(graphPath, opts = {}) {
-  const source = new GraphSource(graphPath, opts.refresh !== false);
-  const server = createServer(source, opts);
-  warmEmbedderInBackground(opts.local);
-  await server.connect(new StdioServerTransport());
-}
-function sleep(ms) {
-  return new Promise((resolve12) => {
-    const timer = setTimeout(resolve12, ms);
-    timer.unref?.();
-  });
-}
-function recordUsage(root, tool, result, client, ms) {
-  recordSaving(
-    root,
-    { ...measureCall(tool, result), source: "mcp", client: sanitizeClient(client), ...ms !== void 0 ? { ms } : {} },
-    Date.now()
-  );
-}
-function measureCall(tool, result) {
-  const outcome = classifyOutcome(result);
-  let vgTokens = 0;
-  let baselineTokens = 0;
-  if (SAVINGS_TOOLS.has(tool) && result && typeof result === "object") {
-    vgTokens = countTokens(renderedText(renderToolResult(result)));
-    baselineTokens = referencedFiles(result).size * PER_FILE_TOKENS;
-  }
-  return { tool, outcome, vgTokens, baselineTokens };
-}
-function detectClient(server) {
-  try {
-    const info = server.getClientVersion?.();
-    return typeof info?.name === "string" ? info.name : void 0;
-  } catch {
-    return void 0;
-  }
-}
-function classifyOutcome(result) {
-  if (Array.isArray(result)) return result.length === 0 ? "miss" : "complete";
-  if (!result || typeof result !== "object") return "miss";
-  const r = result;
-  if (typeof r.error === "string" && r.error) return "miss";
-  if (r.connected === false) return "miss";
-  if (Array.isArray(r.matches) && r.matches.length === 0) return "miss";
-  return isPartial(r) ? "partial" : "complete";
-}
-function isPartial(r) {
-  if (r.moreAvailable === true) return true;
-  if (r._truncated && typeof r._truncated === "object") return true;
-  for (const [key, value] of Object.entries(r)) {
-    if (typeof value !== "number" || !key.endsWith("Total")) continue;
-    const base = key.slice(0, -"Total".length);
-    const shown = Array.isArray(r[base]) ? r[base].length : 0;
-    if (value > shown) return true;
-  }
-  return false;
-}
-function renderedText(rendered) {
-  const block = rendered.content?.find((b) => b.type === "text");
-  return block && "text" in block && typeof block.text === "string" ? block.text : "";
-}
-function referencedFiles(result) {
-  const r = result;
-  const files = /* @__PURE__ */ new Set();
-  if (typeof r.file === "string" && r.file) files.add(r.file);
-  for (const m of asArray(r.matches)) {
-    const f = m.file;
-    if (typeof f === "string" && f) files.add(f);
-  }
-  for (const name of [...asArray(r.calls), ...asArray(r.calledBy)]) {
-    if (typeof name !== "string") continue;
-    const i = name.indexOf(":");
-    if (i > 0) files.add(name.slice(0, i));
-  }
-  return files;
-}
-function asArray(v) {
-  return Array.isArray(v) ? v : [];
-}
-function errorResult(message) {
-  return { content: [{ type: "text", text: message }], isError: true };
-}
 
 // src/install/content.ts
 var NUDGE_BEGIN = "<!-- vg:begin -->";
 var NUDGE_END = "<!-- vg:end -->";
+var INSTALL_CONTENT_VERSION = 2;
+var VERSION_MARKER_RE = /<!--\s*vg:v(\d+)\b[^>]*-->/;
+function versionMarker() {
+  return `<!-- vg:v${INSTALL_CONTENT_VERSION} \xB7 managed by \`vg install\` \u2014 auto-refreshed when these instructions evolve; remove this line to opt out -->`;
+}
+function installedContentVersion(text) {
+  const m = VERSION_MARKER_RE.exec(text);
+  return m ? Number(m[1]) : null;
+}
 function clientFlag(client) {
   return client ? `--client=${client}` : "--client=<your-ai>";
 }
@@ -7042,26 +6653,31 @@ name: vg
 description: Query the local code graph (vg) for structure, impact, and navigation instead of grepping/reading many files.
 ---
 
+${versionMarker()}
+
 # vg \u2014 the code map
 
 This repo has a deterministic code graph built by \`vg\`. Prefer it over reading or
 grepping many files \u2014 it is smaller, more relevant context, and free.
 
-## Prefer the MCP tools
+## Use the MCP tools \u2014 not the CLI
 
-If the \`vg\` MCP server is registered (it is after \`vg install\`), call its
-read-only tools directly \u2014 they are the **fastest** path. The server keeps the
-map parsed, the relation index warm, and the embedding model loaded across calls,
-so each query is cheaper than spawning the CLI fresh. Use:
+When the \`vg\` MCP server is registered (it is after \`vg install\`), **always call
+its read-only tools instead of shelling out to the CLI.** The server keeps the
+map parsed, the relation index warm, and the embedding model loaded across
+calls, so an MCP call answers in milliseconds \u2014 while every CLI invocation pays
+Node startup plus a fresh map parse, hundreds of times more. Tools:
 \`query_graph\`, \`get_node\`, \`impact_of\`, \`find_path\`, \`list_hubs\`, \`list_areas\`,
 \`get_graph_summary\`, \`search_symbols\`. They are side-effect-free and
 auto-approvable, and the server records which client is calling automatically.
+Reach for the CLI only when the MCP server is genuinely unavailable \u2014 never as
+the first resort.
 
-## If you use the \`vg\` CLI instead
+## CLI fallback \u2014 only when the MCP server is unavailable
 
-When the MCP server isn't available, use the CLI \u2014 and **always pass \`${cf}\`**
-so your calls are counted (that's how the CLI-vs-MCP split is measured and the
-tools improved):
+If (and only if) no \`vg\` MCP server is available, use the CLI \u2014 and **always
+pass \`${cf}\`** so your calls are counted (that's how the CLI-vs-MCP split is
+measured and the tools improved):
 
 - **Understand code:** \`vg "<question>" ${cf}\` \u2014 a budget-bounded, fact-annotated context block.
 - **Find a symbol:** \`vg show <name> ${cf}\` \u2014 what it is, what it calls, what calls it.
@@ -7104,22 +6720,28 @@ function nudgeMarkdown(smallRepo, client) {
   const cf = clientFlag(client);
   if (smallRepo) {
     return `${NUDGE_BEGIN}
+${versionMarker()}
 ## Code navigation (vg)
 
 This repo is small enough that searching files directly is fine. Still, before a
-change, \`vg impact <name> ${cf}\` shows what it breaks, and \`vg "<question>" ${cf}\`
-gives a compact, cited context block when you want one. Prefer the \`vg\` MCP tools
-when the server is registered; when you use the CLI, pass \`${cf}\` so the call is
-counted.
+change, the \`vg\` graph shows what breaks: use the \`vg\` MCP tools when the server
+is registered (\`impact_of\`, \`query_graph\` \u2014 the warm server answers far faster
+than spawning the CLI). Only without the server, fall back to the CLI and pass
+\`${cf}\` so the call is counted: \`vg impact <name> ${cf}\`,
+\`vg "<question>" ${cf}\`.
 ${NUDGE_END}`;
   }
   return `${NUDGE_BEGIN}
-## Code navigation (vg) \u2014 prefer the map
+${versionMarker()}
+## Code navigation (vg) \u2014 use the MCP tools first
 
 A deterministic code graph is available. It is usually the faster, cheaper path
-than reading or grepping many files. Prefer the \`vg\` MCP tools when the server is
-registered (fastest \u2014 the map and model stay warm across calls). When you use the
-CLI instead, pass \`${cf}\` so the call is counted:
+than reading or grepping many files. **When the \`vg\` MCP server is registered,
+always use its tools** (\`query_graph\`, \`get_node\`, \`impact_of\`,
+\`search_symbols\`, \u2026) \u2014 the map, indexes, and embedding model stay warm across
+calls, so they answer in milliseconds, while every CLI invocation pays Node
+startup plus a fresh map parse. Fall back to the CLI only when the server is
+unavailable, and then pass \`${cf}\` so the call is counted:
 
 - \`vg "<question>" ${cf}\` \u2014 a compact, fact-annotated context block for a question.
 - \`vg show <name> ${cf}\` \u2014 what a symbol is, its callers and callees.
@@ -7215,12 +6837,12 @@ function detectAssistants(root, opts = {}) {
   const which = opts.which ?? whichOnPath;
   const found = [];
   for (const assistant of ASSISTANTS) {
-    const repoHit = (assistant.markers ?? []).find((m) => fs19.existsSync(path19.join(root, m)));
+    const repoHit = (assistant.markers ?? []).find((m) => fs17.existsSync(path17.join(root, m)));
     if (repoHit) {
       found.push({ assistant, via: "repo", marker: repoHit });
       continue;
     }
-    const homeHit = (assistant.homeMarkers ?? []).find((m) => fs19.existsSync(path19.join(home, m)));
+    const homeHit = (assistant.homeMarkers ?? []).find((m) => fs17.existsSync(path17.join(home, m)));
     if (homeHit) {
       found.push({ assistant, via: "home", marker: homeHit });
       continue;
@@ -7252,19 +6874,19 @@ function installAssistant(a, opts) {
   const skipped = [];
   let note;
   if (a.skill) {
-    writeFileEnsured(path19.join(opts.root, a.skill), skillMarkdown(a.id));
+    writeFileEnsured(path17.join(opts.root, a.skill), skillMarkdown(a.id));
     wrote.push(a.skill);
   }
   if (a.mcp) {
     const launch = opts.launch ?? detectServeLaunch();
-    upsertMcp(path19.join(opts.root, a.mcp.file), a.mcp, launch);
+    upsertMcp(path17.join(opts.root, a.mcp.file), a.mcp, launch);
     wrote.push(a.mcp.file);
     note = launch.note;
   } else {
     skipped.push("mcp (host-specific setup)");
   }
   if (a.nudge && opts.hook !== false) {
-    writeNudge(path19.join(opts.root, a.nudge.file), a.nudge, opts.smallRepo, a.id);
+    writeNudge(path17.join(opts.root, a.nudge.file), a.nudge, opts.smallRepo, a.id);
     wrote.push(a.nudge.file);
   } else if (a.nudge) {
     skipped.push("nudge (--no-hook)");
@@ -7274,40 +6896,40 @@ function installAssistant(a, opts) {
 function uninstallAssistant(a, root, purge) {
   const removed = [];
   if (a.mcp) {
-    const file = path19.join(root, a.mcp.file);
+    const file = path17.join(root, a.mcp.file);
     if (removeMcp(file, a.mcp)) removed.push(a.mcp.file);
   }
   if (a.nudge) {
-    const file = path19.join(root, a.nudge.file);
+    const file = path17.join(root, a.nudge.file);
     if (a.nudge.kind === "block") {
       if (removeBlock(file)) removed.push(a.nudge.file);
-    } else if (fs19.existsSync(file)) {
-      fs19.rmSync(file);
+    } else if (fs17.existsSync(file)) {
+      fs17.rmSync(file);
       removed.push(a.nudge.file);
     }
   }
   if (purge && a.skill) {
-    const file = path19.join(root, a.skill);
-    if (fs19.existsSync(file)) {
-      fs19.rmSync(file);
+    const file = path17.join(root, a.skill);
+    if (fs17.existsSync(file)) {
+      fs17.rmSync(file);
       removed.push(a.skill);
     }
   }
   return removed;
 }
 function writeFileEnsured(file, content) {
-  fs19.mkdirSync(path19.dirname(file), { recursive: true });
-  fs19.writeFileSync(file, content);
+  fs17.mkdirSync(path17.dirname(file), { recursive: true });
+  fs17.writeFileSync(file, content);
 }
 function writeNavigationConfig(root) {
-  const rel2 = path19.join(".vibgrate", "mcp-navigation.json");
+  const rel2 = path17.join(".vibgrate", "mcp-navigation.json");
   const doc = {
     _readme: "Deferred-loading config for agents embedding `vg serve` via the Claude API (defer_loading + tool-search). The hot navigation core stays in context; the rest load on demand \u2014 ~350-450 schema tokens/step vs ~1,881 for the full set. Hosts without defer_loading ignore this and serve the whole (already optimized) tool set. See docs/graph/VG-NAVIGATION-PROFILE.md.",
     hot_core: [...HOT_TOOLS],
     deferred: deferredToolNames(),
     toolset: navigationToolsetConfig()
   };
-  writeFileEnsured(path19.join(root, rel2), `${JSON.stringify(doc, null, 2)}
+  writeFileEnsured(path17.join(root, rel2), `${JSON.stringify(doc, null, 2)}
 `);
   return rel2;
 }
@@ -7322,7 +6944,7 @@ function upsertMcp(file, target, launch) {
 `);
 }
 function removeMcp(file, target) {
-  if (!fs19.existsSync(file)) return false;
+  if (!fs17.existsSync(file)) return false;
   const config = readJson(file);
   const bag = config[target.key];
   if (!bag || !(bag.vg !== void 0)) return false;
@@ -7331,6 +6953,57 @@ function removeMcp(file, target) {
 `);
   return true;
 }
+var SMALL_REPO_FILES = 150;
+function refreshInstalledInstructions(root, smallRepo) {
+  const out = [];
+  const staleVersion = (text, legacySignature) => {
+    const v = installedContentVersion(text);
+    if (v !== null) return v < INSTALL_CONTENT_VERSION ? v : null;
+    return text.includes(legacySignature) ? 0 : null;
+  };
+  for (const a of ASSISTANTS) {
+    if (a.skill) {
+      const file = path17.join(root, a.skill);
+      if (fs17.existsSync(file)) {
+        const text = readTextSafe(file);
+        const from = text === null ? null : staleVersion(text, "# vg \u2014 the code map");
+        if (from !== null) {
+          writeFileEnsured(file, skillMarkdown(a.id));
+          out.push({ file: a.skill, from, to: INSTALL_CONTENT_VERSION });
+        }
+      }
+    }
+    if (a.nudge) {
+      const file = path17.join(root, a.nudge.file);
+      if (!fs17.existsSync(file)) continue;
+      const text = readTextSafe(file);
+      if (text === null) continue;
+      if (a.nudge.kind === "block") {
+        const block = new RegExp(`${escapeRe(NUDGE_BEGIN)}[\\s\\S]*?${escapeRe(NUDGE_END)}`).exec(text);
+        if (!block) continue;
+        const from = staleVersion(block[0], "## Code navigation (vg)");
+        if (from !== null) {
+          writeNudge(file, a.nudge, smallRepo, a.id);
+          out.push({ file: a.nudge.file, from, to: INSTALL_CONTENT_VERSION });
+        }
+      } else {
+        const from = staleVersion(text, "## Code navigation (vg)");
+        if (from !== null) {
+          writeNudge(file, a.nudge, smallRepo, a.id);
+          out.push({ file: a.nudge.file, from, to: INSTALL_CONTENT_VERSION });
+        }
+      }
+    }
+  }
+  return out;
+}
+function readTextSafe(file) {
+  try {
+    return fs17.readFileSync(file, "utf8");
+  } catch {
+    return null;
+  }
+}
 function writeNudge(file, target, smallRepo, client) {
   if (target.kind === "file") {
     const body = file.endsWith(".mdc") ? `---
@@ -7345,8 +7018,8 @@ ${stripMarkers(nudgeMarkdown(smallRepo, client))}` : stripMarkers(nudgeMarkdown(
   upsertBlock(file, nudgeMarkdown(smallRepo, client));
 }
 function upsertBlock(file, block) {
-  fs19.mkdirSync(path19.dirname(file), { recursive: true });
-  let existing = fs19.existsSync(file) ? fs19.readFileSync(file, "utf8") : "";
+  fs17.mkdirSync(path17.dirname(file), { recursive: true });
+  let existing = fs17.existsSync(file) ? fs17.readFileSync(file, "utf8") : "";
   const re = new RegExp(`${escapeRe(NUDGE_BEGIN)}[\\s\\S]*?${escapeRe(NUDGE_END)}`);
   if (re.test(existing)) existing = existing.replace(re, block);
   else existing = existing.length ? `${existing.replace(/\s*$/, "")}
@@ -7354,20 +7027,20 @@ function upsertBlock(file, block) {
 ${block}
 ` : `${block}
 `;
-  fs19.writeFileSync(file, existing);
+  fs17.writeFileSync(file, existing);
 }
 function removeBlock(file) {
-  if (!fs19.existsSync(file)) return false;
-  const existing = fs19.readFileSync(file, "utf8");
+  if (!fs17.existsSync(file)) return false;
+  const existing = fs17.readFileSync(file, "utf8");
   const re = new RegExp(`\\n*${escapeRe(NUDGE_BEGIN)}[\\s\\S]*?${escapeRe(NUDGE_END)}\\n*`);
   if (!re.test(existing)) return false;
-  fs19.writeFileSync(file, existing.replace(re, "\n"));
+  fs17.writeFileSync(file, existing.replace(re, "\n"));
   return true;
 }
 function readJson(file) {
-  if (!fs19.existsSync(file)) return {};
+  if (!fs17.existsSync(file)) return {};
   try {
-    const parsed = JSON.parse(fs19.readFileSync(file, "utf8"));
+    const parsed = JSON.parse(fs17.readFileSync(file, "utf8"));
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       return parsed;
     }
@@ -7385,6 +7058,425 @@ function stripMarkers(s) {
 function escapeRe(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
+var REFRESH_LOCK_STALE_MS = 10 * 60 * 1e3;
+function refreshLockPath(root) {
+  return path17.join(cacheDir(root), "refresh.lock");
+}
+async function refreshIfStale(root, opts = {}) {
+  const probe = probeFreshness(root);
+  if (!probe) return { status: "no-snapshot" };
+  if (!hasDrift(probe.drift)) return { status: "fresh" };
+  const lock = refreshLockPath(root);
+  if (!acquireLock(lock, REFRESH_LOCK_STALE_MS)) return { status: "locked" };
+  const start = process.hrtime.bigint();
+  try {
+    const { scope } = probe;
+    const result = await buildGraph({
+      root,
+      only: scope.only,
+      exclude: scope.exclude,
+      paths: scope.paths,
+      deep: scope.deep,
+      noGround: scope.noGround,
+      scip: scope.scip,
+      noScip: scope.noScip,
+      noTsc: scope.noTsc,
+      cluster: scope.cluster,
+      grammarsDir: scope.grammarsDir,
+      inline: opts.inline,
+      jobs: opts.jobs
+    });
+    const wrote = result.graph.provenance.corpusHash !== probe.corpusHash;
+    if (wrote) {
+      const dir = vibgrateDir(root);
+      writeArtifacts(result.graph, {
+        root,
+        report: fs17.existsSync(path17.join(dir, "GRAPH_REPORT.md")),
+        html: fs17.existsSync(path17.join(dir, "graph.html"))
+      });
+    }
+    writeSnapshot(root, result.graph.provenance.corpusHash, result.fileStats, scope);
+    const ms = Number((process.hrtime.bigint() - start) / 1000000n);
+    return {
+      status: "refreshed",
+      drift: probe.drift,
+      ms,
+      reparsed: result.reparsed,
+      totalFiles: result.totalFiles,
+      wrote
+    };
+  } catch (err) {
+    return { status: "error", message: err.message };
+  } finally {
+    releaseLock(lock);
+  }
+}
+var LEDGER = "savings.jsonl";
+var PER_FILE_TOKENS = 400;
+var SAVINGS_TOOLS = /* @__PURE__ */ new Set(["query_graph", "get_node"]);
+var CLI_TOOL_ALIASES = {
+  ask: "query_graph",
+  show: "get_node",
+  impact: "impact_of",
+  path: "find_path",
+  hubs: "list_hubs",
+  areas: "list_areas",
+  tree: "tree"
+};
+function sanitizeClient(name) {
+  if (typeof name !== "string") return "unknown";
+  const cleaned = name.trim().toLowerCase().replace(/[^a-z0-9._-]+/g, "-").replace(/^-+|-+$/g, "").slice(0, 40);
+  return cleaned || "unknown";
+}
+function recordCliCall(root, entry, now) {
+  recordSaving(
+    root,
+    {
+      tool: entry.tool,
+      source: "cli",
+      client: sanitizeClient(entry.client),
+      outcome: entry.outcome,
+      vgTokens: entry.vgTokens ?? 0,
+      baselineTokens: (entry.baselineFiles ?? 0) * PER_FILE_TOKENS
+    },
+    now
+  );
+}
+function savingsLedgerPath(root) {
+  return path17.join(cacheDir(root), LEDGER);
+}
+function ledgerPath(root) {
+  return savingsLedgerPath(root);
+}
+function savingsRecorded(root) {
+  return fs17.existsSync(ledgerPath(root));
+}
+function recordSaving(root, entry, now) {
+  try {
+    fs17.mkdirSync(cacheDir(root), { recursive: true });
+    const line = JSON.stringify({ ts: now, ...entry });
+    fs17.appendFileSync(ledgerPath(root), line + "\n");
+  } catch {
+  }
+}
+var DEFAULT_RATE_PER_M = 3;
+var DEFAULT_RATE_LABEL = "input @ $3/1M";
+function readSavings(root, days, now, ratePerM = DEFAULT_RATE_PER_M) {
+  const file = ledgerPath(root);
+  const cutoff = now - days * 24 * 60 * 60 * 1e3;
+  let queries = 0;
+  let vgTokens = 0;
+  let baselineTokens = 0;
+  if (fs17.existsSync(file)) {
+    for (const line of fs17.readFileSync(file, "utf8").split("\n")) {
+      if (!line.trim()) continue;
+      try {
+        const e = JSON.parse(line);
+        if (e.ts < cutoff) continue;
+        if (!SAVINGS_TOOLS.has(e.tool)) continue;
+        queries++;
+        vgTokens += e.vgTokens;
+        baselineTokens += e.baselineTokens;
+      } catch {
+      }
+    }
+  }
+  const estCostVg = vgTokens / 1e6 * ratePerM;
+  const estCostBaseline = baselineTokens / 1e6 * ratePerM;
+  return {
+    enabled: savingsRecorded(root),
+    days,
+    queries,
+    vgTokens,
+    baselineTokens,
+    ratio: vgTokens > 0 ? Math.round(baselineTokens / vgTokens * 100) / 100 : 0,
+    estCostVg: round22(estCostVg),
+    estCostBaseline: round22(estCostBaseline),
+    saved: round22(estCostBaseline - estCostVg),
+    rateLabel: DEFAULT_RATE_LABEL
+  };
+}
+function round22(x) {
+  return Math.round(x * 100) / 100;
+}
+function toDimensionStats(byKey) {
+  return [...byKey.entries()].map(([key, r]) => {
+    const calls = r.complete + r.partial + r.miss;
+    return {
+      key,
+      calls,
+      complete: r.complete,
+      partial: r.partial,
+      miss: r.miss,
+      successPct: calls ? Math.round((r.complete + r.partial) / calls * 100) : 0
+    };
+  }).sort((a, b) => b.calls - a.calls || a.key.localeCompare(b.key));
+}
+function readUsage(root, days, now) {
+  const file = ledgerPath(root);
+  const cutoff = now - days * 24 * 60 * 60 * 1e3;
+  const byTool = /* @__PURE__ */ new Map();
+  const bySource = /* @__PURE__ */ new Map();
+  const byClient = /* @__PURE__ */ new Map();
+  const msByTool = /* @__PURE__ */ new Map();
+  const bump2 = (m, key, outcome) => {
+    const row = m.get(key) ?? { complete: 0, partial: 0, miss: 0 };
+    row[outcome]++;
+    m.set(key, row);
+  };
+  if (fs17.existsSync(file)) {
+    for (const line of fs17.readFileSync(file, "utf8").split("\n")) {
+      if (!line.trim()) continue;
+      try {
+        const e = JSON.parse(line);
+        if (e.ts < cutoff) continue;
+        const outcome = e.outcome ?? "complete";
+        bump2(byTool, e.tool, outcome);
+        bump2(bySource, e.source ?? "mcp", outcome);
+        bump2(byClient, e.client ?? "unknown", outcome);
+        if (typeof e.ms === "number" && e.ms >= 0) {
+          const timing = msByTool.get(e.tool) ?? { sum: 0, n: 0 };
+          timing.sum += e.ms;
+          timing.n++;
+          msByTool.set(e.tool, timing);
+        }
+      } catch {
+      }
+    }
+  }
+  const commands = toDimensionStats(byTool).map((d) => {
+    const timing = msByTool.get(d.key);
+    return {
+      tool: d.key,
+      calls: d.calls,
+      complete: d.complete,
+      partial: d.partial,
+      miss: d.miss,
+      successPct: d.successPct,
+      avgMs: timing && timing.n > 0 ? Math.round(timing.sum / timing.n) : null
+    };
+  });
+  const totals = commands.reduce(
+    (t, c) => ({
+      calls: t.calls + c.calls,
+      complete: t.complete + c.complete,
+      partial: t.partial + c.partial,
+      miss: t.miss + c.miss
+    }),
+    { calls: 0, complete: 0, partial: 0, miss: 0 }
+  );
+  const avgSuccessPct = commands.length ? Math.round(commands.reduce((s, c) => s + c.successPct, 0) / commands.length) : 0;
+  return {
+    enabled: savingsRecorded(root),
+    days,
+    commands,
+    sources: toDimensionStats(bySource),
+    clients: toDimensionStats(byClient),
+    totals,
+    avgSuccessPct
+  };
+}
+var PROBE_INTERVAL_MS = 2e3;
+var MAX_PROBE_INTERVAL_MS = 3e4;
+var PROBE_DUTY_FACTOR = 20;
+var REFRESH_BUDGET_MS = 5e3;
+var FAILURE_COOLDOWN_MS = 6e4;
+var GraphSource = class {
+  constructor(graphPath, refresh = false, tuning = {}) {
+    this.graphPath = graphPath;
+    this.refresh = refresh;
+    this.tuning = tuning;
+    this.root = path17.dirname(path17.dirname(graphPath));
+  }
+  graphPath;
+  refresh;
+  tuning;
+  cachedMtimeMs = -1;
+  cached = null;
+  root;
+  lastProbeAt = 0;
+  failedUntil = 0;
+  inflight = null;
+  /** Self-tuned: grows with measured probe cost so huge repos aren't penalized. */
+  probeIntervalMs = PROBE_INTERVAL_MS;
+  /** Current graph: auto-refreshed if the tree drifted, reloaded if the file changed. */
+  async get() {
+    if (this.refresh) await this.maybeRefresh();
+    const stat = fs17.statSync(this.graphPath);
+    if (stat.mtimeMs !== this.cachedMtimeMs || !this.cached) {
+      this.cached = parseGraph(fs17.readFileSync(this.graphPath, "utf8"));
+      this.cachedMtimeMs = stat.mtimeMs;
+    }
+    return this.cached;
+  }
+  /**
+   * Debounced, single-flight refresh. Never throws — a refresh problem must
+   * degrade to "answer from the current map", not break the tool call.
+   */
+  async maybeRefresh() {
+    const now = Date.now();
+    if (!this.inflight) {
+      const interval = this.tuning.probeIntervalMs ?? this.probeIntervalMs;
+      if (now < this.failedUntil || now - this.lastProbeAt < interval) return;
+      this.lastProbeAt = now;
+      this.inflight = refreshIfStale(this.root).then((r) => {
+        if (r.status === "error") this.failedUntil = Date.now() + FAILURE_COOLDOWN_MS;
+        if (r.status === "fresh" || r.status === "no-snapshot" || r.status === "locked") {
+          const cost = Date.now() - now;
+          this.probeIntervalMs = Math.min(
+            MAX_PROBE_INTERVAL_MS,
+            Math.max(PROBE_INTERVAL_MS, cost * PROBE_DUTY_FACTOR)
+          );
+        }
+      }).catch(() => {
+        this.failedUntil = Date.now() + FAILURE_COOLDOWN_MS;
+      }).finally(() => {
+        this.inflight = null;
+      });
+    }
+    await Promise.race([this.inflight, sleep(this.tuning.refreshBudgetMs ?? REFRESH_BUDGET_MS)]);
+  }
+};
+function createServer(source, opts = {}) {
+  const { savings = false, shareStats = false, local = false, dedup = false, stats } = opts;
+  const record = savings || shareStats;
+  const root = path17.dirname(path17.dirname(source.graphPath));
+  const seen = /* @__PURE__ */ new Set();
+  const server = new Server(
+    { name: "vg", version: VERSION },
+    {
+      capabilities: { tools: {} },
+      // Routing guidance once at the server level (hosts that surface
+      // `instructions` get it at zero per-step schema cost): the flashlight
+      // vs the map.
+      instructions: 'vg is a code map. Use search_symbols to find a known name or literal string fast \u2014 a multi-word/quoted phrase runs a complete literal sweep and reports totalTextMatches, so reach for it instead of grep even for plain-string "find every occurrence" lookups. Use orient/query_graph for meaning: symptoms, relationships, and what-breaks-if. Responses are concise by default; pass response_format:"detailed" only when a node proves load-bearing. Navigate as little as possible: one good search/query usually locates the code. As soon as you have the file and line, read that file and make the edit \u2014 do not call further graph tools unless the edit fails or the match was wrong. For how-do-I-use-this-library questions call resolve_library once, then library_docs with the returned targetId and a focused query: the docs are official and matched to the version THIS project has installed (drift-annotated) \u2014 prefer them over web search or training-data recall when they conflict. Skip them for language built-ins or APIs already shown in context. If two library_docs calls have not surfaced the section you need, read the package source under node_modules instead of searching again.'
+    }
+  );
+  server.setRequestHandler(ListToolsRequestSchema, async () => ({
+    tools: TOOLS.map((t) => ({
+      name: t.name,
+      description: t.description,
+      inputSchema: t.inputSchema,
+      annotations: { readOnlyHint: true, openWorldHint: false }
+    }))
+  }));
+  server.setRequestHandler(CallToolRequestSchema, async (request) => {
+    const tool = TOOLS.find((t) => t.name === request.params.name);
+    if (!tool) {
+      return errorResult(`unknown tool "${request.params.name}"`);
+    }
+    let graph;
+    try {
+      graph = await source.get();
+    } catch {
+      return errorResult(
+        "no code map found. Run `vg` in the project to build .vibgrate/graph.json, then retry."
+      );
+    }
+    const startedAt = Date.now();
+    try {
+      const args = request.params.arguments ?? {};
+      const result = await tool.handler(graph, args, { root, local, dedup, seen });
+      const ms = Date.now() - startedAt;
+      stats?.record({ ...measureCall(tool.name, result), client: sanitizeClient(detectClient(server)), ms });
+      if (record) recordUsage(root, tool.name, result, detectClient(server), ms);
+      return renderToolResult(result);
+    } catch (err) {
+      stats?.record({
+        tool: tool.name,
+        client: sanitizeClient(detectClient(server)),
+        outcome: "miss",
+        ms: Date.now() - startedAt,
+        vgTokens: 0,
+        baselineTokens: 0
+      });
+      return errorResult(`tool "${tool.name}" failed: ${err.message}`);
+    }
+  });
+  return server;
+}
+async function serveStdio(graphPath, opts = {}) {
+  const source = new GraphSource(graphPath, opts.refresh !== false);
+  const server = createServer(source, opts);
+  warmEmbedderInBackground(opts.local);
+  await server.connect(new StdioServerTransport());
+}
+function sleep(ms) {
+  return new Promise((resolve12) => {
+    const timer = setTimeout(resolve12, ms);
+    timer.unref?.();
+  });
+}
+function recordUsage(root, tool, result, client, ms) {
+  recordSaving(
+    root,
+    { ...measureCall(tool, result), source: "mcp", client: sanitizeClient(client), ...ms !== void 0 ? { ms } : {} },
+    Date.now()
+  );
+}
+function measureCall(tool, result) {
+  const outcome = classifyOutcome(result);
+  let vgTokens = 0;
+  let baselineTokens = 0;
+  if (SAVINGS_TOOLS.has(tool) && result && typeof result === "object") {
+    vgTokens = countTokens(renderedText(renderToolResult(result)));
+    baselineTokens = referencedFiles(result).size * PER_FILE_TOKENS;
+  }
+  return { tool, outcome, vgTokens, baselineTokens };
+}
+function detectClient(server) {
+  try {
+    const info = server.getClientVersion?.();
+    return typeof info?.name === "string" ? info.name : void 0;
+  } catch {
+    return void 0;
+  }
+}
+function classifyOutcome(result) {
+  if (Array.isArray(result)) return result.length === 0 ? "miss" : "complete";
+  if (!result || typeof result !== "object") return "miss";
+  const r = result;
+  if (typeof r.error === "string" && r.error) return "miss";
+  if (r.connected === false) return "miss";
+  if (Array.isArray(r.matches) && r.matches.length === 0) return "miss";
+  return isPartial(r) ? "partial" : "complete";
+}
+function isPartial(r) {
+  if (r.moreAvailable === true) return true;
+  if (r._truncated && typeof r._truncated === "object") return true;
+  for (const [key, value] of Object.entries(r)) {
+    if (typeof value !== "number" || !key.endsWith("Total")) continue;
+    const base = key.slice(0, -"Total".length);
+    const shown = Array.isArray(r[base]) ? r[base].length : 0;
+    if (value > shown) return true;
+  }
+  return false;
+}
+function renderedText(rendered) {
+  const block = rendered.content?.find((b) => b.type === "text");
+  return block && "text" in block && typeof block.text === "string" ? block.text : "";
+}
+function referencedFiles(result) {
+  const r = result;
+  const files = /* @__PURE__ */ new Set();
+  if (typeof r.file === "string" && r.file) files.add(r.file);
+  for (const m of asArray(r.matches)) {
+    const f = m.file;
+    if (typeof f === "string" && f) files.add(f);
+  }
+  for (const name of [...asArray(r.calls), ...asArray(r.calledBy)]) {
+    if (typeof name !== "string") continue;
+    const i = name.indexOf(":");
+    if (i > 0) files.add(name.slice(0, i));
+  }
+  return files;
+}
+function asArray(v) {
+  return Array.isArray(v) ? v : [];
+}
+function errorResult(message) {
+  return { content: [{ type: "text", text: message }], isError: true };
+}
 
 // src/engine/export.ts
 function formatForExt(ext) {
@@ -7589,6 +7681,6 @@ function spdx(ctx) {
   return JSON.stringify(doc, null, 2) + "\n";
 }
 
-export { ASSISTANTS, CLI_TOOL_ALIASES, CliError, DEFAULT_RATE_LABEL, DEFAULT_RATE_PER_M, ECOSYSTEMS, ExitCode, FREE_PACK, GraphIndex, GraphSource, NPX_INVOCATION, ResourceLimitError, SAVINGS_TOOLS, SCHEMA_VERSION, SKIP_DIRS, SKIP_FILES, TOOLS, UsageError, addLibrary, analyze, applyCoverage, applyStaticTestLinkage, assessDocQuality, assistantById, availableRegionIds, buildFacts, buildGraph, buildModuleResolver, cacheDir, catalogPath, clearModelCache, clearStoredCredentials, cosine, countPending, countTokens, coveringTests, createServer, createWorkspaceDsn, credentialsPath, dashHostForIngestHost, decodeScipIndex, defaultGraphPath, detectAssistants, detectRunner, detectServeLaunch, discover, discoverModels, driftCount, driftFor, dsnCommand, embeddingsCached, enrichOnline, ensureGitignored, epistemicBreakdown, exportGraph, fetchHostedDocsCached, findGitRoot, findNodes, formatForExt, getNodeEmbeddings, gitignoreEntryForCredentials, groundGraph, hasDrift, homeCredentialsPath, hostedBase, identifierParts, impactOf, indexFor, ingestHostForRegionId, installAssistant, inventory, isModelReady, isTestFile, libDir, libId, loadCatalog, loadCoverage, loadEmbedder, loadGraph, loadSnapshot, localApiSurface, localPackageDocs, modelCacheInfo, nodeById, nodeEmbedText, parseDsn, parseGraph, parseJsonc, probeFreshness, projectCredentialsPath, publishPrivateLibrary, pushCommand, queryGraph, queryGraphSemantic, readDoc, readSavings, readScanArtifact, readStoredCredentials, readUsage, recordCliCall, recordSaving, refreshIfStale, relativeResolver, renderHtml, renderReport, resolveCliInvocation, resolveDsn, resolveEmbedModel, resolveIngestHost, resolveLib, resolveLimits, resolveOne, resolveVersion, saveCatalog, savingsRecorded, scipEdges, selectForBudget, serializeGraph, serveStdio, shortestPath, stableStringify, symbolsFromApi, testsToRun, unavailableMessage, uninstallAssistant, uploadScanArtifact, usageError, verifyDeterminism, vibgrateDir, writeArtifacts, writeNavigationConfig, writeSnapshot, writeStoredCredentials };
-//# sourceMappingURL=chunk-VQLOVQZP.js.map
-//# sourceMappingURL=chunk-VQLOVQZP.js.map
+export { ASSISTANTS, CLI_TOOL_ALIASES, CliError, ECOSYSTEMS, ExitCode, FREE_PACK, GraphIndex, GraphSource, NPX_INVOCATION, ResourceLimitError, SAVINGS_TOOLS, SCHEMA_VERSION, SKIP_DIRS, SKIP_FILES, SMALL_REPO_FILES, TOOLS, UsageError, addLibrary, analyze, applyCoverage, applyStaticTestLinkage, assessDocQuality, assistantById, availableRegionIds, buildFacts, buildGraph, buildModuleResolver, cacheDir, catalogPath, clearModelCache, clearStoredCredentials, cosine, countPending, countTokens, coveringTests, createServer, createWorkspaceDsn, credentialsPath, dashHostForIngestHost, decodeScipIndex, defaultGraphPath, detectAssistants, detectRunner, detectServeLaunch, discover, discoverModels, driftCount, driftFor, dsnCommand, embeddingsCached, enrichOnline, ensureGitignored, epistemicBreakdown, exportGraph, fetchHostedDocsCached, findGitRoot, findNodes, formatForExt, getNodeEmbeddings, gitignoreEntryForCredentials, groundGraph, hasDrift, homeCredentialsPath, hostedBase, identifierParts, impactOf, indexFor, ingestHostForRegionId, installAssistant, inventory, isModelReady, isTestFile, libDir, libId, loadCatalog, loadCoverage, loadEmbedder, loadGraph, loadSnapshot, localApiSurface, localPackageDocs, modelCacheInfo, nodeById, nodeEmbedText, parseDsn, parseGraph, parseJsonc, probeFreshness, projectCredentialsPath, publishPrivateLibrary, pushCommand, queryGraph, queryGraphSemantic, readDoc, readSavings, readScanArtifact, readStoredCredentials, readUsage, recordCliCall, recordSaving, refreshIfStale, refreshInstalledInstructions, relativeResolver, renderHtml, renderReport, resolveCliInvocation, resolveDsn, resolveEmbedModel, resolveIngestHost, resolveLib, resolveLimits, resolveOne, resolveVersion, sanitizeClient, saveCatalog, savingsLedgerPath, savingsRecorded, scipEdges, selectForBudget, serializeGraph, serveStdio, shortestPath, stableStringify, symbolsFromApi, testsToRun, unavailableMessage, uninstallAssistant, uploadScanArtifact, usageError, verifyDeterminism, vibgrateDir, writeArtifacts, writeNavigationConfig, writeSnapshot, writeStoredCredentials };
+//# sourceMappingURL=chunk-ZFDVHKID.js.map
+//# sourceMappingURL=chunk-ZFDVHKID.js.map