@vibgrate/cli 2026.806.2 → 2026.813.1

package/dist/cli.js

@@ -1,37 +1,37 @@
 #!/usr/bin/env node
-import { loadAdvancedScanHook, baselineCommand } from './chunk-Y4JO6LYP.js';
-import { fetchCatalog, resolveProviders } from './chunk-IQJUFRZZ.js';
-import { VGD_PROTOCOL_VERSION, startVgdServer } from './chunk-VTJAPNJO.js';
+import { loadAdvancedScanHook, baselineCommand } from './chunk-5ROZODMW.js';
+import { fetchCatalog, resolveProviders } from './chunk-OYHAF2J2.js';
+import { VGD_PROTOCOL_VERSION, startVgdServer } from './chunk-JYM4QT6F.js';
 import './chunk-IS7VTH2Q.js';
-import { telemetryOptOut, StatsSharer, statsEndpoint, isCI } from './chunk-6XKDAYYR.js';
-import { runCodeSession } from './chunk-KAOSPAFK.js';
-import { CONTEXT_POLICY_VERSION, computeFcsReport, renderFcsReportMarkdown, createTrajectoryCollector, runAgent } from './chunk-I2JNLAKW.js';
+import { telemetryOptOut, StatsSharer, statsEndpoint, isCI } from './chunk-KF2QT6RY.js';
+import { runCodeSession } from './chunk-Z3AYOZ3C.js';
+import { CONTEXT_POLICY_VERSION, computeFcsReport, renderFcsReportMarkdown, createTrajectoryCollector, runAgent } from './chunk-RHKJPTON.js';
 import './chunk-543E6WDJ.js';
-import { summarizeDiffs, ScriptedProvider } from './chunk-SI4D7DYF.js';
+import { summarizeDiffs, ScriptedProvider } from './chunk-ADP6ITGF.js';
 import './chunk-7AVYKZEM.js';
 import { buildModelInstallPlan } from './chunk-WHJMS7XC.js';
 import { ensurePackage, ensureUnavailableMessage } from './chunk-REIGWTTH.js';
-import { sha256Hex, generateKeypair, dssePae, DSSE_PAYLOAD_TYPE, keyId, registerBuild, readGlobal, applyGlobalOptions, ProgressBar, printLogo, runBuild } from './chunk-D2VEJHPC.js';
-export { runBuild } from './chunk-D2VEJHPC.js';
+import { sha256Hex, generateKeypair, dssePae, DSSE_PAYLOAD_TYPE, keyId, registerBuild, readGlobal, applyGlobalOptions, ProgressBar, printLogo, runBuild } from './chunk-5JJBGBP2.js';
+export { runBuild } from './chunk-5JJBGBP2.js';
 import { disableColor, info, c, json, out } from './chunk-CT5BS56U.js';
 import { init_resolve_ollama, gatherSystemMemory, resolveOllamaBinary, hasOllamaBinary, resolve_ollama_exports } from './chunk-OWSFZQOP.js';
 import { readOrchestratorState, writeOrchestratorState, parseMode, setDefaultMode, recommendMode, activePin, resolveMode, providerForBackend, QUALIFIED_PACKS, pinPack, unpinPack, buildOrchestratorStatus } from './chunk-NZELMYT4.js';
 import { fmt, estimateModelBytes } from './chunk-7N4Y3E47.js';
 import './chunk-IZDH67DX.js';
-import './chunk-HV4CKBXT.js';
+import './chunk-GOPANQZT.js';
 import { vgdSocketPath, vgdIsRunning, vgdRequest, vgdPidPath } from './chunk-RBIRXQR6.js';
 import { defaultProcessEndpoint, startProcessHostServer, resolveInferenceIsolation } from './chunk-JFE7XCAE.js';
 import { clearHostSessionPool, acquireHostSession, generateOnSession, listHostSessions, hostSessionPoolSize } from './chunk-3LOWJSAF.js';
 import { buildIdentifierTrieFromGraph } from './chunk-5HYCB55P.js';
-import { serveStdio, isRelevantChange, exportGraph, GraphSource, createServer, formatForExt, RefreshScheduler } from './chunk-6L6V77HW.js';
-import { refreshIfStale } from './chunk-455ZJQQ4.js';
-import { recordCliCall, CLI_TOOL_ALIASES, savingsLedgerPath, clearSavings, readSavings, readUsage, readModelSavings, CAPSULE_RANKING_VERSION, SAVINGS_TOOLS, sanitizeClient } from './chunk-7C5UKIXD.js';
-import { CliError, ExitCode, driftCount, ASSISTANTS, detectAssistants, isAssistantInstalled, usageError, detectServeLaunch, installAssistant, writeNavigationConfig, uninstallAssistant, buildGraph, writeSnapshot, probeFreshness, discover, assistantById, SMALL_REPO_FILES, isSkippedDirName, SKIP_FILES, SKIP_DIRS } from './chunk-ZPPDKHGL.js';
-import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as parseDsn$1, uploadScanArtifact, dsnCommand, pushCommand, countTokens, shortestPath, pathDisconnect, testsToRun, detectRunner, coveringTests, FREE_PACK, readScanArtifact, publishPrivateLibrary, assessDocQuality, symbolsFromApi, fetchHostedDocsCached, selectForBudget, hostedBase, readStoredCredentials, projectCredentialsPath, homeCredentialsPath } from './chunk-QDKFGLI3.js';
-import { writeDefaultConfig, parseDsn, detectVcs, computeRepoFingerprint, resolveRepositoryName, fetchScanPreflight, runCoreScan, loadConfig, prepareCompressedUpload, computeDriftScore, titleBox, projectTypeToVulnEcosystem, driftBar, gitHistoryAvailable, buildVersionTimelines, findPackageAnyEcosystem, normalizeConstraint, findVersionCrossings, versionSatisfies, PROJECT_TYPE_TO_OSV_ECOSYSTEM, fetchRiskySymbols, perDependencyDrift } from './chunk-INIULQEP.js';
+import { serveStdio, isRelevantChange, exportGraph, GraphSource, createServer, formatForExt, RefreshScheduler } from './chunk-IJQOZ6ZD.js';
+import { refreshIfStale } from './chunk-6GQLEDVK.js';
+import { recordCliCall, CLI_TOOL_ALIASES, savingsLedgerPath, clearSavings, readSavings, readUsage, readModelSavings, CAPSULE_RANKING_VERSION, SAVINGS_TOOLS, sanitizeClient } from './chunk-CJNWHXQD.js';
+import { CliError, ExitCode, driftCount, ASSISTANTS, detectAssistants, isAssistantInstalled, usageError, detectServeLaunch, installAssistant, writeNavigationConfig, uninstallAssistant, buildGraph, writeSnapshot, probeFreshness, discover, assistantById, SMALL_REPO_FILES, isSkippedDirName, SKIP_FILES, SKIP_DIRS } from './chunk-6423BHLN.js';
+import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as parseDsn$1, uploadScanArtifact, dsnCommand, pushCommand, countTokens, shortestPath, pathDisconnect, testsToRun, detectRunner, coveringTests, FREE_PACK, readScanArtifact, publishPrivateLibrary, assessDocQuality, symbolsFromApi, fetchHostedDocsCached, selectForBudget, hostedBase, readStoredCredentials, projectCredentialsPath, homeCredentialsPath } from './chunk-3WUTQYRY.js';
+import { writeDefaultConfig, parseDsn, detectVcs, computeRepoFingerprint, resolveRepositoryName, fetchScanPreflight, runCoreScan, loadConfig, prepareCompressedUpload, computeDriftScore, titleBox, projectTypeToVulnEcosystem, driftBar, gitHistoryAvailable, buildVersionTimelines, findPackageAnyEcosystem, normalizeConstraint, findVersionCrossings, versionSatisfies, PROJECT_TYPE_TO_OSV_ECOSYSTEM, fetchRiskySymbols, perDependencyDrift } from './chunk-N6ZMZ5AI.js';
 import { resolveIngestHost, dashHostForIngestHost, availableRegionIds, ingestHostForRegionId } from './chunk-HTLDXEHW.js';
 import './chunk-VIWZ4QT7.js';
-import { inventory, enrichOnline, ECOSYSTEMS, catalogPath, libDir, loadCatalog, driftFor, addLibrary, resolveLib, libId, resolveVersion, readDoc, localPackageDocs, localApiSurface } from './chunk-CBPDYYIH.js';
+import { inventory, enrichOnline, ECOSYSTEMS, catalogPath, libDir, loadCatalog, driftFor, addLibrary, resolveLib, libId, resolveVersion, readDoc, localPackageDocs, localApiSurface } from './chunk-UZP623Y4.js';
 import { discoverModels } from './chunk-CQDUBAQY.js';
 import { freeBytesOnVolume, weightStoreDir, listCachedWeights, ensureWeightCached, catalogIntegrityReport } from './chunk-OV4KGXPD.js';
 import './chunk-5I4VSBWQ.js';
@@ -39,13 +39,13 @@ import { pathExists as pathExists$1, parseExcludePatterns } from './chunk-DT4KIV
 import { ensureDir, pathExists, readJsonFile, writeTextFile, writeJsonFile } from './chunk-CRAMOEBE.js';
 import { init_cli_invocation, resolveCliInvocation, NPX_INVOCATION } from './chunk-3LSG7Z4I.js';
 import { resolveOne } from './chunk-J7LKEB2R.js';
-import { queryGraphSemantic, queryGraph, indexFor, impactOf } from './chunk-EW2ZMFUC.js';
+import { queryGraphSemantic, queryGraph, indexFor, impactOf } from './chunk-YJU7S7N6.js';
 import { resolvedGrammarFiles, grammarSetVersion } from './chunk-UTNNGKKX.js';
 import './chunk-RXP66R2E.js';
-import { embeddingsCached, resolveEmbedModel, loadEmbedder, getNodeEmbeddings, unavailableMessage, countPending, modelCacheInfo, embeddingsPath, clearModelCache, withTimeout } from './chunk-KYRH3567.js';
-import { loadGraph, loadGraphPreferIndex, SCHEMA_VERSION } from './chunk-SBVZGEOB.js';
-import { cacheDir, resolveGraphPath, analyzeQuestion, loadTopicTags, renderReport, resetRelevanceProviderCache, loadRelevanceProvider, loadGraphFileWithSnapshot, serializeGraph, stableStringify, writeArtifacts, vibgrateDir, mapFileExists, relevanceModuleDir, parseGraph, ensureVibgrateGitignore } from './chunk-ZMSTSEGR.js';
-import { VERSION } from './chunk-K6MLOGU4.js';
+import { embeddingsCached, resolveEmbedModel, loadEmbedder, getNodeEmbeddings, unavailableMessage, countPending, modelCacheInfo, embeddingsPath, clearModelCache, withTimeout } from './chunk-KBP7GJV6.js';
+import { loadGraph, loadGraphPreferIndex, SCHEMA_VERSION } from './chunk-7ZHSSGUF.js';
+import { cacheDir, resolveGraphPath, analyzeQuestion, loadTopicTags, renderReport, resetRelevanceProviderCache, loadRelevanceProvider, loadGraphFileWithSnapshot, serializeGraph, stableStringify, writeArtifacts, vibgrateDir, mapFileExists, relevanceModuleDir, parseGraph, ensureVibgrateGitignore } from './chunk-EWZKOU66.js';
+import { VERSION } from './chunk-RT7P5AYU.js';
 import './chunk-BWPBB45M.js';
 import { canonicalize, hashString, hashBytes } from './chunk-JFGYT6BI.js';
 import './chunk-BPF3YX2U.js';
@@ -3092,10 +3092,10 @@ function pruneArtifactProjects(a) {
   return { ...a, projects, findings };
 }
 function projectByPath(a, projectPath) {
-  const want = path41.normalize(projectPath === "" ? "." : projectPath);
+  const norm = (p) => path41.normalize((p === "" ? "." : p).replace(/\\/g, "/"));
+  const want = norm(projectPath);
   for (const proj of a.projects ?? []) {
-    const got = path41.normalize(proj.path === "" ? "." : proj.path);
-    if (got === want) return proj;
+    if (norm(proj.path) === want) return proj;
   }
   return void 0;
 }
@@ -3103,7 +3103,7 @@ function buildProjectRefs(rootDir, projects) {
   if (projects.length === 0) return void 0;
   const byPath = /* @__PURE__ */ new Map();
   for (const p of projects) {
-    const rel = p.path === "" ? "." : p.path;
+    const rel = (p.path === "" ? "." : p.path).replace(/\\/g, "/");
     const prev = byPath.get(rel);
     if (!prev) {
       byPath.set(rel, p);
@@ -6986,7 +6986,7 @@ function registerCode(program) {
       try {
         const { parseMode: parseMode2, resolveMode: resolveMode2, readOrchestratorState: readOrchestratorState2, activePin: activePin2 } = await import('./model-orchestrator-LHYPJBFH.js');
         const { gatherSystemMemory: gatherSystemMemory2 } = await import('./local-runtime-2ED33KK6.js');
-        const { loadGraph: loadGraph2 } = await import('./load-QBVKCWZT.js');
+        const { loadGraph: loadGraph2 } = await import('./load-EUZSV73H.js');
         const state = readOrchestratorState2();
         const mode = parseMode2(modeFlag) ?? state.defaultMode ?? void 0;
         const pin = mode ? activePin2(mode, state) : null;
@@ -7071,7 +7071,7 @@ function registerCode(program) {
       if (!(process.stdin.isTTY && process.stdout.isTTY)) {
         throw usageError('say what to change, e.g. `vg code "add a --timeout flag to the scan command"` (guided mode needs an interactive terminal)');
       }
-      const { runInteractive } = await import('./interactive-7EZHEBHQ.js');
+      const { runInteractive } = await import('./interactive-WUXMXFNM.js');
       await runInteractive(
         rootOf(global),
         global,
@@ -7101,7 +7101,7 @@ function registerCode(program) {
     }
     if (!instruction && !stdinFirstTurn) throw usageError('say what to change, e.g. `vg code "add a --timeout flag to the scan command"`');
     {
-      const { ensureCodeMap } = await import('./ensure-map-5E5TFPXJ.js');
+      const { ensureCodeMap } = await import('./ensure-map-PHAJACFF.js');
       const mapRoot = rootOf(global);
       try {
         await ensureCodeMap(mapRoot, global, {
@@ -7186,20 +7186,20 @@ function registerCode(program) {
         process.stdout.write(JSON.stringify(line) + "\n");
       };
       try {
-        const { RunOutcomeRecorder, newOneShotRunId, turnRunId } = await import('./run-outcome-NQAU6DOA.js');
+        const { RunOutcomeRecorder, newOneShotRunId, turnRunId } = await import('./run-outcome-O5PR7ZCK.js');
         const primarySlug = route.providers[0]?.model.includes("/") ? route.providers[0].model.split("/")[0] : route.providers[0]?.id;
-        const { runCodeStreamJson, parseHostMessage } = await import('./stream-json-5WFD6HRO.js');
-        const { nodeCodeFs } = await import('./session-QNSYTLLJ.js');
+        const { runCodeStreamJson, parseHostMessage } = await import('./stream-json-7MK3QQYG.js');
+        const { nodeCodeFs } = await import('./session-WS7SOVJE.js');
         const readline6 = await import('readline');
         const child = await import('child_process');
         const { loadOrDiscoverFederation } = await import('./federation-MDQPO3PW.js');
         const { resolveExecutionEnv } = await import('./execution-env-4MS5AYAN.js');
         const { resolveModelExecutionProfile, mergeModelExecutionProfile } = await import('./model-execution-profile-ELWF3Z6H.js');
-        const { startCodeRuntimeSession } = await import('./runtime-session-ZPGU4PGW.js');
-        const { resolveGraphBackend } = await import('./graph-backend-GQZXMNRI.js');
+        const { startCodeRuntimeSession } = await import('./runtime-session-PPQDTFIK.js');
+        const { resolveGraphBackend } = await import('./graph-backend-4B3MTVIW.js');
         const { detectGitRef } = await import('./git-ref-RSRAN4OH.js');
         const { repositoryIdFromRoot } = await import('./paths-62AKTFSR.js');
-        const { vgdRequest: vgdRequest2 } = await import('./vgd-54GEZWBI.js');
+        const { vgdRequest: vgdRequest2 } = await import('./vgd-Y25XSQGZ.js');
         const federation = loadOrDiscoverFederation(root2);
         const modelProfile = mergeModelExecutionProfile(
           resolveModelExecutionProfile({
@@ -7257,7 +7257,7 @@ ${res.stderr}` : ""),
             exitCode: res.status ?? 1
           };
         };
-        const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-VTGXA6CO.js');
+        const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-DQLCHBI6.js');
         const vgBuiltin = createVgBuiltinMcpTools({
           getGraph: () => graph,
           root: root2,
@@ -7351,8 +7351,8 @@ ${res.stderr}` : ""),
         };
         try {
           if (opts.session) {
-            const { runCodeStreamJsonSession } = await import('./stream-json-5WFD6HRO.js');
-            const { runAgent: runAgent2 } = await import('./agent-DSC3EQLT.js');
+            const { runCodeStreamJsonSession } = await import('./stream-json-7MK3QQYG.js');
+            const { runAgent: runAgent2 } = await import('./agent-N3CP3SPI.js');
             const {
               condenseSession,
               loadLatestSession,
@@ -7360,7 +7360,7 @@ ${res.stderr}` : ""),
               recordTask,
               saveSession,
               summarizeSession
-            } = await import('./session-store-F7NX7SZN.js');
+            } = await import('./session-store-KGONLWHN.js');
             const resumedRecord = opts.continue ? loadLatestSession(root2) : void 0;
             let record = resumedRecord ?? newSession(
               `s${Date.now().toString(36)}`,
@@ -7520,13 +7520,13 @@ ${res.stderr}` : ""),
       if (!autonomous && !tty) {
         throw usageError("the agent approves each edit/command \u2014 run in a terminal to approve interactively, or pass --auto to run autonomously (or --single for a one-shot diff).");
       }
-      const { agentTask } = await import('./interactive-7EZHEBHQ.js');
-      const { nodeCodeFs } = await import('./session-QNSYTLLJ.js');
+      const { agentTask } = await import('./interactive-WUXMXFNM.js');
+      const { nodeCodeFs } = await import('./session-WS7SOVJE.js');
       const { TtyPrompter } = await import('./ui-K7D3BCHD.js');
       let priorSummary;
       let priorInstruction;
       if (opts.continue) {
-        const { loadLatestSession, summarizeSession } = await import('./session-store-F7NX7SZN.js');
+        const { loadLatestSession, summarizeSession } = await import('./session-store-KGONLWHN.js');
         const prev = loadLatestSession(root2);
         if (prev) {
           priorSummary = summarizeSession(prev);
@@ -7534,7 +7534,7 @@ ${res.stderr}` : ""),
         }
       }
       const prompter = tty ? new TtyPrompter() : void 0;
-      const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-VTGXA6CO.js');
+      const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-DQLCHBI6.js');
       const vgBuiltin = createVgBuiltinMcpTools({
         getGraph: () => graph,
         root: root2,
@@ -7558,11 +7558,11 @@ ${res.stderr}` : ""),
         const { loadFederation } = await import('./federation-MDQPO3PW.js');
         const { resolveExecutionEnv } = await import('./execution-env-4MS5AYAN.js');
         const { resolveModelExecutionProfile, mergeModelExecutionProfile } = await import('./model-execution-profile-ELWF3Z6H.js');
-        const { startCodeRuntimeSession } = await import('./runtime-session-ZPGU4PGW.js');
-        const { resolveGraphBackend } = await import('./graph-backend-GQZXMNRI.js');
+        const { startCodeRuntimeSession } = await import('./runtime-session-PPQDTFIK.js');
+        const { resolveGraphBackend } = await import('./graph-backend-4B3MTVIW.js');
         const { detectGitRef } = await import('./git-ref-RSRAN4OH.js');
         const { repositoryIdFromRoot } = await import('./paths-62AKTFSR.js');
-        const { vgdRequest: vgdRequest2 } = await import('./vgd-54GEZWBI.js');
+        const { vgdRequest: vgdRequest2 } = await import('./vgd-Y25XSQGZ.js');
         const federation = loadFederation(root2);
         const modelProfile = mergeModelExecutionProfile(
           resolveModelExecutionProfile({
@@ -8333,10 +8333,16 @@ function registerDaemon(program) {
     }
     const child = await startDetachedVgd(socketPath);
     const res = await vgdRequest({ op: "status" }, { socketPath });
+    if (!res.ok) {
+      throw new CliError(
+        `vgd started (pid ${child ?? "?"}) but status failed: ${res.error} (${socketPath})`,
+        ExitCode.ERROR
+      );
+    }
     if (global.json) {
-      json({ running: true, ensured: true, ...res.ok ? res : { socketPath } });
+      json({ running: true, ensured: true, ...res });
     } else if (!global.quiet) {
-      const pid = res.ok && "pid" in res ? res.pid : child;
+      const pid = "pid" in res ? res.pid : child;
       info(`vgd \xB7 started in background pid ${pid} \xB7 ${c.dim(socketPath)}`);
     }
   });
@@ -8472,7 +8478,7 @@ function registerDaemon(program) {
       throw new CliError(loaded.error, ExitCode.NOT_FOUND);
     }
     if (!loaded.ok) {
-      const { loadGraph: loadGraph2 } = await import('./load-QBVKCWZT.js');
+      const { loadGraph: loadGraph2 } = await import('./load-EUZSV73H.js');
       const { detectGitRef } = await import('./git-ref-RSRAN4OH.js');
       const { repositoryIdFromRoot } = await import('./paths-62AKTFSR.js');
       const graph = loadGraph2(root2, global.graph);
@@ -8594,19 +8600,17 @@ function socketOf(cmd) {
   return vgdSocketPath();
 }
 function spawnDetachedDaemonStart(socketPath) {
+  const opts = {
+    detached: true,
+    stdio: "ignore",
+    env: process.env,
+    windowsHide: true
+  };
   const entry = process.argv[1];
   if (entry && (entry.endsWith(".js") || entry.endsWith(".mjs") || entry.endsWith(".cjs"))) {
-    return spawn(process.execPath, [entry, "daemon", "start", "--socket", socketPath], {
-      detached: true,
-      stdio: "ignore",
-      env: process.env
-    });
+    return spawn(process.execPath, [entry, "daemon", "start", "--socket", socketPath], opts);
   }
-  return spawn(process.argv[0] || "vg", ["daemon", "start", "--socket", socketPath], {
-    detached: true,
-    stdio: "ignore",
-    env: process.env
-  });
+  return spawn(process.argv[0] || "vg", ["daemon", "start", "--socket", socketPath], opts);
 }
 function sleep(ms) {
   return new Promise((r) => setTimeout(r, ms));
@@ -8614,12 +8618,22 @@ function sleep(ms) {
 async function startDetachedVgd(socketPath) {
   const child = spawnDetachedDaemonStart(socketPath);
   child.unref();
-  const deadline = Date.now() + 8e3;
+  const readyMs = 3e4;
+  const deadline = Date.now() + readyMs;
   while (Date.now() < deadline) {
-    await sleep(100);
+    await sleep(150);
     if (await vgdIsRunning({ socketPath })) return child.pid;
+    if (child.exitCode != null && child.exitCode !== 0) {
+      throw new CliError(
+        `vgd child exited ${child.exitCode} before becoming ready at ${socketPath}`,
+        ExitCode.ERROR
+      );
+    }
   }
-  throw new CliError(`vgd failed to become ready at ${socketPath}`, ExitCode.ERROR);
+  throw new CliError(
+    `vgd failed to become ready within ${Math.round(readyMs / 1e3)}s at ${socketPath}`,
+    ExitCode.ERROR
+  );
 }
 async function stopVgd(socketPath) {
   if (!await vgdIsRunning({ socketPath })) return "not-running";
@@ -8877,7 +8891,7 @@ var initCommand = new Command("init").description("Initialize vibgrate in a proj
     console.log(chalk7.green("\u2714") + ` Created ${chalk7.bold("vibgrate.config.ts")}`);
   }
   if (opts.baseline) {
-    const { runBaseline } = await import('./baseline-KVCXVZFQ.js');
+    const { runBaseline } = await import('./baseline-ZMRZRGFI.js');
     await runBaseline(rootDir);
   }
   console.log("");
@@ -9433,7 +9447,12 @@ var scanCommand = new Command("scan").description("Scan a project for upgrade dr
       try {
         const preflight = await fetchScanPreflight(parsed, ingestHost, {
           repositoryName,
-          vcsSha: fingerprint.vcsSha
+          vcsSha: fingerprint.vcsSha,
+          // Canonical repo identity (credential-redacted by detectVcs) — the
+          // server matches on this first, so re-scanning an already-mapped
+          // repository under a different display name (e.g. a fresh clone in
+          // a temp dir) is not miscounted as a NEW repo against the plan cap.
+          remoteUrl: vcs.remoteUrl
         });
         pinnedRegion = preflight.region;
         planTier = preflight.plan?.tier;
@@ -10429,7 +10448,7 @@ ${String(err)}` }));
 async function releaseWindowsFileLocks(cwd, keepVersion) {
   reapAndReport(cwd, keepVersion);
   try {
-    const { vgdSocketPath: vgdSocketPath2 } = await import('./vgd-54GEZWBI.js');
+    const { vgdSocketPath: vgdSocketPath2 } = await import('./vgd-Y25XSQGZ.js');
     const result = await stopVgd(vgdSocketPath2());
     if (result === "stopped") {
       console.log(chalk7.dim("Stopped the vgd daemon so its files can be replaced \u2014 it restarts on the next command."));
@@ -10554,7 +10573,7 @@ var updateCommand = new Command("update").description("Update vibgrate to the la
 );
 async function rewarmVgdAndReport(cwd) {
   try {
-    const { vgdIsRunning: vgdIsRunning2, vgdRequest: vgdRequest2 } = await import('./vgd-54GEZWBI.js');
+    const { vgdIsRunning: vgdIsRunning2, vgdRequest: vgdRequest2 } = await import('./vgd-Y25XSQGZ.js');
     if (!await vgdIsRunning2()) return;
     const loaded = await vgdRequest2({ op: "load-graph", root: cwd });
     if (!loaded.ok || !("repositoryId" in loaded)) return;
@@ -10675,7 +10694,7 @@ async function repositoryIdentity(rootDir, override) {
     return { name: override?.trim() || void 0 };
   }
 }
-var fixCommand = new Command("fix").description("Get ranked, risk-tiered upgrade plans from the hosted planner and optionally apply them (prompts before changing files; --yes applies non-interactively, --dry-run previews, --no-apply only prints). Requires login/DSN.").argument("[path]", "Path to analyse", ".").option("--in <file>", "Scan artifact to read", ".vibgrate/scan_result.json").option("--format <format>", "Output format (text|json|md)", "text").option("--dsn <dsn>", 'DSN token (or use VIBGRATE_DSN env / "vg login")').option("--region <region>", "Override data residency region (us, eu)").option("--repository-name <name>", "Override the repository name recorded for this plan").option("--plan <tier>", "Apply a specific plan non-interactively (safe|balanced|aggressive)").option("--yes", "Apply the recommended plan without prompting").option("--dry-run", "Show what would change without applying").option("--no-apply", "Only print the plans; never modify the project").option("--fail-on-vulns <severity>", "Exit non-zero if the recommended plan leaves an advisory at/above this severity unresolved (low|moderate|high|critical)").action(async (targetPath, opts) => {
+var fixCommand = new Command("fix").description("Get ranked, risk-tiered upgrade plans from the hosted planner and optionally apply them (prompts before changing files; --yes applies non-interactively, --dry-run previews, --no-apply only prints). Requires login/DSN.").argument("[path]", "Path to analyse", ".").option("--in <file>", "Scan artifact to read", ".vibgrate/scan_result.json").option("--format <format>", "Output format (text|json|md)", "text").option("--dsn <dsn>", 'DSN token (or use VIBGRATE_DSN env / "vg login")').option("--region <region>", "Override data residency region (us, eu)").option("--repository-name <name>", "Override the repository name recorded for this plan").option("--plan <tier>", "Apply a specific plan non-interactively (safe|balanced|aggressive)").option("--yes", "Apply the recommended plan without prompting").option("--dry-run", "Preview the recommended plan (or --plan <tier>) without applying; never prompts").option("--no-apply", "Only print the plans; never modify the project").option("--fail-on-vulns <severity>", "Exit non-zero if the recommended plan leaves an advisory at/above this severity unresolved (low|moderate|high|critical)").action(async (targetPath, opts) => {
   const rootDir = path41.resolve(targetPath);
   if (!await pathExists(rootDir)) {
     console.error(chalk7.red(`Path does not exist: ${rootDir}`));
@@ -10905,8 +10924,16 @@ async function runApplyFlow(rootDir, artifact, response, opts, canonicalTier) {
     }
   } else if (nonEmpty.length === 1) {
     chosen = nonEmpty[0];
-  } else if (opts.yes) {
+  } else if (opts.yes || opts.dryRun) {
     chosen = response.plans.find((p) => p.tier === response.recommended) ?? nonEmpty[0];
+    if (opts.dryRun && !opts.yes && nonEmpty.length > 1) {
+      console.log(
+        chalk7.dim(
+          `
+Dry-run previews the recommended (${chosen.tier}) plan \u2014 nothing will be written. Pass --plan <safe|balanced|aggressive> to preview another tier.`
+        )
+      );
+    }
   } else if (process.stdin.isTTY && process.stdout.isTTY) {
     const tier = await promptPlanSelection(response);
     if (!tier) {
@@ -10915,7 +10942,7 @@ async function runApplyFlow(rootDir, artifact, response, opts, canonicalTier) {
     }
     chosen = response.plans.find((p) => p.tier === tier);
   } else {
-    console.log(chalk7.dim("\nMultiple plans available \u2014 re-run with --plan <tier> or --yes to apply, or --dry-run to preview."));
+    console.log(chalk7.dim("\nMultiple plans available \u2014 re-run with --plan <tier> or --yes to apply, or --dry-run to preview the recommended plan."));
     return;
   }
   if (!chosen || chosen.upgrades.length === 0) {