@vibgrate/cli 2026.819.3 → 2026.825.1

package/dist/{daemon-VMQKIIYP.js → daemon-WPX2SBVV.js}

@@ -1,7 +1,7 @@
-export { compareDaemonVersion, ensureVgd, ensureVgdSoft, registerDaemon, restartVgdIfRunning, retireWedgedVgd, startDetachedVgd, stopVgd, vgdCliVersion, vgdVersionSkew } from './chunk-3XMTRK24.js';
+export { compareDaemonVersion, ensureVgd, ensureVgdSoft, registerDaemon, restartVgdIfRunning, retireWedgedVgd, startDetachedVgd, stopVgd, vgdCliVersion, vgdVersionSkew } from './chunk-BCK2NIBM.js';
 import './chunk-YENM3HT7.js';
 import './chunk-CT5BS56U.js';
-import './chunk-CEJIX3O7.js';
+import './chunk-JSZ46IDG.js';
 import './chunk-3LOWJSAF.js';
 import './chunk-5HYCB55P.js';
 import './chunk-IS7VTH2Q.js';
@@ -11,20 +11,20 @@ import './chunk-EZ7UC5Y5.js';
 import './chunk-DBX3DL27.js';
 import './chunk-6BEBJCK4.js';
 import './chunk-J7LKEB2R.js';
-import './chunk-VEQA2FSM.js';
-import './chunk-ARGYMFST.js';
+import './chunk-LUJ4H4RJ.js';
+import './chunk-5BFA532E.js';
 import './chunk-VHRSG6CF.js';
 import './chunk-6H2QV5DR.js';
 import './chunk-RTURQXQL.js';
 import './chunk-6WRG7VDO.js';
-import './chunk-DMI4BMUL.js';
-import './chunk-C5AOLTQS.js';
+import './chunk-B5X246UH.js';
+import './chunk-FVBN4E5C.js';
 import './chunk-MVPRPSXU.js';
 import './chunk-O3LABX6I.js';
-import './chunk-MQJY4EQV.js';
+import './chunk-KFLNWYZG.js';
 import './chunk-XP6UUCZZ.js';
 import './chunk-JFGYT6BI.js';
 import './chunk-XQNKCA2J.js';
 import './chunk-Z6ZWNWWR.js';
-//# sourceMappingURL=daemon-VMQKIIYP.js.map
-//# sourceMappingURL=daemon-VMQKIIYP.js.map
+//# sourceMappingURL=daemon-WPX2SBVV.js.map
+//# sourceMappingURL=daemon-WPX2SBVV.js.map

package/dist/{daemon-VMQKIIYP.js.map → daemon-WPX2SBVV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"daemon-VMQKIIYP.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"daemon-WPX2SBVV.js"}

package/dist/embed-worker-main.js

@@ -1,8 +1,8 @@
-import { resolveEmbedModel, loadEmbedder } from './chunk-DMI4BMUL.js';
-import './chunk-C5AOLTQS.js';
+import { resolveEmbedModel, loadEmbedder } from './chunk-B5X246UH.js';
+import './chunk-FVBN4E5C.js';
 import './chunk-MVPRPSXU.js';
 import './chunk-O3LABX6I.js';
-import './chunk-MQJY4EQV.js';
+import './chunk-KFLNWYZG.js';
 import './chunk-XP6UUCZZ.js';
 import './chunk-JFGYT6BI.js';
 import './chunk-XQNKCA2J.js';

package/dist/{ensure-map-YIUJWMBK.js → ensure-map-MLI4XCRV.js}

@@ -1,40 +1,40 @@
-export { ensureCodeMap } from './chunk-5R4HYDTC.js';
-import './chunk-UP2BR6TV.js';
+export { ensureCodeMap } from './chunk-ECQFRZJI.js';
+import './chunk-X34HVFZ6.js';
 import './chunk-YENM3HT7.js';
 import './chunk-H5Q4JUY4.js';
 import './chunk-CT5BS56U.js';
-import './chunk-EXFA7QFC.js';
-import './chunk-XAS45W3G.js';
+import './chunk-UUVOA6WD.js';
+import './chunk-LKJIYGO5.js';
 import './chunk-HTLDXEHW.js';
 import './chunk-5UG4UHKU.js';
 import './chunk-VIWZ4QT7.js';
-import './chunk-HRYF4PWE.js';
+import './chunk-S3HMG6BC.js';
 import './chunk-WNKGRXUA.js';
 import './chunk-57ZRSCHY.js';
 import './chunk-MS6V5XKB.js';
-import './chunk-UEXDSWKN.js';
+import './chunk-GRMZU24V.js';
 import './chunk-PVNALGTG.js';
 import './chunk-CRAMOEBE.js';
 import './chunk-EZ7UC5Y5.js';
 import './chunk-A3WWRW7U.js';
 import './chunk-6BEBJCK4.js';
 import './chunk-J7LKEB2R.js';
-import './chunk-VEQA2FSM.js';
-import './chunk-ARGYMFST.js';
+import './chunk-LUJ4H4RJ.js';
+import './chunk-5BFA532E.js';
 import './chunk-VHRSG6CF.js';
 import './chunk-6H2QV5DR.js';
 import './chunk-RTURQXQL.js';
-import './chunk-WI66PODG.js';
+import './chunk-L3YEEJ6U.js';
 import './chunk-T7RSQ5WD.js';
 import './chunk-6WRG7VDO.js';
-import './chunk-DMI4BMUL.js';
-import './chunk-C5AOLTQS.js';
+import './chunk-B5X246UH.js';
+import './chunk-FVBN4E5C.js';
 import './chunk-MVPRPSXU.js';
 import './chunk-O3LABX6I.js';
-import './chunk-MQJY4EQV.js';
+import './chunk-KFLNWYZG.js';
 import './chunk-XP6UUCZZ.js';
 import './chunk-JFGYT6BI.js';
 import './chunk-XQNKCA2J.js';
 import './chunk-Z6ZWNWWR.js';
-//# sourceMappingURL=ensure-map-YIUJWMBK.js.map
-//# sourceMappingURL=ensure-map-YIUJWMBK.js.map
+//# sourceMappingURL=ensure-map-MLI4XCRV.js.map
+//# sourceMappingURL=ensure-map-MLI4XCRV.js.map

package/dist/{ensure-map-YIUJWMBK.js.map → ensure-map-MLI4XCRV.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"ensure-map-YIUJWMBK.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"ensure-map-MLI4XCRV.js"}

package/dist/{graph-backend-FDZUY4TR.js → graph-backend-LK5EFQXN.js}

@@ -1,16 +1,16 @@
-export { localGraphBackend, resolveGraphBackend, vgdGraphBackend } from './chunk-HB3SONYP.js';
+export { localGraphBackend, resolveGraphBackend, vgdGraphBackend } from './chunk-YIRDV4YJ.js';
 import './chunk-J7LKEB2R.js';
-import './chunk-VEQA2FSM.js';
+import './chunk-LUJ4H4RJ.js';
 import './chunk-VHRSG6CF.js';
 import './chunk-6H2QV5DR.js';
-import './chunk-DMI4BMUL.js';
-import './chunk-C5AOLTQS.js';
+import './chunk-B5X246UH.js';
+import './chunk-FVBN4E5C.js';
 import './chunk-MVPRPSXU.js';
 import './chunk-O3LABX6I.js';
-import './chunk-MQJY4EQV.js';
+import './chunk-KFLNWYZG.js';
 import './chunk-XP6UUCZZ.js';
 import './chunk-JFGYT6BI.js';
 import './chunk-XQNKCA2J.js';
 import './chunk-Z6ZWNWWR.js';
-//# sourceMappingURL=graph-backend-FDZUY4TR.js.map
-//# sourceMappingURL=graph-backend-FDZUY4TR.js.map
+//# sourceMappingURL=graph-backend-LK5EFQXN.js.map
+//# sourceMappingURL=graph-backend-LK5EFQXN.js.map

package/dist/{graph-backend-FDZUY4TR.js.map → graph-backend-LK5EFQXN.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"graph-backend-FDZUY4TR.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"graph-backend-LK5EFQXN.js"}

package/dist/index.d.ts

@@ -2,7 +2,7 @@ import { G as GraphNode, a as GraphEdge, A as Area, R as ResolverKind, V as VgGr
 export { e as AnalysisTier, C as Centrality, D as DerivedBy, f as EpistemicTier, g as FactConfidence, h as FactKind, i as GraphMeta, j as GraphSummaries, H as HubBlastSummary, N as NodeKind, P as Provenance, k as SUPPORTED_SCHEMA_VERSIONS, l as Span, m as SupportedSchemaVersion, T as Toolchain, U as Unknown } from './types-DHqH0XIE.js';
 import { Server } from '@modelcontextprotocol/sdk/server/index.js';
 
-declare const VERSION = "2026.819.3";
+declare const VERSION = "2026.825.1";
 
 /**
  * Analysis stage: importance, centrality, hubs, communities, and surprise.
@@ -572,119 +572,47 @@ type EmbedProgress = (done: number, total: number) => void;
  */
 declare function getNodeEmbeddings(graph: VgGraph, embedder: Embedder, root: string, onProgress?: EmbedProgress): Promise<Map<string, number[]>>;
 
-interface RelevanceExpansion {
-    /** Single lowercase word, ready for identifier-part matching. */
-    term: string;
-    /** The question token/phrase (or topic id) that produced it. */
-    from: string;
-    /** 0..1 relative confidence; scales the expansion's scoring contribution. */
-    weight: number;
-}
-interface RelevanceTopic {
-    id: string;
-    /** 0..1, normalized within one analysis. */
-    score: number;
-}
-/** One level of a matched taxonomy path, root-first. */
-interface RelevanceTaxonomyLevel {
+interface RankedSeed {
     id: string;
-    path: string;
-    /** 0..1 — never lower than the levels beneath it. */
-    score: number;
-    /** This level's own vocabulary. */
-    terms: string[];
-}
-/** A hierarchical match: the most specific node plus its ancestor chain. */
-interface RelevanceTaxonomyMatch {
-    /** "infrastructure/networking/dns/cname" */
-    path: string;
-    levels: RelevanceTaxonomyLevel[];
-    score: number;
-    /** Absolute evidence behind the match, not relative to other matches. */
-    evidence: number;
-    /** What matched — "~" prefixes a fuzzy repair. */
-    via: string[];
-    /** The matched node's OWN vocabulary, for explaining the domain. */
-    terms: string[];
-    /** Filenames and extensions this node's work lives in, nearest first. */
-    files: string[];
-    /** Standards governing this node, current revision first. */
-    standards: RelevanceStandard[];
-}
-/** A product the ask names, including through a misspelling. */
-interface RelevanceVendorMatch {
-    name: string;
-    from: string;
-    node?: string;
-    topic: string;
     score: number;
-    /** Filenames and extensions this vendor's configuration lives in. */
-    files: string[];
-}
-/** A standard governing the matched area, at the revision the pack tracks. */
-interface RelevanceStandard {
-    name: string;
-    publisher: string;
-    node: string;
-    /** "standard" or "regulation". */
-    kind: string;
-    /** Lowercase category slugs from the website's own vocabulary. */
-    categories: string[];
-}
-/** A misspelling the provider resolved. */
-interface RelevanceCorrection {
-    from: string;
-    to: string;
-    distance: number;
+    why: string;
 }
-interface RelevanceAnalysis {
+/** Sanitized module ranking, ready for `queryGraph({ ranked })`. */
+interface SanitizedRank {
     version: string;
-    topics: RelevanceTopic[];
-    expansions: RelevanceExpansion[];
-    /** Hierarchical matches, most specific first. Absent from older providers. */
-    taxonomy?: RelevanceTaxonomyMatch[];
-    vendors?: RelevanceVendorMatch[];
-    corrections?: RelevanceCorrection[];
-    /** Every file hint the analysis implies, most specific first. */
-    files?: string[];
-    /** Standards governing what the ask is about, most specific node first. */
-    standards?: RelevanceStandard[];
-    /** Deduped lowercase category slugs across those standards. */
-    categories?: string[];
+    hasContent: boolean;
+    seeds: RankedSeed[];
+    conceptMap: string[];
 }
 
 /**
- * Deterministic retrieval for `vg ask` (VG-CLI-SPEC §3.2).
+ * Retrieval front-end for `vg ask` / `vg code` capsule seeds (VG-CLI-SPEC
+ * §3.2).
+ *
+ * Since the 2026-08 relevance relocation, the RANKING ENGINE lives in the
+ * optional relevance module (`@vibgrate/relevance`, auto-provisioned): the
+ * async callers run the ask through the module via
+ * `relevance-provider.rankQuestion` and pass the SANITIZED result in as
+ * `options.ranked`. This file keeps only what is mechanical:
  *
- * Builds a structured, fact-annotated, budget-bounded context block for a
- * question — designed to drop straight into an assistant's context. The default
- * is deterministic lexical+structural retrieval: identifier/term matching with
- * morphological prefix-fuzzing, term-role weighting (process verbs like "add"
- * only corroborate, never seed — see engine/concepts.ts), static concept
- * expansion ("payments" → stripe/billing/…, "direct debit" → sepa/bacs/mandate),
- * and a multi-term coverage bonus, ranked with importance as a mild tiebreaker.
- * `--semantic`/`--deep` adds
- * a hybrid local-embedding pass (`queryGraphSemantic`) that surfaces conceptually
- * related code even when no word is shared — still no API key.
+ *  - literal string/URL needle handling (the locate path — exact-text
+ *    matching, not relevance);
+ *  - a deliberately dumb module-less fallback: exact identifier-name and
+ *    name-part matching, nothing that understands language (no lexicon, no
+ *    term roles, no IDF, no typo repair, no expansion) — enough that an ask
+ *    NAMING a symbol still pins its file when the module is unavailable;
+ *  - context-block rendering and the semantic Reciprocal Rank Fusion
+ *    plumbing (`--semantic`), which fuses ORDERINGS and carries no ranking
+ *    heuristics of its own.
  */
 interface QueryOptions {
     budget?: number;
     limit?: number;
-    /** Optional pre-computed relevance analysis (engine/relevance-provider.ts).
-     *  Injected by async callers so this module stays pure and sync; when
-     *  absent, ranking is exactly the built-in lexicon path. */
-    relevance?: RelevanceAnalysis | null;
-    /** Optional per-node topic tags (engine/relevance-enrich.ts). Combined with
-     *  `relevance.topics` into a bounded affinity bonus: a node structurally
-     *  tagged with a topic the question is about ranks above an equal textual
-     *  match outside it. Never seeds alone — it multiplies existing evidence. */
-    topicTags?: Map<string, readonly string[]> | null;
-    /** Previous conversational ask (multi-turn `vg code`). Its content terms —
-     *  never its process verbs — join ranking at a damped weight (CARRY_WEIGHT)
-     *  so a follow-up like "can we use direct debits?" keeps the prior turn's
-     *  topic ("where is stripe used?") instead of ranking the repo on the
-     *  follow-up's words alone. Absent → behaviour is unchanged. */
-    priorQuestion?: string | null;
+    /** Sanitized module ranking (engine/relevance-provider.ts rankQuestion),
+     *  injected by async callers so this module stays pure and sync. When
+     *  absent — module not installed, predates the ranking API, or failed —
+     *  the mechanical fallback below answers. */
+    ranked?: SanitizedRank | null;
 }
 interface QueryMatch {
     node: GraphNode;
@@ -719,22 +647,21 @@ interface SemanticQueryOptions extends QueryOptions {
     }>;
 }
 /**
- * Hybrid lexical + local-embedding retrieval, combined with Reciprocal Rank
- * Fusion (Phase 3.2 — replaces the former 50/50 score blend), so a question
- * like "where do we handle auth failures?" can surface `verify_token` even
- * with no shared identifier. Topic affinity and importance stay multiplicative
- * tiebreakers on the fused score. Deterministic given the same model + cached
- * vectors; embeddings live in a binary sidecar next to the map, never in `graph.json`.
+ * Hybrid retrieval, combined with Reciprocal Rank Fusion: the module ranking
+ * (or the mechanical fallback) is one arm, the local-embedding pass the
+ * other, so a question like "where do we handle auth failures?" can surface
+ * `verify_token` even with no shared word. Deterministic given the same
+ * model + cached vectors; embeddings live in a binary sidecar next to the
+ * map, never in `graph.json`.
  */
 declare function queryGraphSemantic(graph: VgGraph, question: string, options: SemanticQueryOptions): Promise<QueryResult>;
 /**
- * camelCase / snake_case / kebab split of an identifier → lowercased parts.
- * The separator alternative is Unicode-letter-aware (`\p{L}\p{N}`, not
- * ASCII-only `a-zA-Z0-9`) so non-Latin identifiers split on punctuation
- * without losing every character to it; the camelCase boundary lookaround
- * stays ASCII-only since upper/lowercase casing is itself an ASCII-script
- * concept — scripts without case simply never trigger it and fall through to
- * the separator split.
+ * camelCase / snake_case / kebab / letter↔digit split of an identifier →
+ * lowercased parts. The separator alternative is Unicode-letter-aware
+ * (`\p{L}\p{N}`, not ASCII-only) so non-Latin identifiers split on
+ * punctuation without losing every character to it; the camelCase boundary
+ * lookaround stays ASCII-only since casing is itself an ASCII-script concept.
+ * Letter↔digit boundaries split too, so `Session2` keeps `session` reachable.
  */
 declare function identifierParts(name: string): Set<string>;
 
@@ -2169,6 +2096,11 @@ declare function redactGraph(graph: VgGraph): VgGraph;
  */
 declare function grammarsSourceDir(): string | null;
 
+declare function moduleInstalled(): {
+    installed: boolean;
+    version?: string;
+};
+
 /** The graph-grounded context handed to the model, plus what fed it. */
 interface CodeContext {
     instruction: string;
@@ -2217,16 +2149,11 @@ interface BuildContextOptions {
     impactDepth?: number;
     /** Restrict the edit surface to these files (from `--file`), if given. */
     files?: string[];
-    /** Optional pre-computed relevance analysis (engine/relevance-provider.ts),
-     *  loaded by the async caller; widens seed vocabulary deterministically. */
-    relevance?: RelevanceAnalysis | null;
-    /** Optional per-node topic tags (engine/relevance-enrich.ts). */
-    topicTags?: Map<string, readonly string[]> | null;
-    /** The previous conversational ask (multi-turn `vg code`). Its content
-     *  terms join seed ranking at a damped weight so follow-ups ("do we
-     *  support direct debits?" after "where is stripe used?") stay anchored to
-     *  the conversation's topic. Absent → single-turn behaviour, unchanged. */
-    priorInstruction?: string | null;
+    /** Sanitized module ranking (engine/relevance-provider.ts rankQuestion),
+     *  computed by the async caller over the user's ask — carries the seed
+     *  ordering AND the plain-language concept map. Absent → the mechanical
+     *  fallback ranks and the concept map is empty. */
+    ranked?: SanitizedRank | null;
 }
 /**
  * Build the context block for a coding instruction. The ordering is
@@ -2238,10 +2165,10 @@ interface BuildContextOptions {
 declare function buildCodeContext(graph: VgGraph, instruction: string, options?: BuildContextOptions): CodeContext;
 
 /**
- * Source-bearing Task Capsule compiler (Fusion Runtime Phase 0).
+ * Source-bearing Context Capsule compiler (Fusion Runtime Phase 0).
  *
  * Today's {@link buildCodeContext} pays for graph metadata, then the model still
- * calls `read_file` — double payment. This module compiles a Task Capsule that
+ * calls `read_file` — double payment. This module compiles a Context Capsule that
  * includes exact source ranges (from Tree-sitter spans already on graph nodes)
  * so the first inference can solve without navigation tool calls (ZNS@1 path).
  *
@@ -2255,8 +2182,7 @@ declare const TASK_CAPSULE_SCHEMA_VERSION: "task-capsule/0";
 /** Frozen ranking policy id — bump when the heuristic changes (benchmark gate). */
 /** Bumped 2026.07.1: strip URL/quoted needles from seed ranking (no path-token false positives). */
 /** Bumped 2026.08.1: term roles (weak process verbs never seed alone), concept/bigram
- *  expansion (payments→stripe, "direct debit"→sepa/bacs/mandate), multi-term coverage
- *  bonus, directory-segment evidence — gated by the ask-quality corpus (bench/ask-corpus.mjs). */
+ *  expansion, multi-term coverage bonus, directory-segment evidence. */
 /** Bumped 2026.08.2: optional relevance-provider seam — sanitized provider expansions
  *  join term preparation (own 0..1 weight capped at EXPANSION_WEIGHT; weak-provenance
  *  dropped); provider version recorded as `relevanceVersion` provenance. Absent
@@ -2268,7 +2194,14 @@ declare const TASK_CAPSULE_SCHEMA_VERSION: "task-capsule/0";
  *  CARRY_WEIGHT when the caller passes `priorInstruction`. (c) A plain-language
  *  "how the ask was interpreted" concept map is rendered for small local models.
  *  No prior instruction + no bigram ask = 2026.08.2 behaviour exactly. */
-declare const CAPSULE_RANKING_VERSION: "capsule-rank@2026.08.3";
+/** Bumped 2026.08.4: relevance relocation — the ranking engine (lexicon, term
+ *  roles, IDF, tiers, typo repair, morphology, diversification, concept map)
+ *  moved into the auto-provisioned relevance module behind the seam's
+ *  rankSymbols API; the host keeps mechanical name matching as the
+ *  module-less fallback. Seed content with the module active matches
+ *  2026.08.3 + the coding-prompt-corpus improvements; the recorded
+ *  relevanceVersion says which engine ranked this capsule. */
+declare const CAPSULE_RANKING_VERSION: "capsule-rank@2026.08.4";
 declare const CAPSULE_COMPILER_ID: "vg-task-capsule/0";
 interface BuildCapsuleOptions extends BuildContextOptions {
     /**
@@ -2365,23 +2298,31 @@ interface CapsuleSummary {
         qualifiedName: string;
         file: string;
         kind: string;
+        why: string;
     }>;
     supporting: Array<{
         qualifiedName: string;
         file: string;
         kind: string;
+        why: string;
     }>;
     sourceSliceCount: number;
     sourceFiles: string[];
     tokensEstimate: number;
     rankingVersion: string;
+    /**
+     * How the ask was interpreted, ready to show a human: the capsule's concept
+     * map with the model-facing seed-notation legend dropped and the leading
+     * "- " bullet stripped. Empty when no relevance engine widened the ask.
+     */
+    interpretation: string[];
     /** Truncated rendered capsule for display (not the full prompt dump). */
     preview: string;
 }
 /** Host-safe capsule summary (capsule transparency UI / stream-json). */
 declare function summarizeCapsule(capsule: TaskCapsule): CapsuleSummary;
 /**
- * Compile a source-bearing Task Capsule. Reuses the same seed / impact /
+ * Compile a source-bearing Context Capsule. Reuses the same seed / impact /
  * fact-pinning path as {@link buildCodeContext}, then attaches exact source
  * slices and a verification sketch.
  */
@@ -2392,6 +2333,48 @@ declare function buildTaskCapsule(graph: VgGraph, instruction: string, options?:
  */
 declare function capsuleToCodeContext(capsule: TaskCapsule): CodeContext;
 
+/**
+ * Whether to send a ranked Context Capsule, paste the mapped tree, or send
+ * neither. Independent of Model Execution Profiles (those describe how a
+ * local model is run). Mass × greppability, not file count.
+ *
+ * See docs/graph/VG-CAPSULE-SMALL-REPO-DISABLE.md.
+ */
+
+type CapsuleMode = 'off' | 'whole-repo' | 'compile';
+/** Trees this small are cheaper to paste (or grep) than to rank. */
+declare const WHOLE_REPO_MAX_SOURCE_TOKENS = 1500;
+/** Above this, discovery has a real bill — always compile. */
+declare const COMPILE_MIN_SOURCE_TOKENS = 8000;
+/** Unique mapped paths from the graph, stable order. */
+declare function mappedFilePaths(graph: VgGraph): string[];
+declare function sourceTokenMass(contents: Iterable<string>): number;
+/**
+ * True when the mechanical fallback would pin an identifier the ask actually
+ * names (F0/F1). Does not use the relevance module.
+ */
+declare function askNamesSymbol(graph: VgGraph, instruction: string): boolean;
+declare function capsuleMode(input: {
+    sourceTokens: number;
+    askNamesSymbol: boolean;
+}): CapsuleMode;
+interface WholeRepoFile {
+    path: string;
+    content: string;
+}
+interface WholeRepoPacket {
+    rendered: string;
+    tokensEstimate: number;
+    files: string[];
+    sourceTokens: number;
+}
+/**
+ * First-turn packet = the mapped files, not a ranked dump. Files are sorted
+ * by path. `budget` caps the paste (default {@link WHOLE_REPO_MAX_SOURCE_TOKENS});
+ * at least one file is always included when any exist.
+ */
+declare function buildWholeRepoPacket(instruction: string, files: WholeRepoFile[], budget?: number): WholeRepoPacket;
+
 /**
  * `search_symbols` — the hybrid flashlight next to the map
  * (docs/graph/VG-GRAPH-OPTIMIZATION-PLAN.md P1).
@@ -2441,4 +2424,4 @@ interface SearchResult {
 }
 declare function searchSymbols(graph: VgGraph, root: string, query: string, limit: number): Promise<SearchResult>;
 
-export { ASSISTANTS, type AnalyzeOptions, type AnalyzeResult, Area, type Assistant, type BuildCapsuleOptions, type BuildContextOptions, type BuildOptions, type BuildResult, type BuildScope, CAPSULE_COMPILER_ID, CAPSULE_RANKING_VERSION, type CapsuleSummary, type CapsuleSymbolRef, type ClusterMode, type DepRecord, type DiscoverOptions, type DiscoveredFile, type Drift, type DriftInventory, type DriftNote, EdgeKind, type Embedder, type ExportContext, type ExportFormat, FREE_PACK, Fact, FileParse, GraphEdge, GraphIndex, GraphNode, GraphSource, type GraphUploadEnvelope, GroundingEdge, GroundingKind, type ImpactItem, type ImpactResult, type KnowledgePack, LANGUAGES, type LanguageDef, type LibCatalog, type LibEntry, type LibSource, type LoadEmbedderOptions, type LocalModel, type ModuleResolver, type PackEntry, type PathResult, type ProbeResult, type QueryMatch, type QueryOptions, type QueryResult, type RefreshOptions, type RefreshOutcome, ResolverKind, ResourceLimitError, type ResourceLimits, SCHEMA_VERSION, SKIP_DIRS, SKIP_FILES, type SavingsReport, type ScipDocument, type ScipIndex, type ScipOccurrence, type SearchResult, type SemanticQueryOptions, type ServeOptions, type SourceSlice, type SymbolHit, TASK_CAPSULE_SCHEMA_VERSION, TOOLS, type TaskCapsule, type TextHit, UsageError, VERSION, type VerifyResult, VgGraph, type VgTool, type WriteOptions, type WrittenArtifacts, addLibrary, allLanguageIds, analyze, applyCoverage, applyStaticTestLinkage, assistantById, buildCodeContext, buildEnvelope, buildFacts, buildGraph, buildModuleResolver, buildTaskCapsule, capsuleToCodeContext, cosine, coveringTests, createServer, decodeScipIndex, defaultGraphPath, inventory as dependencyInventory, detectRunner, discover, discoverModels, driftCount, driftFor, embeddingsCached, embeddingsPath, embeddingsPathFor, enrichOnline, exportGraph, findNodes, formatForExt, getNodeEmbeddings, grammarsSourceDir, groundGraph, hasDrift, identifierParts, impactOf, installAssistant, isTestFile, langById, langForExtension, legacyGraphPath, libId, loadCatalog, loadCoverage, loadEmbedder, loadGraph, loadSnapshot, nodeById, nodeEmbedText, parseGraph, parseJsonc, parseSource, preferInRepoGraph, probeFreshness, queryGraph, queryGraphSemantic, readDoc, readSavings, recordSaving, redactGraph, refreshIfStale, relativeResolver, renderHtml, renderReport, resolveGraphPath, resolveLib, resolveLimits, resolveOne, saveCatalog, savingsRecorded, scipEdges, searchSymbols, serializeGraph, serveStdio, shortestPath, stableStringify, summarizeCapsule, testsToRun, uninstallAssistant, verifyDeterminism, vibgrateDir, writeArtifacts, writeSnapshot };
+export { ASSISTANTS, type AnalyzeOptions, type AnalyzeResult, Area, type Assistant, type BuildCapsuleOptions, type BuildContextOptions, type BuildOptions, type BuildResult, type BuildScope, CAPSULE_COMPILER_ID, CAPSULE_RANKING_VERSION, COMPILE_MIN_SOURCE_TOKENS, type CapsuleMode, type CapsuleSummary, type CapsuleSymbolRef, type ClusterMode, type DepRecord, type DiscoverOptions, type DiscoveredFile, type Drift, type DriftInventory, type DriftNote, EdgeKind, type Embedder, type ExportContext, type ExportFormat, FREE_PACK, Fact, FileParse, GraphEdge, GraphIndex, GraphNode, GraphSource, type GraphUploadEnvelope, GroundingEdge, GroundingKind, type ImpactItem, type ImpactResult, type KnowledgePack, LANGUAGES, type LanguageDef, type LibCatalog, type LibEntry, type LibSource, type LoadEmbedderOptions, type LocalModel, type ModuleResolver, type PackEntry, type PathResult, type ProbeResult, type QueryMatch, type QueryOptions, type QueryResult, type RefreshOptions, type RefreshOutcome, ResolverKind, ResourceLimitError, type ResourceLimits, SCHEMA_VERSION, SKIP_DIRS, SKIP_FILES, type SavingsReport, type ScipDocument, type ScipIndex, type ScipOccurrence, type SearchResult, type SemanticQueryOptions, type ServeOptions, type SourceSlice, type SymbolHit, TASK_CAPSULE_SCHEMA_VERSION, TOOLS, type TaskCapsule, type TextHit, UsageError, VERSION, type VerifyResult, VgGraph, type VgTool, WHOLE_REPO_MAX_SOURCE_TOKENS, type WholeRepoFile, type WholeRepoPacket, type WriteOptions, type WrittenArtifacts, addLibrary, allLanguageIds, analyze, applyCoverage, applyStaticTestLinkage, askNamesSymbol, assistantById, buildCodeContext, buildEnvelope, buildFacts, buildGraph, buildModuleResolver, buildTaskCapsule, buildWholeRepoPacket, capsuleMode, capsuleToCodeContext, cosine, coveringTests, createServer, decodeScipIndex, defaultGraphPath, inventory as dependencyInventory, detectRunner, discover, discoverModels, driftCount, driftFor, embeddingsCached, embeddingsPath, embeddingsPathFor, enrichOnline, exportGraph, findNodes, formatForExt, getNodeEmbeddings, grammarsSourceDir, groundGraph, hasDrift, identifierParts, impactOf, installAssistant, isTestFile, langById, langForExtension, legacyGraphPath, libId, loadCatalog, loadCoverage, loadEmbedder, loadGraph, loadSnapshot, mappedFilePaths, nodeById, nodeEmbedText, parseGraph, parseJsonc, parseSource, preferInRepoGraph, probeFreshness, queryGraph, queryGraphSemantic, readDoc, readSavings, recordSaving, redactGraph, refreshIfStale, relativeResolver, moduleInstalled as relevanceModuleInstalled, renderHtml, renderReport, resolveGraphPath, resolveLib, resolveLimits, resolveOne, saveCatalog, savingsRecorded, scipEdges, searchSymbols, serializeGraph, serveStdio, shortestPath, sourceTokenMass, stableStringify, summarizeCapsule, testsToRun, uninstallAssistant, verifyDeterminism, vibgrateDir, writeArtifacts, writeSnapshot };

package/dist/index.js

@@ -1,16 +1,17 @@
-export { GraphSource, createServer, exportGraph, formatForExt, serveStdio } from './chunk-QOU2Q5L4.js';
-export { refreshIfStale } from './chunk-TD4JAEMH.js';
-export { ASSISTANTS, ResourceLimitError, analyze, applyCoverage, assistantById, buildFacts, buildGraph, decodeScipIndex, driftCount, groundGraph, hasDrift, installAssistant, loadCoverage, loadSnapshot, probeFreshness, resolveLimits, scipEdges, uninstallAssistant, verifyDeterminism, writeSnapshot } from './chunk-EXFA7QFC.js';
-export { FREE_PACK, TOOLS, coveringTests, detectRunner, shortestPath, testsToRun } from './chunk-XAS45W3G.js';
+export { GraphSource, createServer, exportGraph, formatForExt, moduleInstalled as relevanceModuleInstalled, serveStdio } from './chunk-TLYNLQL2.js';
+export { refreshIfStale } from './chunk-4PCFSRYH.js';
+export { ASSISTANTS, ResourceLimitError, analyze, applyCoverage, assistantById, buildFacts, buildGraph, decodeScipIndex, driftCount, groundGraph, hasDrift, installAssistant, loadCoverage, loadSnapshot, probeFreshness, resolveLimits, scipEdges, uninstallAssistant, verifyDeterminism, writeSnapshot } from './chunk-UUVOA6WD.js';
+export { FREE_PACK, TOOLS, coveringTests, detectRunner, shortestPath, testsToRun } from './chunk-LKJIYGO5.js';
 import './chunk-HTLDXEHW.js';
 import './chunk-5UG4UHKU.js';
+export { COMPILE_MIN_SOURCE_TOKENS, WHOLE_REPO_MAX_SOURCE_TOKENS, askNamesSymbol, buildWholeRepoPacket, capsuleMode, mappedFilePaths, sourceTokenMass } from './chunk-YP243ZKD.js';
 export { applyStaticTestLinkage, buildModuleResolver, isTestFile, parseJsonc, relativeResolver } from './chunk-VIWZ4QT7.js';
-export { addLibrary, driftFor, libId, loadCatalog, readDoc, resolveLib, saveCatalog, searchSymbols } from './chunk-HRYF4PWE.js';
-export { CAPSULE_COMPILER_ID, CAPSULE_RANKING_VERSION, TASK_CAPSULE_SCHEMA_VERSION, buildCodeContext, buildTaskCapsule, capsuleToCodeContext, readSavings, recordSaving, savingsRecorded, summarizeCapsule } from './chunk-UAPA5AHX.js';
+export { addLibrary, driftFor, libId, loadCatalog, readDoc, resolveLib, saveCatalog, searchSymbols } from './chunk-S3HMG6BC.js';
+export { CAPSULE_COMPILER_ID, CAPSULE_RANKING_VERSION, TASK_CAPSULE_SCHEMA_VERSION, buildCodeContext, buildTaskCapsule, capsuleToCodeContext, readSavings, recordSaving, savingsRecorded, summarizeCapsule } from './chunk-6VLOI2ZP.js';
 export { discoverModels } from './chunk-WNKGRXUA.js';
 import './chunk-57ZRSCHY.js';
 import './chunk-MS6V5XKB.js';
-import './chunk-UEXDSWKN.js';
+import './chunk-GRMZU24V.js';
 import './chunk-PVNALGTG.js';
 import './chunk-CRAMOEBE.js';
 import './chunk-5IQBIXHS.js';
@@ -19,20 +20,20 @@ import './chunk-A3WWRW7U.js';
 import './chunk-DBX3DL27.js';
 export { inventory as dependencyInventory, enrichOnline } from './chunk-6BEBJCK4.js';
 export { findNodes, nodeById, resolveOne } from './chunk-J7LKEB2R.js';
-export { GraphIndex, identifierParts, impactOf, queryGraph, queryGraphSemantic } from './chunk-VEQA2FSM.js';
-import { SCHEMA_VERSION } from './chunk-ARGYMFST.js';
-export { SCHEMA_VERSION, SUPPORTED_SCHEMA_VERSIONS, loadGraph } from './chunk-ARGYMFST.js';
+export { GraphIndex, identifierParts, impactOf, queryGraph, queryGraphSemantic } from './chunk-LUJ4H4RJ.js';
+import { SCHEMA_VERSION } from './chunk-5BFA532E.js';
+export { SCHEMA_VERSION, SUPPORTED_SCHEMA_VERSIONS, loadGraph } from './chunk-5BFA532E.js';
 import './chunk-VHRSG6CF.js';
 import './chunk-6H2QV5DR.js';
 export { SKIP_DIRS, SKIP_FILES, UsageError, discover } from './chunk-RTURQXQL.js';
-export { grammarsSourceDir, parseSource } from './chunk-WI66PODG.js';
+export { grammarsSourceDir, parseSource } from './chunk-L3YEEJ6U.js';
 import { redactUrlCredentials, redactSecrets } from './chunk-T7RSQ5WD.js';
 export { LANGUAGES, allLanguageIds, langById, langForExtension } from './chunk-6WRG7VDO.js';
-export { cosine, embeddingsCached, embeddingsPath, embeddingsPathFor, getNodeEmbeddings, loadEmbedder, nodeEmbedText } from './chunk-DMI4BMUL.js';
-export { defaultGraphPath, legacyGraphPath, preferInRepoGraph, renderHtml, renderReport, resolveGraphPath, vibgrateDir, writeArtifacts } from './chunk-C5AOLTQS.js';
+export { cosine, embeddingsCached, embeddingsPath, embeddingsPathFor, getNodeEmbeddings, loadEmbedder, nodeEmbedText } from './chunk-B5X246UH.js';
+export { defaultGraphPath, legacyGraphPath, preferInRepoGraph, renderHtml, renderReport, resolveGraphPath, vibgrateDir, writeArtifacts } from './chunk-FVBN4E5C.js';
 import './chunk-MVPRPSXU.js';
 export { parseGraph, serializeGraph, stableStringify } from './chunk-O3LABX6I.js';
-export { VERSION } from './chunk-MQJY4EQV.js';
+export { VERSION } from './chunk-KFLNWYZG.js';
 import './chunk-XP6UUCZZ.js';
 import './chunk-JFGYT6BI.js';
 import './chunk-XQNKCA2J.js';

package/dist/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/engine/push.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBO,SAAS,aAAA,CAAc,IAAA,EAAc,KAAA,EAAgB,YAAA,EAA4C;AACtG,EAAA,MAAM,MAAM,GAAA,CAAI,IAAA,EAAM,CAAC,WAAA,EAAa,MAAM,CAAC,CAAA,IAAK,0CAAA;AAChD,EAAA,MAAM,MAAA,GAAS,IAAI,IAAA,EAAM,CAAC,aAAa,cAAA,EAAgB,MAAM,CAAC,CAAA,IAAK,MAAA;AACnE,EAAA,MAAM,SAAA,GAAY,IAAI,IAAA,EAAM,CAAC,UAAU,OAAA,EAAS,mBAAmB,CAAC,CAAA,IAAK,MAAA;AACzE,EAAA,OAAO;AAAA,IACL,aAAA,EAAe,cAAA;AAAA,IACf,YAAA,EAAc,OAAA;AAAA,IACd,YAAA;AAAA,IACA,GAAA,EAAK,EAAE,GAAA,EAAK,QAAA,EAAU,IAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,EAAG,MAAA,EAAO;AAAA,IAC/C,YAAY,SAAA,GAAY,EAAE,WAAW,oBAAA,CAAqB,SAAS,GAAE,GAAI,MAAA;AAAA,IACzE,aAAa,KAAA,CAAM,WAAA;AAAA,IACnB,KAAA,EAAO,YAAY,KAAK;AAAA,GAC1B;AACF;AAOO,SAAS,YAAY,KAAA,EAAyB;AACnD,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,KAAA,EAAO,KAAA,CAAM,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM;AAC5B,MAAA,MAAM,YAAY,CAAA,CAAE,SAAA,GAAY,cAAc,CAAA,CAAE,SAAS,IAAI,CAAA,CAAE,SAAA;AAC/D,MAAA,MAAM,MAAM,CAAA,CAAE,GAAA,GAAM,cAAc,CAAA,CAAE,GAAG,IAAI,CAAA,CAAE,GAAA;AAC7C,MAAA,OAAO,SAAA,KAAc,CAAA,CAAE,SAAA,IAAa,GAAA,KAAQ,CAAA,CAAE,GAAA,GAAM,EAAE,GAAG,CAAA,EAAG,SAAA,EAAW,GAAA,EAAI,GAAI,CAAA;AAAA,IACjF,CAAC;AAAA,GACH;AACF;AAEA,SAAS,GAAA,CAAI,MAAc,IAAA,EAA+B;AACxD,EAAA,IAAI;AACF,IAAA,OAAO,YAAA,CAAa,KAAA,EAAO,IAAA,EAAM,EAAE,GAAA,EAAK,IAAA,EAAM,QAAA,EAAU,MAAA,EAAQ,CAAA,CAAE,IAAA,EAAK,IAAK,IAAA;AAAA,EAC9E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["import { execFileSync } from 'node:child_process';\nimport { redactSecrets, redactUrlCredentials } from '../core-open/utils/redact.js';\nimport { SCHEMA_VERSION, type VgGraph } from '../schema.js';\n\n/**\n * The deferred, decoupled push envelope (VG-PACKAGE-AND-SCHEMA §7). In the open\n * CLI `vg push` is **specified but not built**: it assembles and redacts the\n * envelope and prints a notice, but performs **no network upload**. Nothing in\n * the free path depends on it. Drift-over-time/governance is the separate\n * commercial product.\n */\n\nexport interface GraphUploadEnvelope {\n  /** Mirrors the graph's own schema version — never pinned to a literal here. */\n  schemaVersion: typeof SCHEMA_VERSION;\n  artifactType: 'graph';\n  scanIngestId?: string;\n  vcs: { sha: string; shortSha: string; branch: string };\n  repository?: { name?: string; remoteUrl?: string };\n  generatedAt: string;\n  graph: VgGraph;\n}\n\nexport function buildEnvelope(root: string, graph: VgGraph, scanIngestId?: string): GraphUploadEnvelope {\n  const sha = git(root, ['rev-parse', 'HEAD']) ?? '0000000000000000000000000000000000000000';\n  const branch = git(root, ['rev-parse', '--abbrev-ref', 'HEAD']) ?? 'HEAD';\n  const remoteUrl = git(root, ['config', '--get', 'remote.origin.url']) ?? undefined;\n  return {\n    schemaVersion: SCHEMA_VERSION,\n    artifactType: 'graph',\n    scanIngestId,\n    vcs: { sha, shortSha: sha.slice(0, 12), branch },\n    repository: remoteUrl ? { remoteUrl: redactUrlCredentials(remoteUrl) } : undefined,\n    generatedAt: graph.generatedAt,\n    graph: redactGraph(graph),\n  };\n}\n\n/**\n * Redaction pass (GUARDRAILS §1: redact before storage). The graph is structure,\n * not content, but we defensively scrub any signature/name that matches a\n * credential-shaped pattern, and strip credentials from the remote URL.\n */\nexport function redactGraph(graph: VgGraph): VgGraph {\n  return {\n    ...graph,\n    nodes: graph.nodes.map((n) => {\n      const signature = n.signature ? redactSecrets(n.signature) : n.signature;\n      const doc = n.doc ? redactSecrets(n.doc) : n.doc;\n      return signature !== n.signature || doc !== n.doc ? { ...n, signature, doc } : n;\n    }),\n  };\n}\n\nfunction git(root: string, args: string[]): string | null {\n  try {\n    return execFileSync('git', args, { cwd: root, encoding: 'utf8' }).trim() || null;\n  } catch {\n    return null;\n  }\n}\n"]}
+{"version":3,"sources":["../src/engine/push.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAuBO,SAAS,aAAA,CAAc,IAAA,EAAc,KAAA,EAAgB,YAAA,EAA4C;AACtG,EAAA,MAAM,MAAM,GAAA,CAAI,IAAA,EAAM,CAAC,WAAA,EAAa,MAAM,CAAC,CAAA,IAAK,0CAAA;AAChD,EAAA,MAAM,MAAA,GAAS,IAAI,IAAA,EAAM,CAAC,aAAa,cAAA,EAAgB,MAAM,CAAC,CAAA,IAAK,MAAA;AACnE,EAAA,MAAM,SAAA,GAAY,IAAI,IAAA,EAAM,CAAC,UAAU,OAAA,EAAS,mBAAmB,CAAC,CAAA,IAAK,MAAA;AACzE,EAAA,OAAO;AAAA,IACL,aAAA,EAAe,cAAA;AAAA,IACf,YAAA,EAAc,OAAA;AAAA,IACd,YAAA;AAAA,IACA,GAAA,EAAK,EAAE,GAAA,EAAK,QAAA,EAAU,IAAI,KAAA,CAAM,CAAA,EAAG,EAAE,CAAA,EAAG,MAAA,EAAO;AAAA,IAC/C,YAAY,SAAA,GAAY,EAAE,WAAW,oBAAA,CAAqB,SAAS,GAAE,GAAI,MAAA;AAAA,IACzE,aAAa,KAAA,CAAM,WAAA;AAAA,IACnB,KAAA,EAAO,YAAY,KAAK;AAAA,GAC1B;AACF;AAOO,SAAS,YAAY,KAAA,EAAyB;AACnD,EAAA,OAAO;AAAA,IACL,GAAG,KAAA;AAAA,IACH,KAAA,EAAO,KAAA,CAAM,KAAA,CAAM,GAAA,CAAI,CAAC,CAAA,KAAM;AAC5B,MAAA,MAAM,YAAY,CAAA,CAAE,SAAA,GAAY,cAAc,CAAA,CAAE,SAAS,IAAI,CAAA,CAAE,SAAA;AAC/D,MAAA,MAAM,MAAM,CAAA,CAAE,GAAA,GAAM,cAAc,CAAA,CAAE,GAAG,IAAI,CAAA,CAAE,GAAA;AAC7C,MAAA,OAAO,SAAA,KAAc,CAAA,CAAE,SAAA,IAAa,GAAA,KAAQ,CAAA,CAAE,GAAA,GAAM,EAAE,GAAG,CAAA,EAAG,SAAA,EAAW,GAAA,EAAI,GAAI,CAAA;AAAA,IACjF,CAAC;AAAA,GACH;AACF;AAEA,SAAS,GAAA,CAAI,MAAc,IAAA,EAA+B;AACxD,EAAA,IAAI;AACF,IAAA,OAAO,YAAA,CAAa,KAAA,EAAO,IAAA,EAAM,EAAE,GAAA,EAAK,IAAA,EAAM,QAAA,EAAU,MAAA,EAAQ,CAAA,CAAE,IAAA,EAAK,IAAK,IAAA;AAAA,EAC9E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF","file":"index.js","sourcesContent":["import { execFileSync } from 'node:child_process';\nimport { redactSecrets, redactUrlCredentials } from '../core-open/utils/redact.js';\nimport { SCHEMA_VERSION, type VgGraph } from '../schema.js';\n\n/**\n * The deferred, decoupled push envelope (VG-PACKAGE-AND-SCHEMA §7). In the open\n * CLI `vg push` is **specified but not built**: it assembles and redacts the\n * envelope and prints a notice, but performs **no network upload**. Nothing in\n * the free path depends on it. Drift-over-time/governance is the separate\n * commercial product.\n */\n\nexport interface GraphUploadEnvelope {\n  /** Mirrors the graph's own schema version — never pinned to a literal here. */\n  schemaVersion: typeof SCHEMA_VERSION;\n  artifactType: 'graph';\n  scanIngestId?: string;\n  vcs: { sha: string; shortSha: string; branch: string };\n  repository?: { name?: string; remoteUrl?: string };\n  generatedAt: string;\n  graph: VgGraph;\n}\n\nexport function buildEnvelope(root: string, graph: VgGraph, scanIngestId?: string): GraphUploadEnvelope {\n  const sha = git(root, ['rev-parse', 'HEAD']) ?? '0000000000000000000000000000000000000000';\n  const branch = git(root, ['rev-parse', '--abbrev-ref', 'HEAD']) ?? 'HEAD';\n  const remoteUrl = git(root, ['config', '--get', 'remote.origin.url']) ?? undefined;\n  return {\n    schemaVersion: SCHEMA_VERSION,\n    artifactType: 'graph',\n    scanIngestId,\n    vcs: { sha, shortSha: sha.slice(0, 12), branch },\n    repository: remoteUrl ? { remoteUrl: redactUrlCredentials(remoteUrl) } : undefined,\n    generatedAt: graph.generatedAt,\n    graph: redactGraph(graph),\n  };\n}\n\n/**\n * Redaction pass (GUARDRAILS §1: redact before storage). The graph is structure,\n * not content, but we defensively scrub any signature/name that matches a\n * credential-shaped pattern, and strip credentials from the remote URL.\n */\nexport function redactGraph(graph: VgGraph): VgGraph {\n  return {\n    ...graph,\n    nodes: graph.nodes.map((n) => {\n      const signature = n.signature ? redactSecrets(n.signature) : n.signature;\n      const doc = n.doc ? redactSecrets(n.doc) : n.doc;\n      return signature !== n.signature || doc !== n.doc ? { ...n, signature, doc } : n;\n    }),\n  };\n}\n\nfunction git(root: string, args: string[]): string | null {\n  try {\n    return execFileSync('git', args, { cwd: root, encoding: 'utf8' }).trim() || null;\n  } catch {\n    return null;\n  }\n}\n"]}