@vibgrate/cli 2026.801.1 → 2026.803.1

package/dist/ensure-map-5YEI7R7V.js

@@ -0,0 +1,29 @@
+export { ensureCodeMap } from './chunk-CE45STY5.js';
+import './chunk-O7MTBC52.js';
+import './chunk-CT5BS56U.js';
+import './chunk-FKFRASAB.js';
+import './chunk-SNKTD23L.js';
+import './chunk-NJFQCDGA.js';
+import './chunk-HTLDXEHW.js';
+import './chunk-CQDUBAQY.js';
+import './chunk-OV4KGXPD.js';
+import './chunk-DT4KIVRI.js';
+import './chunk-CRAMOEBE.js';
+import './chunk-VIWZ4QT7.js';
+import './chunk-BWMMR5XA.js';
+import './chunk-3LSG7Z4I.js';
+import './chunk-J7LKEB2R.js';
+import './chunk-5VH3Y4QC.js';
+import './chunk-UTNNGKKX.js';
+import './chunk-RXP66R2E.js';
+import './chunk-DIU3MXB3.js';
+import './chunk-N4IDP2M2.js';
+import './chunk-QT2PMGN3.js';
+import './chunk-AJ2KE3NT.js';
+import './chunk-5I4VSBWQ.js';
+import './chunk-BWPBB45M.js';
+import './chunk-JFGYT6BI.js';
+import './chunk-BPF3YX2U.js';
+import './chunk-Z6ZWNWWR.js';
+//# sourceMappingURL=ensure-map-5YEI7R7V.js.map
+//# sourceMappingURL=ensure-map-5YEI7R7V.js.map

package/dist/{ensure-map-SMWHKOUY.js.map → ensure-map-5YEI7R7V.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"ensure-map-SMWHKOUY.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"ensure-map-5YEI7R7V.js"}

package/dist/{graph-backend-I4I72J4W.js → graph-backend-CPHLUKUC.js}

@@ -1,11 +1,11 @@
-export { localGraphBackend, resolveGraphBackend, vgdGraphBackend } from './chunk-A43I2AJ4.js';
+export { localGraphBackend, resolveGraphBackend, vgdGraphBackend } from './chunk-JUSXLCSE.js';
 import './chunk-RBIRXQR6.js';
 import './chunk-J7LKEB2R.js';
-import './chunk-SDG242R4.js';
-import './chunk-ZKNB4YH4.js';
+import './chunk-5VH3Y4QC.js';
+import './chunk-AJ2KE3NT.js';
 import './chunk-BWPBB45M.js';
 import './chunk-JFGYT6BI.js';
 import './chunk-BPF3YX2U.js';
 import './chunk-Z6ZWNWWR.js';
-//# sourceMappingURL=graph-backend-I4I72J4W.js.map
-//# sourceMappingURL=graph-backend-I4I72J4W.js.map
+//# sourceMappingURL=graph-backend-CPHLUKUC.js.map
+//# sourceMappingURL=graph-backend-CPHLUKUC.js.map

package/dist/{graph-backend-I4I72J4W.js.map → graph-backend-CPHLUKUC.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"graph-backend-I4I72J4W.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"graph-backend-CPHLUKUC.js"}

package/dist/index.d.ts

@@ -2,7 +2,7 @@ import { G as GraphNode, a as GraphEdge, A as Area, R as ResolverKind, V as VgGr
 export { e as AnalysisTier, C as Centrality, D as DerivedBy, f as EpistemicTier, g as FactConfidence, h as FactKind, i as GraphMeta, j as GraphSummaries, H as HubBlastSummary, N as NodeKind, P as Provenance, S as SCHEMA_VERSION, k as Span, T as Toolchain, U as Unknown } from './types-DLH-Ritr.js';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 
-declare const VERSION = "2026.801.1";
+declare const VERSION = "2026.803.1";
 
 /**
  * Analysis stage: importance, centrality, hubs, communities, and surprise.
@@ -142,6 +142,9 @@ interface ResolveResult {
     edges: GraphEdge[];
     /** References the heuristic rung could not resolve (deduped, sorted). */
     unresolved: UnresolvedRef[];
+    /** File-level resolved import targets (rel → rels), for downstream
+     * change-scoping (the tsc cache's dependency-closure keys). Not serialized. */
+    importsByFile: Map<string, Set<string>>;
     /** Diagnostic counts, surfaced by `vg status`. */
     stats: {
         callsResolved: number;
@@ -231,6 +234,9 @@ interface BuildResult {
         heritage: number;
         resolved: number;
         shards?: number;
+        /** Files whose checker output was reused from the tsc cache (change-scoped
+         * downstream, gap-closure 2c). Subset of `files`. */
+        reusedFiles?: number;
     };
     /** Present when a SCIP index was ingested. */
     scip?: {
@@ -520,6 +526,25 @@ type EmbedProgress = (done: number, total: number) => void;
  */
 declare function getNodeEmbeddings(graph: VgGraph, embedder: Embedder, root: string, onProgress?: EmbedProgress): Promise<Map<string, number[]>>;
 
+interface RelevanceExpansion {
+    /** Single lowercase word, ready for identifier-part matching. */
+    term: string;
+    /** The question token/phrase (or topic id) that produced it. */
+    from: string;
+    /** 0..1 relative confidence; scales the expansion's scoring contribution. */
+    weight: number;
+}
+interface RelevanceTopic {
+    id: string;
+    /** 0..1, normalized within one analysis. */
+    score: number;
+}
+interface RelevanceAnalysis {
+    version: string;
+    topics: RelevanceTopic[];
+    expansions: RelevanceExpansion[];
+}
+
 /**
  * Deterministic retrieval for `vg ask` (VG-CLI-SPEC §3.2).
  *
@@ -537,6 +562,15 @@ declare function getNodeEmbeddings(graph: VgGraph, embedder: Embedder, root: str
 interface QueryOptions {
     budget?: number;
     limit?: number;
+    /** Optional pre-computed relevance analysis (engine/relevance-provider.ts).
+     *  Injected by async callers so this module stays pure and sync; when
+     *  absent, ranking is exactly the built-in lexicon path. */
+    relevance?: RelevanceAnalysis | null;
+    /** Optional per-node topic tags (engine/relevance-enrich.ts). Combined with
+     *  `relevance.topics` into a bounded affinity bonus: a node structurally
+     *  tagged with a topic the question is about ranks above an equal textual
+     *  match outside it. Never seeds alone — it multiplies existing evidence. */
+    topicTags?: Map<string, readonly string[]> | null;
 }
 interface QueryMatch {
     node: GraphNode;
@@ -556,11 +590,12 @@ interface SemanticQueryOptions extends QueryOptions {
     nodeVectors: Map<string, number[]>;
 }
 /**
- * Hybrid lexical + local-embedding retrieval. Blends the normalized lexical score
- * with cosine similarity to the query embedding (50/50), so a question like
- * "where do we handle auth failures?" can surface `verify_token` even with no
- * shared identifier. Deterministic given the same model + cached vectors;
- * embeddings live only in the cache, never in `graph.json`.
+ * Hybrid lexical + local-embedding retrieval, combined with Reciprocal Rank
+ * Fusion (Phase 3.2 — replaces the former 50/50 score blend), so a question
+ * like "where do we handle auth failures?" can surface `verify_token` even
+ * with no shared identifier. Topic affinity and importance stay multiplicative
+ * tiebreakers on the fused score. Deterministic given the same model + cached
+ * vectors; embeddings live only in the cache, never in `graph.json`.
  */
 declare function queryGraphSemantic(graph: VgGraph, question: string, options: SemanticQueryOptions): Promise<QueryResult>;
 /**
@@ -673,6 +708,8 @@ interface ToolContext {
     dedup?: boolean;
     /** Per-session set of node ids already returned in full (drives `--dedup`). */
     seen?: Set<string>;
+    /** Path the served graph was loaded from (locates its tags sidecar). */
+    graphPath?: string;
 }
 interface VgTool {
     name: string;
@@ -681,6 +718,23 @@ interface VgTool {
     handler: (graph: VgGraph, args: Record<string, unknown>, ctx: ToolContext) => unknown | Promise<unknown>;
 }
 declare const TOOLS: VgTool[];
+/**
+ * Server-side listing surface (the complement of the client-side deferral
+ * below, for hosts that cannot defer): `--surface hot` / `VG_MCP_SURFACE=hot`
+ * lists only the hot core, and `--tools a,b` / `VG_MCP_TOOLS=a,b` lists an
+ * explicit subset. LISTING ONLY — every tool in `TOOLS` stays callable
+ * whatever is listed (dispatch always resolves against the full array), so
+ * behaviour, ranking, and responses are byte-identical across surfaces; the
+ * only thing that changes is which schemas the host bills per step. Unknown
+ * names are dropped; an empty resolved set falls back to the full surface
+ * (fail-open — a typo must never produce a toolless server).
+ */
+interface ToolSurface {
+    /** 'hot' lists only HOT_TOOLS; 'full' (default) lists everything. */
+    surface?: 'hot' | 'full';
+    /** Explicit tool names to list (wins over `surface`). */
+    tools?: string[];
+}
 
 /** The graph-affecting discovery/build scope, replayed verbatim on refresh. */
 interface BuildScope {
@@ -953,6 +1007,13 @@ interface ServeOptions {
     dedup?: boolean;
     /** Auto-refresh the map when the working tree drifts (default true). */
     refresh?: boolean;
+    /**
+     * Event-driven refresh: recursive fs.watch on the workspace so a save
+     * rebuilds in ~400 ms instead of waiting out the freshness poll (default
+     * true when refresh is on; `--no-watch` opts out). Where recursive watch is
+     * unavailable the poll silently remains the only mechanism.
+     */
+    watch?: boolean;
     /**
      * Workspace root (project directory). When set, freshness probes and tools
      * use this instead of inferring root from the graph path.
@@ -964,6 +1025,12 @@ interface ServeOptions {
      * the process (the opt-in ledger above is a separate concern).
      */
     stats?: SessionStats;
+    /**
+     * Listing surface (`--surface hot` / `--tools a,b`). Filters ONLY what
+     * `tools/list` advertises; every tool stays callable so behaviour is
+     * byte-identical across surfaces. See `listedToolNames` in ./tools.ts.
+     */
+    toolSurface?: ToolSurface;
 }
 declare class GraphSource {
     readonly graphPath: string;
@@ -980,6 +1047,16 @@ declare class GraphSource {
     /** Self-tuned: grows with measured probe/rebuild cost so huge repos aren't penalized. */
     private probeIntervalMs;
     private readonly refreshImpl;
+    /**
+     * Files seen changing since the last COMMITTED refresh (watcher events,
+     * filename → last-seen ms). Entries are cleared only after a refresh that
+     * started at-or-after their last event completes with 'fresh'/'refreshed' —
+     * a change landing mid-refresh stays pending, so the staleness signal can
+     * be a false positive but never a false negative.
+     */
+    private readonly pendingChanges;
+    private watcher;
+    private watchTimer;
     constructor(graphPath: string, refresh?: boolean, 
     /** Timing / root overrides (production passes `root`; tests may pass more). */
     tuning?: GraphSourceTuning);
@@ -990,6 +1067,28 @@ declare class GraphSource {
      * degrade to "answer from the current map", not break the tool call.
      */
     private maybeRefresh;
+    /**
+     * Record a source change (watcher event, or a test). Arms the next probe to
+     * run immediately (bypassing the self-tuned interval — a real event is not a
+     * poll) and schedules a debounced background refresh so the rebuild happens
+     * BETWEEN tool calls instead of on the next call's 100 ms budget.
+     */
+    notePendingChange(filename: string): void;
+    /**
+     * Event-driven freshness (the serve-loop watcher): a recursive `fs.watch`
+     * on the workspace feeds `notePendingChange`, so a save triggers a rebuild
+     * in ~WATCH_DEBOUNCE_MS instead of waiting out the 2–30 s poll. The poll
+     * stays armed as the fallback — on filesystems where recursive watch fails
+     * (some containers/NFS) this returns false and behaviour is unchanged.
+     */
+    startWatching(): boolean;
+    stopWatching(): void;
+    /**
+     * In-band staleness signal for tool responses: what has changed since the
+     * last committed refresh. Null when the map is current (the common case —
+     * responses carry zero overhead then).
+     */
+    stalenessNote(): string | null;
 }
 declare function createServer(source: GraphSource, opts?: ServeOptions): Server;
 declare function serveStdio(graphPath: string, opts?: ServeOptions): Promise<void>;
@@ -1364,6 +1463,11 @@ interface BuildContextOptions {
     impactDepth?: number;
     /** Restrict the edit surface to these files (from `--file`), if given. */
     files?: string[];
+    /** Optional pre-computed relevance analysis (engine/relevance-provider.ts),
+     *  loaded by the async caller; widens seed vocabulary deterministically. */
+    relevance?: RelevanceAnalysis | null;
+    /** Optional per-node topic tags (engine/relevance-enrich.ts). */
+    topicTags?: Map<string, readonly string[]> | null;
 }
 /**
  * Build the context block for a coding instruction. The ordering is
@@ -1394,7 +1498,11 @@ declare const TASK_CAPSULE_SCHEMA_VERSION: "task-capsule/0";
 /** Bumped 2026.08.1: term roles (weak process verbs never seed alone), concept/bigram
  *  expansion (payments→stripe, "direct debit"→sepa/bacs/mandate), multi-term coverage
  *  bonus, directory-segment evidence — gated by the ask-quality corpus (bench/ask-corpus.mjs). */
-declare const CAPSULE_RANKING_VERSION: "capsule-rank@2026.08.1";
+/** Bumped 2026.08.2: optional relevance-provider seam — sanitized provider expansions
+ *  join term preparation (own 0..1 weight capped at EXPANSION_WEIGHT; weak-provenance
+ *  dropped); provider version recorded as `relevanceVersion` provenance. Absent
+ *  provider = 2026.08.1 behaviour exactly — gated by the same corpus, dual-mode. */
+declare const CAPSULE_RANKING_VERSION: "capsule-rank@2026.08.2";
 declare const CAPSULE_COMPILER_ID: "vg-task-capsule/0";
 interface BuildCapsuleOptions extends BuildContextOptions {
     /**
@@ -1470,6 +1578,9 @@ interface TaskCapsule {
         securityTier?: string | null;
         /** Frozen policy / ranking patch id if any. */
         policyVersion?: string | null;
+        /** Version of the optional relevance provider that widened seed
+         *  vocabulary for this capsule, or null when none was active. */
+        relevanceVersion?: string | null;
     };
 }
 interface CapsuleProvenanceExtras {

package/dist/index.js

@@ -1,28 +1,29 @@
-export { GraphSource, createServer, exportGraph, formatForExt, serveStdio } from './chunk-BNEHDLVZ.js';
-export { refreshIfStale } from './chunk-V3X3DBZL.js';
-export { ASSISTANTS, ResourceLimitError, SKIP_DIRS, SKIP_FILES, UsageError, analyze, applyCoverage, assistantById, buildFacts, buildGraph, decodeScipIndex, discover, driftCount, groundGraph, hasDrift, installAssistant, loadCoverage, loadSnapshot, probeFreshness, resolveLimits, scipEdges, uninstallAssistant, verifyDeterminism, writeSnapshot } from './chunk-KL65SSR7.js';
-export { FREE_PACK, TOOLS, coveringTests, detectRunner, shortestPath, testsToRun } from './chunk-7PVCHLR2.js';
-import './chunk-XRN7DQGR.js';
+export { GraphSource, createServer, exportGraph, formatForExt, serveStdio } from './chunk-2TLQDF6C.js';
+export { refreshIfStale } from './chunk-S4NSF5AZ.js';
+export { ASSISTANTS, ResourceLimitError, SKIP_DIRS, SKIP_FILES, UsageError, analyze, applyCoverage, assistantById, buildFacts, buildGraph, decodeScipIndex, discover, driftCount, groundGraph, hasDrift, installAssistant, loadCoverage, loadSnapshot, probeFreshness, resolveLimits, scipEdges, uninstallAssistant, verifyDeterminism, writeSnapshot } from './chunk-FKFRASAB.js';
+export { FREE_PACK, TOOLS, coveringTests, detectRunner, shortestPath, testsToRun } from './chunk-SNKTD23L.js';
+import './chunk-NJFQCDGA.js';
 import './chunk-HTLDXEHW.js';
+export { discoverModels } from './chunk-CQDUBAQY.js';
+import './chunk-OV4KGXPD.js';
+import './chunk-DT4KIVRI.js';
 import './chunk-CRAMOEBE.js';
-export { CAPSULE_COMPILER_ID, CAPSULE_RANKING_VERSION, TASK_CAPSULE_SCHEMA_VERSION, buildCodeContext, buildTaskCapsule, capsuleToCodeContext, readSavings, recordSaving, savingsRecorded, summarizeCapsule } from './chunk-MPP4S4OE.js';
-export { applyStaticTestLinkage, buildModuleResolver, isTestFile, parseJsonc, relativeResolver } from './chunk-IPICO2RV.js';
-export { addLibrary, inventory as dependencyInventory, driftFor, enrichOnline, libId, loadCatalog, readDoc, resolveLib, saveCatalog, searchSymbols } from './chunk-I6RBAIS3.js';
+export { CAPSULE_COMPILER_ID, CAPSULE_RANKING_VERSION, TASK_CAPSULE_SCHEMA_VERSION, buildCodeContext, buildTaskCapsule, capsuleToCodeContext, readSavings, recordSaving, savingsRecorded, summarizeCapsule } from './chunk-Y7YKUZ3T.js';
+export { applyStaticTestLinkage, buildModuleResolver, isTestFile, parseJsonc, relativeResolver } from './chunk-VIWZ4QT7.js';
+export { addLibrary, inventory as dependencyInventory, driftFor, enrichOnline, libId, loadCatalog, readDoc, resolveLib, saveCatalog, searchSymbols } from './chunk-BWMMR5XA.js';
 import './chunk-3LSG7Z4I.js';
 export { findNodes, nodeById, resolveOne } from './chunk-J7LKEB2R.js';
-export { GraphIndex, cosine, getNodeEmbeddings, identifierParts, impactOf, loadEmbedder, nodeEmbedText, queryGraph, queryGraphSemantic } from './chunk-SDG242R4.js';
-export { discoverModels } from './chunk-CQDUBAQY.js';
-import './chunk-OV4KGXPD.js';
+export { GraphIndex, cosine, getNodeEmbeddings, identifierParts, impactOf, loadEmbedder, nodeEmbedText, queryGraph, queryGraphSemantic } from './chunk-5VH3Y4QC.js';
 export { LANGUAGES, allLanguageIds, grammarsSourceDir, langById, langForExtension, parseSource } from './chunk-UTNNGKKX.js';
 import { redactUrlCredentials, redactSecrets } from './chunk-RXP66R2E.js';
-export { SCHEMA_VERSION, loadGraph } from './chunk-T6DRYOMT.js';
-export { defaultGraphPath, legacyGraphPath, preferInRepoGraph, renderHtml, renderReport, resolveGraphPath, vibgrateDir, writeArtifacts } from './chunk-76TDXGGF.js';
-export { VERSION } from './chunk-TGDHOAXX.js';
-export { parseGraph, serializeGraph, stableStringify } from './chunk-ZKNB4YH4.js';
+export { SCHEMA_VERSION, loadGraph } from './chunk-DIU3MXB3.js';
+export { defaultGraphPath, legacyGraphPath, preferInRepoGraph, renderHtml, renderReport, resolveGraphPath, vibgrateDir, writeArtifacts } from './chunk-N4IDP2M2.js';
+export { VERSION } from './chunk-QT2PMGN3.js';
+export { parseGraph, serializeGraph, stableStringify } from './chunk-AJ2KE3NT.js';
+import './chunk-5I4VSBWQ.js';
 import './chunk-BWPBB45M.js';
 import './chunk-JFGYT6BI.js';
 import './chunk-BPF3YX2U.js';
-import './chunk-DT4KIVRI.js';
 import './chunk-Z6ZWNWWR.js';
 import { execFileSync } from 'child_process';
 

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/engine/push.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBO,SAAS,aAAA,CAAc,IAAA,EAAc,KAAA,EAAgB,YAAA,EAA4C;AACtG,EAAA,MAAM,MAAM,GAAA,CAAI,IAAA,EAAM,CAAC,WAAA,EAAa,MAAM,CAAC,CAAA,IAAK,0CAAA;AAChD,EAAA,MAAM,MAAA,GAAS,IAAI,IAAA,EAAM,CAAC,aAAa,cAAA,EAAgB,MAAM,CAAC,CAAA,IAAK,MAAA;AACnE,EAAA,MAAM,SAAA,GAAY,IAAI,IAAA,EAAM,CAAC,UAAU,OAAA,EAAS,mBAAmB,CAAC,CAAA,IAAK,MAAA;AACzE,EAAA,OAAO;AAAA,IACL,aAAA,EAAe,cAAA;AAAA,IACf,YAAA,EAAc,OAAA;AAAA,IACd,YAAA;AAAA,IACA,GAAA,EAAK,EAAE,GAAA,EAAK,QAAA,EAAU,IAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,EAAG,MAAA,EAAO;AAAA,IAC/C,YAAY,SAAA,GAAY,EAAE,WAAW,oBAAA,CAAqB,SAAS,GAAE,GAAI,MAAA;AAAA,IACzE,aAAa,KAAA,CAAM,WAAA;AAAA,IACnB,KAAA,EAAO,YAAY,KAAK;AAAA,GAC1B;AACF;AAOO,SAAS,YAAY,KAAA,EAAyB;AACnD,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,KAAA,EAAO,KAAA,CAAM,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM;AAC5B,MAAA,MAAM,YAAY,CAAA,CAAE,SAAA,GAAY,cAAc,CAAA,CAAE,SAAS,IAAI,CAAA,CAAE,SAAA;AAC/D,MAAA,MAAM,MAAM,CAAA,CAAE,GAAA,GAAM,cAAc,CAAA,CAAE,GAAG,IAAI,CAAA,CAAE,GAAA;AAC7C,MAAA,OAAO,SAAA,KAAc,CAAA,CAAE,SAAA,IAAa,GAAA,KAAQ,CAAA,CAAE,GAAA,GAAM,EAAE,GAAG,CAAA,EAAG,SAAA,EAAW,GAAA,EAAI,GAAI,CAAA;AAAA,IACjF,CAAC;AAAA,GACH;AACF;AAEA,SAAS,GAAA,CAAI,MAAc,IAAA,EAA+B;AACxD,EAAA,IAAI;AACF,IAAA,OAAO,YAAA,CAAa,KAAA,EAAO,IAAA,EAAM,EAAE,GAAA,EAAK,IAAA,EAAM,QAAA,EAAU,MAAA,EAAQ,CAAA,CAAE,IAAA,EAAK,IAAK,IAAA;AAAA,EAC9E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["import { execFileSync } from 'node:child_process';\nimport { redactSecrets, redactUrlCredentials } from '../core-open/utils/redact.js';\nimport type { VgGraph } from '../schema.js';\n\n/**\n * The deferred, decoupled push envelope (VG-PACKAGE-AND-SCHEMA §7). In the open\n * CLI `vg push` is **specified but not built**: it assembles and redacts the\n * envelope and prints a notice, but performs **no network upload**. Nothing in\n * the free path depends on it. Drift-over-time/governance is the separate\n * commercial product.\n */\n\nexport interface GraphUploadEnvelope {\n  schemaVersion: 'vg-graph/1.0';\n  artifactType: 'graph';\n  scanIngestId?: string;\n  vcs: { sha: string; shortSha: string; branch: string };\n  repository?: { name?: string; remoteUrl?: string };\n  generatedAt: string;\n  graph: VgGraph;\n}\n\nexport function buildEnvelope(root: string, graph: VgGraph, scanIngestId?: string): GraphUploadEnvelope {\n  const sha = git(root, ['rev-parse', 'HEAD']) ?? '0000000000000000000000000000000000000000';\n  const branch = git(root, ['rev-parse', '--abbrev-ref', 'HEAD']) ?? 'HEAD';\n  const remoteUrl = git(root, ['config', '--get', 'remote.origin.url']) ?? undefined;\n  return {\n    schemaVersion: 'vg-graph/1.0',\n    artifactType: 'graph',\n    scanIngestId,\n    vcs: { sha, shortSha: sha.slice(0, 12), branch },\n    repository: remoteUrl ? { remoteUrl: redactUrlCredentials(remoteUrl) } : undefined,\n    generatedAt: graph.generatedAt,\n    graph: redactGraph(graph),\n  };\n}\n\n/**\n * Redaction pass (GUARDRAILS §1: redact before storage). The graph is structure,\n * not content, but we defensively scrub any signature/name that matches a\n * credential-shaped pattern, and strip credentials from the remote URL.\n */\nexport function redactGraph(graph: VgGraph): VgGraph {\n  return {\n    ...graph,\n    nodes: graph.nodes.map((n) => {\n      const signature = n.signature ? redactSecrets(n.signature) : n.signature;\n      const doc = n.doc ? redactSecrets(n.doc) : n.doc;\n      return signature !== n.signature || doc !== n.doc ? { ...n, signature, doc } : n;\n    }),\n  };\n}\n\nfunction git(root: string, args: string[]): string | null {\n  try {\n    return execFileSync('git', args, { cwd: root, encoding: 'utf8' }).trim() || null;\n  } catch {\n    return null;\n  }\n}\n"]}
+{"version":3,"sources":["../src/engine/push.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAsBO,SAAS,aAAA,CAAc,IAAA,EAAc,KAAA,EAAgB,YAAA,EAA4C;AACtG,EAAA,MAAM,MAAM,GAAA,CAAI,IAAA,EAAM,CAAC,WAAA,EAAa,MAAM,CAAC,CAAA,IAAK,0CAAA;AAChD,EAAA,MAAM,MAAA,GAAS,IAAI,IAAA,EAAM,CAAC,aAAa,cAAA,EAAgB,MAAM,CAAC,CAAA,IAAK,MAAA;AACnE,EAAA,MAAM,SAAA,GAAY,IAAI,IAAA,EAAM,CAAC,UAAU,OAAA,EAAS,mBAAmB,CAAC,CAAA,IAAK,MAAA;AACzE,EAAA,OAAO;AAAA,IACL,aAAA,EAAe,cAAA;AAAA,IACf,YAAA,EAAc,OAAA;AAAA,IACd,YAAA;AAAA,IACA,GAAA,EAAK,EAAE,GAAA,EAAK,QAAA,EAAU,IAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,EAAG,MAAA,EAAO;AAAA,IAC/C,YAAY,SAAA,GAAY,EAAE,WAAW,oBAAA,CAAqB,SAAS,GAAE,GAAI,MAAA;AAAA,IACzE,aAAa,KAAA,CAAM,WAAA;AAAA,IACnB,KAAA,EAAO,YAAY,KAAK;AAAA,GAC1B;AACF;AAOO,SAAS,YAAY,KAAA,EAAyB;AACnD,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,KAAA,EAAO,KAAA,CAAM,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM;AAC5B,MAAA,MAAM,YAAY,CAAA,CAAE,SAAA,GAAY,cAAc,CAAA,CAAE,SAAS,IAAI,CAAA,CAAE,SAAA;AAC/D,MAAA,MAAM,MAAM,CAAA,CAAE,GAAA,GAAM,cAAc,CAAA,CAAE,GAAG,IAAI,CAAA,CAAE,GAAA;AAC7C,MAAA,OAAO,SAAA,KAAc,CAAA,CAAE,SAAA,IAAa,GAAA,KAAQ,CAAA,CAAE,GAAA,GAAM,EAAE,GAAG,CAAA,EAAG,SAAA,EAAW,GAAA,EAAI,GAAI,CAAA;AAAA,IACjF,CAAC;AAAA,GACH;AACF;AAEA,SAAS,GAAA,CAAI,MAAc,IAAA,EAA+B;AACxD,EAAA,IAAI;AACF,IAAA,OAAO,YAAA,CAAa,KAAA,EAAO,IAAA,EAAM,EAAE,GAAA,EAAK,IAAA,EAAM,QAAA,EAAU,MAAA,EAAQ,CAAA,CAAE,IAAA,EAAK,IAAK,IAAA;AAAA,EAC9E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["import { execFileSync } from 'node:child_process';\nimport { redactSecrets, redactUrlCredentials } from '../core-open/utils/redact.js';\nimport type { VgGraph } from '../schema.js';\n\n/**\n * The deferred, decoupled push envelope (VG-PACKAGE-AND-SCHEMA §7). In the open\n * CLI `vg push` is **specified but not built**: it assembles and redacts the\n * envelope and prints a notice, but performs **no network upload**. Nothing in\n * the free path depends on it. Drift-over-time/governance is the separate\n * commercial product.\n */\n\nexport interface GraphUploadEnvelope {\n  schemaVersion: 'vg-graph/1.0';\n  artifactType: 'graph';\n  scanIngestId?: string;\n  vcs: { sha: string; shortSha: string; branch: string };\n  repository?: { name?: string; remoteUrl?: string };\n  generatedAt: string;\n  graph: VgGraph;\n}\n\nexport function buildEnvelope(root: string, graph: VgGraph, scanIngestId?: string): GraphUploadEnvelope {\n  const sha = git(root, ['rev-parse', 'HEAD']) ?? '0000000000000000000000000000000000000000';\n  const branch = git(root, ['rev-parse', '--abbrev-ref', 'HEAD']) ?? 'HEAD';\n  const remoteUrl = git(root, ['config', '--get', 'remote.origin.url']) ?? undefined;\n  return {\n    schemaVersion: 'vg-graph/1.0',\n    artifactType: 'graph',\n    scanIngestId,\n    vcs: { sha, shortSha: sha.slice(0, 12), branch },\n    repository: remoteUrl ? { remoteUrl: redactUrlCredentials(remoteUrl) } : undefined,\n    generatedAt: graph.generatedAt,\n    graph: redactGraph(graph),\n  };\n}\n\n/**\n * Redaction pass (GUARDRAILS §1: redact before storage). The graph is structure,\n * not content, but we defensively scrub any signature/name that matches a\n * credential-shaped pattern, and strip credentials from the remote URL.\n */\nexport function redactGraph(graph: VgGraph): VgGraph {\n  return {\n    ...graph,\n    nodes: graph.nodes.map((n) => {\n      const signature = n.signature ? redactSecrets(n.signature) : n.signature;\n      const doc = n.doc ? redactSecrets(n.doc) : n.doc;\n      return signature !== n.signature || doc !== n.doc ? { ...n, signature, doc } : n;\n    }),\n  };\n}\n\nfunction git(root: string, args: string[]): string | null {\n  try {\n    return execFileSync('git', args, { cwd: root, encoding: 'utf8' }).trim() || null;\n  } catch {\n    return null;\n  }\n}\n"]}

package/dist/{interactive-TMQR6TXM.js → interactive-TNRE4OEK.js}

@@ -1,52 +1,52 @@
-import { startCodeRuntimeSession } from './chunk-E6H2F2XF.js';
-import { ensureCodeMap } from './chunk-G7W4MFPZ.js';
+import { startCodeRuntimeSession } from './chunk-6I4TXAI6.js';
+import { ensureCodeMap } from './chunk-CE45STY5.js';
 import { TtyPrompter, PromptCancelled } from './chunk-JYS4OBN2.js';
 import { McpToolset, defaultMcpConnect } from './chunk-LEPTUB4H.js';
-import { newSession, loadLatestSession, summarizeSession, saveSession, recordTask } from './chunk-7G5S5KZN.js';
-import { fetchCatalog, resolveProviders, topProviders } from './chunk-JLWI2JGA.js';
-import { BranchGraphSession } from './chunk-V2QK3IUY.js';
+import { newSession, loadLatestSession, summarizeSession, saveSession, condenseSession, recordTask } from './chunk-KUZLILN3.js';
+import { fetchCatalog, resolveProviders, topProviders } from './chunk-4HFSUIIN.js';
+import { BranchGraphSession } from './chunk-B2KLJPFY.js';
+import './chunk-7AVYKZEM.js';
 import './chunk-WHJMS7XC.js';
-import { nodeCodeFs, undoChanges } from './chunk-WIDZ5IE7.js';
-import { printCodeLogo } from './chunk-XEJJGDGX.js';
+import { nodeCodeFs, undoChanges } from './chunk-CC6F75GI.js';
+import { printCodeLogo } from './chunk-O7MTBC52.js';
 import { info, c, out } from './chunk-CT5BS56U.js';
-import { loadOrDiscoverFederation } from './chunk-5I4VSBWQ.js';
 import { resolveExecutionEnv } from './chunk-IS7VTH2Q.js';
 import { hasOllama, gatherSystemMemory, stopModel, pullModelClean } from './chunk-OWSFZQOP.js';
 import { estimateModelBytes, assessCapability, fmt } from './chunk-7N4Y3E47.js';
 import { mergeModelExecutionProfile, resolveModelExecutionProfile } from './chunk-IZDH67DX.js';
 import './chunk-3LOWJSAF.js';
-import { runAgent } from './chunk-IRCYOTRG.js';
+import { runAgent } from './chunk-536J6HUR.js';
 import './chunk-543E6WDJ.js';
-import { summarizeDiffs } from './chunk-G25STLE7.js';
+import { summarizeDiffs } from './chunk-SJFBXCII.js';
 import './chunk-REIGWTTH.js';
-import { resolveGraphBackend } from './chunk-A43I2AJ4.js';
+import { resolveGraphBackend } from './chunk-JUSXLCSE.js';
 import { vgdIsRunning, vgdRequest } from './chunk-RBIRXQR6.js';
 import './chunk-5HYCB55P.js';
-import './chunk-7AVYKZEM.js';
-import { refreshIfStale } from './chunk-V3X3DBZL.js';
-import './chunk-KL65SSR7.js';
-import './chunk-7PVCHLR2.js';
-import './chunk-XRN7DQGR.js';
+import { refreshIfStale } from './chunk-S4NSF5AZ.js';
+import './chunk-FKFRASAB.js';
+import './chunk-SNKTD23L.js';
+import './chunk-NJFQCDGA.js';
 import './chunk-HTLDXEHW.js';
+import { discoverModels } from './chunk-CQDUBAQY.js';
+import './chunk-OV4KGXPD.js';
+import './chunk-DT4KIVRI.js';
 import './chunk-CRAMOEBE.js';
-import { readModelSavings } from './chunk-MPP4S4OE.js';
-import './chunk-IPICO2RV.js';
-import './chunk-I6RBAIS3.js';
+import { readModelSavings } from './chunk-Y7YKUZ3T.js';
+import './chunk-VIWZ4QT7.js';
+import './chunk-BWMMR5XA.js';
 import './chunk-3LSG7Z4I.js';
 import './chunk-J7LKEB2R.js';
-import './chunk-SDG242R4.js';
-import { discoverModels } from './chunk-CQDUBAQY.js';
-import './chunk-OV4KGXPD.js';
+import './chunk-5VH3Y4QC.js';
 import './chunk-UTNNGKKX.js';
 import './chunk-RXP66R2E.js';
-import { loadGraph } from './chunk-T6DRYOMT.js';
-import { resolveGraphPath } from './chunk-76TDXGGF.js';
-import './chunk-TGDHOAXX.js';
-import './chunk-ZKNB4YH4.js';
+import { loadGraph } from './chunk-DIU3MXB3.js';
+import { resolveGraphPath } from './chunk-N4IDP2M2.js';
+import './chunk-QT2PMGN3.js';
+import './chunk-AJ2KE3NT.js';
+import { loadOrDiscoverFederation } from './chunk-5I4VSBWQ.js';
 import './chunk-BWPBB45M.js';
 import './chunk-JFGYT6BI.js';
 import './chunk-BPF3YX2U.js';
-import './chunk-DT4KIVRI.js';
 import './chunk-Z6ZWNWWR.js';
 import { spawnSync } from 'child_process';
 
@@ -316,7 +316,7 @@ async function codingRepl(root, global, opts, selection, prompter) {
     } else prompter.note(c.dim("no previous session to continue"));
   }
   const graphHolder = { current: null };
-  const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-3WFC7LGE.js');
+  const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-D463EHQI.js');
   const vgBuiltin = createVgBuiltinMcpTools({
     getGraph: () => {
       if (!graphHolder.current) throw new Error("graph not loaded yet");
@@ -401,7 +401,7 @@ async function codingRepl(root, global, opts, selection, prompter) {
       if (line.startsWith("/")) {
         const [cmd] = line.slice(1).split(/\s+/);
         if (cmd === "help") {
-          prompter.note("commands: /undo /diff /model /cost /clear /exit");
+          prompter.note("commands: /undo /diff /model /cost /compact /clear /exit");
         } else if (cmd === "undo") {
           if (lastChanges.length === 0) prompter.note(c.dim("nothing to undo"));
           else {
@@ -429,6 +429,15 @@ async function codingRepl(root, global, opts, selection, prompter) {
         } else if (cmd === "cost") {
           prompter.note(`this session: ${meter.summary()}`);
           printCost(root);
+        } else if (cmd === "compact") {
+          if (store.tasks.length <= 1) prompter.note(c.dim("nothing to compact yet"));
+          else {
+            const before = store.tasks.length;
+            store = condenseSession(store, Date.now());
+            saveSession(root, store);
+            priorSummary = summarizeSession(store) || void 0;
+            prompter.note(c.green(`compacted ${before} task(s) into one checkpoint \u2014 future turns carry the short recap`));
+          }
         } else if (cmd === "clear") {
           prompter.note(c.dim("each task already starts fresh \u2014 nothing to clear"));
         } else {
@@ -501,7 +510,8 @@ async function codingRepl(root, global, opts, selection, prompter) {
         executionEnv,
         graphBackend,
         modelProfile,
-        extraPinnedFacts
+        extraPinnedFacts,
+        llmCompaction: true
       });
       priorSummary = void 0;
       if (result.changes.length) {
@@ -624,6 +634,8 @@ async function agentTask(params) {
       if (!e.ok && e.summary.trim()) {
         for (const line of e.summary.split("\n").slice(0, 6)) info(c.dim(`    ${line}`));
       }
+    } else if (e.type === "notice") {
+      info(c.dim(`  \xB7 ${e.text}`));
     } else if (e.type === "session-graph") {
       info(c.dim(`  \xB7 session graph updated (${e.reparsed} reparsed, ${e.dirty} dirty)`));
     } else if (e.type === "capsule") {
@@ -664,6 +676,7 @@ async function agentTask(params) {
     externalTools: params.externalTools,
     capsule: params.capsule,
     files: params.files,
+    llmCompaction: params.llmCompaction,
     now: () => Date.now()
   });
   closeStream();
@@ -696,5 +709,5 @@ ${res.stderr}` : "");
 }
 
 export { agentTask, runInteractive };
-//# sourceMappingURL=interactive-TMQR6TXM.js.map
-//# sourceMappingURL=interactive-TMQR6TXM.js.map
+//# sourceMappingURL=interactive-TNRE4OEK.js.map
+//# sourceMappingURL=interactive-TNRE4OEK.js.map