@vibgrate/cli 2026.731.2 → 2026.801.1

package/dist/cli.js

@@ -1,12 +1,12 @@
 #!/usr/bin/env node
 import { loadAdvancedScanHook, baselineCommand } from './chunk-FF5ZQ6KI.js';
-import { fetchCatalog, resolveProviders } from './chunk-4TC6RJ7U.js';
-import { VGD_PROTOCOL_VERSION, startVgdServer } from './chunk-EX2SH5CT.js';
-import { telemetryOptOut, StatsSharer, statsEndpoint, isCI } from './chunk-TNCD5VFX.js';
+import { fetchCatalog, resolveProviders } from './chunk-JLWI2JGA.js';
+import { VGD_PROTOCOL_VERSION, startVgdServer } from './chunk-V2QK3IUY.js';
+import { telemetryOptOut, StatsSharer, statsEndpoint, isCI } from './chunk-B3OMGYZZ.js';
 import { buildModelInstallPlan } from './chunk-WHJMS7XC.js';
-import { runCodeSession } from './chunk-WBMMRERH.js';
-import { sha256Hex, generateKeypair, dssePae, DSSE_PAYLOAD_TYPE, keyId, registerBuild, readGlobal, applyGlobalOptions, ProgressBar, printLogo, runBuild } from './chunk-5J45MN3K.js';
-export { runBuild } from './chunk-5J45MN3K.js';
+import { runCodeSession } from './chunk-WIDZ5IE7.js';
+import { sha256Hex, generateKeypair, dssePae, DSSE_PAYLOAD_TYPE, keyId, registerBuild, readGlobal, applyGlobalOptions, ProgressBar, printLogo, runBuild } from './chunk-XEJJGDGX.js';
+export { runBuild } from './chunk-XEJJGDGX.js';
 import { disableColor, info, c, json, out } from './chunk-CT5BS56U.js';
 import './chunk-5I4VSBWQ.js';
 import './chunk-IS7VTH2Q.js';
@@ -14,36 +14,36 @@ import { init_resolve_ollama, gatherSystemMemory, resolveOllamaBinary, hasOllama
 import { readOrchestratorState, writeOrchestratorState, parseMode, setDefaultMode, recommendMode, activePin, resolveMode, providerForBackend, QUALIFIED_PACKS, pinPack, unpinPack, buildOrchestratorStatus } from './chunk-NZELMYT4.js';
 import { fmt, estimateModelBytes } from './chunk-7N4Y3E47.js';
 import './chunk-IZDH67DX.js';
-import { defaultProcessEndpoint, startProcessHostServer, resolveInferenceIsolation } from './chunk-EVLS2M5G.js';
-import { clearHostSessionPool, acquireHostSession, generateOnSession, listHostSessions, hostSessionPoolSize } from './chunk-X634FZVG.js';
-import { CONTEXT_POLICY_VERSION, computeFcsReport, renderFcsReportMarkdown, createTrajectoryCollector, runAgent } from './chunk-Q7HUXIUF.js';
+import { defaultProcessEndpoint, startProcessHostServer, resolveInferenceIsolation } from './chunk-JFE7XCAE.js';
+import { clearHostSessionPool, acquireHostSession, generateOnSession, listHostSessions, hostSessionPoolSize } from './chunk-3LOWJSAF.js';
+import { CONTEXT_POLICY_VERSION, computeFcsReport, renderFcsReportMarkdown, createTrajectoryCollector, runAgent } from './chunk-IRCYOTRG.js';
 import './chunk-543E6WDJ.js';
-import { summarizeDiffs, ScriptedProvider } from './chunk-MYM5VIJ4.js';
+import { summarizeDiffs, ScriptedProvider } from './chunk-G25STLE7.js';
 import { ensurePackage, ensureUnavailableMessage } from './chunk-REIGWTTH.js';
-import './chunk-RGEVBSLK.js';
+import './chunk-A43I2AJ4.js';
 import { vgdSocketPath, vgdIsRunning, vgdRequest, vgdPidPath } from './chunk-RBIRXQR6.js';
 import { buildIdentifierTrieFromGraph } from './chunk-5HYCB55P.js';
 import './chunk-7AVYKZEM.js';
-import { serveStdio, exportGraph, GraphSource, createServer, formatForExt } from './chunk-LZX5NH4V.js';
-import { refreshIfStale } from './chunk-L6BRBFBP.js';
-import { CliError, ExitCode, driftCount, ASSISTANTS, detectAssistants, isAssistantInstalled, usageError, detectServeLaunch, installAssistant, writeNavigationConfig, uninstallAssistant, buildGraph, writeSnapshot, probeFreshness, discover, assistantById, SMALL_REPO_FILES, isSkippedDirName, SKIP_FILES, SKIP_DIRS } from './chunk-Y44GPOBL.js';
-import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as parseDsn$1, uploadScanArtifact, dsnCommand, pushCommand, countTokens, shortestPath, pathDisconnect, testsToRun, detectRunner, coveringTests, FREE_PACK, readScanArtifact, publishPrivateLibrary, assessDocQuality, symbolsFromApi, fetchHostedDocsCached, selectForBudget, hostedBase, readStoredCredentials, projectCredentialsPath, homeCredentialsPath } from './chunk-RIWLXMMT.js';
+import { serveStdio, exportGraph, GraphSource, createServer, formatForExt } from './chunk-BNEHDLVZ.js';
+import { refreshIfStale } from './chunk-V3X3DBZL.js';
+import { CliError, ExitCode, driftCount, ASSISTANTS, detectAssistants, isAssistantInstalled, usageError, detectServeLaunch, installAssistant, writeNavigationConfig, uninstallAssistant, buildGraph, writeSnapshot, probeFreshness, discover, assistantById, SMALL_REPO_FILES, isSkippedDirName, SKIP_FILES, SKIP_DIRS } from './chunk-KL65SSR7.js';
+import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as parseDsn$1, uploadScanArtifact, dsnCommand, pushCommand, countTokens, shortestPath, pathDisconnect, testsToRun, detectRunner, coveringTests, FREE_PACK, readScanArtifact, publishPrivateLibrary, assessDocQuality, symbolsFromApi, fetchHostedDocsCached, selectForBudget, hostedBase, readStoredCredentials, projectCredentialsPath, homeCredentialsPath } from './chunk-7PVCHLR2.js';
 import { writeDefaultConfig, parseDsn, detectVcs, computeRepoFingerprint, resolveRepositoryName, fetchScanPreflight, runCoreScan, loadConfig, prepareCompressedUpload, computeDriftScore, titleBox, projectTypeToVulnEcosystem, driftBar, gitHistoryAvailable, buildVersionTimelines, findPackageAnyEcosystem, normalizeConstraint, findVersionCrossings, versionSatisfies, PROJECT_TYPE_TO_OSV_ECOSYSTEM, fetchRiskySymbols, perDependencyDrift } from './chunk-XRN7DQGR.js';
 import { resolveIngestHost, dashHostForIngestHost, availableRegionIds, ingestHostForRegionId } from './chunk-HTLDXEHW.js';
 import { ensureDir, pathExists, readJsonFile, writeTextFile, writeJsonFile } from './chunk-CRAMOEBE.js';
-import { recordCliCall, CLI_TOOL_ALIASES, savingsLedgerPath, clearSavings, readSavings, readUsage, readModelSavings, CAPSULE_RANKING_VERSION, SAVINGS_TOOLS, sanitizeClient } from './chunk-US2DAKCM.js';
+import { recordCliCall, CLI_TOOL_ALIASES, savingsLedgerPath, clearSavings, readSavings, readUsage, readModelSavings, CAPSULE_RANKING_VERSION, SAVINGS_TOOLS, sanitizeClient } from './chunk-MPP4S4OE.js';
 import './chunk-IPICO2RV.js';
-import { inventory, enrichOnline, ECOSYSTEMS, catalogPath, libDir, loadCatalog, driftFor, addLibrary, resolveLib, libId, resolveVersion, readDoc, localPackageDocs, localApiSurface } from './chunk-FHJBGPJZ.js';
+import { inventory, enrichOnline, ECOSYSTEMS, catalogPath, libDir, loadCatalog, driftFor, addLibrary, resolveLib, libId, resolveVersion, readDoc, localPackageDocs, localApiSurface } from './chunk-I6RBAIS3.js';
 import { init_cli_invocation, resolveCliInvocation, NPX_INVOCATION } from './chunk-3LSG7Z4I.js';
 import { resolveOne } from './chunk-J7LKEB2R.js';
-import { embeddingsCached, resolveEmbedModel, loadEmbedder, getNodeEmbeddings, queryGraphSemantic, queryGraph, unavailableMessage, countPending, indexFor, impactOf, modelCacheInfo, clearModelCache } from './chunk-EETK7S43.js';
+import { embeddingsCached, resolveEmbedModel, loadEmbedder, getNodeEmbeddings, queryGraphSemantic, queryGraph, unavailableMessage, countPending, indexFor, impactOf, modelCacheInfo, clearModelCache } from './chunk-SDG242R4.js';
 import { discoverModels } from './chunk-CQDUBAQY.js';
 import { freeBytesOnVolume, weightStoreDir, listCachedWeights, ensureWeightCached, catalogIntegrityReport } from './chunk-OV4KGXPD.js';
 import { resolvedGrammarFiles, grammarSetVersion } from './chunk-UTNNGKKX.js';
 import './chunk-RXP66R2E.js';
-import { loadGraph, SCHEMA_VERSION } from './chunk-IZNOMGR6.js';
-import { resolveGraphPath, renderReport, loadGraphFileWithSnapshot, writeArtifacts, vibgrateDir, mapFileExists, ensureVibgrateGitignore } from './chunk-QWOJO32H.js';
-import { VERSION } from './chunk-NNB2H4BA.js';
+import { loadGraph, SCHEMA_VERSION } from './chunk-T6DRYOMT.js';
+import { resolveGraphPath, renderReport, loadGraphFileWithSnapshot, writeArtifacts, vibgrateDir, mapFileExists, ensureVibgrateGitignore } from './chunk-76TDXGGF.js';
+import { VERSION } from './chunk-TGDHOAXX.js';
 import { cacheDir, serializeGraph, stableStringify } from './chunk-ZKNB4YH4.js';
 import './chunk-BWPBB45M.js';
 import { canonicalize, hashString, hashBytes } from './chunk-JFGYT6BI.js';
@@ -2822,90 +2822,35 @@ function projectByPath(a, projectPath) {
   }
   return void 0;
 }
-function projectHasLocalLockOrCsproj(rootDir, proj) {
-  const base = proj.path === "." || proj.path === "" ? "" : proj.path;
-  const dirAbs = base ? path37.join(rootDir, base) : rootDir;
-  const lockNames = (() => {
-    switch (proj.type) {
-      case "node":
-      case "typescript":
-        return ["pnpm-lock.yaml", "yarn.lock", "package-lock.json", "bun.lockb", "bun.lock"];
-      case "python":
-        return ["poetry.lock", "uv.lock", "Pipfile.lock"];
-      case "go":
-        return ["go.sum"];
-      case "rust":
-        return ["Cargo.lock"];
-      case "ruby":
-        return ["Gemfile.lock"];
-      case "php":
-        return ["composer.lock"];
-      case "dotnet":
-        return ["packages.lock.json"];
-      case "dart":
-        return ["pubspec.lock"];
-      case "java":
-      case "kotlin":
-      case "scala":
-      case "groovy":
-        return ["gradle.lockfile"];
-      default:
-        return [
-          "pnpm-lock.yaml",
-          "yarn.lock",
-          "package-lock.json",
-          "bun.lockb",
-          "poetry.lock",
-          "uv.lock",
-          "Cargo.lock",
-          "go.sum",
-          "Gemfile.lock",
-          "composer.lock",
-          "packages.lock.json",
-          "pubspec.lock"
-        ];
-    }
-  })();
-  for (const name of lockNames) {
-    try {
-      if (fs7.existsSync(path37.join(dirAbs, name))) return true;
-    } catch {
-    }
-  }
-  try {
-    if (fs7.existsSync(dirAbs)) {
-      const entries = fs7.readdirSync(dirAbs);
-      if (entries.some((e) => /\.(csproj|fsproj|vbproj)$/i.test(e))) return true;
-    }
-  } catch {
-  }
-  const manifest = manifestRelativePath(proj);
-  if (/\.(csproj|fsproj|vbproj)$/i.test(manifest)) {
-    try {
-      if (fs7.existsSync(path37.join(rootDir, manifest))) return true;
-    } catch {
-    }
-  }
-  return false;
-}
 function buildProjectRefs(rootDir, projects) {
   if (projects.length === 0) return void 0;
-  const refs = projects.filter((p) => projectHasLocalLockOrCsproj(rootDir, p)).map((p) => {
+  const byPath = /* @__PURE__ */ new Map();
+  for (const p of projects) {
     const rel = p.path === "" ? "." : p.path;
-    const base = rel === "." || rel === "" ? "root" : path37.basename(rel);
+    const prev = byPath.get(rel);
+    if (!prev) {
+      byPath.set(rel, p);
+      continue;
+    }
+    if (!prev.drift && p.drift) byPath.set(rel, p);
+  }
+  const refs = [];
+  for (const [rel, p] of byPath) {
+    if (!p.drift) continue;
     const lockfilePath = lockfileRelativePath(rootDir, p);
-    return {
+    refs.push({
       path: rel,
-      name: base,
+      // Full relative path for display/identity; package name alone collides
+      // across nested fixtures (e.g. two "mcp" leaves).
+      name: rel,
       manifestPath: manifestRelativePath(p),
       ...lockfilePath ? { lockfilePath } : {},
-      ...p.drift ? {
-        score: p.drift.score,
-        band: p.drift.riskLevel ?? "low",
-        mode: p.drift.mode ?? "verified"
-      } : {}
-    };
-  }).sort((a, b) => a.path.localeCompare(b.path));
+      score: p.drift.score,
+      band: p.drift.riskLevel ?? "low",
+      mode: p.drift.mode ?? "verified"
+    });
+  }
+  refs.sort((a, b) => a.path.localeCompare(b.path));
   return refs.length > 0 ? refs : void 0;
 }
 function projectForFile(root2, a, filePath) {
@@ -6414,7 +6359,7 @@ function registerCode(program) {
       try {
         const { parseMode: parseMode2, resolveMode: resolveMode2, readOrchestratorState: readOrchestratorState2, activePin: activePin2 } = await import('./model-orchestrator-LHYPJBFH.js');
         const { gatherSystemMemory: gatherSystemMemory2 } = await import('./local-runtime-2ED33KK6.js');
-        const { loadGraph: loadGraph2 } = await import('./load-A5BGEQWP.js');
+        const { loadGraph: loadGraph2 } = await import('./load-E3OTM7BS.js');
         const state = readOrchestratorState2();
         const mode = parseMode2(modeFlag) ?? state.defaultMode ?? void 0;
         const pin = mode ? activePin2(mode, state) : null;
@@ -6498,7 +6443,7 @@ function registerCode(program) {
       if (!(process.stdin.isTTY && process.stdout.isTTY)) {
         throw usageError('say what to change, e.g. `vg code "add a --timeout flag to the scan command"` (guided mode needs an interactive terminal)');
       }
-      const { runInteractive } = await import('./interactive-2TAYVEHE.js');
+      const { runInteractive } = await import('./interactive-TMQR6TXM.js');
       await runInteractive(
         rootOf(global),
         global,
@@ -6528,7 +6473,7 @@ function registerCode(program) {
     }
     if (!instruction) throw usageError('say what to change, e.g. `vg code "add a --timeout flag to the scan command"`');
     {
-      const { ensureCodeMap } = await import('./ensure-map-C3NEC2GI.js');
+      const { ensureCodeMap } = await import('./ensure-map-SMWHKOUY.js');
       const mapRoot = rootOf(global);
       try {
         await ensureCodeMap(mapRoot, global, {
@@ -6613,20 +6558,20 @@ function registerCode(program) {
         process.stdout.write(JSON.stringify(line) + "\n");
       };
       try {
-        const { RunOutcomeRecorder, newOneShotRunId, turnRunId } = await import('./run-outcome-OSIVMVT7.js');
+        const { RunOutcomeRecorder, newOneShotRunId, turnRunId } = await import('./run-outcome-QWLNBASF.js');
         const primarySlug = route.providers[0]?.model.includes("/") ? route.providers[0].model.split("/")[0] : route.providers[0]?.id;
-        const { runCodeStreamJson, parseHostMessage } = await import('./stream-json-CFKBL3MR.js');
-        const { nodeCodeFs } = await import('./session-3OBIQLE4.js');
+        const { runCodeStreamJson, parseHostMessage } = await import('./stream-json-GM44SP7L.js');
+        const { nodeCodeFs } = await import('./session-MG6BJVAG.js');
         const readline5 = await import('readline');
         const child = await import('child_process');
         const { loadOrDiscoverFederation } = await import('./federation-MDQPO3PW.js');
         const { resolveExecutionEnv } = await import('./execution-env-4MS5AYAN.js');
         const { resolveModelExecutionProfile, mergeModelExecutionProfile } = await import('./model-execution-profile-ELWF3Z6H.js');
-        const { startCodeRuntimeSession } = await import('./runtime-session-UPTC3E6N.js');
-        const { resolveGraphBackend } = await import('./graph-backend-G5Y6QQV4.js');
+        const { startCodeRuntimeSession } = await import('./runtime-session-UQ7UVAPL.js');
+        const { resolveGraphBackend } = await import('./graph-backend-I4I72J4W.js');
         const { detectGitRef } = await import('./git-ref-RSRAN4OH.js');
         const { repositoryIdFromRoot } = await import('./paths-62AKTFSR.js');
-        const { vgdRequest: vgdRequest2 } = await import('./vgd-HNPOSXKZ.js');
+        const { vgdRequest: vgdRequest2 } = await import('./vgd-ZUSBEVUL.js');
         const federation = loadOrDiscoverFederation(root2);
         const modelProfile = mergeModelExecutionProfile(
           resolveModelExecutionProfile({
@@ -6684,7 +6629,7 @@ ${res.stderr}` : ""),
             exitCode: res.status ?? 1
           };
         };
-        const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-JHRKJBVT.js');
+        const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-3WFC7LGE.js');
         const vgBuiltin = createVgBuiltinMcpTools({
           getGraph: () => graph,
           root: root2,
@@ -6758,7 +6703,8 @@ ${res.stderr}` : ""),
           capsule,
           files: opts.file.length ? opts.file : void 0,
           worktreeOverlay: true,
-          advancedMode: !capsule,
+          // Full coding agent: free discovery by default. Capsule is context only.
+          advancedMode: true,
           externalTools,
           attribution: {
             client: "vg-code",
@@ -6771,15 +6717,15 @@ ${res.stderr}` : ""),
         };
         try {
           if (opts.session) {
-            const { runCodeStreamJsonSession } = await import('./stream-json-CFKBL3MR.js');
-            const { runAgent: runAgent2 } = await import('./agent-6PPW5GIV.js');
+            const { runCodeStreamJsonSession } = await import('./stream-json-GM44SP7L.js');
+            const { runAgent: runAgent2 } = await import('./agent-4DAECASW.js');
             const {
               loadLatestSession,
               newSession,
               recordTask,
               saveSession,
               summarizeSession
-            } = await import('./session-store-O4XPXKOV.js');
+            } = await import('./session-store-SQECEXUU.js');
             const resumedRecord = opts.continue ? loadLatestSession(root2) : void 0;
             let record = resumedRecord ?? newSession(
               `s${Date.now().toString(36)}`,
@@ -6920,17 +6866,17 @@ ${res.stderr}` : ""),
       if (!autonomous && !tty) {
         throw usageError("the agent approves each edit/command \u2014 run in a terminal to approve interactively, or pass --auto to run autonomously (or --single for a one-shot diff).");
       }
-      const { agentTask } = await import('./interactive-2TAYVEHE.js');
-      const { nodeCodeFs } = await import('./session-3OBIQLE4.js');
+      const { agentTask } = await import('./interactive-TMQR6TXM.js');
+      const { nodeCodeFs } = await import('./session-MG6BJVAG.js');
       const { TtyPrompter } = await import('./ui-K7D3BCHD.js');
       let priorSummary;
       if (opts.continue) {
-        const { loadLatestSession, summarizeSession } = await import('./session-store-O4XPXKOV.js');
+        const { loadLatestSession, summarizeSession } = await import('./session-store-SQECEXUU.js');
         const prev = loadLatestSession(root2);
         if (prev) priorSummary = summarizeSession(prev);
       }
       const prompter = tty ? new TtyPrompter() : void 0;
-      const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-JHRKJBVT.js');
+      const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-3WFC7LGE.js');
       const vgBuiltin = createVgBuiltinMcpTools({
         getGraph: () => graph,
         root: root2,
@@ -6954,11 +6900,11 @@ ${res.stderr}` : ""),
         const { loadFederation } = await import('./federation-MDQPO3PW.js');
         const { resolveExecutionEnv } = await import('./execution-env-4MS5AYAN.js');
         const { resolveModelExecutionProfile, mergeModelExecutionProfile } = await import('./model-execution-profile-ELWF3Z6H.js');
-        const { startCodeRuntimeSession } = await import('./runtime-session-UPTC3E6N.js');
-        const { resolveGraphBackend } = await import('./graph-backend-G5Y6QQV4.js');
+        const { startCodeRuntimeSession } = await import('./runtime-session-UQ7UVAPL.js');
+        const { resolveGraphBackend } = await import('./graph-backend-I4I72J4W.js');
         const { detectGitRef } = await import('./git-ref-RSRAN4OH.js');
         const { repositoryIdFromRoot } = await import('./paths-62AKTFSR.js');
-        const { vgdRequest: vgdRequest2 } = await import('./vgd-HNPOSXKZ.js');
+        const { vgdRequest: vgdRequest2 } = await import('./vgd-ZUSBEVUL.js');
         const federation = loadFederation(root2);
         const modelProfile = mergeModelExecutionProfile(
           resolveModelExecutionProfile({
@@ -7848,7 +7794,7 @@ function registerDaemon(program) {
       throw new CliError(loaded.error, ExitCode.NOT_FOUND);
     }
     if (!loaded.ok) {
-      const { loadGraph: loadGraph2 } = await import('./load-A5BGEQWP.js');
+      const { loadGraph: loadGraph2 } = await import('./load-E3OTM7BS.js');
       const { detectGitRef } = await import('./git-ref-RSRAN4OH.js');
       const { repositoryIdFromRoot } = await import('./paths-62AKTFSR.js');
       const graph = loadGraph2(root2, global.graph);
@@ -8253,7 +8199,7 @@ var initCommand = new Command("init").description("Initialize vibgrate in a proj
     console.log(chalk7.green("\u2714") + ` Created ${chalk7.bold("vibgrate.config.ts")}`);
   }
   if (opts.baseline) {
-    const { runBaseline } = await import('./baseline-ZMHL6DXF.js');
+    const { runBaseline } = await import('./baseline-4BDH4F2W.js');
     await runBaseline(rootDir);
   }
   console.log("");