@vibgrate/cli 2026.722.1 → 2026.727.1

package/dist/{chunk-VXT6LUGP.js → chunk-S6CYDZEW.js}

@@ -1,12 +1,17 @@
-import { resolveOne, resolveVersion, resolveLib, loadCatalog, driftFor, localPackageDocs, readDoc, findNodes, inventory, localApiSurface } from './chunk-GGJZA3Q6.js';
-import { loadConfig, computeUpgradeImpact, getChangelogSignals, gitHistoryAvailable, buildVersionTimelines, findPackageTimeline, severityRank, projectTypeToVulnEcosystem, VERSION } from './chunk-JSNHZCIV.js';
-import { langById, grammarSetVersion, langForExtension, setGrammarsOverride, parseSource } from './chunk-PY3DNX5H.js';
-import { writeTextFile, pathExists, readJsonFile } from './chunk-CRAMOEBE.js';
-import { impactOf, indexFor, withTimeout, getNodeEmbeddings, queryGraphSemantic, queryGraph, loadEmbedder, isModelReady, cacheDir, loadCache, stableStringify, serializeGraph, parseGraph, acquireLock, releaseLock } from './chunk-WNIIKCNF.js';
+import { loadConfig, computeUpgradeImpact, getChangelogSignals, gitHistoryAvailable, buildVersionTimelines, findPackageTimeline, severityRank, projectTypeToVulnEcosystem, VERSION } from './chunk-WLETRGAC.js';
+import { resolveVersion, resolveLib, loadCatalog, driftFor, localPackageDocs, readDoc, inventory, localApiSurface, edgeId, buildModuleResolver, resolve, applyStaticTestLinkage, nodeId } from './chunk-C4CKTAZP.js';
+import { resolveOne, findNodes } from './chunk-J7LKEB2R.js';
+import { discoverModels } from './chunk-OOIG3RUM.js';
+import { impactOf, indexFor, withTimeout, getNodeEmbeddings, queryGraphSemantic, queryGraph, loadEmbedder, isModelReady, cacheDir, loadCache, acquireLock, releaseLock } from './chunk-6IOQJGFT.js';
+import { langById, grammarSetVersion, langForExtension, setGrammarsOverride, parseSource } from './chunk-3Q7QBWFW.js';
+import { redactSecrets } from './chunk-RXP66R2E.js';
+import { loadGraph, ensureVibgrateGitignore, vibgrateDir, writeArtifacts } from './chunk-HABUT7HW.js';
+import { serializeGraph, stableStringify } from './chunk-5Q54GEHM.js';
 import { shortId, canonicalize, hashString, hashBytes } from './chunk-JFGYT6BI.js';
-import * as fs18 from 'fs';
+import { writeTextFile, pathExists, readJsonFile } from './chunk-CRAMOEBE.js';
+import * as fs15 from 'fs';
 import { spawnSync, execFileSync } from 'child_process';
-import * as path2 from 'path';
+import * as path17 from 'path';
 import ignore from 'ignore';
 import * as v8 from 'v8';
 import Graph from 'graphology';
@@ -24,8 +29,8 @@ import { Command } from 'commander';
 import chalk from 'chalk';
 import * as zlib from 'zlib';
 import { promisify } from 'util';
-import { encode, decode } from 'gpt-tokenizer/encoding/cl100k_base';
 import { Worker } from 'worker_threads';
+import { encode, decode } from 'gpt-tokenizer/encoding/cl100k_base';
 
 var NPX_INVOCATION = "npx @vibgrate/cli";
 function whichOnPath(cmd) {
@@ -41,9 +46,9 @@ function whichOnPath(cmd) {
 }
 function isOwnBinary(binPath) {
   try {
-    const real = fs18.realpathSync(binPath);
+    const real = fs15.realpathSync(binPath);
     if (/[\\/]@vibgrate[\\/]cli[\\/]/.test(real)) return true;
-    const head = fs18.readFileSync(real, { encoding: "utf8" }).slice(0, 2048);
+    const head = fs15.readFileSync(real, { encoding: "utf8" }).slice(0, 2048);
     return head.includes("@vibgrate/cli") || head.includes("vibgrate");
   } catch {
     return false;
@@ -53,7 +58,7 @@ function isEphemeralNpxBinary(binPath) {
   const NPX_SEGMENT = /[\\/]_npx[\\/]/;
   if (NPX_SEGMENT.test(binPath)) return true;
   try {
-    return NPX_SEGMENT.test(fs18.realpathSync(binPath));
+    return NPX_SEGMENT.test(fs15.realpathSync(binPath));
   } catch {
     return false;
   }
@@ -88,6 +93,14 @@ var SKIP_DIRS = /* @__PURE__ */ new Set([
   ".wrangler",
   ".turbo",
   ".cache",
+  // Migration / tool backup trees (NativeScript, codemods, agent worktrees)
+  ".migration_backup",
+  ".update_backup",
+  ".backup",
+  ".bak",
+  ".history",
+  ".snapshots",
+  ".snapshots_bak",
   // JavaScript / Node — installed dependency trees
   "node_modules",
   "bower_components",
@@ -112,6 +125,9 @@ var SKIP_DIRS = /* @__PURE__ */ new Set([
   "build",
   "out",
   "coverage",
+  // Native mobile platform build trees (NativeScript / Cordova / Capacitor)
+  "platforms",
+  "App_Resources",
   // Vendored third-party source trees
   "vendor",
   "Pods",
@@ -219,19 +235,19 @@ var SKIP_FILES = /* @__PURE__ */ new Set([
   "flake.lock"
 ]);
 function toPosix(p) {
-  return p.split(path2.sep).join("/");
+  return p.split(path17.sep).join("/");
 }
 function buildRootIgnore(root, exclude) {
   const ig = ignore();
-  const gitignorePath = path2.join(root, ".gitignore");
-  if (fs18.existsSync(gitignorePath)) {
-    ig.add(fs18.readFileSync(gitignorePath, "utf8"));
+  const gitignorePath = path17.join(root, ".gitignore");
+  if (fs15.existsSync(gitignorePath)) {
+    ig.add(fs15.readFileSync(gitignorePath, "utf8"));
   }
   if (exclude.length) ig.add(exclude);
   return ig;
 }
 function discover(options) {
-  const root = path2.resolve(options.root);
+  const root = path17.resolve(options.root);
   const onlyLangs = (options.only ?? []).filter(Boolean);
   const allowLang = (lang) => onlyLangs.length === 0 || onlyLangs.includes(lang.id);
   for (const id of onlyLangs) {
@@ -240,39 +256,39 @@ function discover(options) {
     }
   }
   const rootIg = buildRootIgnore(root, options.exclude ?? []);
-  const scopeAbs = (options.paths && options.paths.length ? options.paths.map((p) => path2.resolve(root, p)) : [root]).filter((p) => fs18.existsSync(p));
+  const scopeAbs = (options.paths && options.paths.length ? options.paths.map((p) => path17.resolve(root, p)) : [root]).filter((p) => fs15.existsSync(p));
   const found = /* @__PURE__ */ new Map();
   const considerFile = (abs) => {
-    const rel2 = toPosix(path2.relative(root, abs));
+    const rel2 = toPosix(path17.relative(root, abs));
     if (rel2.startsWith("..")) return;
     if (rel2 === "" || rootIg.ignores(rel2)) return;
-    if (SKIP_FILES.has(path2.basename(abs).toLowerCase())) return;
-    const lang = langForExtension(path2.extname(abs));
+    if (SKIP_FILES.has(path17.basename(abs).toLowerCase())) return;
+    const lang = langForExtension(path17.extname(abs));
     if (!lang || !allowLang(lang)) return;
     found.set(rel2, { rel: rel2, abs, lang });
   };
-  const walk2 = (dir) => {
+  const walk = (dir) => {
     let entries;
     try {
-      entries = fs18.readdirSync(dir, { withFileTypes: true });
+      entries = fs15.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
     for (const entry of entries) {
-      const abs = path2.join(dir, entry.name);
-      const rel2 = toPosix(path2.relative(root, abs));
+      const abs = path17.join(dir, entry.name);
+      const rel2 = toPosix(path17.relative(root, abs));
       if (entry.isDirectory()) {
         if (SKIP_DIRS.has(entry.name)) continue;
         if (rel2 && rootIg.ignores(`${rel2}/`)) continue;
-        walk2(abs);
+        walk(abs);
       } else if (entry.isFile()) {
         considerFile(abs);
       }
     }
   };
   for (const scope of scopeAbs) {
-    const stat = fs18.statSync(scope);
-    if (stat.isDirectory()) walk2(scope);
+    const stat = fs15.statSync(scope);
+    if (stat.isDirectory()) walk(scope);
     else if (stat.isFile()) considerFile(scope);
   }
   return [...found.values()].sort((a, b) => a.rel < b.rel ? -1 : a.rel > b.rel ? 1 : 0);
@@ -336,458 +352,6 @@ function formatBytes(n) {
   if (n >= 1024) return `${(n / 1024).toFixed(1)} KiB`;
   return `${n} B`;
 }
-var JS_TS_EXT = [".ts", ".tsx", ".mts", ".cts", ".js", ".jsx", ".mjs", ".cjs", ".vue", ".svelte", ".astro"];
-var OTHER_EXT = [
-  ".py",
-  ".pyi",
-  ".go",
-  ".rs",
-  ".rb",
-  ".java",
-  ".cs",
-  ".php",
-  ".kt",
-  ".kts",
-  ".swift",
-  ".scala",
-  ".sc",
-  ".dart",
-  ".lua",
-  ".ex",
-  ".exs",
-  ".sh",
-  ".bash",
-  ".zig",
-  ".c",
-  ".cpp",
-  ".cc",
-  ".cxx",
-  ".hpp",
-  ".hh",
-  ".hxx",
-  ".h",
-  ".m",
-  ".mm",
-  ".ml",
-  ".mli",
-  ".res",
-  ".sol"
-];
-var EXT_GROUPS = {
-  ".py": [".py", ".pyi"],
-  ".pyi": [".py", ".pyi"],
-  ".java": [".java"],
-  ".cs": [".cs"],
-  ".go": [".go"],
-  ".rs": [".rs"],
-  ".rb": [".rb"]
-};
-for (const e of JS_TS_EXT) EXT_GROUPS[e] = JS_TS_EXT;
-var CPP_EXT = [".cpp", ".cc", ".cxx", ".hpp", ".hh", ".hxx", ".h"];
-Object.assign(EXT_GROUPS, {
-  ".php": [".php"],
-  ".kt": [".kt", ".kts"],
-  ".kts": [".kt", ".kts"],
-  ".swift": [".swift"],
-  ".scala": [".scala", ".sc"],
-  ".sc": [".scala", ".sc"],
-  ".dart": [".dart"],
-  ".lua": [".lua"],
-  ".ex": [".ex", ".exs"],
-  ".exs": [".ex", ".exs"],
-  ".sh": [".sh", ".bash"],
-  ".bash": [".sh", ".bash"],
-  ".zig": [".zig"],
-  ".c": [".c", ".h"],
-  ".cpp": CPP_EXT,
-  ".cc": CPP_EXT,
-  ".cxx": CPP_EXT,
-  ".hpp": CPP_EXT,
-  ".hh": CPP_EXT,
-  ".hxx": CPP_EXT,
-  ".h": [...CPP_EXT, ".c"],
-  // ObjC #imports headers; ObjC++ additionally reaches C++ headers.
-  ".m": [".h", ".m", ".mm"],
-  ".mm": [".h", ".m", ".mm", ...CPP_EXT],
-  ".ml": [".ml", ".mli"],
-  ".mli": [".ml", ".mli"],
-  ".res": [".res"],
-  ".sol": [".sol"],
-  // Template containers: ERB fragments are Ruby; HTML/EJS script is JS.
-  ".erb": [".rb", ".erb"],
-  ".html": JS_TS_EXT,
-  ".htm": JS_TS_EXT,
-  ".ejs": JS_TS_EXT
-});
-function buildModuleResolver(root, relSet) {
-  const probe = makeProbe(relSet);
-  const suffixIndex = buildSuffixIndex(relSet);
-  const tsPaths = loadTsconfigPaths(root);
-  const workspaces = loadWorkspacePackages(root);
-  function resolveAlias(source) {
-    if (!tsPaths) return null;
-    for (const [pattern, targets] of tsPaths.paths) {
-      const m = matchPattern(pattern, source);
-      if (m === null) continue;
-      for (const target of targets) {
-        const sub = target.replace("*", m);
-        const rel2 = posixJoin(tsPaths.baseUrlRel, sub);
-        const hit = probe(rel2);
-        if (hit) return hit;
-      }
-    }
-    return null;
-  }
-  function resolveWorkspace(source) {
-    if (!workspaces.size) return null;
-    let best = null;
-    for (const [name, dirRel] of workspaces) {
-      if (source === name || source.startsWith(`${name}/`)) {
-        const rest = source === name ? "" : source.slice(name.length + 1);
-        if (!best || name.length > best.dirRel.length) best = { dirRel, rest };
-      }
-    }
-    if (!best) return null;
-    const base = best.rest ? posixJoin(best.dirRel, best.rest) : best.dirRel;
-    return probe(base) ?? probe(posixJoin(base, "src/index")) ?? probe(posixJoin(base, "index"));
-  }
-  return {
-    resolve(fromRel, source) {
-      if (source.includes("\\")) source = source.split("\\").join(".");
-      if (source.startsWith("./") || source.startsWith("../")) {
-        return probe(posixJoin(path2.posix.dirname(fromRel), source));
-      }
-      if (/\.[A-Za-z0-9]+$/.test(source) && !source.startsWith("<")) {
-        const hit = probe(posixJoin(path2.posix.dirname(fromRel), source));
-        if (hit) return hit;
-      }
-      if (source.startsWith(".")) {
-        return resolvePyRelative(probe, fromRel, source);
-      }
-      return resolveAlias(source) ?? resolveWorkspace(source) ?? resolveSuffix(suffixIndex, fromRel, source) ?? resolveDotted(probe, source);
-    }
-  };
-}
-function buildSuffixIndex(relSet) {
-  const byLast = /* @__PURE__ */ new Map();
-  for (const rel2 of relSet) {
-    const dot = rel2.lastIndexOf(".");
-    if (dot < 0) continue;
-    const ext = rel2.slice(dot);
-    if (!EXT_GROUPS[ext]) continue;
-    let key = rel2.slice(0, dot);
-    const base = key.slice(key.lastIndexOf("/") + 1);
-    if (base === "__init__" || base === "index") {
-      key = key.slice(0, Math.max(0, key.length - base.length - 1));
-    }
-    if (!key) continue;
-    const last = key.slice(key.lastIndexOf("/") + 1);
-    const list = byLast.get(last);
-    if (list) list.push({ rel: rel2, key, ext });
-    else byLast.set(last, [{ rel: rel2, key, ext }]);
-  }
-  return byLast;
-}
-function resolveSuffix(index, fromRel, source) {
-  if (!/^[A-Za-z_][\w.]*$/.test(source) || !source.includes(".")) return null;
-  const fromDot = fromRel.lastIndexOf(".");
-  const fromExt = fromDot >= 0 ? fromRel.slice(fromDot) : "";
-  const allowed = EXT_GROUPS[fromExt];
-  if (!allowed) return null;
-  const q = source.replace(/\./g, "/");
-  const last = q.slice(q.lastIndexOf("/") + 1);
-  const cands = index.get(last);
-  if (!cands) return null;
-  const matches = cands.filter(
-    (c) => allowed.includes(c.ext) && (c.key === q || c.key.endsWith("/" + q))
-  );
-  if (matches.length === 0) return null;
-  if (matches.length === 1) return matches[0].rel;
-  return pickClosest(matches, fromRel).rel;
-}
-function pickClosest(matches, fromRel) {
-  const fromSegs = fromRel.split("/");
-  const score = (rel2) => {
-    const segs = rel2.split("/");
-    let i = 0;
-    while (i < segs.length && i < fromSegs.length && segs[i] === fromSegs[i]) i++;
-    return i;
-  };
-  return [...matches].sort((a, b) => {
-    const d = score(b.rel) - score(a.rel);
-    if (d) return d;
-    if (a.rel.length !== b.rel.length) return a.rel.length - b.rel.length;
-    return a.rel < b.rel ? -1 : 1;
-  })[0];
-}
-function resolveDotted(probe, source) {
-  if (!/^[A-Za-z_][\w.]*$/.test(source) || !source.includes(".")) return null;
-  const slashed = source.replace(/\./g, "/");
-  return probe(slashed) ?? probe(posixJoin("src", slashed));
-}
-function resolvePyRelative(probe, fromRel, source) {
-  let dots = 0;
-  while (source[dots] === ".") dots++;
-  const rest = source.slice(dots);
-  let dir = path2.posix.dirname(fromRel);
-  for (let i = 1; i < dots; i++) dir = path2.posix.dirname(dir);
-  const sub = rest.replace(/\./g, "/");
-  return probe(sub ? posixJoin(dir, sub) : dir);
-}
-function relativeResolver(relSet) {
-  const probe = makeProbe(relSet);
-  return {
-    resolve(fromRel, source) {
-      if (source.startsWith(".")) return probe(posixJoin(path2.posix.dirname(fromRel), source));
-      return resolveDotted(probe, source);
-    }
-  };
-}
-function makeProbe(relSet) {
-  return (base) => {
-    const norm = normalizeRel(base);
-    if (!norm) return null;
-    if (relSet.has(norm)) return norm;
-    for (const ext of JS_TS_EXT) if (relSet.has(norm + ext)) return norm + ext;
-    for (const ext of JS_TS_EXT) if (relSet.has(`${norm}/index${ext}`)) return `${norm}/index${ext}`;
-    for (const ext of OTHER_EXT) if (relSet.has(norm + ext)) return norm + ext;
-    if (relSet.has(`${norm}/__init__.py`)) return `${norm}/__init__.py`;
-    return null;
-  };
-}
-function normalizeRel(p) {
-  const norm = path2.posix.normalize(p);
-  const stripped = norm.startsWith("./") ? norm.slice(2) : norm;
-  return stripped.startsWith("..") ? "" : stripped;
-}
-function posixJoin(a, b) {
-  return path2.posix.normalize(path2.posix.join(a, b));
-}
-function matchPattern(pattern, source) {
-  const star = pattern.indexOf("*");
-  if (star === -1) return source === pattern ? "" : null;
-  const prefix = pattern.slice(0, star);
-  const suffix = pattern.slice(star + 1);
-  if (!source.startsWith(prefix) || !source.endsWith(suffix)) return null;
-  if (source.length < prefix.length + suffix.length) return null;
-  return source.slice(prefix.length, source.length - suffix.length);
-}
-function loadTsconfigPaths(root) {
-  for (const name of ["tsconfig.base.json", "tsconfig.json"]) {
-    const file = path2.join(root, name);
-    if (fs18.existsSync(file)) {
-      const merged = readTsconfigChain(root, file, /* @__PURE__ */ new Set());
-      if (merged && merged.paths.length) return merged;
-    }
-  }
-  return null;
-}
-function readTsconfigChain(root, file, seen) {
-  if (seen.has(file) || seen.size > 6) return null;
-  seen.add(file);
-  let cfg;
-  try {
-    cfg = parseJsonc(fs18.readFileSync(file, "utf8"));
-  } catch {
-    return null;
-  }
-  const dir = path2.dirname(file);
-  let base = { baseUrlRel: "", paths: [] };
-  if (cfg.extends && cfg.extends.startsWith(".")) {
-    const extPath = path2.resolve(dir, cfg.extends.endsWith(".json") ? cfg.extends : `${cfg.extends}.json`);
-    if (fs18.existsSync(extPath)) {
-      const inherited = readTsconfigChain(root, extPath, seen);
-      if (inherited) base = inherited;
-    }
-  }
-  const co = cfg.compilerOptions ?? {};
-  const baseUrlRel = co.baseUrl !== void 0 ? path2.relative(root, path2.resolve(dir, co.baseUrl)).split(path2.sep).join("/") : base.baseUrlRel;
-  const paths = [...base.paths];
-  if (co.paths) for (const [k, v] of Object.entries(co.paths)) paths.push([k, v]);
-  return { baseUrlRel, paths };
-}
-function loadWorkspacePackages(root) {
-  const map = /* @__PURE__ */ new Map();
-  const globs = [];
-  const rootPkg = path2.join(root, "package.json");
-  if (fs18.existsSync(rootPkg)) {
-    try {
-      const pkg = JSON.parse(fs18.readFileSync(rootPkg, "utf8"));
-      const ws = Array.isArray(pkg.workspaces) ? pkg.workspaces : pkg.workspaces?.packages;
-      if (ws) globs.push(...ws);
-    } catch {
-    }
-  }
-  const pnpmWs = path2.join(root, "pnpm-workspace.yaml");
-  if (fs18.existsSync(pnpmWs)) {
-    for (const line of fs18.readFileSync(pnpmWs, "utf8").split("\n")) {
-      const m = /^\s*-\s*['"]?([^'"\n]+)['"]?\s*$/.exec(line);
-      if (m) globs.push(m[1].trim());
-    }
-  }
-  for (const dir of expandWorkspaceGlobs(root, globs)) {
-    const pj = path2.join(dir, "package.json");
-    try {
-      const name = JSON.parse(fs18.readFileSync(pj, "utf8")).name;
-      if (name) map.set(name, path2.relative(root, dir).split(path2.sep).join("/"));
-    } catch {
-    }
-  }
-  return map;
-}
-function expandWorkspaceGlobs(root, globs) {
-  const out = /* @__PURE__ */ new Set();
-  for (const glob of globs) {
-    const clean = glob.replace(/\/\*\*$/, "").replace(/\/\*$/, "");
-    const baseDir = path2.join(root, clean);
-    const recurse = glob.endsWith("**");
-    if (glob === clean) {
-      if (fs18.existsSync(path2.join(baseDir, "package.json"))) out.add(baseDir);
-      continue;
-    }
-    collectPackageDirs(baseDir, recurse ? 4 : 1, out);
-  }
-  return [...out];
-}
-function collectPackageDirs(dir, depth, out) {
-  if (depth < 0) return;
-  let entries;
-  try {
-    entries = fs18.readdirSync(dir, { withFileTypes: true });
-  } catch {
-    return;
-  }
-  for (const e of entries) {
-    if (!e.isDirectory() || e.name === "node_modules" || e.name.startsWith(".")) continue;
-    const child = path2.join(dir, e.name);
-    if (fs18.existsSync(path2.join(child, "package.json"))) out.add(child);
-    else collectPackageDirs(child, depth - 1, out);
-  }
-}
-function parseJsonc(text) {
-  return JSON.parse(stripJsonc(text));
-}
-function stripJsonc(text) {
-  let out = "";
-  let inStr = false;
-  let strCh = "";
-  for (let i = 0; i < text.length; i++) {
-    const ch = text[i];
-    const next = text[i + 1];
-    if (inStr) {
-      out += ch;
-      if (ch === "\\") {
-        out += next ?? "";
-        i++;
-      } else if (ch === strCh) {
-        inStr = false;
-      }
-      continue;
-    }
-    if (ch === '"' || ch === "'") {
-      inStr = true;
-      strCh = ch;
-      out += ch;
-      continue;
-    }
-    if (ch === "/" && next === "/") {
-      while (i < text.length && text[i] !== "\n") i++;
-      out += "\n";
-      continue;
-    }
-    if (ch === "/" && next === "*") {
-      i += 2;
-      while (i < text.length && !(text[i] === "*" && text[i + 1] === "/")) i++;
-      i++;
-      continue;
-    }
-    out += ch;
-  }
-  return out.replace(/,(\s*[}\]])/g, "$1");
-}
-
-// src/engine/ids.ts
-function nodeId(parts) {
-  return shortId(
-    canonicalize({
-      t: "node",
-      kind: parts.kind,
-      qn: parts.qualifiedName,
-      file: parts.file,
-      sig: parts.signature ?? ""
-    })
-  );
-}
-function edgeId(kind, src, dst) {
-  return shortId(canonicalize({ t: "edge", kind, src, dst }));
-}
-
-// src/engine/tests.ts
-function isTestFile(rel2) {
-  const lower = rel2.toLowerCase();
-  const base = rel2.split("/").pop() ?? rel2;
-  const lbase = base.toLowerCase();
-  if (/(^|\/)(__tests__|__test__)\//.test(lower)) return true;
-  if (/(^|\/)(tests?|spec|specs)\//.test(lower)) return true;
-  if (/(^|\/)src\/test\//.test(lower)) return true;
-  if (/\.(test|spec)\.[cm]?[jt]sx?$/.test(lbase)) return true;
-  if (/^test_.*\.py$/.test(lbase) || /_test\.py$/.test(lbase)) return true;
-  if (/_test\.go$/.test(lbase)) return true;
-  if (/[A-Za-z0-9](Test|Tests|IT)\.java$/.test(base)) return true;
-  if (/_spec\.rb$/.test(lbase) || /_test\.rb$/.test(lbase)) return true;
-  if (/[A-Za-z0-9](Test|Tests)\.cs$/.test(base)) return true;
-  if (/[A-Za-z0-9](Test|Tests)\.swift$/.test(base)) return true;
-  return false;
-}
-function applyStaticTestLinkage(nodes, edges) {
-  const byId = new Map(nodes.map((n) => [n.id, n]));
-  const testFiles = /* @__PURE__ */ new Set();
-  for (const n of nodes) if (n.kind === "file" && isTestFile(n.file)) testFiles.add(n.file);
-  const fileNodeIdByRel = /* @__PURE__ */ new Map();
-  for (const n of nodes) if (n.kind === "file") fileNodeIdByRel.set(n.file, n.id);
-  const covered = /* @__PURE__ */ new Set();
-  const newEdges = /* @__PURE__ */ new Map();
-  for (const e of edges) {
-    if (e.kind !== "call") continue;
-    const src = byId.get(e.src);
-    const dst = byId.get(e.dst);
-    if (!src || !dst) continue;
-    if (testFiles.has(src.file) && !testFiles.has(dst.file) && dst.kind !== "external") {
-      const testFileId = fileNodeIdByRel.get(src.file);
-      if (!testFileId) continue;
-      const id = edgeId("test", testFileId, dst.id);
-      if (!newEdges.has(id)) {
-        newEdges.set(id, {
-          id,
-          kind: "test",
-          src: testFileId,
-          dst: dst.id,
-          resolution: e.resolution,
-          confidence: e.confidence
-        });
-      }
-      covered.add(dst.id);
-    }
-  }
-  const outNodes = nodes.map((n) => ({ ...n, tested: testedFlag(n, covered.has(n.id), testFiles) }));
-  const outEdges = [...edges, ...newEdges.values()].sort(
-    (a, b) => a.kind.localeCompare(b.kind) || a.src.localeCompare(b.src) || a.dst.localeCompare(b.dst)
-  );
-  return {
-    nodes: outNodes,
-    edges: outEdges,
-    testFiles: [...testFiles].sort(),
-    testEdgeCount: newEdges.size
-  };
-}
-function testedFlag(node, covered, testFiles) {
-  if (node.kind === "external" || node.kind === "file" || node.kind === "package" || node.kind === "module") {
-    return null;
-  }
-  if (testFiles.has(node.file)) return null;
-  if (node.kind === "function" || node.kind === "method") return covered;
-  return covered ? true : node.tested ?? null;
-}
 
 // src/engine/scip.ts
 var ROLE_DEFINITION = 1;
@@ -1159,14 +723,14 @@ var DEFAULT_PATHS = [
 ];
 function loadCoverage(root, explicit) {
   const candidates = (explicit && explicit.length ? explicit : DEFAULT_PATHS).map(
-    (p) => path2.resolve(root, p)
+    (p) => path17.resolve(root, p)
   );
-  const found = candidates.filter((p) => fs18.existsSync(p));
+  const found = candidates.filter((p) => fs15.existsSync(p));
   if (found.length === 0) return null;
   const map = /* @__PURE__ */ new Map();
   for (const file of found) {
     try {
-      const text = fs18.readFileSync(file, "utf8");
+      const text = fs15.readFileSync(file, "utf8");
       if (file.endsWith(".json")) mergeIstanbul(map, text, root);
       else mergeLcov(map, text, root);
     } catch {
@@ -1175,8 +739,8 @@ function loadCoverage(root, explicit) {
   return map.size ? map : null;
 }
 function rel(root, p) {
-  const abs = path2.isAbsolute(p) ? p : path2.resolve(root, p);
-  return path2.relative(root, abs).split(path2.sep).join("/");
+  const abs = path17.isAbsolute(p) ? p : path17.resolve(root, p);
+  return path17.relative(root, abs).split(path17.sep).join("/");
 }
 function bump(map, file, line, hits) {
   let lh = map.get(file);
@@ -1486,7 +1050,7 @@ async function parseInline(files, options) {
   onProgress?.(0, files.length);
   for (const file of files) {
     try {
-      const source = fs18.readFileSync(file.abs, "utf8");
+      const source = fs15.readFileSync(file.abs, "utf8");
       out.push(await parseSource(file.rel, file.lang.id, source));
     } catch (err) {
       out.push(emptyParse(file, `parse failed: ${err.message}`));
@@ -1541,9 +1105,9 @@ function isWorkerOom(err) {
   return e?.code === "ERR_WORKER_OUT_OF_MEMORY" || /out of memory/i.test(e?.message ?? "");
 }
 function resolveWorkerFile() {
-  const here = path2.dirname(fileURLToPath(import.meta.url));
-  const candidate = path2.join(here, "parse-worker.js");
-  return fs18.existsSync(candidate) ? candidate : null;
+  const here = path17.dirname(fileURLToPath(import.meta.url));
+  const candidate = path17.join(here, "parse-worker.js");
+  return fs15.existsSync(candidate) ? candidate : null;
 }
 function chunk(items, buckets) {
   const out = Array.from({ length: Math.min(buckets, items.length || 1) }, () => []);
@@ -1569,335 +1133,6 @@ function emptyParse(file, warning) {
     warnings: [warning]
   };
 }
-function resolve4(parses, resolver) {
-  const baseNodes = /* @__PURE__ */ new Map();
-  const relSet = new Set(parses.map((p) => p.rel));
-  const mod = resolver ?? relativeResolver(relSet);
-  const defsByName = /* @__PURE__ */ new Map();
-  const defsByFile = /* @__PURE__ */ new Map();
-  const fileNodeIdByRel = /* @__PURE__ */ new Map();
-  for (const p of parses) {
-    const fileId = nodeId({ kind: "file", qualifiedName: p.rel, file: p.rel });
-    fileNodeIdByRel.set(p.rel, fileId);
-    addNode(baseNodes, {
-      id: fileId,
-      kind: "file",
-      name: path2.posix.basename(p.rel),
-      qualifiedName: p.rel,
-      file: p.rel,
-      span: { start: 1, end: 1 },
-      lang: p.lang
-    });
-    for (const d of p.defs) {
-      const id = nodeId({
-        kind: d.kind,
-        qualifiedName: d.qualifiedName,
-        file: p.rel,
-        signature: d.signature
-      });
-      addNode(baseNodes, {
-        id,
-        kind: d.kind,
-        name: d.name,
-        qualifiedName: d.qualifiedName,
-        file: p.rel,
-        span: { start: d.startLine, end: d.endLine },
-        lang: p.lang,
-        signature: d.signature,
-        doc: d.doc
-      });
-      const ref = {
-        id,
-        name: d.name,
-        qualifiedName: d.qualifiedName,
-        rel: p.rel,
-        lang: p.lang,
-        kind: d.kind,
-        startByte: d.startByte,
-        endByte: d.endByte
-      };
-      push(defsByName, d.name, ref);
-      push(defsByFile, p.rel, ref);
-    }
-  }
-  const filesByNamespace = /* @__PURE__ */ new Map();
-  for (const p of parses) for (const ns of p.namespaces ?? []) addToSet(filesByNamespace, ns, p.rel);
-  const relsByLang = /* @__PURE__ */ new Map();
-  for (const p of parses) push(relsByLang, p.lang, p.rel);
-  const nsReachableByRel = /* @__PURE__ */ new Map();
-  const moduleReachableByRel = /* @__PURE__ */ new Map();
-  for (const p of parses) {
-    if (MODULE_SCOPED_LANGS.has(p.lang)) {
-      const mod2 = /* @__PURE__ */ new Set();
-      for (const rel2 of relsByLang.get(p.lang) ?? []) if (rel2 !== p.rel) mod2.add(rel2);
-      moduleReachableByRel.set(p.rel, mod2);
-    }
-    const reach = /* @__PURE__ */ new Set();
-    const namespaces = new Set(p.namespaces ?? []);
-    for (const imp of p.imports) {
-      namespaces.add(imp.source);
-      if (IMPORT_NAMES_A_TYPE.has(p.lang)) {
-        const sep9 = Math.max(imp.source.lastIndexOf("."), imp.source.lastIndexOf("\\"));
-        if (sep9 > 0) namespaces.add(imp.source.slice(0, sep9));
-      }
-    }
-    for (const ns of namespaces) for (const rel2 of filesByNamespace.get(ns) ?? []) if (rel2 !== p.rel) reach.add(rel2);
-    nsReachableByRel.set(p.rel, reach);
-  }
-  const superTypesByType = /* @__PURE__ */ new Map();
-  for (const p of parses) {
-    const localDefs = defsByFile.get(p.rel) ?? [];
-    for (const h of p.heritage) {
-      const encl = enclosingDefRef(localDefs, h.byte);
-      if (encl && (encl.kind === "class" || encl.kind === "interface")) addToSet(superTypesByType, encl.name, h.superName);
-    }
-  }
-  const edges = new EdgeSet();
-  const unresolved2 = /* @__PURE__ */ new Map();
-  const stats = {
-    callsResolved: 0,
-    callsUnresolved: 0,
-    importsResolvedToFile: 0,
-    importsExternal: 0,
-    resolvers: ["heuristic"]
-  };
-  for (const p of parses) {
-    const fileId = fileNodeIdByRel.get(p.rel);
-    const localByQn = /* @__PURE__ */ new Map();
-    for (const ref of defsByFile.get(p.rel) ?? []) localByQn.set(ref.qualifiedName, ref.id);
-    for (const d of p.defs) {
-      const id = localByQn.get(d.qualifiedName);
-      const parentQn = parentQualifiedName(d.qualifiedName);
-      const parentId = parentQn ? localByQn.get(parentQn) : void 0;
-      edges.add("contains", parentId ?? fileId, id, "heuristic", 1);
-    }
-  }
-  const importedFilesByRel = /* @__PURE__ */ new Map();
-  for (const p of parses) {
-    const fileId = fileNodeIdByRel.get(p.rel);
-    const importedRels = /* @__PURE__ */ new Set();
-    for (const imp of p.imports) {
-      const targetRel = mod.resolve(p.rel, imp.source);
-      if (targetRel && targetRel !== p.rel) {
-        importedRels.add(targetRel);
-        edges.add("import", fileId, fileNodeIdByRel.get(targetRel), "heuristic", 0.9);
-        stats.importsResolvedToFile++;
-      } else {
-        const extId = ensureExternalNode(baseNodes, imp.source);
-        edges.add("import", fileId, extId, "heuristic", 1);
-        stats.importsExternal++;
-      }
-    }
-    importedFilesByRel.set(p.rel, importedRels);
-  }
-  for (const p of parses) {
-    const fileId = fileNodeIdByRel.get(p.rel);
-    const localDefs = defsByFile.get(p.rel) ?? [];
-    const imported = importedFilesByRel.get(p.rel) ?? /* @__PURE__ */ new Set();
-    const testCaller = isTestFile(p.rel);
-    const nsReach = nsReachableByRel.get(p.rel) ?? /* @__PURE__ */ new Set();
-    const modReach = moduleReachableByRel.get(p.rel) ?? /* @__PURE__ */ new Set();
-    for (const call of p.calls) {
-      const srcId = enclosingDefId(localDefs, call.byte) ?? fileId;
-      const resolved = resolveCall(call, p.rel, p.lang, imported, defsByName, srcId, testCaller, nsReach, superTypesByType, modReach);
-      if (resolved) {
-        edges.add("call", srcId, resolved.id, "heuristic", resolved.confidence);
-        stats.callsResolved++;
-      } else {
-        stats.callsUnresolved++;
-        bumpUnresolved(unresolved2, srcId, call.callee, "call", p.rel);
-      }
-    }
-  }
-  for (const p of parses) {
-    const fileId = fileNodeIdByRel.get(p.rel);
-    const localDefs = defsByFile.get(p.rel) ?? [];
-    const imported = importedFilesByRel.get(p.rel) ?? /* @__PURE__ */ new Set();
-    const testCaller = isTestFile(p.rel);
-    const nsReach = nsReachableByRel.get(p.rel) ?? /* @__PURE__ */ new Set();
-    const modReach = moduleReachableByRel.get(p.rel) ?? /* @__PURE__ */ new Set();
-    for (const ref of p.typeRefs) {
-      const srcId = enclosingDefId(localDefs, ref.byte) ?? fileId;
-      const target = resolveType(ref.name, p.rel, p.lang, imported, defsByName, testCaller, nsReach, modReach);
-      if (target) edges.add("references", srcId, target.id, "heuristic", 0.7);
-    }
-  }
-  for (const p of parses) {
-    const localDefs = defsByFile.get(p.rel) ?? [];
-    const imported = importedFilesByRel.get(p.rel) ?? /* @__PURE__ */ new Set();
-    const testCaller = isTestFile(p.rel);
-    for (const h of p.heritage) {
-      const srcId = enclosingDefId(localDefs, h.byte);
-      if (!srcId) continue;
-      const nsReach = nsReachableByRel.get(p.rel) ?? /* @__PURE__ */ new Set();
-      const modReach = moduleReachableByRel.get(p.rel) ?? /* @__PURE__ */ new Set();
-      const target = resolveType(h.superName, p.rel, p.lang, imported, defsByName, testCaller, nsReach, modReach);
-      if (target) edges.add(h.kind, srcId, target.id, "heuristic", 0.85);
-      else bumpUnresolved(unresolved2, srcId, h.superName, h.kind, p.rel);
-    }
-  }
-  const nodes = [...baseNodes.values()].map((n) => ({
-    ...n,
-    importance: 0,
-    centrality: { degree: 0, pagerank: 0, betweenness: 0, eigenvector: 0 },
-    area: 0,
-    isHub: false,
-    tested: null
-  }));
-  const unresolvedList = [...unresolved2.values()].sort(
-    (a, b) => a.from.localeCompare(b.from) || a.kind.localeCompare(b.kind) || a.name.localeCompare(b.name)
-  );
-  return { nodes, edges: edges.toArray(), unresolved: unresolvedList, stats };
-}
-function bumpUnresolved(map, from, name, kind, fromRel) {
-  const key = `${from}\0${kind}\0${name}`;
-  const existing = map.get(key);
-  if (existing) existing.count++;
-  else map.set(key, { from, name, kind, count: 1, fromRel });
-}
-function addNode(map, n) {
-  if (!map.has(n.id)) map.set(n.id, n);
-}
-function ensureExternalNode(map, source) {
-  const id = nodeId({ kind: "external", qualifiedName: source, file: "" });
-  if (!map.has(id)) {
-    map.set(id, {
-      id,
-      kind: "external",
-      name: source,
-      qualifiedName: source,
-      file: "",
-      span: { start: 1, end: 1 },
-      lang: "external"
-    });
-  }
-  return id;
-}
-function push(map, key, value) {
-  const list = map.get(key);
-  if (list) list.push(value);
-  else map.set(key, [value]);
-}
-function parentQualifiedName(qn) {
-  const idx = qn.lastIndexOf(".");
-  return idx > 0 ? qn.slice(0, idx) : null;
-}
-function enclosingDefRef(defs, byte) {
-  let best;
-  for (const d of defs) {
-    if (d.startByte <= byte && d.endByte >= byte) {
-      if (!best || d.endByte - d.startByte < best.endByte - best.startByte) best = d;
-    }
-  }
-  return best;
-}
-function enclosingDefId(defs, byte) {
-  return enclosingDefRef(defs, byte)?.id;
-}
-function addToSet(map, key, value) {
-  const s = map.get(key);
-  if (s) s.add(value);
-  else map.set(key, /* @__PURE__ */ new Set([value]));
-}
-function parentTypeName(qualifiedName) {
-  const i = qualifiedName.lastIndexOf(".");
-  return i > 0 ? qualifiedName.slice(0, i) : null;
-}
-function disambiguateInterfaceImpl(pool, superTypesByType) {
-  const withParent = pool.map((c) => ({ c, parent: parentTypeName(c.qualifiedName) })).filter((x) => x.parent !== null);
-  if (withParent.length < 2) return null;
-  const parents = new Set(withParent.map((x) => x.parent));
-  const impls = withParent.filter(
-    (x) => [...parents].some((other) => other !== x.parent && superTypesByType.get(x.parent)?.has(other))
-  );
-  if (impls.length === 0) return null;
-  const interfaceParents = /* @__PURE__ */ new Set();
-  for (const impl of impls) for (const s of superTypesByType.get(impl.parent) ?? []) interfaceParents.add(s);
-  const interfaces = withParent.filter((x) => interfaceParents.has(x.parent));
-  const uniqueImplIds = new Set(impls.map((x) => x.c.id));
-  if (uniqueImplIds.size === 1) return impls[0].c;
-  const uniqueIfaceIds = new Set(interfaces.map((x) => x.c.id));
-  if (uniqueIfaceIds.size === 1) return interfaces[0].c;
-  return null;
-}
-var PACKAGE_SCOPED_LANGS = /* @__PURE__ */ new Set(["go", "java", "cs", "kotlin", "scala", "swift"]);
-var IMPORT_NAMES_A_TYPE = /* @__PURE__ */ new Set(["java", "kotlin", "scala", "php"]);
-var MODULE_SCOPED_LANGS = /* @__PURE__ */ new Set(["swift"]);
-function dirOf(rel2) {
-  const i = rel2.lastIndexOf("/");
-  return i >= 0 ? rel2.slice(0, i) : "";
-}
-function resolveCall(call, fromRel, fromLang, importedRels, defsByName, enclosingId, fromIsTestFile = false, nsReachableRels = /* @__PURE__ */ new Set(), superTypesByType = /* @__PURE__ */ new Map(), moduleReachableRels = /* @__PURE__ */ new Set()) {
-  const candidates = defsByName.get(call.callee);
-  if (!candidates || candidates.length === 0) return null;
-  const callable = candidates.filter((c) => c.kind === "function" || c.kind === "method");
-  const pool = callable.length ? callable : candidates;
-  let sameFile = pool.filter((c) => c.rel === fromRel);
-  if (call.qualified && enclosingId) sameFile = sameFile.filter((c) => c.id !== enclosingId);
-  if (sameFile.length === 1) return { id: sameFile[0].id, confidence: 0.85 };
-  if (sameFile.length > 1) {
-    const pick = [...sameFile].sort((a, b) => a.id.localeCompare(b.id))[0];
-    return { id: pick.id, confidence: 0.4 };
-  }
-  const dir = dirOf(fromRel);
-  const notSelf = (c) => !(call.qualified && enclosingId && c.id === enclosingId);
-  const strict = pool.filter(
-    (c) => notSelf(c) && (importedRels.has(c.rel) || PACKAGE_SCOPED_LANGS.has(fromLang) && c.lang === fromLang && dirOf(c.rel) === dir || nsReachableRels.has(c.rel))
-  );
-  if (strict.length === 1) return { id: strict[0].id, confidence: 0.75 };
-  const broad = pool.filter((c) => notSelf(c) && (moduleReachableRels.has(c.rel) || strict.includes(c)));
-  if (broad.length > 1) {
-    const dedup = disambiguateInterfaceImpl(broad, superTypesByType);
-    if (dedup) return { id: dedup.id, confidence: 0.6 };
-  }
-  if (strict.length > 1) return null;
-  if (fromLang === "swift" && fromIsTestFile && pool.length === 1) {
-    return { id: pool[0].id, confidence: 0.5 };
-  }
-  return null;
-}
-function resolveType(name, fromRel, fromLang, importedRels, defsByName, fromIsTestFile = false, nsReachableRels = /* @__PURE__ */ new Set(), moduleReachableRels = /* @__PURE__ */ new Set()) {
-  const candidates = (defsByName.get(name) ?? []).filter(
-    (c) => c.kind === "class" || c.kind === "interface"
-  );
-  if (candidates.length === 0) return null;
-  const sameFile = candidates.filter((c) => c.rel === fromRel);
-  if (sameFile.length === 1) return { id: sameFile[0].id };
-  const imported = candidates.filter((c) => importedRels.has(c.rel));
-  if (imported.length === 1) return { id: imported[0].id };
-  if (imported.length > 1) return null;
-  if (PACKAGE_SCOPED_LANGS.has(fromLang)) {
-    const dir = dirOf(fromRel);
-    const samePkg = candidates.filter((c) => c.lang === fromLang && dirOf(c.rel) === dir);
-    if (samePkg.length === 1) return { id: samePkg[0].id };
-  }
-  if (nsReachableRels.size || moduleReachableRels.size) {
-    const reach = candidates.filter((c) => nsReachableRels.has(c.rel) || moduleReachableRels.has(c.rel));
-    if (reach.length === 1) return { id: reach[0].id };
-  }
-  if (fromLang === "swift" && fromIsTestFile && candidates.length === 1) {
-    return { id: candidates[0].id };
-  }
-  return null;
-}
-var EdgeSet = class {
-  map = /* @__PURE__ */ new Map();
-  add(kind, src, dst, resolution, confidence) {
-    const id = edgeId(kind, src, dst);
-    const existing = this.map.get(id);
-    if (existing) {
-      existing.count = (existing.count ?? 1) + 1;
-      if (confidence > existing.confidence) existing.confidence = confidence;
-      return;
-    }
-    this.map.set(id, { id, kind, src, dst, resolution, confidence, count: 1 });
-  }
-  toArray() {
-    return [...this.map.values()].sort(
-      (a, b) => a.kind.localeCompare(b.kind) || a.src.localeCompare(b.src) || a.dst.localeCompare(b.dst)
-    );
-  }
-};
 var PRECISE_KIND = "tsc";
 function tsResolveEdges(root, tsFiles, nodes) {
   const empty = {
@@ -2121,7 +1356,7 @@ function enclosing3(nodes, line) {
   return best;
 }
 function normalize2(p) {
-  return path2.resolve(p).split(path2.sep).join("/");
+  return path17.resolve(p).split(path17.sep).join("/");
 }
 
 // src/engine/epistemic.ts
@@ -2147,11 +1382,416 @@ function epistemicBreakdown(edges) {
   }
   return out;
 }
+var DOC_BODY_MAX_CHARS = 8e3;
+var DOC_FILE_MAX_BYTES = 512 * 1024;
+var DOC_MAX_FILES = 600;
+var DOC_EXTENSIONS = /* @__PURE__ */ new Set([".md", ".mdx", ".txt", ".rst", ".adoc"]);
+var ENV_EXAMPLE_NAMES = /* @__PURE__ */ new Set([
+  "example.env",
+  "env.example",
+  ".env.example",
+  ".env.sample",
+  ".env.template",
+  ".env.development.example",
+  ".env.local.example",
+  "dotenv.example"
+]);
+var EXACT_BASENAME = {
+  // Manifests / package managers
+  "package.json": "manifest",
+  "package.yaml": "manifest",
+  "package.yml": "manifest",
+  "pyproject.toml": "manifest",
+  "setup.cfg": "manifest",
+  "requirements.txt": "manifest",
+  "requirements-dev.txt": "manifest",
+  "pipfile": "manifest",
+  "go.mod": "manifest",
+  "go.work": "manifest",
+  "cargo.toml": "manifest",
+  "composer.json": "manifest",
+  "gemfile": "manifest",
+  "podfile": "manifest",
+  "pubspec.yaml": "manifest",
+  "mix.exs": "manifest",
+  "build.gradle": "manifest",
+  "build.gradle.kts": "manifest",
+  "settings.gradle": "manifest",
+  "settings.gradle.kts": "manifest",
+  "pom.xml": "manifest",
+  "project.clj": "manifest",
+  "stack.yaml": "manifest",
+  "package.swift": "manifest",
+  // Workspace / monorepo
+  "pnpm-workspace.yaml": "workspace",
+  "pnpm-workspace.yml": "workspace",
+  "lerna.json": "workspace",
+  "nx.json": "workspace",
+  "turbo.json": "workspace",
+  "rush.json": "workspace",
+  "workspace.json": "workspace",
+  // Docker
+  dockerfile: "docker",
+  "dockerfile.dev": "docker",
+  "dockerfile.prod": "docker",
+  "dockerfile.local": "docker",
+  containerfile: "docker",
+  // Compose
+  "docker-compose.yml": "compose",
+  "docker-compose.yaml": "compose",
+  "compose.yml": "compose",
+  "compose.yaml": "compose",
+  "docker-compose.dev.yml": "compose",
+  "docker-compose.prod.yml": "compose",
+  "docker-compose.override.yml": "compose",
+  // Task runners
+  makefile: "task-runner",
+  gnumakefile: "task-runner",
+  justfile: "task-runner",
+  "taskfile.yml": "task-runner",
+  "taskfile.yaml": "task-runner",
+  rakefile: "task-runner",
+  // Build / tool config (exact)
+  "tsconfig.json": "build-config",
+  "jsconfig.json": "build-config",
+  "vite.config.ts": "build-config",
+  "vite.config.js": "build-config",
+  "vite.config.mjs": "build-config",
+  "vitest.config.ts": "build-config",
+  "vitest.config.js": "build-config",
+  "jest.config.js": "build-config",
+  "jest.config.ts": "build-config",
+  "jest.config.cjs": "build-config",
+  "webpack.config.js": "build-config",
+  "webpack.config.ts": "build-config",
+  "rollup.config.js": "build-config",
+  "esbuild.config.js": "build-config",
+  "next.config.js": "build-config",
+  "next.config.mjs": "build-config",
+  "next.config.ts": "build-config",
+  "nuxt.config.ts": "build-config",
+  "nuxt.config.js": "build-config",
+  "astro.config.mjs": "build-config",
+  "svelte.config.js": "build-config",
+  "remix.config.js": "build-config",
+  "angular.json": "build-config",
+  "babel.config.js": "build-config",
+  "babel.config.json": "build-config",
+  ".babelrc": "build-config",
+  ".babelrc.js": "build-config",
+  ".babelrc.json": "build-config",
+  "eslint.config.js": "build-config",
+  "eslint.config.mjs": "build-config",
+  "eslint.config.cjs": "build-config",
+  "eslint.config.ts": "build-config",
+  ".eslintrc": "build-config",
+  ".eslintrc.js": "build-config",
+  ".eslintrc.cjs": "build-config",
+  ".eslintrc.json": "build-config",
+  ".eslintrc.yml": "build-config",
+  ".prettierrc": "build-config",
+  ".prettierrc.js": "build-config",
+  ".prettierrc.json": "build-config",
+  ".prettierrc.yml": "build-config",
+  "prettier.config.js": "build-config",
+  "prettier.config.cjs": "build-config",
+  "ruff.toml": "build-config",
+  ".ruff.toml": "build-config",
+  "pytest.ini": "build-config",
+  "tox.ini": "build-config",
+  "mypy.ini": "build-config",
+  ".mypy.ini": "build-config",
+  "phpunit.xml": "build-config",
+  "phpunit.xml.dist": "build-config",
+  // CI exact
+  "jenkinsfile": "ci",
+  ".gitlab-ci.yml": "ci",
+  ".travis.yml": "ci",
+  "azure-pipelines.yml": "ci",
+  "buildkite.yml": "ci",
+  "cloudbuild.yaml": "ci",
+  "appveyor.yml": "ci",
+  "circle.yml": "ci",
+  // Deploy / infra (root-level common names)
+  "vercel.json": "infra",
+  "netlify.toml": "infra",
+  "wrangler.toml": "infra",
+  "wrangler.json": "infra",
+  "wrangler.jsonc": "infra",
+  "fly.toml": "infra",
+  "railway.toml": "infra",
+  "render.yaml": "infra",
+  "app.yaml": "infra",
+  "Procfile": "infra",
+  "procfile": "infra",
+  "heroku.yml": "infra",
+  "serverless.yml": "infra",
+  "serverless.yaml": "infra",
+  "sam.yaml": "infra",
+  "samconfig.toml": "infra",
+  "cdk.json": "infra",
+  "pulumi.yaml": "infra",
+  "terraform.tf": "infra",
+  // Agent / project meta (also covered by .md extension)
+  "agents.md": "markdown",
+  "claude.md": "markdown",
+  "codeowners": "other-config",
+  ".nvmrc": "other-config",
+  ".node-version": "other-config",
+  ".python-version": "other-config",
+  "runtime.txt": "other-config",
+  ".tool-versions": "other-config",
+  "editorconfig": "other-config",
+  ".editorconfig": "other-config"
+};
+var BASENAME_PREFIX = [
+  { re: /^dockerfile(\.|$)/i, category: "docker" },
+  { re: /^docker-compose(\.|$)/i, category: "compose" },
+  { re: /^compose\.(ya?ml)$/i, category: "compose" },
+  { re: /^tsconfig(\..+)?\.json$/i, category: "build-config" },
+  { re: /^jsconfig(\..+)?\.json$/i, category: "build-config" },
+  { re: /^vite\.config\./i, category: "build-config" },
+  { re: /^vitest\.config\./i, category: "build-config" },
+  { re: /^jest\.config\./i, category: "build-config" },
+  { re: /^webpack\.config\./i, category: "build-config" },
+  { re: /^rollup\.config\./i, category: "build-config" },
+  { re: /^next\.config\./i, category: "build-config" },
+  { re: /^nuxt\.config\./i, category: "build-config" },
+  { re: /^astro\.config\./i, category: "build-config" },
+  { re: /^eslint\.config\./i, category: "build-config" },
+  { re: /^\.eslintrc/i, category: "build-config" },
+  { re: /^openapi\./i, category: "api-contract" },
+  { re: /^swagger\./i, category: "api-contract" },
+  { re: /^requirements(-\w+)?\.txt$/i, category: "manifest" },
+  { re: /^dockerfile/i, category: "docker" }
+];
+var PATH_PATTERNS = [
+  // GitHub Actions / workflows
+  { re: /^\.github\/workflows\/.+\.ya?ml$/i, category: "ci" },
+  { re: /^\.github\/actions\/.+/i, category: "ci" },
+  { re: /^\.circleci\/.+\.ya?ml$/i, category: "ci" },
+  { re: /^\.buildkite\/.+/i, category: "ci" },
+  // Helm / k8s (values + charts — not every template blob)
+  { re: /^charts\/[^/]+\/(chart\.ya?ml|values.*\.ya?ml)$/i, category: "infra" },
+  { re: /^deploy\/.+\.ya?ml$/i, category: "infra" },
+  { re: /^k8s\/.+\.ya?ml$/i, category: "infra" },
+  { re: /^kubernetes\/.+\.ya?ml$/i, category: "infra" },
+  { re: /^infra\/.+\.ya?ml$/i, category: "infra" },
+  { re: /^terraform\/.+\.tf$/i, category: "infra" },
+  // API contracts by path
+  { re: /(^|\/)(openapi|swagger)(\.|\/)/i, category: "api-contract" },
+  { re: /(^|\/)api(-)?(spec|schema|contracts?)\//i, category: "api-contract" }
+];
+var API_EXTENSIONS = /* @__PURE__ */ new Set([".graphql", ".gql", ".proto", ".avsc", ".thrift"]);
+var IMPORTANCE = {
+  markdown: 0.1,
+  text: 0.06,
+  "env-example": 0.12,
+  manifest: 0.16,
+  docker: 0.14,
+  compose: 0.15,
+  ci: 0.14,
+  "build-config": 0.11,
+  "api-contract": 0.13,
+  "task-runner": 0.13,
+  workspace: 0.14,
+  infra: 0.12,
+  "other-config": 0.08
+};
+function toPosix2(p) {
+  return p.split(path17.sep).join("/");
+}
+function buildRootIgnore2(root, exclude) {
+  const ig = ignore();
+  const gitignorePath = path17.join(root, ".gitignore");
+  if (fs15.existsSync(gitignorePath)) {
+    try {
+      ig.add(fs15.readFileSync(gitignorePath, "utf8"));
+    } catch {
+    }
+  }
+  if (exclude.length) ig.add(exclude);
+  return ig;
+}
+function classifyProjectContext(relOrName) {
+  const rel2 = relOrName.replace(/\\/g, "/");
+  const base = path17.basename(rel2);
+  const baseLower = base.toLowerCase();
+  if (/^\.env($|\.)/i.test(base) && !isEnvExampleName(baseLower)) return null;
+  if (SKIP_FILES.has(baseLower)) return null;
+  if (isEnvExampleName(baseLower)) return "env-example";
+  const exact = EXACT_BASENAME[baseLower] ?? EXACT_BASENAME[base];
+  if (exact) return exact;
+  for (const { re, category } of BASENAME_PREFIX) {
+    if (re.test(base)) return category;
+  }
+  for (const { re, category } of PATH_PATTERNS) {
+    if (re.test(rel2)) return category;
+  }
+  const ext = path17.extname(baseLower);
+  if (DOC_EXTENSIONS.has(ext)) return ext === ".txt" ? "text" : "markdown";
+  if (API_EXTENSIONS.has(ext)) return "api-contract";
+  if ((ext === ".yaml" || ext === ".yml" || ext === ".json") && /openapi|swagger|asyncapi/i.test(base)) {
+    return "api-contract";
+  }
+  if (/^docker-compose\..+\.ya?ml$/i.test(base) || /^compose\..+\.ya?ml$/i.test(base)) {
+    return "compose";
+  }
+  return null;
+}
+function isEnvExampleName(baseLower) {
+  if (ENV_EXAMPLE_NAMES.has(baseLower)) return true;
+  if (/^(\.)?env\.(example|sample|template)(\.|$)/i.test(baseLower)) return true;
+  if (/^example\.env/i.test(baseLower)) return true;
+  return false;
+}
+function discoverDocs(options) {
+  const root = path17.resolve(options.root);
+  const maxFiles = options.maxFiles ?? DOC_MAX_FILES;
+  const rootIg = buildRootIgnore2(root, options.exclude ?? []);
+  const scopeAbs = (options.paths?.length ? options.paths.map((p) => path17.resolve(root, p)) : [root]).filter(
+    (p) => fs15.existsSync(p)
+  );
+  const found = /* @__PURE__ */ new Map();
+  const consider = (abs) => {
+    if (found.size >= maxFiles) return;
+    const rel2 = toPosix2(path17.relative(root, abs));
+    if (!rel2 || rel2.startsWith("..")) return;
+    if (rootIg.ignores(rel2)) return;
+    const base = path17.basename(abs);
+    if (SKIP_FILES.has(base.toLowerCase())) return;
+    const category = classifyProjectContext(rel2);
+    if (!category) return;
+    try {
+      const st = fs15.statSync(abs);
+      if (!st.isFile() || st.size > DOC_FILE_MAX_BYTES) return;
+      if (st.size === 0) return;
+    } catch {
+      return;
+    }
+    found.set(rel2, { rel: rel2, abs, kind: category, category });
+  };
+  const walk = (dir, depth) => {
+    if (found.size >= maxFiles || depth > 12) return;
+    let entries;
+    try {
+      entries = fs15.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries.sort((a, b) => a.name.localeCompare(b.name))) {
+      if (found.size >= maxFiles) return;
+      const abs = path17.join(dir, entry.name);
+      const rel2 = toPosix2(path17.relative(root, abs));
+      if (entry.isDirectory()) {
+        if (SKIP_DIRS.has(entry.name)) continue;
+        if (rel2 && rootIg.ignores(`${rel2}/`) && !rel2.startsWith(".github")) continue;
+        walk(abs, depth + 1);
+      } else if (entry.isFile()) {
+        consider(abs);
+      }
+    }
+  };
+  for (const scope of scopeAbs) {
+    try {
+      const st = fs15.statSync(scope);
+      if (st.isDirectory()) walk(scope, 0);
+      else if (st.isFile()) consider(scope);
+    } catch {
+    }
+  }
+  return [...found.values()].sort((a, b) => a.rel.localeCompare(b.rel));
+}
+function prepareDocBody(rel2, raw, category) {
+  const scrubbed = redactSecrets(raw);
+  if (scrubbed.length <= DOC_BODY_MAX_CHARS) return scrubbed;
+  if (category === "manifest" && path17.basename(rel2).toLowerCase() === "package.json") {
+    return summarizePackageJson(scrubbed);
+  }
+  if (category === "api-contract" && /\.(ya?ml|json)$/i.test(rel2)) {
+    return scrubbed.slice(0, DOC_BODY_MAX_CHARS);
+  }
+  if (category === "ci") {
+    return scrubbed.slice(0, DOC_BODY_MAX_CHARS);
+  }
+  return scrubbed.slice(0, DOC_BODY_MAX_CHARS);
+}
+function summarizePackageJson(raw) {
+  try {
+    const o = JSON.parse(raw);
+    const keep = {};
+    for (const k of [
+      "name",
+      "version",
+      "description",
+      "private",
+      "type",
+      "packageManager",
+      "engines",
+      "workspaces",
+      "scripts",
+      "dependencies",
+      "devDependencies",
+      "peerDependencies",
+      "optionalDependencies",
+      "main",
+      "bin",
+      "exports"
+    ]) {
+      if (o[k] !== void 0) keep[k] = o[k];
+    }
+    const s = JSON.stringify(keep, null, 2);
+    return s.length <= DOC_BODY_MAX_CHARS ? s : s.slice(0, DOC_BODY_MAX_CHARS);
+  } catch {
+    return raw.slice(0, DOC_BODY_MAX_CHARS);
+  }
+}
+function documentNodesFromDocs(docs) {
+  const nodes = [];
+  for (const d of docs) {
+    let raw = "";
+    try {
+      raw = fs15.readFileSync(d.abs, "utf8");
+    } catch {
+      continue;
+    }
+    const category = d.category ?? d.kind;
+    const scrubbed = prepareDocBody(d.rel, raw, category);
+    if (!scrubbed.trim()) continue;
+    const name = path17.basename(d.rel);
+    const qualifiedName = d.rel.replace(/\\/g, "/");
+    const id = nodeId({
+      kind: "document",
+      qualifiedName,
+      file: qualifiedName,
+      signature: category
+    });
+    const lineCount = Math.max(1, scrubbed.split("\n").length);
+    const langTag = category === "markdown" ? "md" : category === "env-example" ? "env" : category === "manifest" ? "manifest" : category === "docker" || category === "compose" ? "docker" : category === "ci" ? "ci" : category === "api-contract" ? "api" : category === "build-config" ? "config" : category === "task-runner" ? "task" : category === "workspace" ? "workspace" : category === "infra" ? "infra" : "txt";
+    nodes.push({
+      id,
+      kind: "document",
+      name,
+      qualifiedName,
+      file: qualifiedName,
+      span: { start: 1, end: lineCount },
+      lang: langTag,
+      signature: `document:${category}`,
+      doc: scrubbed,
+      importance: IMPORTANCE[category] ?? 0.05,
+      centrality: { degree: 0, pagerank: 0, betweenness: 0, eigenvector: 0 },
+      area: -1,
+      isHub: false,
+      tested: null
+    });
+  }
+  return nodes.sort((a, b) => a.file.localeCompare(b.file) || a.id.localeCompare(b.id));
+}
 
 // src/engine/build.ts
 async function buildGraph(options) {
   const start = nowMs();
-  const root = path2.resolve(options.root);
+  const root = path17.resolve(options.root);
   const files = discover({
     root,
     only: options.only,
@@ -2179,7 +1819,7 @@ async function buildGraph(options) {
   for (const file of files) {
     let stat;
     try {
-      stat = fs18.statSync(file.abs);
+      stat = fs15.statSync(file.abs);
     } catch {
       continue;
     }
@@ -2197,7 +1837,7 @@ async function buildGraph(options) {
     }
     let hash = "";
     try {
-      hash = hashBytes(fs18.readFileSync(file.abs));
+      hash = hashBytes(fs15.readFileSync(file.abs));
     } catch {
       continue;
     }
@@ -2224,7 +1864,7 @@ async function buildGraph(options) {
   );
   const warnings = [...buildWarnings, ...parses.flatMap((p) => p.warnings ?? [])];
   const moduleResolver = buildModuleResolver(root, new Set(parses.map((p) => p.rel)));
-  const resolved = resolve4(parses, moduleResolver);
+  const resolved = resolve(parses, moduleResolver);
   checkMemoryBudget("resolve", limits.memoryBudgetMb);
   const nodeFileById = new Map(resolved.nodes.map((n) => [n.id, n.file]));
   let edges = resolved.edges;
@@ -2261,9 +1901,25 @@ async function buildGraph(options) {
   let nodes = linked.nodes;
   const coverage = options.noCoverage ? null : loadCoverage(root, options.coverage);
   if (coverage) nodes = applyCoverage(nodes, coverage);
+  const docs = discoverDocs({
+    root,
+    exclude: options.exclude,
+    paths: options.paths
+  });
+  for (const d of docs) {
+    try {
+      const st = fs15.statSync(d.abs);
+      const hash = hashBytes(fs15.readFileSync(d.abs));
+      hashes.set(d.rel, hash);
+      fileStats.push({ rel: d.rel, size: st.size, mtimeMs: st.mtimeMs, hash });
+    } catch {
+    }
+  }
+  const docNodes = documentNodesFromDocs(docs);
+  if (docNodes.length) nodes = [...nodes, ...docNodes];
   const analysis = analyze(nodes, linked.edges, { cluster: options.cluster });
   checkMemoryBudget("analysis", limits.memoryBudgetMb);
-  const languages = [...new Set(parses.map((p) => p.lang))].sort();
+  const languages = [.../* @__PURE__ */ new Set([...parses.map((p) => p.lang), ...docNodes.map((n) => n.lang)])].sort();
   const edgeKinds = [...new Set(analysis.edges.map((e) => e.kind))].sort();
   const corpusHash = computeCorpusHash(parses, hashes);
   const nodeKindById = new Map(analysis.nodes.map((n) => [n.id, n.kind]));
@@ -2289,7 +1945,7 @@ async function buildGraph(options) {
       toolchain
     },
     meta: {
-      root: path2.basename(root) === "" ? "." : ".",
+      root: path17.basename(root) === "" ? "." : ".",
       languages,
       counts: {
         nodes: analysis.nodes.length,
@@ -2335,14 +1991,14 @@ function toRepoRel(p) {
 function loadScipIndex(root, explicit) {
   const candidates = [
     explicit,
-    path2.join(root, "index.scip"),
-    path2.join(root, ".vibgrate", "index.scip")
+    path17.join(root, "index.scip"),
+    path17.join(root, ".vibgrate", "index.scip")
   ].filter((p) => Boolean(p));
   for (const file of candidates) {
-    const abs = path2.isAbsolute(file) ? file : path2.resolve(root, file);
-    if (!fs18.existsSync(abs)) continue;
+    const abs = path17.isAbsolute(file) ? file : path17.resolve(root, file);
+    if (!fs15.existsSync(abs)) continue;
     try {
-      const index = decodeScipIndex(new Uint8Array(fs18.readFileSync(abs)));
+      const index = decodeScipIndex(new Uint8Array(fs15.readFileSync(abs)));
       if (index.documents.length) {
         return { index, tool: index.toolVersion ? `${index.toolName} ${index.toolVersion}` : index.toolName };
       }
@@ -2384,188 +2040,17 @@ function computeToolchain(grammars, resolvers) {
   };
 }
 function computeCorpusHash(parses, hashes) {
-  const list = parses.map((p) => [p.rel, hashes.get(p.rel) ?? p.hash]).sort((a, b) => a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0);
+  const fromParses = parses.map((p) => [p.rel, hashes.get(p.rel) ?? p.hash]);
+  const fromHashes = [...hashes.entries()].map(([rel2, hash]) => [rel2, hash]);
+  const byRel = /* @__PURE__ */ new Map();
+  for (const [rel2, hash] of [...fromParses, ...fromHashes]) byRel.set(rel2, hash);
+  const list = [...byRel.entries()].sort((a, b) => a[0] < b[0] ? -1 : a[0] > b[0] ? 1 : 0);
   return hashString(canonicalize(list));
 }
 function nowMs() {
   return Number(process.hrtime.bigint() / 1000n) / 1e3;
 }
 
-// src/engine/report.ts
-function renderReport(graph) {
-  const { meta, provenance, nodes, edges } = graph;
-  const lines = [];
-  lines.push("# Code Graph Report");
-  lines.push("");
-  lines.push(`Generated by \`vg\` ${provenance.version} \xB7 schema \`${graph.schemaVersion}\``);
-  lines.push("");
-  lines.push("## Summary");
-  lines.push("");
-  lines.push(`- **Nodes:** ${meta.counts.nodes.toLocaleString("en-US")}`);
-  lines.push(`- **Edges:** ${meta.counts.edges.toLocaleString("en-US")}`);
-  lines.push(`- **Areas:** ${meta.counts.areas.toLocaleString("en-US")}`);
-  lines.push(`- **Languages:** ${meta.languages.join(", ") || "\u2014"}`);
-  lines.push(`- **Clustering:** ${meta.cluster}`);
-  lines.push(`- **Resolvers:** ${provenance.resolver.join(", ")}`);
-  lines.push(`- **Edge kinds:** ${meta.edgeKinds.join(", ") || "\u2014"}`);
-  lines.push("");
-  const fileNodes = nodes.filter((n) => n.kind === "file");
-  const defsByFile = /* @__PURE__ */ new Map();
-  for (const n of nodes) {
-    if (n.kind === "file" || n.kind === "external") continue;
-    defsByFile.set(n.file, (defsByFile.get(n.file) ?? 0) + 1);
-  }
-  const topFiles = [...defsByFile.entries()].sort((a, b) => b[1] - a[1] || a[0].localeCompare(b[0])).slice(0, 15);
-  if (topFiles.length) {
-    lines.push("## Largest files (by definitions)");
-    lines.push("");
-    lines.push("| File | Definitions |");
-    lines.push("| --- | ---: |");
-    for (const [file, count] of topFiles) lines.push(`| \`${file}\` | ${count} |`);
-    lines.push("");
-  }
-  const topNodes = nodes.filter((n) => n.kind !== "file" && n.kind !== "external").sort((a, b) => b.importance - a.importance || a.qualifiedName.localeCompare(b.qualifiedName)).slice(0, 15);
-  if (topNodes.length) {
-    lines.push("## Most-connected definitions");
-    lines.push("");
-    lines.push("| Symbol | Kind | File | Importance |");
-    lines.push("| --- | --- | --- | ---: |");
-    for (const n of topNodes) {
-      lines.push(
-        `| \`${n.qualifiedName}\` | ${n.kind} | \`${n.file}\`:${n.span.start} | ${n.importance.toFixed(3)} |`
-      );
-    }
-    lines.push("");
-  }
-  const byKind = /* @__PURE__ */ new Map();
-  for (const e of edges) byKind.set(e.kind, (byKind.get(e.kind) ?? 0) + 1);
-  if (byKind.size) {
-    lines.push("## Edges by kind");
-    lines.push("");
-    lines.push("| Kind | Count |");
-    lines.push("| --- | ---: |");
-    for (const [kind, count] of [...byKind.entries()].sort((a, b) => a[0].localeCompare(b[0]))) {
-      lines.push(`| ${kind} | ${count} |`);
-    }
-    lines.push("");
-  }
-  lines.push("---");
-  lines.push("");
-  lines.push(`_Files: ${fileNodes.length} \xB7 Corpus: \`${provenance.corpusHash.slice(0, 16)}\u2026\`_`);
-  lines.push("");
-  return lines.join("\n");
-}
-
-// src/engine/html.ts
-function renderHtml(graph) {
-  const top = graph.nodes.filter((n) => n.kind !== "file" && n.kind !== "external").sort((a, b) => b.importance - a.importance || a.qualifiedName.localeCompare(b.qualifiedName)).slice(0, 50);
-  const rows = top.map(
-    (n) => `<tr><td><code>${esc(n.qualifiedName)}</code></td><td>${esc(n.kind)}</td><td><code>${esc(n.file)}</code>:${n.span.start}</td><td>${n.importance.toFixed(3)}</td></tr>`
-  ).join("\n");
-  const embedded = stableStringify(graph, 0);
-  return `<!doctype html>
-<html lang="en">
-<head>
-<meta charset="utf-8">
-<meta name="viewport" content="width=device-width, initial-scale=1">
-<title>vg \xB7 code graph</title>
-<style>
-  :root { color-scheme: light dark; }
-  body { font: 14px/1.5 system-ui, sans-serif; margin: 2rem auto; max-width: 60rem; padding: 0 1rem; }
-  h1 { font-size: 1.4rem; } h2 { font-size: 1.1rem; margin-top: 2rem; }
-  table { border-collapse: collapse; width: 100%; }
-  th, td { text-align: left; padding: 4px 8px; border-bottom: 1px solid #8884; }
-  td:last-child, th:last-child { text-align: right; }
-  .meta { color: #888; } code { font-size: 0.9em; }
-</style>
-</head>
-<body>
-<h1>vg \xB7 code graph</h1>
-<p class="meta">${graph.meta.counts.nodes} nodes \xB7 ${graph.meta.counts.edges} edges \xB7
-${graph.meta.counts.areas} areas \xB7 ${esc(graph.meta.languages.join(", ") || "\u2014")} \xB7
-clustering: ${esc(graph.meta.cluster)} \xB7 vg ${esc(graph.provenance.version)}</p>
-<h2>Most-connected definitions</h2>
-<table>
-<thead><tr><th>Symbol</th><th>Kind</th><th>Location</th><th>Importance</th></tr></thead>
-<tbody>
-${rows}
-</tbody>
-</table>
-<p class="meta">Interactive WebGL view arrives in Phase 1. The full graph is embedded below for tooling.</p>
-<script type="application/json" id="vg-graph">
-${embedded}
-</script>
-</body>
-</html>
-`;
-}
-function esc(s) {
-  return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
-}
-function vibgrateDir(root) {
-  return path2.join(root, ".vibgrate");
-}
-var DEFAULT_GITIGNORE = [
-  "# Created once by vg \u2014 local graph artifacts stay out of git by default.",
-  "# Run `vg share` to commit the map for your team (it rewrites this file).",
-  "# vg never touches an existing .vibgrate/.gitignore: edit it (or leave it",
-  "# empty) to manage these ignores yourself.",
-  ".gitignore",
-  "cache/",
-  "graph.json",
-  "graph.html",
-  "GRAPH_REPORT.md",
-  "facts.jsonl",
-  "mcp-navigation.json"
-];
-function ensureVibgrateGitignore(root) {
-  const file = path2.join(vibgrateDir(root), ".gitignore");
-  if (fs18.existsSync(file)) return;
-  fs18.mkdirSync(vibgrateDir(root), { recursive: true });
-  fs18.writeFileSync(file, `${DEFAULT_GITIGNORE.join("\n")}
-`);
-}
-function defaultGraphPath(root) {
-  return path2.join(vibgrateDir(root), "graph.json");
-}
-function writeArtifacts(graph, options) {
-  const dir = vibgrateDir(options.root);
-  fs18.mkdirSync(dir, { recursive: true });
-  ensureVibgrateGitignore(options.root);
-  const graphPath = options.graphPath ?? defaultGraphPath(options.root);
-  fs18.mkdirSync(path2.dirname(graphPath), { recursive: true });
-  const tmp = `${graphPath}.${process.pid}.tmp`;
-  try {
-    fs18.writeFileSync(tmp, serializeGraph(graph));
-    fs18.renameSync(tmp, graphPath);
-  } catch (err) {
-    fs18.rmSync(tmp, { force: true });
-    throw err;
-  }
-  const written = { graphPath };
-  if (options.report !== false) {
-    const reportPath = path2.join(dir, "GRAPH_REPORT.md");
-    fs18.writeFileSync(reportPath, renderReport(graph));
-    written.reportPath = reportPath;
-  }
-  if (options.html !== false) {
-    const htmlPath = path2.join(dir, "graph.html");
-    fs18.writeFileSync(htmlPath, renderHtml(graph));
-    written.htmlPath = htmlPath;
-  }
-  if (graph.facts && graph.facts.length) {
-    const factsPath = path2.join(dir, "facts.jsonl");
-    fs18.writeFileSync(factsPath, graph.facts.map((f) => JSON.stringify(f)).join("\n") + "\n");
-    written.factsPath = factsPath;
-  }
-  return written;
-}
-function loadGraph(root, graphPath) {
-  const file = graphPath ?? defaultGraphPath(root);
-  if (!fs18.existsSync(file)) return null;
-  return parseGraph(fs18.readFileSync(file, "utf8"));
-}
-
 // src/engine/verify.ts
 var PINNED = "1970-01-01T00:00:00.000Z";
 async function verifyDeterminism(opts) {
@@ -2631,21 +2116,21 @@ function usageError(message) {
 }
 var SNAPSHOT_VERSION = "vg-freshness/1";
 function snapshotPath(root) {
-  return path2.join(cacheDir(root), "freshness.json");
+  return path17.join(cacheDir(root), "freshness.json");
 }
 function writeSnapshot(root, corpusHash, fileStats, scope = {}) {
   const files = {};
   for (const f of fileStats) files[f.rel] = { size: f.size, mtimeMs: f.mtimeMs, hash: f.hash };
   const snapshot = { version: SNAPSHOT_VERSION, corpusHash, scope: pruneScope(scope), files };
   try {
-    fs18.mkdirSync(cacheDir(root), { recursive: true });
-    fs18.writeFileSync(snapshotPath(root), stableStringify(snapshot, 0));
+    fs15.mkdirSync(cacheDir(root), { recursive: true });
+    fs15.writeFileSync(snapshotPath(root), stableStringify(snapshot, 0));
   } catch {
   }
 }
 function loadSnapshot(root) {
   try {
-    const loaded = JSON.parse(fs18.readFileSync(snapshotPath(root), "utf8"));
+    const loaded = JSON.parse(fs15.readFileSync(snapshotPath(root), "utf8"));
     if (loaded.version === SNAPSHOT_VERSION && loaded.files && typeof loaded.corpusHash === "string") {
       return { ...loaded, scope: loaded.scope ?? {} };
     }
@@ -2681,7 +2166,7 @@ function probeFreshness(root) {
     }
     let stat;
     try {
-      stat = fs18.statSync(file.abs);
+      stat = fs15.statSync(file.abs);
     } catch {
       drift.removed.push(file.rel);
       continue;
@@ -2689,7 +2174,7 @@ function probeFreshness(root) {
     if (stat.size === entry.size && stat.mtimeMs === entry.mtimeMs) continue;
     let hash = "";
     try {
-      hash = hashBytes(fs18.readFileSync(file.abs));
+      hash = hashBytes(fs15.readFileSync(file.abs));
     } catch {
       drift.removed.push(file.rel);
       continue;
@@ -2706,7 +2191,7 @@ function probeFreshness(root) {
   }
   if (absorbed && !hasDrift(drift)) {
     try {
-      fs18.writeFileSync(snapshotPath(root), stableStringify(snapshot, 0));
+      fs15.writeFileSync(snapshotPath(root), stableStringify(snapshot, 0));
     } catch {
     }
   }
@@ -2787,10 +2272,10 @@ function testsToRun(graph, rootId, depth = 4) {
   };
 }
 function detectRunner(root, lang) {
-  const pkgPath = path2.join(root, "package.json");
-  if (fs18.existsSync(pkgPath)) {
+  const pkgPath = path17.join(root, "package.json");
+  if (fs15.existsSync(pkgPath)) {
     try {
-      const pkg = JSON.parse(fs18.readFileSync(pkgPath, "utf8"));
+      const pkg = JSON.parse(fs15.readFileSync(pkgPath, "utf8"));
       const deps = { ...pkg.dependencies, ...pkg.devDependencies };
       if (deps.vitest) return { name: "vitest", command: (f) => `npx vitest run ${f.join(" ")}`.trim() };
       if (deps.jest) return { name: "jest", command: (f) => `npx jest ${f.join(" ")}`.trim() };
@@ -2798,10 +2283,10 @@ function detectRunner(root, lang) {
     } catch {
     }
   }
-  if (lang === "py" || fs18.existsSync(path2.join(root, "pyproject.toml")) || fs18.existsSync(path2.join(root, "pytest.ini"))) {
+  if (lang === "py" || fs15.existsSync(path17.join(root, "pyproject.toml")) || fs15.existsSync(path17.join(root, "pytest.ini"))) {
     return { name: "pytest", command: (f) => `pytest ${f.join(" ")}`.trim() };
   }
-  if (lang === "go" || fs18.existsSync(path2.join(root, "go.mod"))) {
+  if (lang === "go" || fs15.existsSync(path17.join(root, "go.mod"))) {
     return { name: "go test", command: () => "go test ./..." };
   }
   if (lang === "cs" || hasFile(root, /\.csproj$/) || hasFile(root, /\.sln$/)) {
@@ -2812,82 +2297,16 @@ function detectRunner(root, lang) {
 }
 function hasFile(root, re) {
   try {
-    return fs18.readdirSync(root).some((f) => re.test(f));
+    return fs15.readdirSync(root).some((f) => re.test(f));
   } catch {
     return false;
   }
 }
-function discoverModels(home = os.homedir()) {
-  return [...ollama(home), ...lmStudio(home), ...looseGguf(home)].sort(
-    (a, b) => a.runtime.localeCompare(b.runtime) || a.name.localeCompare(b.name)
-  );
-}
-function ollama(home) {
-  const base = path2.join(home, ".ollama", "models", "manifests");
-  const out = [];
-  walk(base, 4, (file) => {
-    const rel2 = path2.relative(base, file).split(path2.sep);
-    if (rel2.length >= 2) {
-      const tag = rel2[rel2.length - 1];
-      const model = rel2[rel2.length - 2];
-      out.push({ runtime: "ollama", name: `${model}:${tag}`, path: file });
-    }
-  });
-  return dedupe(out);
-}
-function lmStudio(home) {
-  const bases = [path2.join(home, ".lmstudio", "models"), path2.join(home, ".cache", "lm-studio", "models")];
-  const out = [];
-  for (const base of bases) {
-    walk(base, 5, (file) => {
-      if (!file.endsWith(".gguf")) return;
-      const rel2 = path2.relative(base, file).replace(/\\/g, "/");
-      out.push({ runtime: "lm-studio", name: rel2, path: file });
-    });
-  }
-  return dedupe(out);
-}
-function looseGguf(home) {
-  const bases = [path2.join(home, "models"), path2.join(home, ".cache", "huggingface")];
-  const out = [];
-  for (const base of bases) {
-    walk(base, 4, (file) => {
-      if (!file.endsWith(".gguf")) return;
-      out.push({ runtime: "gguf", name: path2.basename(file), path: file });
-    });
-  }
-  return dedupe(out);
-}
-function walk(dir, depth, onFile) {
-  if (depth < 0) return;
-  let entries;
-  try {
-    entries = fs18.readdirSync(dir, { withFileTypes: true });
-  } catch {
-    return;
-  }
-  for (const e of entries.sort((a, b) => a.name.localeCompare(b.name))) {
-    const abs = path2.join(dir, e.name);
-    if (e.isDirectory()) walk(abs, depth - 1, onFile);
-    else if (e.isFile()) onFile(abs);
-  }
-}
-function dedupe(models) {
-  const seen = /* @__PURE__ */ new Set();
-  const out = [];
-  for (const m of models) {
-    const key = `${m.runtime}:${m.name}`;
-    if (seen.has(key)) continue;
-    seen.add(key);
-    out.push(m);
-  }
-  return out;
-}
 function findGitRoot(startDir = process.cwd()) {
-  let dir = path2.resolve(startDir);
+  let dir = path17.resolve(startDir);
   for (; ; ) {
-    if (fs18.existsSync(path2.join(dir, ".git"))) return dir;
-    const parent = path2.dirname(dir);
+    if (fs15.existsSync(path17.join(dir, ".git"))) return dir;
+    const parent = path17.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
   }
@@ -2898,19 +2317,19 @@ function normalizeEntry(line) {
 function ensureGitignored(entry, startDir = process.cwd()) {
   const root = findGitRoot(startDir);
   if (!root) return { status: "not-a-repo", entry };
-  const gitignorePath = path2.join(root, ".gitignore");
+  const gitignorePath = path17.join(root, ".gitignore");
   const target = normalizeEntry(entry);
   let existing = "";
   let fileExisted = true;
   try {
-    existing = fs18.readFileSync(gitignorePath, "utf8");
+    existing = fs15.readFileSync(gitignorePath, "utf8");
   } catch {
     fileExisted = false;
   }
   const alreadyPresent = existing.split(/\r?\n/).some((line) => normalizeEntry(line) === target);
   if (alreadyPresent) return { status: "present", entry, gitignorePath };
   const needsLeadingNewline = existing.length > 0 && !existing.endsWith("\n");
-  fs18.appendFileSync(gitignorePath, `${needsLeadingNewline ? "\n" : ""}${entry}
+  fs15.appendFileSync(gitignorePath, `${needsLeadingNewline ? "\n" : ""}${entry}
 `, "utf8");
   return { status: fileExisted ? "added" : "created", entry, gitignorePath };
 }
@@ -3064,14 +2483,14 @@ dsnCommand.command("create").description("Create a new DSN token").option("--ing
     console.log(chalk.dim("The secret must be registered on your Vibgrate ingest API."));
   }
   if (opts.write) {
-    const writePath = path2.resolve(opts.write);
+    const writePath = path17.resolve(opts.write);
     await writeTextFile(writePath, dsn + "\n");
     console.log("");
     console.log(chalk.green("\u2714") + ` DSN written to ${opts.write}`);
-    const root = findGitRoot(path2.dirname(writePath));
-    const rel2 = root ? path2.relative(root, writePath).split(path2.sep).join("/") : "";
+    const root = findGitRoot(path17.dirname(writePath));
+    const rel2 = root ? path17.relative(root, writePath).split(path17.sep).join("/") : "";
     if (root && rel2 && !rel2.startsWith("..")) {
-      const res = ensureGitignored(rel2, path2.dirname(writePath));
+      const res = ensureGitignored(rel2, path17.dirname(writePath));
       if (res.status === "created") {
         console.log(chalk.green("\u2714") + ` Created .gitignore and ignored ${rel2}`);
       } else if (res.status === "added") {
@@ -3089,30 +2508,30 @@ dsnCommand.command("create").description("Create a new DSN token").option("--ing
 var STORE_DIRNAME = ".vibgrate";
 var STORE_FILENAME = "credentials.json";
 function homeCredentialsPath() {
-  return path2.join(os.homedir(), STORE_DIRNAME, STORE_FILENAME);
+  return path17.join(os.homedir(), STORE_DIRNAME, STORE_FILENAME);
 }
 function projectCredentialsPath(cwd = process.cwd()) {
   const root = findGitRoot(cwd) ?? cwd;
-  return path2.join(root, STORE_DIRNAME, STORE_FILENAME);
+  return path17.join(root, STORE_DIRNAME, STORE_FILENAME);
 }
 function credentialsPath(opts = {}) {
   const override = process.env.VIBGRATE_CREDENTIALS?.trim();
-  if (override) return path2.resolve(override);
+  if (override) return path17.resolve(override);
   const local = projectCredentialsPath(opts.cwd);
   if (opts.local) return local;
-  if (fs18.existsSync(local)) return local;
+  if (fs15.existsSync(local)) return local;
   return homeCredentialsPath();
 }
 function gitignoreEntryForCredentials(repoRoot, credsFile = credentialsPath()) {
-  const rel2 = path2.relative(repoRoot, credsFile);
-  if (rel2 && !rel2.startsWith("..") && !path2.isAbsolute(rel2)) {
-    return rel2.split(path2.sep).join("/");
+  const rel2 = path17.relative(repoRoot, credsFile);
+  if (rel2 && !rel2.startsWith("..") && !path17.isAbsolute(rel2)) {
+    return rel2.split(path17.sep).join("/");
   }
   return `${STORE_DIRNAME}/${STORE_FILENAME}`;
 }
 function readStoredCredentials(opts = {}) {
   try {
-    const raw = fs18.readFileSync(credentialsPath(opts), "utf8");
+    const raw = fs15.readFileSync(credentialsPath(opts), "utf8");
     const parsed = JSON.parse(raw);
     return parsed && typeof parsed.dsn === "string" && parsed.dsn ? parsed : null;
   } catch {
@@ -3121,16 +2540,16 @@ function readStoredCredentials(opts = {}) {
 }
 function writeStoredCredentials(creds, opts = {}) {
   const file = credentialsPath(opts);
-  fs18.mkdirSync(path2.dirname(file), { recursive: true });
-  fs18.writeFileSync(file, JSON.stringify(creds, null, 2) + "\n", { encoding: "utf8", mode: 384 });
+  fs15.mkdirSync(path17.dirname(file), { recursive: true });
+  fs15.writeFileSync(file, JSON.stringify(creds, null, 2) + "\n", { encoding: "utf8", mode: 384 });
   try {
-    fs18.chmodSync(file, 384);
+    fs15.chmodSync(file, 384);
   } catch {
   }
 }
 function clearStoredCredentials(opts = {}) {
   try {
-    fs18.rmSync(credentialsPath(opts));
+    fs15.rmSync(credentialsPath(opts));
     return true;
   } catch {
     return false;
@@ -3501,7 +2920,7 @@ var pushCommand = new Command("push").description("Push scan results to Vibgrate
     if (opts.strict) process.exit(1);
     return;
   }
-  const filePath = path2.resolve(opts.file);
+  const filePath = path17.resolve(opts.file);
   if (!await pathExists(filePath)) {
     console.error(chalk.red(`Scan artifact not found: ${filePath}`));
     console.error(chalk.dim('Run "vibgrate scan" first.'));
@@ -3562,935 +2981,935 @@ var pushCommand = new Command("push").description("Push scan results to Vibgrate
     if (opts.strict) process.exit(1);
   }
 });
-function readScanArtifact(root) {
-  try {
-    const file = path2.join(root, ".vibgrate", "scan_result.json");
-    return JSON.parse(fs18.readFileSync(file, "utf8"));
-  } catch {
-    return null;
+var MAX_FILE_BYTES = 1e6;
+var PREVIEW_CHARS = 120;
+var NUL = "\0";
+var PARALLEL_MIN_BYTES = 64e6;
+var PARALLEL_MIN_FILES = 2e3;
+var ROW_CAP = 1e4;
+async function scanCandidates(root, files, needle, opts) {
+  const needleLower = needle.toLowerCase();
+  if (!needleLower || files.length === 0) return { hits: [], total: 0, truncated: false };
+  if (files.length < PARALLEL_MIN_FILES && !process.env.VG_PARALLEL_MIN_BYTES) {
+    return opts.collectAll ? scanInline(root, files, needleLower, ROW_CAP, false, void 0) : scanInline(root, files, needleLower, opts.budget, true, void 0);
+  }
+  const { over, sizes } = measure(root, files);
+  if (!over) {
+    return opts.collectAll ? scanInline(root, files, needleLower, ROW_CAP, false, sizes) : scanInline(root, files, needleLower, opts.budget, true, sizes);
+  }
+  const out = await scanParallel(root, files, needleLower);
+  if (!opts.collectAll && out.hits.length > opts.budget) {
+    out.hits.length = opts.budget;
+    out.truncated = true;
   }
+  return out;
 }
-function loadVulnerabilities(root) {
-  return readScanArtifact(root)?.extended?.vulnerabilities ?? null;
+function parallelMinBytes() {
+  const v = Number(process.env.VG_PARALLEL_MIN_BYTES);
+  return Number.isFinite(v) && v >= 0 ? v : PARALLEL_MIN_BYTES;
 }
-function resolvePackageTarget(root, pkg) {
-  const artifact = readScanArtifact(root);
-  for (const project of artifact?.projects ?? []) {
-    const dep = project.dependencies?.find((d) => d.package === pkg);
-    if (dep) {
-      return {
-        ecosystem: projectTypeToVulnEcosystem(project.type) ?? "unknown",
-        currentVersion: dep.resolvedVersion,
-        latestVersion: dep.latestStable,
-        majorsBehind: dep.majorsBehind
-      };
+function measure(root, files) {
+  const threshold = parallelMinBytes();
+  const sizes = /* @__PURE__ */ new Map();
+  let total = 0;
+  for (const rel2 of files) {
+    let size;
+    try {
+      size = fs15.statSync(path17.join(root, rel2)).size;
+    } catch {
+      continue;
     }
+    sizes.set(rel2, size);
+    if (size <= MAX_FILE_BYTES) total += size;
+    if (total >= threshold) return { over: true, sizes };
   }
-  const rec = inventory(root).records.find((r) => r.name === pkg);
-  if (rec) {
-    const ecosystem = rec.ecosystem === "npm" ? "npm" : rec.ecosystem === "pypi" ? "pypi" : "unknown";
-    return { ecosystem, currentVersion: rec.installed ?? null, latestVersion: rec.latest ?? null, majorsBehind: null };
+  return { over: false, sizes };
+}
+function matchLines(text, needleLower) {
+  const low = text.toLowerCase();
+  if (!low.includes(needleLower)) return [];
+  const lowLines = low.split("\n");
+  const rawLines = text.split("\n");
+  const hits = [];
+  for (let i = 0; i < lowLines.length; i++) {
+    if (lowLines[i].includes(needleLower)) hits.push({ line: i + 1, preview: rawLines[i].trim().slice(0, PREVIEW_CHARS) });
   }
-  return { ecosystem: "unknown", currentVersion: null, latestVersion: null, majorsBehind: null };
+  return hits;
 }
-function openFixableAdvisories(root, pkg) {
-  const vulns = loadVulnerabilities(root);
-  const match = vulns?.packages.find((p) => p.package === pkg);
-  return (match?.advisories ?? []).filter((a) => a.fixedVersions.length).map((a) => a.id);
+function readCandidate(abs, knownSize) {
+  try {
+    const size = knownSize ?? fs15.statSync(abs).size;
+    if (size > MAX_FILE_BYTES) return null;
+    const text = fs15.readFileSync(abs, "utf8");
+    return text.includes(NUL) ? null : text;
+  } catch {
+    return null;
+  }
 }
-function filterBySeverity(result, minSeverity) {
-  if (!minSeverity || minSeverity === "unknown") return result;
-  const floor = severityRank(minSeverity);
-  const packages = result.packages.map((p) => ({ ...p, advisories: p.advisories.filter((a) => severityRank(a.severity) >= floor) })).filter((p) => p.advisories.length > 0);
-  const totalAdvisories = packages.reduce((n, p) => n + p.advisories.length, 0);
-  return { ...result, packages, totalAdvisories };
+function scanInline(root, files, needleLower, cap, stopAtCap, sizes) {
+  const hits = [];
+  let total = 0;
+  let truncated = false;
+  for (const rel2 of files) {
+    const text = readCandidate(path17.join(root, rel2), sizes?.get(rel2));
+    if (text === null) continue;
+    for (const h of matchLines(text, needleLower)) {
+      total++;
+      if (hits.length < cap) hits.push({ file: rel2, line: h.line, preview: h.preview });
+      else {
+        truncated = true;
+        if (stopAtCap) return { hits, total, truncated };
+      }
+    }
+  }
+  return { hits, total, truncated };
 }
-
-// src/mcp/attribution.ts
-var MCP_MAX_COMMITS = 300;
-var ECOSYSTEM_MAP = {
-  npm: "npm",
-  pypi: "pypi",
-  go: "go",
-  rust: "cargo",
-  ruby: "rubygems",
-  php: "composer",
-  dotnet: "nuget",
-  dart: "pub"
-  // swift (no advisory ecosystem) and java (no resolved lockfile) have no timeline.
-};
-function brief(commit) {
-  return { sha: commit.shortSha, author: commit.authorName, date: commit.date, subject: commit.subject };
+async function scanParallel(root, files, needleLower) {
+  const n = Math.min(files.length, Math.max(2, Math.min(8, os.cpus().length - 1)));
+  const shards = Array.from({ length: n }, () => []);
+  files.forEach((f, i) => shards[i % n].push(f));
+  let results;
+  try {
+    results = await Promise.all(shards.map((shard) => runWorker(root, shard, needleLower)));
+  } catch {
+    return scanInline(root, files, needleLower, ROW_CAP, false, void 0);
+  }
+  const hits = [];
+  let total = 0;
+  let truncated = false;
+  for (const r of results) {
+    total += r.total;
+    truncated = truncated || r.truncated;
+    for (const h of r.hits) hits.push(h);
+  }
+  hits.sort((a, b) => a.file < b.file ? -1 : a.file > b.file ? 1 : a.line - b.line);
+  if (hits.length > ROW_CAP) {
+    hits.length = ROW_CAP;
+    truncated = true;
+  }
+  return { hits, total, truncated };
 }
-async function attributedInventory(root, opts = {}) {
-  const inv = inventory(root);
-  if (!opts.attribute) return { ...inv, attribution: "off" };
-  if (!await gitHistoryAvailable(root)) return { ...inv, attribution: "unavailable" };
-  const timelines = await buildVersionTimelines(root, { maxCommits: MCP_MAX_COMMITS });
-  if (!timelines) return { ...inv, attribution: "unavailable" };
-  const records = inv.records.map((r) => {
-    const ecosystem = ECOSYSTEM_MAP[r.ecosystem];
-    if (!ecosystem) return r;
-    const pt = findPackageTimeline(timelines, ecosystem, r.name);
-    if (!pt || !pt.changes.length) return r;
-    return {
-      ...r,
-      addedBy: brief(pt.changes[0].commit),
-      currentVersionBy: brief(pt.changes[pt.changes.length - 1].commit)
-    };
+var WORKER_SOURCE = [
+  "const { parentPort, workerData } = require('worker_threads');",
+  "const fs = require('fs');",
+  "const path = require('path');",
+  `const MAX = ${MAX_FILE_BYTES};`,
+  `const PREVIEW = ${PREVIEW_CHARS};`,
+  `const CAP = ${ROW_CAP};`,
+  "const NUL = String.fromCharCode(0);",
+  "const NL = String.fromCharCode(10);",
+  "const { root, files, needleLower } = workerData;",
+  "const hits = []; let total = 0, truncated = false;",
+  "for (const rel of files) {",
+  "  const abs = path.join(root, rel);",
+  "  let text;",
+  '  try { if (fs.statSync(abs).size > MAX) continue; text = fs.readFileSync(abs, "utf8"); } catch { continue; }',
+  "  if (text.includes(NUL)) continue;",
+  "  const low = text.toLowerCase();",
+  "  if (!low.includes(needleLower)) continue;",
+  "  const lowLines = low.split(NL); const rawLines = text.split(NL);",
+  "  for (let i = 0; i < lowLines.length; i++) {",
+  "    if (!lowLines[i].includes(needleLower)) continue;",
+  "    total++;",
+  "    if (hits.length < CAP) hits.push({ file: rel, line: i + 1, preview: rawLines[i].trim().slice(0, PREVIEW) });",
+  "    else truncated = true;",
+  "  }",
+  "}",
+  "parentPort.postMessage({ hits, total, truncated });"
+].join("\n");
+function runWorker(root, files, needleLower) {
+  return new Promise((resolve11, reject) => {
+    const w = new Worker(WORKER_SOURCE, { eval: true, workerData: { root, files, needleLower } });
+    let settled = false;
+    w.once("message", (m) => {
+      settled = true;
+      resolve11(m);
+    });
+    w.once("error", reject);
+    w.once("exit", (code) => {
+      if (!settled && code !== 0) reject(new Error(`literal-scan worker exited with code ${code}`));
+    });
   });
-  return { ...inv, records, attribution: "git" };
-}
-function countTokens(text) {
-  return encode(text).length;
-}
-function truncateToTokens(text, budget, marker = "\n\u2026(truncated)") {
-  if (!Number.isFinite(budget) || budget <= 0) return { text, truncated: false, tokens: countTokens(text) };
-  const tokens = encode(text);
-  if (tokens.length <= budget) return { text, truncated: false, tokens: tokens.length };
-  const markerTokens = encode(marker).length;
-  const keep = Math.max(0, budget - markerTokens);
-  let slice = decode(tokens.slice(0, keep));
-  const lastNl = slice.lastIndexOf("\n");
-  if (lastNl > 0) slice = slice.slice(0, lastNl);
-  const out = slice + marker;
-  return { text: out, truncated: true, tokens: countTokens(out) };
 }
 
-// src/engine/selection-weights.ts
-var DEFAULT_SELECTION_WEIGHTS = {
-  headingUsage: 4,
-  headingPreamble: -6,
-  hasCode: 3,
-  codeDensity: 0.5,
-  queryOverlap: 5,
-  symbolMatch: 2,
-  position: -0.1,
-  linkDensity: -3
-};
-
-// src/engine/select.ts
-var STOPWORDS = /* @__PURE__ */ new Set(["the", "a", "an", "to", "of", "in", "for", "and", "or", "is", "how", "do", "i", "use", "using", "with", "on", "my"]);
-var USAGE_RE = /\b(usage|example|examples|quick ?start|getting started|api|guide|how to|reference|tutorial|basic)\b/i;
-var PREAMBLE_RE = /\b(install|installation|license|licence|contributing|contributors?|sponsors?|table of contents|toc|changelog|funding|code of conduct|security|acknowledge)\b/i;
-function splitSections(md) {
-  const out = [];
-  let cur = { heading: "", level: 0};
-  let buf = [];
-  const flush = () => {
-    const body = buf.join("\n").trim();
-    if (cur.heading || body) out.push({ heading: cur.heading, level: cur.level, body });
-    buf = [];
-  };
-  for (const line of md.split("\n")) {
-    const h = /^(#{1,6})\s+(.*\S)\s*$/.exec(line);
-    if (h) {
-      flush();
-      cur = { heading: h[2].trim(), level: h[1].length, body: "" };
-    } else {
-      buf.push(line);
-    }
-  }
-  flush();
-  return out;
+// src/engine/search.ts
+var IGNORE_DIRS = /* @__PURE__ */ new Set([
+  ".git",
+  ".vibgrate",
+  "node_modules",
+  "dist",
+  "build",
+  "out",
+  "target",
+  "vendor",
+  "__pycache__",
+  // .NET intermediate output and coverage reports: purely generated trees that a
+  // C#/coverage-heavy repo pays for on every literal sweep. `bin` is deliberately
+  // NOT here — plenty of repos keep real scripts in bin/ (rails, node CLIs), and
+  // completeness beats speed; the binary-extension skip below keeps a .NET bin/
+  // cheap anyway.
+  "obj",
+  "coverage"
+]);
+var MAX_FILES_SCANNED = 2e4;
+var BINARY_EXTS = /* @__PURE__ */ new Set([
+  ".dll",
+  ".pdb",
+  ".exe",
+  ".so",
+  ".dylib",
+  ".a",
+  ".lib",
+  ".o",
+  ".class",
+  ".jar",
+  ".wasm",
+  ".node",
+  ".png",
+  ".jpg",
+  ".jpeg",
+  ".gif",
+  ".webp",
+  ".ico",
+  ".icns",
+  ".bmp",
+  ".zip",
+  ".gz",
+  ".tgz",
+  ".bz2",
+  ".xz",
+  ".7z",
+  ".rar",
+  ".woff",
+  ".woff2",
+  ".ttf",
+  ".otf",
+  ".eot",
+  ".mp3",
+  ".mp4",
+  ".mov",
+  ".avi",
+  ".pdf"
+]);
+function hasBinaryExt(rel2) {
+  return BINARY_EXTS.has(path17.extname(rel2).toLowerCase());
 }
-function chunkBody(body) {
-  const chunks = [];
-  let cur = [];
-  let inFence = false;
-  const flush = () => {
-    const c = cur.join("\n").trim();
-    if (c) chunks.push(c);
-    cur = [];
-  };
-  for (const line of body.split("\n")) {
-    if (/^\s*```/.test(line)) inFence = !inFence;
-    if (!inFence && line.trim() === "") {
-      flush();
-      continue;
-    }
-    cur.push(line);
+function toPosix3(rel2) {
+  return path17.sep === "\\" ? rel2.replaceAll("\\", "/") : rel2;
+}
+async function searchSymbols(graph, root, query, limit) {
+  let q = query.trim();
+  if (!q) return { matches: [], moreAvailable: false, hint: "query is required" };
+  const quoted = /^(["'`])(.+)\1$/.exec(q);
+  if (quoted && quoted[2].trim()) q = quoted[2].trim();
+  const isPhrase = Boolean(quoted) || /\s/.test(q) || /[/\\]/.test(q) && !q.includes(":") && !/[*?]/.test(q);
+  let nodes = findNodes(graph, q).filter((n) => n.kind !== "file");
+  if (nodes.length === 0) {
+    nodes = fileSymbolNodes(graph, q);
   }
-  flush();
-  return chunks;
+  if (nodes.length === 0 && isPhrase) {
+    nodes = reconstructedIdentifierNodes(graph, q);
+  }
+  if (nodes.length === 0) {
+    const tokens = queryTokens(q);
+    if (tokens.length >= 2) nodes = multiTokenNodes(graph, tokens);
+  }
+  const symbolCap = isPhrase ? Math.max(1, Math.floor(limit / 3)) : limit;
+  const symbolHits = nodes.slice(0, symbolCap).map((n, i) => ({
+    kind: n.kind,
+    name: n.qualifiedName,
+    file: n.file,
+    line: n.span.start,
+    score: Math.round((1 - i / Math.max(nodes.length, 1)) * 100) / 100
+  }));
+  const spare = limit - symbolHits.length;
+  const textHits = [];
+  let truncatedScan = false;
+  let totalTextMatches;
+  const skipScan = !isPhrase && hasExactSymbolMatch(nodes, q);
+  if (spare > 0 && !skipScan) {
+    const seen = new Set(symbolHits.map((h) => `${h.file}:${h.line}`));
+    const scan = await scanFiles(root, q, spare, seen, textHits, isPhrase);
+    truncatedScan = scan.truncated;
+    if (isPhrase) totalTextMatches = scan.total;
+  }
+  const matches = [...symbolHits, ...textHits];
+  if (matches.length === 0) {
+    return {
+      matches,
+      moreAvailable: false,
+      hint: "no symbol or text match \u2014 for meaning-level questions (symptoms, relationships, what-breaks-if) use query_graph"
+    };
+  }
+  const literalTruncated = totalTextMatches !== void 0 && totalTextMatches > textHits.length;
+  const moreAvailable = isPhrase ? literalTruncated || truncatedScan : nodes.length > symbolHits.length || truncatedScan;
+  const result = { matches, moreAvailable };
+  if (totalTextMatches !== void 0) result.totalTextMatches = totalTextMatches;
+  if (literalTruncated) {
+    result.hint = `showing ${textHits.length} of ${totalTextMatches}${truncatedScan ? "+" : ""} literal matches \u2014 raise limit or narrow the query to get them all`;
+  }
+  return result;
 }
-function stripNoise(body) {
-  return body.split("\n").filter((l) => !/^\s*(?:!\[[^\]]*\]\([^)]*\)\s*)+$/.test(l)).join("\n").trim();
+function fileSymbolNodes(graph, q) {
+  if (!/[/\\]/.test(q) && !/\.\w+$/.test(q)) return [];
+  const norm = q.replaceAll("\\", "/").replace(/^\.\//, "");
+  const inFile = graph.nodes.filter(
+    (n) => n.kind !== "file" && (n.file === norm || n.file.endsWith(`/${norm}`))
+  );
+  return [...inFile].sort((a, b) => b.importance - a.importance || a.qualifiedName.localeCompare(b.qualifiedName));
 }
-function tokenizeQuery(q) {
-  if (!q) return [];
-  return [...new Set(q.toLowerCase().split(/[^a-z0-9]+/).filter((w) => w.length > 1 && !STOPWORDS.has(w)))];
+function hasExactSymbolMatch(nodes, q) {
+  if (nodes.length === 0) return false;
+  if (/^(.*):(\d+)$/.test(q)) return true;
+  const lower = q.toLowerCase();
+  return nodes.some((n) => n.id === q || n.qualifiedName.toLowerCase() === lower || n.name.toLowerCase() === lower);
 }
-function symbolsFromApi(api) {
-  if (!api) return [];
-  const out = /* @__PURE__ */ new Set();
-  const re = /\b(?:function|class|interface|type|const|enum|namespace)\s+([A-Za-z_$][\w$]*)/g;
-  let m;
-  while (m = re.exec(api)) out.add(m[1]);
-  return [...out];
+function queryTokens(q) {
+  return [...new Set(q.toLowerCase().split(/[^a-z0-9]+/).filter((t) => t.length >= 2))];
 }
-function scoreSection(s, idx, queryTerms, symbols, w) {
-  const text = `${s.heading}
-${s.body}`.toLowerCase();
-  let score = 0;
-  if (USAGE_RE.test(s.heading)) score += w.headingUsage;
-  if (PREAMBLE_RE.test(s.heading)) score += w.headingPreamble;
-  const codeBlocks = Math.floor((s.body.match(/```/g) ?? []).length / 2);
-  if (codeBlocks > 0) score += w.hasCode + Math.min(codeBlocks, 5) * w.codeDensity;
-  for (const t of queryTerms) if (text.includes(t)) score += w.queryOverlap;
-  for (const sym of symbols) if (sym.length > 2 && text.includes(sym.toLowerCase())) score += w.symbolMatch;
-  score += idx * w.position;
-  const links = (s.body.match(/\]\(|https?:\/\//g) ?? []).length;
-  const lineCount = Math.max(1, s.body.split("\n").filter((l) => l.trim()).length);
-  if (links / lineCount > 0.5) score += w.linkDensity;
-  return score;
+function reconstructedIdentifierNodes(graph, q) {
+  const words = q.trim().split(/\s+/).filter(Boolean);
+  if (words.length < 2) return [];
+  const concat = findNodes(graph, words.join(""));
+  if (concat.length) return concat.filter((n) => n.kind !== "file");
+  const snake = findNodes(graph, words.join("_"));
+  return snake.filter((n) => n.kind !== "file");
 }
-var apiBlock = (api) => api ? `## API (types)
-
-\`\`\`ts
-${api}
-\`\`\`` : "";
-function selectForBudget(input) {
-  const w = input.weights ?? DEFAULT_SELECTION_WEIGHTS;
-  const api = apiBlock(input.apiSurface);
-  const readme = input.readme.trim();
-  if (!input.budget || !Number.isFinite(input.budget)) {
-    const full2 = [readme, api].filter(Boolean).join("\n\n");
-    return { text: full2, tokens: countTokens(full2), truncated: false };
-  }
-  const budget = input.budget;
-  const queryTerms = tokenizeQuery(input.query);
-  const symbols = symbolsFromApi(input.apiSurface);
-  const render = (s) => {
-    const body = stripNoise(s.body);
-    if (!body) return "";
-    return `${s.heading ? `## ${s.heading}
-` : ""}${body}`.trim();
-  };
-  const sections = splitSections(readme).filter((s) => !PREAMBLE_RE.test(s.heading));
-  const full = [api, ...sections.map(render)].filter(Boolean).join("\n\n").trim();
-  if (countTokens(full) <= budget) {
-    return { text: full, tokens: countTokens(full), truncated: false };
-  }
-  const units = [];
-  for (const s of sections) {
-    if (countTokens(s.body) > budget) {
-      chunkBody(s.body).forEach((p, i) => units.push({ heading: i === 0 ? s.heading : "", level: s.level, body: p }));
-    } else {
-      units.push(s);
-    }
-  }
-  const ranked = units.map((s, idx) => ({ s, idx, score: scoreSection(s, idx, queryTerms, symbols, w) })).sort((a, b) => b.score - a.score || a.idx - b.idx);
-  const out = [];
-  let used = 0;
-  const add3 = (chunk2) => {
-    const t = countTokens(chunk2);
-    if (used + t <= budget) {
-      out.push(chunk2);
-      used += t;
-      return true;
-    }
-    return false;
-  };
-  if (api && !add3(api) && used < budget) {
-    out.push(truncateToTokens(api, budget - used).text);
-    used = budget;
-  }
-  const picked = [];
-  for (const { s, idx } of ranked) {
-    const chunk2 = render(s);
-    if (!chunk2) continue;
-    if (used + countTokens(`
-${chunk2}`) <= budget) {
-      picked.push(idx);
-      used += countTokens(`
-${chunk2}`);
+function multiTokenNodes(graph, tokens) {
+  const scored = [];
+  for (const n of graph.nodes) {
+    if (n.kind === "file") continue;
+    const name = n.name.toLowerCase();
+    const qn = n.qualifiedName.toLowerCase();
+    let hits = 0;
+    let exact = false;
+    for (const t of tokens) {
+      if (name === t || qn === t) {
+        hits++;
+        exact = true;
+      } else if (qn.includes(t)) hits++;
     }
+    if (exact || hits >= 2) scored.push({ node: n, hits, exact });
   }
-  picked.sort((a, b) => a - b);
-  for (const idx of picked) out.push(render(units[idx]));
-  if (used < budget - 20) {
-    const next = ranked.find((r) => !picked.includes(r.idx) && render(r.s));
-    if (next) {
-      const head = truncateToTokens(render(next.s), budget - used).text;
-      if (head.trim()) out.push(head);
+  return scored.sort((a, b) => Number(b.exact) - Number(a.exact) || b.hits - a.hits || b.node.importance - a.node.importance || a.node.qualifiedName.localeCompare(b.node.qualifiedName)).map((e) => e.node);
+}
+async function scanFiles(root, needle, budget, seen, out, countAll) {
+  const listing = listCandidateFiles(root, needle);
+  const outcome = await scanCandidates(root, listing.files, needle, { collectAll: countAll, budget });
+  let overlap = 0;
+  for (const h of outcome.hits) {
+    if (seen.has(`${h.file}:${h.line}`)) {
+      overlap++;
+      continue;
     }
+    seen.add(`${h.file}:${h.line}`);
+    if (out.length < budget) out.push({ kind: "text", file: h.file, line: h.line, preview: h.preview });
   }
-  const text = out.join("\n\n").trim();
-  return { text, tokens: countTokens(text), truncated: true };
+  return { total: outcome.total - overlap, truncated: listing.truncated || outcome.truncated };
 }
-
-// src/engine/quality.ts
-function assessDocQuality(content, opts = {}) {
-  const minTokens = opts.minTokens ?? 60;
-  const lc = content.toLowerCase();
-  const reasons = [];
-  let score = 0;
-  const hasCode = /```/.test(content) || /(^|\n)( {4}|\t)\S/.test(content);
-  if (hasCode) score += 2;
-  else reasons.push("no code example");
-  const tokens = countTokens(content);
-  if (tokens >= minTokens) score += 1;
-  else reasons.push(`thin (${tokens} tokens)`);
-  const bareName = opts.name?.toLowerCase().replace(/^@[^/]+\//, "");
-  if (bareName && bareName.length > 1) {
-    if (lc.includes(bareName)) score += 1;
-    else reasons.push("library name absent");
+function listCandidateFiles(root, needle) {
+  return ripgrepCandidates(root, needle) ?? walkCandidatesCached(root);
+}
+var LISTING_TTL_MS = 2e3;
+var listingCache = /* @__PURE__ */ new Map();
+function listingTtlMs() {
+  const v = Number(process.env.VG_LISTING_TTL_MS);
+  return Number.isFinite(v) && v >= 0 ? v : LISTING_TTL_MS;
+}
+function walkCandidatesCached(root) {
+  const ttl = listingTtlMs();
+  if (ttl > 0) {
+    const hit = listingCache.get(root);
+    if (hit && Date.now() - hit.at < ttl) return hit.listing;
   }
-  const qt = tokenizeQuery(opts.query);
-  let onTopic = qt.length === 0;
-  if (qt.length) {
-    const hits = qt.filter((t) => lc.includes(t)).length;
-    if (hits) {
-      score += Math.min(hits, 2);
-      onTopic = true;
-    } else {
-      reasons.push("query terms absent");
+  const listing = walkCandidates(root);
+  if (ttl > 0) listingCache.set(root, { listing, at: Date.now() });
+  return listing;
+}
+function walkCandidates(root) {
+  const files = [];
+  let truncated = false;
+  const stack = [root];
+  while (stack.length) {
+    const dir = stack.pop();
+    let entries;
+    try {
+      entries = fs15.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      continue;
+    }
+    for (const e of entries) {
+      if (e.name.startsWith(".") || IGNORE_DIRS.has(e.name)) continue;
+      const abs = path17.join(dir, e.name);
+      if (e.isDirectory()) {
+        stack.push(abs);
+        continue;
+      }
+      if (hasBinaryExt(e.name)) continue;
+      if (files.length >= MAX_FILES_SCANNED) {
+        truncated = true;
+        continue;
+      }
+      files.push(toPosix3(path17.relative(root, abs)));
     }
   }
-  if (opts.symbols?.length) {
-    if (opts.symbols.some((s) => s.length > 2 && lc.includes(s.toLowerCase()))) score += 1;
-    else reasons.push("no API symbols present");
+  files.sort();
+  return { files, truncated };
+}
+var rgAvailable;
+function hasRipgrep() {
+  if (process.env.VG_DISABLE_RIPGREP) return false;
+  if (rgAvailable === void 0) {
+    try {
+      rgAvailable = spawnSync("rg", ["--version"], { stdio: "ignore", timeout: 3e3 }).status === 0;
+    } catch {
+      rgAvailable = false;
+    }
   }
-  const sufficient = hasCode && tokens >= minTokens && onTopic;
-  return { score, sufficient, reasons };
+  return rgAvailable;
 }
-
-// src/engine/hosted.ts
-function hostedBase(opts = {}) {
-  const explicit = opts.base || process.env.VIBGRATE_LIB_HOST;
-  if (explicit) return explicit.replace(/\/+$/, "");
-  let host;
-  try {
-    host = resolveIngestHost(opts.region, opts.ingest);
-  } catch {
-    host = "us.ingest.vibgrate.com";
-  }
-  return `https://${host}`;
+function ripgrepCandidates(root, needle) {
+  if (!hasRipgrep()) return null;
+  const globs = [...IGNORE_DIRS].flatMap((d) => ["--glob", `!**/${d}/**`, "--glob", `!${d}/**`]);
+  const res = spawnSync(
+    "rg",
+    ["--files-with-matches", "--fixed-strings", "--ignore-case", "--no-ignore", "--no-messages", ...globs, "--", needle, "."],
+    { cwd: root, encoding: "utf8", timeout: 15e3, maxBuffer: 32 * 1024 * 1024 }
+  );
+  if (res.error || res.status !== 0 && res.status !== 1 || res.signal) return null;
+  const files = parseRgFileList(res.stdout);
+  if (files.length > MAX_FILES_SCANNED) return { files: files.slice(0, MAX_FILES_SCANNED), truncated: true };
+  return { files, truncated: false };
 }
-async function fetchHostedDocs(req, opts = {}) {
-  const f = opts.fetchImpl ?? globalThis.fetch;
-  if (!f) return null;
-  const url = `${hostedBase(opts)}/v1/lib/docs`;
-  const ctrl = new AbortController();
-  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 4e3);
-  const headers = { "content-type": "application/json" };
-  if (opts.auth) {
-    headers["Authorization"] = `VibgrateDSN ${opts.auth.keyId}:${opts.auth.secret}`;
-    headers["X-Vibgrate-Timestamp"] = String(Date.now());
+function parseRgFileList(stdout, sep8 = path17.sep) {
+  const seen = /* @__PURE__ */ new Set();
+  for (const raw of stdout.split("\n")) {
+    if (!raw) continue;
+    const posix = sep8 === "\\" ? raw.replaceAll("\\", "/") : raw;
+    const rel2 = posix.startsWith("./") ? posix.slice(2) : posix;
+    if (!rel2) continue;
+    const segs = rel2.split("/");
+    if (segs.some((s) => s.startsWith(".") || IGNORE_DIRS.has(s))) continue;
+    if (hasBinaryExt(rel2)) continue;
+    seen.add(rel2);
   }
+  return [...seen].sort();
+}
+function readScanArtifact(root) {
   try {
-    const res = await f(url, {
-      method: "POST",
-      headers,
-      body: JSON.stringify({
-        name: req.name,
-        targetId: req.targetId,
-        query: req.query,
-        verbosity: req.verbosity,
-        max_tokens: req.maxTokens
-      }),
-      signal: ctrl.signal
-    });
-    if (!res.ok) return null;
-    const data = await res.json();
-    const content = typeof data.content === "string" ? data.content : typeof data.docs === "string" ? data.docs : "";
-    if (!content.trim()) return null;
-    return {
-      content,
-      version: typeof data.version === "string" ? data.version : null,
-      source: "hosted",
-      metadata: data.metadata ?? void 0
-    };
+    const file = path17.join(root, ".vibgrate", "scan_result.json");
+    return JSON.parse(fs15.readFileSync(file, "utf8"));
   } catch {
     return null;
-  } finally {
-    clearTimeout(timer);
   }
 }
-async function publishPrivateLibrary(req, opts = {}) {
-  const f = opts.fetchImpl ?? globalThis.fetch;
-  if (!f) return { ok: false, status: 0, message: "no network available" };
-  if (!opts.auth) return { ok: false, status: 401, message: "a DSN is required to publish a private library (run `vibgrate login` or set VIBGRATE_DSN)" };
-  const url = `${hostedBase(opts)}/v1/lib/private`;
-  const ctrl = new AbortController();
-  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
-  try {
-    const res = await f(url, {
-      method: "POST",
-      headers: {
-        "content-type": "application/json",
-        Authorization: `VibgrateDSN ${opts.auth.keyId}:${opts.auth.secret}`,
-        "X-Vibgrate-Timestamp": String(Date.now())
-      },
-      body: JSON.stringify({
-        name: req.name,
-        version: req.version,
-        readme: req.readme,
-        dts: req.dts,
-        compliance: req.compliance,
-        language: req.language,
-        sourceUrl: req.sourceUrl
-      }),
-      signal: ctrl.signal
-    });
-    const data = await res.json().catch(() => ({}));
-    if (!res.ok) return { ok: false, status: res.status, error: typeof data.error === "string" ? data.error : void 0, message: typeof data.message === "string" ? data.message : void 0 };
-    return {
-      ok: true,
-      targetId: String(data.targetId ?? ""),
-      ecosystem: String(data.ecosystem ?? ""),
-      entities: Number(data.entities) || 0,
-      indexedTokens: Number(data.indexedTokens) || 0
-    };
-  } catch (err) {
-    return { ok: false, status: 0, message: err instanceof Error ? err.message : "request failed" };
-  } finally {
-    clearTimeout(timer);
+function loadVulnerabilities(root) {
+  return readScanArtifact(root)?.extended?.vulnerabilities ?? null;
+}
+function resolvePackageTarget(root, pkg) {
+  const artifact = readScanArtifact(root);
+  for (const project of artifact?.projects ?? []) {
+    const dep = project.dependencies?.find((d) => d.package === pkg);
+    if (dep) {
+      return {
+        ecosystem: projectTypeToVulnEcosystem(project.type) ?? "unknown",
+        currentVersion: dep.resolvedVersion,
+        latestVersion: dep.latestStable,
+        majorsBehind: dep.majorsBehind
+      };
+    }
+  }
+  const rec = inventory(root).records.find((r) => r.name === pkg);
+  if (rec) {
+    const ecosystem = rec.ecosystem === "npm" ? "npm" : rec.ecosystem === "pypi" ? "pypi" : "unknown";
+    return { ecosystem, currentVersion: rec.installed ?? null, latestVersion: rec.latest ?? null, majorsBehind: null };
   }
+  return { ecosystem: "unknown", currentVersion: null, latestVersion: null, majorsBehind: null };
+}
+function openFixableAdvisories(root, pkg) {
+  const vulns = loadVulnerabilities(root);
+  const match = vulns?.packages.find((p) => p.package === pkg);
+  return (match?.advisories ?? []).filter((a) => a.fixedVersions.length).map((a) => a.id);
+}
+function filterBySeverity(result, minSeverity) {
+  if (!minSeverity || minSeverity === "unknown") return result;
+  const floor = severityRank(minSeverity);
+  const packages = result.packages.map((p) => ({ ...p, advisories: p.advisories.filter((a) => severityRank(a.severity) >= floor) })).filter((p) => p.advisories.length > 0);
+  const totalAdvisories = packages.reduce((n, p) => n + p.advisories.length, 0);
+  return { ...result, packages, totalAdvisories };
 }
 
-// src/engine/hosted-cache.ts
-var CACHE_VERSION = "vg-hosted-docs/1";
-var HOSTED_DOCS_TTL_MS = 24 * 60 * 60 * 1e3;
-var MAX_ENTRIES = 64;
-function cachePath(root) {
-  return path2.join(cacheDir(root), "hosted-docs.json");
+// src/mcp/attribution.ts
+var MCP_MAX_COMMITS = 300;
+var ECOSYSTEM_MAP = {
+  npm: "npm",
+  pypi: "pypi",
+  go: "go",
+  rust: "cargo",
+  ruby: "rubygems",
+  php: "composer",
+  dotnet: "nuget",
+  dart: "pub"
+  // swift (no advisory ecosystem) and java (no resolved lockfile) have no timeline.
+};
+function brief(commit) {
+  return { sha: commit.shortSha, author: commit.authorName, date: commit.date, subject: commit.subject };
 }
-function hostedDocsCacheKey(req, opts = {}) {
-  const material = JSON.stringify([
-    req.name ?? "",
-    req.targetId ?? "",
-    req.query ?? "",
-    req.verbosity ?? "",
-    req.maxTokens ?? 0,
-    hostedBase(opts),
-    opts.auth?.keyId ?? "anon"
-  ]);
-  return createHash("sha256").update(material).digest("hex");
+async function attributedInventory(root, opts = {}) {
+  const inv = inventory(root);
+  if (!opts.attribute) return { ...inv, attribution: "off" };
+  if (!await gitHistoryAvailable(root)) return { ...inv, attribution: "unavailable" };
+  const timelines = await buildVersionTimelines(root, { maxCommits: MCP_MAX_COMMITS });
+  if (!timelines) return { ...inv, attribution: "unavailable" };
+  const records = inv.records.map((r) => {
+    const ecosystem = ECOSYSTEM_MAP[r.ecosystem];
+    if (!ecosystem) return r;
+    const pt = findPackageTimeline(timelines, ecosystem, r.name);
+    if (!pt || !pt.changes.length) return r;
+    return {
+      ...r,
+      addedBy: brief(pt.changes[0].commit),
+      currentVersionBy: brief(pt.changes[pt.changes.length - 1].commit)
+    };
+  });
+  return { ...inv, records, attribution: "git" };
 }
-function loadFile(root) {
-  try {
-    const parsed = JSON.parse(fs18.readFileSync(cachePath(root), "utf8"));
-    if (parsed && parsed.version === CACHE_VERSION && parsed.entries && typeof parsed.entries === "object") return parsed;
-  } catch {
-  }
-  return { version: CACHE_VERSION, entries: {} };
+function countTokens(text) {
+  return encode(text).length;
 }
-function saveFile(root, file) {
-  try {
-    const keys = Object.keys(file.entries);
-    if (keys.length > MAX_ENTRIES) {
-      for (const k of keys.sort((a, b) => file.entries[a].at - file.entries[b].at).slice(0, keys.length - MAX_ENTRIES)) {
-        delete file.entries[k];
-      }
-    }
-    fs18.mkdirSync(cacheDir(root), { recursive: true });
-    fs18.writeFileSync(cachePath(root), JSON.stringify(file));
-  } catch {
-  }
+function truncateToTokens(text, budget, marker = "\n\u2026(truncated)") {
+  if (!Number.isFinite(budget) || budget <= 0) return { text, truncated: false, tokens: countTokens(text) };
+  const tokens = encode(text);
+  if (tokens.length <= budget) return { text, truncated: false, tokens: tokens.length };
+  const markerTokens = encode(marker).length;
+  const keep = Math.max(0, budget - markerTokens);
+  let slice = decode(tokens.slice(0, keep));
+  const lastNl = slice.lastIndexOf("\n");
+  if (lastNl > 0) slice = slice.slice(0, lastNl);
+  const out = slice + marker;
+  return { text: out, truncated: true, tokens: countTokens(out) };
 }
-async function fetchHostedDocsCached(root, req, opts = {}) {
-  const now = opts.now ?? Date.now;
-  const ttl = opts.ttlMs ?? HOSTED_DOCS_TTL_MS;
-  const key = hostedDocsCacheKey(req, opts);
-  const file = loadFile(root);
-  if (!opts.bypass) {
-    const hit = file.entries[key];
-    if (hit && now() - hit.at < ttl && hit.result?.content) {
-      return { ...hit.result, metadata: { ...hit.result.metadata ?? {}, cached: true } };
+
+// src/engine/selection-weights.ts
+var DEFAULT_SELECTION_WEIGHTS = {
+  headingUsage: 4,
+  headingPreamble: -6,
+  hasCode: 3,
+  codeDensity: 0.5,
+  queryOverlap: 5,
+  symbolMatch: 2,
+  position: -0.1,
+  linkDensity: -3
+};
+
+// src/engine/select.ts
+var STOPWORDS = /* @__PURE__ */ new Set(["the", "a", "an", "to", "of", "in", "for", "and", "or", "is", "how", "do", "i", "use", "using", "with", "on", "my"]);
+var USAGE_RE = /\b(usage|example|examples|quick ?start|getting started|api|guide|how to|reference|tutorial|basic)\b/i;
+var PREAMBLE_RE = /\b(install|installation|license|licence|contributing|contributors?|sponsors?|table of contents|toc|changelog|funding|code of conduct|security|acknowledge)\b/i;
+function splitSections(md) {
+  const out = [];
+  let cur = { heading: "", level: 0};
+  let buf = [];
+  const flush = () => {
+    const body = buf.join("\n").trim();
+    if (cur.heading || body) out.push({ heading: cur.heading, level: cur.level, body });
+    buf = [];
+  };
+  for (const line of md.split("\n")) {
+    const h = /^(#{1,6})\s+(.*\S)\s*$/.exec(line);
+    if (h) {
+      flush();
+      cur = { heading: h[2].trim(), level: h[1].length, body: "" };
+    } else {
+      buf.push(line);
     }
   }
-  const result = await fetchHostedDocs(req, opts);
-  if (result) {
-    file.entries[key] = { at: now(), result };
-    saveFile(root, file);
-  }
-  return result;
-}
-
-// src/mcp/response.ts
-var MAX_RESULT_TOKENS = 25e3;
-function renderToolResult(result, maxTokens = MAX_RESULT_TOKENS) {
-  return toolResult(clampToBudget(compactResult(result), maxTokens));
+  flush();
+  return out;
 }
-function toolResult(result) {
-  return {
-    content: [{ type: "text", text: JSON.stringify(result) }],
-    structuredContent: asStructured(result)
+function chunkBody(body) {
+  const chunks = [];
+  let cur = [];
+  let inFence = false;
+  const flush = () => {
+    const c = cur.join("\n").trim();
+    if (c) chunks.push(c);
+    cur = [];
   };
-}
-function compactResult(value) {
-  return prune(value);
-}
-function prune(v) {
-  if (Array.isArray(v)) return v.map(prune);
-  if (v && typeof v === "object") {
-    const out = {};
-    for (const [k, raw] of Object.entries(v)) {
-      const pv = prune(raw);
-      if (!isEmpty(pv)) out[k] = pv;
+  for (const line of body.split("\n")) {
+    if (/^\s*```/.test(line)) inFence = !inFence;
+    if (!inFence && line.trim() === "") {
+      flush();
+      continue;
     }
-    return out;
+    cur.push(line);
   }
-  return v;
+  flush();
+  return chunks;
 }
-function isEmpty(v) {
-  if (v === null || v === void 0 || v === "") return true;
-  if (Array.isArray(v)) return v.length === 0;
-  if (typeof v === "object") return Object.keys(v).length === 0;
-  return false;
+function stripNoise(body) {
+  return body.split("\n").filter((l) => !/^\s*(?:!\[[^\]]*\]\([^)]*\)\s*)+$/.test(l)).join("\n").trim();
 }
-function clampToBudget(value, maxTokens = MAX_RESULT_TOKENS) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) return value;
-  if (tokensOf(value) <= maxTokens) return value;
-  const obj2 = { ...value };
-  const truncated = {};
-  for (let guard = 0; guard < 64 && tokensOf(obj2) > maxTokens; guard++) {
-    const arrays = Object.entries(obj2).filter(
-      (e) => Array.isArray(e[1]) && e[1].length > 0
-    );
-    if (arrays.length === 0) break;
-    arrays.sort((a, b) => tokensOf(b[1]) - tokensOf(a[1]));
-    const [field, arr] = arrays[0];
-    const total = truncated[field]?.total ?? arr.length;
-    const shown = Math.max(1, Math.floor(arr.length / 2));
-    obj2[field] = arr.slice(0, shown);
-    truncated[field] = { shown, total };
-  }
-  if (Object.keys(truncated).length) obj2._truncated = truncated;
-  return obj2;
+function tokenizeQuery(q) {
+  if (!q) return [];
+  return [...new Set(q.toLowerCase().split(/[^a-z0-9]+/).filter((w) => w.length > 1 && !STOPWORDS.has(w)))];
 }
-function tokensOf(v) {
-  return countTokens(JSON.stringify(v));
+function symbolsFromApi(api) {
+  if (!api) return [];
+  const out = /* @__PURE__ */ new Set();
+  const re = /\b(?:function|class|interface|type|const|enum|namespace)\s+([A-Za-z_$][\w$]*)/g;
+  let m;
+  while (m = re.exec(api)) out.add(m[1]);
+  return [...out];
 }
-function asStructured(result) {
-  if (result && typeof result === "object" && !Array.isArray(result)) {
-    return result;
-  }
-  return { result };
+function scoreSection(s, idx, queryTerms, symbols, w) {
+  const text = `${s.heading}
+${s.body}`.toLowerCase();
+  let score = 0;
+  if (USAGE_RE.test(s.heading)) score += w.headingUsage;
+  if (PREAMBLE_RE.test(s.heading)) score += w.headingPreamble;
+  const codeBlocks = Math.floor((s.body.match(/```/g) ?? []).length / 2);
+  if (codeBlocks > 0) score += w.hasCode + Math.min(codeBlocks, 5) * w.codeDensity;
+  for (const t of queryTerms) if (text.includes(t)) score += w.queryOverlap;
+  for (const sym of symbols) if (sym.length > 2 && text.includes(sym.toLowerCase())) score += w.symbolMatch;
+  score += idx * w.position;
+  const links = (s.body.match(/\]\(|https?:\/\//g) ?? []).length;
+  const lineCount = Math.max(1, s.body.split("\n").filter((l) => l.trim()).length);
+  if (links / lineCount > 0.5) score += w.linkDensity;
+  return score;
 }
-function boundList(items, max) {
-  if (!Number.isFinite(max) || max < 0 || items.length <= max) {
-    return { items, total: items.length };
+var apiBlock = (api) => api ? `## API (types)
+
+\`\`\`ts
+${api}
+\`\`\`` : "";
+function selectForBudget(input) {
+  const w = input.weights ?? DEFAULT_SELECTION_WEIGHTS;
+  const api = apiBlock(input.apiSurface);
+  const readme = input.readme.trim();
+  if (!input.budget || !Number.isFinite(input.budget)) {
+    const full2 = [readme, api].filter(Boolean).join("\n\n");
+    return { text: full2, tokens: countTokens(full2), truncated: false };
   }
-  return { items: items.slice(0, max), total: items.length };
-}
-var NODE_EDGE_CAP = 50;
-var MAX_FILE_BYTES = 1e6;
-var PREVIEW_CHARS = 120;
-var NUL = "\0";
-var PARALLEL_MIN_BYTES = 64e6;
-var PARALLEL_MIN_FILES = 2e3;
-var ROW_CAP = 1e4;
-async function scanCandidates(root, files, needle, opts) {
-  const needleLower = needle.toLowerCase();
-  if (!needleLower || files.length === 0) return { hits: [], total: 0, truncated: false };
-  if (files.length < PARALLEL_MIN_FILES && !process.env.VG_PARALLEL_MIN_BYTES) {
-    return opts.collectAll ? scanInline(root, files, needleLower, ROW_CAP, false, void 0) : scanInline(root, files, needleLower, opts.budget, true, void 0);
+  const budget = input.budget;
+  const queryTerms = tokenizeQuery(input.query);
+  const symbols = symbolsFromApi(input.apiSurface);
+  const render = (s) => {
+    const body = stripNoise(s.body);
+    if (!body) return "";
+    return `${s.heading ? `## ${s.heading}
+` : ""}${body}`.trim();
+  };
+  const sections = splitSections(readme).filter((s) => !PREAMBLE_RE.test(s.heading));
+  const full = [api, ...sections.map(render)].filter(Boolean).join("\n\n").trim();
+  if (countTokens(full) <= budget) {
+    return { text: full, tokens: countTokens(full), truncated: false };
   }
-  const { over, sizes } = measure(root, files);
-  if (!over) {
-    return opts.collectAll ? scanInline(root, files, needleLower, ROW_CAP, false, sizes) : scanInline(root, files, needleLower, opts.budget, true, sizes);
+  const units = [];
+  for (const s of sections) {
+    if (countTokens(s.body) > budget) {
+      chunkBody(s.body).forEach((p, i) => units.push({ heading: i === 0 ? s.heading : "", level: s.level, body: p }));
+    } else {
+      units.push(s);
+    }
   }
-  const out = await scanParallel(root, files, needleLower);
-  if (!opts.collectAll && out.hits.length > opts.budget) {
-    out.hits.length = opts.budget;
-    out.truncated = true;
+  const ranked = units.map((s, idx) => ({ s, idx, score: scoreSection(s, idx, queryTerms, symbols, w) })).sort((a, b) => b.score - a.score || a.idx - b.idx);
+  const out = [];
+  let used = 0;
+  const add3 = (chunk2) => {
+    const t = countTokens(chunk2);
+    if (used + t <= budget) {
+      out.push(chunk2);
+      used += t;
+      return true;
+    }
+    return false;
+  };
+  if (api && !add3(api) && used < budget) {
+    out.push(truncateToTokens(api, budget - used).text);
+    used = budget;
   }
-  return out;
-}
-function parallelMinBytes() {
-  const v = Number(process.env.VG_PARALLEL_MIN_BYTES);
-  return Number.isFinite(v) && v >= 0 ? v : PARALLEL_MIN_BYTES;
-}
-function measure(root, files) {
-  const threshold = parallelMinBytes();
-  const sizes = /* @__PURE__ */ new Map();
-  let total = 0;
-  for (const rel2 of files) {
-    let size;
-    try {
-      size = fs18.statSync(path2.join(root, rel2)).size;
-    } catch {
-      continue;
+  const picked = [];
+  for (const { s, idx } of ranked) {
+    const chunk2 = render(s);
+    if (!chunk2) continue;
+    if (used + countTokens(`
+${chunk2}`) <= budget) {
+      picked.push(idx);
+      used += countTokens(`
+${chunk2}`);
     }
-    sizes.set(rel2, size);
-    if (size <= MAX_FILE_BYTES) total += size;
-    if (total >= threshold) return { over: true, sizes };
   }
-  return { over: false, sizes };
+  picked.sort((a, b) => a - b);
+  for (const idx of picked) out.push(render(units[idx]));
+  if (used < budget - 20) {
+    const next = ranked.find((r) => !picked.includes(r.idx) && render(r.s));
+    if (next) {
+      const head = truncateToTokens(render(next.s), budget - used).text;
+      if (head.trim()) out.push(head);
+    }
+  }
+  const text = out.join("\n\n").trim();
+  return { text, tokens: countTokens(text), truncated: true };
 }
-function matchLines(text, needleLower) {
-  const low = text.toLowerCase();
-  if (!low.includes(needleLower)) return [];
-  const lowLines = low.split("\n");
-  const rawLines = text.split("\n");
-  const hits = [];
-  for (let i = 0; i < lowLines.length; i++) {
-    if (lowLines[i].includes(needleLower)) hits.push({ line: i + 1, preview: rawLines[i].trim().slice(0, PREVIEW_CHARS) });
+
+// src/engine/quality.ts
+function assessDocQuality(content, opts = {}) {
+  const minTokens = opts.minTokens ?? 60;
+  const lc = content.toLowerCase();
+  const reasons = [];
+  let score = 0;
+  const hasCode = /```/.test(content) || /(^|\n)( {4}|\t)\S/.test(content);
+  if (hasCode) score += 2;
+  else reasons.push("no code example");
+  const tokens = countTokens(content);
+  if (tokens >= minTokens) score += 1;
+  else reasons.push(`thin (${tokens} tokens)`);
+  const bareName = opts.name?.toLowerCase().replace(/^@[^/]+\//, "");
+  if (bareName && bareName.length > 1) {
+    if (lc.includes(bareName)) score += 1;
+    else reasons.push("library name absent");
+  }
+  const qt = tokenizeQuery(opts.query);
+  let onTopic = qt.length === 0;
+  if (qt.length) {
+    const hits = qt.filter((t) => lc.includes(t)).length;
+    if (hits) {
+      score += Math.min(hits, 2);
+      onTopic = true;
+    } else {
+      reasons.push("query terms absent");
+    }
   }
-  return hits;
+  if (opts.symbols?.length) {
+    if (opts.symbols.some((s) => s.length > 2 && lc.includes(s.toLowerCase()))) score += 1;
+    else reasons.push("no API symbols present");
+  }
+  const sufficient = hasCode && tokens >= minTokens && onTopic;
+  return { score, sufficient, reasons };
 }
-function readCandidate(abs, knownSize) {
+
+// src/engine/hosted.ts
+function hostedBase(opts = {}) {
+  const explicit = opts.base || process.env.VIBGRATE_LIB_HOST;
+  if (explicit) return explicit.replace(/\/+$/, "");
+  let host;
   try {
-    const size = knownSize ?? fs18.statSync(abs).size;
-    if (size > MAX_FILE_BYTES) return null;
-    const text = fs18.readFileSync(abs, "utf8");
-    return text.includes(NUL) ? null : text;
+    host = resolveIngestHost(opts.region, opts.ingest);
   } catch {
-    return null;
+    host = "us.ingest.vibgrate.com";
   }
+  return `https://${host}`;
 }
-function scanInline(root, files, needleLower, cap, stopAtCap, sizes) {
-  const hits = [];
-  let total = 0;
-  let truncated = false;
-  for (const rel2 of files) {
-    const text = readCandidate(path2.join(root, rel2), sizes?.get(rel2));
-    if (text === null) continue;
-    for (const h of matchLines(text, needleLower)) {
-      total++;
-      if (hits.length < cap) hits.push({ file: rel2, line: h.line, preview: h.preview });
-      else {
-        truncated = true;
-        if (stopAtCap) return { hits, total, truncated };
-      }
-    }
+async function fetchHostedDocs(req, opts = {}) {
+  const f = opts.fetchImpl ?? globalThis.fetch;
+  if (!f) return null;
+  const url = `${hostedBase(opts)}/v1/lib/docs`;
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 4e3);
+  const headers = { "content-type": "application/json" };
+  if (opts.auth) {
+    headers["Authorization"] = `VibgrateDSN ${opts.auth.keyId}:${opts.auth.secret}`;
+    headers["X-Vibgrate-Timestamp"] = String(Date.now());
   }
-  return { hits, total, truncated };
-}
-async function scanParallel(root, files, needleLower) {
-  const n = Math.min(files.length, Math.max(2, Math.min(8, os.cpus().length - 1)));
-  const shards = Array.from({ length: n }, () => []);
-  files.forEach((f, i) => shards[i % n].push(f));
-  let results;
   try {
-    results = await Promise.all(shards.map((shard) => runWorker(root, shard, needleLower)));
+    const res = await f(url, {
+      method: "POST",
+      headers,
+      body: JSON.stringify({
+        name: req.name,
+        targetId: req.targetId,
+        query: req.query,
+        verbosity: req.verbosity,
+        max_tokens: req.maxTokens
+      }),
+      signal: ctrl.signal
+    });
+    if (!res.ok) return null;
+    const data = await res.json();
+    const content = typeof data.content === "string" ? data.content : typeof data.docs === "string" ? data.docs : "";
+    if (!content.trim()) return null;
+    return {
+      content,
+      version: typeof data.version === "string" ? data.version : null,
+      source: "hosted",
+      metadata: data.metadata ?? void 0
+    };
   } catch {
-    return scanInline(root, files, needleLower, ROW_CAP, false, void 0);
-  }
-  const hits = [];
-  let total = 0;
-  let truncated = false;
-  for (const r of results) {
-    total += r.total;
-    truncated = truncated || r.truncated;
-    for (const h of r.hits) hits.push(h);
-  }
-  hits.sort((a, b) => a.file < b.file ? -1 : a.file > b.file ? 1 : a.line - b.line);
-  if (hits.length > ROW_CAP) {
-    hits.length = ROW_CAP;
-    truncated = true;
+    return null;
+  } finally {
+    clearTimeout(timer);
   }
-  return { hits, total, truncated };
-}
-var WORKER_SOURCE = [
-  "const { parentPort, workerData } = require('worker_threads');",
-  "const fs = require('fs');",
-  "const path = require('path');",
-  `const MAX = ${MAX_FILE_BYTES};`,
-  `const PREVIEW = ${PREVIEW_CHARS};`,
-  `const CAP = ${ROW_CAP};`,
-  "const NUL = String.fromCharCode(0);",
-  "const NL = String.fromCharCode(10);",
-  "const { root, files, needleLower } = workerData;",
-  "const hits = []; let total = 0, truncated = false;",
-  "for (const rel of files) {",
-  "  const abs = path.join(root, rel);",
-  "  let text;",
-  '  try { if (fs.statSync(abs).size > MAX) continue; text = fs.readFileSync(abs, "utf8"); } catch { continue; }',
-  "  if (text.includes(NUL)) continue;",
-  "  const low = text.toLowerCase();",
-  "  if (!low.includes(needleLower)) continue;",
-  "  const lowLines = low.split(NL); const rawLines = text.split(NL);",
-  "  for (let i = 0; i < lowLines.length; i++) {",
-  "    if (!lowLines[i].includes(needleLower)) continue;",
-  "    total++;",
-  "    if (hits.length < CAP) hits.push({ file: rel, line: i + 1, preview: rawLines[i].trim().slice(0, PREVIEW) });",
-  "    else truncated = true;",
-  "  }",
-  "}",
-  "parentPort.postMessage({ hits, total, truncated });"
-].join("\n");
-function runWorker(root, files, needleLower) {
-  return new Promise((resolve11, reject) => {
-    const w = new Worker(WORKER_SOURCE, { eval: true, workerData: { root, files, needleLower } });
-    let settled = false;
-    w.once("message", (m) => {
-      settled = true;
-      resolve11(m);
-    });
-    w.once("error", reject);
-    w.once("exit", (code) => {
-      if (!settled && code !== 0) reject(new Error(`literal-scan worker exited with code ${code}`));
-    });
-  });
-}
-
-// src/engine/search.ts
-var IGNORE_DIRS = /* @__PURE__ */ new Set([
-  ".git",
-  ".vibgrate",
-  "node_modules",
-  "dist",
-  "build",
-  "out",
-  "target",
-  "vendor",
-  "__pycache__",
-  // .NET intermediate output and coverage reports: purely generated trees that a
-  // C#/coverage-heavy repo pays for on every literal sweep. `bin` is deliberately
-  // NOT here — plenty of repos keep real scripts in bin/ (rails, node CLIs), and
-  // completeness beats speed; the binary-extension skip below keeps a .NET bin/
-  // cheap anyway.
-  "obj",
-  "coverage"
-]);
-var MAX_FILES_SCANNED = 2e4;
-var BINARY_EXTS = /* @__PURE__ */ new Set([
-  ".dll",
-  ".pdb",
-  ".exe",
-  ".so",
-  ".dylib",
-  ".a",
-  ".lib",
-  ".o",
-  ".class",
-  ".jar",
-  ".wasm",
-  ".node",
-  ".png",
-  ".jpg",
-  ".jpeg",
-  ".gif",
-  ".webp",
-  ".ico",
-  ".icns",
-  ".bmp",
-  ".zip",
-  ".gz",
-  ".tgz",
-  ".bz2",
-  ".xz",
-  ".7z",
-  ".rar",
-  ".woff",
-  ".woff2",
-  ".ttf",
-  ".otf",
-  ".eot",
-  ".mp3",
-  ".mp4",
-  ".mov",
-  ".avi",
-  ".pdf"
-]);
-function hasBinaryExt(rel2) {
-  return BINARY_EXTS.has(path2.extname(rel2).toLowerCase());
 }
-function toPosix2(rel2) {
-  return path2.sep === "\\" ? rel2.replaceAll("\\", "/") : rel2;
-}
-async function searchSymbols(graph, root, query, limit) {
-  let q = query.trim();
-  if (!q) return { matches: [], moreAvailable: false, hint: "query is required" };
-  const quoted = /^(["'`])(.+)\1$/.exec(q);
-  if (quoted && quoted[2].trim()) q = quoted[2].trim();
-  const isPhrase = Boolean(quoted) || /\s/.test(q) || /[/\\]/.test(q) && !q.includes(":") && !/[*?]/.test(q);
-  let nodes = findNodes(graph, q).filter((n) => n.kind !== "file");
-  if (nodes.length === 0) {
-    nodes = fileSymbolNodes(graph, q);
-  }
-  if (nodes.length === 0 && isPhrase) {
-    nodes = reconstructedIdentifierNodes(graph, q);
-  }
-  if (nodes.length === 0) {
-    const tokens = queryTokens(q);
-    if (tokens.length >= 2) nodes = multiTokenNodes(graph, tokens);
-  }
-  const symbolCap = isPhrase ? Math.max(1, Math.floor(limit / 3)) : limit;
-  const symbolHits = nodes.slice(0, symbolCap).map((n, i) => ({
-    kind: n.kind,
-    name: n.qualifiedName,
-    file: n.file,
-    line: n.span.start,
-    score: Math.round((1 - i / Math.max(nodes.length, 1)) * 100) / 100
-  }));
-  const spare = limit - symbolHits.length;
-  const textHits = [];
-  let truncatedScan = false;
-  let totalTextMatches;
-  const skipScan = !isPhrase && hasExactSymbolMatch(nodes, q);
-  if (spare > 0 && !skipScan) {
-    const seen = new Set(symbolHits.map((h) => `${h.file}:${h.line}`));
-    const scan = await scanFiles(root, q, spare, seen, textHits, isPhrase);
-    truncatedScan = scan.truncated;
-    if (isPhrase) totalTextMatches = scan.total;
-  }
-  const matches = [...symbolHits, ...textHits];
-  if (matches.length === 0) {
+async function publishPrivateLibrary(req, opts = {}) {
+  const f = opts.fetchImpl ?? globalThis.fetch;
+  if (!f) return { ok: false, status: 0, message: "no network available" };
+  if (!opts.auth) return { ok: false, status: 401, message: "a DSN is required to publish a private library (run `vibgrate login` or set VIBGRATE_DSN)" };
+  const url = `${hostedBase(opts)}/v1/lib/private`;
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), opts.timeoutMs ?? 15e3);
+  try {
+    const res = await f(url, {
+      method: "POST",
+      headers: {
+        "content-type": "application/json",
+        Authorization: `VibgrateDSN ${opts.auth.keyId}:${opts.auth.secret}`,
+        "X-Vibgrate-Timestamp": String(Date.now())
+      },
+      body: JSON.stringify({
+        name: req.name,
+        version: req.version,
+        readme: req.readme,
+        dts: req.dts,
+        compliance: req.compliance,
+        language: req.language,
+        sourceUrl: req.sourceUrl
+      }),
+      signal: ctrl.signal
+    });
+    const data = await res.json().catch(() => ({}));
+    if (!res.ok) return { ok: false, status: res.status, error: typeof data.error === "string" ? data.error : void 0, message: typeof data.message === "string" ? data.message : void 0 };
     return {
-      matches,
-      moreAvailable: false,
-      hint: "no symbol or text match \u2014 for meaning-level questions (symptoms, relationships, what-breaks-if) use query_graph"
+      ok: true,
+      targetId: String(data.targetId ?? ""),
+      ecosystem: String(data.ecosystem ?? ""),
+      entities: Number(data.entities) || 0,
+      indexedTokens: Number(data.indexedTokens) || 0
     };
+  } catch (err) {
+    return { ok: false, status: 0, message: err instanceof Error ? err.message : "request failed" };
+  } finally {
+    clearTimeout(timer);
   }
-  const literalTruncated = totalTextMatches !== void 0 && totalTextMatches > textHits.length;
-  const moreAvailable = isPhrase ? literalTruncated || truncatedScan : nodes.length > symbolHits.length || truncatedScan;
-  const result = { matches, moreAvailable };
-  if (totalTextMatches !== void 0) result.totalTextMatches = totalTextMatches;
-  if (literalTruncated) {
-    result.hint = `showing ${textHits.length} of ${totalTextMatches}${truncatedScan ? "+" : ""} literal matches \u2014 raise limit or narrow the query to get them all`;
-  }
-  return result;
-}
-function fileSymbolNodes(graph, q) {
-  if (!/[/\\]/.test(q) && !/\.\w+$/.test(q)) return [];
-  const norm = q.replaceAll("\\", "/").replace(/^\.\//, "");
-  const inFile = graph.nodes.filter(
-    (n) => n.kind !== "file" && (n.file === norm || n.file.endsWith(`/${norm}`))
-  );
-  return [...inFile].sort((a, b) => b.importance - a.importance || a.qualifiedName.localeCompare(b.qualifiedName));
 }
-function hasExactSymbolMatch(nodes, q) {
-  if (nodes.length === 0) return false;
-  if (/^(.*):(\d+)$/.test(q)) return true;
-  const lower = q.toLowerCase();
-  return nodes.some((n) => n.id === q || n.qualifiedName.toLowerCase() === lower || n.name.toLowerCase() === lower);
+
+// src/engine/hosted-cache.ts
+var CACHE_VERSION = "vg-hosted-docs/1";
+var HOSTED_DOCS_TTL_MS = 24 * 60 * 60 * 1e3;
+var MAX_ENTRIES = 64;
+function cachePath(root) {
+  return path17.join(cacheDir(root), "hosted-docs.json");
 }
-function queryTokens(q) {
-  return [...new Set(q.toLowerCase().split(/[^a-z0-9]+/).filter((t) => t.length >= 2))];
+function hostedDocsCacheKey(req, opts = {}) {
+  const material = JSON.stringify([
+    req.name ?? "",
+    req.targetId ?? "",
+    req.query ?? "",
+    req.verbosity ?? "",
+    req.maxTokens ?? 0,
+    hostedBase(opts),
+    opts.auth?.keyId ?? "anon"
+  ]);
+  return createHash("sha256").update(material).digest("hex");
 }
-function reconstructedIdentifierNodes(graph, q) {
-  const words = q.trim().split(/\s+/).filter(Boolean);
-  if (words.length < 2) return [];
-  const concat = findNodes(graph, words.join(""));
-  if (concat.length) return concat.filter((n) => n.kind !== "file");
-  const snake = findNodes(graph, words.join("_"));
-  return snake.filter((n) => n.kind !== "file");
+function loadFile(root) {
+  try {
+    const parsed = JSON.parse(fs15.readFileSync(cachePath(root), "utf8"));
+    if (parsed && parsed.version === CACHE_VERSION && parsed.entries && typeof parsed.entries === "object") return parsed;
+  } catch {
+  }
+  return { version: CACHE_VERSION, entries: {} };
 }
-function multiTokenNodes(graph, tokens) {
-  const scored = [];
-  for (const n of graph.nodes) {
-    if (n.kind === "file") continue;
-    const name = n.name.toLowerCase();
-    const qn = n.qualifiedName.toLowerCase();
-    let hits = 0;
-    let exact = false;
-    for (const t of tokens) {
-      if (name === t || qn === t) {
-        hits++;
-        exact = true;
-      } else if (qn.includes(t)) hits++;
+function saveFile(root, file) {
+  try {
+    const keys = Object.keys(file.entries);
+    if (keys.length > MAX_ENTRIES) {
+      for (const k of keys.sort((a, b) => file.entries[a].at - file.entries[b].at).slice(0, keys.length - MAX_ENTRIES)) {
+        delete file.entries[k];
+      }
     }
-    if (exact || hits >= 2) scored.push({ node: n, hits, exact });
+    fs15.mkdirSync(cacheDir(root), { recursive: true });
+    fs15.writeFileSync(cachePath(root), JSON.stringify(file));
+  } catch {
   }
-  return scored.sort((a, b) => Number(b.exact) - Number(a.exact) || b.hits - a.hits || b.node.importance - a.node.importance || a.node.qualifiedName.localeCompare(b.node.qualifiedName)).map((e) => e.node);
 }
-async function scanFiles(root, needle, budget, seen, out, countAll) {
-  const listing = listCandidateFiles(root, needle);
-  const outcome = await scanCandidates(root, listing.files, needle, { collectAll: countAll, budget });
-  let overlap = 0;
-  for (const h of outcome.hits) {
-    if (seen.has(`${h.file}:${h.line}`)) {
-      overlap++;
-      continue;
+async function fetchHostedDocsCached(root, req, opts = {}) {
+  const now = opts.now ?? Date.now;
+  const ttl = opts.ttlMs ?? HOSTED_DOCS_TTL_MS;
+  const key = hostedDocsCacheKey(req, opts);
+  const file = loadFile(root);
+  if (!opts.bypass) {
+    const hit = file.entries[key];
+    if (hit && now() - hit.at < ttl && hit.result?.content) {
+      return { ...hit.result, metadata: { ...hit.result.metadata ?? {}, cached: true } };
     }
-    seen.add(`${h.file}:${h.line}`);
-    if (out.length < budget) out.push({ kind: "text", file: h.file, line: h.line, preview: h.preview });
   }
-  return { total: outcome.total - overlap, truncated: listing.truncated || outcome.truncated };
+  const result = await fetchHostedDocs(req, opts);
+  if (result) {
+    file.entries[key] = { at: now(), result };
+    saveFile(root, file);
+  }
+  return result;
 }
-function listCandidateFiles(root, needle) {
-  return ripgrepCandidates(root, needle) ?? walkCandidatesCached(root);
+
+// src/mcp/response.ts
+var MAX_RESULT_TOKENS = 25e3;
+function renderToolResult(result, maxTokens = MAX_RESULT_TOKENS) {
+  return toolResult(clampToBudget(compactResult(result), maxTokens));
 }
-var LISTING_TTL_MS = 2e3;
-var listingCache = /* @__PURE__ */ new Map();
-function listingTtlMs() {
-  const v = Number(process.env.VG_LISTING_TTL_MS);
-  return Number.isFinite(v) && v >= 0 ? v : LISTING_TTL_MS;
+function toolResult(result) {
+  return {
+    content: [{ type: "text", text: JSON.stringify(result) }],
+    structuredContent: asStructured(result)
+  };
 }
-function walkCandidatesCached(root) {
-  const ttl = listingTtlMs();
-  if (ttl > 0) {
-    const hit = listingCache.get(root);
-    if (hit && Date.now() - hit.at < ttl) return hit.listing;
-  }
-  const listing = walkCandidates(root);
-  if (ttl > 0) listingCache.set(root, { listing, at: Date.now() });
-  return listing;
+function compactResult(value) {
+  return prune(value);
 }
-function walkCandidates(root) {
-  const files = [];
-  let truncated = false;
-  const stack = [root];
-  while (stack.length) {
-    const dir = stack.pop();
-    let entries;
-    try {
-      entries = fs18.readdirSync(dir, { withFileTypes: true });
-    } catch {
-      continue;
-    }
-    for (const e of entries) {
-      if (e.name.startsWith(".") || IGNORE_DIRS.has(e.name)) continue;
-      const abs = path2.join(dir, e.name);
-      if (e.isDirectory()) {
-        stack.push(abs);
-        continue;
-      }
-      if (hasBinaryExt(e.name)) continue;
-      if (files.length >= MAX_FILES_SCANNED) {
-        truncated = true;
-        continue;
-      }
-      files.push(toPosix2(path2.relative(root, abs)));
+function prune(v) {
+  if (Array.isArray(v)) return v.map(prune);
+  if (v && typeof v === "object") {
+    const out = {};
+    for (const [k, raw] of Object.entries(v)) {
+      const pv = prune(raw);
+      if (!isEmpty(pv)) out[k] = pv;
     }
+    return out;
   }
-  files.sort();
-  return { files, truncated };
+  return v;
 }
-var rgAvailable;
-function hasRipgrep() {
-  if (process.env.VG_DISABLE_RIPGREP) return false;
-  if (rgAvailable === void 0) {
-    try {
-      rgAvailable = spawnSync("rg", ["--version"], { stdio: "ignore", timeout: 3e3 }).status === 0;
-    } catch {
-      rgAvailable = false;
-    }
+function isEmpty(v) {
+  if (v === null || v === void 0 || v === "") return true;
+  if (Array.isArray(v)) return v.length === 0;
+  if (typeof v === "object") return Object.keys(v).length === 0;
+  return false;
+}
+function clampToBudget(value, maxTokens = MAX_RESULT_TOKENS) {
+  if (!value || typeof value !== "object" || Array.isArray(value)) return value;
+  if (tokensOf(value) <= maxTokens) return value;
+  const obj2 = { ...value };
+  const truncated = {};
+  for (let guard = 0; guard < 64 && tokensOf(obj2) > maxTokens; guard++) {
+    const arrays = Object.entries(obj2).filter(
+      (e) => Array.isArray(e[1]) && e[1].length > 0
+    );
+    if (arrays.length === 0) break;
+    arrays.sort((a, b) => tokensOf(b[1]) - tokensOf(a[1]));
+    const [field, arr] = arrays[0];
+    const total = truncated[field]?.total ?? arr.length;
+    const shown = Math.max(1, Math.floor(arr.length / 2));
+    obj2[field] = arr.slice(0, shown);
+    truncated[field] = { shown, total };
   }
-  return rgAvailable;
+  if (Object.keys(truncated).length) obj2._truncated = truncated;
+  return obj2;
 }
-function ripgrepCandidates(root, needle) {
-  if (!hasRipgrep()) return null;
-  const globs = [...IGNORE_DIRS].flatMap((d) => ["--glob", `!**/${d}/**`, "--glob", `!${d}/**`]);
-  const res = spawnSync(
-    "rg",
-    ["--files-with-matches", "--fixed-strings", "--ignore-case", "--no-ignore", "--no-messages", ...globs, "--", needle, "."],
-    { cwd: root, encoding: "utf8", timeout: 15e3, maxBuffer: 32 * 1024 * 1024 }
-  );
-  if (res.error || res.status !== 0 && res.status !== 1 || res.signal) return null;
-  const files = parseRgFileList(res.stdout);
-  if (files.length > MAX_FILES_SCANNED) return { files: files.slice(0, MAX_FILES_SCANNED), truncated: true };
-  return { files, truncated: false };
+function tokensOf(v) {
+  return countTokens(JSON.stringify(v));
 }
-function parseRgFileList(stdout, sep9 = path2.sep) {
-  const seen = /* @__PURE__ */ new Set();
-  for (const raw of stdout.split("\n")) {
-    if (!raw) continue;
-    const posix3 = sep9 === "\\" ? raw.replaceAll("\\", "/") : raw;
-    const rel2 = posix3.startsWith("./") ? posix3.slice(2) : posix3;
-    if (!rel2) continue;
-    const segs = rel2.split("/");
-    if (segs.some((s) => s.startsWith(".") || IGNORE_DIRS.has(s))) continue;
-    if (hasBinaryExt(rel2)) continue;
-    seen.add(rel2);
+function asStructured(result) {
+  if (result && typeof result === "object" && !Array.isArray(result)) {
+    return result;
   }
-  return [...seen].sort();
+  return { result };
+}
+function boundList(items, max) {
+  if (!Number.isFinite(max) || max < 0 || items.length <= max) {
+    return { items, total: items.length };
+  }
+  return { items: items.slice(0, max), total: items.length };
 }
+var NODE_EDGE_CAP = 50;
 
 // src/mcp/tools.ts
 var warmEmbedder = null;
@@ -5375,12 +4794,12 @@ function detectAssistants(root, opts = {}) {
   const which = opts.which ?? whichOnPath;
   const found = [];
   for (const assistant of ASSISTANTS) {
-    const repoHit = (assistant.markers ?? []).find((m) => fs18.existsSync(path2.join(root, m)));
+    const repoHit = (assistant.markers ?? []).find((m) => fs15.existsSync(path17.join(root, m)));
     if (repoHit) {
       found.push({ assistant, via: "repo", marker: repoHit });
       continue;
     }
-    const homeHit = (assistant.homeMarkers ?? []).find((m) => fs18.existsSync(path2.join(home, m)));
+    const homeHit = (assistant.homeMarkers ?? []).find((m) => fs15.existsSync(path17.join(home, m)));
     if (homeHit) {
       found.push({ assistant, via: "home", marker: homeHit });
       continue;
@@ -5412,19 +4831,19 @@ function installAssistant(a, opts) {
   const skipped = [];
   let note;
   if (a.skill) {
-    writeFileEnsured(path2.join(opts.root, a.skill), skillMarkdown(a.id));
+    writeFileEnsured(path17.join(opts.root, a.skill), skillMarkdown(a.id));
     wrote.push(a.skill);
   }
   if (a.mcp) {
     const launch = opts.launch ?? detectServeLaunch();
-    upsertMcp(path2.join(opts.root, a.mcp.file), a.mcp, launch);
+    upsertMcp(path17.join(opts.root, a.mcp.file), a.mcp, launch);
     wrote.push(a.mcp.file);
     note = launch.note;
   } else {
     skipped.push("mcp (host-specific setup)");
   }
   if (a.nudge && opts.hook !== false) {
-    writeNudge(path2.join(opts.root, a.nudge.file), a.nudge, opts.smallRepo, a.id);
+    writeNudge(path17.join(opts.root, a.nudge.file), a.nudge, opts.smallRepo, a.id);
     wrote.push(a.nudge.file);
   } else if (a.nudge) {
     skipped.push("nudge (--no-hook)");
@@ -5434,41 +4853,41 @@ function installAssistant(a, opts) {
 function uninstallAssistant(a, root, purge) {
   const removed = [];
   if (a.mcp) {
-    const file = path2.join(root, a.mcp.file);
+    const file = path17.join(root, a.mcp.file);
     if (removeMcp(file, a.mcp)) removed.push(a.mcp.file);
   }
   if (a.nudge) {
-    const file = path2.join(root, a.nudge.file);
+    const file = path17.join(root, a.nudge.file);
     if (a.nudge.kind === "block") {
       if (removeBlock(file)) removed.push(a.nudge.file);
-    } else if (fs18.existsSync(file)) {
-      fs18.rmSync(file);
+    } else if (fs15.existsSync(file)) {
+      fs15.rmSync(file);
       removed.push(a.nudge.file);
     }
   }
   if (purge && a.skill) {
-    const file = path2.join(root, a.skill);
-    if (fs18.existsSync(file)) {
-      fs18.rmSync(file);
+    const file = path17.join(root, a.skill);
+    if (fs15.existsSync(file)) {
+      fs15.rmSync(file);
       removed.push(a.skill);
     }
   }
   return removed;
 }
 function writeFileEnsured(file, content) {
-  fs18.mkdirSync(path2.dirname(file), { recursive: true });
-  fs18.writeFileSync(file, content);
+  fs15.mkdirSync(path17.dirname(file), { recursive: true });
+  fs15.writeFileSync(file, content);
 }
 function writeNavigationConfig(root) {
   ensureVibgrateGitignore(root);
-  const rel2 = path2.join(".vibgrate", "mcp-navigation.json");
+  const rel2 = path17.join(".vibgrate", "mcp-navigation.json");
   const doc = {
     _readme: "Deferred-loading config for agents embedding `vg serve` via the Claude API (defer_loading + tool-search). The hot navigation core stays in context; the rest load on demand \u2014 ~350-450 schema tokens/step vs ~1,881 for the full set. Hosts without defer_loading ignore this and serve the whole (already optimized) tool set. See docs/graph/VG-NAVIGATION-PROFILE.md.",
     hot_core: [...HOT_TOOLS],
     deferred: deferredToolNames(),
     toolset: navigationToolsetConfig()
   };
-  writeFileEnsured(path2.join(root, rel2), `${JSON.stringify(doc, null, 2)}
+  writeFileEnsured(path17.join(root, rel2), `${JSON.stringify(doc, null, 2)}
 `);
   return rel2;
 }
@@ -5483,7 +4902,7 @@ function upsertMcp(file, target, launch) {
 `);
 }
 function removeMcp(file, target) {
-  if (!fs18.existsSync(file)) return false;
+  if (!fs15.existsSync(file)) return false;
   const config = readJson(file);
   const bag = config[target.key];
   if (!bag || !(bag.vg !== void 0)) return false;
@@ -5502,8 +4921,8 @@ function refreshInstalledInstructions(root, smallRepo) {
   };
   for (const a of ASSISTANTS) {
     if (a.skill) {
-      const file = path2.join(root, a.skill);
-      if (fs18.existsSync(file)) {
+      const file = path17.join(root, a.skill);
+      if (fs15.existsSync(file)) {
         const text = readTextSafe(file);
         const from = text === null ? null : staleVersion(text, "# vg \u2014 the code map");
         if (from !== null) {
@@ -5513,8 +4932,8 @@ function refreshInstalledInstructions(root, smallRepo) {
       }
     }
     if (a.nudge) {
-      const file = path2.join(root, a.nudge.file);
-      if (!fs18.existsSync(file)) continue;
+      const file = path17.join(root, a.nudge.file);
+      if (!fs15.existsSync(file)) continue;
       const text = readTextSafe(file);
       if (text === null) continue;
       if (a.nudge.kind === "block") {
@@ -5538,7 +4957,7 @@ function refreshInstalledInstructions(root, smallRepo) {
 }
 function readTextSafe(file) {
   try {
-    return fs18.readFileSync(file, "utf8");
+    return fs15.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -5557,8 +4976,8 @@ ${stripMarkers(nudgeMarkdown(smallRepo, client))}` : stripMarkers(nudgeMarkdown(
   upsertBlock(file, nudgeMarkdown(smallRepo, client));
 }
 function upsertBlock(file, block) {
-  fs18.mkdirSync(path2.dirname(file), { recursive: true });
-  let existing = fs18.existsSync(file) ? fs18.readFileSync(file, "utf8") : "";
+  fs15.mkdirSync(path17.dirname(file), { recursive: true });
+  let existing = fs15.existsSync(file) ? fs15.readFileSync(file, "utf8") : "";
   const re = new RegExp(`${escapeRe(NUDGE_BEGIN)}[\\s\\S]*?${escapeRe(NUDGE_END)}`);
   if (re.test(existing)) existing = existing.replace(re, block);
   else existing = existing.length ? `${existing.replace(/\s*$/, "")}
@@ -5566,20 +4985,20 @@ function upsertBlock(file, block) {
 ${block}
 ` : `${block}
 `;
-  fs18.writeFileSync(file, existing);
+  fs15.writeFileSync(file, existing);
 }
 function removeBlock(file) {
-  if (!fs18.existsSync(file)) return false;
-  const existing = fs18.readFileSync(file, "utf8");
+  if (!fs15.existsSync(file)) return false;
+  const existing = fs15.readFileSync(file, "utf8");
   const re = new RegExp(`\\n*${escapeRe(NUDGE_BEGIN)}[\\s\\S]*?${escapeRe(NUDGE_END)}\\n*`);
   if (!re.test(existing)) return false;
-  fs18.writeFileSync(file, existing.replace(re, "\n"));
+  fs15.writeFileSync(file, existing.replace(re, "\n"));
   return true;
 }
 function readJson(file) {
-  if (!fs18.existsSync(file)) return {};
+  if (!fs15.existsSync(file)) return {};
   try {
-    const parsed = JSON.parse(fs18.readFileSync(file, "utf8"));
+    const parsed = JSON.parse(fs15.readFileSync(file, "utf8"));
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       return parsed;
     }
@@ -5599,7 +5018,7 @@ function escapeRe(s) {
 }
 var REFRESH_LOCK_STALE_MS = 10 * 60 * 1e3;
 function refreshLockPath(root) {
-  return path2.join(cacheDir(root), "refresh.lock");
+  return path17.join(cacheDir(root), "refresh.lock");
 }
 async function refreshIfStale(root, opts = {}) {
   const probe = probeFreshness(root);
@@ -5630,8 +5049,9 @@ async function refreshIfStale(root, opts = {}) {
       const dir = vibgrateDir(root);
       writeArtifacts(result.graph, {
         root,
-        report: fs18.existsSync(path2.join(dir, "GRAPH_REPORT.md")),
-        html: fs18.existsSync(path2.join(dir, "graph.html"))
+        graphPath: opts.graphPath,
+        report: fs15.existsSync(path17.join(dir, "GRAPH_REPORT.md")),
+        html: fs15.existsSync(path17.join(dir, "graph.html"))
       });
     }
     writeSnapshot(root, result.graph.provenance.corpusHash, result.fileStats, scope);
@@ -5651,6 +5071,6 @@ async function refreshIfStale(root, opts = {}) {
   }
 }
 
-export { ASSISTANTS, CliError, ExitCode, FREE_PACK, NPX_INVOCATION, ResourceLimitError, SCHEMA_VERSION, SKIP_DIRS, SKIP_FILES, SMALL_REPO_FILES, TOOLS, UsageError, analyze, applyCoverage, applyStaticTestLinkage, assessDocQuality, assistantById, availableRegionIds, buildFacts, buildGraph, buildModuleResolver, clearStoredCredentials, countTokens, coveringTests, createWorkspaceDsn, credentialsPath, dashHostForIngestHost, decodeScipIndex, defaultGraphPath, detectAssistants, detectRunner, detectServeLaunch, discover, discoverModels, driftCount, dsnCommand, ensureGitignored, epistemicBreakdown, fetchHostedDocsCached, findGitRoot, gitignoreEntryForCredentials, groundGraph, hasDrift, homeCredentialsPath, hostedBase, ingestHostForRegionId, installAssistant, isTestFile, loadCoverage, loadGraph, loadSnapshot, parseDsn, parseJsonc, probeFreshness, projectCredentialsPath, publishPrivateLibrary, pushCommand, readScanArtifact, readStoredCredentials, refreshIfStale, refreshInstalledInstructions, relativeResolver, renderHtml, renderReport, renderToolResult, resolveCliInvocation, resolveDsn, resolveIngestHost, resolveLimits, scipEdges, selectForBudget, shortestPath, symbolsFromApi, testsToRun, uninstallAssistant, uploadScanArtifact, usageError, verifyDeterminism, vibgrateDir, warmEmbedderInBackground, writeArtifacts, writeNavigationConfig, writeSnapshot, writeStoredCredentials };
-//# sourceMappingURL=chunk-VXT6LUGP.js.map
-//# sourceMappingURL=chunk-VXT6LUGP.js.map
+export { ASSISTANTS, CliError, ExitCode, FREE_PACK, NPX_INVOCATION, ResourceLimitError, SCHEMA_VERSION, SKIP_DIRS, SKIP_FILES, SMALL_REPO_FILES, TOOLS, UsageError, analyze, applyCoverage, assessDocQuality, assistantById, availableRegionIds, buildFacts, buildGraph, clearStoredCredentials, countTokens, coveringTests, createWorkspaceDsn, credentialsPath, dashHostForIngestHost, decodeScipIndex, detectAssistants, detectRunner, detectServeLaunch, discover, driftCount, dsnCommand, ensureGitignored, epistemicBreakdown, fetchHostedDocsCached, findGitRoot, gitignoreEntryForCredentials, groundGraph, hasDrift, homeCredentialsPath, hostedBase, ingestHostForRegionId, installAssistant, loadCoverage, loadSnapshot, parseDsn, probeFreshness, projectCredentialsPath, publishPrivateLibrary, pushCommand, readScanArtifact, readStoredCredentials, refreshIfStale, refreshInstalledInstructions, renderToolResult, resolveCliInvocation, resolveDsn, resolveIngestHost, resolveLimits, scipEdges, searchSymbols, selectForBudget, shortestPath, symbolsFromApi, testsToRun, uninstallAssistant, uploadScanArtifact, usageError, verifyDeterminism, warmEmbedderInBackground, writeNavigationConfig, writeSnapshot, writeStoredCredentials };
+//# sourceMappingURL=chunk-S6CYDZEW.js.map
+//# sourceMappingURL=chunk-S6CYDZEW.js.map