@vibgrate/cli 2026.720.3 → 2026.721.1

package/DOCS.md

@@ -621,6 +621,8 @@ Maps source code into a graph artifact, enabling all downstream queries (`vg sho
 | `--grammars <dir>` | — | Grammar `.wasm` directory for offline/air-gapped use |
 | `-o, --export <file>` | — | Also write the map to a file (format from extension) |
 
+**Local by default — no git churn.** The first time vg writes into `.vibgrate/` it also creates `.vibgrate/.gitignore`, keeping the graph artifacts (`graph.json`, `graph.html`, `GRAPH_REPORT.md`, `facts.jsonl`, `mcp-navigation.json`) and the cache out of git — so builds, auto-refreshes, and MCP use never leave your branch dirty. Run `vg share` when you want the map committed for your team (it rewrites that ignore file). vg never touches an existing `.vibgrate/.gitignore`, so edit it (or leave it empty) to manage the ignores yourself.
+
 ---
 
 ### vg bundle
@@ -849,6 +851,7 @@ Reads the counts-only usage ledger recorded when you run `vg serve --savings` (o
 | Flag | Default | Description |
 |------|---------|-------------|
 | `--days <n>` | `30` | Reporting window in days |
+| `--clear` | — | Delete the recorded usage data for this repo (the ledger under `.vibgrate/cache/`, plus the opt-in stats-share upload state and per-install id) |
 
 Add `--json` for machine-readable output.
 
@@ -902,7 +905,7 @@ Make the code map committable and auto-updating for your team.
 vg share
 ```
 
-Installs a pre-commit hook, deterministic merge driver, and `.gitignore` so the map stays fresh without any manual steps.
+Installs a pre-commit hook, deterministic merge driver, and `.gitignore` so the map stays fresh without any manual steps. This rewrites the default `.vibgrate/.gitignore` (which ignores the graph artifacts, `graph.json` included) so `graph.json` is committed while the cache and volatile reports stay ignored.
 
 | Flag | Description |
 |------|-------------|

package/dist/baseline-3S5NKMBP.js

@@ -0,0 +1,6 @@
+export { baselineCommand, runBaseline } from './chunk-FR72DKYF.js';
+import './chunk-SHXV4VPX.js';
+import './chunk-RXP66R2E.js';
+import './chunk-GI6W53LM.js';
+//# sourceMappingURL=baseline-3S5NKMBP.js.map
+//# sourceMappingURL=baseline-3S5NKMBP.js.map

package/dist/{baseline-FALF7ULT.js.map → baseline-3S5NKMBP.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"baseline-FALF7ULT.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"baseline-3S5NKMBP.js"}

package/dist/{chunk-ZFDVHKID.js → chunk-C4EDNPWN.js}

@@ -1,5 +1,5 @@
-import { hashString, langById, shortId, canonicalize, grammarSetVersion, hashBytes, langForExtension, setGrammarsOverride, parseSource } from './chunk-BHA7QIPD.js';
-import { writeTextFile, pathExists, readJsonFile, loadConfig, computeUpgradeImpact, getChangelogSignals, gitHistoryAvailable, buildVersionTimelines, findPackageTimeline, severityRank, projectTypeToVulnEcosystem, VERSION } from './chunk-B6ZWB3WH.js';
+import { hashString, langById, shortId, canonicalize, grammarSetVersion, hashBytes, langForExtension, setGrammarsOverride, parseSource } from './chunk-JWBS5GS6.js';
+import { writeTextFile, pathExists, readJsonFile, loadConfig, computeUpgradeImpact, getChangelogSignals, gitHistoryAvailable, buildVersionTimelines, findPackageTimeline, severityRank, projectTypeToVulnEcosystem, VERSION } from './chunk-SHXV4VPX.js';
 import * as fs17 from 'fs';
 import { spawnSync, execFileSync } from 'child_process';
 import * as path17 from 'path';
@@ -2471,12 +2471,33 @@ function esc(s) {
 function vibgrateDir(root) {
   return path17.join(root, ".vibgrate");
 }
+var DEFAULT_GITIGNORE = [
+  "# Created once by vg \u2014 local graph artifacts stay out of git by default.",
+  "# Run `vg share` to commit the map for your team (it rewrites this file).",
+  "# vg never touches an existing .vibgrate/.gitignore: edit it (or leave it",
+  "# empty) to manage these ignores yourself.",
+  ".gitignore",
+  "cache/",
+  "graph.json",
+  "graph.html",
+  "GRAPH_REPORT.md",
+  "facts.jsonl",
+  "mcp-navigation.json"
+];
+function ensureVibgrateGitignore(root) {
+  const file = path17.join(vibgrateDir(root), ".gitignore");
+  if (fs17.existsSync(file)) return;
+  fs17.mkdirSync(vibgrateDir(root), { recursive: true });
+  fs17.writeFileSync(file, `${DEFAULT_GITIGNORE.join("\n")}
+`);
+}
 function defaultGraphPath(root) {
   return path17.join(vibgrateDir(root), "graph.json");
 }
 function writeArtifacts(graph, options) {
   const dir = vibgrateDir(options.root);
   fs17.mkdirSync(dir, { recursive: true });
+  ensureVibgrateGitignore(options.root);
   const graphPath = options.graphPath ?? defaultGraphPath(options.root);
   fs17.mkdirSync(path17.dirname(graphPath), { recursive: true });
   const tmp = `${graphPath}.${process.pid}.tmp`;
@@ -5665,13 +5686,19 @@ var ROW_CAP = 1e4;
 async function scanCandidates(root, files, needle, opts) {
   const needleLower = needle.toLowerCase();
   if (!needleLower || files.length === 0) return { hits: [], total: 0, truncated: false };
-  if (!opts.collectAll) return scanInline(root, files, needleLower, opts.budget, true, void 0);
   if (files.length < PARALLEL_MIN_FILES && !process.env.VG_PARALLEL_MIN_BYTES) {
-    return scanInline(root, files, needleLower, ROW_CAP, false, void 0);
+    return opts.collectAll ? scanInline(root, files, needleLower, ROW_CAP, false, void 0) : scanInline(root, files, needleLower, opts.budget, true, void 0);
   }
   const { over, sizes } = measure(root, files);
-  if (!over) return scanInline(root, files, needleLower, ROW_CAP, false, sizes);
-  return scanParallel(root, files, needleLower);
+  if (!over) {
+    return opts.collectAll ? scanInline(root, files, needleLower, ROW_CAP, false, sizes) : scanInline(root, files, needleLower, opts.budget, true, sizes);
+  }
+  const out = await scanParallel(root, files, needleLower);
+  if (!opts.collectAll && out.hits.length > opts.budget) {
+    out.hits.length = opts.budget;
+    out.truncated = true;
+  }
+  return out;
 }
 function parallelMinBytes() {
   const v = Number(process.env.VG_PARALLEL_MIN_BYTES);
@@ -5802,13 +5829,80 @@ function runWorker(root, files, needleLower) {
 }
 
 // src/engine/search.ts
-var IGNORE_DIRS = /* @__PURE__ */ new Set([".git", ".vibgrate", "node_modules", "dist", "build", "out", "target", "vendor", "__pycache__"]);
+var IGNORE_DIRS = /* @__PURE__ */ new Set([
+  ".git",
+  ".vibgrate",
+  "node_modules",
+  "dist",
+  "build",
+  "out",
+  "target",
+  "vendor",
+  "__pycache__",
+  // .NET intermediate output and coverage reports: purely generated trees that a
+  // C#/coverage-heavy repo pays for on every literal sweep. `bin` is deliberately
+  // NOT here — plenty of repos keep real scripts in bin/ (rails, node CLIs), and
+  // completeness beats speed; the binary-extension skip below keeps a .NET bin/
+  // cheap anyway.
+  "obj",
+  "coverage"
+]);
 var MAX_FILES_SCANNED = 2e4;
+var BINARY_EXTS = /* @__PURE__ */ new Set([
+  ".dll",
+  ".pdb",
+  ".exe",
+  ".so",
+  ".dylib",
+  ".a",
+  ".lib",
+  ".o",
+  ".class",
+  ".jar",
+  ".wasm",
+  ".node",
+  ".png",
+  ".jpg",
+  ".jpeg",
+  ".gif",
+  ".webp",
+  ".ico",
+  ".icns",
+  ".bmp",
+  ".zip",
+  ".gz",
+  ".tgz",
+  ".bz2",
+  ".xz",
+  ".7z",
+  ".rar",
+  ".woff",
+  ".woff2",
+  ".ttf",
+  ".otf",
+  ".eot",
+  ".mp3",
+  ".mp4",
+  ".mov",
+  ".avi",
+  ".pdf"
+]);
+function hasBinaryExt(rel2) {
+  return BINARY_EXTS.has(path17.extname(rel2).toLowerCase());
+}
+function toPosix2(rel2) {
+  return path17.sep === "\\" ? rel2.replaceAll("\\", "/") : rel2;
+}
 async function searchSymbols(graph, root, query, limit) {
-  const q2 = query.trim();
+  let q2 = query.trim();
   if (!q2) return { matches: [], moreAvailable: false, hint: "query is required" };
-  const isPhrase = /\s/.test(q2);
+  const quoted = /^(["'`])(.+)\1$/.exec(q2);
+  if (quoted && quoted[2].trim()) q2 = quoted[2].trim();
+  const isPhrase = Boolean(quoted) || /\s/.test(q2) || /[/\\]/.test(q2) && !q2.includes(":") && !/[*?]/.test(q2);
   let nodes = findNodes(graph, q2).filter((n) => n.kind !== "file");
+  if (nodes.length === 0) {
+    nodes = fileSymbolNodes(graph, q2);
+  }
   if (nodes.length === 0 && isPhrase) {
     nodes = reconstructedIdentifierNodes(graph, q2);
   }
@@ -5828,7 +5922,8 @@ async function searchSymbols(graph, root, query, limit) {
   const textHits = [];
   let truncatedScan = false;
   let totalTextMatches;
-  if (spare > 0) {
+  const skipScan = !isPhrase && hasExactSymbolMatch(nodes, q2);
+  if (spare > 0 && !skipScan) {
     const seen = new Set(symbolHits.map((h) => `${h.file}:${h.line}`));
     const scan = await scanFiles(root, q2, spare, seen, textHits, isPhrase);
     truncatedScan = scan.truncated;
@@ -5851,6 +5946,20 @@ async function searchSymbols(graph, root, query, limit) {
   }
   return result;
 }
+function fileSymbolNodes(graph, q2) {
+  if (!/[/\\]/.test(q2) && !/\.\w+$/.test(q2)) return [];
+  const norm = q2.replaceAll("\\", "/").replace(/^\.\//, "");
+  const inFile = graph.nodes.filter(
+    (n) => n.kind !== "file" && (n.file === norm || n.file.endsWith(`/${norm}`))
+  );
+  return [...inFile].sort((a, b) => b.importance - a.importance || a.qualifiedName.localeCompare(b.qualifiedName));
+}
+function hasExactSymbolMatch(nodes, q2) {
+  if (nodes.length === 0) return false;
+  if (/^(.*):(\d+)$/.test(q2)) return true;
+  const lower = q2.toLowerCase();
+  return nodes.some((n) => n.id === q2 || n.qualifiedName.toLowerCase() === lower || n.name.toLowerCase() === lower);
+}
 function queryTokens(q2) {
   return [...new Set(q2.toLowerCase().split(/[^a-z0-9]+/).filter((t) => t.length >= 2))];
 }
@@ -5863,16 +5972,22 @@ function reconstructedIdentifierNodes(graph, q2) {
   return snake.filter((n) => n.kind !== "file");
 }
 function multiTokenNodes(graph, tokens) {
-  const cov = /* @__PURE__ */ new Map();
-  for (const t of tokens) {
-    for (const n of findNodes(graph, t)) {
-      if (n.kind === "file") continue;
-      const e = cov.get(n.id);
-      if (e) e.hits++;
-      else cov.set(n.id, { node: n, hits: 1 });
+  const scored = [];
+  for (const n of graph.nodes) {
+    if (n.kind === "file") continue;
+    const name = n.name.toLowerCase();
+    const qn = n.qualifiedName.toLowerCase();
+    let hits = 0;
+    let exact = false;
+    for (const t of tokens) {
+      if (name === t || qn === t) {
+        hits++;
+        exact = true;
+      } else if (qn.includes(t)) hits++;
     }
+    if (exact || hits >= 2) scored.push({ node: n, hits, exact });
   }
-  return [...cov.values()].sort((a, b) => b.hits - a.hits || b.node.importance - a.node.importance).map((e) => e.node);
+  return scored.sort((a, b) => Number(b.exact) - Number(a.exact) || b.hits - a.hits || b.node.importance - a.node.importance || a.node.qualifiedName.localeCompare(b.node.qualifiedName)).map((e) => e.node);
 }
 async function scanFiles(root, needle, budget, seen, out, countAll) {
   const listing = listCandidateFiles(root, needle);
@@ -5889,7 +6004,23 @@ async function scanFiles(root, needle, budget, seen, out, countAll) {
   return { total: outcome.total - overlap, truncated: listing.truncated || outcome.truncated };
 }
 function listCandidateFiles(root, needle) {
-  return ripgrepCandidates(root, needle) ?? walkCandidates(root);
+  return ripgrepCandidates(root, needle) ?? walkCandidatesCached(root);
+}
+var LISTING_TTL_MS = 2e3;
+var listingCache = /* @__PURE__ */ new Map();
+function listingTtlMs() {
+  const v = Number(process.env.VG_LISTING_TTL_MS);
+  return Number.isFinite(v) && v >= 0 ? v : LISTING_TTL_MS;
+}
+function walkCandidatesCached(root) {
+  const ttl = listingTtlMs();
+  if (ttl > 0) {
+    const hit = listingCache.get(root);
+    if (hit && Date.now() - hit.at < ttl) return hit.listing;
+  }
+  const listing = walkCandidates(root);
+  if (ttl > 0) listingCache.set(root, { listing, at: Date.now() });
+  return listing;
 }
 function walkCandidates(root) {
   const files = [];
@@ -5910,11 +6041,12 @@ function walkCandidates(root) {
         stack.push(abs);
         continue;
       }
+      if (hasBinaryExt(e.name)) continue;
       if (files.length >= MAX_FILES_SCANNED) {
         truncated = true;
         continue;
       }
-      files.push(path17.relative(root, abs));
+      files.push(toPosix2(path17.relative(root, abs)));
     }
   }
   files.sort();
@@ -5941,17 +6073,23 @@ function ripgrepCandidates(root, needle) {
     { cwd: root, encoding: "utf8", timeout: 15e3, maxBuffer: 32 * 1024 * 1024 }
   );
   if (res.error || res.status !== 0 && res.status !== 1 || res.signal) return null;
+  const files = parseRgFileList(res.stdout);
+  if (files.length > MAX_FILES_SCANNED) return { files: files.slice(0, MAX_FILES_SCANNED), truncated: true };
+  return { files, truncated: false };
+}
+function parseRgFileList(stdout, sep10 = path17.sep) {
   const seen = /* @__PURE__ */ new Set();
-  for (const raw of res.stdout.split("\n")) {
-    const rel2 = raw.startsWith("./") ? raw.slice(2) : raw;
+  for (const raw of stdout.split("\n")) {
+    if (!raw) continue;
+    const posix3 = sep10 === "\\" ? raw.replaceAll("\\", "/") : raw;
+    const rel2 = posix3.startsWith("./") ? posix3.slice(2) : posix3;
     if (!rel2) continue;
     const segs = rel2.split("/");
     if (segs.some((s) => s.startsWith(".") || IGNORE_DIRS.has(s))) continue;
+    if (hasBinaryExt(rel2)) continue;
     seen.add(rel2);
   }
-  const files = [...seen].sort();
-  if (files.length > MAX_FILES_SCANNED) return { files: files.slice(0, MAX_FILES_SCANNED), truncated: true };
-  return { files, truncated: false };
+  return [...seen].sort();
 }
 
 // src/mcp/tools.ts
@@ -6070,7 +6208,7 @@ var TOOLS = [
   },
   {
     name: "search_symbols",
-    description: "Find a known name or literal string fast: ranked symbol lookup, plus a complete literal file-search for any quoted/multi-word phrase (config keys, log lines, UI copy). A phrase query reports totalTextMatches so you know you have every occurrence \u2014 use it instead of grep. Use first for most discovery; use query_graph for meaning.",
+    description: 'Find a known name or literal string fast: ranked symbol lookup, plus a complete literal file-search for any quoted, multi-word, or path-like query (config keys, routes, log lines, UI copy). Quote a single name ("AddJwtBearer") to sweep every occurrence of it as text. A sweep reports totalTextMatches so you know you have every occurrence \u2014 use it instead of grep. Use first for most discovery; use query_graph for meaning.',
     inputSchema: obj(
       {
         query: { type: "string", maxLength: 120, description: "a symbol name, or a literal phrase to sweep for every occurrence of" },
@@ -6922,6 +7060,7 @@ function writeFileEnsured(file, content) {
   fs17.writeFileSync(file, content);
 }
 function writeNavigationConfig(root) {
+  ensureVibgrateGitignore(root);
   const rel2 = path17.join(".vibgrate", "mcp-navigation.json");
   const doc = {
     _readme: "Deferred-loading config for agents embedding `vg serve` via the Claude API (defer_loading + tool-search). The hot navigation core stays in context; the rest load on demand \u2014 ~350-450 schema tokens/step vs ~1,881 for the full set. Hosts without defer_loading ignore this and serve the whole (already optimized) tool set. See docs/graph/VG-NAVIGATION-PROFILE.md.",
@@ -7113,7 +7252,7 @@ async function refreshIfStale(root, opts = {}) {
 }
 var LEDGER = "savings.jsonl";
 var PER_FILE_TOKENS = 400;
-var SAVINGS_TOOLS = /* @__PURE__ */ new Set(["query_graph", "get_node"]);
+var SAVINGS_TOOLS = /* @__PURE__ */ new Set(["query_graph", "get_node", "search_symbols"]);
 var CLI_TOOL_ALIASES = {
   ask: "query_graph",
   show: "get_node",
@@ -7151,6 +7290,13 @@ function ledgerPath(root) {
 function savingsRecorded(root) {
   return fs17.existsSync(ledgerPath(root));
 }
+function clearSavings(root) {
+  const file = ledgerPath(root);
+  const existed = fs17.existsSync(file);
+  fs17.rmSync(file, { force: true });
+  fs17.rmSync(path17.join(cacheDir(root), "stats-share.json"), { force: true });
+  return existed;
+}
 function recordSaving(root, entry, now) {
   try {
     fs17.mkdirSync(cacheDir(root), { recursive: true });
@@ -7681,6 +7827,6 @@ function spdx(ctx) {
   return JSON.stringify(doc, null, 2) + "\n";
 }
 
-export { ASSISTANTS, CLI_TOOL_ALIASES, CliError, ECOSYSTEMS, ExitCode, FREE_PACK, GraphIndex, GraphSource, NPX_INVOCATION, ResourceLimitError, SAVINGS_TOOLS, SCHEMA_VERSION, SKIP_DIRS, SKIP_FILES, SMALL_REPO_FILES, TOOLS, UsageError, addLibrary, analyze, applyCoverage, applyStaticTestLinkage, assessDocQuality, assistantById, availableRegionIds, buildFacts, buildGraph, buildModuleResolver, cacheDir, catalogPath, clearModelCache, clearStoredCredentials, cosine, countPending, countTokens, coveringTests, createServer, createWorkspaceDsn, credentialsPath, dashHostForIngestHost, decodeScipIndex, defaultGraphPath, detectAssistants, detectRunner, detectServeLaunch, discover, discoverModels, driftCount, driftFor, dsnCommand, embeddingsCached, enrichOnline, ensureGitignored, epistemicBreakdown, exportGraph, fetchHostedDocsCached, findGitRoot, findNodes, formatForExt, getNodeEmbeddings, gitignoreEntryForCredentials, groundGraph, hasDrift, homeCredentialsPath, hostedBase, identifierParts, impactOf, indexFor, ingestHostForRegionId, installAssistant, inventory, isModelReady, isTestFile, libDir, libId, loadCatalog, loadCoverage, loadEmbedder, loadGraph, loadSnapshot, localApiSurface, localPackageDocs, modelCacheInfo, nodeById, nodeEmbedText, parseDsn, parseGraph, parseJsonc, probeFreshness, projectCredentialsPath, publishPrivateLibrary, pushCommand, queryGraph, queryGraphSemantic, readDoc, readSavings, readScanArtifact, readStoredCredentials, readUsage, recordCliCall, recordSaving, refreshIfStale, refreshInstalledInstructions, relativeResolver, renderHtml, renderReport, resolveCliInvocation, resolveDsn, resolveEmbedModel, resolveIngestHost, resolveLib, resolveLimits, resolveOne, resolveVersion, sanitizeClient, saveCatalog, savingsLedgerPath, savingsRecorded, scipEdges, selectForBudget, serializeGraph, serveStdio, shortestPath, stableStringify, symbolsFromApi, testsToRun, unavailableMessage, uninstallAssistant, uploadScanArtifact, usageError, verifyDeterminism, vibgrateDir, writeArtifacts, writeNavigationConfig, writeSnapshot, writeStoredCredentials };
-//# sourceMappingURL=chunk-ZFDVHKID.js.map
-//# sourceMappingURL=chunk-ZFDVHKID.js.map
+export { ASSISTANTS, CLI_TOOL_ALIASES, CliError, ECOSYSTEMS, ExitCode, FREE_PACK, GraphIndex, GraphSource, NPX_INVOCATION, ResourceLimitError, SAVINGS_TOOLS, SCHEMA_VERSION, SKIP_DIRS, SKIP_FILES, SMALL_REPO_FILES, TOOLS, UsageError, addLibrary, analyze, applyCoverage, applyStaticTestLinkage, assessDocQuality, assistantById, availableRegionIds, buildFacts, buildGraph, buildModuleResolver, cacheDir, catalogPath, clearModelCache, clearSavings, clearStoredCredentials, cosine, countPending, countTokens, coveringTests, createServer, createWorkspaceDsn, credentialsPath, dashHostForIngestHost, decodeScipIndex, defaultGraphPath, detectAssistants, detectRunner, detectServeLaunch, discover, discoverModels, driftCount, driftFor, dsnCommand, embeddingsCached, enrichOnline, ensureGitignored, epistemicBreakdown, exportGraph, fetchHostedDocsCached, findGitRoot, findNodes, formatForExt, getNodeEmbeddings, gitignoreEntryForCredentials, groundGraph, hasDrift, homeCredentialsPath, hostedBase, identifierParts, impactOf, indexFor, ingestHostForRegionId, installAssistant, inventory, isModelReady, isTestFile, libDir, libId, loadCatalog, loadCoverage, loadEmbedder, loadGraph, loadSnapshot, localApiSurface, localPackageDocs, modelCacheInfo, nodeById, nodeEmbedText, parseDsn, parseGraph, parseJsonc, probeFreshness, projectCredentialsPath, publishPrivateLibrary, pushCommand, queryGraph, queryGraphSemantic, readDoc, readSavings, readScanArtifact, readStoredCredentials, readUsage, recordCliCall, recordSaving, refreshIfStale, refreshInstalledInstructions, relativeResolver, renderHtml, renderReport, resolveCliInvocation, resolveDsn, resolveEmbedModel, resolveIngestHost, resolveLib, resolveLimits, resolveOne, resolveVersion, sanitizeClient, saveCatalog, savingsLedgerPath, savingsRecorded, scipEdges, selectForBudget, serializeGraph, serveStdio, shortestPath, stableStringify, symbolsFromApi, testsToRun, unavailableMessage, uninstallAssistant, uploadScanArtifact, usageError, verifyDeterminism, vibgrateDir, writeArtifacts, writeNavigationConfig, writeSnapshot, writeStoredCredentials };
+//# sourceMappingURL=chunk-C4EDNPWN.js.map
+//# sourceMappingURL=chunk-C4EDNPWN.js.map