@vibgrate/cli 2026.817.1 → 2026.817.2

package/dist/chunk-T7RSQ5WD.js

@@ -0,0 +1,227 @@
+// src/core-open/utils/redact.ts
+var SECRET_PATTERNS = [
+  // Vendor token prefixes (GitHub, GitLab, Slack, OpenAI/Stripe-style, npm, AWS).
+  /\b(?:gh[opusr]_|github_pat_)[A-Za-z0-9_]{8,}\b/g,
+  /\bglpat-[A-Za-z0-9_-]{8,}\b/g,
+  /\bxox[baprs]-[A-Za-z0-9-]{8,}\b/g,
+  /\bsk-[A-Za-z0-9_-]{8,}\b/gi,
+  /\b[sr]k_(?:live|test)_[A-Za-z0-9]{8,}\b/g,
+  /\bnpm_[A-Za-z0-9]{16,}\b/g,
+  /\b(?:AKIA|ASIA)[0-9A-Z]{12,}\b/g,
+  // JWTs.
+  /\beyJ[\w-]{8,}\.[\w-]{8,}\.[\w-]+\b/g,
+  // Authorization material.
+  /\b(?:Bearer|Basic|VibgrateDSN)\s+[A-Za-z0-9+/._:=-]{8,}/g,
+  /\b(?:authorization|api[_-]?key|apikey|access[_-]?token|client[_-]?secret|password|passwd|secret)\s*[:=]\s*['"]?[^'"\s]{6,}/gi,
+  // PEM blocks.
+  /-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?(?:-----END [A-Z ]*PRIVATE KEY-----|$)/g,
+  // Long base64/hex blobs (AWS secret keys and friends).
+  /\b[A-Za-z0-9+/]{40,}={0,2}\b/g
+];
+var REDACTED = "[REDACTED]";
+function redactSecrets(text) {
+  let out = text;
+  for (const re of SECRET_PATTERNS) out = out.replace(re, REDACTED);
+  return out;
+}
+var CREDENTIAL_QUERY_KEYS = /^(?:access[_-]?token|private[_-]?token|api[_-]?key|apikey|token|secret|password|passwd|auth|authorization|x-token|sig|signature|key)$/i;
+function redactUrlCredentials(url) {
+  const noUser = url.replace(/\/\/[^@/]+@/, "//");
+  const q2 = noUser.indexOf("?");
+  if (q2 === -1) return noUser;
+  const base = noUser.slice(0, q2);
+  const kept = noUser.slice(q2 + 1).split("&").filter((pair) => !CREDENTIAL_QUERY_KEYS.test(pair.split("=")[0] ?? ""));
+  return kept.length ? `${base}?${kept.join("&")}` : base;
+}
+
+// src/core-open/scanners/architecture/packs/ast-role-catalog.ts
+function q(languages, query, needle, role, layer, confidence, signal) {
+  return { languages, query, needle, role, layer, confidence, signal };
+}
+var JAVA = ["java"];
+var CS = ["cs"];
+var PY = ["py"];
+var GO = ["go"];
+var TS = ["ts", "tsx", "js"];
+var JAVA_ANN = (name, role, layer, signal) => q(
+  JAVA,
+  [
+    `(marker_annotation name: (identifier) @hit (#eq? @hit "${name}"))`,
+    `(annotation name: (identifier) @hit (#eq? @hit "${name}"))`,
+    `(marker_annotation name: (scoped_identifier name: (identifier) @hit (#eq? @hit "${name}")))`
+  ].join("\n"),
+  `@${name}`,
+  role,
+  layer,
+  0.9,
+  signal
+);
+var JAVA_AST_ROLES = Object.freeze([
+  JAVA_ANN("RestController", "controller", "routing", "java @RestController"),
+  JAVA_ANN("Controller", "controller", "routing", "java @Controller"),
+  JAVA_ANN("Service", "service", "services", "java @Service"),
+  JAVA_ANN("Repository", "repository", "data-access", "java @Repository"),
+  JAVA_ANN("Entity", "entity", "domain", "java @Entity")
+]);
+var SPRING_AST_ROLES = JAVA_AST_ROLES;
+var DOTNET_AST_ROLES = Object.freeze([
+  q(
+    CS,
+    [
+      `(attribute name: (identifier) @hit (#eq? @hit "ApiController"))`,
+      `(attribute name: (qualified_name (identifier) @hit (#eq? @hit "ApiController")))`
+    ].join("\n"),
+    "[ApiController]",
+    "controller",
+    "routing",
+    0.9,
+    "dotnet [ApiController]"
+  ),
+  q(
+    CS,
+    [
+      `(base_list (identifier) @hit (#eq? @hit "DbContext"))`,
+      `(base_list (generic_name (identifier) @hit (#eq? @hit "DbContext")))`
+    ].join("\n"),
+    "DbContext",
+    "repository",
+    "data-access",
+    0.86,
+    "dotnet : DbContext"
+  ),
+  q(
+    CS,
+    [
+      `(base_list (identifier) @hit (#eq? @hit "IRequestHandler"))`,
+      `(base_list (generic_name (identifier) @hit (#eq? @hit "IRequestHandler")))`
+    ].join("\n"),
+    "IRequestHandler",
+    "handler",
+    "services",
+    0.86,
+    "dotnet IRequestHandler"
+  )
+]);
+var FASTAPI_AST_ROLES = Object.freeze([
+  q(
+    PY,
+    '(call function: (identifier) @hit (#eq? @hit "APIRouter"))',
+    "APIRouter(",
+    "router",
+    "routing",
+    0.88,
+    "fastapi APIRouter()"
+  )
+]);
+var DJANGO_AST_ROLES = Object.freeze([
+  q(
+    PY,
+    '(assignment left: (identifier) @hit (#eq? @hit "urlpatterns"))',
+    "urlpatterns",
+    "router",
+    "routing",
+    0.9,
+    "django urlpatterns"
+  ),
+  q(
+    PY,
+    [
+      '(class_definition superclasses: (argument_list (attribute object: (identifier) @obj attribute: (identifier) @hit (#eq? @obj "models") (#eq? @hit "Model"))))',
+      '(class_definition superclasses: (argument_list (identifier) @hit (#eq? @hit "Model")))'
+    ].join("\n"),
+    "models.Model",
+    "entity",
+    "domain",
+    0.88,
+    "django models.Model"
+  )
+]);
+var GO_AST_ROLES = Object.freeze([
+  q(
+    GO,
+    '(method_declaration name: (field_identifier) @hit (#eq? @hit "ServeHTTP"))',
+    "ServeHTTP",
+    "handler",
+    "routing",
+    0.9,
+    "go ServeHTTP"
+  ),
+  q(
+    GO,
+    '(call_expression function: (selector_expression field: (field_identifier) @hit (#eq? @hit "NewRouter")))',
+    "chi.NewRouter",
+    "router",
+    "routing",
+    0.86,
+    "go chi.NewRouter"
+  ),
+  q(
+    GO,
+    '(call_expression function: (selector_expression operand: (identifier) @hit (#eq? @hit "gin")))',
+    "gin.",
+    "router",
+    "routing",
+    0.86,
+    "go gin"
+  )
+]);
+var NESTJS_AST_ROLES = Object.freeze([
+  q(
+    TS,
+    [
+      '(decorator (identifier) @hit (#eq? @hit "Controller"))',
+      '(decorator (call_expression function: (identifier) @hit (#eq? @hit "Controller")))'
+    ].join("\n"),
+    "@Controller(",
+    "controller",
+    "routing",
+    0.9,
+    "nestjs @Controller("
+  ),
+  q(
+    TS,
+    [
+      '(decorator (identifier) @hit (#eq? @hit "Injectable"))',
+      '(decorator (call_expression function: (identifier) @hit (#eq? @hit "Injectable")))'
+    ].join("\n"),
+    "@Injectable(",
+    "service",
+    "services",
+    0.88,
+    "nestjs @Injectable("
+  )
+]);
+function escapeRegExp(value) {
+  return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+}
+function sourceHasRoleNeedle(source, needle) {
+  if (!needle) return false;
+  if (needle.startsWith("@") || needle.startsWith("[")) {
+    return source.includes(needle);
+  }
+  if (needle.endsWith("(") || needle.endsWith(".")) {
+    return source.includes(needle);
+  }
+  const escaped = escapeRegExp(needle);
+  return new RegExp(`(^|[^A-Za-z0-9_])${escaped}([^A-Za-z0-9_]|$)`).test(source);
+}
+function catalogForLanguage(lang) {
+  return AST_ROLE_CATALOG.filter((q2) => q2.languages.includes(lang));
+}
+function withPack(packId, roles) {
+  return roles.map((role) => ({ ...role, packId }));
+}
+var AST_ROLE_CATALOG = Object.freeze([
+  ...withPack("language/java", JAVA_AST_ROLES),
+  ...withPack("framework/spring", SPRING_AST_ROLES),
+  ...withPack("language/cs", DOTNET_AST_ROLES),
+  ...withPack("framework/aspnet", DOTNET_AST_ROLES),
+  ...withPack("framework/fastapi", FASTAPI_AST_ROLES),
+  ...withPack("framework/django", DJANGO_AST_ROLES),
+  ...withPack("language/go", GO_AST_ROLES),
+  ...withPack("framework/nestjs", NESTJS_AST_ROLES)
+]);
+
+export { DJANGO_AST_ROLES, DOTNET_AST_ROLES, FASTAPI_AST_ROLES, GO_AST_ROLES, JAVA_AST_ROLES, NESTJS_AST_ROLES, SPRING_AST_ROLES, catalogForLanguage, redactSecrets, redactUrlCredentials, sourceHasRoleNeedle };
+//# sourceMappingURL=chunk-T7RSQ5WD.js.map
+//# sourceMappingURL=chunk-T7RSQ5WD.js.map

package/dist/chunk-T7RSQ5WD.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/core-open/utils/redact.ts","../src/core-open/scanners/architecture/packs/ast-role-catalog.ts"],"names":["q"],"mappings":";AAUA,IAAM,eAAA,GAA4B;AAAA;AAAA,EAEhC,iDAAA;AAAA,EACA,8BAAA;AAAA,EACA,kCAAA;AAAA,EACA,4BAAA;AAAA,EACA,0CAAA;AAAA,EACA,2BAAA;AAAA,EACA,iCAAA;AAAA;AAAA,EAEA,sCAAA;AAAA;AAAA,EAEA,0DAAA;AAAA,EACA,8HAAA;AAAA;AAAA,EAEA,mFAAA;AAAA;AAAA,EAEA;AACF,CAAA;AAEO,IAAM,QAAA,GAAW,YAAA;AAGjB,SAAS,cAAc,IAAA,EAAsB;AAClD,EAAA,IAAI,GAAA,GAAM,IAAA;AACV,EAAA,KAAA,MAAW,MAAM,eAAA,EAAiB,GAAA,GAAM,GAAA,CAAI,OAAA,CAAQ,IAAI,QAAQ,CAAA;AAChE,EAAA,OAAO,GAAA;AACT;AAYA,IAAM,qBAAA,GACJ,wIAAA;AAOK,SAAS,qBAAqB,GAAA,EAAqB;AACxD,EAAA,MAAM,MAAA,GAAS,GAAA,CAAI,OAAA,CAAQ,aAAA,EAAe,IAAI,CAAA;AAC9C,EAAA,MAAMA,EAAAA,GAAI,MAAA,CAAO,OAAA,CAAQ,GAAG,CAAA;AAC5B,EAAA,IAAIA,EAAAA,KAAM,IAAI,OAAO,MAAA;AACrB,EAAA,MAAM,IAAA,GAAO,MAAA,CAAO,KAAA,CAAM,CAAA,EAAGA,EAAC,CAAA;AAC9B,EAAA,MAAM,IAAA,GAAO,OACV,KAAA,CAAMA,EAAAA,GAAI,CAAC,CAAA,CACX,KAAA,CAAM,GAAG,CAAA,CACT,MAAA,CAAO,CAAC,SAAS,CAAC,qBAAA,CAAsB,KAAK,IAAA,CAAK,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAA,IAAK,EAAE,CAAC,CAAA;AACzE,EAAA,OAAO,IAAA,CAAK,SAAS,CAAA,EAAG,IAAI,IAAI,IAAA,CAAK,IAAA,CAAK,GAAG,CAAC,CAAA,CAAA,GAAK,IAAA;AACrD;;;ACvDA,SAAS,EACP,SAAA,EACA,KAAA,EACA,QACA,IAAA,EACA,KAAA,EACA,YACA,MAAA,EACc;AACd,EAAA,OAAO,EAAE,SAAA,EAAW,KAAA,EAAO,QAAQ,IAAA,EAAM,KAAA,EAAO,YAAY,MAAA,EAAO;AACrE;AAEA,IAAM,IAAA,GAAO,CAAC,MAAM,CAAA;AACpB,IAAM,EAAA,GAAK,CAAC,IAAI,CAAA;AAChB,IAAM,EAAA,GAAK,CAAC,IAAI,CAAA;AAChB,IAAM,EAAA,GAAK,CAAC,IAAI,CAAA;AAChB,IAAM,EAAA,GAAK,CAAC,IAAA,EAAM,KAAA,EAAO,IAAI,CAAA;AAE7B,IAAM,QAAA,GAAW,CAAC,IAAA,EAAc,IAAA,EAA4B,OAA8B,MAAA,KACxF,CAAA;AAAA,EACE,IAAA;AAAA,EACA;AAAA,IACE,0DAA0D,IAAI,CAAA,GAAA,CAAA;AAAA,IAC9D,mDAAmD,IAAI,CAAA,GAAA,CAAA;AAAA,IACvD,mFAAmF,IAAI,CAAA,IAAA;AAAA,GACzF,CAAE,KAAK,IAAI,CAAA;AAAA,EACX,IAAI,IAAI,CAAA,CAAA;AAAA,EACR,IAAA;AAAA,EACA,KAAA;AAAA,EACA,GAAA;AAAA,EACA;AACF,CAAA;AAEK,IAAM,cAAA,GAA0C,OAAO,MAAA,CAAO;AAAA,EACnE,QAAA,CAAS,gBAAA,EAAkB,YAAA,EAAc,SAAA,EAAW,sBAAsB,CAAA;AAAA,EAC1E,QAAA,CAAS,YAAA,EAAc,YAAA,EAAc,SAAA,EAAW,kBAAkB,CAAA;AAAA,EAClE,QAAA,CAAS,SAAA,EAAW,SAAA,EAAW,UAAA,EAAY,eAAe,CAAA;AAAA,EAC1D,QAAA,CAAS,YAAA,EAAc,YAAA,EAAc,aAAA,EAAe,kBAAkB,CAAA;AAAA,EACtE,QAAA,CAAS,QAAA,EAAU,QAAA,EAAU,QAAA,EAAU,cAAc;AACvD,CAAC;AAEM,IAAM,gBAAA,GAA4C;AAElD,IAAM,gBAAA,GAA4C,OAAO,MAAA,CAAO;AAAA,EACrE,CAAA;AAAA,IACE,EAAA;AAAA,IACA;AAAA,MACE,CAAA,+DAAA,CAAA;AAAA,MACA,CAAA,gFAAA;AAAA,KACF,CAAE,KAAK,IAAI,CAAA;AAAA,IACX,iBAAA;AAAA,IACA,YAAA;AAAA,IACA,SAAA;AAAA,IACA,GAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,CAAA;AAAA,IACE,EAAA;AAAA,IACA;AAAA,MACE,CAAA,qDAAA,CAAA;AAAA,MACA,CAAA,oEAAA;AAAA,KACF,CAAE,KAAK,IAAI,CAAA;AAAA,IACX,WAAA;AAAA,IACA,YAAA;AAAA,IACA,aAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,CAAA;AAAA,IACE,EAAA;AAAA,IACA;AAAA,MACE,CAAA,2DAAA,CAAA;AAAA,MACA,CAAA,0EAAA;AAAA,KACF,CAAE,KAAK,IAAI,CAAA;AAAA,IACX,iBAAA;AAAA,IACA,SAAA;AAAA,IACA,UAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA;AAEJ,CAAC;AAEM,IAAM,iBAAA,GAA6C,OAAO,MAAA,CAAO;AAAA,EACtE,CAAA;AAAA,IACE,EAAA;AAAA,IACA,4DAAA;AAAA,IACA,YAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA;AAEJ,CAAC;AAEM,IAAM,gBAAA,GAA4C,OAAO,MAAA,CAAO;AAAA,EACrE,CAAA;AAAA,IACE,EAAA;AAAA,IACA,gEAAA;AAAA,IACA,aAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAA;AAAA,IACA,GAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,CAAA;AAAA,IACE,EAAA;AAAA,IACA;AAAA,MACE,8JAAA;AAAA,MACA;AAAA,KACF,CAAE,KAAK,IAAI,CAAA;AAAA,IACX,cAAA;AAAA,IACA,QAAA;AAAA,IACA,QAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA;AAEJ,CAAC;AAEM,IAAM,YAAA,GAAwC,OAAO,MAAA,CAAO;AAAA,EACjE,CAAA;AAAA,IACE,EAAA;AAAA,IACA,4EAAA;AAAA,IACA,WAAA;AAAA,IACA,SAAA;AAAA,IACA,SAAA;AAAA,IACA,GAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,CAAA;AAAA,IACE,EAAA;AAAA,IACA,0GAAA;AAAA,IACA,eAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,CAAA;AAAA,IACE,EAAA;AAAA,IACA,gGAAA;AAAA,IACA,MAAA;AAAA,IACA,QAAA;AAAA,IACA,SAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA;AAEJ,CAAC;AAEM,IAAM,gBAAA,GAA4C,OAAO,MAAA,CAAO;AAAA,EACrE,CAAA;AAAA,IACE,EAAA;AAAA,IACA;AAAA,MACE,wDAAA;AAAA,MACA;AAAA,KACF,CAAE,KAAK,IAAI,CAAA;AAAA,IACX,cAAA;AAAA,IACA,YAAA;AAAA,IACA,SAAA;AAAA,IACA,GAAA;AAAA,IACA;AAAA,GACF;AAAA,EACA,CAAA;AAAA,IACE,EAAA;AAAA,IACA;AAAA,MACE,wDAAA;AAAA,MACA;AAAA,KACF,CAAE,KAAK,IAAI,CAAA;AAAA,IACX,cAAA;AAAA,IACA,SAAA;AAAA,IACA,UAAA;AAAA,IACA,IAAA;AAAA,IACA;AAAA;AAEJ,CAAC;AAMD,SAAS,aAAa,KAAA,EAAuB;AAC3C,EAAA,OAAO,KAAA,CAAM,OAAA,CAAQ,qBAAA,EAAuB,MAAM,CAAA;AACpD;AAGO,SAAS,mBAAA,CAAoB,QAAgB,MAAA,EAAyB;AAC3E,EAAA,IAAI,CAAC,QAAQ,OAAO,KAAA;AACpB,EAAA,IAAI,OAAO,UAAA,CAAW,GAAG,KAAK,MAAA,CAAO,UAAA,CAAW,GAAG,CAAA,EAAG;AACpD,IAAA,OAAO,MAAA,CAAO,SAAS,MAAM,CAAA;AAAA,EAC/B;AACA,EAAA,IAAI,OAAO,QAAA,CAAS,GAAG,KAAK,MAAA,CAAO,QAAA,CAAS,GAAG,CAAA,EAAG;AAChD,IAAA,OAAO,MAAA,CAAO,SAAS,MAAM,CAAA;AAAA,EAC/B;AACA,EAAA,MAAM,OAAA,GAAU,aAAa,MAAM,CAAA;AACnC,EAAA,OAAO,IAAI,MAAA,CAAO,CAAA,iBAAA,EAAoB,OAAO,CAAA,iBAAA,CAAmB,CAAA,CAAE,KAAK,MAAM,CAAA;AAC/E;AAEO,SAAS,mBAAmB,IAAA,EAA8C;AAC/E,EAAA,OAAO,gBAAA,CAAiB,OAAO,CAACA,EAAAA,KAAMA,GAAE,SAAA,CAAU,QAAA,CAAS,IAAI,CAAC,CAAA;AAClE;AAEA,SAAS,QAAA,CAAS,QAAgB,KAAA,EAAuD;AACvF,EAAA,OAAO,KAAA,CAAM,IAAI,CAAC,IAAA,MAAU,EAAE,GAAG,IAAA,EAAM,QAAO,CAAE,CAAA;AAClD;AAGO,IAAM,gBAAA,GAAmD,OAAO,MAAA,CAAO;AAAA,EAC5E,GAAG,QAAA,CAAS,eAAA,EAAiB,cAAc,CAAA;AAAA,EAC3C,GAAG,QAAA,CAAS,kBAAA,EAAoB,gBAAgB,CAAA;AAAA,EAChD,GAAG,QAAA,CAAS,aAAA,EAAe,gBAAgB,CAAA;AAAA,EAC3C,GAAG,QAAA,CAAS,kBAAA,EAAoB,gBAAgB,CAAA;AAAA,EAChD,GAAG,QAAA,CAAS,mBAAA,EAAqB,iBAAiB,CAAA;AAAA,EAClD,GAAG,QAAA,CAAS,kBAAA,EAAoB,gBAAgB,CAAA;AAAA,EAChD,GAAG,QAAA,CAAS,aAAA,EAAe,YAAY,CAAA;AAAA,EACvC,GAAG,QAAA,CAAS,kBAAA,EAAoB,gBAAgB;AAClD,CAAC,CAAA","file":"chunk-T7RSQ5WD.js","sourcesContent":["// VENDORED from @vibgrate/core-open (packages/vibgrate-core-open) by\n// scripts/vendor-core-open.mjs. Do not edit here — change the source package\n// and re-run the vendor script. Apache-2.0.\n/**\n * Shared credential redaction (GUARDRAILS §1.1): applied at INGEST, before\n * anything is stored or uploaded. One detector, reused by the VCS capture, the\n * graph builder (signatures/docs), and the push envelope — so every surface\n * scrubs the same shapes and a new token prefix is added in exactly one place.\n */\n\nconst SECRET_PATTERNS: RegExp[] = [\n  // Vendor token prefixes (GitHub, GitLab, Slack, OpenAI/Stripe-style, npm, AWS).\n  /\\b(?:gh[opusr]_|github_pat_)[A-Za-z0-9_]{8,}\\b/g,\n  /\\bglpat-[A-Za-z0-9_-]{8,}\\b/g,\n  /\\bxox[baprs]-[A-Za-z0-9-]{8,}\\b/g,\n  /\\bsk-[A-Za-z0-9_-]{8,}\\b/gi,\n  /\\b[sr]k_(?:live|test)_[A-Za-z0-9]{8,}\\b/g,\n  /\\bnpm_[A-Za-z0-9]{16,}\\b/g,\n  /\\b(?:AKIA|ASIA)[0-9A-Z]{12,}\\b/g,\n  // JWTs.\n  /\\beyJ[\\w-]{8,}\\.[\\w-]{8,}\\.[\\w-]+\\b/g,\n  // Authorization material.\n  /\\b(?:Bearer|Basic|VibgrateDSN)\\s+[A-Za-z0-9+/._:=-]{8,}/g,\n  /\\b(?:authorization|api[_-]?key|apikey|access[_-]?token|client[_-]?secret|password|passwd|secret)\\s*[:=]\\s*['\"]?[^'\"\\s]{6,}/gi,\n  // PEM blocks.\n  /-----BEGIN [A-Z ]*PRIVATE KEY-----[\\s\\S]*?(?:-----END [A-Z ]*PRIVATE KEY-----|$)/g,\n  // Long base64/hex blobs (AWS secret keys and friends).\n  /\\b[A-Za-z0-9+/]{40,}={0,2}\\b/g,\n];\n\nexport const REDACTED = '[REDACTED]';\n\n/** Replace every credential-shaped substring with [REDACTED]. Deterministic. */\nexport function redactSecrets(text: string): string {\n  let out = text;\n  for (const re of SECRET_PATTERNS) out = out.replace(re, REDACTED);\n  return out;\n}\n\n/** True when the text contains at least one credential-shaped substring. */\nexport function containsSecret(text: string): boolean {\n  return SECRET_PATTERNS.some((re) => {\n    re.lastIndex = 0;\n    const hit = re.test(text);\n    re.lastIndex = 0;\n    return hit;\n  });\n}\n\nconst CREDENTIAL_QUERY_KEYS =\n  /^(?:access[_-]?token|private[_-]?token|api[_-]?key|apikey|token|secret|password|passwd|auth|authorization|x-token|sig|signature|key)$/i;\n\n/**\n * Strip credentials from a URL: userinfo (`//user:token@host`) AND\n * credential-bearing query parameters (`?access_token=…`, `?private_token=…`).\n * Non-URL strings pass through with just the userinfo strip applied.\n */\nexport function redactUrlCredentials(url: string): string {\n  const noUser = url.replace(/\\/\\/[^@/]+@/, '//');\n  const q = noUser.indexOf('?');\n  if (q === -1) return noUser;\n  const base = noUser.slice(0, q);\n  const kept = noUser\n    .slice(q + 1)\n    .split('&')\n    .filter((pair) => !CREDENTIAL_QUERY_KEYS.test(pair.split('=')[0] ?? ''));\n  return kept.length ? `${base}?${kept.join('&')}` : base;\n}\n","// VENDORED from @vibgrate/core-open (packages/vibgrate-core-open) by\n// scripts/vendor-core-open.mjs. Do not edit here — change the source package\n// and re-run the vendor script. Apache-2.0.\nimport type { AstRoleQuery } from '../types.js';\n\n/**\n * Pack-scoped tree-sitter role queries. Data only — no parser runtime.\n *\n * `languages` uses graph/parse ids (`java`, `cs`, `py`, `go`, `ts`, `tsx`, `js`)\n * so the public-CLI extract can filter without remapping.\n */\n\nfunction q(\n  languages: readonly string[],\n  query: string,\n  needle: string,\n  role: AstRoleQuery['role'],\n  layer: AstRoleQuery['layer'],\n  confidence: number,\n  signal: string,\n): AstRoleQuery {\n  return { languages, query, needle, role, layer, confidence, signal };\n}\n\nconst JAVA = ['java'] as const;\nconst CS = ['cs'] as const;\nconst PY = ['py'] as const;\nconst GO = ['go'] as const;\nconst TS = ['ts', 'tsx', 'js'] as const;\n\nconst JAVA_ANN = (name: string, role: AstRoleQuery['role'], layer: AstRoleQuery['layer'], signal: string): AstRoleQuery =>\n  q(\n    JAVA,\n    [\n      `(marker_annotation name: (identifier) @hit (#eq? @hit \"${name}\"))`,\n      `(annotation name: (identifier) @hit (#eq? @hit \"${name}\"))`,\n      `(marker_annotation name: (scoped_identifier name: (identifier) @hit (#eq? @hit \"${name}\")))`,\n    ].join('\\n'),\n    `@${name}`,\n    role,\n    layer,\n    0.9,\n    signal,\n  );\n\nexport const JAVA_AST_ROLES: readonly AstRoleQuery[] = Object.freeze([\n  JAVA_ANN('RestController', 'controller', 'routing', 'java @RestController'),\n  JAVA_ANN('Controller', 'controller', 'routing', 'java @Controller'),\n  JAVA_ANN('Service', 'service', 'services', 'java @Service'),\n  JAVA_ANN('Repository', 'repository', 'data-access', 'java @Repository'),\n  JAVA_ANN('Entity', 'entity', 'domain', 'java @Entity'),\n]);\n\nexport const SPRING_AST_ROLES: readonly AstRoleQuery[] = JAVA_AST_ROLES;\n\nexport const DOTNET_AST_ROLES: readonly AstRoleQuery[] = Object.freeze([\n  q(\n    CS,\n    [\n      `(attribute name: (identifier) @hit (#eq? @hit \"ApiController\"))`,\n      `(attribute name: (qualified_name (identifier) @hit (#eq? @hit \"ApiController\")))`,\n    ].join('\\n'),\n    '[ApiController]',\n    'controller',\n    'routing',\n    0.9,\n    'dotnet [ApiController]',\n  ),\n  q(\n    CS,\n    [\n      `(base_list (identifier) @hit (#eq? @hit \"DbContext\"))`,\n      `(base_list (generic_name (identifier) @hit (#eq? @hit \"DbContext\")))`,\n    ].join('\\n'),\n    'DbContext',\n    'repository',\n    'data-access',\n    0.86,\n    'dotnet : DbContext',\n  ),\n  q(\n    CS,\n    [\n      `(base_list (identifier) @hit (#eq? @hit \"IRequestHandler\"))`,\n      `(base_list (generic_name (identifier) @hit (#eq? @hit \"IRequestHandler\")))`,\n    ].join('\\n'),\n    'IRequestHandler',\n    'handler',\n    'services',\n    0.86,\n    'dotnet IRequestHandler',\n  ),\n]);\n\nexport const FASTAPI_AST_ROLES: readonly AstRoleQuery[] = Object.freeze([\n  q(\n    PY,\n    '(call function: (identifier) @hit (#eq? @hit \"APIRouter\"))',\n    'APIRouter(',\n    'router',\n    'routing',\n    0.88,\n    'fastapi APIRouter()',\n  ),\n]);\n\nexport const DJANGO_AST_ROLES: readonly AstRoleQuery[] = Object.freeze([\n  q(\n    PY,\n    '(assignment left: (identifier) @hit (#eq? @hit \"urlpatterns\"))',\n    'urlpatterns',\n    'router',\n    'routing',\n    0.9,\n    'django urlpatterns',\n  ),\n  q(\n    PY,\n    [\n      '(class_definition superclasses: (argument_list (attribute object: (identifier) @obj attribute: (identifier) @hit (#eq? @obj \"models\") (#eq? @hit \"Model\"))))',\n      '(class_definition superclasses: (argument_list (identifier) @hit (#eq? @hit \"Model\")))',\n    ].join('\\n'),\n    'models.Model',\n    'entity',\n    'domain',\n    0.88,\n    'django models.Model',\n  ),\n]);\n\nexport const GO_AST_ROLES: readonly AstRoleQuery[] = Object.freeze([\n  q(\n    GO,\n    '(method_declaration name: (field_identifier) @hit (#eq? @hit \"ServeHTTP\"))',\n    'ServeHTTP',\n    'handler',\n    'routing',\n    0.9,\n    'go ServeHTTP',\n  ),\n  q(\n    GO,\n    '(call_expression function: (selector_expression field: (field_identifier) @hit (#eq? @hit \"NewRouter\")))',\n    'chi.NewRouter',\n    'router',\n    'routing',\n    0.86,\n    'go chi.NewRouter',\n  ),\n  q(\n    GO,\n    '(call_expression function: (selector_expression operand: (identifier) @hit (#eq? @hit \"gin\")))',\n    'gin.',\n    'router',\n    'routing',\n    0.86,\n    'go gin',\n  ),\n]);\n\nexport const NESTJS_AST_ROLES: readonly AstRoleQuery[] = Object.freeze([\n  q(\n    TS,\n    [\n      '(decorator (identifier) @hit (#eq? @hit \"Controller\"))',\n      '(decorator (call_expression function: (identifier) @hit (#eq? @hit \"Controller\")))',\n    ].join('\\n'),\n    '@Controller(',\n    'controller',\n    'routing',\n    0.9,\n    'nestjs @Controller(',\n  ),\n  q(\n    TS,\n    [\n      '(decorator (identifier) @hit (#eq? @hit \"Injectable\"))',\n      '(decorator (call_expression function: (identifier) @hit (#eq? @hit \"Injectable\")))',\n    ].join('\\n'),\n    '@Injectable(',\n    'service',\n    'services',\n    0.88,\n    'nestjs @Injectable(',\n  ),\n]);\n\nexport interface AstRoleCatalogEntry extends AstRoleQuery {\n  packId: string;\n}\n\nfunction escapeRegExp(value: string): string {\n  return value.replace(/[.*+?^${}()|[\\]\\\\]/g, '\\\\$&');\n}\n\n/** True when `needle` occurs as a structural token in `source`. */\nexport function sourceHasRoleNeedle(source: string, needle: string): boolean {\n  if (!needle) return false;\n  if (needle.startsWith('@') || needle.startsWith('[')) {\n    return source.includes(needle);\n  }\n  if (needle.endsWith('(') || needle.endsWith('.')) {\n    return source.includes(needle);\n  }\n  const escaped = escapeRegExp(needle);\n  return new RegExp(`(^|[^A-Za-z0-9_])${escaped}([^A-Za-z0-9_]|$)`).test(source);\n}\n\nexport function catalogForLanguage(lang: string): readonly AstRoleCatalogEntry[] {\n  return AST_ROLE_CATALOG.filter((q) => q.languages.includes(lang));\n}\n\nfunction withPack(packId: string, roles: readonly AstRoleQuery[]): AstRoleCatalogEntry[] {\n  return roles.map((role) => ({ ...role, packId }));\n}\n\n/** Flat catalog used by the public-CLI extract (and the tree-sitter-free matcher). */\nexport const AST_ROLE_CATALOG: readonly AstRoleCatalogEntry[] = Object.freeze([\n  ...withPack('language/java', JAVA_AST_ROLES),\n  ...withPack('framework/spring', SPRING_AST_ROLES),\n  ...withPack('language/cs', DOTNET_AST_ROLES),\n  ...withPack('framework/aspnet', DOTNET_AST_ROLES),\n  ...withPack('framework/fastapi', FASTAPI_AST_ROLES),\n  ...withPack('framework/django', DJANGO_AST_ROLES),\n  ...withPack('language/go', GO_AST_ROLES),\n  ...withPack('framework/nestjs', NESTJS_AST_ROLES),\n]);\n"]}

package/dist/{chunk-RQAKBRAV.js → chunk-TVDMNIUT.js}

@@ -1,6 +1,6 @@
 import { vgdRequest } from './chunk-RBIRXQR6.js';
 import { resolveOne } from './chunk-J7LKEB2R.js';
-import { impactOf, queryGraph } from './chunk-2TJ5EY4I.js';
+import { impactOf, queryGraph } from './chunk-Q4G2BWE3.js';
 
 // src/code/graph-backend.ts
 function localGraphBackend(graph) {
@@ -132,5 +132,5 @@ function resolveSymbolId(graph, symbol) {
 }
 
 export { localGraphBackend, resolveGraphBackend, vgdGraphBackend };
-//# sourceMappingURL=chunk-RQAKBRAV.js.map
-//# sourceMappingURL=chunk-RQAKBRAV.js.map
+//# sourceMappingURL=chunk-TVDMNIUT.js.map
+//# sourceMappingURL=chunk-TVDMNIUT.js.map

package/dist/{chunk-RQAKBRAV.js.map → chunk-TVDMNIUT.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/code/graph-backend.ts"],"names":[],"mappings":";;;;;AA2DO,SAAS,kBAAkB,KAAA,EAA8B;AAC9D,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,OAAA;AAAA,IACR,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM;AACxB,MAAA,MAAM,GAAA,GAAM,UAAA,CAAW,KAAA,EAAO,KAAA,EAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,KAAA,IAAS,EAAA,EAAI,CAAA;AAC/E,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,OAAA;AAAA,QACR,OAAA,EAAS,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAC/B,EAAA,EAAI,EAAE,IAAA,CAAK,EAAA;AAAA,UACX,aAAA,EAAe,EAAE,IAAA,CAAK,aAAA;AAAA,UACtB,IAAA,EAAM,EAAE,IAAA,CAAK,IAAA;AAAA,UACb,IAAA,EAAM,EAAE,IAAA,CAAK,IAAA;AAAA,UACb,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAA,EAAM,KAAA,IAAS,CAAA;AAAA,UAC5B,OAAO,CAAA,CAAE,KAAA;AAAA,UACT,KAAK,CAAA,CAAE,GAAA;AAAA,UACP,SAAA,EAAW,CAAA,CAAE,IAAA,CAAK,SAAA,IAAa;AAAA,SACjC,CAAE;AAAA,OACJ;AAAA,IACF,CAAA;AAAA,IACA,MAAM,MAAA,CAAO,MAAA,EAAQ,IAAA,EAAM;AACzB,MAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,KAAA,EAAO,MAAM,CAAA;AAC1C,MAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,MAAA,MAAM,GAAA,GAAM,SAAS,KAAA,EAAO,IAAA,EAAM,EAAE,KAAA,EAAO,IAAA,EAAM,KAAA,IAAS,CAAA,EAAG,CAAA;AAC7D,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,OAAA;AAAA,QACR,MAAM,GAAA,CAAI,IAAA;AAAA,QACV,OAAO,GAAA,CAAI,KAAA;AAAA,QACX,QAAA,EAAU,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UACjC,IAAI,CAAA,CAAE,EAAA;AAAA,UACN,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,OAAO,CAAA,CAAE,KAAA;AAAA,UACT,YAAY,CAAA,CAAE;AAAA,SAChB,CAAE,CAAA;AAAA,QACF,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,YAAY,GAAA,CAAI;AAAA,OAClB;AAAA,IACF;AAAA,GACF;AACF;AAeO,SAAS,gBAAgB,OAAA,EAA+C;AAC7E,EAAA,MAAM,KAAA,GAAQ,iBAAA,CAAkB,OAAA,CAAQ,QAAQ,CAAA;AAChD,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,KAAY,CAAC,KAAK,IAAA,KAAS,UAAA,CAAW,KAAK,IAAI,CAAA,CAAA;AACvE,EAAA,MAAM,UAAA,GAA+B,EAAE,UAAA,EAAY,OAAA,CAAQ,UAAA,EAAW;AAEtE,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,KAAA;AAAA,IACR,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,MAAO,MAAM,OAAA;AAAA,UACjB;AAAA,YACE,EAAA,EAAI,aAAA;AAAA,YACJ,cAAc,OAAA,CAAQ,YAAA;AAAA,YACtB,KAAA;AAAA,YACA,KAAA,EAAO,MAAM,KAAA,IAAS,EAAA;AAAA,YACtB,QAAQ,OAAA,CAAQ;AAAA,WAClB;AAAA,UACA;AAAA,SACF;AAYA,QAAA,IAAI,KAAK,EAAA,IAAM,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,EAAG;AACzC,UAAA,OAAO;AAAA,YACL,MAAA,EAAQ,KAAA;AAAA,YACR,OAAA,EAAS,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,cAC/B,IAAI,CAAA,CAAE,EAAA;AAAA,cACN,eAAe,CAAA,CAAE,aAAA;AAAA,cACjB,MAAM,CAAA,CAAE,IAAA;AAAA,cACR,MAAM,CAAA,CAAE,IAAA;AAAA,cACR,MAAM,CAAA,CAAE,IAAA;AAAA,cACR,OAAO,CAAA,CAAE,KAAA;AAAA,cACT,KAAK,CAAA,CAAE,GAAA;AAAA,cACP,SAAA,EAAW;AAAA,aACb,CAAE;AAAA,WACJ;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,OAAO,KAAA,CAAM,MAAA,CAAO,KAAA,EAAO,IAAI,CAAA;AAAA,IACjC,CAAA;AAAA,IACA,MAAM,MAAA,CAAO,MAAA,EAAQ,IAAA,EAAM;AACzB,MAAA,IAAI;AACF,QAAA,MAAM,MAAO,MAAM,OAAA;AAAA,UACjB;AAAA,YACE,EAAA,EAAI,WAAA;AAAA,YACJ,cAAc,OAAA,CAAQ,YAAA;AAAA,YACtB,MAAA;AAAA,YACA,KAAA,EAAO,MAAM,KAAA,IAAS,CAAA;AAAA,YACtB,QAAQ,OAAA,CAAQ;AAAA,WAClB;AAAA,UACA;AAAA,SACF;AAQA,QAAA,IAAI,GAAA,EAAK,MAAM,GAAA,CAAI,IAAA,IAAQ,MAAM,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA,EAAG;AACtD,UAAA,OAAO;AAAA,YACL,MAAA,EAAQ,KAAA;AAAA,YACR,MAAM,GAAA,CAAI,IAAA;AAAA,YACV,KAAA,EAAO,GAAA,CAAI,KAAA,IAAS,IAAA,EAAM,KAAA,IAAS,CAAA;AAAA,YACnC,UAAU,GAAA,CAAI,QAAA;AAAA,YACd,MAAA,EAAQ,IAAI,MAAA,IAAU,CAAA;AAAA,YACtB,UAAA,EAAY,IAAI,UAAA,IAAc;AAAA,WAChC;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,OAAO,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,IAAI,CAAA;AAAA,IAClC;AAAA,GACF;AACF;AAKO,SAAS,oBAAoB,KAAA,EAKnB;AACf,EAAA,IAAI,KAAA,CAAM,YAAA,IAAgB,KAAA,CAAM,UAAA,EAAY;AAC1C,IAAA,OAAO,eAAA,CAAgB;AAAA,MACrB,cAAc,KAAA,CAAM,YAAA;AAAA,MACpB,MAAA,EAAQ,MAAM,MAAA,IAAU,MAAA;AAAA,MACxB,YAAY,KAAA,CAAM,UAAA;AAAA,MAClB,UAAU,KAAA,CAAM;AAAA,KACjB,CAAA;AAAA,EACH;AACA,EAAA,OAAO,iBAAA,CAAkB,MAAM,KAAK,CAAA;AACtC;AAEA,SAAS,eAAA,CAAgB,OAAgB,MAAA,EAA+B;AACtE,EAAA,IAAI,KAAA,CAAM,MAAM,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,EAAA,KAAO,MAAM,CAAA,EAAG,OAAO,MAAA;AACrD,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,KAAA,EAAO,MAAM,CAAA;AACpC,EAAA,IAAI,GAAA,CAAI,IAAA,EAAM,EAAA,EAAI,OAAO,IAAI,IAAA,CAAK,EAAA;AAClC,EAAA,IAAI,GAAA,CAAI,UAAA,CAAW,MAAA,KAAW,CAAA,IAAK,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA,EAAG,EAAA,EAAI,OAAO,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA,CAAE,EAAA;AACnF,EAAA,MAAM,CAAA,GAAI,OAAO,WAAA,EAAY;AAC7B,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,aAAA,EAAe,WAAA,OAAkB,CAAA,IAAK,CAAA,CAAE,IAAA,EAAM,WAAA,OAAkB,CAAC,CAAA;AACxG,EAAA,OAAO,MAAM,EAAA,IAAM,IAAA;AACrB","file":"chunk-RQAKBRAV.js","sourcesContent":["/**\n * Graph query backend for the agent tool layer (Fusion Runtime).\n *\n * Tools prefer a warm ActiveGraph in vgd when a daemon session is attached;\n * otherwise they fall back to the in-process {@link VgGraph}. Failures never\n * surface to the model as transport errors — they degrade to local query.\n */\n\nimport { queryGraph } from '../engine/query.js';\nimport { impactOf } from '../engine/impact.js';\nimport { resolveOne } from '../engine/lookup.js';\nimport { vgdRequest, type VgdClientOptions } from '../runtime/vgd/client.js';\nimport type { VgdRequest } from '../runtime/vgd/protocol.js';\nimport type { VgGraph } from '../schema.js';\n\nexport type GraphBackendSource = 'local' | 'vgd';\n\nexport interface GraphSearchHit {\n  id: string;\n  qualifiedName: string;\n  kind: string;\n  file: string;\n  line: number;\n  score: number;\n  why: string;\n  signature?: string | null;\n}\n\nexport interface GraphImpactHit {\n  id: string;\n  name: string;\n  kind: string;\n  file: string;\n  line: number;\n  depth: number;\n  confidence: number;\n}\n\nexport interface GraphImpactResult {\n  root: { id: string; name: string };\n  depth: number;\n  affected: GraphImpactHit[];\n  direct: number;\n  transitive: number;\n  source: GraphBackendSource;\n}\n\nexport interface GraphSearchResult {\n  matches: GraphSearchHit[];\n  source: GraphBackendSource;\n}\n\nexport interface GraphBackend {\n  readonly source: GraphBackendSource;\n  search(query: string, opts?: { limit?: number }): Promise<GraphSearchResult>;\n  impact(symbol: string, opts?: { depth?: number }): Promise<GraphImpactResult | null>;\n}\n\n/** Pure in-process backend over a loaded graph. */\nexport function localGraphBackend(graph: VgGraph): GraphBackend {\n  return {\n    source: 'local',\n    async search(query, opts) {\n      const res = queryGraph(graph, query, { budget: 1500, limit: opts?.limit ?? 10 });\n      return {\n        source: 'local',\n        matches: res.matches.map((m) => ({\n          id: m.node.id,\n          qualifiedName: m.node.qualifiedName,\n          kind: m.node.kind,\n          file: m.node.file,\n          line: m.node.span?.start ?? 0,\n          score: m.score,\n          why: m.why,\n          signature: m.node.signature ?? null,\n        })),\n      };\n    },\n    async impact(symbol, opts) {\n      const node = resolveSymbolId(graph, symbol);\n      if (!node) return null;\n      const imp = impactOf(graph, node, { depth: opts?.depth ?? 4 });\n      return {\n        source: 'local',\n        root: imp.root,\n        depth: imp.depth,\n        affected: imp.affected.map((a) => ({\n          id: a.id,\n          name: a.name,\n          kind: a.kind,\n          file: a.file,\n          line: a.line,\n          depth: a.depth,\n          confidence: a.confidence,\n        })),\n        direct: imp.direct,\n        transitive: imp.transitive,\n      };\n    },\n  };\n}\n\nexport interface VgdGraphBackendOptions {\n  repositoryId: string;\n  gitRef?: string;\n  socketPath?: string;\n  /** Always required for fall back when vgd has no slot or is down. */\n  fallback: VgGraph;\n  request?: (req: VgdRequest, opts?: VgdClientOptions) => Promise<unknown>;\n}\n\n/**\n * Prefer vgd query/impact; on any failure or empty daemon state, use local.\n * The returned `source` reflects which path answered.\n */\nexport function vgdGraphBackend(options: VgdGraphBackendOptions): GraphBackend {\n  const local = localGraphBackend(options.fallback);\n  const request = options.request ?? ((req, opts) => vgdRequest(req, opts));\n  const clientOpts: VgdClientOptions = { socketPath: options.socketPath };\n\n  return {\n    source: 'vgd',\n    async search(query, opts) {\n      try {\n        const res = (await request(\n          {\n            op: 'query-graph',\n            repositoryId: options.repositoryId,\n            query,\n            limit: opts?.limit ?? 10,\n            gitRef: options.gitRef,\n          },\n          clientOpts,\n        )) as {\n          ok?: boolean;\n          matches?: Array<{\n            id: string;\n            qualifiedName: string;\n            kind: string;\n            file: string;\n            line: number;\n            score: number;\n            why: string;\n          }>;\n        };\n        if (res?.ok && Array.isArray(res.matches)) {\n          return {\n            source: 'vgd',\n            matches: res.matches.map((m) => ({\n              id: m.id,\n              qualifiedName: m.qualifiedName,\n              kind: m.kind,\n              file: m.file,\n              line: m.line,\n              score: m.score,\n              why: m.why,\n              signature: null,\n            })),\n          };\n        }\n      } catch {\n        /* fall through */\n      }\n      return local.search(query, opts);\n    },\n    async impact(symbol, opts) {\n      try {\n        const res = (await request(\n          {\n            op: 'impact-of',\n            repositoryId: options.repositoryId,\n            symbol,\n            depth: opts?.depth ?? 4,\n            gitRef: options.gitRef,\n          },\n          clientOpts,\n        )) as {\n          ok?: boolean;\n          root?: { id: string; name: string };\n          depth?: number;\n          affected?: GraphImpactHit[];\n          direct?: number;\n          transitive?: number;\n        };\n        if (res?.ok && res.root && Array.isArray(res.affected)) {\n          return {\n            source: 'vgd',\n            root: res.root,\n            depth: res.depth ?? opts?.depth ?? 4,\n            affected: res.affected,\n            direct: res.direct ?? 0,\n            transitive: res.transitive ?? 0,\n          };\n        }\n      } catch {\n        /* fall through */\n      }\n      return local.impact(symbol, opts);\n    },\n  };\n}\n\n/**\n * Pick a backend: vgd when repositoryId + socket are known, else local.\n */\nexport function resolveGraphBackend(input: {\n  graph: VgGraph;\n  repositoryId?: string | null;\n  gitRef?: string | null;\n  socketPath?: string | null;\n}): GraphBackend {\n  if (input.repositoryId && input.socketPath) {\n    return vgdGraphBackend({\n      repositoryId: input.repositoryId,\n      gitRef: input.gitRef ?? undefined,\n      socketPath: input.socketPath,\n      fallback: input.graph,\n    });\n  }\n  return localGraphBackend(input.graph);\n}\n\nfunction resolveSymbolId(graph: VgGraph, symbol: string): string | null {\n  if (graph.nodes.some((n) => n.id === symbol)) return symbol;\n  const hit = resolveOne(graph, symbol);\n  if (hit.node?.id) return hit.node.id;\n  if (hit.candidates.length === 1 && hit.candidates[0]?.id) return hit.candidates[0].id;\n  const q = symbol.toLowerCase();\n  const byQn = graph.nodes.find((n) => n.qualifiedName?.toLowerCase() === q || n.name?.toLowerCase() === q);\n  return byQn?.id ?? null;\n}\n"]}
+{"version":3,"sources":["../src/code/graph-backend.ts"],"names":[],"mappings":";;;;;AA2DO,SAAS,kBAAkB,KAAA,EAA8B;AAC9D,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,OAAA;AAAA,IACR,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM;AACxB,MAAA,MAAM,GAAA,GAAM,UAAA,CAAW,KAAA,EAAO,KAAA,EAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,KAAA,IAAS,EAAA,EAAI,CAAA;AAC/E,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,OAAA;AAAA,QACR,OAAA,EAAS,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAC/B,EAAA,EAAI,EAAE,IAAA,CAAK,EAAA;AAAA,UACX,aAAA,EAAe,EAAE,IAAA,CAAK,aAAA;AAAA,UACtB,IAAA,EAAM,EAAE,IAAA,CAAK,IAAA;AAAA,UACb,IAAA,EAAM,EAAE,IAAA,CAAK,IAAA;AAAA,UACb,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAA,EAAM,KAAA,IAAS,CAAA;AAAA,UAC5B,OAAO,CAAA,CAAE,KAAA;AAAA,UACT,KAAK,CAAA,CAAE,GAAA;AAAA,UACP,SAAA,EAAW,CAAA,CAAE,IAAA,CAAK,SAAA,IAAa;AAAA,SACjC,CAAE;AAAA,OACJ;AAAA,IACF,CAAA;AAAA,IACA,MAAM,MAAA,CAAO,MAAA,EAAQ,IAAA,EAAM;AACzB,MAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,KAAA,EAAO,MAAM,CAAA;AAC1C,MAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,MAAA,MAAM,GAAA,GAAM,SAAS,KAAA,EAAO,IAAA,EAAM,EAAE,KAAA,EAAO,IAAA,EAAM,KAAA,IAAS,CAAA,EAAG,CAAA;AAC7D,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,OAAA;AAAA,QACR,MAAM,GAAA,CAAI,IAAA;AAAA,QACV,OAAO,GAAA,CAAI,KAAA;AAAA,QACX,QAAA,EAAU,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UACjC,IAAI,CAAA,CAAE,EAAA;AAAA,UACN,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,OAAO,CAAA,CAAE,KAAA;AAAA,UACT,YAAY,CAAA,CAAE;AAAA,SAChB,CAAE,CAAA;AAAA,QACF,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,YAAY,GAAA,CAAI;AAAA,OAClB;AAAA,IACF;AAAA,GACF;AACF;AAeO,SAAS,gBAAgB,OAAA,EAA+C;AAC7E,EAAA,MAAM,KAAA,GAAQ,iBAAA,CAAkB,OAAA,CAAQ,QAAQ,CAAA;AAChD,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,KAAY,CAAC,KAAK,IAAA,KAAS,UAAA,CAAW,KAAK,IAAI,CAAA,CAAA;AACvE,EAAA,MAAM,UAAA,GAA+B,EAAE,UAAA,EAAY,OAAA,CAAQ,UAAA,EAAW;AAEtE,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,KAAA;AAAA,IACR,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,MAAO,MAAM,OAAA;AAAA,UACjB;AAAA,YACE,EAAA,EAAI,aAAA;AAAA,YACJ,cAAc,OAAA,CAAQ,YAAA;AAAA,YACtB,KAAA;AAAA,YACA,KAAA,EAAO,MAAM,KAAA,IAAS,EAAA;AAAA,YACtB,QAAQ,OAAA,CAAQ;AAAA,WAClB;AAAA,UACA;AAAA,SACF;AAYA,QAAA,IAAI,KAAK,EAAA,IAAM,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,EAAG;AACzC,UAAA,OAAO;AAAA,YACL,MAAA,EAAQ,KAAA;AAAA,YACR,OAAA,EAAS,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,cAC/B,IAAI,CAAA,CAAE,EAAA;AAAA,cACN,eAAe,CAAA,CAAE,aAAA;AAAA,cACjB,MAAM,CAAA,CAAE,IAAA;AAAA,cACR,MAAM,CAAA,CAAE,IAAA;AAAA,cACR,MAAM,CAAA,CAAE,IAAA;AAAA,cACR,OAAO,CAAA,CAAE,KAAA;AAAA,cACT,KAAK,CAAA,CAAE,GAAA;AAAA,cACP,SAAA,EAAW;AAAA,aACb,CAAE;AAAA,WACJ;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,OAAO,KAAA,CAAM,MAAA,CAAO,KAAA,EAAO,IAAI,CAAA;AAAA,IACjC,CAAA;AAAA,IACA,MAAM,MAAA,CAAO,MAAA,EAAQ,IAAA,EAAM;AACzB,MAAA,IAAI;AACF,QAAA,MAAM,MAAO,MAAM,OAAA;AAAA,UACjB;AAAA,YACE,EAAA,EAAI,WAAA;AAAA,YACJ,cAAc,OAAA,CAAQ,YAAA;AAAA,YACtB,MAAA;AAAA,YACA,KAAA,EAAO,MAAM,KAAA,IAAS,CAAA;AAAA,YACtB,QAAQ,OAAA,CAAQ;AAAA,WAClB;AAAA,UACA;AAAA,SACF;AAQA,QAAA,IAAI,GAAA,EAAK,MAAM,GAAA,CAAI,IAAA,IAAQ,MAAM,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA,EAAG;AACtD,UAAA,OAAO;AAAA,YACL,MAAA,EAAQ,KAAA;AAAA,YACR,MAAM,GAAA,CAAI,IAAA;AAAA,YACV,KAAA,EAAO,GAAA,CAAI,KAAA,IAAS,IAAA,EAAM,KAAA,IAAS,CAAA;AAAA,YACnC,UAAU,GAAA,CAAI,QAAA;AAAA,YACd,MAAA,EAAQ,IAAI,MAAA,IAAU,CAAA;AAAA,YACtB,UAAA,EAAY,IAAI,UAAA,IAAc;AAAA,WAChC;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,OAAO,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,IAAI,CAAA;AAAA,IAClC;AAAA,GACF;AACF;AAKO,SAAS,oBAAoB,KAAA,EAKnB;AACf,EAAA,IAAI,KAAA,CAAM,YAAA,IAAgB,KAAA,CAAM,UAAA,EAAY;AAC1C,IAAA,OAAO,eAAA,CAAgB;AAAA,MACrB,cAAc,KAAA,CAAM,YAAA;AAAA,MACpB,MAAA,EAAQ,MAAM,MAAA,IAAU,MAAA;AAAA,MACxB,YAAY,KAAA,CAAM,UAAA;AAAA,MAClB,UAAU,KAAA,CAAM;AAAA,KACjB,CAAA;AAAA,EACH;AACA,EAAA,OAAO,iBAAA,CAAkB,MAAM,KAAK,CAAA;AACtC;AAEA,SAAS,eAAA,CAAgB,OAAgB,MAAA,EAA+B;AACtE,EAAA,IAAI,KAAA,CAAM,MAAM,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,EAAA,KAAO,MAAM,CAAA,EAAG,OAAO,MAAA;AACrD,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,KAAA,EAAO,MAAM,CAAA;AACpC,EAAA,IAAI,GAAA,CAAI,IAAA,EAAM,EAAA,EAAI,OAAO,IAAI,IAAA,CAAK,EAAA;AAClC,EAAA,IAAI,GAAA,CAAI,UAAA,CAAW,MAAA,KAAW,CAAA,IAAK,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA,EAAG,EAAA,EAAI,OAAO,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA,CAAE,EAAA;AACnF,EAAA,MAAM,CAAA,GAAI,OAAO,WAAA,EAAY;AAC7B,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,aAAA,EAAe,WAAA,OAAkB,CAAA,IAAK,CAAA,CAAE,IAAA,EAAM,WAAA,OAAkB,CAAC,CAAA;AACxG,EAAA,OAAO,MAAM,EAAA,IAAM,IAAA;AACrB","file":"chunk-TVDMNIUT.js","sourcesContent":["/**\n * Graph query backend for the agent tool layer (Fusion Runtime).\n *\n * Tools prefer a warm ActiveGraph in vgd when a daemon session is attached;\n * otherwise they fall back to the in-process {@link VgGraph}. Failures never\n * surface to the model as transport errors — they degrade to local query.\n */\n\nimport { queryGraph } from '../engine/query.js';\nimport { impactOf } from '../engine/impact.js';\nimport { resolveOne } from '../engine/lookup.js';\nimport { vgdRequest, type VgdClientOptions } from '../runtime/vgd/client.js';\nimport type { VgdRequest } from '../runtime/vgd/protocol.js';\nimport type { VgGraph } from '../schema.js';\n\nexport type GraphBackendSource = 'local' | 'vgd';\n\nexport interface GraphSearchHit {\n  id: string;\n  qualifiedName: string;\n  kind: string;\n  file: string;\n  line: number;\n  score: number;\n  why: string;\n  signature?: string | null;\n}\n\nexport interface GraphImpactHit {\n  id: string;\n  name: string;\n  kind: string;\n  file: string;\n  line: number;\n  depth: number;\n  confidence: number;\n}\n\nexport interface GraphImpactResult {\n  root: { id: string; name: string };\n  depth: number;\n  affected: GraphImpactHit[];\n  direct: number;\n  transitive: number;\n  source: GraphBackendSource;\n}\n\nexport interface GraphSearchResult {\n  matches: GraphSearchHit[];\n  source: GraphBackendSource;\n}\n\nexport interface GraphBackend {\n  readonly source: GraphBackendSource;\n  search(query: string, opts?: { limit?: number }): Promise<GraphSearchResult>;\n  impact(symbol: string, opts?: { depth?: number }): Promise<GraphImpactResult | null>;\n}\n\n/** Pure in-process backend over a loaded graph. */\nexport function localGraphBackend(graph: VgGraph): GraphBackend {\n  return {\n    source: 'local',\n    async search(query, opts) {\n      const res = queryGraph(graph, query, { budget: 1500, limit: opts?.limit ?? 10 });\n      return {\n        source: 'local',\n        matches: res.matches.map((m) => ({\n          id: m.node.id,\n          qualifiedName: m.node.qualifiedName,\n          kind: m.node.kind,\n          file: m.node.file,\n          line: m.node.span?.start ?? 0,\n          score: m.score,\n          why: m.why,\n          signature: m.node.signature ?? null,\n        })),\n      };\n    },\n    async impact(symbol, opts) {\n      const node = resolveSymbolId(graph, symbol);\n      if (!node) return null;\n      const imp = impactOf(graph, node, { depth: opts?.depth ?? 4 });\n      return {\n        source: 'local',\n        root: imp.root,\n        depth: imp.depth,\n        affected: imp.affected.map((a) => ({\n          id: a.id,\n          name: a.name,\n          kind: a.kind,\n          file: a.file,\n          line: a.line,\n          depth: a.depth,\n          confidence: a.confidence,\n        })),\n        direct: imp.direct,\n        transitive: imp.transitive,\n      };\n    },\n  };\n}\n\nexport interface VgdGraphBackendOptions {\n  repositoryId: string;\n  gitRef?: string;\n  socketPath?: string;\n  /** Always required for fall back when vgd has no slot or is down. */\n  fallback: VgGraph;\n  request?: (req: VgdRequest, opts?: VgdClientOptions) => Promise<unknown>;\n}\n\n/**\n * Prefer vgd query/impact; on any failure or empty daemon state, use local.\n * The returned `source` reflects which path answered.\n */\nexport function vgdGraphBackend(options: VgdGraphBackendOptions): GraphBackend {\n  const local = localGraphBackend(options.fallback);\n  const request = options.request ?? ((req, opts) => vgdRequest(req, opts));\n  const clientOpts: VgdClientOptions = { socketPath: options.socketPath };\n\n  return {\n    source: 'vgd',\n    async search(query, opts) {\n      try {\n        const res = (await request(\n          {\n            op: 'query-graph',\n            repositoryId: options.repositoryId,\n            query,\n            limit: opts?.limit ?? 10,\n            gitRef: options.gitRef,\n          },\n          clientOpts,\n        )) as {\n          ok?: boolean;\n          matches?: Array<{\n            id: string;\n            qualifiedName: string;\n            kind: string;\n            file: string;\n            line: number;\n            score: number;\n            why: string;\n          }>;\n        };\n        if (res?.ok && Array.isArray(res.matches)) {\n          return {\n            source: 'vgd',\n            matches: res.matches.map((m) => ({\n              id: m.id,\n              qualifiedName: m.qualifiedName,\n              kind: m.kind,\n              file: m.file,\n              line: m.line,\n              score: m.score,\n              why: m.why,\n              signature: null,\n            })),\n          };\n        }\n      } catch {\n        /* fall through */\n      }\n      return local.search(query, opts);\n    },\n    async impact(symbol, opts) {\n      try {\n        const res = (await request(\n          {\n            op: 'impact-of',\n            repositoryId: options.repositoryId,\n            symbol,\n            depth: opts?.depth ?? 4,\n            gitRef: options.gitRef,\n          },\n          clientOpts,\n        )) as {\n          ok?: boolean;\n          root?: { id: string; name: string };\n          depth?: number;\n          affected?: GraphImpactHit[];\n          direct?: number;\n          transitive?: number;\n        };\n        if (res?.ok && res.root && Array.isArray(res.affected)) {\n          return {\n            source: 'vgd',\n            root: res.root,\n            depth: res.depth ?? opts?.depth ?? 4,\n            affected: res.affected,\n            direct: res.direct ?? 0,\n            transitive: res.transitive ?? 0,\n          };\n        }\n      } catch {\n        /* fall through */\n      }\n      return local.impact(symbol, opts);\n    },\n  };\n}\n\n/**\n * Pick a backend: vgd when repositoryId + socket are known, else local.\n */\nexport function resolveGraphBackend(input: {\n  graph: VgGraph;\n  repositoryId?: string | null;\n  gitRef?: string | null;\n  socketPath?: string | null;\n}): GraphBackend {\n  if (input.repositoryId && input.socketPath) {\n    return vgdGraphBackend({\n      repositoryId: input.repositoryId,\n      gitRef: input.gitRef ?? undefined,\n      socketPath: input.socketPath,\n      fallback: input.graph,\n    });\n  }\n  return localGraphBackend(input.graph);\n}\n\nfunction resolveSymbolId(graph: VgGraph, symbol: string): string | null {\n  if (graph.nodes.some((n) => n.id === symbol)) return symbol;\n  const hit = resolveOne(graph, symbol);\n  if (hit.node?.id) return hit.node.id;\n  if (hit.candidates.length === 1 && hit.candidates[0]?.id) return hit.candidates[0].id;\n  const q = symbol.toLowerCase();\n  const byQn = graph.nodes.find((n) => n.qualifiedName?.toLowerCase() === q || n.name?.toLowerCase() === q);\n  return byQn?.id ?? null;\n}\n"]}