@vibgrate/cli 2026.819.3 → 2026.825.1

package/dist/cli.js

@@ -1,44 +1,45 @@
 #!/usr/bin/env node
-import { fetchCatalog, resolveProviders } from './chunk-XZDI2N7M.js';
-import { telemetryOptOut, StatsSharer, statsEndpoint, isCI } from './chunk-5RMME7PT.js';
+import { fetchCatalog, resolveProviders } from './chunk-DLNNNESQ.js';
+import { telemetryOptOut, StatsSharer, statsEndpoint, isCI } from './chunk-M7O6IVKN.js';
 import { loadAdvancedScanHook, baselineCommand } from './chunk-QLNJ3VWO.js';
-import { sha256Hex, generateKeypair, dssePae, DSSE_PAYLOAD_TYPE, keyId, registerBuild, LiveStatus, ProgressBar, printLogo, runBuild } from './chunk-UP2BR6TV.js';
-export { runBuild } from './chunk-UP2BR6TV.js';
+import { sha256Hex, generateKeypair, dssePae, DSSE_PAYLOAD_TYPE, keyId, registerBuild, LiveStatus, ProgressBar, printLogo, runBuild } from './chunk-X34HVFZ6.js';
+export { runBuild } from './chunk-X34HVFZ6.js';
 import { readOrchestratorState, writeOrchestratorState, parseMode, setDefaultMode, recommendMode, activePin, resolveMode, providerForBackend, QUALIFIED_PACKS, pinPack, unpinPack, buildOrchestratorStatus } from './chunk-OLIMW4PQ.js';
 import { defaultProcessEndpoint, startProcessHostServer, resolveInferenceIsolation } from './chunk-IASO2HCI.js';
-import { runCodeSession } from './chunk-HVJHFTIV.js';
-import { CONTEXT_POLICY_VERSION, computeFcsReport, renderFcsReportMarkdown, createTrajectoryCollector, runAgent } from './chunk-SOAEPTSW.js';
+import { runCodeSession } from './chunk-Y3X3ORQ3.js';
+import { CONTEXT_POLICY_VERSION, computeFcsReport, renderFcsReportMarkdown, createTrajectoryCollector, runAgent } from './chunk-CIC3NY2D.js';
 import './chunk-543E6WDJ.js';
-import './chunk-3SOJZ3VV.js';
-import './chunk-HB3SONYP.js';
+import './chunk-QTQRM7HQ.js';
+import './chunk-YIRDV4YJ.js';
 import { parseReasoningEffort, summarizeDiffs, ScriptedProvider } from './chunk-SHD5TCZ5.js';
 import './chunk-NV7XNBX4.js';
 import { buildModelInstallPlan } from './chunk-W44THEXF.js';
 import { ensurePackage, ensureUnavailableMessage } from './chunk-3HNPVXUK.js';
-import { vgdVersionSkew, restartVgdIfRunning, stopVgd, registerDaemon, rootOf, requireGraph } from './chunk-3XMTRK24.js';
+import { vgdVersionSkew, restartVgdIfRunning, stopVgd, registerDaemon, rootOf, requireGraph } from './chunk-BCK2NIBM.js';
 import { readGlobal, applyGlobalOptions } from './chunk-YENM3HT7.js';
 import { ActivityLog } from './chunk-H5Q4JUY4.js';
 import { disableColor, info, c, json, out } from './chunk-CT5BS56U.js';
 import { init_resolve_ollama, gatherSystemMemory, resolveOllamaBinary, hasOllamaBinary, resolve_ollama_exports } from './chunk-WUFIXAEJ.js';
 import { fmt, estimateModelBytes } from './chunk-YJYEPYB2.js';
-import { isManifest, isDependencyFile, manifestHash, loadScanCache, writeScanCache, manifestKind, findPackageLine, endOfLine, findRuntimeLine } from './chunk-CEJIX3O7.js';
+import { isManifest, isDependencyFile, manifestHash, loadScanCache, writeScanCache, manifestKind, findPackageLine, endOfLine, findRuntimeLine } from './chunk-JSZ46IDG.js';
 import { clearHostSessionPool, acquireHostSession, generateOnSession, listHostSessions, hostSessionPoolSize } from './chunk-3LOWJSAF.js';
 import { buildIdentifierTrieFromGraph } from './chunk-5HYCB55P.js';
 import './chunk-IS7VTH2Q.js';
 import './chunk-IZDH67DX.js';
-import { DaemonSemanticSession, serveStdio, exportGraph, GraphSource, createServer, formatForExt, RefreshScheduler } from './chunk-QOU2Q5L4.js';
-import { refreshIfStale } from './chunk-TD4JAEMH.js';
-import { driftCount, ASSISTANTS, detectAssistants, isAssistantInstalled, detectServeLaunch, installAssistant, writeNavigationConfig, uninstallAssistant, buildGraph, writeSnapshot, probeFreshness, assistantById, SMALL_REPO_FILES } from './chunk-EXFA7QFC.js';
-import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as parseDsn$1, uploadScanArtifact, dsnCommand, pushCommand, countTokens, shortestPath, pathDisconnect, testsToRun, detectRunner, coveringTests, FREE_PACK, readScanArtifact, publishPrivateLibrary, assessDocQuality, symbolsFromApi, fetchHostedDocsCached, selectForBudget, hostedBase, readStoredCredentials, projectCredentialsPath, homeCredentialsPath } from './chunk-XAS45W3G.js';
+import { moduleInstalled, removeRelevanceModule, installRelevanceModule, DISCLOSURE, RELEVANCE_MODULE_NAME, moduleInstalledAt, removeModule, installModule, kickRelevanceReadiness, modulesBaseDir, ensureRelevanceModule, DaemonSemanticSession, serveStdio, kernelDisabled, writeConsent, readConsent, exportGraph, GraphSource, createServer, formatForExt, RefreshScheduler } from './chunk-TLYNLQL2.js';
+import { refreshIfStale } from './chunk-4PCFSRYH.js';
+import { driftCount, ASSISTANTS, detectAssistants, isAssistantInstalled, detectServeLaunch, installAssistant, writeNavigationConfig, uninstallAssistant, buildGraph, writeSnapshot, probeFreshness, assistantById, SMALL_REPO_FILES } from './chunk-UUVOA6WD.js';
+import { resolveDsn, createWorkspaceDsn, writeStoredCredentials, credentialsPath, findGitRoot, ensureGitignored, gitignoreEntryForCredentials, clearStoredCredentials, parseDsn as parseDsn$1, uploadScanArtifact, dsnCommand, pushCommand, countTokens, shortestPath, pathDisconnect, testsToRun, detectRunner, coveringTests, FREE_PACK, readScanArtifact, publishPrivateLibrary, assessDocQuality, symbolsFromApi, fetchHostedDocsCached, selectForBudget, hostedBase, readStoredCredentials, projectCredentialsPath, homeCredentialsPath } from './chunk-LKJIYGO5.js';
 import { resolveIngestHost, dashHostForIngestHost, availableRegionIds, ingestHostForRegionId } from './chunk-HTLDXEHW.js';
 import { writeDefaultConfig, parseDsn, detectVcs, computeRepoFingerprint, resolveRepositoryName, fetchScanPreflight, runCoreScan, loadConfig, prepareCompressedUpload, computeDriftScore, titleBox, projectTypeToVulnEcosystem, driftBar, gitHistoryAvailable, buildVersionTimelines, findPackageAnyEcosystem, normalizeConstraint, findVersionCrossings, versionSatisfies, refineArchitectureWithAstRoles, refineArchitectureWithGraph, PROJECT_TYPE_TO_OSV_ECOSYSTEM, fetchRiskySymbols, perDependencyDrift, boundaryProfileRules } from './chunk-5UG4UHKU.js';
+import './chunk-YP243ZKD.js';
 import './chunk-VIWZ4QT7.js';
-import { catalogPath, libDir, loadCatalog, driftFor, addLibrary, resolveLib, libId, resolveVersion, readDoc, localPackageDocs, localApiSurface } from './chunk-HRYF4PWE.js';
-import { recordCliCall, CLI_TOOL_ALIASES, savingsLedgerPath, clearSavings, readSavings, readUsage, readModelSavings, CAPSULE_RANKING_VERSION, SAVINGS_TOOLS, sanitizeClient } from './chunk-UAPA5AHX.js';
+import { catalogPath, libDir, loadCatalog, driftFor, addLibrary, resolveLib, libId, resolveVersion, readDoc, localPackageDocs, localApiSurface } from './chunk-S3HMG6BC.js';
+import { recordCliCall, CLI_TOOL_ALIASES, savingsLedgerPath, clearSavings, readSavings, readUsage, readModelSavings, CAPSULE_RANKING_VERSION, SAVINGS_TOOLS, sanitizeClient } from './chunk-6VLOI2ZP.js';
 import { discoverModels } from './chunk-WNKGRXUA.js';
 import { freeBytesOnVolume, weightStoreDir, listCachedWeights, ensureWeightCached, catalogIntegrityReport } from './chunk-57ZRSCHY.js';
 import { CliError, ExitCode, usageError, engineUnavailable } from './chunk-MS6V5XKB.js';
-import { attachVgd } from './chunk-UEXDSWKN.js';
+import { attachVgd } from './chunk-GRMZU24V.js';
 import { pathExists as pathExists$1, parseExcludePatterns } from './chunk-PVNALGTG.js';
 import { ensureDir, pathExists, readJsonFile, writeTextFile, writeJsonFile } from './chunk-CRAMOEBE.js';
 import './chunk-5IQBIXHS.js';
@@ -47,27 +48,27 @@ import { publishGraphToVgd } from './chunk-A3WWRW7U.js';
 import { isRelevantChange } from './chunk-DBX3DL27.js';
 import { inventory, enrichOnline, ECOSYSTEMS } from './chunk-6BEBJCK4.js';
 import { resolveOne } from './chunk-J7LKEB2R.js';
-import { queryGraphSemantic, queryGraph, indexFor, impactOf } from './chunk-VEQA2FSM.js';
-import { loadGraph, loadGraphPreferIndex, SCHEMA_VERSION } from './chunk-ARGYMFST.js';
+import { queryGraphSemantic, queryGraph, indexFor, impactOf } from './chunk-LUJ4H4RJ.js';
+import { loadGraph, loadGraphPreferIndex, SCHEMA_VERSION } from './chunk-5BFA532E.js';
 import './chunk-VHRSG6CF.js';
 import './chunk-6H2QV5DR.js';
 import { discover, isSkippedDirName } from './chunk-RTURQXQL.js';
-import { resolvedGrammarFiles, TOOLCHAIN_GRAMMARS, resolveToolchainGrammar, grammarSetVersion, fileRolesFromParseCache } from './chunk-WI66PODG.js';
+import { resolvedGrammarFiles, TOOLCHAIN_GRAMMARS, resolveToolchainGrammar, grammarSetVersion, fileRolesFromParseCache } from './chunk-L3YEEJ6U.js';
 import './chunk-T7RSQ5WD.js';
 import './chunk-6WRG7VDO.js';
-import { embeddingsCached, resolveEmbedModel, loadEmbedder, getNodeEmbeddings, unavailableMessage, countPending, modelCacheInfo, embeddingsPath, clearModelCache, withTimeout } from './chunk-DMI4BMUL.js';
-import { resetRelevanceProviderCache, loadRelevanceProvider, relevanceModuleDir, resolveGraphPath, analyzeQuestion, loadTopicTags, renderReport, loadGraphFileWithSnapshot, writeArtifacts, vibgrateDir, mapFileExists, ensureVibgrateGitignore } from './chunk-C5AOLTQS.js';
+import { embeddingsCached, resolveEmbedModel, loadEmbedder, getNodeEmbeddings, unavailableMessage, countPending, modelCacheInfo, embeddingsPath, clearModelCache, withTimeout } from './chunk-B5X246UH.js';
+import { resetRelevanceProviderCache, loadRelevanceProvider, resolveGraphPath, loadTopicTags, rankQuestion, renderReport, loadGraphFileWithSnapshot, writeArtifacts, vibgrateDir, mapFileExists, ensureVibgrateGitignore } from './chunk-FVBN4E5C.js';
 import { cacheDir } from './chunk-MVPRPSXU.js';
 import { serializeGraph, stableStringify, parseGraph } from './chunk-O3LABX6I.js';
-import { VERSION } from './chunk-MQJY4EQV.js';
+import { VERSION } from './chunk-KFLNWYZG.js';
 import './chunk-XP6UUCZZ.js';
 import { canonicalize, hashString } from './chunk-JFGYT6BI.js';
 import './chunk-XQNKCA2J.js';
 import { __toCommonJS } from './chunk-Z6ZWNWWR.js';
-import * as fs13 from 'fs';
-import fs13__default, { realpathSync } from 'fs';
-import * as path46 from 'path';
-import path46__default from 'path';
+import * as fs12 from 'fs';
+import fs12__default, { realpathSync } from 'fs';
+import * as path45 from 'path';
+import path45__default from 'path';
 import { fileURLToPath, pathToFileURL } from 'url';
 import { Command, CommanderError, Option } from 'commander';
 import { execSync, spawn, spawnSync, execFileSync } from 'child_process';
@@ -75,11 +76,10 @@ import * as os from 'os';
 import * as semver3 from 'semver';
 import semver3__default from 'semver';
 import * as readline from 'readline';
-import * as zlib from 'zlib';
 import * as crypto3 from 'crypto';
-import { randomUUID, createHash } from 'crypto';
+import { randomUUID } from 'crypto';
 import chalk7 from 'chalk';
-import * as fs27 from 'fs/promises';
+import * as fs26 from 'fs/promises';
 import { parse, stringify } from 'yaml';
 
 init_cli_invocation();
@@ -90,10 +90,10 @@ function registerStatus(program) {
   applyGlobalOptions(cmd);
 }
 async function runStatus(global) {
-  const root3 = path46.resolve(global.cwd ?? ".");
+  const root3 = path45.resolve(global.cwd ?? ".");
   const graphPath = resolveGraphPath(root3, global.graph);
   const graph = loadGraph(root3, graphPath);
-  const hasCache = fs13.existsSync(path46.join(cacheDir(root3), "parse-cache.json"));
+  const hasCache = fs12.existsSync(path45.join(cacheDir(root3), "parse-cache.json"));
   let stale = null;
   let staleExact = false;
   if (graph) {
@@ -113,8 +113,8 @@ async function runStatus(global) {
   }
   if (global.json) {
     json({
-      root: path46.relative(process.cwd(), root3) || ".",
-      graphPath: path46.relative(root3, graphPath),
+      root: path45.relative(process.cwd(), root3) || ".",
+      graphPath: path45.relative(root3, graphPath),
       built: graph !== null,
       generatedAt: graph?.generatedAt ?? null,
       counts: graph?.meta.counts ?? null,
@@ -129,11 +129,11 @@ async function runStatus(global) {
     return;
   }
   if (!graph) {
-    info(`${c.cyan("vg")} \xB7 no map yet at ${c.dim(path46.relative(root3, graphPath))}`);
+    info(`${c.cyan("vg")} \xB7 no map yet at ${c.dim(path45.relative(root3, graphPath))}`);
     info(`  run ${c.bold("vg")} to build one`);
     return;
   }
-  info(`${c.cyan("vg")} \xB7 ${path46.relative(root3, graphPath)}`);
+  info(`${c.cyan("vg")} \xB7 ${path45.relative(root3, graphPath)}`);
   info(`  generated ${graph.generatedAt}`);
   info(
     `  nodes ${c.bold(String(graph.meta.counts.nodes))}  edges ${c.bold(
@@ -187,8 +187,9 @@ function registerAsk(program) {
     let result;
     let mode = "lexical";
     let note = "";
-    const relevance = await analyzeQuestion(q);
-    const topicTags = relevance ? await loadTopicTags(graph, root3, resolveGraphPath(root3, global.graph)) : null;
+    if (!global.local) await ensureRelevanceModule();
+    const topicTags = await loadTopicTags(graph, root3, resolveGraphPath(root3, global.graph));
+    const modRank = await rankQuestion(graph, q, { limit: 48, topicTags });
     try {
       if (wantSemantic) {
         live?.set("asking the daemon\u2026");
@@ -206,8 +207,7 @@ function registerAsk(program) {
           result = await queryGraphSemantic(graph, q, {
             budget,
             semanticRanked: ranked.ranked,
-            relevance,
-            topicTags
+            ranked: modRank
           });
           mode = `semantic (vgd${ranked.model ? `, ${ranked.model}` : ""})`;
           activity.add("answer", "ok", "answered from the daemon index \u2014 no local model load");
@@ -230,18 +230,18 @@ function registerAsk(program) {
             const bar = !global.json ? new ProgressBar(c.dim("embedding")) : void 0;
             const vectors = await getNodeEmbeddings(graph, embedder, root3, bar ? (d, t) => bar.update(d, t) : void 0);
             bar?.done();
-            result = await queryGraphSemantic(graph, q, { budget, embedder, nodeVectors: vectors, relevance, topicTags });
+            result = await queryGraphSemantic(graph, q, { budget, embedder, nodeVectors: vectors, ranked: modRank });
             mode = `semantic (${embedder.id})`;
             activity.add("answer", "ok", `answered in this process \xB7 ${embedder.id} \xB7 ${vectors.size} vector(s)`);
           } else {
-            result = queryGraph(graph, q, { budget, relevance, topicTags });
+            result = queryGraph(graph, q, { budget, ranked: modRank });
             note = reason ? unavailableMessage(reason) : "semantic unavailable; used lexical";
             if (detail) note += ` (${detail})`;
             activity.add("answer", "warn", `lexical only \u2014 ${note}`);
           }
         }
       } else {
-        result = queryGraph(graph, q, { budget, relevance, topicTags });
+        result = queryGraph(graph, q, { budget, ranked: modRank });
         if (global.local) note = "semantic skipped under --local; used lexical";
         activity.add("answer", "skip", global.local ? "lexical only (--local)" : "lexical only (--no-semantic)");
       }
@@ -309,15 +309,15 @@ function crashedMessage(signal) {
   return `semantic search is disabled: its native backend (onnxruntime-node, via the vendored fastembed path) crashed with ${signal} \u2014 using fast lexical search instead. This usually means the installed native binaries are broken (an interrupted install, or a platform without prebuilt CPU binaries). Reinstall to repair \u2014 ${envPrefix}npm install -g --allow-scripts=@vibgrate/cli,onnxruntime-node,msgpackr-extract @vibgrate/cli \u2014 or run with --local to stay lexical quietly.`;
 }
 function defaultCacheDir() {
-  const base = process.env.XDG_CACHE_HOME || path46.join(os.homedir(), ".cache");
-  return path46.join(base, "vibgrate", "models");
+  const base = process.env.XDG_CACHE_HOME || path45.join(os.homedir(), ".cache");
+  return path45.join(base, "vibgrate", "models");
 }
 function verdictPath(dir) {
-  return path46.join(dir, `embed-health-${process.platform}-${process.arch}.json`);
+  return path45.join(dir, `embed-health-${process.platform}-${process.arch}.json`);
 }
 function readVerdict(dir) {
   try {
-    const raw = JSON.parse(fs13.readFileSync(verdictPath(dir), "utf8"));
+    const raw = JSON.parse(fs12.readFileSync(verdictPath(dir), "utf8"));
     if (raw?.status !== "ok" && raw?.status !== "crashed") return null;
     if (raw.version !== VERSION) return null;
     return raw;
@@ -327,18 +327,18 @@ function readVerdict(dir) {
 }
 function writeVerdict(dir, verdict) {
   try {
-    fs13.mkdirSync(dir, { recursive: true });
-    fs13.writeFileSync(verdictPath(dir), JSON.stringify(verdict, null, 2) + "\n", "utf8");
+    fs12.mkdirSync(dir, { recursive: true });
+    fs12.writeFileSync(verdictPath(dir), JSON.stringify(verdict, null, 2) + "\n", "utf8");
   } catch {
   }
 }
 function probeModuleUrl(from = import.meta.url) {
-  const dir = path46.dirname(fileURLToPath(from));
+  const dir = path45.dirname(fileURLToPath(from));
   for (const name of ["embeddings.js", "index.js"]) {
-    const candidate = path46.join(dir, name);
-    if (fs13.existsSync(candidate)) return pathToFileURL(candidate).href;
+    const candidate = path45.join(dir, name);
+    if (fs12.existsSync(candidate)) return pathToFileURL(candidate).href;
   }
-  return pathToFileURL(path46.join(dir, "index.js")).href;
+  return pathToFileURL(path45.join(dir, "index.js")).href;
 }
 function defaultRunProbe(timeoutMs) {
   const moduleUrl = probeModuleUrl();
@@ -416,7 +416,7 @@ async function embedderHealth(options = {}) {
 }
 function clearEmbedderHealth(cacheDir2) {
   try {
-    fs13.unlinkSync(verdictPath(cacheDir2 ?? defaultCacheDir()));
+    fs12.unlinkSync(verdictPath(cacheDir2 ?? defaultCacheDir()));
   } catch {
   }
 }
@@ -1091,12 +1091,12 @@ var PUBLISH_INTERVAL_MS = 2e3;
 var KEEPALIVE_MS = 1e4;
 var STALE_MS = 6e4;
 function liveStatsDir(root3) {
-  return path46.join(cacheDir(root3), "serve-live");
+  return path45.join(cacheDir(root3), "serve-live");
 }
 function reapOtherVersionServers(dir, keepVersion, now = Date.now(), kill = (pid, signal) => process.kill(pid, signal), selfPid = process.pid) {
   let entries;
   try {
-    entries = fs13.readdirSync(dir);
+    entries = fs12.readdirSync(dir);
   } catch {
     return [];
   }
@@ -1105,7 +1105,7 @@ function reapOtherVersionServers(dir, keepVersion, now = Date.now(), kill = (pid
     if (!/^serve-\d+\.json$/.test(name)) continue;
     let parsed;
     try {
-      parsed = JSON.parse(fs13.readFileSync(path46.join(dir, name), "utf8"));
+      parsed = JSON.parse(fs12.readFileSync(path45.join(dir, name), "utf8"));
     } catch {
       continue;
     }
@@ -1127,7 +1127,7 @@ var LiveStatsBus = class {
     this.dir = dir;
     this.stats = stats;
     this.pid = pid;
-    this.file = path46.join(dir, `serve-${this.pid}.json`);
+    this.file = path45.join(dir, `serve-${this.pid}.json`);
   }
   dir;
   stats;
@@ -1159,10 +1159,10 @@ var LiveStatsBus = class {
     this.lastWriteAt = now;
     const body = { pid: this.pid, updatedAt: now, version: VERSION, snapshot: snap };
     try {
-      fs13.mkdirSync(this.dir, { recursive: true });
+      fs12.mkdirSync(this.dir, { recursive: true });
       const tmp = `${this.file}.tmp`;
-      fs13.writeFileSync(tmp, JSON.stringify(body));
-      fs13.renameSync(tmp, this.file);
+      fs12.writeFileSync(tmp, JSON.stringify(body));
+      fs12.renameSync(tmp, this.file);
     } catch {
     }
   }
@@ -1173,24 +1173,24 @@ var LiveStatsBus = class {
   siblings(now = Date.now()) {
     let entries;
     try {
-      entries = fs13.readdirSync(this.dir);
+      entries = fs12.readdirSync(this.dir);
     } catch {
       return [];
     }
     const out2 = [];
     for (const name of entries.sort()) {
       if (!/^serve-\d+\.json$/.test(name)) continue;
-      const file = path46.join(this.dir, name);
+      const file = path45.join(this.dir, name);
       let parsed;
       try {
-        parsed = JSON.parse(fs13.readFileSync(file, "utf8"));
+        parsed = JSON.parse(fs12.readFileSync(file, "utf8"));
       } catch {
         continue;
       }
       if (typeof parsed?.pid !== "number" || typeof parsed.updatedAt !== "number" || !parsed.snapshot?.totals) continue;
       if (now - parsed.updatedAt > STALE_MS) {
         try {
-          fs13.unlinkSync(file);
+          fs12.unlinkSync(file);
         } catch {
         }
         continue;
@@ -1202,7 +1202,7 @@ var LiveStatsBus = class {
   }
   unlinkOwn = () => {
     try {
-      fs13.unlinkSync(this.file);
+      fs12.unlinkSync(this.file);
     } catch {
     }
   };
@@ -1515,12 +1515,12 @@ var LedgerTail = class {
     if (size === this.offset) return;
     let chunk;
     try {
-      const fd = fs13.openSync(this.file, "r");
+      const fd = fs12.openSync(this.file, "r");
       try {
         chunk = Buffer.alloc(size - this.offset);
-        fs13.readSync(fd, chunk, 0, chunk.length, this.offset);
+        fs12.readSync(fd, chunk, 0, chunk.length, this.offset);
       } finally {
-        fs13.closeSync(fd);
+        fs12.closeSync(fd);
       }
     } catch {
       return;
@@ -1533,7 +1533,7 @@ var LedgerTail = class {
   }
   sizeOf() {
     try {
-      return fs13.statSync(this.file).size;
+      return fs12.statSync(this.file).size;
     } catch {
       return 0;
     }
@@ -1826,10 +1826,10 @@ var Connection = class {
 };
 function projectDir(root3, projectPath) {
   const rel = projectPath === "" || projectPath === "." ? "" : projectPath;
-  return rel ? path46.resolve(root3, rel) : path46.resolve(root3);
+  return rel ? path45.resolve(root3, rel) : path45.resolve(root3);
 }
 function projectForFile(root3, projects, filePath) {
-  const dir = path46.dirname(path46.resolve(filePath));
+  const dir = path45.dirname(path45.resolve(filePath));
   for (const proj of projects) {
     if (projectDir(root3, proj.path) === dir) return proj;
   }
@@ -1838,7 +1838,7 @@ function projectForFile(root3, projects, filePath) {
   let bestLen = -1;
   for (const proj of projects) {
     const projDir = projectDir(root3, proj.path);
-    if ((dir === projDir || dir.startsWith(projDir + path46.sep)) && projDir.length > bestLen) {
+    if ((dir === projDir || dir.startsWith(projDir + path45.sep)) && projDir.length > bestLen) {
       best = proj;
       bestLen = projDir.length;
     }
@@ -1848,7 +1848,7 @@ function projectForFile(root3, projects, filePath) {
 var MAX_ENTRIES = 1e3;
 var KEEP_ENTRIES = 500;
 function historyPath(root3) {
-  return path46.join(root3, ".vibgrate", "score-history.jsonl");
+  return path45.join(root3, ".vibgrate", "score-history.jsonl");
 }
 function parseLine(line) {
   try {
@@ -1862,7 +1862,7 @@ function parseLine(line) {
 }
 function readHistory(root3) {
   try {
-    return fs13.readFileSync(historyPath(root3), "utf8").split("\n").filter((l) => l.trim()).map(parseLine).filter((e) => e !== null);
+    return fs12.readFileSync(historyPath(root3), "utf8").split("\n").filter((l) => l.trim()).map(parseLine).filter((e) => e !== null);
   } catch {
     return [];
   }
@@ -1889,14 +1889,14 @@ function recordScore(root3, entry) {
       }
     }
     const file = historyPath(root3);
-    fs13.mkdirSync(path46.dirname(file), { recursive: true });
+    fs12.mkdirSync(path45.dirname(file), { recursive: true });
     ensureVibgrateGitignore(root3);
-    fs13.appendFileSync(file, `${JSON.stringify(entry)}
+    fs12.appendFileSync(file, `${JSON.stringify(entry)}
 `);
     const all = readHistory(root3);
     if (all.length > MAX_ENTRIES) {
       const kept = all.slice(-KEEP_ENTRIES);
-      fs13.writeFileSync(file, kept.map((e) => JSON.stringify(e)).join("\n") + "\n");
+      fs12.writeFileSync(file, kept.map((e) => JSON.stringify(e)).join("\n") + "\n");
     }
   } catch {
   }
@@ -1907,7 +1907,7 @@ function deltaFrom(prev, current) {
   return current.score - prev.score;
 }
 function ignoreFilePath(root3) {
-  return path46.join(root3, ".vibgrate", "ignore.json");
+  return path45.join(root3, ".vibgrate", "ignore.json");
 }
 function isActive(entry, now = Date.now()) {
   if (!entry.until) return true;
@@ -1919,7 +1919,7 @@ function readIgnores(root3, now = Date.now()) {
   const out2 = /* @__PURE__ */ new Map();
   let raw;
   try {
-    raw = fs13.readFileSync(ignoreFilePath(root3), "utf8");
+    raw = fs12.readFileSync(ignoreFilePath(root3), "utf8");
   } catch {
     return out2;
   }
@@ -1939,14 +1939,14 @@ function readIgnores(root3, now = Date.now()) {
   return out2;
 }
 function inventoryPath(root3) {
-  return path46.join(root3, ".vibgrate", "inline-inventory.json");
+  return path45.join(root3, ".vibgrate", "inline-inventory.json");
 }
 function inventoryKey(projectPath, pkg) {
   return `${projectPath}::${pkg}`;
 }
 function readInventory(root3) {
   try {
-    const parsed = JSON.parse(fs13.readFileSync(inventoryPath(root3), "utf8"));
+    const parsed = JSON.parse(fs12.readFileSync(inventoryPath(root3), "utf8"));
     if (typeof parsed.ts === "string" && typeof parsed.methodology === "string" && Array.isArray(parsed.drifted) && parsed.drifted.every((d) => typeof d === "string")) {
       return parsed;
     }
@@ -1957,7 +1957,7 @@ function readInventory(root3) {
 function recordInventory(root3, snap) {
   try {
     ensureVibgrateGitignore(root3);
-    fs13.writeFileSync(inventoryPath(root3), `${JSON.stringify(snap)}
+    fs12.writeFileSync(inventoryPath(root3), `${JSON.stringify(snap)}
 `);
   } catch {
   }
@@ -2889,7 +2889,7 @@ var VibgrateLanguageServer = class {
    * the workspace scan cache (billing / repo score stay on the official scan).
    */
   async scanOpenManifest(uri, filePath) {
-    const relDir = path46.relative(this.opts.root, path46.dirname(path46.resolve(filePath)));
+    const relDir = path45.relative(this.opts.root, path45.dirname(path45.resolve(filePath)));
     const key2 = relDir === "" ? "." : relDir;
     if (this.openManifestScans.has(key2) || this.openManifestFailed.has(key2)) return;
     if (key2 === "." || key2.startsWith("..")) return;
@@ -2909,7 +2909,7 @@ var VibgrateLanguageServer = class {
         quiet: true,
         vibgrateVersion: VERSION
       };
-      const sub = await runCoreScanSilently(path46.dirname(filePath), scanOpts, advanced);
+      const sub = await runCoreScanSilently(path45.dirname(filePath), scanOpts, advanced);
       const proj = (sub.projects ?? []).find((p) => p.path === "." || p.path === "") ?? sub.projects?.[0];
       if (!proj || !this.artifact) {
         this.openManifestFailed.add(key2);
@@ -3217,10 +3217,10 @@ var VibgrateLanguageServer = class {
       const ecosystem = osvEcosystem(proj.type);
       if (!ecosystem) continue;
       const relManifest = manifestRelativePath(proj);
-      const absManifest = path46.resolve(this.opts.root, relManifest);
+      const absManifest = path45.resolve(this.opts.root, relManifest);
       let text = null;
       try {
-        if (fs13.existsSync(absManifest)) text = fs13.readFileSync(absManifest, "utf8");
+        if (fs12.existsSync(absManifest)) text = fs12.readFileSync(absManifest, "utf8");
       } catch {
         text = null;
       }
@@ -3410,7 +3410,7 @@ function pruneArtifactProjects(a) {
   return { ...a, projects, findings };
 }
 function projectByPath(a, projectPath) {
-  const norm = (p) => path46.normalize((p === "" ? "." : p).replace(/\\/g, "/"));
+  const norm = (p) => path45.normalize((p === "" ? "." : p).replace(/\\/g, "/"));
   const want = norm(projectPath);
   for (const proj of a.projects ?? []) {
     if (norm(proj.path) === want) return proj;
@@ -3452,7 +3452,7 @@ function projectForFile2(root3, a, filePath) {
   return projectForFile(root3, a.projects ?? [], filePath);
 }
 function sameProject(location, projectPath) {
-  return path46.normalize(location) === path46.normalize(projectPath);
+  return path45.normalize(location) === path45.normalize(projectPath);
 }
 function hasReleaseDates(a) {
   for (const proj of a.projects ?? []) {
@@ -3522,10 +3522,10 @@ function buildBreakdown(rootDir, projects) {
     const relManifest = manifestRelativePath(p);
     if (isPrunedWorkspacePath(p.path) || isPrunedWorkspacePath(relManifest)) continue;
     const ecosystem = osvEcosystem(p.type);
-    const absManifest = path46.resolve(rootDir, relManifest);
+    const absManifest = path45.resolve(rootDir, relManifest);
     let text = null;
     try {
-      if (fs13.existsSync(absManifest)) text = fs13.readFileSync(absManifest, "utf8");
+      if (fs12.existsSync(absManifest)) text = fs12.readFileSync(absManifest, "utf8");
     } catch {
       text = null;
     }
@@ -3590,34 +3590,34 @@ function buildBreakdown(rootDir, projects) {
 }
 function manifestRelativePath(proj) {
   const base = proj.path === "." || proj.path === "" ? "" : proj.path;
-  const join35 = (name) => base ? path46.join(base, name) : name;
+  const join34 = (name) => base ? path45.join(base, name) : name;
   switch (proj.type) {
     case "node":
     case "typescript":
-      return join35("package.json");
+      return join34("package.json");
     case "python":
-      return join35("pyproject.toml");
+      return join34("pyproject.toml");
     case "go":
-      return join35("go.mod");
+      return join34("go.mod");
     case "rust":
-      return join35("Cargo.toml");
+      return join34("Cargo.toml");
     case "ruby":
-      return join35("Gemfile");
+      return join34("Gemfile");
     case "php":
-      return join35("composer.json");
+      return join34("composer.json");
     case "java":
     case "kotlin":
     case "scala":
     case "groovy":
-      return join35("pom.xml");
+      return join34("pom.xml");
     case "dotnet":
-      return join35(proj.name ? `${proj.name}.csproj` : "Directory.Build.props");
+      return join34(proj.name ? `${proj.name}.csproj` : "Directory.Build.props");
     case "dart":
-      return join35("pubspec.yaml");
+      return join34("pubspec.yaml");
     case "elixir":
-      return join35("mix.exs");
+      return join34("mix.exs");
     default:
-      return join35("package.json");
+      return join34("package.json");
   }
 }
 function lockfileRelativePath(rootDir, proj) {
@@ -3648,9 +3648,9 @@ function lockfileRelativePath(rootDir, proj) {
   const dirsToTry = base ? [base, ""] : [""];
   for (const dir of dirsToTry) {
     for (const name of candidateNames) {
-      const rel = dir ? path46.join(dir, name) : name;
+      const rel = dir ? path45.join(dir, name) : name;
       try {
-        if (fs13.existsSync(path46.join(rootDir, rel))) return rel;
+        if (fs12.existsSync(path45.join(rootDir, rel))) return rel;
       } catch {
       }
     }
@@ -3721,10 +3721,10 @@ function lookupImportFiles(map, pkg) {
 }
 function firstPackageMentionLine(root3, relFile, pkg) {
   try {
-    const abs = path46.resolve(root3, relFile);
-    const stat2 = fs13.statSync(abs);
+    const abs = path45.resolve(root3, relFile);
+    const stat2 = fs12.statSync(abs);
     if (!stat2.isFile() || stat2.size > 256 * 1024) return null;
-    const text = fs13.readFileSync(abs, "utf8");
+    const text = fs12.readFileSync(abs, "utf8");
     const tokens = [pkg];
     if (pkg.startsWith("@")) {
       const parts = pkg.split("/");
@@ -3920,7 +3920,7 @@ function hoverMarkdown(dep, contribution, state) {
   return lines.join("\n");
 }
 function startLanguageServer(opts) {
-  if (!fs13.existsSync(opts.root)) {
+  if (!fs12.existsSync(opts.root)) {
     process.stderr.write(`vg lsp: root does not exist: ${opts.root}
 `);
     process.exit(1);
@@ -3970,12 +3970,12 @@ function hookCommand(vgBin) {
   return `${vgBin} hook pre-tool-use`;
 }
 function installClaudeHooks(root3, vgBin = "vg") {
-  const file = path46.join(root3, ".claude", "settings.json");
-  const rel = path46.join(".claude", "settings.json");
+  const file = path45.join(root3, ".claude", "settings.json");
+  const rel = path45.join(".claude", "settings.json");
   let settings = {};
-  if (fs13.existsSync(file)) {
+  if (fs12.existsSync(file)) {
     try {
-      const parsed = JSON.parse(fs13.readFileSync(file, "utf8"));
+      const parsed = JSON.parse(fs12.readFileSync(file, "utf8"));
       if (!parsed || typeof parsed !== "object" || Array.isArray(parsed)) {
         return { file: rel, status: "skipped", note: "settings.json is not a JSON object \u2014 left untouched" };
       }
@@ -4012,12 +4012,12 @@ function installClaudeHooks(root3, vgBin = "vg") {
   return { file: rel, status: "written" };
 }
 function uninstallClaudeHooks(root3) {
-  const file = path46.join(root3, ".claude", "settings.json");
-  const rel = path46.join(".claude", "settings.json");
-  if (!fs13.existsSync(file)) return { file: rel, status: "unchanged" };
+  const file = path45.join(root3, ".claude", "settings.json");
+  const rel = path45.join(".claude", "settings.json");
+  if (!fs12.existsSync(file)) return { file: rel, status: "unchanged" };
   let settings;
   try {
-    settings = JSON.parse(fs13.readFileSync(file, "utf8"));
+    settings = JSON.parse(fs12.readFileSync(file, "utf8"));
   } catch {
     return { file: rel, status: "skipped", note: "settings.json is not parseable JSON \u2014 left untouched" };
   }
@@ -4039,8 +4039,8 @@ function uninstallClaudeHooks(root3) {
   return { file: rel, status: "written" };
 }
 function writeSettings(file, settings) {
-  fs13.mkdirSync(path46.dirname(file), { recursive: true });
-  fs13.writeFileSync(file, `${JSON.stringify(settings, null, 2)}
+  fs12.mkdirSync(path45.dirname(file), { recursive: true });
+  fs12.writeFileSync(file, `${JSON.stringify(settings, null, 2)}
 `);
 }
 
@@ -4154,189 +4154,24 @@ function resolve4(id) {
   }
   return a;
 }
-var DEFAULT_REGISTRY = "https://registry.npmjs.org";
-function registryBase(opts) {
-  return (process.env.VIBGRATE_MODULE_REGISTRY || opts.registry || DEFAULT_REGISTRY).replace(/\/+$/, "");
-}
-function modulesBaseDir() {
-  const base = process.env.XDG_CACHE_HOME || path46.join(os.homedir(), ".cache");
-  return path46.join(base, "vibgrate", "modules");
-}
-function stateFile() {
-  return path46.join(modulesBaseDir(), "consent.json");
-}
-function readConsent() {
-  try {
-    return JSON.parse(fs13.readFileSync(stateFile(), "utf8"));
-  } catch {
-    return {};
-  }
-}
-function writeConsent(state) {
-  try {
-    fs13.mkdirSync(path46.dirname(stateFile()), { recursive: true });
-    fs13.writeFileSync(stateFile(), JSON.stringify(state));
-  } catch {
-  }
-}
-function kernelDisabled() {
-  const v = process.env.VIBGRATE_NO_KERNEL;
-  return v === "1" || v === "true";
-}
-function moduleInstalledAt(dir) {
-  try {
-    const meta = JSON.parse(fs13.readFileSync(path46.join(dir, ".module.json"), "utf8"));
-    if (fs13.existsSync(path46.join(dir, "index.js"))) {
-      return { installed: true, version: meta.version };
-    }
-  } catch {
-  }
-  return { installed: false };
-}
-function verifyIntegrity(buf, integrity, shasum) {
-  if (integrity) {
-    const [algo, expected] = integrity.split("-", 2);
-    if (!algo || !expected) throw new Error("malformed integrity metadata");
-    const actual = createHash(algo).update(buf).digest("base64");
-    if (actual !== expected) throw new Error(`integrity mismatch (${algo})`);
-    return;
-  }
-  if (shasum) {
-    const actual = createHash("sha1").update(buf).digest("hex");
-    if (actual !== shasum) throw new Error("integrity mismatch (shasum)");
-    return;
-  }
-  throw new Error("registry provided no integrity metadata");
-}
-function untar(data) {
-  const out2 = [];
-  let offset = 0;
-  let pendingName = null;
-  while (offset + 512 <= data.length) {
-    const block = data.subarray(offset, offset + 512);
-    offset += 512;
-    if (block.every((b) => b === 0)) continue;
-    const rawName = block.subarray(0, 100).toString("utf8").replace(/\0.*$/, "");
-    const size = parseInt(block.subarray(124, 136).toString("utf8").replace(/\0.*$/, "").trim() || "0", 8);
-    const type = String.fromCharCode(block[156]);
-    const prefix = block.subarray(345, 500).toString("utf8").replace(/\0.*$/, "");
-    const body = data.subarray(offset, offset + size);
-    offset += Math.ceil(size / 512) * 512;
-    if (type === "L") {
-      pendingName = body.toString("utf8").replace(/\0.*$/, "");
-      continue;
-    }
-    if (type === "x" || type === "g") {
-      const m = /(?:^|\n)\d+ path=([^\n]+)\n/.exec(body.toString("utf8"));
-      if (m) pendingName = m[1];
-      continue;
-    }
-    if (type !== "0" && type !== "\0") continue;
-    const name = pendingName ?? (prefix ? `${prefix}/${rawName}` : rawName);
-    pendingName = null;
-    if (name.split("/").includes("..") || path46.isAbsolute(name)) {
-      throw new Error(`unsafe path in tarball: ${name}`);
-    }
-    out2.push({ name, body: Buffer.from(body) });
-  }
-  return out2;
-}
-async function installModule(mod, opts = {}) {
-  if (kernelDisabled()) return { status: "disabled", detail: "VIBGRATE_NO_KERNEL is set" };
-  const existing = moduleInstalledAt(mod.dir());
-  if (existing.installed && !opts.force) return { status: "already-installed", version: existing.version };
-  const doFetch = opts.fetchImpl ?? fetch;
-  const base = registryBase(opts);
-  try {
-    const metaRes = await doFetch(`${base}/${mod.npmName.replace("/", "%2f")}`);
-    if (!metaRes.ok) return { status: "unavailable", detail: `registry ${metaRes.status}` };
-    const meta = await metaRes.json();
-    const version = meta["dist-tags"]?.latest;
-    const dist = version ? meta.versions?.[version]?.dist : void 0;
-    if (!version || !dist?.tarball) return { status: "unavailable", detail: "no published version" };
-    const tarRes = await doFetch(dist.tarball);
-    if (!tarRes.ok) return { status: "unavailable", detail: `tarball ${tarRes.status}` };
-    const gz = Buffer.from(await tarRes.arrayBuffer());
-    verifyIntegrity(gz, dist.integrity, dist.shasum);
-    const entries = untar(zlib.gunzipSync(gz));
-    const dir = mod.dir();
-    fs13.rmSync(dir, { recursive: true, force: true });
-    fs13.mkdirSync(dir, { recursive: true });
-    let wrote = 0;
-    for (const e of entries) {
-      let rel = null;
-      if (e.name.startsWith("package/dist/")) rel = e.name.slice("package/dist/".length);
-      else if (e.name === "package/LICENSE" || e.name === "package/README.md") rel = e.name.slice("package/".length);
-      if (!rel) continue;
-      const target = path46.join(dir, rel);
-      if (!target.startsWith(dir + path46.sep) && target !== dir) throw new Error(`unsafe extract path: ${rel}`);
-      fs13.mkdirSync(path46.dirname(target), { recursive: true });
-      fs13.writeFileSync(target, e.body);
-      wrote += 1;
-    }
-    if (!wrote || !fs13.existsSync(path46.join(dir, "index.js"))) {
-      fs13.rmSync(dir, { recursive: true, force: true });
-      return { status: "unavailable", detail: "package layout not recognized (no dist/index.js)" };
-    }
-    fs13.writeFileSync(path46.join(dir, ".module.json"), JSON.stringify({ name: mod.npmName, version }));
-    mod.onChanged?.();
-    return { status: "installed", version };
-  } catch (e) {
-    return { status: "unavailable", detail: String(e.message ?? e).slice(0, 200) };
-  }
-}
-function removeModule(mod) {
-  fs13.rmSync(mod.dir(), { recursive: true, force: true });
-  mod.onChanged?.();
-}
-
-// src/install/relevance-module.ts
-var RELEVANCE_MODULE_NAME = "@vibgrate/relevance";
-var RELEVANCE_MODULE = {
-  id: "relevance",
-  npmName: RELEVANCE_MODULE_NAME,
-  dir: relevanceModuleDir,
-  onChanged: resetRelevanceProviderCache
-};
-function moduleInstalled() {
-  return moduleInstalledAt(relevanceModuleDir());
-}
-var DISCLOSURE = "vg can install the optional Vibgrate relevance module (proprietary license, runs fully locally, improves how questions find the code they mean). Disable any time with VIBGRATE_NO_KERNEL=1.";
-async function installRelevanceModule(opts = {}) {
-  return installModule(RELEVANCE_MODULE, opts);
-}
-function removeRelevanceModule() {
-  removeModule(RELEVANCE_MODULE);
-}
-async function ensureRelevanceModule(io = {}) {
-  try {
-    if (kernelDisabled()) return { status: "disabled" };
-    const existing = moduleInstalled();
-    if (existing.installed) return { status: "already-installed", version: existing.version };
-    if (readConsent().relevance === "denied") return { status: "declined" };
-    return await installRelevanceModule({ fetchImpl: io.fetchImpl });
-  } catch {
-    return { status: "unavailable", detail: "auto-install failed" };
-  }
-}
 function disabled() {
   const v = process.env.VIBGRATE_NO_KERNEL;
   return v === "1" || v === "true";
 }
 function hcsModuleDir() {
-  return path46.join(modulesBaseDir(), "hcs");
+  return path45.join(modulesBaseDir(), "hcs");
 }
 function candidatePaths() {
   const custom = process.env.VIBGRATE_HCS_PATH;
   if (custom) {
-    const p = path46.resolve(custom);
+    const p = path45.resolve(custom);
     try {
-      if (fs13.statSync(p).isDirectory()) return [path46.join(p, "index.js")];
+      if (fs12.statSync(p).isDirectory()) return [path45.join(p, "index.js")];
     } catch {
     }
     return [p];
   }
-  return [path46.join(hcsModuleDir(), "index.js")];
+  return [path45.join(hcsModuleDir(), "index.js")];
 }
 var cached;
 function resetHcsEngineCache() {
@@ -4347,7 +4182,7 @@ async function loadHcsEngine() {
   cached = null;
   if (disabled()) return cached;
   for (const p of candidatePaths()) {
-    if (!fs13.existsSync(p)) continue;
+    if (!fs12.existsSync(p)) continue;
     try {
       const mod = await import(pathToFileURL(p).href);
       const engine = await mod.createHcsEngine?.();
@@ -4514,7 +4349,7 @@ function hookContext(payloadText, root3, graphOverride) {
   let graph;
   try {
     const preferred = loadGraphPreferIndex(root3, graphPath);
-    graph = preferred ? preferred.graph : parseGraph(fs13.readFileSync(graphPath, "utf8"));
+    graph = preferred ? preferred.graph : parseGraph(fs12.readFileSync(graphPath, "utf8"));
   } catch {
     return null;
   }
@@ -4536,7 +4371,7 @@ function registerHook(program) {
     const global = readGlobal(this);
     const root3 = rootOf(global);
     try {
-      const stdin = fs13.readFileSync(0, "utf8");
+      const stdin = fs12.readFileSync(0, "utf8");
       const context = hookContext(stdin, root3, global.graph);
       if (context) {
         process.stdout.write(
@@ -4556,8 +4391,8 @@ function registerShare(program) {
   const cmd = program.command("share").description("make the map committable + auto-updating for your team (git)").option("--undo", "reverse what `vg share` installed").option("--reports", "also commit graph.html / GRAPH_REPORT.md (default: gitignored)").action(function(opts) {
     const global = readGlobal(this);
     const root3 = rootOf(global);
-    const gitDir = path46.join(root3, ".git");
-    if (!fs13.existsSync(gitDir)) {
+    const gitDir = path45.join(root3, ".git");
+    if (!fs12.existsSync(gitDir)) {
       throw new CliError("not a git repository \u2014 run `vg share` inside a git repo", ExitCode.USAGE_ERROR);
     }
     if (opts.undo) {
@@ -4578,23 +4413,23 @@ function registerShare(program) {
   applyGlobalOptions(cmd);
 }
 function writeVibgrateGitignore(root3, reports) {
-  const dir = path46.join(root3, ".vibgrate");
-  fs13.mkdirSync(dir, { recursive: true });
+  const dir = path45.join(root3, ".vibgrate");
+  fs12.mkdirSync(dir, { recursive: true });
   const lines = ["# Managed by `vg share` \u2014 keep graph.json committed, ignore the rest", "cache/", "facts.jsonl", "graph.snap"];
   if (!reports) lines.push("graph.html", "GRAPH_REPORT.md");
-  fs13.writeFileSync(path46.join(dir, ".gitignore"), `${lines.join("\n")}
+  fs12.writeFileSync(path45.join(dir, ".gitignore"), `${lines.join("\n")}
 `);
 }
 function writeGitAttributes(root3) {
-  const file = path46.join(root3, ".gitattributes");
+  const file = path45.join(root3, ".gitattributes");
   const line = ".vibgrate/graph.json merge=vg";
-  let content = fs13.existsSync(file) ? fs13.readFileSync(file, "utf8") : "";
+  let content = fs12.existsSync(file) ? fs12.readFileSync(file, "utf8") : "";
   if (!content.split("\n").some((l) => l.trim() === line)) {
     content = content.length ? `${content.replace(/\s*$/, "")}
 ${line}
 ` : `${line}
 `;
-    fs13.writeFileSync(file, content);
+    fs12.writeFileSync(file, content);
   }
 }
 function configureMergeDriver(root3) {
@@ -4603,8 +4438,8 @@ function configureMergeDriver(root3) {
 }
 function installPreCommitHook(root3) {
   const hooksDir = hookDir(root3);
-  fs13.mkdirSync(hooksDir, { recursive: true });
-  const file = path46.join(hooksDir, "pre-commit");
+  fs12.mkdirSync(hooksDir, { recursive: true });
+  const file = path45.join(hooksDir, "pre-commit");
   const block = [
     HOOK_BEGIN,
     "if command -v vg >/dev/null 2>&1; then",
@@ -4613,7 +4448,7 @@ function installPreCommitHook(root3) {
     "fi",
     HOOK_END
   ].join("\n");
-  let content = fs13.existsSync(file) ? fs13.readFileSync(file, "utf8") : "#!/bin/sh\n";
+  let content = fs12.existsSync(file) ? fs12.readFileSync(file, "utf8") : "#!/bin/sh\n";
   const re = new RegExp(`${escapeRe(HOOK_BEGIN)}[\\s\\S]*?${escapeRe(HOOK_END)}`);
   if (re.test(content)) content = content.replace(re, block);
   else content = `${content.replace(/\s*$/, "")}
@@ -4622,21 +4457,21 @@ ${block}
 `;
   if (!content.startsWith("#!")) content = `#!/bin/sh
 ${content}`;
-  fs13.writeFileSync(file, content);
-  fs13.chmodSync(file, 493);
+  fs12.writeFileSync(file, content);
+  fs12.chmodSync(file, 493);
 }
 function undo(root3) {
-  const hookFile = path46.join(hookDir(root3), "pre-commit");
-  if (fs13.existsSync(hookFile)) {
+  const hookFile = path45.join(hookDir(root3), "pre-commit");
+  if (fs12.existsSync(hookFile)) {
     const re = new RegExp(`\\n*${escapeRe(HOOK_BEGIN)}[\\s\\S]*?${escapeRe(HOOK_END)}\\n*`);
-    const next2 = fs13.readFileSync(hookFile, "utf8").replace(re, "\n");
-    if (next2.trim() === "#!/bin/sh") fs13.rmSync(hookFile);
-    else fs13.writeFileSync(hookFile, next2);
+    const next2 = fs12.readFileSync(hookFile, "utf8").replace(re, "\n");
+    if (next2.trim() === "#!/bin/sh") fs12.rmSync(hookFile);
+    else fs12.writeFileSync(hookFile, next2);
   }
-  const attr = path46.join(root3, ".gitattributes");
-  if (fs13.existsSync(attr)) {
-    const next2 = fs13.readFileSync(attr, "utf8").split("\n").filter((l) => l.trim() !== ".vibgrate/graph.json merge=vg").join("\n");
-    fs13.writeFileSync(attr, next2);
+  const attr = path45.join(root3, ".gitattributes");
+  if (fs12.existsSync(attr)) {
+    const next2 = fs12.readFileSync(attr, "utf8").split("\n").filter((l) => l.trim() !== ".vibgrate/graph.json merge=vg").join("\n");
+    fs12.writeFileSync(attr, next2);
   }
   try {
     git(root3, ["config", "--remove-section", "merge.vg"]);
@@ -4646,10 +4481,10 @@ function undo(root3) {
 function hookDir(root3) {
   try {
     const configured = git(root3, ["config", "--get", "core.hooksPath"]).trim();
-    if (configured) return path46.resolve(root3, configured);
+    if (configured) return path45.resolve(root3, configured);
   } catch {
   }
-  return path46.join(root3, ".git", "hooks");
+  return path45.join(root3, ".git", "hooks");
 }
 function git(root3, args) {
   return execFileSync("git", args, { cwd: root3, encoding: "utf8" });
@@ -4663,9 +4498,9 @@ function registerWatch(program) {
     const global = readGlobal(this);
     const root3 = rootOf(global);
     const debounceMs = Math.max(50, Number(opts.debounce) || DEFAULT_DEBOUNCE_MS);
-    const watchRoots = (paths.length ? paths : ["."]).map((p) => path46.resolve(root3, p));
+    const watchRoots = (paths.length ? paths : ["."]).map((p) => path45.resolve(root3, p));
     for (const w of watchRoots) {
-      if (!fs13.existsSync(w)) {
+      if (!fs12.existsSync(w)) {
         throw new CliError(`watch path not found: ${w}`, ExitCode.USAGE_ERROR);
       }
     }
@@ -4718,7 +4553,7 @@ function registerWatch(program) {
     const watchers = [];
     for (const w of watchRoots) {
       try {
-        const watcher = fs13.watch(w, { recursive: true }, (_event, filename) => {
+        const watcher = fs12.watch(w, { recursive: true }, (_event, filename) => {
           if (!filename) {
             schedule("change");
             return;
@@ -4731,7 +4566,7 @@ function registerWatch(program) {
         throw new CliError(`cannot watch ${w}: ${err.message}`, ExitCode.ERROR);
       }
     }
-    info(c.dim(`vg watch \xB7 watching ${watchRoots.map((p) => path46.relative(root3, p) || ".").join(", ")} (debounce ${debounceMs}ms) \xB7 Ctrl+C to stop`));
+    info(c.dim(`vg watch \xB7 watching ${watchRoots.map((p) => path45.relative(root3, p) || ".").join(", ")} (debounce ${debounceMs}ms) \xB7 Ctrl+C to stop`));
     await new Promise((resolve23) => {
       const stop = () => {
         for (const w of watchers) w.close();
@@ -5064,10 +4899,10 @@ function normalizeStandards(raw) {
 }
 function loadStandards(root3) {
   for (const rel of STANDARDS_FILES) {
-    const p = path46__default.join(root3, rel);
+    const p = path45__default.join(root3, rel);
     let text;
     try {
-      text = fs13__default.readFileSync(p, "utf8");
+      text = fs12__default.readFileSync(p, "utf8");
     } catch {
       continue;
     }
@@ -5785,8 +5620,8 @@ async function runHostBench(options = {}) {
 }
 async function runArmSimulate(input) {
   const { arm, lib, modelPath, turns, trie, env, live } = input;
-  const path48 = `${modelPath}#${arm.id}`;
-  const session = await acquireHostSession(lib, path48);
+  const path47 = `${modelPath}#${arm.id}`;
+  const session = await acquireHostSession(lib, path47);
   const system = "You are a coding agent with a Task Capsule.";
   const capsule = "function readConfig(): Config { return load(); }";
   let last = null;
@@ -6319,6 +6154,9 @@ AssertionError: expected 5000`,
     approve: async () => options.autoApprove !== false,
     auto: true,
     capsule: usedCapsule,
+    // FCS / ZNS@1 measure the ranked Task Capsule. Tiny fixtures would
+    // otherwise auto-select whole-repo paste and report usedCapsule=false.
+    capsuleMode: usedCapsule ? "compile" : void 0,
     verify: task.verifyCommand ? { command: task.verifyCommand, maxRounds: 2 } : void 0,
     verifyLadder: usedCapsule,
     overlay: usedCapsule,
@@ -6998,7 +6836,7 @@ function registerModels(program) {
         );
       }
     } else {
-      if (!target.path || !fs13.existsSync(target.path)) {
+      if (!target.path || !fs12.existsSync(target.path)) {
         throw new CliError(
           `model file not found at ${target.path || "(unknown path)"} \u2014 it may already be removed.`,
           ExitCode.NOT_FOUND
@@ -7012,7 +6850,7 @@ function registerModels(program) {
       }
       if (!global.json) info(c.dim(`  $ rm ${target.path}`));
       try {
-        fs13.unlinkSync(target.path);
+        fs12.unlinkSync(target.path);
       } catch (e) {
         const msg = e instanceof Error ? e.message : String(e);
         throw new CliError(`could not delete ${target.path}: ${msg}`, ExitCode.ERROR);
@@ -7150,9 +6988,9 @@ function registerModels(program) {
       }
     });
     if (opts.out) {
-      const outPath = path46.resolve(opts.out);
-      fs13.mkdirSync(path46.dirname(outPath), { recursive: true });
-      fs13.writeFileSync(outPath, `${JSON.stringify(report, null, 2)}
+      const outPath = path45.resolve(opts.out);
+      fs12.mkdirSync(path45.dirname(outPath), { recursive: true });
+      fs12.writeFileSync(outPath, `${JSON.stringify(report, null, 2)}
 `);
       if (!global.json) info(c.dim(`  wrote ${outPath}`));
     }
@@ -7301,14 +7139,14 @@ function resolveUninstallTarget(name, runtimeOpt) {
     }
     return exact[0];
   }
-  const base = path46.basename(wantLc);
+  const base = path45.basename(wantLc);
   const soft = fleet.filter((m) => {
     const n = m.name.toLowerCase();
-    return n === base || n.endsWith("/" + base) || n.endsWith(wantLc) || path46.basename(n) === base;
+    return n === base || n.endsWith("/" + base) || n.endsWith(wantLc) || path45.basename(n) === base;
   });
   if (soft.length === 1) return soft[0];
   if (soft.length > 1) {
-    const baseHits = soft.filter((m) => path46.basename(m.name).toLowerCase() === base);
+    const baseHits = soft.filter((m) => path45.basename(m.name).toLowerCase() === base);
     const pool = baseHits.length ? baseHits : soft;
     const order = ["ollama", "gguf", "lm-studio"];
     for (const rt of order) {
@@ -7346,11 +7184,11 @@ function printBackends(backends) {
   }
 }
 function codeConfigPath(root3) {
-  return path46.join(root3, ".vibgrate", "code.json");
+  return path45.join(root3, ".vibgrate", "code.json");
 }
 function loadCodeConfig(root3) {
   try {
-    const raw = JSON.parse(fs13.readFileSync(codeConfigPath(root3), "utf8"));
+    const raw = JSON.parse(fs12.readFileSync(codeConfigPath(root3), "utf8"));
     return sanitize(raw);
   } catch {
     return {};
@@ -7417,7 +7255,7 @@ function contextBudgetFor(config, modelContextWindow) {
 var MCP_CONFIG_FILES = [".cursor/mcp.json", ".vscode/mcp.json", ".mcp.json"];
 function readMcpServersFile(file) {
   try {
-    const raw = JSON.parse(fs13.readFileSync(file, "utf8"));
+    const raw = JSON.parse(fs12.readFileSync(file, "utf8"));
     const map = raw.mcpServers ?? raw.servers;
     return map && typeof map === "object" ? parseMcpServers(map) : {};
   } catch {
@@ -7428,7 +7266,7 @@ function discoverMcpServers(root3, ownServers) {
   const servers = {};
   const sources = [];
   for (const rel of MCP_CONFIG_FILES) {
-    const found = readMcpServersFile(path46.join(root3, rel));
+    const found = readMcpServersFile(path45.join(root3, rel));
     const names = Object.keys(found);
     if (names.length) {
       sources.push(rel);
@@ -7493,7 +7331,7 @@ function registerCode(program) {
     if (opts.worktreeDiff || opts.worktreeApply || opts.worktreeRemove) {
       const wt = await import('./worktree-session-D575IQWM.js');
       const child = await import('child_process');
-      const os7 = await import('os');
+      const os6 = await import('os');
       const pathMod = await import('path');
       const root4 = rootOf(global);
       const gitRunner = (gitArgs, gitEnv) => {
@@ -7542,10 +7380,10 @@ function registerCode(program) {
           return;
         }
         const patchFile = pathMod.join(
-          fs13.mkdtempSync(pathMod.join(os7.tmpdir(), "vg-wt-")),
+          fs12.mkdtempSync(pathMod.join(os6.tmpdir(), "vg-wt-")),
           "delta.patch"
         );
-        fs13.writeFileSync(patchFile, diff2.patch);
+        fs12.writeFileSync(patchFile, diff2.patch);
         const outcome = wt.applyWorktreePatch(gitRunner, root4, patchFile, diff2.files);
         emitLine({ event: "worktree-applied", id: target.id, ...outcome });
         if (!opts.streamJson && !global.json) {
@@ -7611,7 +7449,7 @@ function registerCode(program) {
       try {
         const { parseMode: parseMode2, resolveMode: resolveMode2, readOrchestratorState: readOrchestratorState2, activePin: activePin2 } = await import('./model-orchestrator-X3NE3Y2G.js');
         const { gatherSystemMemory: gatherSystemMemory2 } = await import('./local-runtime-GA43KYS5.js');
-        const { loadGraph: loadGraph2 } = await import('./load-4EY64JJO.js');
+        const { loadGraph: loadGraph2 } = await import('./load-2FRH37JY.js');
         const state = readOrchestratorState2();
         const mode = parseMode2(modeFlag) ?? state.defaultMode ?? void 0;
         const pin = mode ? activePin2(mode, state) : null;
@@ -7696,7 +7534,7 @@ function registerCode(program) {
       if (!(process.stdin.isTTY && process.stdout.isTTY)) {
         throw usageError('say what to change, e.g. `vg code "add a --timeout flag to the scan command"` (guided mode needs an interactive terminal)');
       }
-      const { runInteractive } = await import('./interactive-CS4PGZPK.js');
+      const { runInteractive } = await import('./interactive-K446F42I.js');
       await runInteractive(
         rootOf(global),
         global,
@@ -7726,7 +7564,7 @@ function registerCode(program) {
     }
     if (!instruction && !stdinFirstTurn) throw usageError('say what to change, e.g. `vg code "add a --timeout flag to the scan command"`');
     {
-      const { ensureCodeMap } = await import('./ensure-map-YIUJWMBK.js');
+      const { ensureCodeMap } = await import('./ensure-map-MLI4XCRV.js');
       const mapRoot = rootOf(global);
       try {
         await ensureCodeMap(mapRoot, global, {
@@ -7763,7 +7601,7 @@ function registerCode(program) {
     let mockReply;
     if (opts.mock) {
       try {
-        mockReply = fs13.readFileSync(opts.mock, "utf8");
+        mockReply = fs12.readFileSync(opts.mock, "utf8");
       } catch {
         throw new CliError(`couldn't read the --mock file: ${opts.mock}`, ExitCode.USAGE_ERROR);
       }
@@ -7811,20 +7649,20 @@ function registerCode(program) {
         process.stdout.write(JSON.stringify(line) + "\n");
       };
       try {
-        const { RunOutcomeRecorder, newOneShotRunId, turnRunId } = await import('./run-outcome-T7VDBNWB.js');
+        const { RunOutcomeRecorder, newOneShotRunId, turnRunId } = await import('./run-outcome-4ETNDPX6.js');
         const primarySlug = route.providers[0]?.model.includes("/") ? route.providers[0].model.split("/")[0] : route.providers[0]?.id;
-        const { runCodeStreamJson, parseHostMessage } = await import('./stream-json-XXCFN4MF.js');
-        const { nodeCodeFs } = await import('./session-VPP2VGUN.js');
+        const { runCodeStreamJson, parseHostMessage } = await import('./stream-json-MD7MSSCH.js');
+        const { nodeCodeFs } = await import('./session-22BGDYWF.js');
         const readline6 = await import('readline');
         const child = await import('child_process');
         const { loadOrDiscoverFederation } = await import('./federation-M4ZNXOPX.js');
         const { resolveExecutionEnv } = await import('./execution-env-4MS5AYAN.js');
         const { resolveModelExecutionProfile, mergeModelExecutionProfile } = await import('./model-execution-profile-ELWF3Z6H.js');
-        const { startCodeRuntimeSession } = await import('./runtime-session-WZLVADPQ.js');
-        const { resolveGraphBackend } = await import('./graph-backend-FDZUY4TR.js');
+        const { startCodeRuntimeSession } = await import('./runtime-session-RMSKXFIJ.js');
+        const { resolveGraphBackend } = await import('./graph-backend-LK5EFQXN.js');
         const { detectGitRef } = await import('./git-ref-LMT3EXYY.js');
         const { repositoryIdFromRoot } = await import('./paths-RVK6FKRN.js');
-        const { vgdRequest } = await import('./vgd-SBZO4ONQ.js');
+        const { vgdRequest } = await import('./vgd-TW7HU2PH.js');
         const federation = loadOrDiscoverFederation(root3);
         const modelProfile = mergeModelExecutionProfile(
           resolveModelExecutionProfile({
@@ -7882,7 +7720,7 @@ ${res.stderr}` : ""),
             exitCode: res.status ?? 1
           };
         };
-        const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-H6GXYNKV.js');
+        const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-H6I3ALUW.js');
         const vgBuiltin = createVgBuiltinMcpTools({
           getGraph: () => graph,
           root: root3,
@@ -7903,10 +7741,10 @@ ${res.stderr}` : ""),
         }
         const externalTools = mergeExternalToolsets(vgBuiltin, projectMcp);
         const { createCheckpoint } = await import('./checkpoint-UYMYMMQO.js');
-        const os7 = await import('os');
+        const os6 = await import('os');
         const pathMod = await import('path');
         const checkpointIndex = pathMod.join(
-          fs13.mkdtempSync(pathMod.join(os7.tmpdir(), "vg-code-cp-")),
+          fs12.mkdtempSync(pathMod.join(os6.tmpdir(), "vg-code-cp-")),
           "index"
         );
         const gitRunner = (gitArgs, gitEnv) => {
@@ -7927,7 +7765,7 @@ ${res.stderr}` : ""),
           files,
           indexFile: checkpointIndex
         });
-        const { loadApprovalRules, addApprovalRule, ruleForAction, ruleLabel } = await import('./approvals-F2DJGPU7.js');
+        const { loadApprovalRules, addApprovalRule, ruleForAction, ruleLabel } = await import('./approvals-HRIMDIX3.js');
         const { loadProjectRules, nodeRulesReader } = await import('./rules-ASYEUNB5.js');
         const projectRules = loadProjectRules(nodeRulesReader(root3));
         if (projectRules.sources.length && !global.quiet) {
@@ -7985,8 +7823,8 @@ ${res.stderr}` : ""),
         };
         try {
           if (opts.session) {
-            const { runCodeStreamJsonSession, STREAM_JSON_PROTOCOL_VERSION } = await import('./stream-json-XXCFN4MF.js');
-            const { runAgent: runAgent2 } = await import('./agent-AFMDB4GM.js');
+            const { runCodeStreamJsonSession, STREAM_JSON_PROTOCOL_VERSION } = await import('./stream-json-MD7MSSCH.js');
+            const { runAgent: runAgent2 } = await import('./agent-IHNUBFBM.js');
             const {
               condenseSession,
               loadLatestSession,
@@ -7997,7 +7835,7 @@ ${res.stderr}` : ""),
               sessionsDir,
               summarizeSession
             } = await import('./session-store-AQUORKWB.js');
-            const { VERSION: VERSION2 } = await import('./version-2UBJ7N2I.js');
+            const { VERSION: VERSION2 } = await import('./version-FRUT6RI2.js');
             const resumedRecord = typeof opts.continue === "string" ? loadSession(mainRoot, opts.continue) : opts.continue ? loadLatestSession(mainRoot) : void 0;
             if (typeof opts.continue === "string" && !resumedRecord) {
               emitStream({
@@ -8209,8 +8047,8 @@ ${res.stderr}` : ""),
       if (!autonomous && !tty) {
         throw usageError("the agent approves each edit/command \u2014 run in a terminal to approve interactively, or pass --auto to run autonomously (or --single for a one-shot diff).");
       }
-      const { agentTask } = await import('./interactive-CS4PGZPK.js');
-      const { nodeCodeFs } = await import('./session-VPP2VGUN.js');
+      const { agentTask } = await import('./interactive-K446F42I.js');
+      const { nodeCodeFs } = await import('./session-22BGDYWF.js');
       const { TtyPrompter } = await import('./ui-K7D3BCHD.js');
       let priorSummary;
       let priorInstruction;
@@ -8225,7 +8063,7 @@ ${res.stderr}` : ""),
         }
       }
       const prompter = tty ? new TtyPrompter() : void 0;
-      const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-H6GXYNKV.js');
+      const { createVgBuiltinMcpTools, mergeExternalToolsets } = await import('./vg-mcp-bridge-H6I3ALUW.js');
       const vgBuiltin = createVgBuiltinMcpTools({
         getGraph: () => graph,
         root: root3,
@@ -8249,11 +8087,11 @@ ${res.stderr}` : ""),
         const { loadFederation } = await import('./federation-M4ZNXOPX.js');
         const { resolveExecutionEnv } = await import('./execution-env-4MS5AYAN.js');
         const { resolveModelExecutionProfile, mergeModelExecutionProfile } = await import('./model-execution-profile-ELWF3Z6H.js');
-        const { startCodeRuntimeSession } = await import('./runtime-session-WZLVADPQ.js');
-        const { resolveGraphBackend } = await import('./graph-backend-FDZUY4TR.js');
+        const { startCodeRuntimeSession } = await import('./runtime-session-RMSKXFIJ.js');
+        const { resolveGraphBackend } = await import('./graph-backend-LK5EFQXN.js');
         const { detectGitRef } = await import('./git-ref-LMT3EXYY.js');
         const { repositoryIdFromRoot } = await import('./paths-RVK6FKRN.js');
-        const { vgdRequest } = await import('./vgd-SBZO4ONQ.js');
+        const { vgdRequest } = await import('./vgd-TW7HU2PH.js');
         const federation = loadFederation(root3);
         const modelProfile = mergeModelExecutionProfile(
           resolveModelExecutionProfile({
@@ -8347,7 +8185,7 @@ ${res.stderr}` : ""),
       attribution: { client: "vg-code", provider: providerSlug, model: primary?.model }
     });
     if (opts.out) {
-      fs13.writeFileSync(opts.out, JSON.stringify(result, null, 2) + "\n");
+      fs12.writeFileSync(opts.out, JSON.stringify(result, null, 2) + "\n");
     }
     if (global.json) {
       json(result);
@@ -8561,7 +8399,7 @@ async function addCmd(root3, rest, opts, asJson) {
 }
 function readPackageVersion(root3) {
   try {
-    const pkg = JSON.parse(fs13__default.readFileSync(path46__default.join(root3, "package.json"), "utf8"));
+    const pkg = JSON.parse(fs12__default.readFileSync(path45__default.join(root3, "package.json"), "utf8"));
     return typeof pkg.version === "string" ? pkg.version : void 0;
   } catch {
     return void 0;
@@ -8569,7 +8407,7 @@ function readPackageVersion(root3) {
 }
 function readOptionalFile(p) {
   try {
-    const t = fs13__default.readFileSync(p, "utf8");
+    const t = fs12__default.readFileSync(p, "utf8");
     return t.trim() ? t : void 0;
   } catch {
     return void 0;
@@ -8584,8 +8422,8 @@ async function publishCmd(root3, rest, opts, global, asJson) {
   if (!parsed) throw new CliError("publishing a private library requires a DSN \u2014 run `vibgrate login` or set VIBGRATE_DSN", ExitCode.USAGE_ERROR);
   const version = (opts.version || readPackageVersion(root3) || "").trim();
   if (!version) throw usageError("a --version is required (or run from a package whose package.json has a version)");
-  const readme = readOptionalFile(opts.readme ? path46__default.resolve(opts.readme) : path46__default.join(root3, "README.md"));
-  const dts = opts.dts ? readOptionalFile(path46__default.resolve(opts.dts)) : void 0;
+  const readme = readOptionalFile(opts.readme ? path45__default.resolve(opts.readme) : path45__default.join(root3, "README.md"));
+  const dts = opts.dts ? readOptionalFile(path45__default.resolve(opts.dts)) : void 0;
   if (!readme && !dts) throw usageError("nothing to publish \u2014 no README.md found and no --dts given");
   const result = await publishPrivateLibrary(
     { name, version, readme, dts, language: opts.language },
@@ -8717,8 +8555,8 @@ function registerExport(program) {
       out(content.trimEnd());
       return;
     }
-    fs13.mkdirSync(path46.dirname(path46.resolve(file)), { recursive: true });
-    fs13.writeFileSync(file, content);
+    fs12.mkdirSync(path45.dirname(path45.resolve(file)), { recursive: true });
+    fs12.writeFileSync(file, content);
     info(`${c.green("\u2714")} wrote ${file} ${c.dim(`(${format})`)}`);
   });
   applyGlobalOptions(cmd);
@@ -8728,49 +8566,49 @@ function detectFormat(file) {
   if (lower.endsWith(".cdx.json")) return "cyclonedx";
   if (lower.endsWith(".spdx.json")) return "spdx";
   if (file === "-") return "json";
-  return formatForExt(path46.extname(file));
+  return formatForExt(path45.extname(file));
 }
 function registerBundle(program) {
   const cmd = program.command("bundle").description("build an air-gapped bundle (grammars + graph + library catalog)").option("--offline", "offline bundle (default; present for clarity)").option("-o, --out <dir>", "output directory", "vg-bundle").action(function(opts) {
     const global = readGlobal(this);
     const root3 = rootOf(global);
-    const outDir = path46.resolve(root3, opts.out ?? "vg-bundle");
+    const outDir = path45.resolve(root3, opts.out ?? "vg-bundle");
     let grammarFiles;
     try {
       grammarFiles = resolvedGrammarFiles();
     } catch {
       throw new CliError("no grammars found to bundle (run a build first)", ExitCode.ERROR);
     }
-    fs13.mkdirSync(path46.join(outDir, "grammars"), { recursive: true });
+    fs12.mkdirSync(path45.join(outDir, "grammars"), { recursive: true });
     let grammarCount = 0;
     for (const { fileName, absPath } of grammarFiles) {
-      fs13.copyFileSync(absPath, path46.join(outDir, "grammars", fileName));
+      fs12.copyFileSync(absPath, path45.join(outDir, "grammars", fileName));
       grammarCount++;
     }
     for (const id of Object.keys(TOOLCHAIN_GRAMMARS).sort()) {
       const absPath = resolveToolchainGrammar(id);
       if (!absPath) continue;
-      fs13.copyFileSync(absPath, path46.join(outDir, "grammars", path46.basename(absPath)));
+      fs12.copyFileSync(absPath, path45.join(outDir, "grammars", path45.basename(absPath)));
       grammarCount++;
     }
     const included = [`grammars/ (${grammarCount} .wasm)`];
     const graphSrc = resolveGraphPath(root3, global.graph);
-    if (fs13.existsSync(graphSrc)) {
-      fs13.copyFileSync(graphSrc, path46.join(outDir, "graph.json"));
+    if (fs12.existsSync(graphSrc)) {
+      fs12.copyFileSync(graphSrc, path45.join(outDir, "graph.json"));
       included.push("graph.json");
     } else {
       const graph = loadGraphFileWithSnapshot(graphSrc);
       if (graph) {
-        fs13.writeFileSync(path46.join(outDir, "graph.json"), serializeGraph(graph));
+        fs12.writeFileSync(path45.join(outDir, "graph.json"), serializeGraph(graph));
         included.push("graph.json");
       }
     }
     const cat = catalogPath(root3);
-    if (fs13.existsSync(cat)) {
-      fs13.copyFileSync(cat, path46.join(outDir, "vibgrate.lib.json"));
+    if (fs12.existsSync(cat)) {
+      fs12.copyFileSync(cat, path45.join(outDir, "vibgrate.lib.json"));
       included.push("vibgrate.lib.json");
-      if (fs13.existsSync(libDir(root3))) {
-        fs13.cpSync(libDir(root3), path46.join(outDir, "lib"), { recursive: true });
+      if (fs12.existsSync(libDir(root3))) {
+        fs12.cpSync(libDir(root3), path45.join(outDir, "lib"), { recursive: true });
         included.push("lib/");
       }
     }
@@ -8782,15 +8620,15 @@ function registerBundle(program) {
       included,
       usage: "Run `vg build --grammars <this dir>/grammars` to build fully offline."
     };
-    fs13.writeFileSync(path46.join(outDir, "MANIFEST.json"), `${stableStringify(manifest, 2)}
+    fs12.writeFileSync(path45.join(outDir, "MANIFEST.json"), `${stableStringify(manifest, 2)}
 `);
     if (global.json) {
-      json({ out: path46.relative(root3, outDir), ...manifest });
+      json({ out: path45.relative(root3, outDir), ...manifest });
       return;
     }
-    info(`${c.cyan("vg bundle")} \xB7 wrote ${path46.relative(root3, outDir)}/`);
+    info(`${c.cyan("vg bundle")} \xB7 wrote ${path45.relative(root3, outDir)}/`);
     for (const i of included) info(`  ${c.green("\u2714")} ${i}`);
-    info(c.dim(`  offline: vg build --grammars "${path46.relative(root3, outDir)}/grammars"`));
+    info(c.dim(`  offline: vg build --grammars "${path45.relative(root3, outDir)}/grammars"`));
   });
   applyGlobalOptions(cmd);
 }
@@ -8808,7 +8646,7 @@ async function runDoctor(global) {
   const root3 = rootOf(global);
   const local = global.local === true;
   const graphPath = resolveGraphPath(root3, global.graph);
-  const configFile = CONFIG_BASENAMES.find((f) => fs13.existsSync(path46.join(root3, f))) ?? null;
+  const configFile = CONFIG_BASENAMES.find((f) => fs12.existsSync(path45.join(root3, f))) ?? null;
   const graph = loadGraph(root3, graphPath);
   let staleFiles = null;
   if (graph) {
@@ -8834,14 +8672,14 @@ async function runDoctor(global) {
     root: root3,
     configFile,
     map: {
-      path: path46.relative(root3, graphPath),
+      path: path45.relative(root3, graphPath),
       built: graph !== null,
       generatedAt: graph?.generatedAt ?? null,
       staleFiles
     },
     libCatalog: {
-      path: path46.relative(root3, catalogPath(root3)),
-      present: fs13.existsSync(catalogPath(root3)),
+      path: path45.relative(root3, catalogPath(root3)),
+      present: fs12.existsSync(catalogPath(root3)),
       libraries: libCount
     },
     credentials: creds,
@@ -8898,7 +8736,7 @@ async function runDoctor(global) {
   );
   info(
     `  host pool  ${li.hostPool.size} warm session(s)` + (li.hostPool.sessions[0] ? c.dim(
-      ` \xB7 last ${path46.basename(li.hostPool.sessions[0].modelPath)} kv=${li.hostPool.sessions[0].kvBlocks}`
+      ` \xB7 last ${path45.basename(li.hostPool.sessions[0].modelPath)} kv=${li.hostPool.sessions[0].kvBlocks}`
     ) : c.dim(" \xB7 none (load via vg code / vgd host-load)"))
   );
   if (li.dynamicOnToken || li.dynamicCustomSampler) {
@@ -9018,7 +8856,7 @@ function registerPolicy(program) {
     const global = readGlobal(this);
     let raw;
     try {
-      raw = fs13.readFileSync(file, "utf8");
+      raw = fs12.readFileSync(file, "utf8");
     } catch {
       throw new CliError(`cannot read ${file}`, ExitCode.NOT_FOUND);
     }
@@ -9205,9 +9043,9 @@ async function readStdin() {
   return Buffer.concat(chunks).toString("utf-8");
 }
 function readFileOrThrow(file, label) {
-  const p = path46.resolve(file);
-  if (!fs13.existsSync(p)) throw usageError(`${label} file not found: ${p}`);
-  return fs13.readFileSync(p, "utf-8");
+  const p = path45.resolve(file);
+  if (!fs12.existsSync(p)) throw usageError(`${label} file not found: ${p}`);
+  return fs12.readFileSync(p, "utf-8");
 }
 async function readInput(file, label) {
   return file ? readFileOrThrow(file, label) : readStdin();
@@ -9217,10 +9055,10 @@ function writeOutput(outFile, content) {
     process.stdout.write(content.endsWith("\n") ? content : content + "\n");
     return;
   }
-  const outPath = path46.resolve(outFile);
-  const dir = path46.dirname(outPath);
-  if (!fs13.existsSync(dir)) throw usageError(`output directory does not exist: ${dir}`);
-  fs13.writeFileSync(outPath, content.endsWith("\n") ? content : content + "\n", "utf-8");
+  const outPath = path45.resolve(outFile);
+  const dir = path45.dirname(outPath);
+  if (!fs12.existsSync(dir)) throw usageError(`output directory does not exist: ${dir}`);
+  fs12.writeFileSync(outPath, content.endsWith("\n") ? content : content + "\n", "utf-8");
   info(c.dim(`wrote ${outPath}`));
 }
 function requireChoice(value, valid2, flag) {
@@ -9253,8 +9091,8 @@ function registerHcs(program) {
     }
     const statePath = opts.previous ?? opts.out;
     const useIncremental = canIncremental && statePath !== void 0;
-    const root3 = path46.resolve(dir);
-    if (!fs13.existsSync(root3) || !fs13.statSync(root3).isDirectory()) {
+    const root3 = path45.resolve(dir);
+    if (!fs12.existsSync(root3) || !fs12.statSync(root3).isDirectory()) {
       throw usageError(`not a directory: ${root3}`);
     }
     const supported = new Set(
@@ -9272,13 +9110,13 @@ function registerHcs(program) {
     const walk2 = (abs, rel) => {
       let entries;
       try {
-        entries = fs13.readdirSync(abs, { withFileTypes: true });
+        entries = fs12.readdirSync(abs, { withFileTypes: true });
       } catch {
         return;
       }
       for (const entry of entries.sort((a, b) => a.name < b.name ? -1 : 1)) {
         if (entry.name.startsWith(".")) continue;
-        const absChild = path46.join(abs, entry.name);
+        const absChild = path45.join(abs, entry.name);
         const relChild = rel ? `${rel}/${entry.name}` : entry.name;
         if (entry.isDirectory()) {
           if (!SKIP_DIRS.has(entry.name)) walk2(absChild, relChild);
@@ -9286,11 +9124,11 @@ function registerHcs(program) {
         }
         if (!entry.isFile()) continue;
         if (!opts.includeTests && TEST_PATTERNS.some((p) => p.test(relChild))) continue;
-        const lang = extToLang.get(path46.extname(entry.name).toLowerCase());
+        const lang = extToLang.get(path45.extname(entry.name).toLowerCase());
         if (!lang) continue;
         try {
-          if (fs13.statSync(absChild).size > MAX_EXTRACT_FILE_BYTES) continue;
-          const content = fs13.readFileSync(absChild, "utf-8");
+          if (fs12.statSync(absChild).size > MAX_EXTRACT_FILE_BYTES) continue;
+          const content = fs12.readFileSync(absChild, "utf-8");
           let bucket = byLanguage.get(lang);
           if (!bucket) byLanguage.set(lang, bucket = []);
           bucket.push({ path: relChild, content });
@@ -9320,8 +9158,8 @@ function registerHcs(program) {
       writeOutput(opts.out, parts2.join("\n"));
       return;
     }
-    const previousPath = path46.resolve(statePath);
-    const previousNdjson = !opts.full && fs13.existsSync(previousPath) ? fs13.readFileSync(previousPath, "utf-8") : "";
+    const previousPath = path45.resolve(statePath);
+    const previousNdjson = !opts.full && fs12.existsSync(previousPath) ? fs12.readFileSync(previousPath, "utf-8") : "";
     if (opts.full) info(c.dim("running a full re-extraction (--full)"));
     else if (!previousNdjson) info(c.dim(`previous stream not found at ${previousPath} \u2014 running a full extraction`));
     const currentFilesJson = JSON.stringify(
@@ -9425,11 +9263,11 @@ function registerHcs(program) {
   applyGlobalOptions(cmd);
 }
 var initCommand = new Command("init").description("Initialize vibgrate in a project").argument("[path]", "Path to initialize", ".").option("--baseline", "Create initial baseline after init").option("--yes", "Skip confirmation prompts").action(async (targetPath, opts) => {
-  const rootDir = path46.resolve(targetPath);
-  const vibgrateDir2 = path46.join(rootDir, ".vibgrate");
+  const rootDir = path45.resolve(targetPath);
+  const vibgrateDir2 = path45.join(rootDir, ".vibgrate");
   await ensureDir(vibgrateDir2);
   console.log(chalk7.green("\u2714") + ` Created ${chalk7.bold(".vibgrate/")} directory`);
-  const configPath = path46.join(rootDir, "vibgrate.config.ts");
+  const configPath = path45.join(rootDir, "vibgrate.config.ts");
   if (await pathExists(configPath)) {
     console.log(chalk7.dim("  vibgrate.config.ts already exists, skipping"));
   } else {
@@ -9437,7 +9275,7 @@ var initCommand = new Command("init").description("Initialize vibgrate in a proj
     console.log(chalk7.green("\u2714") + ` Created ${chalk7.bold("vibgrate.config.ts")}`);
   }
   if (opts.baseline) {
-    const { runBaseline } = await import('./baseline-KTE2C3LW.js');
+    const { runBaseline } = await import('./baseline-EZQ7SCRT.js');
     await runBaseline(rootDir);
   }
   console.log("");
@@ -9540,7 +9378,7 @@ function collectPackageImports(graph, ecosystem, pkg) {
   };
 }
 async function firstReferenceLine(rootDir, relFile, identifier, readFile3) {
-  const content = await readFile3(path46.join(rootDir, relFile));
+  const content = await readFile3(path45.join(rootDir, relFile));
   if (!content) return null;
   const escaped = identifier.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
   const re = new RegExp(`\\b${escaped}\\b`);
@@ -9578,9 +9416,9 @@ function sitesFromImportFiles(files, limit = 10) {
 }
 async function defaultReadFile(absPath) {
   try {
-    const stat2 = await fs27.stat(absPath);
+    const stat2 = await fs26.stat(absPath);
     if (!stat2.isFile() || stat2.size > MAX_FILE_BYTES) return null;
-    return await fs27.readFile(absPath, "utf8");
+    return await fs26.readFile(absPath, "utf8");
   } catch {
     return null;
   }
@@ -9776,7 +9614,7 @@ var AI_ASSISTANT_DETECTORS = [
 async function detectAiAssistant(rootDir) {
   for (const detector of AI_ASSISTANT_DETECTORS) {
     for (const file of detector.files) {
-      if (await pathExists$1(path46.join(rootDir, file))) {
+      if (await pathExists$1(path45.join(rootDir, file))) {
         return detector.name;
       }
     }
@@ -9970,7 +9808,7 @@ function reportStandards(rootDir) {
 }
 async function printRuntimeSnapshot(rootDir, opts, already) {
   try {
-    const { attachVgd: attachVgd2 } = await import('./attach-XTX2Q3AD.js');
+    const { attachVgd: attachVgd2 } = await import('./attach-L43JUJ7A.js');
     const { vgdRequest } = await import('./client-P5XSRFV4.js');
     const { formatSemanticProgress } = await import('./semantic-status-2JFLIQQJ.js');
     let repositoryId = already?.repositoryId;
@@ -10012,7 +9850,7 @@ var scanCommand = new Command("scan").description("Scan a project for upgrade dr
   collectExcludes,
   []
 ).option("--concurrency <n>", "Max concurrent registry lookups", "8").option("--push", "Auto-push results to Vibgrate API after scan").option("--dsn <dsn>", "DSN token for push (or use VIBGRATE_DSN env)").option("--region <region>", "Override data residency region for push (us, eu)").option("--strict", "Fail on push errors").option("--ui-purpose", "Enable optional UI purpose evidence extraction (slower)").option("--no-local-artifacts", "Do not write .vibgrate JSON artifacts to disk").option("--max-privacy", "Enable strongest privacy mode (minimal scanners, no local artifacts)").option("--offline", "Run without network calls; do not upload results").option("--full", "Comprehensive scan: turns on known-vulnerability detection (= --vulns) and, when a standards policy exists, a banned-dependency report \u2014 on top of drift scoring and the code map").option("--vulns", "Also scan installed dependencies for known vulnerabilities (OSV online, or advisories from --package-manifest when offline)").option("--package-manifest <file>", "Use local package-version manifest JSON/ZIP (for offline mode)").option("--project-scan-timeout <seconds>", "Per-project scan timeout in seconds (default: 180)").option("--drift-budget <score>", "Fail if DriftScore is above budget (0-100)").option("--drift-worsening <percent>", "Fail if drift worsens by more than % since baseline").option("--repository-name <name>", "Override the repository name recorded for this scan (defaults to the directory or package.json name)").option("--force", "Always create a fresh scan ingest, even if the repository is unchanged since the last scan (skips the unchanged/reuse optimization). Used by scheduled and dashboard-triggered scans.").option("--no-graph", "Skip building the local code map (the AI/docs index) that scan produces after scoring drift").option("--no-daemon", "Never auto-start or use the local runtime (vgd) \u2014 run everything in this process").option("--quiet", "Suppress promotional output (the free-plan tracking panel and the AI Context install prompt); scan results are unaffected").action(async (targetPath, opts) => {
-  const rootDir = path46.resolve(targetPath);
+  const rootDir = path45.resolve(targetPath);
   if (!await pathExists$1(rootDir)) {
     console.error(chalk7.red(`Path does not exist: ${rootDir}`));
     process.exit(1);
@@ -10020,7 +9858,7 @@ var scanCommand = new Command("scan").description("Scan a project for upgrade dr
   const hasDsn = !!resolveDsn(opts.dsn);
   let willPush = !opts.offline && (opts.push || hasDsn);
   const noLocalArtifacts = opts.localArtifacts === false;
-  const isFirstRun = !await pathExists$1(path46.join(rootDir, ".vibgrate", "scan_result.json"));
+  const isFirstRun = !await pathExists$1(path45.join(rootDir, ".vibgrate", "scan_result.json"));
   let pinnedRegion;
   let planTier;
   let upgradeUrl;
@@ -10179,7 +10017,7 @@ var scanCommand = new Command("scan").description("Scan a project for upgrade dr
   const advanced = await loadAdvancedScanHook();
   const artifact = await runCoreScan(rootDir, scanOpts, advanced);
   if (wantGraph && builtGraph) {
-    const { attachVgd: attachVgd2 } = await import('./attach-XTX2Q3AD.js');
+    const { attachVgd: attachVgd2 } = await import('./attach-L43JUJ7A.js');
     const { ActivityLog: ActivityLog2 } = await import('./activity-MF2GNYAI.js');
     const activity = new ActivityLog2();
     const attached = await activity.time(
@@ -10327,7 +10165,7 @@ var SKIP_DIRS2 = /* @__PURE__ */ new Set([
 function scanStaleness(rootDir, artifactPath) {
   let ref;
   try {
-    ref = fs13.statSync(artifactPath).mtimeMs;
+    ref = fs12.statSync(artifactPath).mtimeMs;
   } catch {
     return { stale: false };
   }
@@ -10339,7 +10177,7 @@ function scanStaleness(rootDir, artifactPath) {
     if (depth > 8 || scanned > MAX_ENTRIES2) return;
     let entries;
     try {
-      entries = fs13.readdirSync(dir, { withFileTypes: true });
+      entries = fs12.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -10347,20 +10185,20 @@ function scanStaleness(rootDir, artifactPath) {
       scanned++;
       if (scanned > MAX_ENTRIES2) break;
       if (e.isDirectory()) {
-        if (!SKIP_DIRS2.has(e.name) && !e.name.startsWith(".")) walk2(path46.join(dir, e.name), depth + 1);
+        if (!SKIP_DIRS2.has(e.name) && !e.name.startsWith(".")) walk2(path45.join(dir, e.name), depth + 1);
         continue;
       }
       if (!WATCHED_FILES.has(e.name) && !WATCHED_EXT.test(e.name)) continue;
-      const abs = path46.join(dir, e.name);
+      const abs = path45.join(dir, e.name);
       let mtimeMs;
       try {
-        mtimeMs = fs13.statSync(abs).mtimeMs;
+        mtimeMs = fs12.statSync(abs).mtimeMs;
       } catch {
         continue;
       }
       if (mtimeMs > newest) {
         newest = mtimeMs;
-        newestChanged = path46.relative(rootDir, abs) || e.name;
+        newestChanged = path45.relative(rootDir, abs) || e.name;
       }
     }
   };
@@ -10491,7 +10329,7 @@ function analyzeTree(root3, packages) {
     if (depth > MAX_DEPTH || filesSeen >= MAX_FILES) return;
     let entries;
     try {
-      entries = fs13.readdirSync(dir, { withFileTypes: true });
+      entries = fs12.readdirSync(dir, { withFileTypes: true });
     } catch {
       return;
     }
@@ -10500,17 +10338,17 @@ function analyzeTree(root3, packages) {
       if (filesSeen >= MAX_FILES) return;
       if (entry.isDirectory()) {
         if (SKIP_DIRS3.has(entry.name) || entry.name.startsWith(".")) continue;
-        walk2(path46.join(dir, entry.name), depth + 1);
+        walk2(path45.join(dir, entry.name), depth + 1);
         continue;
       }
-      const fileEco = EXT_ECOSYSTEM[path46.extname(entry.name)];
+      const fileEco = EXT_ECOSYSTEM[path45.extname(entry.name)];
       if (!fileEco || fileEco === "unknown") continue;
       filesSeen++;
-      const full = path46.join(dir, entry.name);
+      const full = path45.join(dir, entry.name);
       let content;
       try {
-        if (fs13.statSync(full).size > MAX_FILE_BYTES2) continue;
-        content = fs13.readFileSync(full, "utf8");
+        if (fs12.statSync(full).size > MAX_FILE_BYTES2) continue;
+        content = fs12.readFileSync(full, "utf8");
       } catch {
         continue;
       }
@@ -10821,7 +10659,7 @@ function applyPlan(rootDir, upgrades, opts = {}) {
     }
     const outcomes = effective.map((t) => {
       const c2 = pmCommandFor(u.ecosystem, u.package, u.to, opts.packageManager, { workspaceRoot: t.isWorkspaceRoot });
-      return { t, res: run(c2, path46.join(rootDir, t.dir)) };
+      return { t, res: run(c2, path45.join(rootDir, t.dir)) };
     });
     const failures = outcomes.filter((o) => !o.res.ok);
     if (failures.length === 0) {
@@ -10850,8 +10688,8 @@ function applyPlan(rootDir, upgrades, opts = {}) {
   return results;
 }
 var REGISTRY_URL = "https://registry.npmjs.org/@vibgrate%2fcli/latest";
-var CACHE_DIR = path46.join(os.homedir(), ".vibgrate");
-var CACHE_FILE = path46.join(CACHE_DIR, "update-check.json");
+var CACHE_DIR = path45.join(os.homedir(), ".vibgrate");
+var CACHE_FILE = path45.join(CACHE_DIR, "update-check.json");
 async function fetchLatestVersion() {
   try {
     const controller = new AbortController();
@@ -10878,8 +10716,8 @@ async function fetchLatestVersion() {
 }
 async function writeCache(data) {
   try {
-    await fs27.mkdir(CACHE_DIR, { recursive: true });
-    await fs27.writeFile(CACHE_FILE, JSON.stringify(data), "utf-8");
+    await fs26.mkdir(CACHE_DIR, { recursive: true });
+    await fs26.writeFile(CACHE_FILE, JSON.stringify(data), "utf-8");
   } catch {
   }
 }
@@ -10914,10 +10752,10 @@ function buildDeferredUpdateScript(opts) {
 }
 function scheduleDeferredUpdate(command, pid = process.pid, dir = os.tmpdir()) {
   const stamp = `${pid}-${process.hrtime.bigint().toString(36)}`;
-  const scriptPath = path46.join(dir, `vg-update-${stamp}.cmd`);
-  const logPath = path46.join(dir, `vg-update-${stamp}.log`);
+  const scriptPath = path45.join(dir, `vg-update-${stamp}.cmd`);
+  const logPath = path45.join(dir, `vg-update-${stamp}.log`);
   try {
-    fs13.writeFileSync(scriptPath, buildDeferredUpdateScript({ pid, command, logPath }), "utf8");
+    fs12.writeFileSync(scriptPath, buildDeferredUpdateScript({ pid, command, logPath }), "utf8");
     const child = spawn(process.env.ComSpec || "cmd.exe", ["/d", "/s", "/c", scriptPath], {
       detached: true,
       stdio: "ignore",
@@ -10941,7 +10779,7 @@ function detectGlobalInstall(execPath = process.argv[1] || "", cwd = process.cwd
   if (!execPath) return null;
   let resolved = execPath;
   try {
-    resolved = fs13.realpathSync(execPath);
+    resolved = fs12.realpathSync(execPath);
   } catch {
   }
   const p = resolved.replace(/\\/g, "/");
@@ -10971,14 +10809,14 @@ async function findGlobalInstall(pkg = PACKAGE_NAME, run = defaultRunner) {
       pm: "yarn",
       root: () => {
         const dir = tryRun("yarn global dir");
-        return dir ? path46.join(dir, "node_modules") : null;
+        return dir ? path45.join(dir, "node_modules") : null;
       }
     },
-    { pm: "bun", root: () => path46.join(os.homedir(), ".bun", "install", "global", "node_modules") }
+    { pm: "bun", root: () => path45.join(os.homedir(), ".bun", "install", "global", "node_modules") }
   ];
   for (const probe of probes) {
     const root3 = probe.root();
-    if (root3 && await pathExists(path46.join(root3, pkg))) return probe.pm;
+    if (root3 && await pathExists(path45.join(root3, pkg))) return probe.pm;
   }
   return null;
 }
@@ -10997,15 +10835,15 @@ function getGlobalUpdateCommand(pm, pkg, version) {
   }
 }
 async function detectPackageManager(cwd) {
-  if (await pathExists(path46.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
-  if (await pathExists(path46.join(cwd, "bun.lockb"))) return "bun";
-  if (await pathExists(path46.join(cwd, "yarn.lock"))) return "yarn";
+  if (await pathExists(path45.join(cwd, "pnpm-lock.yaml"))) return "pnpm";
+  if (await pathExists(path45.join(cwd, "bun.lockb"))) return "bun";
+  if (await pathExists(path45.join(cwd, "yarn.lock"))) return "yarn";
   return "npm";
 }
 async function detectWorkspaceRoot(cwd) {
-  if (await pathExists(path46.join(cwd, "pnpm-workspace.yaml"))) return true;
+  if (await pathExists(path45.join(cwd, "pnpm-workspace.yaml"))) return true;
   try {
-    const pkgPath = path46.join(cwd, "package.json");
+    const pkgPath = path45.join(cwd, "package.json");
     const raw = await (await import('fs/promises')).readFile(pkgPath, "utf-8");
     const pkg = JSON.parse(raw);
     return pkg.workspaces != null;
@@ -11032,7 +10870,7 @@ function getInstallCommand(pm, pkg, version, isDev, opts = {}) {
 }
 async function getLocalDependencyState(cwd, pkg = PACKAGE_NAME) {
   try {
-    const pkgPath = path46.join(cwd, "package.json");
+    const pkgPath = path45.join(cwd, "package.json");
     const raw = await (await import('fs/promises')).readFile(pkgPath, "utf-8");
     const parsed = JSON.parse(raw);
     if (parsed.devDependencies?.[pkg]) return "dev";
@@ -11085,7 +10923,7 @@ ${String(err)}` }));
 async function releaseWindowsFileLocks(cwd, keepVersion) {
   reapAndReport(cwd, keepVersion);
   try {
-    const { vgdSocketPath } = await import('./vgd-SBZO4ONQ.js');
+    const { vgdSocketPath } = await import('./vgd-TW7HU2PH.js');
     const result = await stopVgd(vgdSocketPath());
     if (result === "stopped") {
       console.log(chalk7.dim("Stopped the vgd daemon so its files can be replaced \u2014 it restarts on the new build after the install."));
@@ -11216,7 +11054,7 @@ var updateCommand = new Command("update").description("Update vibgrate to the la
 );
 async function rewarmVgdAndReport(cwd) {
   try {
-    const { vgdIsRunning, vgdRequest } = await import('./vgd-SBZO4ONQ.js');
+    const { vgdIsRunning, vgdRequest } = await import('./vgd-TW7HU2PH.js');
     if (!await vgdIsRunning()) return;
     const loaded = await vgdRequest({ op: "load-graph", root: cwd });
     if (!loaded.ok || !("stored" in loaded)) return;
@@ -11327,13 +11165,13 @@ function collectCandidates(artifact) {
   return out2;
 }
 var defaultFixScanner = async (rootDir) => {
-  const scratch = path46.join(os.tmpdir(), `vg-fix-scan-${process.pid}.json`);
+  const scratch = path45.join(os.tmpdir(), `vg-fix-scan-${process.pid}.json`);
   const scanOpts = { vibgrateVersion: VERSION, format: "json", out: scratch, quiet: true, concurrency: 8 };
   const advanced = await loadAdvancedScanHook();
   return runCoreScan(rootDir, scanOpts, advanced);
 };
 async function loadArtifact(rootDir, inFile, scan = defaultFixScanner) {
-  const artifactPath = path46.isAbsolute(inFile) ? inFile : path46.join(rootDir, inFile);
+  const artifactPath = path45.isAbsolute(inFile) ? inFile : path45.join(rootDir, inFile);
   if (await pathExists(artifactPath)) {
     const staleness = scanStaleness(rootDir, artifactPath);
     if (!staleness.stale) {
@@ -11360,7 +11198,7 @@ async function repositoryIdentity(rootDir, override) {
   }
 }
 var fixCommand = new Command("fix").description("Get ranked, risk-tiered upgrade plans from the hosted planner and optionally apply them (prompts before changing files; --yes applies non-interactively, --dry-run previews, --no-apply only prints). Requires login/DSN.").argument("[path]", "Path to analyse", ".").option("--in <file>", "Scan artifact to read", ".vibgrate/scan_result.json").option("--format <format>", "Output format (text|json|md)", "text").option("--dsn <dsn>", 'DSN token (or use VIBGRATE_DSN env / "vg login")').option("--region <region>", "Override data residency region (us, eu)").option("--repository-name <name>", "Override the repository name recorded for this plan").option("--plan <tier>", "Apply a specific plan non-interactively (safe|balanced|aggressive)").option("--yes", "Apply the recommended plan without prompting").option("--dry-run", "Preview the recommended plan (or --plan <tier>) without applying; never prompts").option("--no-apply", "Only print the plans; never modify the project").option("--fail-on-vulns <severity>", "Exit non-zero if the recommended plan leaves an advisory at/above this severity unresolved (low|moderate|high|critical)").action(async (targetPath, opts) => {
-  const rootDir = path46.resolve(targetPath);
+  const rootDir = path45.resolve(targetPath);
   if (!await pathExists(rootDir)) {
     console.error(chalk7.red(`Path does not exist: ${rootDir}`));
     process.exit(1);
@@ -11521,7 +11359,7 @@ function emit(report, format) {
   }
 }
 function relProjectDir(rootDir, projectPath) {
-  const rel = path46.isAbsolute(projectPath) ? path46.relative(rootDir, projectPath) : projectPath;
+  const rel = path45.isAbsolute(projectPath) ? path45.relative(rootDir, projectPath) : projectPath;
   return rel === "" ? "." : rel;
 }
 async function buildTargetResolver(rootDir, artifact) {
@@ -12404,7 +12242,7 @@ function formatMarkdown(artifact) {
 
 // src/reporting/commands/report.ts
 var reportCommand = new Command("report").description("Generate a drift report from a scan artifact").option("--in <file>", "Input artifact file", ".vibgrate/scan_result.json").option("--format <format>", "Output format (md|text|json)", "text").action(async (opts) => {
-  const artifactPath = path46.resolve(opts.in);
+  const artifactPath = path45.resolve(opts.in);
   if (!await pathExists(artifactPath)) {
     console.error(chalk7.red(`Artifact not found: ${artifactPath}`));
     console.error(chalk7.dim('Run "vibgrate scan" first to generate a scan artifact.'));
@@ -12453,8 +12291,8 @@ function openUrl(url) {
 // src/reporting/commands/login.ts
 var delay = (ms) => new Promise((resolve23) => setTimeout(resolve23, ms));
 function isInside(dir, file) {
-  const rel = path46.relative(dir, file);
-  return !!rel && !rel.startsWith("..") && !path46.isAbsolute(rel);
+  const rel = path45.relative(dir, file);
+  return !!rel && !rel.startsWith("..") && !path45.isAbsolute(rel);
 }
 var loginCommand = new Command("login").description("Authenticate the CLI with your Vibgrate workspace via the browser").option("--ingest <url>", "Ingest API URL (overrides --region)").option("--region <region>", `Data residency region (${availableRegionIds().join(", ")})`, "us").option("--no-browser", "Do not attempt to open a browser automatically").option(
   "--local",
@@ -12622,8 +12460,8 @@ var logoutCommand = new Command("logout").description("Clear stored Vibgrate log
 });
 
 // src/reporting/commands/locale/client.ts
-function buildUrl(scheme, host, path48, query) {
-  const url = new URL(`${scheme}://${host}/v1/locale${path48}`);
+function buildUrl(scheme, host, path47, query) {
+  const url = new URL(`${scheme}://${host}/v1/locale${path47}`);
   for (const [key2, value] of Object.entries(query ?? {})) {
     if (value !== void 0 && value !== "") url.searchParams.set(key2, String(value));
   }
@@ -12671,8 +12509,8 @@ function createLocaleClient(dsn) {
       ExitCode.ERROR
     );
   }
-  const request = async (method, path48, opts = {}) => {
-    const url = buildUrl(parsed.scheme, parsed.host, path48, opts.query);
+  const request = async (method, path47, opts = {}) => {
+    const url = buildUrl(parsed.scheme, parsed.host, path47, opts.query);
     const body = opts.body === void 0 ? void 0 : JSON.stringify(opts.body);
     const response = await fetch(url, {
       method,
@@ -12688,17 +12526,17 @@ function createLocaleClient(dsn) {
   };
   return {
     workspaceId: parsed.workspaceId,
-    get: (path48, query) => request("GET", path48, { query }),
-    post: (path48, body) => request("POST", path48, { body }),
-    patch: (path48, body) => request("PATCH", path48, { body }),
-    del: (path48, body) => request("DELETE", path48, { body })
+    get: (path47, query) => request("GET", path47, { query }),
+    post: (path47, body) => request("POST", path47, { body }),
+    patch: (path47, body) => request("PATCH", path47, { body }),
+    del: (path47, body) => request("DELETE", path47, { body })
   };
 }
 var LOCALE_CONFIG_FILENAMES = ["vibgrate.locale.yaml", ".vibgrate/locale.yaml"];
 function findLocaleConfig(cwd) {
   for (const name of LOCALE_CONFIG_FILENAMES) {
-    const candidate = path46.join(cwd, name);
-    if (fs13.existsSync(candidate)) return candidate;
+    const candidate = path45.join(cwd, name);
+    if (fs12.existsSync(candidate)) return candidate;
   }
   return null;
 }
@@ -12726,10 +12564,10 @@ function loadLocaleConfig(cwd) {
   const file = findLocaleConfig(cwd);
   if (!file) return { config: {}, file: null };
   try {
-    return { config: parseLocaleConfig(fs13.readFileSync(file, "utf8")), file };
+    return { config: parseLocaleConfig(fs12.readFileSync(file, "utf8")), file };
   } catch (error) {
     throw new Error(
-      `Could not parse ${path46.relative(cwd, file)}: ${error instanceof Error ? error.message : String(error)}`
+      `Could not parse ${path45.relative(cwd, file)}: ${error instanceof Error ? error.message : String(error)}`
     );
   }
 }
@@ -12744,9 +12582,9 @@ function serializeLocaleConfig(config) {
   return stringify(out2);
 }
 function writeLocaleConfig(cwd, config, filename) {
-  const target = filename ?? path46.join(cwd, LOCALE_CONFIG_FILENAMES[0]);
-  fs13.mkdirSync(path46.dirname(target), { recursive: true });
-  fs13.writeFileSync(target, serializeLocaleConfig(config), "utf8");
+  const target = filename ?? path45.join(cwd, LOCALE_CONFIG_FILENAMES[0]);
+  fs12.mkdirSync(path45.dirname(target), { recursive: true });
+  fs12.writeFileSync(target, serializeLocaleConfig(config), "utf8");
   return target;
 }
 function resolveLocaleSettings(config, flags) {
@@ -12887,7 +12725,7 @@ function validatePathTemplate(template) {
   if (!template.includes("{language}")) {
     return 'path template must contain {language} (e.g. "src/locales/{language}/{namespace}.json").';
   }
-  if (path46.isAbsolute(template)) {
+  if (path45.isAbsolute(template)) {
     return "path template must be relative to the project directory.";
   }
   if (template.split(/[\\/]/).includes("..")) {
@@ -12903,15 +12741,15 @@ function resolveLocaleFiles(cwd, template, languages, namespaces) {
   for (const language of languages) {
     for (const namespace of namespaces) {
       const relative13 = renderPath(template, language, namespace);
-      const file = path46.resolve(cwd, relative13);
-      out2.push({ language, namespace, file, relative: relative13, exists: fs13.existsSync(file) });
+      const file = path45.resolve(cwd, relative13);
+      out2.push({ language, namespace, file, relative: relative13, exists: fs12.existsSync(file) });
     }
   }
   return out2;
 }
 function readCatalog(file, format) {
-  if (!fs13.existsSync(file)) return {};
-  const text = fs13.readFileSync(file, "utf8");
+  if (!fs12.existsSync(file)) return {};
+  const text = fs12.readFileSync(file, "utf8");
   try {
     return codecFor(format).decode(text);
   } catch (error) {
@@ -12922,11 +12760,11 @@ function readCatalog(file, format) {
 }
 function writeCatalog(file, format, catalog, opts = {}) {
   const encoded = codecFor(format).encode(sortKeys(catalog));
-  const existing = fs13.existsSync(file) ? fs13.readFileSync(file, "utf8") : null;
+  const existing = fs12.existsSync(file) ? fs12.readFileSync(file, "utf8") : null;
   const changed = existing !== encoded;
   if (changed && !opts.dryRun) {
-    fs13.mkdirSync(path46.dirname(file), { recursive: true });
-    fs13.writeFileSync(file, encoded, "utf8");
+    fs12.mkdirSync(path45.dirname(file), { recursive: true });
+    fs12.writeFileSync(file, encoded, "utf8");
   }
   return { file, changed, bytes: Buffer.byteLength(encoded, "utf8") };
 }
@@ -12946,7 +12784,7 @@ function diffCatalogs(before, after) {
 // src/reporting/commands/locale/index.ts
 var cwdOption = ["-C, --cwd <dir>", "Run against this directory (default: current)"];
 function root(opts) {
-  return path46.resolve(opts.cwd ?? process.cwd());
+  return path45.resolve(opts.cwd ?? process.cwd());
 }
 function withCommonOptions(cmd) {
   return cmd.option(...cwdOption).option("--dsn <dsn>", 'DSN token (or use VIBGRATE_DSN, or run "vg login")').option("--project <slug>", "Locale project slug or id").option("--format <format>", `Locale file format (${SUPPORTED_FORMATS.join(", ")})`).option("--path <template>", "Path template, e.g. src/locales/{language}/{namespace}.json").option("--namespace <name>", "Restrict to one namespace").option("--language <code>", "Restrict to one BCP-47 language").option("--ver <version>", "Target version (default: latest)").option("--json", "Machine-readable output").option("-q, --quiet", "Suppress non-essential output");
@@ -13016,7 +12854,7 @@ var configCmd = withCommonOptions(
     if (!isSupportedFormat(next2.format)) codecFor(next2.format);
     const written = writeLocaleConfig(dir, next2, file ?? void 0);
     emit2(opts, { file: written, config: next2 }, () => {
-      console.log(chalk7.green(`Wrote ${path46.relative(dir, written) || path46.basename(written)}`));
+      console.log(chalk7.green(`Wrote ${path45.relative(dir, written) || path45.basename(written)}`));
       console.log(
         chalk7.dim('Credentials are not stored here \u2014 run "vg login" or set VIBGRATE_DSN.')
       );
@@ -13492,7 +13330,7 @@ var vexCommand = new Command("vex").description("Generate an OpenVEX document (e
   try {
     const statements = [];
     if (opts.from) {
-      const fromPath = path46.resolve(opts.from);
+      const fromPath = path45.resolve(opts.from);
       if (!await pathExists(fromPath)) {
         process.stderr.write(chalk7.red(`Statements file not found: ${fromPath}
 `));
@@ -13510,9 +13348,9 @@ var vexCommand = new Command("vex").description("Generate an OpenVEX document (e
     });
     const json2 = JSON.stringify(doc, null, 2);
     if (opts.out) {
-      await writeTextFile(path46.resolve(opts.out), json2 + "\n");
+      await writeTextFile(path45.resolve(opts.out), json2 + "\n");
       process.stderr.write(
-        chalk7.green("\u2714") + ` Wrote OpenVEX document (${doc.statements.length} statement(s)) to ${path46.resolve(opts.out)}
+        chalk7.green("\u2714") + ` Wrote OpenVEX document (${doc.statements.length} statement(s)) to ${path45.resolve(opts.out)}
 `
       );
     } else {
@@ -13695,7 +13533,7 @@ function formatDeltaText(base, current) {
   return lines.join("\n");
 }
 async function readArtifactOrExit(filePath) {
-  const absolutePath = path46.resolve(filePath);
+  const absolutePath = path45.resolve(filePath);
   if (!await pathExists(absolutePath)) {
     console.error(chalk7.red(`Artifact not found: ${absolutePath}`));
     process.exit(1);
@@ -13712,7 +13550,7 @@ var exportCommand = new Command("export").description("Export scan artifact as S
   const sbom = format === "cyclonedx" ? toCycloneDx(artifact) : toSpdx(artifact);
   const body = JSON.stringify(sbom, null, 2);
   if (opts.out) {
-    await writeTextFile(path46.resolve(opts.out), body);
+    await writeTextFile(path45.resolve(opts.out), body);
     console.log(chalk7.green("\u2714") + ` SBOM written to ${opts.out}`);
   } else {
     console.log(body);
@@ -13723,7 +13561,7 @@ var deltaCommand = new Command("delta").description("Show SBOM delta between two
   const current = await readArtifactOrExit(opts.to);
   const report = formatDeltaText(base, current);
   if (opts.out) {
-    await writeTextFile(path46.resolve(opts.out), report);
+    await writeTextFile(path45.resolve(opts.out), report);
     console.log(chalk7.green("\u2714") + ` SBOM delta report written to ${opts.out}`);
   } else {
     console.log(report);
@@ -13854,20 +13692,20 @@ function resolveRegime(id) {
   return regime;
 }
 function evidenceDir(root3) {
-  return path46.join(root3, ".vibgrate", "evidence");
+  return path45.join(root3, ".vibgrate", "evidence");
 }
 function orgPath(root3) {
-  return path46.join(evidenceDir(root3), "org.json");
+  return path45.join(evidenceDir(root3), "org.json");
 }
 function productsPath(root3) {
-  return path46.join(evidenceDir(root3), "products.json");
+  return path45.join(evidenceDir(root3), "products.json");
 }
 function releasesDir(root3) {
-  return path46.join(evidenceDir(root3), "releases");
+  return path45.join(evidenceDir(root3), "releases");
 }
 function releasePath(root3, productId, version) {
   const safe = `${productId}@${version}`.replace(/[^A-Za-z0-9._@-]/g, "_");
-  return path46.join(releasesDir(root3), `${safe}.json`);
+  return path45.join(releasesDir(root3), `${safe}.json`);
 }
 var DEFAULT_ORG = {
   responsiblePersons: [],
@@ -13898,7 +13736,7 @@ async function freezeRelease(root3, release) {
   const p = releasePath(root3, release.productId, release.version);
   if (await pathExists(p)) {
     throw new CliError(
-      `release ${release.productId}@${release.version} is already frozen and manifests are immutable \u2014 delete ${path46.relative(root3, p)} only if it was frozen in error`,
+      `release ${release.productId}@${release.version} is already frozen and manifests are immutable \u2014 delete ${path45.relative(root3, p)} only if it was frozen in error`,
       ExitCode.USAGE_ERROR
     );
   }
@@ -13912,7 +13750,7 @@ async function loadReleases(root3, productId) {
   const files = (await readdir(dir)).filter((f) => f.endsWith(".json")).sort();
   const releases = [];
   for (const f of files) {
-    const rel = await readJsonFile(path46.join(dir, f));
+    const rel = await readJsonFile(path45.join(dir, f));
     if (!productId || rel.productId === productId) releases.push(rel);
   }
   return releases;
@@ -14607,19 +14445,19 @@ function verifyEvidenceEnvelope(env, opts = {}) {
 var DEFAULT_KEY = "attest-key.pem";
 function resolveSigningKey(root3, explicit) {
   const chosen = process.env.VG_ATTEST_KEY;
-  const keyPath = chosen ? path46.resolve(chosen) : path46.join(root3, ".vibgrate", DEFAULT_KEY);
+  const keyPath = chosen ? path45.resolve(chosen) : path45.join(root3, ".vibgrate", DEFAULT_KEY);
   let minted = false;
-  if (!fs13.existsSync(keyPath)) {
+  if (!fs12.existsSync(keyPath)) {
     if (chosen) throw new CliError(`signing key not found: ${chosen}`, ExitCode.USAGE_ERROR);
     const kp = generateKeypair();
-    fs13.mkdirSync(path46.dirname(keyPath), { recursive: true });
-    fs13.writeFileSync(keyPath, kp.privatePem, { mode: 384 });
-    fs13.writeFileSync(`${keyPath}.pub`, kp.publicPem);
+    fs12.mkdirSync(path45.dirname(keyPath), { recursive: true });
+    fs12.writeFileSync(keyPath, kp.privatePem, { mode: 384 });
+    fs12.writeFileSync(`${keyPath}.pub`, kp.publicPem);
     minted = true;
   }
   let key2;
   try {
-    key2 = crypto3.createPrivateKey(fs13.readFileSync(keyPath, "utf8"));
+    key2 = crypto3.createPrivateKey(fs12.readFileSync(keyPath, "utf8"));
   } catch {
     throw new CliError(`could not read an Ed25519 private key from ${keyPath}`, ExitCode.USAGE_ERROR);
   }
@@ -14630,16 +14468,16 @@ function resolveSigningKey(root3, explicit) {
 }
 function writeBundle(input) {
   const dir = input.outDir;
-  fs13.mkdirSync(path46.join(dir, "inputs", "releases"), { recursive: true });
-  const write = (rel, data) => fs13.writeFileSync(path46.join(dir, rel), `${JSON.stringify(data, null, 2)}
+  fs12.mkdirSync(path45.join(dir, "inputs", "releases"), { recursive: true });
+  const write = (rel, data) => fs12.writeFileSync(path45.join(dir, rel), `${JSON.stringify(data, null, 2)}
 `);
   write("result.json", input.result);
-  write(path46.join("inputs", "advisory.json"), input.advisory);
+  write(path45.join("inputs", "advisory.json"), input.advisory);
   for (const rel of input.releases) {
     const safe = `${rel.productId}@${rel.version}`.replace(/[^A-Za-z0-9._@-]/g, "_");
-    write(path46.join("inputs", "releases", `${safe}.json`), rel);
+    write(path45.join("inputs", "releases", `${safe}.json`), rel);
   }
-  write(path46.join("inputs", "datapack.lock"), { dataPackVersion: input.result.meta.dataPackVersion, kernelVersion: input.result.meta.kernelVersion });
+  write(path45.join("inputs", "datapack.lock"), { dataPackVersion: input.result.meta.dataPackVersion, kernelVersion: input.result.meta.kernelVersion });
   write("provenance.json", {
     method: "deterministic",
     modelDrafted: [],
@@ -14655,13 +14493,13 @@ function writeBundle(input) {
     disclaimer: input.regime.disclaimer
   });
   if (input.envelope) {
-    fs13.writeFileSync(path46.join(dir, "evidence.intoto.jsonl"), `${JSON.stringify(input.envelope)}
+    fs12.writeFileSync(path45.join(dir, "evidence.intoto.jsonl"), `${JSON.stringify(input.envelope)}
 `);
   }
   if (input.timestampToken) {
-    fs13.writeFileSync(path46.join(dir, "timestamp.tsr"), input.timestampToken);
+    fs12.writeFileSync(path45.join(dir, "timestamp.tsr"), input.timestampToken);
   }
-  fs13.writeFileSync(path46.join(dir, "VERIFY.md"), verifyDoc(input));
+  fs12.writeFileSync(path45.join(dir, "VERIFY.md"), verifyDoc(input));
   return dir;
 }
 function verifyDoc(input) {
@@ -14722,13 +14560,13 @@ function undeterminedFields(result, regime) {
   return gaps.filter((g) => regime.submission.requires.some((r) => g.startsWith(r)) || g.startsWith("exposure") || g.startsWith("member"));
 }
 async function recordDrill(root3, record) {
-  const dir = path46.join(evidenceDir(root3), "drills");
-  const p = path46.join(dir, `${record.drillId}.json`);
+  const dir = path45.join(evidenceDir(root3), "drills");
+  const p = path45.join(dir, `${record.drillId}.json`);
   await writeJsonFile(p, record);
   return p;
 }
 async function hasRecentDrill(root3, asOf) {
-  const dir = path46.join(evidenceDir(root3), "drills");
+  const dir = path45.join(evidenceDir(root3), "drills");
   if (!await pathExists(dir)) return void 0;
   const { readdir } = await import('fs/promises');
   const { readJsonFile: readJsonFile2 } = await import('./fs-4G5A65KS.js');
@@ -14736,7 +14574,7 @@ async function hasRecentDrill(root3, asOf) {
   if (files.length === 0) return void 0;
   const cutoff = new Date(new Date(asOf).getTime() - 90 * 24 * 3600 * 1e3).toISOString();
   for (const f of files) {
-    const rec = await readJsonFile2(path46.join(dir, f));
+    const rec = await readJsonFile2(path45.join(dir, f));
     if (rec.ranAt >= cutoff) return true;
   }
   return false;
@@ -14816,7 +14654,7 @@ function formatRegimeList() {
 
 // src/reporting/commands/evidence/index.ts
 function root2(opts) {
-  return path46.resolve(opts.cwd ?? process.cwd());
+  return path45.resolve(opts.cwd ?? process.cwd());
 }
 function slug(name) {
   return name.trim().toLowerCase().replace(/[^a-z0-9]+/g, "-").replace(/^-+|-+$/g, "") || "product";
@@ -14904,7 +14742,7 @@ var releaseCmd = new Command("release").description("Freeze a shipped release in
   const release = await buildRelease({
     productId: product.id,
     version,
-    from: path46.resolve(rootDir, opts.from),
+    from: path45.resolve(rootDir, opts.from),
     shipDate: opts.shipDate,
     buildId: opts.buildId,
     artefactDigest: opts.digest,
@@ -14912,7 +14750,7 @@ var releaseCmd = new Command("release").description("Freeze a shipped release in
     frozenAt: nowIso()
   });
   const p = await freezeRelease(rootDir, release);
-  console.log(chalk7.green("\u2714") + ` froze ${chalk7.bold(`${product.id}@${version}`)} \u2014 ${release.components.length} components, immutable at ${path46.relative(rootDir, p)}`);
+  console.log(chalk7.green("\u2714") + ` froze ${chalk7.bold(`${product.id}@${version}`)} \u2014 ${release.components.length} components, immutable at ${path45.relative(rootDir, p)}`);
 });
 async function runExposure(rootDir, vuln, opts) {
   const org = await loadOrg(rootDir);
@@ -14964,7 +14802,7 @@ var exposureCmd = new Command("exposure").description("Which shipped products co
     console.log("\n" + buildPack(result, regime, org, stage));
   }
   if (opts.bundle) {
-    const dir = path46.resolve(rootDir, opts.bundle, `evidence-${result.meta.evidenceId}`);
+    const dir = path45.resolve(rootDir, opts.bundle, `evidence-${result.meta.evidenceId}`);
     let envelope;
     if (opts.sign !== false) {
       const { key: key2, minted } = resolveSigningKey(rootDir);
@@ -14972,7 +14810,7 @@ var exposureCmd = new Command("exposure").description("Which shipped products co
       envelope = signEvidenceStatement(buildEvidenceStatement(result, VERSION), key2);
     }
     writeBundle({ outDir: dir, result, advisory, releases, regime, envelope, timestampToken, cliVersion: VERSION });
-    console.error(chalk7.green("\u2714") + ` evidence bundle written to ${path46.relative(rootDir, dir)}${envelope ? " (signed)" : " (unsigned)"}${timestampToken ? " \xB7 RFC 3161" : ""}`);
+    console.error(chalk7.green("\u2714") + ` evidence bundle written to ${path45.relative(rootDir, dir)}${envelope ? " (signed)" : " (unsigned)"}${timestampToken ? " \xB7 RFC 3161" : ""}`);
   }
   process.exitCode = exposureExit(result.overallStatus);
 });
@@ -15004,7 +14842,7 @@ var packCmd = new Command("pack").description("Build the submission pack a human
   const stage = opts.stage ?? regime.clocks[0]?.stage ?? "early-warning";
   const md = buildPack(result, regime, org, stage);
   if (opts.out) {
-    fs13.writeFileSync(path46.resolve(rootDir, opts.out), md);
+    fs12.writeFileSync(path45.resolve(rootDir, opts.out), md);
     console.error(chalk7.green("\u2714") + ` pack written to ${opts.out}`);
   } else {
     console.log(md);
@@ -15046,20 +14884,20 @@ var drillCmd = new Command("drill").description("Timed dry-run of the determinat
   }
 });
 var verifyCmd = new Command("verify").description("Verify an evidence bundle offline (no Vibgrate needed)").argument("<bundle>", "Path to an evidence bundle directory or evidence.intoto.jsonl").option("--pub <file>", "Public key PEM to pin the signer (establish trust)").action((bundlePath, opts) => {
-  const abs = path46.resolve(bundlePath);
-  const envPath = fs13.statSync(abs).isDirectory() ? path46.join(abs, "evidence.intoto.jsonl") : abs;
-  if (!fs13.existsSync(envPath)) throw new CliError(`no evidence.intoto.jsonl at ${bundlePath}`, ExitCode.NOT_FOUND);
-  const envelope = JSON.parse(fs13.readFileSync(envPath, "utf8").trim().split("\n")[0]);
-  const resultPath = path46.join(path46.dirname(envPath), "result.json");
-  const result = fs13.existsSync(resultPath) ? JSON.parse(fs13.readFileSync(resultPath, "utf8")) : void 0;
-  const publicKeyPem = opts.pub ? fs13.readFileSync(path46.resolve(opts.pub), "utf8") : void 0;
+  const abs = path45.resolve(bundlePath);
+  const envPath = fs12.statSync(abs).isDirectory() ? path45.join(abs, "evidence.intoto.jsonl") : abs;
+  if (!fs12.existsSync(envPath)) throw new CliError(`no evidence.intoto.jsonl at ${bundlePath}`, ExitCode.NOT_FOUND);
+  const envelope = JSON.parse(fs12.readFileSync(envPath, "utf8").trim().split("\n")[0]);
+  const resultPath = path45.join(path45.dirname(envPath), "result.json");
+  const result = fs12.existsSync(resultPath) ? JSON.parse(fs12.readFileSync(resultPath, "utf8")) : void 0;
+  const publicKeyPem = opts.pub ? fs12.readFileSync(path45.resolve(opts.pub), "utf8") : void 0;
   const v = verifyEvidenceEnvelope(envelope, { publicKeyPem, result });
   const color = v.status === "verified" ? chalk7.green : v.status === "failed" ? chalk7.red : chalk7.yellow;
   console.log("  " + color(v.status.toUpperCase()) + `  ${v.reason}`);
   if (v.evidenceId) console.log("  " + chalk7.dim(`evidence ${v.evidenceId} \xB7 regime ${v.regime} \xB7 advisory ${v.advisoryId} \xB7 ${v.overallStatus}`));
-  const tsrPath = path46.join(path46.dirname(envPath), "timestamp.tsr");
-  if (fs13.existsSync(tsrPath) && result) {
-    const t = verifyTimestamp(fs13.readFileSync(tsrPath), exposureSubjectDigest(result));
+  const tsrPath = path45.join(path45.dirname(envPath), "timestamp.tsr");
+  if (fs12.existsSync(tsrPath) && result) {
+    const t = verifyTimestamp(fs12.readFileSync(tsrPath), exposureSubjectDigest(result));
     const tcolor = t.imprintMatches ? chalk7.green : chalk7.red;
     console.log("  " + tcolor("TIMESTAMP") + `  ${t.reason}`);
   }
@@ -15126,12 +14964,12 @@ var exportCmd = new Command("export").description("Air-gap bundle of all evidenc
   const releases = [];
   for (const list of releasesByProduct.values()) releases.push(...list);
   const report = computeReadiness({ regime, org, products, releasesByProduct, recentDrill: await hasRecentDrill(rootDir, today()) });
-  const dir = path46.resolve(rootDir, opts.out);
-  await writeJsonFile(path46.join(dir, "org.json"), org);
-  await writeJsonFile(path46.join(dir, "products.json"), products);
-  for (const r of releases) await writeJsonFile(path46.join(dir, "releases", `${r.productId}@${r.version}.json`.replace(/[^A-Za-z0-9._@-]/g, "_")), r);
-  await writeJsonFile(path46.join(dir, "readiness.json"), report);
-  console.error(chalk7.green("\u2714") + ` exported evidence state to ${path46.relative(rootDir, dir)} (${products.length} products, ${releases.length} frozen releases)`);
+  const dir = path45.resolve(rootDir, opts.out);
+  await writeJsonFile(path45.join(dir, "org.json"), org);
+  await writeJsonFile(path45.join(dir, "products.json"), products);
+  for (const r of releases) await writeJsonFile(path45.join(dir, "releases", `${r.productId}@${r.version}.json`.replace(/[^A-Za-z0-9._@-]/g, "_")), r);
+  await writeJsonFile(path45.join(dir, "readiness.json"), report);
+  console.error(chalk7.green("\u2714") + ` exported evidence state to ${path45.relative(rootDir, dir)} (${products.length} products, ${releases.length} frozen releases)`);
 });
 var pushCmd = new Command("push").description("Push the product registry (and an optional exposure result) to Vibgrate Cloud").option(...cwdOption2).option("--dsn <dsn>", "DSN token (or use VIBGRATE_DSN env / `vg login`)").option("--regime <id>", "Reporting regime").option("--result <file>", "An exposure result.json (or a bundle dir) to include").option("--signed", "Mark the included exposure result as signed").option("--strict", "Fail on push errors").action(async (opts) => {
   const rootDir = root2(opts);
@@ -15157,10 +14995,10 @@ var pushCmd = new Command("push").description("Push the product registry (and an
   }));
   let exposure;
   if (opts.result) {
-    const raw = path46.resolve(rootDir, opts.result);
-    const resultPath = fs13.existsSync(raw) && fs13.statSync(raw).isDirectory() ? path46.join(raw, "result.json") : raw;
-    if (!fs13.existsSync(resultPath)) throw new CliError(`no result.json at ${opts.result}`, ExitCode.NOT_FOUND);
-    exposure = JSON.parse(fs13.readFileSync(resultPath, "utf8"));
+    const raw = path45.resolve(rootDir, opts.result);
+    const resultPath = fs12.existsSync(raw) && fs12.statSync(raw).isDirectory() ? path45.join(raw, "result.json") : raw;
+    if (!fs12.existsSync(resultPath)) throw new CliError(`no result.json at ${opts.result}`, ExitCode.NOT_FOUND);
+    exposure = JSON.parse(fs12.readFileSync(resultPath, "utf8"));
   }
   const payload = { schemaVersion: "evidence-push-1", regime: regime.id, generatedAt: nowIso(), signed: Boolean(opts.signed), products: productPayload, exposure };
   const body = JSON.stringify(payload);
@@ -15359,7 +15197,7 @@ function dispatch(argv, cwd) {
   }
   const looksLikeQuestion = /\s/.test(first) || first.endsWith("?");
   if (looksLikeQuestion) return ["ask", ...args];
-  if (fs13.existsSync(path46.resolve(cwd, first))) {
+  if (fs12.existsSync(path45.resolve(cwd, first))) {
     return [hasBuildOnlyFlag(args) ? "build" : "scan", ...args];
   }
   const moved = MOVED_COMMANDS[first];
@@ -15386,6 +15224,7 @@ function findFirstPositional(args) {
 async function main(argv = process.argv) {
   const raw = argv.slice(2);
   if (process.env.NO_COLOR || raw.includes("--no-color")) disableColor();
+  if (!raw.includes("--local")) kickRelevanceReadiness();
   const cwd = readCwd(raw);
   const program = buildProgram();
   program.exitOverride((err) => {
@@ -15404,9 +15243,9 @@ async function main(argv = process.argv) {
 }
 function readCwd(raw) {
   const i = raw.findIndex((a) => a === "-C" || a === "--cwd");
-  if (i >= 0 && raw[i + 1]) return path46.resolve(raw[i + 1]);
+  if (i >= 0 && raw[i + 1]) return path45.resolve(raw[i + 1]);
   const eq = raw.find((a) => a.startsWith("--cwd="));
-  if (eq) return path46.resolve(eq.slice("--cwd=".length));
+  if (eq) return path45.resolve(eq.slice("--cwd=".length));
   return process.cwd();
 }
 function handleError(err) {