@vibgrate/cli 2026.722.1 → 2026.727.1

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/engine/push.ts"],"names":[],"mappings":";;;;;;;;;;;;AAsBO,SAAS,aAAA,CAAc,IAAA,EAAc,KAAA,EAAgB,YAAA,EAA4C;AACtG,EAAA,MAAM,MAAM,GAAA,CAAI,IAAA,EAAM,CAAC,WAAA,EAAa,MAAM,CAAC,CAAA,IAAK,0CAAA;AAChD,EAAA,MAAM,MAAA,GAAS,IAAI,IAAA,EAAM,CAAC,aAAa,cAAA,EAAgB,MAAM,CAAC,CAAA,IAAK,MAAA;AACnE,EAAA,MAAM,SAAA,GAAY,IAAI,IAAA,EAAM,CAAC,UAAU,OAAA,EAAS,mBAAmB,CAAC,CAAA,IAAK,MAAA;AACzE,EAAA,OAAO;AAAA,IACL,aAAA,EAAe,cAAA;AAAA,IACf,YAAA,EAAc,OAAA;AAAA,IACd,YAAA;AAAA,IACA,GAAA,EAAK,EAAE,GAAA,EAAK,QAAA,EAAU,IAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,EAAG,MAAA,EAAO;AAAA,IAC/C,YAAY,SAAA,GAAY,EAAE,WAAW,oBAAA,CAAqB,SAAS,GAAE,GAAI,MAAA;AAAA,IACzE,aAAa,KAAA,CAAM,WAAA;AAAA,IACnB,KAAA,EAAO,YAAY,KAAK;AAAA,GAC1B;AACF;AAOO,SAAS,YAAY,KAAA,EAAyB;AACnD,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,KAAA,EAAO,KAAA,CAAM,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM;AAC5B,MAAA,MAAM,YAAY,CAAA,CAAE,SAAA,GAAY,cAAc,CAAA,CAAE,SAAS,IAAI,CAAA,CAAE,SAAA;AAC/D,MAAA,MAAM,MAAM,CAAA,CAAE,GAAA,GAAM,cAAc,CAAA,CAAE,GAAG,IAAI,CAAA,CAAE,GAAA;AAC7C,MAAA,OAAO,SAAA,KAAc,CAAA,CAAE,SAAA,IAAa,GAAA,KAAQ,CAAA,CAAE,GAAA,GAAM,EAAE,GAAG,CAAA,EAAG,SAAA,EAAW,GAAA,EAAI,GAAI,CAAA;AAAA,IACjF,CAAC;AAAA,GACH;AACF;AAEA,SAAS,GAAA,CAAI,MAAc,IAAA,EAA+B;AACxD,EAAA,IAAI;AACF,IAAA,OAAO,YAAA,CAAa,KAAA,EAAO,IAAA,EAAM,EAAE,GAAA,EAAK,IAAA,EAAM,QAAA,EAAU,MAAA,EAAQ,CAAA,CAAE,IAAA,EAAK,IAAK,IAAA;AAAA,EAC9E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["import { execFileSync } from 'node:child_process';\nimport { redactSecrets, redactUrlCredentials } from '../core-open/utils/redact.js';\nimport type { VgGraph } from '../schema.js';\n\n/**\n * The deferred, decoupled push envelope (VG-PACKAGE-AND-SCHEMA §7). In the open\n * CLI `vg push` is **specified but not built**: it assembles and redacts the\n * envelope and prints a notice, but performs **no network upload**. Nothing in\n * the free path depends on it. Drift-over-time/governance is the separate\n * commercial product.\n */\n\nexport interface GraphUploadEnvelope {\n  schemaVersion: 'vg-graph/1.0';\n  artifactType: 'graph';\n  scanIngestId?: string;\n  vcs: { sha: string; shortSha: string; branch: string };\n  repository?: { name?: string; remoteUrl?: string };\n  generatedAt: string;\n  graph: VgGraph;\n}\n\nexport function buildEnvelope(root: string, graph: VgGraph, scanIngestId?: string): GraphUploadEnvelope {\n  const sha = git(root, ['rev-parse', 'HEAD']) ?? '0000000000000000000000000000000000000000';\n  const branch = git(root, ['rev-parse', '--abbrev-ref', 'HEAD']) ?? 'HEAD';\n  const remoteUrl = git(root, ['config', '--get', 'remote.origin.url']) ?? undefined;\n  return {\n    schemaVersion: 'vg-graph/1.0',\n    artifactType: 'graph',\n    scanIngestId,\n    vcs: { sha, shortSha: sha.slice(0, 12), branch },\n    repository: remoteUrl ? { remoteUrl: redactUrlCredentials(remoteUrl) } : undefined,\n    generatedAt: graph.generatedAt,\n    graph: redactGraph(graph),\n  };\n}\n\n/**\n * Redaction pass (GUARDRAILS §1: redact before storage). The graph is structure,\n * not content, but we defensively scrub any signature/name that matches a\n * credential-shaped pattern, and strip credentials from the remote URL.\n */\nexport function redactGraph(graph: VgGraph): VgGraph {\n  return {\n    ...graph,\n    nodes: graph.nodes.map((n) => {\n      const signature = n.signature ? redactSecrets(n.signature) : n.signature;\n      const doc = n.doc ? redactSecrets(n.doc) : n.doc;\n      return signature !== n.signature || doc !== n.doc ? { ...n, signature, doc } : n;\n    }),\n  };\n}\n\nfunction git(root: string, args: string[]): string | null {\n  try {\n    return execFileSync('git', args, { cwd: root, encoding: 'utf8' }).trim() || null;\n  } catch {\n    return null;\n  }\n}\n"]}
+{"version":3,"sources":["../src/engine/push.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;AAsBO,SAAS,aAAA,CAAc,IAAA,EAAc,KAAA,EAAgB,YAAA,EAA4C;AACtG,EAAA,MAAM,MAAM,GAAA,CAAI,IAAA,EAAM,CAAC,WAAA,EAAa,MAAM,CAAC,CAAA,IAAK,0CAAA;AAChD,EAAA,MAAM,MAAA,GAAS,IAAI,IAAA,EAAM,CAAC,aAAa,cAAA,EAAgB,MAAM,CAAC,CAAA,IAAK,MAAA;AACnE,EAAA,MAAM,SAAA,GAAY,IAAI,IAAA,EAAM,CAAC,UAAU,OAAA,EAAS,mBAAmB,CAAC,CAAA,IAAK,MAAA;AACzE,EAAA,OAAO;AAAA,IACL,aAAA,EAAe,cAAA;AAAA,IACf,YAAA,EAAc,OAAA;AAAA,IACd,YAAA;AAAA,IACA,GAAA,EAAK,EAAE,GAAA,EAAK,QAAA,EAAU,IAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,EAAG,MAAA,EAAO;AAAA,IAC/C,YAAY,SAAA,GAAY,EAAE,WAAW,oBAAA,CAAqB,SAAS,GAAE,GAAI,MAAA;AAAA,IACzE,aAAa,KAAA,CAAM,WAAA;AAAA,IACnB,KAAA,EAAO,YAAY,KAAK;AAAA,GAC1B;AACF;AAOO,SAAS,YAAY,KAAA,EAAyB;AACnD,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,KAAA,EAAO,KAAA,CAAM,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM;AAC5B,MAAA,MAAM,YAAY,CAAA,CAAE,SAAA,GAAY,cAAc,CAAA,CAAE,SAAS,IAAI,CAAA,CAAE,SAAA;AAC/D,MAAA,MAAM,MAAM,CAAA,CAAE,GAAA,GAAM,cAAc,CAAA,CAAE,GAAG,IAAI,CAAA,CAAE,GAAA;AAC7C,MAAA,OAAO,SAAA,KAAc,CAAA,CAAE,SAAA,IAAa,GAAA,KAAQ,CAAA,CAAE,GAAA,GAAM,EAAE,GAAG,CAAA,EAAG,SAAA,EAAW,GAAA,EAAI,GAAI,CAAA;AAAA,IACjF,CAAC;AAAA,GACH;AACF;AAEA,SAAS,GAAA,CAAI,MAAc,IAAA,EAA+B;AACxD,EAAA,IAAI;AACF,IAAA,OAAO,YAAA,CAAa,KAAA,EAAO,IAAA,EAAM,EAAE,GAAA,EAAK,IAAA,EAAM,QAAA,EAAU,MAAA,EAAQ,CAAA,CAAE,IAAA,EAAK,IAAK,IAAA;AAAA,EAC9E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["import { execFileSync } from 'node:child_process';\nimport { redactSecrets, redactUrlCredentials } from '../core-open/utils/redact.js';\nimport type { VgGraph } from '../schema.js';\n\n/**\n * The deferred, decoupled push envelope (VG-PACKAGE-AND-SCHEMA §7). In the open\n * CLI `vg push` is **specified but not built**: it assembles and redacts the\n * envelope and prints a notice, but performs **no network upload**. Nothing in\n * the free path depends on it. Drift-over-time/governance is the separate\n * commercial product.\n */\n\nexport interface GraphUploadEnvelope {\n  schemaVersion: 'vg-graph/1.0';\n  artifactType: 'graph';\n  scanIngestId?: string;\n  vcs: { sha: string; shortSha: string; branch: string };\n  repository?: { name?: string; remoteUrl?: string };\n  generatedAt: string;\n  graph: VgGraph;\n}\n\nexport function buildEnvelope(root: string, graph: VgGraph, scanIngestId?: string): GraphUploadEnvelope {\n  const sha = git(root, ['rev-parse', 'HEAD']) ?? '0000000000000000000000000000000000000000';\n  const branch = git(root, ['rev-parse', '--abbrev-ref', 'HEAD']) ?? 'HEAD';\n  const remoteUrl = git(root, ['config', '--get', 'remote.origin.url']) ?? undefined;\n  return {\n    schemaVersion: 'vg-graph/1.0',\n    artifactType: 'graph',\n    scanIngestId,\n    vcs: { sha, shortSha: sha.slice(0, 12), branch },\n    repository: remoteUrl ? { remoteUrl: redactUrlCredentials(remoteUrl) } : undefined,\n    generatedAt: graph.generatedAt,\n    graph: redactGraph(graph),\n  };\n}\n\n/**\n * Redaction pass (GUARDRAILS §1: redact before storage). The graph is structure,\n * not content, but we defensively scrub any signature/name that matches a\n * credential-shaped pattern, and strip credentials from the remote URL.\n */\nexport function redactGraph(graph: VgGraph): VgGraph {\n  return {\n    ...graph,\n    nodes: graph.nodes.map((n) => {\n      const signature = n.signature ? redactSecrets(n.signature) : n.signature;\n      const doc = n.doc ? redactSecrets(n.doc) : n.doc;\n      return signature !== n.signature || doc !== n.doc ? { ...n, signature, doc } : n;\n    }),\n  };\n}\n\nfunction git(root: string, args: string[]): string | null {\n  try {\n    return execFileSync('git', args, { cwd: root, encoding: 'utf8' }).trim() || null;\n  } catch {\n    return null;\n  }\n}\n"]}

package/dist/{interactive-736PBC7J.js → interactive-ICL7D7LO.js}

@@ -1,161 +1,40 @@
+import { McpToolset, defaultMcpConnect } from './chunk-LEPTUB4H.js';
 import { newSession, loadLatestSession, summarizeSession, saveSession, recordTask } from './chunk-K3SLGULW.js';
-import { runAgent } from './chunk-JBXNQCGE.js';
-import { printCodeLogo, runBuild, resolveProviders } from './chunk-2EVQKZTO.js';
-import { loadGraph, refreshIfStale, discoverModels, detectServeLaunch } from './chunk-VXT6LUGP.js';
-import './chunk-GGJZA3Q6.js';
-import './chunk-JSNHZCIV.js';
-import './chunk-PY3DNX5H.js';
+import { startCodeRuntimeSession } from './chunk-JZYGEZTU.js';
+import { TtyPrompter, PromptCancelled } from './chunk-JYS4OBN2.js';
+import { printCodeLogo, runBuild, fetchCatalog, resolveProviders, topProviders } from './chunk-YDAT7LD2.js';
+import { BranchGraphSession } from './chunk-SZLF66FJ.js';
+import { loadOrDiscoverFederation } from './chunk-5I4VSBWQ.js';
+import { resolveExecutionEnv } from './chunk-IS7VTH2Q.js';
+import { runAgent } from './chunk-3BVSDMHV.js';
+import { hasOllama, gatherSystemMemory, stopModel, pullModelClean } from './chunk-EDBV33B7.js';
+import { estimateModelBytes, assessCapability, fmt } from './chunk-KHJO4D5N.js';
+import { mergeModelExecutionProfile, resolveModelExecutionProfile } from './chunk-IZDH67DX.js';
+import { resolveGraphBackend } from './chunk-4CQ3MGNN.js';
+import { vgdIsRunning, vgdRequest } from './chunk-PMYWZRRS.js';
+import './chunk-K7REHDQS.js';
+import './chunk-JIBOJTGS.js';
+import './chunk-NDMDSPFX.js';
+import { nodeCodeFs, undoChanges } from './chunk-OXQNQW5J.js';
+import { summarizeDiffs } from './chunk-7JHPQ6WF.js';
+import { info, c, out } from './chunk-CT5BS56U.js';
+import { refreshIfStale } from './chunk-S6CYDZEW.js';
+import './chunk-WLETRGAC.js';
+import './chunk-C4CKTAZP.js';
+import './chunk-J7LKEB2R.js';
+import { discoverModels } from './chunk-OOIG3RUM.js';
+import { readModelSavings } from './chunk-EDAAG7BL.js';
+import './chunk-6IOQJGFT.js';
+import './chunk-3Q7QBWFW.js';
 import './chunk-RXP66R2E.js';
+import { loadGraph, resolveGraphPath } from './chunk-HABUT7HW.js';
+import './chunk-5Q54GEHM.js';
+import './chunk-BWPBB45M.js';
+import './chunk-JFGYT6BI.js';
+import './chunk-BPF3YX2U.js';
 import './chunk-GI6W53LM.js';
 import './chunk-CRAMOEBE.js';
-import { nodeCodeFs, undoChanges } from './chunk-6CXTPC74.js';
-import { summarizeDiffs } from './chunk-CS37OBE3.js';
-import { readModelSavings } from './chunk-WNIIKCNF.js';
-import './chunk-JFGYT6BI.js';
-import { TtyPrompter, PromptCancelled } from './chunk-JYS4OBN2.js';
-import { info, c, out } from './chunk-CT5BS56U.js';
-import { McpToolset, defaultMcpConnect } from './chunk-LEPTUB4H.js';
-import * as fs from 'fs';
-import * as os2 from 'os';
-import * as path from 'path';
-import { spawnSync, spawn } from 'child_process';
-
-var PROVIDER_LABELS = {
-  anthropic: "Anthropic (Claude)",
-  openai: "OpenAI (GPT)",
-  "x-ai": "xAI (Grok)",
-  google: "Google (Gemini)",
-  "meta-llama": "Meta (Llama)",
-  deepseek: "DeepSeek",
-  mistralai: "Mistral",
-  qwen: "Qwen"
-};
-var FEATURED_ORDER = Object.keys(PROVIDER_LABELS);
-var OPENROUTER_MODELS_URL = "https://openrouter.ai/api/v1/models";
-var CACHE_TTL_MS = 24 * 60 * 60 * 1e3;
-function catalogCachePath() {
-  const base = process.env.XDG_CACHE_HOME || path.join(os2.homedir(), ".cache");
-  return path.join(base, "vibgrate", "catalog", "openrouter-models.json");
-}
-async function fetchCatalog(options = {}) {
-  const now = options.now ?? (() => 0);
-  const fetchImpl = options.fetchImpl ?? fetch;
-  if (!options.noCache) {
-    const cached = readCache();
-    if (cached && (options.offline || now() - cached.ts < CACHE_TTL_MS)) {
-      return { providers: groupModels(cached.models), fresh: false, source: "cache" };
-    }
-  }
-  if (options.offline) {
-    const cached = readCache();
-    if (cached) return { providers: groupModels(cached.models), fresh: false, source: "cache" };
-    return { providers: curatedFallback(), fresh: false, source: "fallback" };
-  }
-  try {
-    const controller = new AbortController();
-    const timer = setTimeout(() => controller.abort(), options.timeoutMs ?? 8e3);
-    let raw;
-    try {
-      const res = await fetchImpl(OPENROUTER_MODELS_URL, { signal: controller.signal });
-      if (!res.ok) throw new Error(`HTTP ${res.status}`);
-      raw = await res.json();
-    } finally {
-      clearTimeout(timer);
-    }
-    const models = parseModels(raw);
-    if (models.length === 0) throw new Error("empty catalog");
-    writeCache(models, now());
-    return { providers: groupModels(models), fresh: true, source: "network" };
-  } catch {
-    const cached = readCache();
-    if (cached) return { providers: groupModels(cached.models), fresh: false, source: "cache" };
-    return { providers: curatedFallback(), fresh: false, source: "fallback" };
-  }
-}
-function parseModels(raw) {
-  const data = raw?.data;
-  if (!Array.isArray(data)) return [];
-  const out2 = [];
-  for (const entry of data) {
-    const e = entry;
-    if (typeof e.id !== "string" || !e.id.includes("/")) continue;
-    const provider = e.id.split("/")[0];
-    out2.push({
-      id: e.id,
-      name: typeof e.name === "string" ? e.name : e.id,
-      provider,
-      contextLength: numeric(e.context_length),
-      promptPricePerM: perMillion(e.pricing?.prompt),
-      completionPricePerM: perMillion(e.pricing?.completion)
-    });
-  }
-  return out2;
-}
-function groupModels(models) {
-  const byProvider = /* @__PURE__ */ new Map();
-  for (const m of models) {
-    const list = byProvider.get(m.provider) ?? [];
-    list.push(m);
-    byProvider.set(m.provider, list);
-  }
-  const groups = [];
-  for (const [id, list] of byProvider) {
-    groups.push({ id, label: PROVIDER_LABELS[id] ?? titleCase(id), models: list.sort(rankModels) });
-  }
-  groups.sort((a, b) => {
-    const ia = FEATURED_ORDER.indexOf(a.id);
-    const ib = FEATURED_ORDER.indexOf(b.id);
-    if (ia !== -1 || ib !== -1) return (ia === -1 ? 1e9 : ia) - (ib === -1 ? 1e9 : ib);
-    return a.label.localeCompare(b.label);
-  });
-  return groups;
-}
-function rankModels(a, b) {
-  const ca = isCoding(a) ? 0 : 1;
-  const cb = isCoding(b) ? 0 : 1;
-  if (ca !== cb) return ca - cb;
-  const la = a.contextLength ?? 0;
-  const lb = b.contextLength ?? 0;
-  if (la !== lb) return lb - la;
-  return a.id.localeCompare(b.id);
-}
-function isCoding(m) {
-  return /cod(e|er|ing)/i.test(m.id) || /cod(e|er|ing)/i.test(m.name);
-}
-function topProviders(catalog, n = 6) {
-  return catalog.providers.slice(0, n);
-}
-function readCache() {
-  try {
-    const parsed = JSON.parse(fs.readFileSync(catalogCachePath(), "utf8"));
-    if (Array.isArray(parsed.models) && typeof parsed.ts === "number") return parsed;
-  } catch {
-  }
-  return null;
-}
-function writeCache(models, ts) {
-  try {
-    const file = catalogCachePath();
-    fs.mkdirSync(path.dirname(file), { recursive: true });
-    fs.writeFileSync(file, JSON.stringify({ ts, models }));
-  } catch {
-  }
-}
-function curatedFallback() {
-  return FEATURED_ORDER.map((id) => ({ id, label: PROVIDER_LABELS[id], models: [] }));
-}
-function numeric(v) {
-  const n = typeof v === "string" ? Number(v) : typeof v === "number" ? v : NaN;
-  return Number.isFinite(n) ? n : void 0;
-}
-function perMillion(v) {
-  const n = numeric(v);
-  if (n === void 0) return void 0;
-  return Math.round(n * 1e6 * 1e3) / 1e3;
-}
-function titleCase(id) {
-  return id.replace(/[-_]/g, " ").replace(/\b\w/g, (ch) => ch.toUpperCase());
-}
+import { spawnSync } from 'child_process';
 
 // src/code/wizard.ts
 var ENTER_SLUG = "__enter_slug__";
@@ -238,160 +117,6 @@ function modelHint(contextLength, pricePerM) {
   return parts.join(" \xB7 ");
 }
 
-// src/code/capability.ts
-var GiB = 1024 ** 3;
-var QUANT_BYTES_PER_PARAM = {
-  f16: 2,
-  fp16: 2,
-  f32: 4,
-  q8: 1.06,
-  q8_0: 1.06,
-  q6: 0.82,
-  q6_k: 0.82,
-  q5: 0.7,
-  q5_k_m: 0.72,
-  q5_k_s: 0.68,
-  q5_0: 0.71,
-  q5_1: 0.77,
-  q4: 0.58,
-  q4_k_m: 0.6,
-  q4_k_s: 0.56,
-  q4_0: 0.56,
-  q4_1: 0.63,
-  q3: 0.46,
-  q3_k_m: 0.48,
-  q3_k_s: 0.44,
-  q2: 0.36,
-  q2_k: 0.4
-};
-var DEFAULT_QUANT = "q4_k_m";
-var RUNTIME_OVERHEAD = 1.2;
-function estimateModelBytes(slug, defaultParamsB = 7) {
-  const lower = slug.toLowerCase();
-  const paramMatch = lower.match(/(\d+(?:\.\d+)?)\s*b\b/);
-  const paramsB = paramMatch ? Number(paramMatch[1]) : void 0;
-  const quant = detectQuant(lower);
-  const bytesPerParam = QUANT_BYTES_PER_PARAM[quant] ?? QUANT_BYTES_PER_PARAM[DEFAULT_QUANT];
-  const effectiveParams = (paramsB ?? defaultParamsB) * 1e9;
-  const bytes = Math.round(effectiveParams * bytesPerParam * RUNTIME_OVERHEAD);
-  return { paramsB, quant, bytes, guessed: paramsB === void 0 };
-}
-function detectQuant(lower) {
-  const keys = Object.keys(QUANT_BYTES_PER_PARAM).sort((a, b) => b.length - a.length);
-  for (const k of keys) if (lower.includes(k)) return k;
-  return DEFAULT_QUANT;
-}
-function parseOllamaPs(stdout) {
-  const lines = stdout.split("\n").map((l) => l.trim()).filter(Boolean);
-  const out2 = [];
-  for (const line of lines) {
-    if (/^NAME\b/i.test(line)) continue;
-    const sizeMatch = line.match(/(\d+(?:\.\d+)?)\s*(GB|GiB|MB|MiB|TB)/i);
-    const name = line.split(/\s+/)[0];
-    if (!name || !sizeMatch) continue;
-    out2.push({ name, bytes: toBytes(Number(sizeMatch[1]), sizeMatch[2]) });
-  }
-  return out2;
-}
-function parseNvidiaSmi(stdout) {
-  const line = stdout.split("\n").map((l) => l.trim()).find(Boolean);
-  if (!line) return null;
-  const parts = line.split(",").map((p) => Number(p.trim()));
-  if (parts.length < 2 || !Number.isFinite(parts[0]) || !Number.isFinite(parts[1])) return null;
-  return { totalBytes: parts[0] * 1024 * 1024, usedBytes: parts[1] * 1024 * 1024 };
-}
-function assessCapability(model, sys) {
-  const useVram = typeof sys.vramTotalBytes === "number" && sys.vramTotalBytes > 0;
-  const free = useVram ? sys.vramFreeBytes ?? 0 : sys.freeRamBytes;
-  const loadedBytes = sys.loaded.reduce((n, m) => n + m.bytes, 0);
-  const margin = Math.min(2 * GiB, (useVram ? sys.vramTotalBytes : sys.totalRamBytes) * 0.1);
-  const available = Math.max(0, free - margin);
-  const availableIfUnloaded = Math.max(0, free + loadedBytes - margin);
-  const need = model.bytes;
-  const canRunNow = available >= need;
-  const canRunUnloaded = availableIfUnloaded >= need;
-  const suggestions = [];
-  if (!canRunNow && canRunUnloaded && sys.loaded.length) {
-    const biggest = [...sys.loaded].sort((a, b) => b.bytes - a.bytes);
-    suggestions.push(`unload a loaded model to free memory (e.g. \`ollama stop ${biggest[0].name}\` frees ~${fmt(biggest[0].bytes)})`);
-  }
-  if (!canRunUnloaded) {
-    suggestions.push(`this model needs ~${fmt(need)} but only ~${fmt(availableIfUnloaded)} is available \u2014 choose a smaller model or a lower quant (e.g. q4_K_M)`);
-  }
-  if (model.guessed) {
-    suggestions.push(`couldn't read the parameter count from the name \u2014 this estimate assumes a ~${(model.bytes / GiB).toFixed(1)} GiB model; verify before pulling`);
-  }
-  return {
-    model,
-    availableBytes: available,
-    availableIfUnloadedBytes: availableIfUnloaded,
-    canRun: canRunNow || canRunUnloaded,
-    needsUnload: !canRunNow && canRunUnloaded,
-    suggestions,
-    loaded: sys.loaded
-  };
-}
-function fmt(bytes) {
-  if (bytes >= GiB) return `${(bytes / GiB).toFixed(1)} GiB`;
-  return `${(bytes / (1024 * 1024)).toFixed(0)} MiB`;
-}
-function toBytes(n, unit) {
-  const u = unit.toLowerCase();
-  if (u.startsWith("t")) return n * 1e3 ** 4;
-  if (u.startsWith("g")) return n * (u.includes("i") ? GiB : 1e9);
-  if (u.startsWith("m")) return n * (u.includes("i") ? 1024 * 1024 : 1e6);
-  return n;
-}
-function gatherSystemMemory() {
-  const loaded = safeRun("ollama", ["ps"]).map(parseOllamaPs).flat();
-  const smi = safeRun("nvidia-smi", ["--query-gpu=memory.total,memory.used", "--format=csv,noheader,nounits"]).map(parseNvidiaSmi).find(Boolean);
-  const sys = {
-    totalRamBytes: os2.totalmem(),
-    freeRamBytes: os2.freemem(),
-    loaded
-  };
-  if (smi) {
-    sys.vramTotalBytes = smi.totalBytes;
-    sys.vramFreeBytes = Math.max(0, smi.totalBytes - smi.usedBytes);
-  }
-  return sys;
-}
-function hasOllama() {
-  return spawnSync(process.platform === "win32" ? "where" : "which", ["ollama"], { stdio: "ignore" }).status === 0;
-}
-function stopModel(name) {
-  return spawnSync("ollama", ["stop", name], { stdio: "ignore" }).status === 0;
-}
-function pullModelClean(name, spinner) {
-  return new Promise((resolve) => {
-    const child = spawn("ollama", ["pull", name]);
-    const onData = (buf) => {
-      const line = lastMeaningfulLine(buf.toString());
-      if (line) spinner.update(`pulling ${name} \u2014 ${line}`);
-    };
-    child.stdout?.on("data", onData);
-    child.stderr?.on("data", onData);
-    child.on("error", () => resolve(false));
-    child.on("close", (code) => resolve(code === 0));
-  });
-}
-function lastMeaningfulLine(chunk) {
-  const lines = chunk.split(/[\r\n]+/).map((l) => l.trim()).map((l) => l.replace(/\x1b\[[0-9;]*[A-Za-z]/g, "").replace(/[▏▎▍▌▋▊▉█░▒▓⣀-⣿]/g, "").trim()).filter(Boolean);
-  const last = lines[lines.length - 1] ?? "";
-  const pct = last.match(/(\d+)\s*%/);
-  const status = last.replace(/\s{2,}.*$/, "").slice(0, 48);
-  return pct ? `${status} ${pct[1]}%`.trim() : status;
-}
-function safeRun(bin, args) {
-  try {
-    const res = spawnSync(bin, args, { encoding: "utf8", timeout: 5e3 });
-    if (res.status !== 0 || typeof res.stdout !== "string") return [];
-    return [res.stdout];
-  } catch {
-    return [];
-  }
-}
-
 // src/code/cost.ts
 function costOf(usage, pricing) {
   const inCost = (usage.promptTokens ?? 0) / 1e6 * (pricing.promptPerM ?? 0);
@@ -439,54 +164,23 @@ function fmtTokens(n) {
 function round4(x) {
   return Math.round(x * 1e4) / 1e4;
 }
-var GraphProcess = class _GraphProcess {
-  child;
-  disposed = false;
-  command;
-  args;
-  constructor(child, command, args) {
-    this.child = child;
-    this.command = command;
-    this.args = args;
-    child.once("exit", () => {
-      this.child = null;
-    });
-  }
-  static start(options) {
-    const launch = options.launch ?? detectServeLaunch();
-    const client = options.client ?? "vg-code";
-    const args = [...launch.args, "--client", client];
-    const spawnImpl = options.spawnImpl ?? spawn;
-    try {
-      const child = spawnImpl(launch.command, args, { cwd: options.root, stdio: "ignore", detached: false });
-      if (!child || typeof child.pid !== "number") return null;
-      child.on("error", () => {
-      });
-      return new _GraphProcess(child, launch.command, args);
-    } catch {
-      return null;
-    }
-  }
-  get pid() {
-    return this.child?.pid;
-  }
-  /** True while the child is believed to be running. */
-  get running() {
-    return this.child !== null && !this.disposed;
-  }
-  /** Kill the child. Idempotent and safe to call after the child already exited. */
-  dispose() {
-    if (this.disposed) return;
-    this.disposed = true;
-    const child = this.child;
-    this.child = null;
-    if (!child || child.killed) return;
-    try {
-      child.kill("SIGTERM");
-    } catch {
-    }
-  }
-};
+
+// src/runtime/bridge-facts.ts
+function bridgePinnedFacts(bridges, options = {}) {
+  if (!bridges?.length) return [];
+  const min = options.minConfidence ?? 0.8;
+  const max = options.maxFacts ?? 12;
+  return bridges.filter((b) => b.confidence >= min).map((b) => {
+    const from = shortLabel(b.fromRoot);
+    const to = shortLabel(b.toRoot);
+    const via = b.packageName ? ` package ${b.packageName}` : "";
+    return `bridge ${b.kind}: ${from} \u2192 ${to}${via} (${b.confidence.toFixed(2)})`;
+  }).sort((a, b) => a.localeCompare(b)).slice(0, max);
+}
+function shortLabel(root) {
+  const parts = root.replace(/\\/g, "/").split("/").filter(Boolean);
+  return parts[parts.length - 1] || root;
+}
 
 // src/code/interactive.ts
 async function runInteractive(root, global, opts, prompter = new TtyPrompter()) {
@@ -518,7 +212,8 @@ async function ensureMap(root, global, prompter) {
     return;
   }
   const sp = prompter.spinner("Checking the code map is up to date\u2026");
-  const refreshed = await refreshIfStale(root).catch(() => null);
+  const graphPath = resolveGraphPath(root);
+  const refreshed = await refreshIfStale(root, { graphPath }).catch(() => null);
   if (refreshed?.status === "refreshed") sp.stop("Code map refreshed");
   else sp.stop("Code map ready");
 }
@@ -593,14 +288,58 @@ async function codingRepl(root, global, opts, selection, prompter) {
     sp.stop(`MCP tools: ${toolset.specs().length} from ${Object.keys(opts.mcpServers).length} server(s)${from}`);
     for (const w of warnings) prompter.note(c.yellow(`  ${w}`));
   }
-  const graphProc = GraphProcess.start({ root });
+  const runtime = await startCodeRuntimeSession({ root });
+  const branchGraphs = new BranchGraphSession({ root, graphPath: global.graph });
+  const federation = loadOrDiscoverFederation(root);
+  const extraPinnedFacts = bridgePinnedFacts(federation.bridges);
+  if (federation.members.length > 1 && await vgdIsRunning({ socketPath: runtime.socketPath })) {
+    try {
+      await vgdRequest(
+        {
+          op: "register-federation",
+          primaryRoot: federation.primaryRoot,
+          members: federation.members.map((m) => ({ root: m.root, label: m.label, role: m.role }))
+        },
+        { socketPath: runtime.socketPath }
+      );
+      const bridgeN = federation.bridges?.length ?? 0;
+      prompter.note(
+        c.dim(
+          `federation \xB7 ${federation.members.length} workspace(s) registered with vgd` + (bridgeN ? ` \xB7 ${bridgeN} bridge edge(s)` : "")
+        )
+      );
+    } catch {
+    }
+  } else if ((federation.bridges?.length ?? 0) > 0) {
+    prompter.note(
+      c.dim(
+        `federation \xB7 ${federation.members.length} member(s) \xB7 ${federation.bridges.length} bridge edge(s) (discovery)`
+      )
+    );
+  }
+  let modelProfile = mergeModelExecutionProfile(
+    resolveModelExecutionProfile({
+      providerId: sel.providerSlug,
+      model: sel.model,
+      budget: opts.budget ? Number(opts.budget) : void 0,
+      maxRepairRounds: opts.verify?.maxRounds,
+      securityTier: opts.securityTier
+    }),
+    opts.modelProfile
+  );
+  const securityTier = opts.securityTier ?? modelProfile.securityTier ?? (opts.auto ? "L1" : "L0");
+  const writableRoots = federation?.members.map((m) => m.root) ?? [root];
+  const executionEnv = resolveExecutionEnv(securityTier, { writableRoots });
   const cleanup = () => {
-    graphProc?.dispose();
+    void runtime.dispose();
     void mcp?.dispose();
   };
   process.once("SIGINT", cleanup);
   const autoNote = opts.auto ? c.yellow(" \xB7 auto-approve ON") : "";
-  prompter.intro(`Ready \u2014 ${sel.providerSlug}/${sel.model}${graphProc ? c.dim(" \xB7 graph " + graphProc.pid) : ""}${autoNote}. Describe a task, or /help. Empty line to exit.`);
+  const runtimeNote = runtime.kind !== "none" ? c.dim(` \xB7 ${runtime.label}`) : "";
+  const securityNote = c.dim(` \xB7 ${executionEnv.tier}/${executionEnv.label}`);
+  const mepNote = c.dim(` \xB7 mep ${modelProfile.mode}`);
+  prompter.intro(`Ready \u2014 ${sel.providerSlug}/${sel.model}${runtimeNote}${securityNote}${mepNote}${autoNote}. Describe a task, or /help. Empty line to exit.`);
   try {
     for (; ; ) {
       const line = (await prompter.input("code \u203A")).trim();
@@ -638,11 +377,47 @@ async function codingRepl(root, global, opts, selection, prompter) {
         }
         continue;
       }
-      const graph = loadGraph(root, global.graph);
+      const branchLoad = branchGraphs.ensureCurrent();
+      const graph = branchLoad.graph;
       if (!graph) {
         prompter.note(c.red("the code map disappeared \u2014 run `vg` to rebuild"));
         break;
       }
+      if (branchLoad.switched) {
+        prompter.note(
+          c.dim(
+            `branch \xB7 ${branchLoad.gitRef}${branchLoad.fromCache ? " (warm cache)" : " (loaded map)"}`
+          )
+        );
+      }
+      if (runtime.socketPath && graph && branchLoad.gitRef && branchLoad.gitRef !== "unknown") {
+        void vgdRequest(
+          {
+            op: "put-graph",
+            repositoryId: branchLoad.repositoryId,
+            gitRef: branchLoad.gitRef,
+            graph
+          },
+          { socketPath: runtime.socketPath }
+        ).catch(() => {
+        });
+      }
+      const graphBackend = resolveGraphBackend({
+        graph,
+        repositoryId: branchLoad.repositoryId,
+        gitRef: branchLoad.gitRef !== "unknown" ? branchLoad.gitRef : null,
+        socketPath: runtime.socketPath
+      });
+      modelProfile = mergeModelExecutionProfile(
+        resolveModelExecutionProfile({
+          providerId: sel.providerSlug,
+          model: sel.model,
+          budget: opts.budget ? Number(opts.budget) : void 0,
+          maxRepairRounds: opts.verify?.maxRounds,
+          securityTier
+        }),
+        opts.modelProfile
+      );
       const result = await agentTask({
         root,
         graph,
@@ -652,15 +427,21 @@ async function codingRepl(root, global, opts, selection, prompter) {
         attribution: { client: "vg-code", provider: sel.providerSlug, model: sel.model },
         auto: !!opts.auto,
         maxSteps: opts.maxSteps,
+        budget: modelProfile.capsuleBudgetTokens,
         denyCommands: opts.denyCommands,
         testCommand: opts.testCommand,
         contextBudget: opts.contextBudget,
         stream: opts.stream,
-        verify: opts.verify,
+        verify: opts.verify ? { ...opts.verify, maxRounds: opts.verify.maxRounds ?? modelProfile.maxRepairRounds } : void 0,
         priorSummary,
         externalTools: mcp ? mcpExternalTools(mcp, agentApprove(opts, prompter)) : void 0,
         meter,
-        prompter
+        prompter,
+        capsule: opts.capsule,
+        executionEnv,
+        graphBackend,
+        modelProfile,
+        extraPinnedFacts
       });
       priorSummary = void 0;
       if (result.changes.length) {
@@ -680,6 +461,12 @@ function agentApprove(opts, prompter) {
   return async (action) => {
     if (opts.auto) return true;
     if (action.kind === "tool") return prompter.confirm(`Call ${action.name}?`, false);
+    if (action.kind === "patch") {
+      const n = action.files.length;
+      const names = action.files.slice(0, 6).map((f) => f.file).join(", ");
+      const more = n > 6 ? ` (+${n - 6} more)` : "";
+      return prompter.confirm(`Apply patch to ${n} file(s): ${names}${more}?`, false);
+    }
     return true;
   };
 }
@@ -736,6 +523,16 @@ async function agentTask(params) {
         return prompter.confirm(`Run \`${action.command}\`?`, false);
       case "tool":
         return prompter.confirm(`Call ${action.name}(${briefArgs(action.args)})?`, false);
+      case "patch": {
+        const n = action.files.length;
+        for (const f of action.files) {
+          if (f.diff) out(f.diff);
+          else out(`${f.op} ${f.file}`);
+        }
+        const names = action.files.slice(0, 6).map((f) => f.file).join(", ");
+        const more = n > 6 ? ` (+${n - 6} more)` : "";
+        return prompter.confirm(`Apply patch to ${n} file(s): ${names}${more}?`, false);
+      }
     }
   };
   let streaming = false;
@@ -762,6 +559,20 @@ async function agentTask(params) {
       info(c.dim(`  \xB7 compacted context (${e.droppedRounds} earlier round(s) summarized)`));
     } else if (e.type === "verify") {
       info(e.passed ? c.green(`  \u2714 ${e.command} passed`) : c.yellow(`  \u2717 ${e.command} failed \u2014 asking the model to fix it`));
+    } else if (e.type === "ladder") {
+      info(e.ok ? c.green("  \u2714 verification ladder passed") : c.yellow("  \u2717 verification ladder failed \u2014 asking the model to fix it"));
+      if (!e.ok && e.summary.trim()) {
+        for (const line of e.summary.split("\n").slice(0, 6)) info(c.dim(`    ${line}`));
+      }
+    } else if (e.type === "session-graph") {
+      info(c.dim(`  \xB7 session graph updated (${e.reparsed} reparsed, ${e.dirty} dirty)`));
+    } else if (e.type === "capsule") {
+      info(c.dim(`  \xB7 Task Capsule \xB7 ${e.summary.primary.length} primary \xB7 ${e.summary.sourceSliceCount} source slice(s) \xB7 ~${e.summary.tokensEstimate} tokens`));
+    } else if (e.type === "failure-capsule") {
+      info(c.yellow(`  \xB7 Failure Capsule \xB7 ${e.capsule.failedStep.type}${e.capsule.failedStep.command ? ` \xB7 ${e.capsule.failedStep.command}` : ""}`));
+    } else if (e.type === "metrics") {
+      const m = e.metrics;
+      info(c.dim(`  \xB7 metrics \xB7 discovery ${m.discoveryToolCalls} \xB7 mutations ${m.mutationToolCalls}${m.znsAt1 ? " \xB7 ZNS@1" : ""}`));
     }
   };
   const result = await runAgent({
@@ -771,6 +582,13 @@ async function agentTask(params) {
     providers: params.providers,
     fsImpl: params.fsImpl,
     run: shellRunner(params.root),
+    executionEnv: params.executionEnv,
+    graphBackend: params.graphBackend,
+    modelProfile: params.modelProfile,
+    advancedMode: params.advancedMode,
+    // Interactive sessions always prefer a worktree-correct map unless disabled.
+    worktreeOverlay: params.worktreeOverlay ?? true,
+    extraPinnedFacts: params.extraPinnedFacts,
     approve,
     onEvent,
     attribution: params.attribution,
@@ -784,6 +602,8 @@ async function agentTask(params) {
     verify: params.verify,
     priorSummary: params.priorSummary,
     externalTools: params.externalTools,
+    capsule: params.capsule,
+    files: params.files,
     now: () => Date.now()
   });
   closeStream();
@@ -816,5 +636,5 @@ ${res.stderr}` : "");
 }
 
 export { agentTask, runInteractive };
-//# sourceMappingURL=interactive-736PBC7J.js.map
-//# sourceMappingURL=interactive-736PBC7J.js.map
+//# sourceMappingURL=interactive-ICL7D7LO.js.map
+//# sourceMappingURL=interactive-ICL7D7LO.js.map