@vibgrate/cli 2026.727.3 → 2026.728.2

package/dist/{chunk-MAY5HLDH.js → chunk-GQTWDKMJ.js}

@@ -1,16 +1,16 @@
-import { resolveVersion, resolveLib, loadCatalog, driftFor, localPackageDocs, readDoc, inventory, localApiSurface, edgeId, buildModuleResolver, resolve, applyStaticTestLinkage, nodeId } from './chunk-6JIKUDWM.js';
-import { loadConfig, computeUpgradeImpact, getChangelogSignals, gitHistoryAvailable, buildVersionTimelines, findPackageTimeline, severityRank, projectTypeToVulnEcosystem, VERSION } from './chunk-Y23HMSWU.js';
+import { resolveVersion, resolveLib, loadCatalog, driftFor, localPackageDocs, readDoc, inventory, localApiSurface, edgeId, buildModuleResolver, resolve, applyStaticTestLinkage, nodeId } from './chunk-6AXHLQBV.js';
+import { loadConfig, computeUpgradeImpact, getChangelogSignals, gitHistoryAvailable, buildVersionTimelines, findPackageTimeline, severityRank, projectTypeToVulnEcosystem, VERSION } from './chunk-ZFTFCM7B.js';
 import { writeTextFile, pathExists, readJsonFile } from './chunk-CRAMOEBE.js';
 import { resolveOne, findNodes } from './chunk-J7LKEB2R.js';
-import { discoverModels } from './chunk-OOIG3RUM.js';
 import { impactOf, indexFor, withTimeout, getNodeEmbeddings, queryGraphSemantic, queryGraph, loadEmbedder, isModelReady, acquireLock, releaseLock } from './chunk-6UK6QPTR.js';
+import { discoverModels } from './chunk-3SDV6ADQ.js';
+import { whichOnPath, isInstalledOwnBinary } from './chunk-UZJS7GMK.js';
 import { langById, grammarSetVersion, langForExtension, setGrammarsOverride, parseSource } from './chunk-ON25BX6T.js';
 import { redactSecrets } from './chunk-RXP66R2E.js';
 import { writeGraphIndex, SCHEMA_VERSION, loadGraph, ensureVibgrateGitignore, vibgrateDir, writeArtifacts } from './chunk-B3YUO3NW.js';
 import { cacheDir, loadCache, serializeGraph, stableStringify } from './chunk-ZKNB4YH4.js';
 import { shortId, canonicalize, hashString, hashBytes } from './chunk-JFGYT6BI.js';
-import * as fs18 from 'fs';
-import { spawnSync, execFileSync } from 'child_process';
+import * as fs17 from 'fs';
 import * as path19 from 'path';
 import ignore from 'ignore';
 import * as v8 from 'v8';
@@ -22,7 +22,7 @@ import louvain from 'graphology-communities-louvain';
 import * as os from 'os';
 import { fileURLToPath } from 'url';
 import ts from 'typescript';
-import * as fs8 from 'fs/promises';
+import * as fs7 from 'fs/promises';
 import { bidirectional } from 'graphology-shortest-path/unweighted.js';
 import * as crypto from 'crypto';
 import { createHash } from 'crypto';
@@ -30,58 +30,10 @@ import { Command } from 'commander';
 import chalk from 'chalk';
 import * as zlib from 'zlib';
 import { promisify } from 'util';
+import { spawnSync } from 'child_process';
 import { Worker } from 'worker_threads';
 import { encode, decode } from 'gpt-tokenizer/encoding/cl100k_base';
 
-var NPX_INVOCATION = "npx @vibgrate/cli";
-function whichOnPath(cmd) {
-  try {
-    const out = execFileSync(process.platform === "win32" ? "where" : "which", [cmd], {
-      encoding: "utf8",
-      stdio: ["ignore", "pipe", "ignore"]
-    }).trim().split(/\r?\n/)[0];
-    return out || null;
-  } catch {
-    return null;
-  }
-}
-function isOwnBinary(binPath) {
-  try {
-    const real = fs18.realpathSync(binPath);
-    if (/[\\/]@vibgrate[\\/]cli[\\/]/.test(real)) return true;
-    const head = fs18.readFileSync(real, { encoding: "utf8" }).slice(0, 2048);
-    return head.includes("@vibgrate/cli") || head.includes("vibgrate");
-  } catch {
-    return false;
-  }
-}
-function isEphemeralNpxBinary(binPath) {
-  const NPX_SEGMENT = /[\\/]_npx[\\/]/;
-  if (NPX_SEGMENT.test(binPath)) return true;
-  try {
-    return NPX_SEGMENT.test(fs18.realpathSync(binPath));
-  } catch {
-    return false;
-  }
-}
-function isInstalledOwnBinary(binPath) {
-  return isOwnBinary(binPath) && !isEphemeralNpxBinary(binPath);
-}
-var cached;
-function resolveCliInvocation(which) {
-  if (!which && cached !== void 0) return cached;
-  const lookup = which ?? whichOnPath;
-  const vg = lookup("vg");
-  let result;
-  if (vg && isInstalledOwnBinary(vg)) {
-    result = "vg";
-  } else {
-    const vibgrate = lookup("vibgrate");
-    result = vibgrate && isInstalledOwnBinary(vibgrate) ? "vibgrate" : NPX_INVOCATION;
-  }
-  if (!which) cached = result;
-  return result;
-}
 var SKIP_DIRS = /* @__PURE__ */ new Set([
   // Version control, IDE & tool metadata
   ".git",
@@ -241,8 +193,8 @@ function toPosix(p) {
 function buildRootIgnore(root, exclude) {
   const ig = ignore();
   const gitignorePath = path19.join(root, ".gitignore");
-  if (fs18.existsSync(gitignorePath)) {
-    ig.add(fs18.readFileSync(gitignorePath, "utf8"));
+  if (fs17.existsSync(gitignorePath)) {
+    ig.add(fs17.readFileSync(gitignorePath, "utf8"));
   }
   if (exclude.length) ig.add(exclude);
   return ig;
@@ -257,7 +209,7 @@ function discover(options) {
     }
   }
   const rootIg = buildRootIgnore(root, options.exclude ?? []);
-  const scopeAbs = (options.paths && options.paths.length ? options.paths.map((p) => path19.resolve(root, p)) : [root]).filter((p) => fs18.existsSync(p));
+  const scopeAbs = (options.paths && options.paths.length ? options.paths.map((p) => path19.resolve(root, p)) : [root]).filter((p) => fs17.existsSync(p));
   const found = /* @__PURE__ */ new Map();
   const considerFile = (abs) => {
     const rel2 = toPosix(path19.relative(root, abs));
@@ -271,7 +223,7 @@ function discover(options) {
   const walk = (dir) => {
     let entries;
     try {
-      entries = fs18.readdirSync(dir, { withFileTypes: true });
+      entries = fs17.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -288,7 +240,7 @@ function discover(options) {
     }
   };
   for (const scope of scopeAbs) {
-    const stat = fs18.statSync(scope);
+    const stat = fs17.statSync(scope);
     if (stat.isDirectory()) walk(scope);
     else if (stat.isFile()) considerFile(scope);
   }
@@ -772,12 +724,12 @@ function loadCoverage(root, explicit) {
   const candidates = (explicit && explicit.length ? explicit : DEFAULT_PATHS).map(
     (p) => path19.resolve(root, p)
   );
-  const found = candidates.filter((p) => fs18.existsSync(p));
+  const found = candidates.filter((p) => fs17.existsSync(p));
   if (found.length === 0) return null;
   const map = /* @__PURE__ */ new Map();
   for (const file of found) {
     try {
-      const text = fs18.readFileSync(file, "utf8");
+      const text = fs17.readFileSync(file, "utf8");
       if (file.endsWith(".json")) mergeIstanbul(map, text, root);
       else mergeLcov(map, text, root);
     } catch {
@@ -1094,7 +1046,7 @@ async function parseInline(files, options) {
   onProgress?.(0, files.length);
   for (const file of files) {
     try {
-      const source = fs18.readFileSync(file.abs, "utf8");
+      const source = fs17.readFileSync(file.abs, "utf8");
       out.push(await parseSource(file.rel, file.lang.id, source));
     } catch (err) {
       out.push(emptyParse(file, `parse failed: ${err.message}`));
@@ -1151,7 +1103,7 @@ function isWorkerOom(err) {
 function resolveWorkerFile() {
   const here = path19.dirname(fileURLToPath(import.meta.url));
   const candidate = path19.join(here, "parse-worker.js");
-  return fs18.existsSync(candidate) ? candidate : null;
+  return fs17.existsSync(candidate) ? candidate : null;
 }
 function chunk(items, buckets) {
   const out = Array.from({ length: Math.min(buckets, items.length || 1) }, () => []);
@@ -1648,9 +1600,9 @@ function toPosix2(p) {
 function buildRootIgnore2(root, exclude) {
   const ig = ignore();
   const gitignorePath = path19.join(root, ".gitignore");
-  if (fs18.existsSync(gitignorePath)) {
+  if (fs17.existsSync(gitignorePath)) {
     try {
-      ig.add(fs18.readFileSync(gitignorePath, "utf8"));
+      ig.add(fs17.readFileSync(gitignorePath, "utf8"));
     } catch {
     }
   }
@@ -1694,7 +1646,7 @@ function discoverDocs(options) {
   const maxFiles = options.maxFiles ?? DOC_MAX_FILES;
   const rootIg = buildRootIgnore2(root, options.exclude ?? []);
   const scopeAbs = (options.paths?.length ? options.paths.map((p) => path19.resolve(root, p)) : [root]).filter(
-    (p) => fs18.existsSync(p)
+    (p) => fs17.existsSync(p)
   );
   const found = /* @__PURE__ */ new Map();
   const consider = (abs) => {
@@ -1707,7 +1659,7 @@ function discoverDocs(options) {
     const category = classifyProjectContext(rel2);
     if (!category) return;
     try {
-      const st = fs18.statSync(abs);
+      const st = fs17.statSync(abs);
       if (!st.isFile() || st.size > DOC_FILE_MAX_BYTES) return;
       if (st.size === 0) return;
     } catch {
@@ -1719,7 +1671,7 @@ function discoverDocs(options) {
     if (found.size >= maxFiles || depth > 12) return;
     let entries;
     try {
-      entries = fs18.readdirSync(dir, { withFileTypes: true });
+      entries = fs17.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -1738,7 +1690,7 @@ function discoverDocs(options) {
   };
   for (const scope of scopeAbs) {
     try {
-      const st = fs18.statSync(scope);
+      const st = fs17.statSync(scope);
       if (st.isDirectory()) walk(scope, 0);
       else if (st.isFile()) consider(scope);
     } catch {
@@ -1795,7 +1747,7 @@ function documentNodesFromDocs(docs) {
   for (const d of docs) {
     let raw = "";
     try {
-      raw = fs18.readFileSync(d.abs, "utf8");
+      raw = fs17.readFileSync(d.abs, "utf8");
     } catch {
       continue;
     }
@@ -1853,7 +1805,7 @@ function nearestProjectKey(root, startDir, cache) {
   let dir = startDir;
   const rootAbs = path19.resolve(root);
   while (true) {
-    if (fs18.existsSync(path19.join(dir, "tsconfig.json")) || fs18.existsSync(path19.join(dir, "tsconfig.base.json")) || fs18.existsSync(path19.join(dir, "package.json"))) {
+    if (fs17.existsSync(path19.join(dir, "tsconfig.json")) || fs17.existsSync(path19.join(dir, "tsconfig.base.json")) || fs17.existsSync(path19.join(dir, "package.json"))) {
       const key = toPosix3(path19.relative(rootAbs, dir)) || ".";
       cache.set(startDir, key);
       return key;
@@ -1960,7 +1912,7 @@ var emptyNode = (partial) => ({
 function extractManifests(root, opts = {}) {
   const absRoot = path19.resolve(root);
   const ig = buildRootIgnore3(absRoot, opts.exclude ?? []);
-  const scopes = (opts.paths?.length ? opts.paths : ["."]).map((p) => path19.resolve(absRoot, p)).filter((p) => fs18.existsSync(p));
+  const scopes = (opts.paths?.length ? opts.paths : ["."]).map((p) => path19.resolve(absRoot, p)).filter((p) => fs17.existsSync(p));
   const found = /* @__PURE__ */ new Map();
   for (const scope of scopes) {
     walkManifests(absRoot, scope, ig, found);
@@ -1990,7 +1942,7 @@ function extractManifests(root, opts = {}) {
   };
 }
 function ingestPackageJson(rel2, abs, nodes, edges) {
-  const raw = JSON.parse(fs18.readFileSync(abs, "utf8"));
+  const raw = JSON.parse(fs17.readFileSync(abs, "utf8"));
   const pkgName = raw.name && String(raw.name).trim() || path19.posix.dirname(rel2) || ".";
   const localId = nodeId({ kind: "package", qualifiedName: pkgName, file: rel2 });
   nodes.set(
@@ -2034,7 +1986,7 @@ function ingestPackageJson(rel2, abs, nodes, edges) {
   return n;
 }
 function ingestGoMod(rel2, abs, nodes, edges) {
-  const text = fs18.readFileSync(abs, "utf8");
+  const text = fs17.readFileSync(abs, "utf8");
   let moduleName = path19.posix.dirname(rel2) || ".";
   const moduleMatch = /^\s*module\s+(\S+)/m.exec(text);
   if (moduleMatch) moduleName = moduleMatch[1];
@@ -2118,9 +2070,9 @@ function addEdge(edges, kind, src, dst, confidence) {
 function buildRootIgnore3(root, exclude) {
   const ig = ignore();
   const gitignorePath = path19.join(root, ".gitignore");
-  if (fs18.existsSync(gitignorePath)) {
+  if (fs17.existsSync(gitignorePath)) {
     try {
-      ig.add(fs18.readFileSync(gitignorePath, "utf8"));
+      ig.add(fs17.readFileSync(gitignorePath, "utf8"));
     } catch {
     }
   }
@@ -2130,7 +2082,7 @@ function buildRootIgnore3(root, exclude) {
 function walkManifests(root, dir, ig, found) {
   let entries;
   try {
-    entries = fs18.readdirSync(dir, { withFileTypes: true });
+    entries = fs17.readdirSync(dir, { withFileTypes: true });
   } catch {
     return;
   }
@@ -2163,7 +2115,7 @@ async function hashFilesParallel(jobs, concurrency) {
       if (i >= jobs.length) return;
       const job = jobs[i];
       try {
-        const buf = await fs8.readFile(job.abs);
+        const buf = await fs7.readFile(job.abs);
         out[i] = { rel: job.rel, hash: hashBytes(buf), ok: true };
       } catch {
         out[i] = { rel: job.rel, hash: "", ok: false };
@@ -2211,7 +2163,7 @@ async function buildGraph(options) {
   for (const file of files) {
     let stat;
     try {
-      stat = fs18.statSync(file.abs);
+      stat = fs17.statSync(file.abs);
     } catch {
       continue;
     }
@@ -2257,10 +2209,10 @@ async function buildGraph(options) {
         mtimeMs: p.mtimeMs,
         hash: r.hash
       });
-      const cached2 = cache.get(p.file.rel, r.hash);
-      if (cached2) {
-        reused.push(cached2);
-        cache.set(p.file.rel, cached2, { mtimeMs: p.mtimeMs, size: p.size });
+      const cached = cache.get(p.file.rel, r.hash);
+      if (cached) {
+        reused.push(cached);
+        cache.set(p.file.rel, cached, { mtimeMs: p.mtimeMs, size: p.size });
       } else {
         toParse.push(p.file);
       }
@@ -2387,8 +2339,8 @@ async function buildGraph(options) {
   });
   for (const d of docs) {
     try {
-      const st = fs18.statSync(d.abs);
-      const hash = hashBytes(fs18.readFileSync(d.abs));
+      const st = fs17.statSync(d.abs);
+      const hash = hashBytes(fs17.readFileSync(d.abs));
       hashes.set(d.rel, hash);
       fileStats.push({ rel: d.rel, size: st.size, mtimeMs: st.mtimeMs, hash });
     } catch {
@@ -2493,9 +2445,9 @@ function loadScipIndex(root, explicit) {
   ].filter((p) => Boolean(p));
   for (const file of candidates) {
     const abs = path19.isAbsolute(file) ? file : path19.resolve(root, file);
-    if (!fs18.existsSync(abs)) continue;
+    if (!fs17.existsSync(abs)) continue;
     try {
-      const index = decodeScipIndex(new Uint8Array(fs18.readFileSync(abs)));
+      const index = decodeScipIndex(new Uint8Array(fs17.readFileSync(abs)));
       if (index.documents.length) {
         return { index, tool: index.toolVersion ? `${index.toolName} ${index.toolVersion}` : index.toolName };
       }
@@ -2552,10 +2504,10 @@ async function verifyDeterminism(opts) {
   const buildA = await buildGraph({ ...base, noCache: true, jobs: opts.jobs });
   const a = serializeGraph(buildA.graph);
   const b = serializeGraph((await buildGraph({ ...base, noCache: true, jobs: 1 })).graph);
-  const cached2 = serializeGraph((await buildGraph({ ...base, noCache: false })).graph);
+  const cached = serializeGraph((await buildGraph({ ...base, noCache: false })).graph);
   const checks = [
     { name: "run-to-run determinism", ok: a === b, detail: diffHint(a, b) },
-    { name: "cache safety (incremental == full)", ok: a === cached2, detail: diffHint(a, cached2) }
+    { name: "cache safety (incremental == full)", ok: a === cached, detail: diffHint(a, cached) }
   ];
   const scoped = Boolean(opts.only?.length || opts.exclude?.length);
   const committed = scoped ? null : loadGraph(opts.root);
@@ -2617,14 +2569,14 @@ function writeSnapshot(root, corpusHash, fileStats, scope = {}) {
   for (const f of fileStats) files[f.rel] = { size: f.size, mtimeMs: f.mtimeMs, hash: f.hash };
   const snapshot = { version: SNAPSHOT_VERSION, corpusHash, scope: pruneScope(scope), files };
   try {
-    fs18.mkdirSync(cacheDir(root), { recursive: true });
-    fs18.writeFileSync(snapshotPath(root), stableStringify(snapshot, 0));
+    fs17.mkdirSync(cacheDir(root), { recursive: true });
+    fs17.writeFileSync(snapshotPath(root), stableStringify(snapshot, 0));
   } catch {
   }
 }
 function loadSnapshot(root) {
   try {
-    const loaded = JSON.parse(fs18.readFileSync(snapshotPath(root), "utf8"));
+    const loaded = JSON.parse(fs17.readFileSync(snapshotPath(root), "utf8"));
     if (loaded.version === SNAPSHOT_VERSION && loaded.files && typeof loaded.corpusHash === "string") {
       return { ...loaded, scope: loaded.scope ?? {} };
     }
@@ -2667,7 +2619,7 @@ function probeFreshness(root) {
     }
     let stat;
     try {
-      stat = fs18.statSync(file.abs);
+      stat = fs17.statSync(file.abs);
     } catch {
       drift.removed.push(file.rel);
       continue;
@@ -2685,7 +2637,7 @@ function probeFreshness(root) {
     }
     let hash = "";
     try {
-      hash = hashBytes(fs18.readFileSync(file.abs));
+      hash = hashBytes(fs17.readFileSync(file.abs));
     } catch {
       drift.removed.push(file.rel);
       continue;
@@ -2702,7 +2654,7 @@ function probeFreshness(root) {
   }
   if (absorbed && !hasDrift(drift)) {
     try {
-      fs18.writeFileSync(snapshotPath(root), stableStringify(snapshot, 0));
+      fs17.writeFileSync(snapshotPath(root), stableStringify(snapshot, 0));
     } catch {
     }
   }
@@ -2808,9 +2760,9 @@ function testsToRun(graph, rootId, depth = 4) {
 }
 function detectRunner(root, lang) {
   const pkgPath = path19.join(root, "package.json");
-  if (fs18.existsSync(pkgPath)) {
+  if (fs17.existsSync(pkgPath)) {
     try {
-      const pkg = JSON.parse(fs18.readFileSync(pkgPath, "utf8"));
+      const pkg = JSON.parse(fs17.readFileSync(pkgPath, "utf8"));
       const deps = { ...pkg.dependencies, ...pkg.devDependencies };
       if (deps.vitest) return { name: "vitest", command: (f) => `npx vitest run ${f.join(" ")}`.trim() };
       if (deps.jest) return { name: "jest", command: (f) => `npx jest ${f.join(" ")}`.trim() };
@@ -2818,10 +2770,10 @@ function detectRunner(root, lang) {
     } catch {
     }
   }
-  if (lang === "py" || fs18.existsSync(path19.join(root, "pyproject.toml")) || fs18.existsSync(path19.join(root, "pytest.ini"))) {
+  if (lang === "py" || fs17.existsSync(path19.join(root, "pyproject.toml")) || fs17.existsSync(path19.join(root, "pytest.ini"))) {
     return { name: "pytest", command: (f) => `pytest ${f.join(" ")}`.trim() };
   }
-  if (lang === "go" || fs18.existsSync(path19.join(root, "go.mod"))) {
+  if (lang === "go" || fs17.existsSync(path19.join(root, "go.mod"))) {
     return { name: "go test", command: () => "go test ./..." };
   }
   if (lang === "cs" || hasFile(root, /\.csproj$/) || hasFile(root, /\.sln$/)) {
@@ -2832,7 +2784,7 @@ function detectRunner(root, lang) {
 }
 function hasFile(root, re) {
   try {
-    return fs18.readdirSync(root).some((f) => re.test(f));
+    return fs17.readdirSync(root).some((f) => re.test(f));
   } catch {
     return false;
   }
@@ -2840,7 +2792,7 @@ function hasFile(root, re) {
 function findGitRoot(startDir = process.cwd()) {
   let dir = path19.resolve(startDir);
   for (; ; ) {
-    if (fs18.existsSync(path19.join(dir, ".git"))) return dir;
+    if (fs17.existsSync(path19.join(dir, ".git"))) return dir;
     const parent = path19.dirname(dir);
     if (parent === dir) return null;
     dir = parent;
@@ -2857,14 +2809,14 @@ function ensureGitignored(entry, startDir = process.cwd()) {
   let existing = "";
   let fileExisted = true;
   try {
-    existing = fs18.readFileSync(gitignorePath, "utf8");
+    existing = fs17.readFileSync(gitignorePath, "utf8");
   } catch {
     fileExisted = false;
   }
   const alreadyPresent = existing.split(/\r?\n/).some((line) => normalizeEntry(line) === target);
   if (alreadyPresent) return { status: "present", entry, gitignorePath };
   const needsLeadingNewline = existing.length > 0 && !existing.endsWith("\n");
-  fs18.appendFileSync(gitignorePath, `${needsLeadingNewline ? "\n" : ""}${entry}
+  fs17.appendFileSync(gitignorePath, `${needsLeadingNewline ? "\n" : ""}${entry}
 `, "utf8");
   return { status: fileExisted ? "added" : "created", entry, gitignorePath };
 }
@@ -3054,7 +3006,7 @@ function credentialsPath(opts = {}) {
   if (override) return path19.resolve(override);
   const local = projectCredentialsPath(opts.cwd);
   if (opts.local) return local;
-  if (fs18.existsSync(local)) return local;
+  if (fs17.existsSync(local)) return local;
   return homeCredentialsPath();
 }
 function gitignoreEntryForCredentials(repoRoot, credsFile = credentialsPath()) {
@@ -3066,7 +3018,7 @@ function gitignoreEntryForCredentials(repoRoot, credsFile = credentialsPath()) {
 }
 function readStoredCredentials(opts = {}) {
   try {
-    const raw = fs18.readFileSync(credentialsPath(opts), "utf8");
+    const raw = fs17.readFileSync(credentialsPath(opts), "utf8");
     const parsed = JSON.parse(raw);
     return parsed && typeof parsed.dsn === "string" && parsed.dsn ? parsed : null;
   } catch {
@@ -3075,16 +3027,16 @@ function readStoredCredentials(opts = {}) {
 }
 function writeStoredCredentials(creds, opts = {}) {
   const file = credentialsPath(opts);
-  fs18.mkdirSync(path19.dirname(file), { recursive: true });
-  fs18.writeFileSync(file, JSON.stringify(creds, null, 2) + "\n", { encoding: "utf8", mode: 384 });
+  fs17.mkdirSync(path19.dirname(file), { recursive: true });
+  fs17.writeFileSync(file, JSON.stringify(creds, null, 2) + "\n", { encoding: "utf8", mode: 384 });
   try {
-    fs18.chmodSync(file, 384);
+    fs17.chmodSync(file, 384);
   } catch {
   }
 }
 function clearStoredCredentials(opts = {}) {
   try {
-    fs18.rmSync(credentialsPath(opts));
+    fs17.rmSync(credentialsPath(opts));
     return true;
   } catch {
     return false;
@@ -3550,7 +3502,7 @@ function measure(root, files) {
   for (const rel2 of files) {
     let size;
     try {
-      size = fs18.statSync(path19.join(root, rel2)).size;
+      size = fs17.statSync(path19.join(root, rel2)).size;
     } catch {
       continue;
     }
@@ -3573,9 +3525,9 @@ function matchLines(text, needleLower) {
 }
 function readCandidate(abs, knownSize) {
   try {
-    const size = knownSize ?? fs18.statSync(abs).size;
+    const size = knownSize ?? fs17.statSync(abs).size;
     if (size > MAX_FILE_BYTES) return null;
-    const text = fs18.readFileSync(abs, "utf8");
+    const text = fs17.readFileSync(abs, "utf8");
     return text.includes(NUL) ? null : text;
   } catch {
     return null;
@@ -3869,7 +3821,7 @@ function walkCandidates(root) {
     const dir = stack.pop();
     let entries;
     try {
-      entries = fs18.readdirSync(dir, { withFileTypes: true });
+      entries = fs17.readdirSync(dir, { withFileTypes: true });
     } catch {
       continue;
     }
@@ -3933,7 +3885,7 @@ function parseRgFileList(stdout, sep10 = path19.sep) {
 function readScanArtifact(root) {
   try {
     const file = path19.join(root, ".vibgrate", "scan_result.json");
-    return JSON.parse(fs18.readFileSync(file, "utf8"));
+    return JSON.parse(fs17.readFileSync(file, "utf8"));
   } catch {
     return null;
   }
@@ -4189,6 +4141,12 @@ ${chunk2}`);
 }
 
 // src/engine/quality.ts
+var IDENT_RE = /^(?:[A-Za-z][a-z0-9]*[A-Z][A-Za-z0-9]*|[a-z][a-z0-9]*(?:_[a-z0-9]+)+|[a-z][a-z0-9]*(?:-[a-z0-9]+)+)$/;
+function identifierTerms(query) {
+  if (!query) return [];
+  const raw = [...new Set(query.split(/[^A-Za-z0-9_-]+/).filter((w) => w.length > 2))];
+  return raw.filter((t) => IDENT_RE.test(t) || t.length >= 6 && /[A-Z]/.test(t) && /[a-z]/.test(t));
+}
 function assessDocQuality(content, opts = {}) {
   const minTokens = opts.minTokens ?? 60;
   const lc = content.toLowerCase();
@@ -4206,20 +4164,36 @@ function assessDocQuality(content, opts = {}) {
     else reasons.push("library name absent");
   }
   const qt = tokenizeQuery(opts.query);
+  const idents = identifierTerms(opts.query);
   let onTopic = qt.length === 0;
   if (qt.length) {
-    const hits = qt.filter((t) => lc.includes(t)).length;
-    if (hits) {
-      score += Math.min(hits, 2);
-      onTopic = true;
+    const missingIdents = idents.filter((id) => !lc.includes(id.toLowerCase()));
+    if (missingIdents.length) {
+      reasons.push(`API symbol(s) absent: ${missingIdents.join(", ")}`);
+      onTopic = false;
     } else {
-      reasons.push("query terms absent");
+      const hits = qt.filter((t) => lc.includes(t)).length;
+      const need = Math.max(1, Math.floor(qt.length / 2) + 1);
+      if (hits >= need) {
+        score += Math.min(hits, 2);
+        onTopic = true;
+      } else {
+        reasons.push(hits === 0 ? "query terms absent" : `query terms weak (${hits}/${qt.length})`);
+        onTopic = false;
+      }
     }
   }
   if (opts.symbols?.length) {
     if (opts.symbols.some((s) => s.length > 2 && lc.includes(s.toLowerCase()))) score += 1;
     else reasons.push("no API symbols present");
   }
+  if (opts.readmeOnly && (idents.length > 0 || qt.length >= 2)) {
+    onTopic = false;
+    if (!reasons.includes("README-only source cannot answer a focused API query")) {
+      reasons.push("README-only source cannot answer a focused API query");
+    }
+    score = Math.min(score, 4);
+  }
   const sufficient = hasCode && tokens >= minTokens && onTopic;
   return { score, sufficient, reasons };
 }
@@ -4339,7 +4313,7 @@ function hostedDocsCacheKey(req, opts = {}) {
 }
 function loadFile(root) {
   try {
-    const parsed = JSON.parse(fs18.readFileSync(cachePath(root), "utf8"));
+    const parsed = JSON.parse(fs17.readFileSync(cachePath(root), "utf8"));
     if (parsed && parsed.version === CACHE_VERSION && parsed.entries && typeof parsed.entries === "object") return parsed;
   } catch {
   }
@@ -4353,8 +4327,8 @@ function saveFile(root, file) {
         delete file.entries[k];
       }
     }
-    fs18.mkdirSync(cacheDir(root), { recursive: true });
-    fs18.writeFileSync(cachePath(root), JSON.stringify(file));
+    fs17.mkdirSync(cacheDir(root), { recursive: true });
+    fs17.writeFileSync(cachePath(root), JSON.stringify(file));
   } catch {
   }
 }
@@ -4798,9 +4772,15 @@ var TOOLS = [
   {
     name: "get_facts",
     description: "Deterministic facts for a node (contract / invariant / characterization).",
-    inputSchema: obj({ name: { type: "string" } }, ["name"]),
+    inputSchema: obj(
+      {
+        name: { type: "string" },
+        pick: { type: "number", description: "nth candidate if ambiguous" }
+      },
+      ["name"]
+    ),
     handler: (graph, args) => {
-      const { node, candidates } = resolveOne(graph, String(args.name ?? ""));
+      const { node, candidates } = resolveOne(graph, String(args.name ?? ""), numOrU(args.pick));
       if (!node) return unresolved(candidates);
       if (!graph.facts) {
         return {
@@ -4815,9 +4795,15 @@ var TOOLS = [
   {
     name: "guide_node",
     description: "Cited standards/practices for a node (OWASP/CWE).",
-    inputSchema: obj({ name: { type: "string" } }, ["name"]),
+    inputSchema: obj(
+      {
+        name: { type: "string" },
+        pick: { type: "number", description: "nth candidate if ambiguous" }
+      },
+      ["name"]
+    ),
     handler: (graph, args) => {
-      const { node, candidates } = resolveOne(graph, String(args.name ?? ""));
+      const { node, candidates } = resolveOne(graph, String(args.name ?? ""), numOrU(args.pick));
       if (!node) return unresolved(candidates);
       const entries = new Map(FREE_PACK.entries.map((e) => [e.id, e]));
       return {
@@ -5011,13 +4997,24 @@ var TOOLS = [
       const verbosity = ["concise", "balanced", "exhaustive"].includes(String(args.verbosity)) ? String(args.verbosity) : query ? "concise" : "balanced";
       const budget = numOrU(args.max_tokens) ?? numOrU(args.tokens) ?? VERBOSITY_BUDGET[verbosity];
       const ver = resolveVersion(ctx.root, id);
-      const render = (readme, libName) => {
-        const apiSurface = localApiSurface(ctx.root, libName);
-        const sel = selectForBudget({ readme, query, apiSurface, budget });
-        const quality = assessDocQuality([readme, apiSurface].filter(Boolean).join("\n\n"), {
+      const focusQuery = (() => {
+        const q = query.trim();
+        if (!q) return q;
+        const bare = id.replace(/^@[^/]+\//, "").toLowerCase();
+        const parts = q.split(/\s+/);
+        if (parts.length > 1 && parts[0].toLowerCase().replace(/^@[^/]+\//, "") === bare) {
+          return parts.slice(1).join(" ");
+        }
+        return q;
+      })();
+      const render = (readme, libName, readmeOnly) => {
+        const apiSurface = localApiSurface(ctx.root, libName, focusQuery || void 0);
+        const sel = selectForBudget({ readme, query: focusQuery || query, apiSurface, budget });
+        const quality = assessDocQuality(sel.text, {
           name: libName,
-          query,
-          symbols: symbolsFromApi(apiSurface)
+          query: focusQuery || query || void 0,
+          symbols: symbolsFromApi(apiSurface),
+          readmeOnly: readmeOnly === true && !apiSurface
         });
         return {
           content: sel.text,
@@ -5034,7 +5031,7 @@ var TOOLS = [
       let answer = null;
       let sufficient = false;
       if (entry) {
-        const r = render(readDoc(ctx.root, entry), entry.name);
+        const r = render(readDoc(ctx.root, entry), entry.name, false);
         sufficient = r.metadata.quality.sufficient;
         answer = {
           targetId: entry.id,
@@ -5049,9 +5046,9 @@ var TOOLS = [
           metadata: r.metadata
         };
       } else {
-        const local = localPackageDocs(ctx.root, id);
+        const local = localPackageDocs(ctx.root, id, { query: focusQuery || query || void 0 });
         if (local) {
-          const r = render(local.docs, id);
+          const r = render(local.docs, id, local.readmeOnly);
           sufficient = r.metadata.quality.sufficient;
           answer = {
             targetId: id,
@@ -5366,12 +5363,12 @@ function detectAssistants(root, opts = {}) {
   const which = opts.which ?? whichOnPath;
   const found = [];
   for (const assistant of ASSISTANTS) {
-    const repoHit = (assistant.markers ?? []).find((m) => fs18.existsSync(path19.join(root, m)));
+    const repoHit = (assistant.markers ?? []).find((m) => fs17.existsSync(path19.join(root, m)));
     if (repoHit) {
       found.push({ assistant, via: "repo", marker: repoHit });
       continue;
     }
-    const homeHit = (assistant.homeMarkers ?? []).find((m) => fs18.existsSync(path19.join(home, m)));
+    const homeHit = (assistant.homeMarkers ?? []).find((m) => fs17.existsSync(path19.join(home, m)));
     if (homeHit) {
       found.push({ assistant, via: "home", marker: homeHit });
       continue;
@@ -5432,23 +5429,23 @@ function uninstallAssistant(a, root, purge) {
     const file = path19.join(root, a.nudge.file);
     if (a.nudge.kind === "block") {
       if (removeBlock(file)) removed.push(a.nudge.file);
-    } else if (fs18.existsSync(file)) {
-      fs18.rmSync(file);
+    } else if (fs17.existsSync(file)) {
+      fs17.rmSync(file);
       removed.push(a.nudge.file);
     }
   }
   if (purge && a.skill) {
     const file = path19.join(root, a.skill);
-    if (fs18.existsSync(file)) {
-      fs18.rmSync(file);
+    if (fs17.existsSync(file)) {
+      fs17.rmSync(file);
       removed.push(a.skill);
     }
   }
   return removed;
 }
 function writeFileEnsured(file, content) {
-  fs18.mkdirSync(path19.dirname(file), { recursive: true });
-  fs18.writeFileSync(file, content);
+  fs17.mkdirSync(path19.dirname(file), { recursive: true });
+  fs17.writeFileSync(file, content);
 }
 function writeNavigationConfig(root) {
   ensureVibgrateGitignore(root);
@@ -5474,7 +5471,7 @@ function upsertMcp(file, target, launch) {
 `);
 }
 function removeMcp(file, target) {
-  if (!fs18.existsSync(file)) return false;
+  if (!fs17.existsSync(file)) return false;
   const config = readJson(file);
   const bag = config[target.key];
   if (!bag || !(bag.vg !== void 0)) return false;
@@ -5494,7 +5491,7 @@ function refreshInstalledInstructions(root, smallRepo) {
   for (const a of ASSISTANTS) {
     if (a.skill) {
       const file = path19.join(root, a.skill);
-      if (fs18.existsSync(file)) {
+      if (fs17.existsSync(file)) {
         const text = readTextSafe(file);
         const from = text === null ? null : staleVersion(text, "# vg \u2014 the code map");
         if (from !== null) {
@@ -5505,7 +5502,7 @@ function refreshInstalledInstructions(root, smallRepo) {
     }
     if (a.nudge) {
       const file = path19.join(root, a.nudge.file);
-      if (!fs18.existsSync(file)) continue;
+      if (!fs17.existsSync(file)) continue;
       const text = readTextSafe(file);
       if (text === null) continue;
       if (a.nudge.kind === "block") {
@@ -5529,7 +5526,7 @@ function refreshInstalledInstructions(root, smallRepo) {
 }
 function readTextSafe(file) {
   try {
-    return fs18.readFileSync(file, "utf8");
+    return fs17.readFileSync(file, "utf8");
   } catch {
     return null;
   }
@@ -5548,8 +5545,8 @@ ${stripMarkers(nudgeMarkdown(smallRepo, client))}` : stripMarkers(nudgeMarkdown(
   upsertBlock(file, nudgeMarkdown(smallRepo, client));
 }
 function upsertBlock(file, block) {
-  fs18.mkdirSync(path19.dirname(file), { recursive: true });
-  let existing = fs18.existsSync(file) ? fs18.readFileSync(file, "utf8") : "";
+  fs17.mkdirSync(path19.dirname(file), { recursive: true });
+  let existing = fs17.existsSync(file) ? fs17.readFileSync(file, "utf8") : "";
   const re = new RegExp(`${escapeRe(NUDGE_BEGIN)}[\\s\\S]*?${escapeRe(NUDGE_END)}`);
   if (re.test(existing)) existing = existing.replace(re, block);
   else existing = existing.length ? `${existing.replace(/\s*$/, "")}
@@ -5557,20 +5554,20 @@ function upsertBlock(file, block) {
 ${block}
 ` : `${block}
 `;
-  fs18.writeFileSync(file, existing);
+  fs17.writeFileSync(file, existing);
 }
 function removeBlock(file) {
-  if (!fs18.existsSync(file)) return false;
-  const existing = fs18.readFileSync(file, "utf8");
+  if (!fs17.existsSync(file)) return false;
+  const existing = fs17.readFileSync(file, "utf8");
   const re = new RegExp(`\\n*${escapeRe(NUDGE_BEGIN)}[\\s\\S]*?${escapeRe(NUDGE_END)}\\n*`);
   if (!re.test(existing)) return false;
-  fs18.writeFileSync(file, existing.replace(re, "\n"));
+  fs17.writeFileSync(file, existing.replace(re, "\n"));
   return true;
 }
 function readJson(file) {
-  if (!fs18.existsSync(file)) return {};
+  if (!fs17.existsSync(file)) return {};
   try {
-    const parsed = JSON.parse(fs18.readFileSync(file, "utf8"));
+    const parsed = JSON.parse(fs17.readFileSync(file, "utf8"));
     if (parsed && typeof parsed === "object" && !Array.isArray(parsed)) {
       return parsed;
     }
@@ -5622,8 +5619,8 @@ async function refreshIfStale(root, opts = {}) {
       writeArtifacts(result.graph, {
         root,
         graphPath: opts.graphPath,
-        report: fs18.existsSync(path19.join(dir, "GRAPH_REPORT.md")),
-        html: fs18.existsSync(path19.join(dir, "graph.html"))
+        report: fs17.existsSync(path19.join(dir, "GRAPH_REPORT.md")),
+        html: fs17.existsSync(path19.join(dir, "graph.html"))
       });
     }
     writeSnapshot(root, result.graph.provenance.corpusHash, result.fileStats, scope);
@@ -5643,6 +5640,6 @@ async function refreshIfStale(root, opts = {}) {
   }
 }
 
-export { ASSISTANTS, CliError, ExitCode, FREE_PACK, NPX_INVOCATION, ResourceLimitError, SKIP_DIRS, SKIP_FILES, SMALL_REPO_FILES, TOOLS, UsageError, analyze, applyCoverage, assessDocQuality, assistantById, availableRegionIds, buildFacts, buildGraph, clearStoredCredentials, countTokens, coveringTests, createWorkspaceDsn, credentialsPath, dashHostForIngestHost, decodeScipIndex, detectAssistants, detectRunner, detectServeLaunch, discover, driftCount, dsnCommand, ensureGitignored, epistemicBreakdown, fetchHostedDocsCached, findGitRoot, gitignoreEntryForCredentials, groundGraph, hasDrift, homeCredentialsPath, hostedBase, ingestHostForRegionId, installAssistant, loadCoverage, loadSnapshot, parseDsn, pathDisconnect, probeFreshness, projectCredentialsPath, publishPrivateLibrary, pushCommand, readScanArtifact, readStoredCredentials, refreshIfStale, refreshInstalledInstructions, renderToolResult, resolveCliInvocation, resolveDsn, resolveIngestHost, resolveLimits, scipEdges, searchSymbols, selectForBudget, shortestPath, symbolsFromApi, testsToRun, uninstallAssistant, uploadScanArtifact, usageError, verifyDeterminism, warmEmbedderInBackground, writeNavigationConfig, writeSnapshot, writeStoredCredentials };
-//# sourceMappingURL=chunk-MAY5HLDH.js.map
-//# sourceMappingURL=chunk-MAY5HLDH.js.map
+export { ASSISTANTS, CliError, ExitCode, FREE_PACK, ResourceLimitError, SKIP_DIRS, SKIP_FILES, SMALL_REPO_FILES, TOOLS, UsageError, analyze, applyCoverage, assessDocQuality, assistantById, availableRegionIds, buildFacts, buildGraph, clearStoredCredentials, countTokens, coveringTests, createWorkspaceDsn, credentialsPath, dashHostForIngestHost, decodeScipIndex, detectAssistants, detectRunner, detectServeLaunch, discover, driftCount, dsnCommand, ensureGitignored, epistemicBreakdown, fetchHostedDocsCached, findGitRoot, gitignoreEntryForCredentials, groundGraph, hasDrift, homeCredentialsPath, hostedBase, ingestHostForRegionId, installAssistant, loadCoverage, loadSnapshot, parseDsn, pathDisconnect, probeFreshness, projectCredentialsPath, publishPrivateLibrary, pushCommand, readScanArtifact, readStoredCredentials, refreshIfStale, refreshInstalledInstructions, renderToolResult, resolveDsn, resolveIngestHost, resolveLimits, scipEdges, searchSymbols, selectForBudget, shortestPath, symbolsFromApi, testsToRun, uninstallAssistant, uploadScanArtifact, usageError, verifyDeterminism, warmEmbedderInBackground, writeNavigationConfig, writeSnapshot, writeStoredCredentials };
+//# sourceMappingURL=chunk-GQTWDKMJ.js.map
+//# sourceMappingURL=chunk-GQTWDKMJ.js.map