@vibgrate/cli 2026.721.3 → 2026.722.2

package/dist/fs-KCABDURV.js

@@ -0,0 +1,3 @@
+export { FileCache, countFilesInDir, ensureDir, findCsprojFiles, findFiles, findPackageJsonFiles, findSolutionFiles, normalizeGlobForRipgrep, pathExists, quickTreeCount, readJsonFile, readTextFile, stripBom, writeJsonFile, writeTextFile } from './chunk-CRAMOEBE.js';
+//# sourceMappingURL=fs-KCABDURV.js.map
+//# sourceMappingURL=fs-KCABDURV.js.map

package/dist/fs-KCABDURV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"fs-KCABDURV.js"}

package/dist/index.d.ts

@@ -2,7 +2,7 @@ import { G as GraphNode, a as GraphEdge, A as Area, R as ResolverKind, V as VgGr
 export { C as Centrality, D as DerivedBy, e as EpistemicTier, f as FactConfidence, g as FactKind, h as GraphMeta, N as NodeKind, P as Provenance, S as SCHEMA_VERSION, i as Span, T as Toolchain, U as Unknown } from './types-Jl6RJ175.js';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 
-declare const VERSION = "2026.721.3";
+declare const VERSION = "2026.722.2";
 
 /**
  * Analysis stage: importance, centrality, hubs, communities, and surprise.
@@ -631,6 +631,8 @@ interface SavingEntry {
     baselineTokens: number;
     source?: Source;
     client?: string;
+    provider?: string;
+    model?: string;
     ms?: number;
 }
 /** Whether a savings ledger exists for this repo (i.e. `vg serve --savings` has recorded). */

package/dist/index.js

@@ -1,8 +1,13 @@
-export { ASSISTANTS, FREE_PACK, GraphIndex, GraphSource, ResourceLimitError, SCHEMA_VERSION, SKIP_DIRS, SKIP_FILES, TOOLS, UsageError, addLibrary, analyze, applyCoverage, applyStaticTestLinkage, assistantById, buildFacts, buildGraph, buildModuleResolver, cosine, coveringTests, createServer, decodeScipIndex, defaultGraphPath, inventory as dependencyInventory, detectRunner, discover, discoverModels, driftCount, driftFor, enrichOnline, exportGraph, findNodes, formatForExt, getNodeEmbeddings, groundGraph, hasDrift, identifierParts, impactOf, installAssistant, isTestFile, libId, loadCatalog, loadCoverage, loadEmbedder, loadGraph, loadSnapshot, nodeById, nodeEmbedText, parseGraph, parseJsonc, probeFreshness, queryGraph, queryGraphSemantic, readDoc, readSavings, recordSaving, refreshIfStale, relativeResolver, renderHtml, renderReport, resolveLib, resolveLimits, resolveOne, saveCatalog, savingsRecorded, scipEdges, serializeGraph, serveStdio, shortestPath, stableStringify, testsToRun, uninstallAssistant, verifyDeterminism, vibgrateDir, writeArtifacts, writeSnapshot } from './chunk-ELUFCQDR.js';
-export { LANGUAGES, allLanguageIds, grammarsSourceDir, langById, langForExtension, parseSource } from './chunk-IKJBELUV.js';
-export { VERSION } from './chunk-JLRF5TFA.js';
+export { GraphSource, createServer, exportGraph, formatForExt, serveStdio } from './chunk-2O5YZVZV.js';
+export { ASSISTANTS, FREE_PACK, ResourceLimitError, SCHEMA_VERSION, SKIP_DIRS, SKIP_FILES, TOOLS, UsageError, analyze, applyCoverage, applyStaticTestLinkage, assistantById, buildFacts, buildGraph, buildModuleResolver, coveringTests, decodeScipIndex, defaultGraphPath, detectRunner, discover, discoverModels, driftCount, groundGraph, hasDrift, installAssistant, isTestFile, loadCoverage, loadGraph, loadSnapshot, parseJsonc, probeFreshness, refreshIfStale, relativeResolver, renderHtml, renderReport, resolveLimits, scipEdges, shortestPath, testsToRun, uninstallAssistant, verifyDeterminism, vibgrateDir, writeArtifacts, writeSnapshot } from './chunk-3MXNNBLI.js';
+export { addLibrary, inventory as dependencyInventory, driftFor, enrichOnline, findNodes, libId, loadCatalog, nodeById, readDoc, resolveLib, resolveOne, saveCatalog } from './chunk-GGJZA3Q6.js';
+export { VERSION } from './chunk-5BDHQ7DD.js';
+export { LANGUAGES, allLanguageIds, grammarsSourceDir, langById, langForExtension, parseSource } from './chunk-PY3DNX5H.js';
 import { redactUrlCredentials, redactSecrets } from './chunk-RXP66R2E.js';
 import './chunk-GI6W53LM.js';
+import './chunk-CRAMOEBE.js';
+export { GraphIndex, cosine, getNodeEmbeddings, identifierParts, impactOf, loadEmbedder, nodeEmbedText, parseGraph, queryGraph, queryGraphSemantic, readSavings, recordSaving, savingsRecorded, serializeGraph, stableStringify } from './chunk-WNIIKCNF.js';
+import './chunk-JFGYT6BI.js';
 import { execFileSync } from 'child_process';
 
 function buildEnvelope(root, graph, scanIngestId) {

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/engine/push.ts"],"names":[],"mappings":";;;;;;;AAsBO,SAAS,aAAA,CAAc,IAAA,EAAc,KAAA,EAAgB,YAAA,EAA4C;AACtG,EAAA,MAAM,MAAM,GAAA,CAAI,IAAA,EAAM,CAAC,WAAA,EAAa,MAAM,CAAC,CAAA,IAAK,0CAAA;AAChD,EAAA,MAAM,MAAA,GAAS,IAAI,IAAA,EAAM,CAAC,aAAa,cAAA,EAAgB,MAAM,CAAC,CAAA,IAAK,MAAA;AACnE,EAAA,MAAM,SAAA,GAAY,IAAI,IAAA,EAAM,CAAC,UAAU,OAAA,EAAS,mBAAmB,CAAC,CAAA,IAAK,MAAA;AACzE,EAAA,OAAO;AAAA,IACL,aAAA,EAAe,cAAA;AAAA,IACf,YAAA,EAAc,OAAA;AAAA,IACd,YAAA;AAAA,IACA,GAAA,EAAK,EAAE,GAAA,EAAK,QAAA,EAAU,IAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,EAAG,MAAA,EAAO;AAAA,IAC/C,YAAY,SAAA,GAAY,EAAE,WAAW,oBAAA,CAAqB,SAAS,GAAE,GAAI,MAAA;AAAA,IACzE,aAAa,KAAA,CAAM,WAAA;AAAA,IACnB,KAAA,EAAO,YAAY,KAAK;AAAA,GAC1B;AACF;AAOO,SAAS,YAAY,KAAA,EAAyB;AACnD,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,KAAA,EAAO,KAAA,CAAM,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM;AAC5B,MAAA,MAAM,YAAY,CAAA,CAAE,SAAA,GAAY,cAAc,CAAA,CAAE,SAAS,IAAI,CAAA,CAAE,SAAA;AAC/D,MAAA,MAAM,MAAM,CAAA,CAAE,GAAA,GAAM,cAAc,CAAA,CAAE,GAAG,IAAI,CAAA,CAAE,GAAA;AAC7C,MAAA,OAAO,SAAA,KAAc,CAAA,CAAE,SAAA,IAAa,GAAA,KAAQ,CAAA,CAAE,GAAA,GAAM,EAAE,GAAG,CAAA,EAAG,SAAA,EAAW,GAAA,EAAI,GAAI,CAAA;AAAA,IACjF,CAAC;AAAA,GACH;AACF;AAEA,SAAS,GAAA,CAAI,MAAc,IAAA,EAA+B;AACxD,EAAA,IAAI;AACF,IAAA,OAAO,YAAA,CAAa,KAAA,EAAO,IAAA,EAAM,EAAE,GAAA,EAAK,IAAA,EAAM,QAAA,EAAU,MAAA,EAAQ,CAAA,CAAE,IAAA,EAAK,IAAK,IAAA;AAAA,EAC9E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["import { execFileSync } from 'node:child_process';\nimport { redactSecrets, redactUrlCredentials } from '../core-open/utils/redact.js';\nimport type { VgGraph } from '../schema.js';\n\n/**\n * The deferred, decoupled push envelope (VG-PACKAGE-AND-SCHEMA §7). In the open\n * CLI `vg push` is **specified but not built**: it assembles and redacts the\n * envelope and prints a notice, but performs **no network upload**. Nothing in\n * the free path depends on it. Drift-over-time/governance is the separate\n * commercial product.\n */\n\nexport interface GraphUploadEnvelope {\n  schemaVersion: 'vg-graph/1.0';\n  artifactType: 'graph';\n  scanIngestId?: string;\n  vcs: { sha: string; shortSha: string; branch: string };\n  repository?: { name?: string; remoteUrl?: string };\n  generatedAt: string;\n  graph: VgGraph;\n}\n\nexport function buildEnvelope(root: string, graph: VgGraph, scanIngestId?: string): GraphUploadEnvelope {\n  const sha = git(root, ['rev-parse', 'HEAD']) ?? '0000000000000000000000000000000000000000';\n  const branch = git(root, ['rev-parse', '--abbrev-ref', 'HEAD']) ?? 'HEAD';\n  const remoteUrl = git(root, ['config', '--get', 'remote.origin.url']) ?? undefined;\n  return {\n    schemaVersion: 'vg-graph/1.0',\n    artifactType: 'graph',\n    scanIngestId,\n    vcs: { sha, shortSha: sha.slice(0, 12), branch },\n    repository: remoteUrl ? { remoteUrl: redactUrlCredentials(remoteUrl) } : undefined,\n    generatedAt: graph.generatedAt,\n    graph: redactGraph(graph),\n  };\n}\n\n/**\n * Redaction pass (GUARDRAILS §1: redact before storage). The graph is structure,\n * not content, but we defensively scrub any signature/name that matches a\n * credential-shaped pattern, and strip credentials from the remote URL.\n */\nexport function redactGraph(graph: VgGraph): VgGraph {\n  return {\n    ...graph,\n    nodes: graph.nodes.map((n) => {\n      const signature = n.signature ? redactSecrets(n.signature) : n.signature;\n      const doc = n.doc ? redactSecrets(n.doc) : n.doc;\n      return signature !== n.signature || doc !== n.doc ? { ...n, signature, doc } : n;\n    }),\n  };\n}\n\nfunction git(root: string, args: string[]): string | null {\n  try {\n    return execFileSync('git', args, { cwd: root, encoding: 'utf8' }).trim() || null;\n  } catch {\n    return null;\n  }\n}\n"]}
+{"version":3,"sources":["../src/engine/push.ts"],"names":[],"mappings":";;;;;;;;;;;;AAsBO,SAAS,aAAA,CAAc,IAAA,EAAc,KAAA,EAAgB,YAAA,EAA4C;AACtG,EAAA,MAAM,MAAM,GAAA,CAAI,IAAA,EAAM,CAAC,WAAA,EAAa,MAAM,CAAC,CAAA,IAAK,0CAAA;AAChD,EAAA,MAAM,MAAA,GAAS,IAAI,IAAA,EAAM,CAAC,aAAa,cAAA,EAAgB,MAAM,CAAC,CAAA,IAAK,MAAA;AACnE,EAAA,MAAM,SAAA,GAAY,IAAI,IAAA,EAAM,CAAC,UAAU,OAAA,EAAS,mBAAmB,CAAC,CAAA,IAAK,MAAA;AACzE,EAAA,OAAO;AAAA,IACL,aAAA,EAAe,cAAA;AAAA,IACf,YAAA,EAAc,OAAA;AAAA,IACd,YAAA;AAAA,IACA,GAAA,EAAK,EAAE,GAAA,EAAK,QAAA,EAAU,IAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,EAAG,MAAA,EAAO;AAAA,IAC/C,YAAY,SAAA,GAAY,EAAE,WAAW,oBAAA,CAAqB,SAAS,GAAE,GAAI,MAAA;AAAA,IACzE,aAAa,KAAA,CAAM,WAAA;AAAA,IACnB,KAAA,EAAO,YAAY,KAAK;AAAA,GAC1B;AACF;AAOO,SAAS,YAAY,KAAA,EAAyB;AACnD,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,KAAA,EAAO,KAAA,CAAM,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM;AAC5B,MAAA,MAAM,YAAY,CAAA,CAAE,SAAA,GAAY,cAAc,CAAA,CAAE,SAAS,IAAI,CAAA,CAAE,SAAA;AAC/D,MAAA,MAAM,MAAM,CAAA,CAAE,GAAA,GAAM,cAAc,CAAA,CAAE,GAAG,IAAI,CAAA,CAAE,GAAA;AAC7C,MAAA,OAAO,SAAA,KAAc,CAAA,CAAE,SAAA,IAAa,GAAA,KAAQ,CAAA,CAAE,GAAA,GAAM,EAAE,GAAG,CAAA,EAAG,SAAA,EAAW,GAAA,EAAI,GAAI,CAAA;AAAA,IACjF,CAAC;AAAA,GACH;AACF;AAEA,SAAS,GAAA,CAAI,MAAc,IAAA,EAA+B;AACxD,EAAA,IAAI;AACF,IAAA,OAAO,YAAA,CAAa,KAAA,EAAO,IAAA,EAAM,EAAE,GAAA,EAAK,IAAA,EAAM,QAAA,EAAU,MAAA,EAAQ,CAAA,CAAE,IAAA,EAAK,IAAK,IAAA;AAAA,EAC9E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["import { execFileSync } from 'node:child_process';\nimport { redactSecrets, redactUrlCredentials } from '../core-open/utils/redact.js';\nimport type { VgGraph } from '../schema.js';\n\n/**\n * The deferred, decoupled push envelope (VG-PACKAGE-AND-SCHEMA §7). In the open\n * CLI `vg push` is **specified but not built**: it assembles and redacts the\n * envelope and prints a notice, but performs **no network upload**. Nothing in\n * the free path depends on it. Drift-over-time/governance is the separate\n * commercial product.\n */\n\nexport interface GraphUploadEnvelope {\n  schemaVersion: 'vg-graph/1.0';\n  artifactType: 'graph';\n  scanIngestId?: string;\n  vcs: { sha: string; shortSha: string; branch: string };\n  repository?: { name?: string; remoteUrl?: string };\n  generatedAt: string;\n  graph: VgGraph;\n}\n\nexport function buildEnvelope(root: string, graph: VgGraph, scanIngestId?: string): GraphUploadEnvelope {\n  const sha = git(root, ['rev-parse', 'HEAD']) ?? '0000000000000000000000000000000000000000';\n  const branch = git(root, ['rev-parse', '--abbrev-ref', 'HEAD']) ?? 'HEAD';\n  const remoteUrl = git(root, ['config', '--get', 'remote.origin.url']) ?? undefined;\n  return {\n    schemaVersion: 'vg-graph/1.0',\n    artifactType: 'graph',\n    scanIngestId,\n    vcs: { sha, shortSha: sha.slice(0, 12), branch },\n    repository: remoteUrl ? { remoteUrl: redactUrlCredentials(remoteUrl) } : undefined,\n    generatedAt: graph.generatedAt,\n    graph: redactGraph(graph),\n  };\n}\n\n/**\n * Redaction pass (GUARDRAILS §1: redact before storage). The graph is structure,\n * not content, but we defensively scrub any signature/name that matches a\n * credential-shaped pattern, and strip credentials from the remote URL.\n */\nexport function redactGraph(graph: VgGraph): VgGraph {\n  return {\n    ...graph,\n    nodes: graph.nodes.map((n) => {\n      const signature = n.signature ? redactSecrets(n.signature) : n.signature;\n      const doc = n.doc ? redactSecrets(n.doc) : n.doc;\n      return signature !== n.signature || doc !== n.doc ? { ...n, signature, doc } : n;\n    }),\n  };\n}\n\nfunction git(root: string, args: string[]): string | null {\n  try {\n    return execFileSync('git', args, { cwd: root, encoding: 'utf8' }).trim() || null;\n  } catch {\n    return null;\n  }\n}\n"]}