@vibgrate/cli 2026.727.1 → 2026.727.3

package/dist/cli.js

@@ -1,45 +1,46 @@
 #!/usr/bin/env node
-import { loadAdvancedScanHook, baselineCommand } from './chunk-HYZVHJ3Q.js';
-import { sha256Hex, generateKeypair, dssePae, DSSE_PAYLOAD_TYPE, keyId, registerBuild, readGlobal, applyGlobalOptions, ProgressBar, printLogo, fetchCatalog, resolveProviders, runBuild } from './chunk-YDAT7LD2.js';
-export { runBuild } from './chunk-YDAT7LD2.js';
-import { VGD_PROTOCOL_VERSION, startVgdServer } from './chunk-SZLF66FJ.js';
+import { loadAdvancedScanHook, baselineCommand } from './chunk-FFWGT55D.js';
+import { sha256Hex, generateKeypair, dssePae, DSSE_PAYLOAD_TYPE, keyId, registerBuild, readGlobal, applyGlobalOptions, ProgressBar, printLogo, fetchCatalog, resolveProviders, runBuild } from './chunk-C66GOHYB.js';
+export { runBuild } from './chunk-C66GOHYB.js';
+import { CONTEXT_POLICY_VERSION, computeFcsReport, renderFcsReportMarkdown, createTrajectoryCollector, runAgent } from './chunk-Z7GP7XTJ.js';
+import { disableColor, info, c, json, out } from './chunk-CT5BS56U.js';
+import { VGD_PROTOCOL_VERSION, startVgdServer } from './chunk-77LYGXBI.js';
 import './chunk-5I4VSBWQ.js';
 import './chunk-IS7VTH2Q.js';
-import { CONTEXT_POLICY_VERSION, computeFcsReport, renderFcsReportMarkdown, createTrajectoryCollector, runAgent } from './chunk-3BVSDMHV.js';
-import { gatherSystemMemory } from './chunk-EDBV33B7.js';
-import { readOrchestratorState, writeOrchestratorState, parseMode, setDefaultMode, recommendMode, activePin, resolveMode, providerForBackend, QUALIFIED_PACKS, pinPack, unpinPack, buildOrchestratorStatus } from './chunk-VXGV6NTD.js';
-import { fmt, estimateModelBytes } from './chunk-KHJO4D5N.js';
+import { gatherSystemMemory } from './chunk-6UQMXIAG.js';
+import { readOrchestratorState, writeOrchestratorState, parseMode, setDefaultMode, recommendMode, activePin, resolveMode, providerForBackend, QUALIFIED_PACKS, pinPack, unpinPack, buildOrchestratorStatus } from './chunk-3V24O47U.js';
+import { fmt, estimateModelBytes } from './chunk-7N4Y3E47.js';
 import './chunk-IZDH67DX.js';
-import './chunk-4CQ3MGNN.js';
+import './chunk-HK3AWUXH.js';
 import { vgdIsRunning, vgdRequest, vgdSocketPath } from './chunk-PMYWZRRS.js';
 import { defaultProcessEndpoint, startProcessHostServer, resolveInferenceIsolation } from './chunk-PXHNTC6D.js';
 import { clearHostSessionPool, acquireHostSession, generateOnSession, listHostSessions, hostSessionPoolSize } from './chunk-K7REHDQS.js';
 import { buildIdentifierTrieFromGraph } from './chunk-JIBOJTGS.js';
 import './chunk-NDMDSPFX.js';
-import { runCodeSession } from './chunk-OXQNQW5J.js';
-import { ensurePackage, ensureUnavailableMessage, isPackageInstalled, summarizeDiffs, ScriptedProvider } from './chunk-7JHPQ6WF.js';
-import { disableColor, info, c, json, out } from './chunk-CT5BS56U.js';
-import { serveStdio, exportGraph, GraphSource, createServer, formatForExt } from './chunk-65MEOA4E.js';
-import { resolveDsn, resolveIngestHost, dashHostForIngestHost, resolveCliInvocation, availableRegionIds, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, CliError, ExitCode, parseDsn as parseDsn$1, uploadScanArtifact, ingestHostForRegionId, dsnCommand, pushCommand, NPX_INVOCATION, refreshIfStale, driftCount, countTokens, shortestPath, testsToRun, detectRunner, ASSISTANTS, detectAssistants, usageError, detectServeLaunch, installAssistant, writeNavigationConfig, uninstallAssistant, coveringTests, FREE_PACK, readScanArtifact, buildGraph, writeSnapshot, probeFreshness, discover, assistantById, SMALL_REPO_FILES, resolveLimits, publishPrivateLibrary, assessDocQuality, symbolsFromApi, fetchHostedDocsCached, selectForBudget, hostedBase, readStoredCredentials, projectCredentialsPath, homeCredentialsPath, SKIP_DIRS, SKIP_FILES, SCHEMA_VERSION } from './chunk-S6CYDZEW.js';
-import { writeDefaultConfig, parseDsn, detectVcs, computeRepoFingerprint, resolveRepositoryName, fetchScanPreflight, runCoreScan, VERSION, loadConfig, prepareCompressedUpload, computeDriftScore, titleBox, projectTypeToVulnEcosystem, driftBar, gitHistoryAvailable, buildVersionTimelines, findPackageAnyEcosystem, normalizeConstraint, findVersionCrossings, versionSatisfies, PROJECT_TYPE_TO_OSV_ECOSYSTEM, fetchRiskySymbols } from './chunk-WLETRGAC.js';
-import { inventory, enrichOnline, ECOSYSTEMS, catalogPath, libDir, loadCatalog, driftFor, addLibrary, resolveLib, libId, resolveVersion, readDoc, localPackageDocs, localApiSurface } from './chunk-C4CKTAZP.js';
+import { runCodeSession } from './chunk-2VFWXNS5.js';
+import { ensurePackage, ensureUnavailableMessage, isPackageInstalled, summarizeDiffs, ScriptedProvider } from './chunk-OFUC6RYN.js';
+import { serveStdio, exportGraph, GraphSource, createServer, formatForExt } from './chunk-AVQSHIJ5.js';
+import { resolveDsn, resolveIngestHost, dashHostForIngestHost, resolveCliInvocation, availableRegionIds, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, CliError, ExitCode, parseDsn as parseDsn$1, uploadScanArtifact, ingestHostForRegionId, dsnCommand, pushCommand, NPX_INVOCATION, refreshIfStale, driftCount, countTokens, shortestPath, pathDisconnect, testsToRun, detectRunner, ASSISTANTS, detectAssistants, usageError, detectServeLaunch, installAssistant, writeNavigationConfig, uninstallAssistant, coveringTests, FREE_PACK, readScanArtifact, buildGraph, writeSnapshot, probeFreshness, discover, assistantById, SMALL_REPO_FILES, publishPrivateLibrary, assessDocQuality, symbolsFromApi, fetchHostedDocsCached, selectForBudget, hostedBase, readStoredCredentials, projectCredentialsPath, homeCredentialsPath, SKIP_DIRS, SKIP_FILES } from './chunk-MAY5HLDH.js';
+import { inventory, enrichOnline, ECOSYSTEMS, catalogPath, libDir, loadCatalog, driftFor, addLibrary, resolveLib, libId, resolveVersion, readDoc, localPackageDocs, localApiSurface } from './chunk-6JIKUDWM.js';
+import { writeDefaultConfig, parseDsn, detectVcs, computeRepoFingerprint, resolveRepositoryName, fetchScanPreflight, runCoreScan, VERSION, loadConfig, prepareCompressedUpload, computeDriftScore, titleBox, projectTypeToVulnEcosystem, driftBar, gitHistoryAvailable, buildVersionTimelines, findPackageAnyEcosystem, normalizeConstraint, findVersionCrossings, versionSatisfies, PROJECT_TYPE_TO_OSV_ECOSYSTEM, fetchRiskySymbols } from './chunk-Y23HMSWU.js';
+import { ensureDir, pathExists, readJsonFile, writeTextFile, writeJsonFile } from './chunk-CRAMOEBE.js';
 import { resolveOne } from './chunk-J7LKEB2R.js';
 import { discoverModels, listCachedWeights, isWeightCached, lookupCatalog, ensureWeightCached, catalogIntegrityReport, weightStoreDir } from './chunk-OOIG3RUM.js';
-import { recordCliCall, CLI_TOOL_ALIASES, savingsLedgerPath, clearSavings, readSavings, readUsage, readModelSavings, CAPSULE_RANKING_VERSION, SAVINGS_TOOLS, sanitizeClient } from './chunk-EDAAG7BL.js';
-import { cacheDir, embeddingsCached, resolveEmbedModel, loadEmbedder, getNodeEmbeddings, queryGraphSemantic, queryGraph, unavailableMessage, countPending, indexFor, impactOf, modelCacheInfo, clearModelCache } from './chunk-6IOQJGFT.js';
-import { resolvedGrammarFiles, grammarSetVersion } from './chunk-3Q7QBWFW.js';
+import { recordCliCall, CLI_TOOL_ALIASES, savingsLedgerPath, clearSavings, readSavings, readUsage, readModelSavings, CAPSULE_RANKING_VERSION, SAVINGS_TOOLS, sanitizeClient } from './chunk-ZBTY6VV4.js';
+import { embeddingsCached, resolveEmbedModel, loadEmbedder, getNodeEmbeddings, queryGraphSemantic, queryGraph, unavailableMessage, countPending, indexFor, impactOf, modelCacheInfo, clearModelCache } from './chunk-6UK6QPTR.js';
+import { resolvedGrammarFiles, grammarSetVersion } from './chunk-ON25BX6T.js';
 import './chunk-RXP66R2E.js';
-import { resolveGraphPath, renderReport, loadGraph, writeArtifacts, vibgrateDir } from './chunk-HABUT7HW.js';
-import { stableStringify, serializeGraph } from './chunk-5Q54GEHM.js';
+import { resolveGraphPath, renderReport, loadGraph, writeArtifacts, vibgrateDir, SCHEMA_VERSION } from './chunk-B3YUO3NW.js';
+import { cacheDir, stableStringify } from './chunk-ZKNB4YH4.js';
 import './chunk-BWPBB45M.js';
 import { canonicalize, hashString, hashBytes } from './chunk-JFGYT6BI.js';
 import './chunk-BPF3YX2U.js';
 import { pathExists as pathExists$1, parseExcludePatterns } from './chunk-GI6W53LM.js';
-import { ensureDir, pathExists, readJsonFile, writeTextFile, writeJsonFile } from './chunk-CRAMOEBE.js';
+import './chunk-DGUM43GV.js';
 import * as fs8 from 'fs';
 import fs8__default, { realpathSync } from 'fs';
-import * as path36 from 'path';
-import path36__default from 'path';
+import * as path37 from 'path';
+import path37__default from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { Command, CommanderError, Option } from 'commander';
 import * as os from 'os';
@@ -58,10 +59,10 @@ function registerStatus(program) {
   applyGlobalOptions(cmd);
 }
 async function runStatus(global) {
-  const root2 = path36.resolve(global.cwd ?? ".");
+  const root2 = path37.resolve(global.cwd ?? ".");
   const graphPath = resolveGraphPath(root2, global.graph);
   const graph = loadGraph(root2, graphPath);
-  const hasCache = fs8.existsSync(path36.join(cacheDir(root2), "parse-cache.json"));
+  const hasCache = fs8.existsSync(path37.join(cacheDir(root2), "parse-cache.json"));
   let stale = null;
   let staleExact = false;
   if (graph) {
@@ -81,8 +82,8 @@ async function runStatus(global) {
   }
   if (global.json) {
     json({
-      root: path36.relative(process.cwd(), root2) || ".",
-      graphPath: path36.relative(root2, graphPath),
+      root: path37.relative(process.cwd(), root2) || ".",
+      graphPath: path37.relative(root2, graphPath),
       built: graph !== null,
       generatedAt: graph?.generatedAt ?? null,
       counts: graph?.meta.counts ?? null,
@@ -97,11 +98,11 @@ async function runStatus(global) {
     return;
   }
   if (!graph) {
-    info(`${c.cyan("vg")} \xB7 no map yet at ${c.dim(path36.relative(root2, graphPath))}`);
+    info(`${c.cyan("vg")} \xB7 no map yet at ${c.dim(path37.relative(root2, graphPath))}`);
     info(`  run ${c.bold("vg")} to build one`);
     return;
   }
-  info(`${c.cyan("vg")} \xB7 ${path36.relative(root2, graphPath)}`);
+  info(`${c.cyan("vg")} \xB7 ${path37.relative(root2, graphPath)}`);
   info(`  generated ${graph.generatedAt}`);
   info(
     `  nodes ${c.bold(String(graph.meta.counts.nodes))}  edges ${c.bold(
@@ -118,7 +119,7 @@ async function runStatus(global) {
   if (vibgrateDir(root2)) ;
 }
 function rootOf(global) {
-  return path36.resolve(global.cwd ?? ".");
+  return path37.resolve(global.cwd ?? ".");
 }
 function requireGraph(global) {
   const root2 = rootOf(global);
@@ -401,6 +402,19 @@ function registerPath(program) {
       );
     }
     if (!result) {
+      const disc = pathDisconnect(graph, ra.node.id, rb.node.id);
+      if (global.json) {
+        json(disc);
+        throw new CliError(
+          `no path between ${ra.node.qualifiedName} and ${rb.node.qualifiedName}`,
+          ExitCode.NOT_FOUND
+        );
+      }
+      info(`${c.cyan("vg path")} \xB7 no path between ${c.bold(disc.from.name)} and ${c.bold(disc.to.name)}`);
+      printNeighborhood("from", disc.from);
+      printNeighborhood("to", disc.to);
+      info(c.dim(`  ${disc.hint}`));
+      info(c.dim(`  try: vg show ${disc.from.name} \xB7 vg impact ${disc.from.name} \xB7 vg show ${disc.to.name}`));
       throw new CliError(
         `no path between ${ra.node.qualifiedName} and ${rb.node.qualifiedName}`,
         ExitCode.NOT_FOUND
@@ -417,6 +431,14 @@ function registerPath(program) {
   });
   applyGlobalOptions(cmd);
 }
+function printNeighborhood(label, n) {
+  const parts = [];
+  if (n.calls.length) parts.push(`calls ${n.calls.join(", ")}`);
+  if (n.calledBy.length) parts.push(`called by ${n.calledBy.join(", ")}`);
+  if (n.imports.length) parts.push(`imports ${n.imports.join(", ")}`);
+  if (n.importedBy.length) parts.push(`imported by ${n.importedBy.join(", ")}`);
+  info(`  ${c.dim(label)} ${c.bold(n.name)}${parts.length ? c.dim(` \xB7 ${parts.join(" \xB7 ")}`) : c.dim(" \xB7 (no call/import neighbors)")}`);
+}
 
 // src/commands/tree.ts
 function registerTree(program) {
@@ -530,12 +552,12 @@ function registerInsights(program) {
     }
   });
   applyGlobalOptions(areas);
-  const oddities = program.command("oddities").description("surprising cross-area links (architectural smells)").option("-n, --limit <n>", "how many to show", "20").action(function(opts) {
+  const oddities = program.command("oddities").description("surprising cross-area links (architectural smells)").option("-n, --limit <n>", "how many to show", "20").option("--all", "include framework/runtime externals (default: filter them out)").action(function(opts) {
     const global = readGlobal(this);
     const { graph } = requireGraph(global);
     const limit = Number(opts.limit) || 20;
     const byId = new Map(graph.nodes.map((n) => [n.id, n]));
-    const list = graph.edges.filter((e) => typeof e.surprise === "number" && e.surprise > 0).sort((a, b) => (b.surprise ?? 0) - (a.surprise ?? 0) || a.id.localeCompare(b.id)).slice(0, limit);
+    const list = graph.edges.filter((e) => typeof e.surprise === "number" && e.surprise > 0).filter((e) => opts.all || !isFrameworkOddity(byId.get(e.src), byId.get(e.dst), e.kind)).sort((a, b) => (b.surprise ?? 0) - (a.surprise ?? 0) || a.id.localeCompare(b.id)).slice(0, limit);
     if (global.json) {
       json(
         list.map((e) => ({
@@ -548,7 +570,9 @@ function registerInsights(program) {
       return;
     }
     if (!list.length) {
-      info(`${c.cyan("vg oddities")} \xB7 none found (no cross-area links, or only one area)`);
+      info(
+        `${c.cyan("vg oddities")} \xB7 none found` + (opts.all ? " (no cross-area links, or only one area)" : " (no app-level surprises; try --all for framework links)")
+      );
       return;
     }
     info(`${c.cyan("vg oddities")} \xB7 top ${list.length} surprising links`);
@@ -560,6 +584,70 @@ function registerInsights(program) {
   });
   applyGlobalOptions(oddities);
 }
+var FRAMEWORK_EXTERNALS = /* @__PURE__ */ new Set([
+  "react",
+  "react-dom",
+  "react-native",
+  "vue",
+  "vue-router",
+  "svelte",
+  "svelte/store",
+  "next",
+  "next/link",
+  "next/router",
+  "next/navigation",
+  "nuxt",
+  "angular",
+  "@angular/core",
+  "@angular/common",
+  "preact",
+  "solid-js",
+  "express",
+  "fastify",
+  "koa",
+  "hono",
+  "rxjs",
+  "lodash",
+  "lodash-es",
+  "underscore",
+  "jquery",
+  "axios",
+  "node:fs",
+  "node:path",
+  "node:url",
+  "node:http",
+  "node:https",
+  "fs",
+  "path",
+  "url",
+  "http",
+  "https",
+  "crypto",
+  "util",
+  "stream",
+  "events",
+  "assert",
+  "os",
+  "child_process"
+]);
+function isFrameworkOddity(from, to, kind) {
+  if (kind !== "import") return false;
+  for (const n of [from, to]) {
+    if (n?.kind === "external" && isFrameworkName(n.qualifiedName || n.name)) return true;
+  }
+  return false;
+}
+function isFrameworkName(name) {
+  if (!name) return false;
+  if (FRAMEWORK_EXTERNALS.has(name)) return true;
+  const base = name.startsWith("@") ? name.split("/").slice(0, 2).join("/") : name.split("/")[0];
+  if (FRAMEWORK_EXTERNALS.has(base)) return true;
+  if (base.startsWith("react-") || base.startsWith("@types/react")) return true;
+  if (base.startsWith("@vue/") || base.startsWith("@angular/") || base.startsWith("@sveltejs/")) {
+    return true;
+  }
+  return false;
+}
 function nodeSummary(n) {
   return {
     id: n.id,
@@ -742,8 +830,8 @@ function pad2(s, n) {
 }
 var SCHEMA_VERSION2 = "1";
 var OFFSET_FILE = "stats-share.json";
-var INSTALL_ID_DIR = path36.join(os.homedir(), ".vibgrate");
-var INSTALL_ID_FILE = path36.join(INSTALL_ID_DIR, "install-id");
+var INSTALL_ID_DIR = path37.join(os.homedir(), ".vibgrate");
+var INSTALL_ID_FILE = path37.join(INSTALL_ID_DIR, "install-id");
 var SEND_TIMEOUT_MS = 4e3;
 function telemetryOptOut(env = process.env) {
   const dnt = (env.DO_NOT_TRACK ?? "").trim().toLowerCase();
@@ -795,10 +883,10 @@ function statsEndpoint() {
   return `https://${resolveIngestHost()}/v1/ingest/cli-mcp-usage`;
 }
 function offsetPath(root2) {
-  return path36.join(cacheDir(root2), OFFSET_FILE);
+  return path37.join(cacheDir(root2), OFFSET_FILE);
 }
 function ledgerFilePath(root2) {
-  return path36.join(cacheDir(root2), "savings.jsonl");
+  return path37.join(cacheDir(root2), "savings.jsonl");
 }
 function readOffset(root2) {
   try {
@@ -969,9 +1057,9 @@ var PUBLISH_INTERVAL_MS = 2e3;
 var KEEPALIVE_MS = 1e4;
 var STALE_MS = 6e4;
 function liveStatsDir(root2) {
-  return path36.join(cacheDir(root2), "serve-live");
+  return path37.join(cacheDir(root2), "serve-live");
 }
-function reapOtherVersionServers(dir, keepVersion, now2 = Date.now(), kill = (pid, signal) => process.kill(pid, signal), selfPid = process.pid) {
+function reapOtherVersionServers(dir, keepVersion, now = Date.now(), kill = (pid, signal) => process.kill(pid, signal), selfPid = process.pid) {
   let entries;
   try {
     entries = fs8.readdirSync(dir);
@@ -983,13 +1071,13 @@ function reapOtherVersionServers(dir, keepVersion, now2 = Date.now(), kill = (pi
     if (!/^serve-\d+\.json$/.test(name)) continue;
     let parsed;
     try {
-      parsed = JSON.parse(fs8.readFileSync(path36.join(dir, name), "utf8"));
+      parsed = JSON.parse(fs8.readFileSync(path37.join(dir, name), "utf8"));
     } catch {
       continue;
     }
     if (typeof parsed?.pid !== "number" || typeof parsed.updatedAt !== "number") continue;
     if (parsed.pid === selfPid) continue;
-    if (now2 - parsed.updatedAt > STALE_MS) continue;
+    if (now - parsed.updatedAt > STALE_MS) continue;
     const version = typeof parsed.version === "string" ? parsed.version : "unknown";
     if (version === keepVersion) continue;
     try {
@@ -1005,7 +1093,7 @@ var LiveStatsBus = class {
     this.dir = dir;
     this.stats = stats;
     this.pid = pid;
-    this.file = path36.join(dir, `serve-${this.pid}.json`);
+    this.file = path37.join(dir, `serve-${this.pid}.json`);
   }
   dir;
   stats;
@@ -1030,12 +1118,12 @@ var LiveStatsBus = class {
     this.unlinkOwn();
   }
   /** Write the current snapshot when it changed (or as a keepalive). Never throws. */
-  publish(now2 = Date.now()) {
+  publish(now = Date.now()) {
     const snap = this.stats.snapshot();
-    if (snap.revision === this.lastRevision && now2 - this.lastWriteAt < KEEPALIVE_MS) return;
+    if (snap.revision === this.lastRevision && now - this.lastWriteAt < KEEPALIVE_MS) return;
     this.lastRevision = snap.revision;
-    this.lastWriteAt = now2;
-    const body = { pid: this.pid, updatedAt: now2, version: VERSION, snapshot: snap };
+    this.lastWriteAt = now;
+    const body = { pid: this.pid, updatedAt: now, version: VERSION, snapshot: snap };
     try {
       fs8.mkdirSync(this.dir, { recursive: true });
       const tmp = `${this.file}.tmp`;
@@ -1048,7 +1136,7 @@ var LiveStatsBus = class {
    * Fresh snapshots of the OTHER serve processes in this repo. Stale files
    * (crashed processes) are swept best-effort while reading.
    */
-  siblings(now2 = Date.now()) {
+  siblings(now = Date.now()) {
     let entries;
     try {
       entries = fs8.readdirSync(this.dir);
@@ -1058,7 +1146,7 @@ var LiveStatsBus = class {
     const out2 = [];
     for (const name of entries.sort()) {
       if (!/^serve-\d+\.json$/.test(name)) continue;
-      const file = path36.join(this.dir, name);
+      const file = path37.join(this.dir, name);
       let parsed;
       try {
         parsed = JSON.parse(fs8.readFileSync(file, "utf8"));
@@ -1066,7 +1154,7 @@ var LiveStatsBus = class {
         continue;
       }
       if (typeof parsed?.pid !== "number" || typeof parsed.updatedAt !== "number" || !parsed.snapshot?.totals) continue;
-      if (now2 - parsed.updatedAt > STALE_MS) {
+      if (now - parsed.updatedAt > STALE_MS) {
         try {
           fs8.unlinkSync(file);
         } catch {
@@ -1140,12 +1228,12 @@ var SessionStats = class {
   byClient = /* @__PURE__ */ new Map();
   byTool = /* @__PURE__ */ new Map();
   bySource = /* @__PURE__ */ new Map();
-  constructor(now2 = Date.now()) {
-    this.startedAt = now2;
+  constructor(now = Date.now()) {
+    this.startedAt = now;
   }
-  record(sample, now2 = Date.now()) {
+  record(sample, now = Date.now()) {
     this.revision++;
-    this.lastCallAt = now2;
+    this.lastCallAt = now;
     const rows = [
       this.totals,
       this.rowFor(this.byClient, sample.client),
@@ -1208,9 +1296,9 @@ var teal = (s) => c.hex("#3FB0A4")(s);
 var mint = (s) => c.hex("#4FE3C1")(s);
 var SPINNER = ["\u280B", "\u2819", "\u2839", "\u2838", "\u283C", "\u2834", "\u2826", "\u2827", "\u2807", "\u280F"];
 var MAX_TOOL_ROWS = 8;
-function serveStatusLines(snap, now2, tick = 0, siblingServers = 0) {
+function serveStatusLines(snap, now, tick = 0, siblingServers = 0) {
   const spinner = mint(SPINNER[tick % SPINNER.length]);
-  const up = fmtUptime(now2 - snap.startedAt);
+  const up = fmtUptime(now - snap.startedAt);
   const lines = [];
   const siblingNote = siblingServers > 0 ? `    ${c.dim(`incl. ${siblingServers} assistant-spawned server${siblingServers === 1 ? "" : "s"} in this repo`)}` : null;
   if (snap.totals.calls === 0) {
@@ -1224,7 +1312,7 @@ function serveStatusLines(snap, now2, tick = 0, siblingServers = 0) {
   const answered = Math.round((t.complete + t.partial) / t.calls * 100);
   const cli = snap.sources.find((s) => s.key === "cli");
   const via = cli ? c.dim(" \xB7 via ") + snap.sources.map((s) => `${c.white(s.key)} ${teal(String(s.calls))}`).join(c.dim(" \xB7 ")) : "";
-  const ago = snap.lastCallAt === null ? "" : c.dim(` \xB7 last call ${fmtUptime(now2 - snap.lastCallAt)} ago`);
+  const ago = snap.lastCallAt === null ? "" : c.dim(` \xB7 last call ${fmtUptime(now - snap.lastCallAt)} ago`);
   lines.push(
     `  ${spinner} ${c.bold.white("vg serve")} ${c.dim("\xB7")} up ${teal(up)} ${c.dim("\xB7")} ${c.bold.white(String(t.calls))} call${t.calls === 1 ? "" : "s"} ${c.dim("\xB7")} ${mint(`${answered}%`)} answered${via}${ago}`
   );
@@ -1257,8 +1345,8 @@ function serveStatusLines(snap, now2, tick = 0, siblingServers = 0) {
   if (siblingNote) lines.push(siblingNote);
   return lines;
 }
-function serveHeartbeatLine(snap, now2) {
-  const up = fmtUptime(now2 - snap.startedAt);
+function serveHeartbeatLine(snap, now) {
+  const up = fmtUptime(now - snap.startedAt);
   const t = snap.totals;
   if (t.calls === 0) return c.dim(`vg \xB7 serving for ${up} \u2014 no tool calls yet`);
   const clients = snap.clients.map((cl) => `${cl.key} ${cl.calls}`).join(", ");
@@ -1382,7 +1470,7 @@ var LedgerTail = class {
     }
   }
   /** One poll cycle — exposed for tests (deterministic, no timers needed). */
-  poll(now2 = Date.now()) {
+  poll(now = Date.now()) {
     let size;
     try {
       size = this.sizeOf();
@@ -1407,7 +1495,7 @@ var LedgerTail = class {
     if (lastNewline < 0) return;
     const text = chunk.subarray(0, lastNewline).toString("utf8");
     this.offset += lastNewline + 1;
-    for (const line of text.split("\n")) ingestLedgerLine(this.stats, line, now2);
+    for (const line of text.split("\n")) ingestLedgerLine(this.stats, line, now);
   }
   sizeOf() {
     try {
@@ -1417,7 +1505,7 @@ var LedgerTail = class {
     }
   }
 };
-function ingestLedgerLine(stats, line, now2) {
+function ingestLedgerLine(stats, line, now) {
   if (!line.trim()) return;
   let e;
   try {
@@ -1436,7 +1524,7 @@ function ingestLedgerLine(stats, line, now2) {
       vgTokens: e.vgTokens ?? 0,
       baselineTokens: e.baselineTokens ?? 0
     },
-    now2
+    now
   );
 }
 
@@ -1486,8 +1574,8 @@ function registerServe(program) {
       await serveHttp(graphPath, opts.host ?? "127.0.0.1", Number(opts.port) || 7437, serveOpts, freshness, () => display?.start());
     } else {
       info(c.dim(`vg \xB7 MCP server on stdio (read-only, ${freshness}). Connect your assistant to this process.`));
-      await serveStdio(graphPath, serveOpts);
       display?.start();
+      await serveStdio(graphPath, serveOpts);
     }
   });
   applyGlobalOptions(cmd);
@@ -1502,13 +1590,22 @@ async function ensureServableGraph(root2, graphPath, global, refresh, opts = {})
         { ...global, json: false }
       );
     } else {
-      const refreshed = await refreshIfStale(root2, { inline: opts.inline, graphPath });
-      if (refreshed.status === "refreshed") {
-        const n = driftCount(refreshed.drift);
-        info(c.dim(`vg \xB7 map refreshed before serving \u2014 ${n} file(s) drifted (${(refreshed.ms / 1e3).toFixed(2)}s)`));
-      } else if (refreshed.status === "error") {
-        info(c.yellow(`vg \xB7 map refresh failed (${refreshed.message}) \u2014 serving the last built map`));
-      }
+      const kick = refreshIfStale(root2, { inline: opts.inline, graphPath }).then((refreshed) => {
+        if (refreshed.status === "refreshed") {
+          const n = driftCount(refreshed.drift);
+          info(
+            c.dim(
+              `vg \xB7 map refreshed in background \u2014 ${n} file(s) drifted (${(refreshed.ms / 1e3).toFixed(2)}s)`
+            )
+          );
+        } else if (refreshed.status === "error") {
+          info(c.yellow(`vg \xB7 map refresh failed (${refreshed.message}) \u2014 serving the last built map`));
+        }
+      }).catch((err) => {
+        const msg = err instanceof Error ? err.message : String(err);
+        info(c.yellow(`vg \xB7 map refresh failed (${msg}) \u2014 serving the last built map`));
+      });
+      if (opts.awaitStaleRefresh) await kick;
     }
   }
   if (!fs8.existsSync(graphPath)) {
@@ -1573,7 +1670,7 @@ async function serveHttp(graphPath, host, port, opts, freshness, onReady) {
       info(c.red(`vg serve: request error: ${err.message}`));
     }
   });
-  await new Promise((resolve19) => httpServer.listen(port, host, resolve19));
+  await new Promise((resolve20) => httpServer.listen(port, host, resolve20));
   info(c.dim(`vg \xB7 MCP server on http://${host}:${port}/mcp (read-only, local, ${freshness})`));
   onReady?.();
   await new Promise(() => {
@@ -1787,7 +1884,7 @@ function endOfLine(text, line) {
 }
 var CACHE_VERSION = "vg-lsp-scan-cache/2";
 function cachePath(root2) {
-  return path36.join(cacheDir(root2), "lsp-scan.json");
+  return path37.join(cacheDir(root2), "lsp-scan.json");
 }
 function manifestHash(root2) {
   const files = [];
@@ -1799,7 +1896,7 @@ function manifestHash(root2) {
       return;
     }
     for (const entry of entries) {
-      const abs = path36.join(dir, entry.name);
+      const abs = path37.join(dir, entry.name);
       if (entry.isDirectory()) {
         if (SKIP_DIRS.has(entry.name)) continue;
         walk2(abs);
@@ -1809,7 +1906,7 @@ function manifestHash(root2) {
       const base = entry.name.toLowerCase();
       if (!isManifest(abs) && !SKIP_FILES.has(base)) continue;
       try {
-        const rel = path36.relative(root2, abs).split(path36.sep).join("/");
+        const rel = path37.relative(root2, abs).split(path37.sep).join("/");
         files.push({ rel, hash: hashBytes(fs8.readFileSync(abs)) });
       } catch {
       }
@@ -2455,12 +2552,12 @@ function uriToPath(uri) {
   }
 }
 function projectForFile(root2, a, filePath) {
-  const dir = path36.dirname(path36.resolve(filePath));
+  const dir = path37.dirname(path37.resolve(filePath));
   let best;
   let bestLen = -1;
   for (const proj of a.projects ?? []) {
-    const projDir = path36.resolve(root2, proj.path);
-    if ((dir === projDir || dir.startsWith(projDir + path36.sep)) && projDir.length > bestLen) {
+    const projDir = path37.resolve(root2, proj.path);
+    if ((dir === projDir || dir.startsWith(projDir + path37.sep)) && projDir.length > bestLen) {
       best = proj;
       bestLen = projDir.length;
     }
@@ -2468,7 +2565,7 @@ function projectForFile(root2, a, filePath) {
   return best;
 }
 function sameProject(location, projectPath) {
-  return path36.normalize(location) === path36.normalize(projectPath);
+  return path37.normalize(location) === path37.normalize(projectPath);
 }
 function hasReleaseDates(a) {
   for (const proj of a.projects ?? []) {
@@ -2714,9 +2811,9 @@ function registerInstall(program) {
           info(`${c.cyan("vg install")} \xB7 no AI assistants detected here`);
         } else {
           info(`${c.cyan("vg install")} \xB7 detected assistants`);
-          const pad5 = Math.max(...detected.map((d) => d.assistant.id.length)) + 2;
+          const pad4 = Math.max(...detected.map((d) => d.assistant.id.length)) + 2;
           for (const d of detected) {
-            info(`  ${c.bold(d.assistant.id.padEnd(pad5))} ${d.assistant.label}  ${c.dim(`via ${d.via}: ${d.marker}`)}`);
+            info(`  ${c.bold(d.assistant.id.padEnd(pad4))} ${d.assistant.label}  ${c.dim(`via ${d.via}: ${d.marker}`)}`);
           }
         }
         return;
@@ -2725,9 +2822,9 @@ function registerInstall(program) {
         json(ASSISTANTS.map((a) => ({ id: a.id, label: a.label, mcp: !!a.mcp, skill: !!a.skill, nudge: !!a.nudge })));
       } else {
         info(`${c.cyan("vg install")} \xB7 supported assistants`);
-        const pad5 = Math.max(...ASSISTANTS.map((a) => a.id.length)) + 2;
+        const pad4 = Math.max(...ASSISTANTS.map((a) => a.id.length)) + 2;
         for (const a of ASSISTANTS) {
-          info(`  ${c.bold(a.id.padEnd(pad5))} ${a.label}  ${c.dim(`mcp:${a.mcp ? "\u2713" : "\u2014"} skill:${a.skill ? "\u2713" : "\u2014"} nudge:${a.nudge ? "\u2713" : "\u2014"}`)}`);
+          info(`  ${c.bold(a.id.padEnd(pad4))} ${a.label}  ${c.dim(`mcp:${a.mcp ? "\u2713" : "\u2014"} skill:${a.skill ? "\u2713" : "\u2014"} nudge:${a.nudge ? "\u2713" : "\u2014"}`)}`);
         }
       }
       return;
@@ -2794,7 +2891,7 @@ function registerShare(program) {
   const cmd = program.command("share").description("make the map committable + auto-updating for your team (git)").option("--undo", "reverse what `vg share` installed").option("--reports", "also commit graph.html / GRAPH_REPORT.md (default: gitignored)").action(function(opts) {
     const global = readGlobal(this);
     const root2 = rootOf(global);
-    const gitDir = path36.join(root2, ".git");
+    const gitDir = path37.join(root2, ".git");
     if (!fs8.existsSync(gitDir)) {
       throw new CliError("not a git repository \u2014 run `vg share` inside a git repo", ExitCode.USAGE_ERROR);
     }
@@ -2816,15 +2913,15 @@ function registerShare(program) {
   applyGlobalOptions(cmd);
 }
 function writeVibgrateGitignore(root2, reports) {
-  const dir = path36.join(root2, ".vibgrate");
+  const dir = path37.join(root2, ".vibgrate");
   fs8.mkdirSync(dir, { recursive: true });
   const lines = ["# Managed by `vg share` \u2014 keep graph.json committed, ignore the rest", "cache/", "facts.jsonl"];
   if (!reports) lines.push("graph.html", "GRAPH_REPORT.md");
-  fs8.writeFileSync(path36.join(dir, ".gitignore"), `${lines.join("\n")}
+  fs8.writeFileSync(path37.join(dir, ".gitignore"), `${lines.join("\n")}
 `);
 }
 function writeGitAttributes(root2) {
-  const file = path36.join(root2, ".gitattributes");
+  const file = path37.join(root2, ".gitattributes");
   const line = ".vibgrate/graph.json merge=vg";
   let content = fs8.existsSync(file) ? fs8.readFileSync(file, "utf8") : "";
   if (!content.split("\n").some((l) => l.trim() === line)) {
@@ -2842,7 +2939,7 @@ function configureMergeDriver(root2) {
 function installPreCommitHook(root2) {
   const hooksDir = hookDir(root2);
   fs8.mkdirSync(hooksDir, { recursive: true });
-  const file = path36.join(hooksDir, "pre-commit");
+  const file = path37.join(hooksDir, "pre-commit");
   const block = [
     HOOK_BEGIN,
     "if command -v vg >/dev/null 2>&1; then",
@@ -2864,14 +2961,14 @@ ${content}`;
   fs8.chmodSync(file, 493);
 }
 function undo(root2) {
-  const hookFile = path36.join(hookDir(root2), "pre-commit");
+  const hookFile = path37.join(hookDir(root2), "pre-commit");
   if (fs8.existsSync(hookFile)) {
     const re = new RegExp(`\\n*${escapeRe(HOOK_BEGIN)}[\\s\\S]*?${escapeRe(HOOK_END)}\\n*`);
     const next2 = fs8.readFileSync(hookFile, "utf8").replace(re, "\n");
     if (next2.trim() === "#!/bin/sh") fs8.rmSync(hookFile);
     else fs8.writeFileSync(hookFile, next2);
   }
-  const attr = path36.join(root2, ".gitattributes");
+  const attr = path37.join(root2, ".gitattributes");
   if (fs8.existsSync(attr)) {
     const next2 = fs8.readFileSync(attr, "utf8").split("\n").filter((l) => l.trim() !== ".vibgrate/graph.json merge=vg").join("\n");
     fs8.writeFileSync(attr, next2);
@@ -2884,10 +2981,10 @@ function undo(root2) {
 function hookDir(root2) {
   try {
     const configured = git(root2, ["config", "--get", "core.hooksPath"]).trim();
-    if (configured) return path36.resolve(root2, configured);
+    if (configured) return path37.resolve(root2, configured);
   } catch {
   }
-  return path36.join(root2, ".git", "hooks");
+  return path37.join(root2, ".git", "hooks");
 }
 function git(root2, args) {
   return execFileSync("git", args, { cwd: root2, encoding: "utf8" });
@@ -2895,148 +2992,111 @@ function git(root2, args) {
 function escapeRe(s) {
   return s.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 }
-var PIN = "2020-01-01T00:00:00.000Z";
-function registerBenchmark(program) {
-  const cmd = program.command("benchmark").description("reproducible build + memory + token-reduction benchmark (honest estimates)").option("--budget <n>", "token budget for vg answers", "2000").action(async function(opts) {
+var DEFAULT_DEBOUNCE_MS = 400;
+var SKIP_NAME = /* @__PURE__ */ new Set([
+  ".git",
+  "node_modules",
+  ".vibgrate",
+  "dist",
+  "build",
+  "out",
+  "coverage",
+  ".next",
+  "target",
+  "__pycache__",
+  ".venv",
+  "venv"
+]);
+function registerWatch(program) {
+  const cmd = program.command("watch").description("rebuild the code map when files change (debounced)").argument("[paths...]", "folders to watch (default: current folder)").option("--debounce <ms>", "settle time after a change before rebuild", String(DEFAULT_DEBOUNCE_MS)).option("--no-html", "do not write graph.html on each rebuild").option("--no-report", "do not write GRAPH_REPORT.md on each rebuild").option("--fast", "skip precise tsc resolve on rebuilds (heuristic only)").action(async function(paths, opts) {
     const global = readGlobal(this);
     const root2 = rootOf(global);
-    const budget = Number(opts.budget) || 2e3;
-    const result = await runBenchmarkSuite(root2, budget);
-    if (global.json) {
-      json(result);
-      return;
-    }
-    const { repo, build, throughput, memory, determinism, tokenReduction } = result;
-    info(`${c.cyan("vg benchmark")} \xB7 ${repo.files} files \xB7 ${repo.nodes} nodes`);
-    info(`  build   cold ${build.coldMs.toFixed(0)}ms \xB7 incremental ${build.incrementalMs.toFixed(0)}ms (reused ${build.reusedOnWarm})`);
-    info(`  speed   ${throughput.filesPerSec.toFixed(0)} files/s \xB7 ${throughput.mbPerSec.toFixed(1)} MB/s (cold, ${mb2(throughput.corpusBytes).toFixed(1)} MB corpus)`);
-    info(
-      `  memory  peak rss ${memory.peakRssMb.toFixed(0)} MB (baseline ${memory.baselineRssMb.toFixed(0)} MB) \xB7 peak heap ${memory.peakHeapMb.toFixed(0)} MB \xB7 graph retains ~${memory.retainedHeapMb.toFixed(0)} MB ${c.dim("(approximate)")}`
-    );
-    info(`  graph   ${mb2(memory.graphJsonBytes).toFixed(1)} MB serialized \xB7 ${memory.bytesPerNode.toFixed(0)} B/node`);
-    info(`  determinism  ${determinism.byteIdentical ? c.green("byte-identical \u2713") : c.red("NON-DETERMINISTIC \u2717")}`);
-    if (tokenReduction.questions.length) {
-      info(`  token reduction vs grep/read baseline (${c.dim("estimates")}):`);
-      for (const q of tokenReduction.questions) {
-        info(`    ${pad3(`${q.ratio.toFixed(1)}\xD7`, 6)} ${c.dim(`vg ${q.vgTokens} vs ~${q.baselineTokens}`)}  "${q.question}"`);
+    const debounceMs = Math.max(50, Number(opts.debounce) || DEFAULT_DEBOUNCE_MS);
+    const watchRoots = (paths.length ? paths : ["."]).map((p) => path37.resolve(root2, p));
+    for (const w of watchRoots) {
+      if (!fs8.existsSync(w)) {
+        throw new CliError(`watch path not found: ${w}`, ExitCode.USAGE_ERROR);
+      }
+    }
+    let building = false;
+    let pending = false;
+    let timer = null;
+    const rebuild = async (reason) => {
+      if (building) {
+        pending = true;
+        return;
+      }
+      building = true;
+      try {
+        info(c.dim(`vg watch \xB7 rebuild (${reason})`));
+        const result = await buildGraph({
+          root: root2,
+          paths: paths.length ? paths : void 0,
+          fast: opts.fast === true,
+          noGround: false
+        });
+        writeArtifacts(result.graph, {
+          root: root2,
+          html: opts.html !== false,
+          report: opts.report !== false,
+          graphPath: global.graph
+        });
+        writeSnapshot(root2, result.graph.provenance.corpusHash, result.fileStats);
+        const { counts } = result.graph.meta;
+        info(
+          `${c.cyan("vg watch")} \xB7 ${counts.nodes} nodes \xB7 ${counts.edges} edges \xB7 ${(result.timing.totalMs / 1e3).toFixed(2)}s` + (result.statHits ? c.dim(` \xB7 ${result.statHits} mtime hits`) : "")
+        );
+      } catch (err) {
+        info(c.yellow(`vg watch \xB7 rebuild failed: ${err.message}`));
+      } finally {
+        building = false;
+        if (pending) {
+          pending = false;
+          void rebuild("queued changes");
+        }
+      }
+    };
+    const schedule = (label) => {
+      if (timer) clearTimeout(timer);
+      timer = setTimeout(() => {
+        timer = null;
+        void rebuild(label);
+      }, debounceMs);
+    };
+    await rebuild("initial");
+    const watchers = [];
+    for (const w of watchRoots) {
+      try {
+        const watcher = fs8.watch(w, { recursive: true }, (_event, filename) => {
+          if (!filename) {
+            schedule("change");
+            return;
+          }
+          const parts = filename.split(path37.sep);
+          if (parts.some((p) => SKIP_NAME.has(p))) return;
+          if (filename.includes(`${path37.sep}.vibgrate${path37.sep}`) || filename.startsWith(".vibgrate")) {
+            return;
+          }
+          schedule(filename);
+        });
+        watchers.push(watcher);
+      } catch (err) {
+        throw new CliError(`cannot watch ${w}: ${err.message}`, ExitCode.ERROR);
       }
-      info(`  ${c.bold(`aggregate \u2248 ${tokenReduction.aggregateRatio.toFixed(1)}\xD7 fewer tokens`)} ${c.dim("(honest estimate, scales with repo size)")}`);
     }
+    info(c.dim(`vg watch \xB7 watching ${watchRoots.map((p) => path37.relative(root2, p) || ".").join(", ")} (debounce ${debounceMs}ms) \xB7 Ctrl+C to stop`));
+    await new Promise((resolve20) => {
+      const stop = () => {
+        for (const w of watchers) w.close();
+        if (timer) clearTimeout(timer);
+        resolve20();
+      };
+      process.once("SIGINT", stop);
+      process.once("SIGTERM", stop);
+    });
   });
   applyGlobalOptions(cmd);
 }
-async function runBenchmarkSuite(root2, budget) {
-  const baseline = process.memoryUsage();
-  const sampler = startMemorySampler();
-  const t0 = now();
-  const cold = await buildGraph({ root: root2, generatedAt: PIN, noCache: true });
-  const coldMs = now() - t0;
-  const t1 = now();
-  const warm = await buildGraph({ root: root2, generatedAt: PIN });
-  const warmMs = now() - t1;
-  const a = serializeGraph(cold.graph);
-  const b = serializeGraph((await buildGraph({ root: root2, generatedAt: PIN, noCache: true })).graph);
-  const peak = sampler.stop();
-  const deterministic = a === b;
-  const after = process.memoryUsage();
-  const corpusBytes = cold.fileStats.reduce((s, f) => s + f.size, 0);
-  const graphJsonBytes = Buffer.byteLength(a, "utf8");
-  const nodes = cold.graph.meta.counts.nodes;
-  const questions = deriveQuestions(cold.graph);
-  const fileSizes = fileSizeIndex(root2);
-  const perQuestion = questions.map((q) => {
-    const vgTokens = queryGraph(cold.graph, q, { budget }).tokensEstimate;
-    const baseTokens = grepBaselineTokens(q, fileSizes);
-    return { question: q, vgTokens, baselineTokens: baseTokens, ratio: baseTokens > 0 ? round(baseTokens / Math.max(vgTokens, 1)) : 1 };
-  });
-  const totalVg = perQuestion.reduce((s, x) => s + x.vgTokens, 0);
-  const totalBase = perQuestion.reduce((s, x) => s + x.baselineTokens, 0);
-  const aggregateRatio = totalVg > 0 ? round(totalBase / totalVg) : 0;
-  return {
-    repo: { files: cold.totalFiles, nodes, edges: cold.graph.meta.counts.edges },
-    build: { coldMs: round(coldMs), incrementalMs: round(warmMs), reusedOnWarm: warm.reused },
-    throughput: {
-      corpusBytes,
-      filesPerSec: coldMs > 0 ? round(cold.totalFiles / coldMs * 1e3) : 0,
-      // 6-decimal precision: a small corpus at 3 decimals would round to 0.
-      mbPerSec: coldMs > 0 ? round6(mb2(corpusBytes) / coldMs * 1e3) : 0
-    },
-    memory: {
-      baselineRssMb: round(mb2(baseline.rss)),
-      peakRssMb: round(mb2(Math.max(peak.rss, baseline.rss))),
-      peakHeapMb: round(mb2(Math.max(peak.heapUsed, baseline.heapUsed))),
-      // Heap growth across the run ≈ what the loaded graphs + caches retain.
-      retainedHeapMb: round(Math.max(0, mb2(after.heapUsed - baseline.heapUsed))),
-      graphJsonBytes,
-      bytesPerNode: nodes > 0 ? round(graphJsonBytes / nodes) : 0,
-      note: "sampled at 25ms + phase boundaries; GC timing makes these approximate"
-    },
-    limits: resolveLimits(),
-    determinism: { byteIdentical: deterministic },
-    tokenReduction: { questions: perQuestion, aggregateRatio, note: "estimates (~4 chars/token); scales with repo size" }
-  };
-}
-function startMemorySampler() {
-  let rss = 0;
-  let heapUsed = 0;
-  const sample = () => {
-    const m = process.memoryUsage();
-    if (m.rss > rss) rss = m.rss;
-    if (m.heapUsed > heapUsed) heapUsed = m.heapUsed;
-  };
-  const timer = setInterval(sample, 25);
-  timer.unref?.();
-  return {
-    stop: () => {
-      clearInterval(timer);
-      sample();
-      return { rss, heapUsed };
-    }
-  };
-}
-function deriveQuestions(graph) {
-  return graph.nodes.filter((n) => n.kind !== "file" && n.kind !== "external").sort((a, b) => b.importance - a.importance || a.qualifiedName.localeCompare(b.qualifiedName)).slice(0, 5).map((n) => n.name);
-}
-function fileSizeIndex(root2) {
-  return discover({ root: root2 }).map((f) => ({ rel: f.rel, abs: f.abs, size: safeSize(f.abs) }));
-}
-function grepBaselineTokens(term, files) {
-  const lower = term.toLowerCase();
-  let bytes = 0;
-  for (const f of files) {
-    if (f.size > 512 * 1024) continue;
-    let content = "";
-    try {
-      content = fs8.readFileSync(f.abs, "utf8");
-    } catch {
-      continue;
-    }
-    if (content.toLowerCase().includes(lower)) bytes += content.length;
-  }
-  return Math.ceil(bytes / 4);
-}
-function safeSize(abs) {
-  try {
-    return fs8.statSync(abs).size;
-  } catch {
-    return 0;
-  }
-}
-function mb2(bytes) {
-  return bytes / (1024 * 1024);
-}
-function now() {
-  return Number(process.hrtime.bigint() / 1000n) / 1e3;
-}
-function round(x) {
-  return Math.round(x * 1e3) / 1e3;
-}
-function round6(x) {
-  return Math.round(x * 1e6) / 1e6;
-}
-function pad3(s, n) {
-  return s.padStart(n, " ");
-}
 function registerTests(program) {
   const cmd = program.command("tests").description("which tests cover a node (call/coverage linkage)").argument("<name>", "node to inspect").option("--missing", "show untested nodes nearby instead").option("--run", "print the command to run exactly these tests").option("--exec", "run that command").option("--pick <n>", "pick the nth candidate when ambiguous").action(function(name, opts) {
     const global = readGlobal(this);
@@ -3092,8 +3152,17 @@ function registerFacts(program) {
     const { node: node2, candidates } = resolveOne(graph, name, opts.pick ? Number(opts.pick) : void 0);
     if (!node2) throw ambiguityError(`"${name}" ${candidates.length ? "is ambiguous" : "not found"}`, candidates);
     if (!graph.facts) {
-      if (global.json) json({ node: node2.qualifiedName, facts: [], note: "facts require a --deep build" });
-      else info(`${c.cyan("vg facts")} \xB7 run ${c.bold("vg --deep")} to derive facts (none in this map)`);
+      if (global.json) {
+        json({
+          node: node2.qualifiedName,
+          facts: [],
+          note: "map has no facts \u2014 rebuild with a current vg (facts ship on every build)"
+        });
+      } else {
+        info(
+          `${c.cyan("vg facts")} \xB7 none in this map \u2014 rebuild with ${c.bold("vg")} (facts ship on every build)`
+        );
+      }
       return;
     }
     const facts = graph.facts.filter((f) => f.subjectIds.includes(node2.id));
@@ -3348,7 +3417,7 @@ function normalizeStandards(raw) {
 }
 function loadStandards(root2) {
   for (const rel of STANDARDS_FILES) {
-    const p = path36__default.join(root2, rel);
+    const p = path37__default.join(root2, rel);
     let text;
     try {
       text = fs8__default.readFileSync(p, "utf8");
@@ -4224,8 +4293,8 @@ async function runHostBench(options = {}) {
 }
 async function runArmSimulate(input) {
   const { arm, lib, modelPath, turns, trie, env, live } = input;
-  const path38 = `${modelPath}#${arm.id}`;
-  const session = await acquireHostSession(lib, path38);
+  const path39 = `${modelPath}#${arm.id}`;
+  const session = await acquireHostSession(lib, path39);
   const system = "You are a coding agent with a Task Capsule.";
   const capsule = "function readConfig(): Config { return load(); }";
   let last = null;
@@ -5167,7 +5236,7 @@ function registerModels(program) {
     );
   });
   applyGlobalOptions(modeCmd);
-  const resolve19 = cmd.command("resolve").description("resolve a Code Mode to pack + underlying model + fit (no download)").argument("[mode]", "spark | flow | forge (default: auto-fit or configured default)").action(function(modeArg) {
+  const resolve20 = cmd.command("resolve").description("resolve a Code Mode to pack + underlying model + fit (no download)").argument("[mode]", "spark | flow | forge (default: auto-fit or configured default)").action(function(modeArg) {
     const global = readGlobal(this);
     const root2 = rootOf(global);
     const sys = gatherSystemMemory();
@@ -5199,7 +5268,7 @@ function registerModels(program) {
       info(c.yellow("  will not fit \u2014 choose a lower mode or free memory before loading"));
     }
   });
-  applyGlobalOptions(resolve19);
+  applyGlobalOptions(resolve20);
   const installCmd = cmd.command("install").description("resolve the best Code Mode for this machine and install the pack").argument("[mode]", "spark | flow | forge (default: auto-fit)").option("--dry-run", "print the install plan only \u2014 do not download").option("--yes", "skip prompts (install already runs by default)").action(async function(modeArg, opts) {
     const global = readGlobal(this);
     const root2 = rootOf(global);
@@ -5537,8 +5606,8 @@ function registerModels(program) {
       }
     });
     if (opts.out) {
-      const outPath = path36.resolve(opts.out);
-      fs8.mkdirSync(path36.dirname(outPath), { recursive: true });
+      const outPath = path37.resolve(opts.out);
+      fs8.mkdirSync(path37.dirname(outPath), { recursive: true });
       fs8.writeFileSync(outPath, `${JSON.stringify(report, null, 2)}
 `);
       if (!global.json) info(c.dim(`  wrote ${outPath}`));
@@ -5649,11 +5718,11 @@ function fitColor(label) {
   return label;
 }
 function confirmYesNo(question) {
-  return new Promise((resolve19) => {
+  return new Promise((resolve20) => {
     const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
     rl.question(`${question} [y/N] `, (answer) => {
       rl.close();
-      resolve19(/^y(es)?$/i.test(answer.trim()));
+      resolve20(/^y(es)?$/i.test(answer.trim()));
     });
   });
 }
@@ -5679,7 +5748,7 @@ function printBackends(backends) {
   }
 }
 function codeConfigPath(root2) {
-  return path36.join(root2, ".vibgrate", "code.json");
+  return path37.join(root2, ".vibgrate", "code.json");
 }
 function loadCodeConfig(root2) {
   try {
@@ -5761,7 +5830,7 @@ function discoverMcpServers(root2, ownServers) {
   const servers = {};
   const sources = [];
   for (const rel of MCP_CONFIG_FILES) {
-    const found = readMcpServersFile(path36.join(root2, rel));
+    const found = readMcpServersFile(path37.join(root2, rel));
     const names = Object.keys(found);
     if (names.length) {
       sources.push(rel);
@@ -5786,9 +5855,9 @@ function registerCode(program) {
     const modeFlag = opts.mode ?? config.modelProfile?.mode;
     if (!opts.model && !opts.modelPath && (modeFlag || !provider && !model)) {
       try {
-        const { parseMode: parseMode2, resolveMode: resolveMode2, readOrchestratorState: readOrchestratorState2, activePin: activePin2, providerForBackend: providerForBackend2 } = await import('./model-orchestrator-FFTZI3U2.js');
-        const { gatherSystemMemory: gatherSystemMemory2 } = await import('./local-runtime-OJFLX2HI.js');
-        const { loadGraph: loadGraph2 } = await import('./load-OHVKDX4R.js');
+        const { parseMode: parseMode2, resolveMode: resolveMode2, readOrchestratorState: readOrchestratorState2, activePin: activePin2, providerForBackend: providerForBackend2 } = await import('./model-orchestrator-TVONAUPS.js');
+        const { gatherSystemMemory: gatherSystemMemory2 } = await import('./local-runtime-5O2NN3GA.js');
+        const { loadGraph: loadGraph2 } = await import('./load-QPOWQD7C.js');
         const state = readOrchestratorState2();
         const mode = parseMode2(modeFlag) ?? state.defaultMode ?? void 0;
         const pin = mode ? activePin2(mode, state) : null;
@@ -5817,7 +5886,7 @@ function registerCode(program) {
             ExitCode.ERROR
           );
         }
-        const { resolveGgufPath } = await import('./resolve-gguf-4UPIGPEE.js');
+        const { resolveGgufPath } = await import('./resolve-gguf-VPL4YQ6J.js');
         const gguf = resolveGgufPath({
           modelRef: resolved.underlying.weightsRef,
           modelPath: opts.modelPath
@@ -5872,7 +5941,7 @@ function registerCode(program) {
       if (!(process.stdin.isTTY && process.stdout.isTTY)) {
         throw usageError('say what to change, e.g. `vg code "add a --timeout flag to the scan command"` (guided mode needs an interactive terminal)');
       }
-      const { runInteractive } = await import('./interactive-ICL7D7LO.js');
+      const { runInteractive } = await import('./interactive-INGJNSON.js');
       await runInteractive(
         rootOf(global),
         global,
@@ -5926,18 +5995,18 @@ function registerCode(program) {
     }
     if (opts.streamJson && !opts.mock) {
       const primarySlug = route.providers[0]?.model.includes("/") ? route.providers[0].model.split("/")[0] : route.providers[0]?.id;
-      const { runCodeStreamJson } = await import('./stream-json-F74W5FCK.js');
-      const { nodeCodeFs } = await import('./session-L2OSDRPI.js');
+      const { runCodeStreamJson } = await import('./stream-json-6ZBUA2L3.js');
+      const { nodeCodeFs } = await import('./session-M72522AP.js');
       const readline5 = await import('readline');
       const child = await import('child_process');
-      const { loadOrDiscoverFederation } = await import('./federation-EPZDUWCK.js');
-      const { resolveExecutionEnv } = await import('./execution-env-3BN7Z737.js');
-      const { resolveModelExecutionProfile, mergeModelExecutionProfile } = await import('./model-execution-profile-MQ2QCP24.js');
-      const { startCodeRuntimeSession } = await import('./runtime-session-IDU5BDUJ.js');
-      const { resolveGraphBackend } = await import('./graph-backend-ZMSYOZMW.js');
-      const { detectGitRef } = await import('./git-ref-HPRLUFFW.js');
-      const { repositoryIdFromRoot } = await import('./paths-MCH75O3G.js');
-      const { vgdRequest: vgdRequest2 } = await import('./vgd-EGBQD7BW.js');
+      const { loadOrDiscoverFederation } = await import('./federation-SZWZIFZ7.js');
+      const { resolveExecutionEnv } = await import('./execution-env-ZU45JZ4G.js');
+      const { resolveModelExecutionProfile, mergeModelExecutionProfile } = await import('./model-execution-profile-TFBKCNJG.js');
+      const { startCodeRuntimeSession } = await import('./runtime-session-4AMZIAAG.js');
+      const { resolveGraphBackend } = await import('./graph-backend-UTOL3SHE.js');
+      const { detectGitRef } = await import('./git-ref-XDXB6JP5.js');
+      const { repositoryIdFromRoot } = await import('./paths-2RAH3GME.js');
+      const { vgdRequest: vgdRequest2 } = await import('./vgd-CVLKBS7K.js');
       const federation = loadOrDiscoverFederation(root2);
       const modelProfile = mergeModelExecutionProfile(
         resolveModelExecutionProfile({
@@ -6026,12 +6095,12 @@ ${res.stderr}` : ""), exitCode: res.status ?? 1 };
       if (!autonomous && !tty) {
         throw usageError("the agent approves each edit/command \u2014 run in a terminal to approve interactively, or pass --auto to run autonomously (or --single for a one-shot diff).");
       }
-      const { agentTask } = await import('./interactive-ICL7D7LO.js');
-      const { nodeCodeFs } = await import('./session-L2OSDRPI.js');
-      const { TtyPrompter } = await import('./ui-HOVOPWMX.js');
+      const { agentTask } = await import('./interactive-INGJNSON.js');
+      const { nodeCodeFs } = await import('./session-M72522AP.js');
+      const { TtyPrompter } = await import('./ui-Q6DJ3GCU.js');
       let priorSummary;
       if (opts.continue) {
-        const { loadLatestSession, summarizeSession } = await import('./session-store-W5RZZHA3.js');
+        const { loadLatestSession, summarizeSession } = await import('./session-store-WFBX7HXL.js');
         const prev = loadLatestSession(root2);
         if (prev) priorSummary = summarizeSession(prev);
       }
@@ -6039,21 +6108,21 @@ ${res.stderr}` : ""), exitCode: res.status ?? 1 };
       let mcpTools;
       let disposeMcp;
       if (Object.keys(mcp.servers).length) {
-        const { McpToolset, defaultMcpConnect } = await import('./mcp-tools-I6PME3AV.js');
+        const { McpToolset, defaultMcpConnect } = await import('./mcp-tools-I7JK3S2M.js');
         const { toolset } = await McpToolset.connect(mcp.servers, defaultMcpConnect);
         disposeMcp = () => toolset.dispose();
         const approve = async (a) => autonomous || !!(prompter && a.kind === "tool" && await prompter.confirm("Call an external tool?", false));
         mcpTools = { specs: toolset.specs(), owns: (n) => toolset.owns(n), execute: (call) => toolset.execute(call, approve) };
       }
       try {
-        const { loadFederation } = await import('./federation-EPZDUWCK.js');
-        const { resolveExecutionEnv } = await import('./execution-env-3BN7Z737.js');
-        const { resolveModelExecutionProfile, mergeModelExecutionProfile } = await import('./model-execution-profile-MQ2QCP24.js');
-        const { startCodeRuntimeSession } = await import('./runtime-session-IDU5BDUJ.js');
-        const { resolveGraphBackend } = await import('./graph-backend-ZMSYOZMW.js');
-        const { detectGitRef } = await import('./git-ref-HPRLUFFW.js');
-        const { repositoryIdFromRoot } = await import('./paths-MCH75O3G.js');
-        const { vgdRequest: vgdRequest2 } = await import('./vgd-EGBQD7BW.js');
+        const { loadFederation } = await import('./federation-SZWZIFZ7.js');
+        const { resolveExecutionEnv } = await import('./execution-env-ZU45JZ4G.js');
+        const { resolveModelExecutionProfile, mergeModelExecutionProfile } = await import('./model-execution-profile-TFBKCNJG.js');
+        const { startCodeRuntimeSession } = await import('./runtime-session-4AMZIAAG.js');
+        const { resolveGraphBackend } = await import('./graph-backend-UTOL3SHE.js');
+        const { detectGitRef } = await import('./git-ref-XDXB6JP5.js');
+        const { repositoryIdFromRoot } = await import('./paths-2RAH3GME.js');
+        const { vgdRequest: vgdRequest2 } = await import('./vgd-CVLKBS7K.js');
         const federation = loadFederation(root2);
         const modelProfile = mergeModelExecutionProfile(
           resolveModelExecutionProfile({
@@ -6197,11 +6266,11 @@ function resolveSecurityTierFlag(flag, fromConfig, auto) {
   return auto ? "L1" : "L0";
 }
 function confirm(question) {
-  return new Promise((resolve19) => {
+  return new Promise((resolve20) => {
     const rl = readline.createInterface({ input: process.stdin, output: process.stderr });
     rl.question(`${question} [y/N] `, (answer) => {
       rl.close();
-      resolve19(/^y(es)?$/i.test(answer.trim()));
+      resolve20(/^y(es)?$/i.test(answer.trim()));
     });
   });
 }
@@ -6223,10 +6292,10 @@ function registerSavings(program) {
       );
       return;
     }
-    const now2 = Date.now();
-    const report = readSavings(root2, days, now2);
-    const usage = readUsage(root2, days, now2);
-    const models = readModelSavings(root2, days, now2);
+    const now = Date.now();
+    const report = readSavings(root2, days, now);
+    const usage = readUsage(root2, days, now);
+    const models = readModelSavings(root2, days, now);
     if (global.json) {
       json({ ...report, usage, models });
       return;
@@ -6358,7 +6427,7 @@ async function addCmd(root2, rest, opts, asJson) {
 }
 function readPackageVersion(root2) {
   try {
-    const pkg = JSON.parse(fs8__default.readFileSync(path36__default.join(root2, "package.json"), "utf8"));
+    const pkg = JSON.parse(fs8__default.readFileSync(path37__default.join(root2, "package.json"), "utf8"));
     return typeof pkg.version === "string" ? pkg.version : void 0;
   } catch {
     return void 0;
@@ -6381,8 +6450,8 @@ async function publishCmd(root2, rest, opts, global, asJson) {
   if (!parsed) throw new CliError("publishing a private library requires a DSN \u2014 run `vibgrate login` or set VIBGRATE_DSN", ExitCode.USAGE_ERROR);
   const version = (opts.version || readPackageVersion(root2) || "").trim();
   if (!version) throw usageError("a --version is required (or run from a package whose package.json has a version)");
-  const readme = readOptionalFile(opts.readme ? path36__default.resolve(opts.readme) : path36__default.join(root2, "README.md"));
-  const dts = opts.dts ? readOptionalFile(path36__default.resolve(opts.dts)) : void 0;
+  const readme = readOptionalFile(opts.readme ? path37__default.resolve(opts.readme) : path37__default.join(root2, "README.md"));
+  const dts = opts.dts ? readOptionalFile(path37__default.resolve(opts.dts)) : void 0;
   if (!readme && !dts) throw usageError("nothing to publish \u2014 no README.md found and no --dts given");
   const result = await publishPrivateLibrary(
     { name, version, readme, dts, language: opts.language },
@@ -6495,7 +6564,7 @@ async function showCmd(root2, name, budget, asJson, opts = {}) {
   out(doc);
 }
 function registerExport(program) {
-  const cmd = program.command("export").description("export the map (format inferred: json|ndjson|graphml|dot|cypher|sql|md|html|cdx.json|spdx.json)").argument("[file]", "target file (or - for stdout)", "map.json").action(function(file) {
+  const cmd = program.command("export").description("export the map (format inferred: json|ndjson|graphml|dot|cypher|sql|md|html|cdx.json|spdx.json)").argument("[file]", "target file (or - for stdout)", "map.json").option("--compact", "compact JSON (no pretty-print; auto for large maps)").option("--slim", "drop heavy fields (area member lists, grounding) for smaller exports").action(function(file, opts) {
     const global = readGlobal(this);
     const { graph } = requireGraph(global);
     const root2 = rootOf(global);
@@ -6506,13 +6575,15 @@ function registerExport(program) {
       graph,
       deps: needsDeps ? inventory(root2).records : void 0,
       models: needsDeps && !global.local ? discoverModels() : void 0,
-      generatedAt: graph.generatedAt
+      generatedAt: graph.generatedAt,
+      compact: opts.compact === true ? true : opts.compact === false ? false : void 0,
+      slim: opts.slim === true
     });
     if (file === "-") {
       out(content.trimEnd());
       return;
     }
-    fs8.mkdirSync(path36.dirname(path36.resolve(file)), { recursive: true });
+    fs8.mkdirSync(path37.dirname(path37.resolve(file)), { recursive: true });
     fs8.writeFileSync(file, content);
     info(`${c.green("\u2714")} wrote ${file} ${c.dim(`(${format})`)}`);
   });
@@ -6523,37 +6594,37 @@ function detectFormat(file) {
   if (lower.endsWith(".cdx.json")) return "cyclonedx";
   if (lower.endsWith(".spdx.json")) return "spdx";
   if (file === "-") return "json";
-  return formatForExt(path36.extname(file));
+  return formatForExt(path37.extname(file));
 }
 function registerBundle(program) {
   const cmd = program.command("bundle").description("build an air-gapped bundle (grammars + graph + library catalog)").option("--offline", "offline bundle (default; present for clarity)").option("-o, --out <dir>", "output directory", "vg-bundle").action(function(opts) {
     const global = readGlobal(this);
     const root2 = rootOf(global);
-    const outDir = path36.resolve(root2, opts.out ?? "vg-bundle");
+    const outDir = path37.resolve(root2, opts.out ?? "vg-bundle");
     let grammarFiles;
     try {
       grammarFiles = resolvedGrammarFiles();
     } catch {
       throw new CliError("no grammars found to bundle (run a build first)", ExitCode.ERROR);
     }
-    fs8.mkdirSync(path36.join(outDir, "grammars"), { recursive: true });
+    fs8.mkdirSync(path37.join(outDir, "grammars"), { recursive: true });
     let grammarCount = 0;
     for (const { fileName, absPath } of grammarFiles) {
-      fs8.copyFileSync(absPath, path36.join(outDir, "grammars", fileName));
+      fs8.copyFileSync(absPath, path37.join(outDir, "grammars", fileName));
       grammarCount++;
     }
     const included = [`grammars/ (${grammarCount} .wasm)`];
     const graphSrc = resolveGraphPath(root2, global.graph);
     if (fs8.existsSync(graphSrc)) {
-      fs8.copyFileSync(graphSrc, path36.join(outDir, "graph.json"));
+      fs8.copyFileSync(graphSrc, path37.join(outDir, "graph.json"));
       included.push("graph.json");
     }
     const cat = catalogPath(root2);
     if (fs8.existsSync(cat)) {
-      fs8.copyFileSync(cat, path36.join(outDir, "vibgrate.lib.json"));
+      fs8.copyFileSync(cat, path37.join(outDir, "vibgrate.lib.json"));
       included.push("vibgrate.lib.json");
       if (fs8.existsSync(libDir(root2))) {
-        fs8.cpSync(libDir(root2), path36.join(outDir, "lib"), { recursive: true });
+        fs8.cpSync(libDir(root2), path37.join(outDir, "lib"), { recursive: true });
         included.push("lib/");
       }
     }
@@ -6565,15 +6636,15 @@ function registerBundle(program) {
       included,
       usage: "Run `vg build --grammars <this dir>/grammars` to build fully offline."
     };
-    fs8.writeFileSync(path36.join(outDir, "MANIFEST.json"), `${stableStringify(manifest, 2)}
+    fs8.writeFileSync(path37.join(outDir, "MANIFEST.json"), `${stableStringify(manifest, 2)}
 `);
     if (global.json) {
-      json({ out: path36.relative(root2, outDir), ...manifest });
+      json({ out: path37.relative(root2, outDir), ...manifest });
       return;
     }
-    info(`${c.cyan("vg bundle")} \xB7 wrote ${path36.relative(root2, outDir)}/`);
+    info(`${c.cyan("vg bundle")} \xB7 wrote ${path37.relative(root2, outDir)}/`);
     for (const i of included) info(`  ${c.green("\u2714")} ${i}`);
-    info(c.dim(`  offline: vg build --grammars "${path36.relative(root2, outDir)}/grammars"`));
+    info(c.dim(`  offline: vg build --grammars "${path37.relative(root2, outDir)}/grammars"`));
   });
   applyGlobalOptions(cmd);
 }
@@ -6591,7 +6662,7 @@ async function runDoctor(global) {
   const root2 = rootOf(global);
   const local = global.local === true;
   const graphPath = resolveGraphPath(root2, global.graph);
-  const configFile = CONFIG_BASENAMES.find((f) => fs8.existsSync(path36.join(root2, f))) ?? null;
+  const configFile = CONFIG_BASENAMES.find((f) => fs8.existsSync(path37.join(root2, f))) ?? null;
   const graph = loadGraph(root2, graphPath);
   let staleFiles = null;
   if (graph) {
@@ -6617,13 +6688,13 @@ async function runDoctor(global) {
     root: root2,
     configFile,
     map: {
-      path: path36.relative(root2, graphPath),
+      path: path37.relative(root2, graphPath),
       built: graph !== null,
       generatedAt: graph?.generatedAt ?? null,
       staleFiles
     },
     libCatalog: {
-      path: path36.relative(root2, catalogPath(root2)),
+      path: path37.relative(root2, catalogPath(root2)),
       present: fs8.existsSync(catalogPath(root2)),
       libraries: libCount
     },
@@ -6681,7 +6752,7 @@ async function runDoctor(global) {
   );
   info(
     `  host pool  ${li.hostPool.size} warm session(s)` + (li.hostPool.sessions[0] ? c.dim(
-      ` \xB7 last ${path36.basename(li.hostPool.sessions[0].modelPath)} kv=${li.hostPool.sessions[0].kvBlocks}`
+      ` \xB7 last ${path37.basename(li.hostPool.sessions[0].modelPath)} kv=${li.hostPool.sessions[0].kvBlocks}`
     ) : c.dim(" \xB7 none (load via vg code / vgd host-load)"))
   );
   if (li.dynamicOnToken || li.dynamicCustomSampler) {
@@ -6817,7 +6888,7 @@ function registerDaemon(program) {
   const register = cmd.command("register").description("register the current repository with a running vgd").argument("[root]", "repository root (default: cwd)").action(async function(rootArg) {
     const global = readGlobal(this);
     const socketPath = socketOf(this);
-    const root2 = path36.resolve(rootArg ?? rootOf(global));
+    const root2 = path37.resolve(rootArg ?? rootOf(global));
     if (!await vgdIsRunning({ socketPath })) {
       throw new CliError(`vgd is not running \u2014 start it with \`vg daemon start\` (${socketPath})`, ExitCode.NOT_FOUND);
     }
@@ -6853,11 +6924,11 @@ function registerDaemon(program) {
   const federation = cmd.command("federation").description("register a multi-root federation from .vibgrate/federation.json (or primary cwd)").argument("[root]", "primary repository root (default: cwd)").action(async function(rootArg) {
     const global = readGlobal(this);
     const socketPath = socketOf(this);
-    const primary = path36.resolve(rootArg ?? rootOf(global));
+    const primary = path37.resolve(rootArg ?? rootOf(global));
     if (!await vgdIsRunning({ socketPath })) {
       throw new CliError(`vgd is not running \u2014 start it with \`vg daemon start\` (${socketPath})`, ExitCode.NOT_FOUND);
     }
-    const { loadFederation } = await import('./federation-EPZDUWCK.js');
+    const { loadFederation } = await import('./federation-SZWZIFZ7.js');
     const fed = loadFederation(primary);
     if (!fed) throw new CliError(`could not load federation for ${primary}`, ExitCode.ERROR);
     const res = await vgdRequest(
@@ -6881,13 +6952,13 @@ function registerDaemon(program) {
   const publish = cmd.command("publish").description("load the workspace code map into vgd ActiveGraph (from global/legacy store)").argument("[root]", "repository root (default: cwd)").option("--git-ref <ref>", "branch or SHA (default: detect HEAD)").action(async function(rootArg) {
     const global = readGlobal(this);
     const socketPath = socketOf(this);
-    const root2 = path36.resolve(rootArg ?? rootOf(global));
+    const root2 = path37.resolve(rootArg ?? rootOf(global));
     if (!await vgdIsRunning({ socketPath })) {
       throw new CliError(`vgd is not running \u2014 start it with \`vg daemon ensure\` (${socketPath})`, ExitCode.NOT_FOUND);
     }
-    const { loadGraph: loadGraph2 } = await import('./load-OHVKDX4R.js');
-    const { detectGitRef } = await import('./git-ref-HPRLUFFW.js');
-    const { repositoryIdFromRoot } = await import('./paths-MCH75O3G.js');
+    const { loadGraph: loadGraph2 } = await import('./load-QPOWQD7C.js');
+    const { detectGitRef } = await import('./git-ref-XDXB6JP5.js');
+    const { repositoryIdFromRoot } = await import('./paths-2RAH3GME.js');
     const opts = this.opts();
     const graph = loadGraph2(root2, global.graph);
     if (!graph) {
@@ -7001,7 +7072,7 @@ function socketOf(cmd) {
   let c2 = cmd;
   while (c2) {
     const opts = c2.opts();
-    if (opts.socket) return path36.resolve(opts.socket);
+    if (opts.socket) return path37.resolve(opts.socket);
     c2 = c2.parent;
   }
   return vgdSocketPath();
@@ -7025,7 +7096,7 @@ function sleep(ms) {
   return new Promise((r) => setTimeout(r, ms));
 }
 async function repositoryIdForCwd(socketPath, root2) {
-  const { repositoryIdFromRoot } = await import('./paths-MCH75O3G.js');
+  const { repositoryIdFromRoot } = await import('./paths-2RAH3GME.js');
   const reg = await vgdRequest({ op: "register", root: root2 }, { socketPath });
   if (reg.ok && "workspace" in reg) return reg.workspace.id;
   return repositoryIdFromRoot(root2);
@@ -7218,11 +7289,11 @@ function registerLlmHost(program) {
   applyGlobalOptions(cmd);
 }
 var initCommand = new Command("init").description("Initialize vibgrate in a project").argument("[path]", "Path to initialize", ".").option("--baseline", "Create initial baseline after init").option("--yes", "Skip confirmation prompts").action(async (targetPath, opts) => {
-  const rootDir = path36.resolve(targetPath);
-  const vibgrateDir2 = path36.join(rootDir, ".vibgrate");
+  const rootDir = path37.resolve(targetPath);
+  const vibgrateDir2 = path37.join(rootDir, ".vibgrate");
   await ensureDir(vibgrateDir2);
   console.log(chalk7.green("\u2714") + ` Created ${chalk7.bold(".vibgrate/")} directory`);
-  const configPath = path36.join(rootDir, "vibgrate.config.ts");
+  const configPath = path37.join(rootDir, "vibgrate.config.ts");
   if (await pathExists(configPath)) {
     console.log(chalk7.dim("  vibgrate.config.ts already exists, skipping"));
   } else {
@@ -7230,7 +7301,7 @@ var initCommand = new Command("init").description("Initialize vibgrate in a proj
     console.log(chalk7.green("\u2714") + ` Created ${chalk7.bold("vibgrate.config.ts")}`);
   }
   if (opts.baseline) {
-    const { runBaseline } = await import('./baseline-K7YBFKZI.js');
+    const { runBaseline } = await import('./baseline-ATM5MXBZ.js');
     await runBaseline(rootDir);
   }
   console.log("");
@@ -7333,7 +7404,7 @@ function collectPackageImports(graph, ecosystem, pkg) {
   };
 }
 async function fileReferencesIdentifier(rootDir, relFile, identifier, readFile3) {
-  const content = await readFile3(path36.join(rootDir, relFile));
+  const content = await readFile3(path37.join(rootDir, relFile));
   if (!content) return false;
   const escaped = identifier.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   return new RegExp(`\\b${escaped}\\b`).test(content);
@@ -7527,7 +7598,7 @@ var AI_ASSISTANT_DETECTORS = [
 async function detectAiAssistant(rootDir) {
   for (const detector of AI_ASSISTANT_DETECTORS) {
     for (const file of detector.files) {
-      if (await pathExists$1(path36.join(rootDir, file))) {
+      if (await pathExists$1(path37.join(rootDir, file))) {
         return detector.name;
       }
     }
@@ -7720,7 +7791,7 @@ var scanCommand = new Command("scan").description("Scan a project for upgrade dr
   collectExcludes,
   []
 ).option("--concurrency <n>", "Max concurrent npm calls", "8").option("--push", "Auto-push results to Vibgrate API after scan").option("--dsn <dsn>", "DSN token for push (or use VIBGRATE_DSN env)").option("--region <region>", "Override data residency region for push (us, eu)").option("--strict", "Fail on push errors").option("--ui-purpose", "Enable optional UI purpose evidence extraction (slower)").option("--no-local-artifacts", "Do not write .vibgrate JSON artifacts to disk").option("--max-privacy", "Enable strongest privacy mode (minimal scanners, no local artifacts)").option("--offline", "Run without network calls; do not upload results").option("--full", "Comprehensive scan: turns on known-vulnerability detection (= --vulns) and, when a standards policy exists, a banned-dependency report \u2014 on top of drift scoring and the code map").option("--vulns", "Also scan installed dependencies for known vulnerabilities (OSV online, or advisories from --package-manifest when offline)").option("--package-manifest <file>", "Use local package-version manifest JSON/ZIP (for offline mode)").option("--project-scan-timeout <seconds>", "Per-project scan timeout in seconds (default: 180)").option("--drift-budget <score>", "Fail if DriftScore is above budget (0-100)").option("--drift-worsening <percent>", "Fail if drift worsens by more than % since baseline").option("--repository-name <name>", "Override the repository name recorded for this scan (defaults to the directory or package.json name)").option("--force", "Always create a fresh scan ingest, even if the repository is unchanged since the last scan (skips the unchanged/reuse optimization). Used by scheduled and dashboard-triggered scans.").option("--no-graph", "Skip building the local code map (the AI/docs index) that scan produces after scoring drift").option("--quiet", "Suppress promotional output (the free-plan tracking panel and the AI Context install prompt); scan results are unaffected").action(async (targetPath, opts) => {
-  const rootDir = path36.resolve(targetPath);
+  const rootDir = path37.resolve(targetPath);
   if (!await pathExists$1(rootDir)) {
     console.error(chalk7.red(`Path does not exist: ${rootDir}`));
     process.exit(1);
@@ -7728,7 +7799,7 @@ var scanCommand = new Command("scan").description("Scan a project for upgrade dr
   const hasDsn = !!resolveDsn(opts.dsn);
   const willPush = !opts.offline && (opts.push || hasDsn);
   const noLocalArtifacts = opts.localArtifacts === false;
-  const isFirstRun = !await pathExists$1(path36.join(rootDir, ".vibgrate", "scan_result.json"));
+  const isFirstRun = !await pathExists$1(path37.join(rootDir, ".vibgrate", "scan_result.json"));
   let pinnedRegion;
   let planTier;
   let upgradeUrl;
@@ -8007,11 +8078,11 @@ function scanStaleness(rootDir, artifactPath) {
       scanned++;
       if (scanned > MAX_ENTRIES) break;
       if (e.isDirectory()) {
-        if (!SKIP_DIRS2.has(e.name) && !e.name.startsWith(".")) walk2(path36.join(dir, e.name), depth + 1);
+        if (!SKIP_DIRS2.has(e.name) && !e.name.startsWith(".")) walk2(path37.join(dir, e.name), depth + 1);
         continue;
       }
       if (!WATCHED_FILES.has(e.name) && !WATCHED_EXT.test(e.name)) continue;
-      const abs = path36.join(dir, e.name);
+      const abs = path37.join(dir, e.name);
       let mtimeMs;
       try {
         mtimeMs = fs8.statSync(abs).mtimeMs;
@@ -8020,7 +8091,7 @@ function scanStaleness(rootDir, artifactPath) {
       }
       if (mtimeMs > newest) {
         newest = mtimeMs;
-        newestChanged = path36.relative(rootDir, abs) || e.name;
+        newestChanged = path37.relative(rootDir, abs) || e.name;
       }
     }
   };
@@ -8157,13 +8228,13 @@ function analyzeTree(root2, packages) {
       if (filesSeen >= MAX_FILES) return;
       if (entry.isDirectory()) {
         if (SKIP_DIRS3.has(entry.name) || entry.name.startsWith(".")) continue;
-        walk2(path36.join(dir, entry.name), depth + 1);
+        walk2(path37.join(dir, entry.name), depth + 1);
         continue;
       }
-      const fileEco = EXT_ECOSYSTEM[path36.extname(entry.name)];
+      const fileEco = EXT_ECOSYSTEM[path37.extname(entry.name)];
       if (!fileEco || fileEco === "unknown") continue;
       filesSeen++;
-      const full = path36.join(dir, entry.name);
+      const full = path37.join(dir, entry.name);
       let content;
       try {
         if (fs8.statSync(full).size > MAX_FILE_BYTES2) continue;
@@ -8386,16 +8457,16 @@ function estimateDriftScore(artifact, upgraded) {
     const buckets = p.dependencyAgeBuckets;
     for (const dep of p.dependencies ?? []) {
       if (!upgraded.has(dep.package)) continue;
-      const mb3 = dep.majorsBehind ?? 0;
+      const mb2 = dep.majorsBehind ?? 0;
       dep.majorsBehind = 0;
       dep.drift = "current";
       if (dep.libyears != null) dep.libyears = 0;
       if (dep.ageDays != null) dep.ageDays = 0;
       if (dep.latestStable) dep.resolvedVersion = dep.latestStable;
-      if (mb3 >= 2 && buckets.twoPlusBehind > 0) {
+      if (mb2 >= 2 && buckets.twoPlusBehind > 0) {
         buckets.twoPlusBehind--;
         buckets.current++;
-      } else if (mb3 === 1 && buckets.oneBehind > 0) {
+      } else if (mb2 === 1 && buckets.oneBehind > 0) {
         buckets.oneBehind--;
         buckets.current++;
       }
@@ -8478,7 +8549,7 @@ function applyPlan(rootDir, upgrades, opts = {}) {
     }
     const outcomes = effective.map((t) => {
       const c2 = pmCommandFor(u.ecosystem, u.package, u.to, opts.packageManager, { workspaceRoot: t.isWorkspaceRoot });
-      return { t, res: run(c2, path36.join(rootDir, t.dir)) };
+      return { t, res: run(c2, path37.join(rootDir, t.dir)) };
     });
     const failures = outcomes.filter((o) => !o.res.ok);
     if (failures.length === 0) {
@@ -8507,8 +8578,8 @@ function applyPlan(rootDir, upgrades, opts = {}) {
   return results;
 }
 var REGISTRY_URL = "https://registry.npmjs.org/@vibgrate%2fcli/latest";
-var CACHE_DIR = path36.join(os.homedir(), ".vibgrate");
-var CACHE_FILE = path36.join(CACHE_DIR, "update-check.json");
+var CACHE_DIR = path37.join(os.homedir(), ".vibgrate");
+var CACHE_FILE = path37.join(CACHE_DIR, "update-check.json");
 async function fetchLatestVersion() {
   try {
     const controller = new AbortController();
@@ -8577,14 +8648,14 @@ async function findGlobalInstall(pkg = PACKAGE_NAME, run = defaultRunner) {
       pm: "yarn",
       root: () => {
         const dir = tryRun("yarn global dir");
-        return dir ? path36.join(dir, "node_modules") : null;
+        return dir ? path37.join(dir, "node_modules") : null;
       }
     },
-    { pm: "bun", root: () => path36.join(os.homedir(), ".bun", "install", "global", "node_modules") }
+    { pm: "bun", root: () => path37.join(os.homedir(), ".bun", "install", "global", "node_modules") }
   ];
   for (const probe of probes) {
     const root2 = probe.root();
-    if (root2 && await pathExists(path36.join(root2, pkg))) return probe.pm;
+    if (root2 && await pathExists(path37.join(root2, pkg))) return probe.pm;
   }
   return null;
 }
@@ -8603,15 +8674,15 @@ function getGlobalUpdateCommand(pm, pkg, version) {
   }
 }
 async function detectPackageManager(cwd) {
-  if (await pathExists(path36.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (await pathExists(path36.join(cwd, "bun.lockb"))) return "bun";
-  if (await pathExists(path36.join(cwd, "yarn.lock"))) return "yarn";
+  if (await pathExists(path37.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (await pathExists(path37.join(cwd, "bun.lockb"))) return "bun";
+  if (await pathExists(path37.join(cwd, "yarn.lock"))) return "yarn";
   return "npm";
 }
 async function detectWorkspaceRoot(cwd) {
-  if (await pathExists(path36.join(cwd, "pnpm-workspace.yaml"))) return true;
+  if (await pathExists(path37.join(cwd, "pnpm-workspace.yaml"))) return true;
   try {
-    const pkgPath = path36.join(cwd, "package.json");
+    const pkgPath = path37.join(cwd, "package.json");
     const raw = await (await import('fs/promises')).readFile(pkgPath, "utf-8");
     const pkg = JSON.parse(raw);
     return pkg.workspaces != null;
@@ -8636,7 +8707,7 @@ function getInstallCommand(pm, pkg, version, isDev, opts = {}) {
 }
 async function getLocalDependencyState(cwd, pkg = PACKAGE_NAME) {
   try {
-    const pkgPath = path36.join(cwd, "package.json");
+    const pkgPath = path37.join(cwd, "package.json");
     const raw = await (await import('fs/promises')).readFile(pkgPath, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed.devDependencies?.[pkg]) return "dev";
@@ -8648,11 +8719,11 @@ async function getLocalDependencyState(cwd, pkg = PACKAGE_NAME) {
 async function confirmWorkspaceRoot(pm) {
   if (!(process.stdin.isTTY && process.stdout.isTTY)) return false;
   const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve19) => {
+  return new Promise((resolve20) => {
     rl.question(chalk7.yellow(`Update the ${pm} workspace root with -w? [y/N]: `), (ans) => {
       rl.close();
       const t = ans.trim().toLowerCase();
-      resolve19(t === "y" || t === "yes");
+      resolve20(t === "y" || t === "yes");
     });
   });
 }
@@ -8784,13 +8855,13 @@ function collectCandidates(artifact) {
   return out2;
 }
 var defaultFixScanner = async (rootDir) => {
-  const scratch = path36.join(os.tmpdir(), `vg-fix-scan-${process.pid}.json`);
+  const scratch = path37.join(os.tmpdir(), `vg-fix-scan-${process.pid}.json`);
   const scanOpts = { vibgrateVersion: VERSION, format: "json", out: scratch, quiet: true, concurrency: 8 };
   const advanced = await loadAdvancedScanHook();
   return runCoreScan(rootDir, scanOpts, advanced);
 };
 async function loadArtifact(rootDir, inFile, scan = defaultFixScanner) {
-  const artifactPath = path36.isAbsolute(inFile) ? inFile : path36.join(rootDir, inFile);
+  const artifactPath = path37.isAbsolute(inFile) ? inFile : path37.join(rootDir, inFile);
   if (await pathExists(artifactPath)) {
     const staleness = scanStaleness(rootDir, artifactPath);
     if (!staleness.stale) {
@@ -8817,7 +8888,7 @@ async function repositoryIdentity(rootDir, override) {
   }
 }
 var fixCommand = new Command("fix").description("Get ranked, risk-tiered upgrade plans from the hosted planner and optionally apply them (prompts before changing files; --yes applies non-interactively, --dry-run previews, --no-apply only prints). Requires login/DSN.").argument("[path]", "Path to analyse", ".").option("--in <file>", "Scan artifact to read", ".vibgrate/scan_result.json").option("--format <format>", "Output format (text|json|md)", "text").option("--dsn <dsn>", 'DSN token (or use VIBGRATE_DSN env / "vg login")').option("--region <region>", "Override data residency region (us, eu)").option("--repository-name <name>", "Override the repository name recorded for this plan").option("--plan <tier>", "Apply a specific plan non-interactively (safe|balanced|aggressive)").option("--yes", "Apply the recommended plan without prompting").option("--dry-run", "Show what would change without applying").option("--no-apply", "Only print the plans; never modify the project").option("--fail-on-vulns <severity>", "Exit non-zero if the recommended plan leaves an advisory at/above this severity unresolved (low|moderate|high|critical)").action(async (targetPath, opts) => {
-  const rootDir = path36.resolve(targetPath);
+  const rootDir = path37.resolve(targetPath);
   if (!await pathExists(rootDir)) {
     console.error(chalk7.red(`Path does not exist: ${rootDir}`));
     process.exit(1);
@@ -8978,7 +9049,7 @@ function emit(report, format) {
   }
 }
 function relProjectDir(rootDir, projectPath) {
-  const rel = path36.isAbsolute(projectPath) ? path36.relative(rootDir, projectPath) : projectPath;
+  const rel = path37.isAbsolute(projectPath) ? path37.relative(rootDir, projectPath) : projectPath;
   return rel === "" ? "." : rel;
 }
 async function buildTargetResolver(rootDir, artifact) {
@@ -9019,14 +9090,14 @@ function promptPlanSelection(response) {
   const defaultIdx = plans.findIndex((p) => p.tier === response.recommended);
   const def = defaultIdx >= 0 ? defaultIdx + 1 : 1;
   const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
-  return new Promise((resolve19) => {
+  return new Promise((resolve20) => {
     rl.question(`Plan [1-${plans.length}, default ${def}, q to cancel]: `, (ans) => {
       rl.close();
       const t = ans.trim().toLowerCase();
-      if (t === "q" || t === "quit") return resolve19(null);
+      if (t === "q" || t === "quit") return resolve20(null);
       const n = t === "" ? def : Number.parseInt(t, 10);
-      if (!Number.isInteger(n) || n < 1 || n > plans.length) return resolve19(null);
-      resolve19(plans[n - 1].tier);
+      if (!Number.isInteger(n) || n < 1 || n > plans.length) return resolve20(null);
+      resolve20(plans[n - 1].tier);
     });
   });
 }
@@ -9813,7 +9884,7 @@ function formatMarkdown(artifact) {
 
 // src/reporting/commands/report.ts
 var reportCommand = new Command("report").description("Generate a drift report from a scan artifact").option("--in <file>", "Input artifact file", ".vibgrate/scan_result.json").option("--format <format>", "Output format (md|text|json)", "text").action(async (opts) => {
-  const artifactPath = path36.resolve(opts.in);
+  const artifactPath = path37.resolve(opts.in);
   if (!await pathExists(artifactPath)) {
     console.error(chalk7.red(`Artifact not found: ${artifactPath}`));
     console.error(chalk7.dim('Run "vibgrate scan" first to generate a scan artifact.'));
@@ -9859,10 +9930,10 @@ function openUrl(url) {
 }
 
 // src/reporting/commands/login.ts
-var delay = (ms) => new Promise((resolve19) => setTimeout(resolve19, ms));
+var delay = (ms) => new Promise((resolve20) => setTimeout(resolve20, ms));
 function isInside(dir, file) {
-  const rel = path36.relative(dir, file);
-  return !!rel && !rel.startsWith("..") && !path36.isAbsolute(rel);
+  const rel = path37.relative(dir, file);
+  return !!rel && !rel.startsWith("..") && !path37.isAbsolute(rel);
 }
 var loginCommand = new Command("login").description("Authenticate the CLI with your Vibgrate workspace via the browser").option("--ingest <url>", "Ingest API URL (overrides --region)").option("--region <region>", `Data residency region (${availableRegionIds().join(", ")})`, "us").option("--no-browser", "Do not attempt to open a browser automatically").option(
   "--local",
@@ -10117,7 +10188,7 @@ var vexCommand = new Command("vex").description("Generate an OpenVEX document (e
   try {
     const statements = [];
     if (opts.from) {
-      const fromPath = path36.resolve(opts.from);
+      const fromPath = path37.resolve(opts.from);
       if (!await pathExists(fromPath)) {
         process.stderr.write(chalk7.red(`Statements file not found: ${fromPath}
 `));
@@ -10135,9 +10206,9 @@ var vexCommand = new Command("vex").description("Generate an OpenVEX document (e
     });
     const json2 = JSON.stringify(doc, null, 2);
     if (opts.out) {
-      await writeTextFile(path36.resolve(opts.out), json2 + "\n");
+      await writeTextFile(path37.resolve(opts.out), json2 + "\n");
       process.stderr.write(
-        chalk7.green("\u2714") + ` Wrote OpenVEX document (${doc.statements.length} statement(s)) to ${path36.resolve(opts.out)}
+        chalk7.green("\u2714") + ` Wrote OpenVEX document (${doc.statements.length} statement(s)) to ${path37.resolve(opts.out)}
 `
       );
     } else {
@@ -10320,7 +10391,7 @@ function formatDeltaText(base, current) {
   return lines.join("\n");
 }
 async function readArtifactOrExit(filePath) {
-  const absolutePath = path36.resolve(filePath);
+  const absolutePath = path37.resolve(filePath);
   if (!await pathExists(absolutePath)) {
     console.error(chalk7.red(`Artifact not found: ${absolutePath}`));
     process.exit(1);
@@ -10337,7 +10408,7 @@ var exportCommand = new Command("export").description("Export scan artifact as S
   const sbom = format === "cyclonedx" ? toCycloneDx(artifact) : toSpdx(artifact);
   const body = JSON.stringify(sbom, null, 2);
   if (opts.out) {
-    await writeTextFile(path36.resolve(opts.out), body);
+    await writeTextFile(path37.resolve(opts.out), body);
     console.log(chalk7.green("\u2714") + ` SBOM written to ${opts.out}`);
   } else {
     console.log(body);
@@ -10348,7 +10419,7 @@ var deltaCommand = new Command("delta").description("Show SBOM delta between two
   const current = await readArtifactOrExit(opts.to);
   const report = formatDeltaText(base, current);
   if (opts.out) {
-    await writeTextFile(path36.resolve(opts.out), report);
+    await writeTextFile(path37.resolve(opts.out), report);
     console.log(chalk7.green("\u2714") + ` SBOM delta report written to ${opts.out}`);
   } else {
     console.log(report);
@@ -10479,20 +10550,20 @@ function resolveRegime(id) {
   return regime;
 }
 function evidenceDir(root2) {
-  return path36.join(root2, ".vibgrate", "evidence");
+  return path37.join(root2, ".vibgrate", "evidence");
 }
 function orgPath(root2) {
-  return path36.join(evidenceDir(root2), "org.json");
+  return path37.join(evidenceDir(root2), "org.json");
 }
 function productsPath(root2) {
-  return path36.join(evidenceDir(root2), "products.json");
+  return path37.join(evidenceDir(root2), "products.json");
 }
 function releasesDir(root2) {
-  return path36.join(evidenceDir(root2), "releases");
+  return path37.join(evidenceDir(root2), "releases");
 }
 function releasePath(root2, productId, version) {
   const safe = `${productId}@${version}`.replace(/[^A-Za-z0-9._@-]/g, "_");
-  return path36.join(releasesDir(root2), `${safe}.json`);
+  return path37.join(releasesDir(root2), `${safe}.json`);
 }
 var DEFAULT_ORG = {
   responsiblePersons: [],
@@ -10523,7 +10594,7 @@ async function freezeRelease(root2, release) {
   const p = releasePath(root2, release.productId, release.version);
   if (await pathExists(p)) {
     throw new CliError(
-      `release ${release.productId}@${release.version} is already frozen and manifests are immutable \u2014 delete ${path36.relative(root2, p)} only if it was frozen in error`,
+      `release ${release.productId}@${release.version} is already frozen and manifests are immutable \u2014 delete ${path37.relative(root2, p)} only if it was frozen in error`,
       ExitCode.USAGE_ERROR
     );
   }
@@ -10537,7 +10608,7 @@ async function loadReleases(root2, productId) {
   const files = (await readdir(dir)).filter((f) => f.endsWith(".json")).sort();
   const releases = [];
   for (const f of files) {
-    const rel = await readJsonFile(path36.join(dir, f));
+    const rel = await readJsonFile(path37.join(dir, f));
     if (!productId || rel.productId === productId) releases.push(rel);
   }
   return releases;
@@ -11232,12 +11303,12 @@ function verifyEvidenceEnvelope(env, opts = {}) {
 var DEFAULT_KEY = "attest-key.pem";
 function resolveSigningKey(root2, explicit) {
   const chosen = process.env.VG_ATTEST_KEY;
-  const keyPath = chosen ? path36.resolve(chosen) : path36.join(root2, ".vibgrate", DEFAULT_KEY);
+  const keyPath = chosen ? path37.resolve(chosen) : path37.join(root2, ".vibgrate", DEFAULT_KEY);
   let minted = false;
   if (!fs8.existsSync(keyPath)) {
     if (chosen) throw new CliError(`signing key not found: ${chosen}`, ExitCode.USAGE_ERROR);
     const kp = generateKeypair();
-    fs8.mkdirSync(path36.dirname(keyPath), { recursive: true });
+    fs8.mkdirSync(path37.dirname(keyPath), { recursive: true });
     fs8.writeFileSync(keyPath, kp.privatePem, { mode: 384 });
     fs8.writeFileSync(`${keyPath}.pub`, kp.publicPem);
     minted = true;
@@ -11255,16 +11326,16 @@ function resolveSigningKey(root2, explicit) {
 }
 function writeBundle(input) {
   const dir = input.outDir;
-  fs8.mkdirSync(path36.join(dir, "inputs", "releases"), { recursive: true });
-  const write = (rel, data) => fs8.writeFileSync(path36.join(dir, rel), `${JSON.stringify(data, null, 2)}
+  fs8.mkdirSync(path37.join(dir, "inputs", "releases"), { recursive: true });
+  const write = (rel, data) => fs8.writeFileSync(path37.join(dir, rel), `${JSON.stringify(data, null, 2)}
 `);
   write("result.json", input.result);
-  write(path36.join("inputs", "advisory.json"), input.advisory);
+  write(path37.join("inputs", "advisory.json"), input.advisory);
   for (const rel of input.releases) {
     const safe = `${rel.productId}@${rel.version}`.replace(/[^A-Za-z0-9._@-]/g, "_");
-    write(path36.join("inputs", "releases", `${safe}.json`), rel);
+    write(path37.join("inputs", "releases", `${safe}.json`), rel);
   }
-  write(path36.join("inputs", "datapack.lock"), { dataPackVersion: input.result.meta.dataPackVersion, kernelVersion: input.result.meta.kernelVersion });
+  write(path37.join("inputs", "datapack.lock"), { dataPackVersion: input.result.meta.dataPackVersion, kernelVersion: input.result.meta.kernelVersion });
   write("provenance.json", {
     method: "deterministic",
     modelDrafted: [],
@@ -11280,13 +11351,13 @@ function writeBundle(input) {
     disclaimer: input.regime.disclaimer
   });
   if (input.envelope) {
-    fs8.writeFileSync(path36.join(dir, "evidence.intoto.jsonl"), `${JSON.stringify(input.envelope)}
+    fs8.writeFileSync(path37.join(dir, "evidence.intoto.jsonl"), `${JSON.stringify(input.envelope)}
 `);
   }
   if (input.timestampToken) {
-    fs8.writeFileSync(path36.join(dir, "timestamp.tsr"), input.timestampToken);
+    fs8.writeFileSync(path37.join(dir, "timestamp.tsr"), input.timestampToken);
   }
-  fs8.writeFileSync(path36.join(dir, "VERIFY.md"), verifyDoc(input));
+  fs8.writeFileSync(path37.join(dir, "VERIFY.md"), verifyDoc(input));
   return dir;
 }
 function verifyDoc(input) {
@@ -11347,26 +11418,26 @@ function undeterminedFields(result, regime) {
   return gaps.filter((g) => regime.submission.requires.some((r) => g.startsWith(r)) || g.startsWith("exposure") || g.startsWith("member"));
 }
 async function recordDrill(root2, record) {
-  const dir = path36.join(evidenceDir(root2), "drills");
-  const p = path36.join(dir, `${record.drillId}.json`);
+  const dir = path37.join(evidenceDir(root2), "drills");
+  const p = path37.join(dir, `${record.drillId}.json`);
   await writeJsonFile(p, record);
   return p;
 }
 async function hasRecentDrill(root2, asOf) {
-  const dir = path36.join(evidenceDir(root2), "drills");
+  const dir = path37.join(evidenceDir(root2), "drills");
   if (!await pathExists(dir)) return void 0;
   const { readdir } = await import('fs/promises');
-  const { readJsonFile: readJsonFile2 } = await import('./fs-KCABDURV.js');
+  const { readJsonFile: readJsonFile2 } = await import('./fs-O5IQYXHO.js');
   const files = (await readdir(dir)).filter((f) => f.endsWith(".json"));
   if (files.length === 0) return void 0;
   const cutoff = new Date(new Date(asOf).getTime() - 90 * 24 * 3600 * 1e3).toISOString();
   for (const f of files) {
-    const rec = await readJsonFile2(path36.join(dir, f));
+    const rec = await readJsonFile2(path37.join(dir, f));
     if (rec.ranAt >= cutoff) return true;
   }
   return false;
 }
-function pad4(s, n) {
+function pad3(s, n) {
   return s.length >= n ? s : s + " ".repeat(n - s.length);
 }
 function formatExposure(result, regime) {
@@ -11383,13 +11454,13 @@ function formatExposure(result, regime) {
   }
   lines.push("");
   if (affected.length) {
-    lines.push("  " + chalk7.dim(pad4("Product", 22) + pad4("Shipped versions", 24) + pad4("Markets", 16) + "Support"));
+    lines.push("  " + chalk7.dim(pad3("Product", 22) + pad3("Shipped versions", 24) + pad3("Markets", 16) + "Support"));
     lines.push("  " + chalk7.dim("\u2500".repeat(74)));
     for (const p of affected) {
       const versions = p.affectedVersions.join(", ") || "\u2014";
       const markets = p.memberStates.join(" ") || "\u2014";
       const support = p.supportStatus === "in_support" ? chalk7.green("in support") : p.supportStatus === "expired" ? chalk7.yellow(p.supportDetail ?? "expired") : chalk7.dim("not declared");
-      lines.push("  " + pad4(p.productName, 22) + pad4(versions, 24) + pad4(markets, 16) + support);
+      lines.push("  " + pad3(p.productName, 22) + pad3(versions, 24) + pad3(markets, 16) + support);
     }
     lines.push("");
   }
@@ -11420,7 +11491,7 @@ function formatReadiness(report, regime) {
   lines.push("  " + chalk7.bold(`Readiness \u2014 ${regime.name}`) + `   ${chalk7.bold(String(report.score))}%  (${report.ready}/${report.assessable} ready)`);
   lines.push("");
   for (const item of report.items) {
-    lines.push("  " + mark(item) + " " + pad4(item.label, 52) + "  " + chalk7.dim(item.detail));
+    lines.push("  " + mark(item) + " " + pad3(item.label, 52) + "  " + chalk7.dim(item.detail));
     if (item.status === "gap" && item.fix) lines.push("      " + chalk7.dim("fix: ") + chalk7.cyan(item.fix));
   }
   lines.push("");
@@ -11431,7 +11502,7 @@ function formatRegimeList() {
   const lines = ["  " + chalk7.bold("Available regimes")];
   lines.push("");
   for (const r of listRegimes()) {
-    lines.push("  " + chalk7.cyan(pad4(r.id, 16)) + r.name + chalk7.dim(`  (${r.jurisdiction})`));
+    lines.push("  " + chalk7.cyan(pad3(r.id, 16)) + r.name + chalk7.dim(`  (${r.jurisdiction})`));
     const clocks = r.clocks.map((c2) => `${c2.stage} ${c2.within}`).join(" \xB7 ");
     lines.push("    " + chalk7.dim(clocks));
     lines.push("    " + chalk7.dim(`submission: ${r.submission.target}${r.submission.api ? "" : " \u2014 manual (no API)"}`));
@@ -11441,7 +11512,7 @@ function formatRegimeList() {
 
 // src/reporting/commands/evidence/index.ts
 function root(opts) {
-  return path36.resolve(opts.cwd ?? process.cwd());
+  return path37.resolve(opts.cwd ?? process.cwd());
 }
 function slug(name) {
   return name.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "product";
@@ -11529,7 +11600,7 @@ var releaseCmd = new Command("release").description("Freeze a shipped release in
   const release = await buildRelease({
     productId: product.id,
     version,
-    from: path36.resolve(rootDir, opts.from),
+    from: path37.resolve(rootDir, opts.from),
     shipDate: opts.shipDate,
     buildId: opts.buildId,
     artefactDigest: opts.digest,
@@ -11537,7 +11608,7 @@ var releaseCmd = new Command("release").description("Freeze a shipped release in
     frozenAt: nowIso()
   });
   const p = await freezeRelease(rootDir, release);
-  console.log(chalk7.green("\u2714") + ` froze ${chalk7.bold(`${product.id}@${version}`)} \u2014 ${release.components.length} components, immutable at ${path36.relative(rootDir, p)}`);
+  console.log(chalk7.green("\u2714") + ` froze ${chalk7.bold(`${product.id}@${version}`)} \u2014 ${release.components.length} components, immutable at ${path37.relative(rootDir, p)}`);
 });
 async function runExposure(rootDir, vuln, opts) {
   const org = await loadOrg(rootDir);
@@ -11589,7 +11660,7 @@ var exposureCmd = new Command("exposure").description("Which shipped products co
     console.log("\n" + buildPack(result, regime, org, stage));
   }
   if (opts.bundle) {
-    const dir = path36.resolve(rootDir, opts.bundle, `evidence-${result.meta.evidenceId}`);
+    const dir = path37.resolve(rootDir, opts.bundle, `evidence-${result.meta.evidenceId}`);
     let envelope;
     if (opts.sign !== false) {
       const { key: key2, minted } = resolveSigningKey(rootDir);
@@ -11597,7 +11668,7 @@ var exposureCmd = new Command("exposure").description("Which shipped products co
       envelope = signEvidenceStatement(buildEvidenceStatement(result, VERSION), key2);
     }
     writeBundle({ outDir: dir, result, advisory, releases, regime, envelope, timestampToken, cliVersion: VERSION });
-    console.error(chalk7.green("\u2714") + ` evidence bundle written to ${path36.relative(rootDir, dir)}${envelope ? " (signed)" : " (unsigned)"}${timestampToken ? " \xB7 RFC 3161" : ""}`);
+    console.error(chalk7.green("\u2714") + ` evidence bundle written to ${path37.relative(rootDir, dir)}${envelope ? " (signed)" : " (unsigned)"}${timestampToken ? " \xB7 RFC 3161" : ""}`);
   }
   process.exitCode = exposureExit(result.overallStatus);
 });
@@ -11629,7 +11700,7 @@ var packCmd = new Command("pack").description("Build the submission pack a human
   const stage = opts.stage ?? regime.clocks[0]?.stage ?? "early-warning";
   const md = buildPack(result, regime, org, stage);
   if (opts.out) {
-    fs8.writeFileSync(path36.resolve(rootDir, opts.out), md);
+    fs8.writeFileSync(path37.resolve(rootDir, opts.out), md);
     console.error(chalk7.green("\u2714") + ` pack written to ${opts.out}`);
   } else {
     console.log(md);
@@ -11671,18 +11742,18 @@ var drillCmd = new Command("drill").description("Timed dry-run of the determinat
   }
 });
 var verifyCmd = new Command("verify").description("Verify an evidence bundle offline (no Vibgrate needed)").argument("<bundle>", "Path to an evidence bundle directory or evidence.intoto.jsonl").option("--pub <file>", "Public key PEM to pin the signer (establish trust)").action((bundlePath, opts) => {
-  const abs = path36.resolve(bundlePath);
-  const envPath = fs8.statSync(abs).isDirectory() ? path36.join(abs, "evidence.intoto.jsonl") : abs;
+  const abs = path37.resolve(bundlePath);
+  const envPath = fs8.statSync(abs).isDirectory() ? path37.join(abs, "evidence.intoto.jsonl") : abs;
   if (!fs8.existsSync(envPath)) throw new CliError(`no evidence.intoto.jsonl at ${bundlePath}`, ExitCode.NOT_FOUND);
   const envelope = JSON.parse(fs8.readFileSync(envPath, "utf8").trim().split("\n")[0]);
-  const resultPath = path36.join(path36.dirname(envPath), "result.json");
+  const resultPath = path37.join(path37.dirname(envPath), "result.json");
   const result = fs8.existsSync(resultPath) ? JSON.parse(fs8.readFileSync(resultPath, "utf8")) : void 0;
-  const publicKeyPem = opts.pub ? fs8.readFileSync(path36.resolve(opts.pub), "utf8") : void 0;
+  const publicKeyPem = opts.pub ? fs8.readFileSync(path37.resolve(opts.pub), "utf8") : void 0;
   const v = verifyEvidenceEnvelope(envelope, { publicKeyPem, result });
   const color = v.status === "verified" ? chalk7.green : v.status === "failed" ? chalk7.red : chalk7.yellow;
   console.log("  " + color(v.status.toUpperCase()) + `  ${v.reason}`);
   if (v.evidenceId) console.log("  " + chalk7.dim(`evidence ${v.evidenceId} \xB7 regime ${v.regime} \xB7 advisory ${v.advisoryId} \xB7 ${v.overallStatus}`));
-  const tsrPath = path36.join(path36.dirname(envPath), "timestamp.tsr");
+  const tsrPath = path37.join(path37.dirname(envPath), "timestamp.tsr");
   if (fs8.existsSync(tsrPath) && result) {
     const t = verifyTimestamp(fs8.readFileSync(tsrPath), exposureSubjectDigest(result));
     const tcolor = t.imprintMatches ? chalk7.green : chalk7.red;
@@ -11751,12 +11822,12 @@ var exportCmd = new Command("export").description("Air-gap bundle of all evidenc
   const releases = [];
   for (const list of releasesByProduct.values()) releases.push(...list);
   const report = computeReadiness({ regime, org, products, releasesByProduct, recentDrill: await hasRecentDrill(rootDir, today()) });
-  const dir = path36.resolve(rootDir, opts.out);
-  await writeJsonFile(path36.join(dir, "org.json"), org);
-  await writeJsonFile(path36.join(dir, "products.json"), products);
-  for (const r of releases) await writeJsonFile(path36.join(dir, "releases", `${r.productId}@${r.version}.json`.replace(/[^A-Za-z0-9._@-]/g, "_")), r);
-  await writeJsonFile(path36.join(dir, "readiness.json"), report);
-  console.error(chalk7.green("\u2714") + ` exported evidence state to ${path36.relative(rootDir, dir)} (${products.length} products, ${releases.length} frozen releases)`);
+  const dir = path37.resolve(rootDir, opts.out);
+  await writeJsonFile(path37.join(dir, "org.json"), org);
+  await writeJsonFile(path37.join(dir, "products.json"), products);
+  for (const r of releases) await writeJsonFile(path37.join(dir, "releases", `${r.productId}@${r.version}.json`.replace(/[^A-Za-z0-9._@-]/g, "_")), r);
+  await writeJsonFile(path37.join(dir, "readiness.json"), report);
+  console.error(chalk7.green("\u2714") + ` exported evidence state to ${path37.relative(rootDir, dir)} (${products.length} products, ${releases.length} frozen releases)`);
 });
 var pushCmd = new Command("push").description("Push the product registry (and an optional exposure result) to Vibgrate Cloud").option(...cwdOption).option("--dsn <dsn>", "DSN token (or use VIBGRATE_DSN env / `vg login`)").option("--regime <id>", "Reporting regime").option("--result <file>", "An exposure result.json (or a bundle dir) to include").option("--signed", "Mark the included exposure result as signed").option("--strict", "Fail on push errors").action(async (opts) => {
   const rootDir = root(opts);
@@ -11782,8 +11853,8 @@ var pushCmd = new Command("push").description("Push the product registry (and an
   }));
   let exposure;
   if (opts.result) {
-    const raw = path36.resolve(rootDir, opts.result);
-    const resultPath = fs8.existsSync(raw) && fs8.statSync(raw).isDirectory() ? path36.join(raw, "result.json") : raw;
+    const raw = path37.resolve(rootDir, opts.result);
+    const resultPath = fs8.existsSync(raw) && fs8.statSync(raw).isDirectory() ? path37.join(raw, "result.json") : raw;
     if (!fs8.existsSync(resultPath)) throw new CliError(`no result.json at ${opts.result}`, ExitCode.NOT_FOUND);
     exposure = JSON.parse(fs8.readFileSync(resultPath, "utf8"));
   }
@@ -11849,7 +11920,7 @@ var KNOWN_COMMANDS = /* @__PURE__ */ new Set([
   "install",
   "uninstall",
   "share",
-  "benchmark",
+  "watch",
   "help",
   // Drift-reporting verbs (merged from the Vibgrate CLI).
   "init",
@@ -11890,7 +11961,7 @@ ${aliasNote}Docs: https://vibgrate.com/help`;
   registerLsp(program);
   registerInstall(program);
   registerShare(program);
-  registerBenchmark(program);
+  registerWatch(program);
   registerTests(program);
   registerFacts(program);
   registerGuide(program);
@@ -11975,7 +12046,7 @@ function dispatch(argv, cwd) {
   }
   const looksLikeQuestion = /\s/.test(first) || first.endsWith("?");
   if (looksLikeQuestion) return ["ask", ...args];
-  if (fs8.existsSync(path36.resolve(cwd, first))) {
+  if (fs8.existsSync(path37.resolve(cwd, first))) {
     return [hasBuildOnlyFlag(args) ? "build" : "scan", ...args];
   }
   const moved = MOVED_COMMANDS[first];
@@ -12020,9 +12091,9 @@ async function main(argv = process.argv) {
 }
 function readCwd(raw) {
   const i = raw.findIndex((a) => a === "-C" || a === "--cwd");
-  if (i >= 0 && raw[i + 1]) return path36.resolve(raw[i + 1]);
+  if (i >= 0 && raw[i + 1]) return path37.resolve(raw[i + 1]);
   const eq = raw.find((a) => a.startsWith("--cwd="));
-  if (eq) return path36.resolve(eq.slice("--cwd=".length));
+  if (eq) return path37.resolve(eq.slice("--cwd=".length));
   return process.cwd();
 }
 function handleError(err) {