@vibgrate/cli 2026.825.2 → 2026.829.1

package/dist/{chunk-BICZR6UJ.js.map → chunk-D3SV3JWB.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/engine/stats-share.ts"],"names":[],"mappings":";;;;;;;;AAiCA,IAAM,cAAA,GAAiB,GAAA;AAEvB,IAAM,WAAA,GAAc,kBAAA;AAEpB,IAAM,cAAA,GAAsB,IAAA,CAAA,IAAA,CAAQ,EAAA,CAAA,OAAA,EAAQ,EAAG,WAAW,CAAA;AAC1D,IAAM,eAAA,GAAuB,IAAA,CAAA,IAAA,CAAK,cAAA,EAAgB,YAAY,CAAA;AAE9D,IAAM,eAAA,GAAkB,GAAA;AAgCjB,SAAS,eAAA,CAAgB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AACnF,EAAA,MAAM,OAAO,GAAA,CAAI,YAAA,IAAgB,EAAA,EAAI,IAAA,GAAO,WAAA,EAAY;AACxD,EAAA,IAAI,QAAQ,EAAA,IAAM,GAAA,KAAQ,GAAA,IAAO,GAAA,KAAQ,SAAS,OAAO,cAAA;AACzD,EAAA,MAAM,MAAM,GAAA,CAAI,kBAAA,IAAsB,EAAA,EAAI,IAAA,GAAO,WAAA,EAAY;AAC7D,EAAA,IAAI,OAAO,GAAA,IAAO,EAAA,KAAO,OAAA,IAAW,EAAA,KAAO,OAAO,OAAO,oBAAA;AACzD,EAAA,OAAO,IAAA;AACT;AAGA,IAAM,WAAA,GAAc;AAAA,EAClB,IAAA;AAAA,EACA,gBAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA;AACF,CAAA;AAGO,SAAS,IAAA,CAAK,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAc;AAClE,EAAA,OAAO,WAAA,CAAY,IAAA,CAAK,CAAC,CAAA,KAAM;AAC7B,IAAA,MAAM,OAAO,GAAA,CAAI,CAAC,KAAK,EAAA,EAAI,IAAA,GAAO,WAAA,EAAY;AAC9C,IAAA,OAAO,GAAA,KAAQ,EAAA,IAAM,GAAA,KAAQ,GAAA,IAAO,GAAA,KAAQ,OAAA;AAAA,EAC9C,CAAC,CAAA;AACH;AAcO,SAAS,SAAA,CAAU,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAa;AACtE,EAAA,IAAI,eAAA,CAAgB,GAAG,CAAA,KAAM,IAAA,IAAQ,KAAK,GAAG,CAAA,SAAU,UAAA,EAAW;AAClE,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAc,EAAA,CAAA,YAAA,CAAa,eAAA,EAAiB,MAAM,EAAE,IAAA,EAAK;AAC/D,IAAA,IAAI,MAAA,CAAO,QAAQ,CAAA,EAAG,OAAO,QAAA;AAAA,EAC/B,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,MAAM,KAAK,UAAA,EAAW;AACtB,EAAA,IAAI;AACF,IAAG,EAAA,CAAA,SAAA,CAAU,cAAA,EAAgB,EAAE,SAAA,EAAW,MAAM,CAAA;AAChD,IAAG,iBAAc,eAAA,EAAiB,EAAA,GAAK,MAAM,EAAE,IAAA,EAAM,KAAO,CAAA;AAAA,EAC9D,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,EAAA;AACT;AAEA,SAAS,OAAO,CAAA,EAAoB;AAClC,EAAA,OAAO,iEAAA,CAAkE,KAAK,CAAC,CAAA;AACjF;AAEA,SAAS,UAAA,GAAqB;AAC5B,EAAA,OAAO,UAAA,EAAW;AACpB;AAGO,SAAS,aAAA,GAAwB;AACtC,EAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,uBAAA;AAC7B,EAAA,IAAI,QAAA,IAAY,cAAA,CAAe,IAAA,CAAK,QAAQ,GAAG,OAAO,QAAA;AACtD,EAAA,OAAO,CAAA,QAAA,EAAW,mBAAmB,CAAA,wBAAA,CAAA;AACvC;AAEA,SAAS,WAAW,IAAA,EAAsB;AACxC,EAAA,OAAY,IAAA,CAAA,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,EAAG,WAAW,CAAA;AAC9C;AAEA,SAAS,eAAe,IAAA,EAAsB;AAC5C,EAAA,OAAY,IAAA,CAAA,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,EAAG,eAAe,CAAA;AAClD;AAEA,SAAS,WAAW,IAAA,EAAsB;AACxC,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,KAAK,KAAA,CAAS,EAAA,CAAA,YAAA,CAAa,WAAW,IAAI,CAAA,EAAG,MAAM,CAAC,CAAA;AAChE,IAAA,OAAO,OAAO,IAAI,MAAA,KAAW,QAAA,IAAY,IAAI,MAAA,IAAU,CAAA,GAAI,IAAI,MAAA,GAAS,CAAA;AAAA,EAC1E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,CAAA;AAAA,EACT;AACF;AAEA,SAAS,WAAA,CAAY,MAAc,MAAA,EAAsB;AACvD,EAAA,IAAI;AACF,IAAG,aAAU,QAAA,CAAS,IAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAChD,IAAG,EAAA,CAAA,aAAA,CAAc,UAAA,CAAW,IAAI,CAAA,EAAG,IAAA,CAAK,UAAU,EAAE,MAAA,EAAQ,CAAA,GAAI,IAAI,CAAA;AAAA,EACtE,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAOO,SAAS,UAAA,CACd,IAAA,EACA,UAAA,EACA,EAAA,GAAK,WAAU,EACkC;AACjD,EAAA,MAAM,IAAA,GAAO,eAAe,IAAI,CAAA;AAChC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,IAAI;AACF,IAAA,IAAA,GAAU,EAAA,CAAA,QAAA,CAAS,IAAI,CAAA,CAAE,IAAA;AAAA,EAC3B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,SAAA,EAAW,CAAA,EAAE;AAAA,EACrC;AAEA,EAAA,MAAM,KAAA,GAAQ,UAAA,GAAa,IAAA,GAAO,CAAA,GAAI,UAAA;AACtC,EAAA,IAAI,SAAS,IAAA,EAAM,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,WAAW,IAAA,EAAK;AAEzD,EAAA,IAAI,IAAA,GAAO,EAAA;AACX,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,GAAQ,EAAA,CAAA,QAAA,CAAS,IAAA,EAAM,GAAG,CAAA;AAChC,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,IAAA,GAAO,KAAK,CAAA;AACrC,MAAG,YAAS,EAAA,EAAI,GAAA,EAAK,CAAA,EAAG,GAAA,CAAI,QAAQ,KAAK,CAAA;AACzC,MAAA,IAAA,GAAO,GAAA,CAAI,SAAS,MAAM,CAAA;AAAA,IAC5B,CAAA,SAAE;AACA,MAAG,aAAU,EAAE,CAAA;AAAA,IACjB;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,SAAA,EAAW,UAAA,EAAW;AAAA,EAC9C;AAIA,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,WAAA,CAAY,IAAI,CAAA;AACpC,EAAA,IAAI,SAAS,CAAA,EAAG,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,WAAW,KAAA,EAAM;AACvD,EAAA,MAAM,QAAA,GAAW,QAAQ,MAAA,GAAS,CAAA;AAClC,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAsB;AACvC,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,IAAI,KAAA,GAAQ,QAAA;AACZ,EAAA,IAAI,KAAA,GAAQ,CAAA,QAAA;AACZ,EAAA,KAAA,MAAW,IAAA,IAAQ,KAAK,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA,CAAE,KAAA,CAAM,IAAI,CAAA,EAAG;AACpD,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,IAAA,IAAI,CAAA;AACJ,IAAA,IAAI;AACF,MAAA,CAAA,GAAI,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IACrB,CAAA,CAAA,MAAQ;AACN,MAAA;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAiB,EAAE,MAAA,IAAU,KAAA;AACnC,IAAA,MAAM,MAAA,GAAS,EAAE,MAAA,IAAU,SAAA;AAC3B,IAAA,MAAM,OAAA,GAAmB,EAAE,OAAA,IAAW,UAAA;AACtC,IAAA,MAAM,GAAA,GAAM,GAAG,MAAM,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,EAAI,CAAA,CAAE,IAAI,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AACpD,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,IAAK;AAAA,MAC3B,MAAA;AAAA,MACA,MAAA;AAAA,MACA,MAAM,CAAA,CAAE,IAAA;AAAA,MACR,OAAA;AAAA,MACA,KAAA,EAAO,CAAA;AAAA,MACP,QAAA,EAAU,CAAA;AAAA,MACV,cAAA,EAAgB;AAAA,KAClB;AACA,IAAA,GAAA,CAAI,KAAA,EAAA;AACJ,IAAA,GAAA,CAAI,QAAA,IAAY,EAAE,QAAA,IAAY,CAAA;AAC9B,IAAA,GAAA,CAAI,cAAA,IAAkB,EAAE,cAAA,IAAkB,CAAA;AAC1C,IAAA,IAAA,CAAK,GAAA,CAAI,KAAK,GAAG,CAAA;AACjB,IAAA,KAAA,EAAA;AACA,IAAA,IAAI,OAAO,CAAA,CAAE,EAAA,KAAO,QAAA,EAAU;AAC5B,MAAA,IAAI,CAAA,CAAE,EAAA,GAAK,KAAA,EAAO,KAAA,GAAQ,CAAA,CAAE,EAAA;AAC5B,MAAA,IAAI,CAAA,CAAE,EAAA,GAAK,KAAA,EAAO,KAAA,GAAQ,CAAA,CAAE,EAAA;AAAA,IAC9B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,KAAU,CAAA,IAAK,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,EAAG,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,SAAA,EAAW,QAAA,EAAS;AACtF,EAAA,MAAM,KAAA,GAAoB;AAAA,IACxB,aAAA,EAAe,cAAA;AAAA,IACf,SAAA,EAAW,EAAA;AAAA,IACX,SAAA,EAAW,OAAA;AAAA,IACX,IAAI,OAAA,CAAQ,QAAA;AAAA,IACZ,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,WAAA,EAAa,IAAI,IAAA,CAAK,KAAK,EAAE,WAAA,EAAY;AAAA,IACzC,SAAA,EAAW,IAAI,IAAA,CAAK,KAAK,EAAE,WAAA,EAAY;AAAA,IACvC,UAAA,EAAY,KAAA;AAAA,IACZ,IAAA,EAAM,CAAC,GAAG,IAAA,CAAK,QAAQ;AAAA,GACzB;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,QAAA,EAAS;AACtC;AAMA,eAAe,UAAU,KAAA,EAAqC;AAC5D,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,eAAe,CAAA;AAClE,EAAA,KAAA,CAAM,KAAA,IAAQ;AACd,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,aAAA,EAAc,EAAG;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,YAAY,OAAA,EAAQ;AAAA,MACnE,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AAAA,MAC1B,QAAQ,UAAA,CAAW;AAAA,KACpB,CAAA;AACD,IAAA,OAAO,GAAA,CAAI,EAAA;AAAA,EACb,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAOO,IAAM,cAAN,MAAkB;AAAA,EAKvB,YAA6B,IAAA,EAAc;AAAd,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAC3B,IAAA,IAAA,CAAK,MAAA,GAAS,WAAW,IAAI,CAAA;AAAA,EAC/B;AAAA,EAF6B,IAAA;AAAA,EAJZ,KAAK,SAAA,EAAU;AAAA,EACxB,MAAA;AAAA,EACA,QAAA,GAAW,KAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUnB,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAI,KAAK,QAAA,EAAU;AACnB,IAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAChB,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,KAAA,EAAO,SAAA,EAAU,GAAI,UAAA,CAAW,KAAK,IAAA,EAAM,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,EAAE,CAAA;AACvE,MAAA,IAAI,CAAC,KAAA,EAAO;AAEV,QAAA,IAAI,SAAA,GAAY,KAAK,MAAA,EAAQ;AAC3B,UAAA,IAAA,CAAK,MAAA,GAAS,SAAA;AACd,UAAA,WAAA,CAAY,IAAA,CAAK,MAAM,SAAS,CAAA;AAAA,QAClC;AACA,QAAA;AAAA,MACF;AACA,MAAA,MAAM,EAAA,GAAK,MAAM,SAAA,CAAU,KAAK,CAAA;AAChC,MAAA,IAAI,EAAA,EAAI;AACN,QAAA,IAAA,CAAK,MAAA,GAAS,SAAA;AACd,QAAA,WAAA,CAAY,IAAA,CAAK,MAAM,SAAS,CAAA;AAAA,MAClC;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER,CAAA,SAAE;AACA,MAAA,IAAA,CAAK,QAAA,GAAW,KAAA;AAAA,IAClB;AAAA,EACF;AACF","file":"chunk-BICZR6UJ.js","sourcesContent":["import * as fs from 'node:fs';\nimport * as os from 'node:os';\nimport * as path from 'node:path';\nimport { randomUUID } from 'node:crypto';\nimport { cacheDir } from './cache.js';\nimport { VERSION } from '../version.js';\nimport { resolveIngestHost } from '../reporting/regions.js';\nimport type { SavingEntry, Source, Outcome } from './savings.js';\n\n/**\n * Opt-in usage-stats sharing for `vg serve --share-stats`.\n *\n * This is the ONLY path in `vg serve` that sends anything off the machine, and\n * it is off unless the operator explicitly asks for it. What we send is the\n * same counts-only ledger `vg savings` reports locally — per (source, client,\n * tool, outcome): how many calls and the vg-vs-grep token figures — plus the vg\n * version, OS/arch, and a random per-install id. We never send code, file paths,\n * question text, repo identity, or any credential. See GUARDRAILS §3.4.\n *\n * Even when the flag is passed, the universal `DO_NOT_TRACK` opt-out (or\n * `VIBGRATE_TELEMETRY=0`) wins: nothing is uploaded and no install id is ever\n * minted or persisted (see `telemetryOptOut` / `installId`).\n *\n * Design:\n *  - The local ledger (savings.jsonl) is the single source of truth; the flusher\n *    reads only the tail past a persisted byte offset, so a batch is sent once.\n *  - Fire-and-forget with a short timeout. A network problem never blocks a tool\n *    call and never throws — the offset only advances on a confirmed 2xx, so a\n *    failed batch is retried on the next flush.\n *  - Fully offline-safe: under `--local` the sharer is never constructed.\n */\n\n/** Payload schema version — must match the server's `mcpUsageStatsSchema`. */\nconst SCHEMA_VERSION = '1';\n/** Where the offset (and cached install id) live, per repo, beside the ledger. */\nconst OFFSET_FILE = 'stats-share.json';\n/** The machine-global anonymous install id lives here (stable across repos). */\nconst INSTALL_ID_DIR = path.join(os.homedir(), '.vibgrate');\nconst INSTALL_ID_FILE = path.join(INSTALL_ID_DIR, 'install-id');\n/** Give a flush POST a hard ceiling so a hung endpoint never stalls shutdown. */\nconst SEND_TIMEOUT_MS = 4000;\n\n/** One aggregated row of the shared batch — counts only. */\nexport interface StatsRow {\n  source: Source;\n  client: string;\n  tool: string;\n  outcome: Outcome;\n  calls: number;\n  vgTokens: number;\n  baselineTokens: number;\n}\n\n/** The counts-only batch POSTed to the ingest endpoint. */\nexport interface StatsBatch {\n  schemaVersion: string;\n  installId: string;\n  vgVersion: string;\n  os: string;\n  arch: string;\n  windowStart: string;\n  windowEnd: string;\n  totalCalls: number;\n  rows: StatsRow[];\n}\n\n/**\n * The universal opt-out (https://consoledonottrack.com) plus a tool-specific\n * alias, honoured even when `--share-stats` is passed explicitly. Pure function\n * of the environment for testability. Returns the name of the variable that\n * opted out (for the disclosure message), or null when sharing may proceed.\n */\nexport function telemetryOptOut(env: NodeJS.ProcessEnv = process.env): string | null {\n  const dnt = (env.DO_NOT_TRACK ?? '').trim().toLowerCase();\n  if (dnt !== '' && dnt !== '0' && dnt !== 'false') return 'DO_NOT_TRACK';\n  const vt = (env.VIBGRATE_TELEMETRY ?? '').trim().toLowerCase();\n  if (vt === '0' || vt === 'false' || vt === 'off') return 'VIBGRATE_TELEMETRY';\n  return null;\n}\n\n/** Common CI environment markers — a CI runner is never an interactive session. */\nconst CI_ENV_VARS = [\n  'CI',\n  'GITHUB_ACTIONS',\n  'GITLAB_CI',\n  'CIRCLECI',\n  'TRAVIS',\n  'BUILDKITE',\n  'JENKINS_URL',\n  'TF_BUILD',\n] as const;\n\n/** True when running under a recognised CI system. Pure function of the env. */\nexport function isCI(env: NodeJS.ProcessEnv = process.env): boolean {\n  return CI_ENV_VARS.some((v) => {\n    const val = (env[v] ?? '').trim().toLowerCase();\n    return val !== '' && val !== '0' && val !== 'false';\n  });\n}\n\n/**\n * Read (or lazily create) the anonymous per-install id — a random UUID stored in\n * `~/.vibgrate/install-id`. It is *not* tied to the user, the repo, or any\n * account; it only lets us de-duplicate batches from the same install when\n * aggregating. If the home dir isn't writable we fall back to an ephemeral id\n * so sharing still works (it just can't be de-duplicated across restarts).\n *\n * Under an env opt-out no id is ever read or persisted (the sharing path isn't\n * reached then either — this is defence in depth), and on CI runners the id is\n * ephemeral: a persisted id on a shared/throwaway runner would be meaningless\n * for de-duplication and would leave state behind on machines we don't own.\n */\nexport function installId(env: NodeJS.ProcessEnv = process.env): string {\n  if (telemetryOptOut(env) !== null || isCI(env)) return randomUuid();\n  try {\n    const existing = fs.readFileSync(INSTALL_ID_FILE, 'utf8').trim();\n    if (isUuid(existing)) return existing;\n  } catch {\n    /* not created yet */\n  }\n  const id = randomUuid();\n  try {\n    fs.mkdirSync(INSTALL_ID_DIR, { recursive: true });\n    fs.writeFileSync(INSTALL_ID_FILE, id + '\\n', { mode: 0o600 });\n  } catch {\n    /* home dir read-only — use the ephemeral id for this process */\n  }\n  return id;\n}\n\nfunction isUuid(s: string): boolean {\n  return /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(s);\n}\n\nfunction randomUuid(): string {\n  return randomUUID();\n}\n\n/** Resolve the ingest endpoint: env override wins, else the default region host. */\nexport function statsEndpoint(): string {\n  const override = process.env.VIBGRATE_STATS_ENDPOINT;\n  if (override && /^https?:\\/\\//.test(override)) return override;\n  return `https://${resolveIngestHost()}/v1/ingest/cli-mcp-usage`;\n}\n\nfunction offsetPath(root: string): string {\n  return path.join(cacheDir(root), OFFSET_FILE);\n}\n\nfunction ledgerFilePath(root: string): string {\n  return path.join(cacheDir(root), 'savings.jsonl');\n}\n\nfunction readOffset(root: string): number {\n  try {\n    const raw = JSON.parse(fs.readFileSync(offsetPath(root), 'utf8')) as { offset?: number };\n    return typeof raw.offset === 'number' && raw.offset >= 0 ? raw.offset : 0;\n  } catch {\n    return 0;\n  }\n}\n\nfunction writeOffset(root: string, offset: number): void {\n  try {\n    fs.mkdirSync(cacheDir(root), { recursive: true });\n    fs.writeFileSync(offsetPath(root), JSON.stringify({ offset }) + '\\n');\n  } catch {\n    /* best-effort; a lost offset just means one batch may re-send */\n  }\n}\n\n/**\n * Aggregate the ledger entries after `fromOffset` into a counts-only batch.\n * Returns the batch (or null if there's nothing new) and the new byte offset to\n * persist once the batch is confirmed sent.\n */\nexport function buildBatch(\n  root: string,\n  fromOffset: number,\n  id = installId(),\n): { batch: StatsBatch | null; newOffset: number } {\n  const file = ledgerFilePath(root);\n  let size = 0;\n  try {\n    size = fs.statSync(file).size;\n  } catch {\n    return { batch: null, newOffset: 0 };\n  }\n  // The ledger was truncated/recreated under us — re-read from the top.\n  const start = fromOffset > size ? 0 : fromOffset;\n  if (start >= size) return { batch: null, newOffset: size };\n\n  let text = '';\n  try {\n    const fd = fs.openSync(file, 'r');\n    try {\n      const buf = Buffer.alloc(size - start);\n      fs.readSync(fd, buf, 0, buf.length, start);\n      text = buf.toString('utf8');\n    } finally {\n      fs.closeSync(fd);\n    }\n  } catch {\n    return { batch: null, newOffset: fromOffset };\n  }\n\n  // Only whole lines are complete; a trailing partial line (mid-append) is left\n  // for the next flush by rewinding the offset to the last newline.\n  const lastNl = text.lastIndexOf('\\n');\n  if (lastNl < 0) return { batch: null, newOffset: start };\n  const consumed = start + lastNl + 1;\n  const rows = new Map<string, StatsRow>();\n  let total = 0;\n  let minTs = Infinity;\n  let maxTs = -Infinity;\n  for (const line of text.slice(0, lastNl).split('\\n')) {\n    if (!line.trim()) continue;\n    let e: SavingEntry;\n    try {\n      e = JSON.parse(line) as SavingEntry;\n    } catch {\n      continue;\n    }\n    const source: Source = e.source ?? 'mcp';\n    const client = e.client ?? 'unknown';\n    const outcome: Outcome = e.outcome ?? 'complete';\n    const key = `${source}|${client}|${e.tool}|${outcome}`;\n    const row = rows.get(key) ?? {\n      source,\n      client,\n      tool: e.tool,\n      outcome,\n      calls: 0,\n      vgTokens: 0,\n      baselineTokens: 0,\n    };\n    row.calls++;\n    row.vgTokens += e.vgTokens ?? 0;\n    row.baselineTokens += e.baselineTokens ?? 0;\n    rows.set(key, row);\n    total++;\n    if (typeof e.ts === 'number') {\n      if (e.ts < minTs) minTs = e.ts;\n      if (e.ts > maxTs) maxTs = e.ts;\n    }\n  }\n  if (total === 0 || !Number.isFinite(minTs)) return { batch: null, newOffset: consumed };\n  const batch: StatsBatch = {\n    schemaVersion: SCHEMA_VERSION,\n    installId: id,\n    vgVersion: VERSION,\n    os: process.platform,\n    arch: process.arch,\n    windowStart: new Date(minTs).toISOString(),\n    windowEnd: new Date(maxTs).toISOString(),\n    totalCalls: total,\n    rows: [...rows.values()],\n  };\n  return { batch, newOffset: consumed };\n}\n\n/**\n * POST a batch to the endpoint. Never throws; returns whether it was accepted.\n * A short timeout keeps a hung endpoint from stalling the caller (e.g. shutdown).\n */\nasync function postBatch(batch: StatsBatch): Promise<boolean> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), SEND_TIMEOUT_MS);\n  timer.unref?.();\n  try {\n    const res = await fetch(statsEndpoint(), {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json', Connection: 'close' },\n      body: JSON.stringify(batch),\n      signal: controller.signal,\n    });\n    return res.ok;\n  } catch {\n    return false;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\n/**\n * Periodic + on-shutdown flusher for one serve session. Holds the install id and\n * the persisted offset so each flush reads only new ledger lines and advances the\n * offset only when the batch is confirmed sent.\n */\nexport class StatsSharer {\n  private readonly id = installId();\n  private offset: number;\n  private flushing = false;\n\n  constructor(private readonly root: string) {\n    this.offset = readOffset(root);\n  }\n\n  /**\n   * Flush any new ledger entries. Single-flight (a slow POST won't overlap the\n   * next tick). Best-effort: any failure is swallowed and retried next time.\n   */\n  async flush(): Promise<void> {\n    if (this.flushing) return;\n    this.flushing = true;\n    try {\n      const { batch, newOffset } = buildBatch(this.root, this.offset, this.id);\n      if (!batch) {\n        // Nothing to send, but still advance past consumed blank/partial space.\n        if (newOffset > this.offset) {\n          this.offset = newOffset;\n          writeOffset(this.root, newOffset);\n        }\n        return;\n      }\n      const ok = await postBatch(batch);\n      if (ok) {\n        this.offset = newOffset;\n        writeOffset(this.root, newOffset);\n      }\n    } catch {\n      /* never let sharing break serving */\n    } finally {\n      this.flushing = false;\n    }\n  }\n}\n"]}
+{"version":3,"sources":["../src/engine/stats-share.ts"],"names":[],"mappings":";;;;;;;;AAiCA,IAAM,cAAA,GAAiB,GAAA;AAEvB,IAAM,WAAA,GAAc,kBAAA;AAEpB,IAAM,cAAA,GAAsB,IAAA,CAAA,IAAA,CAAQ,EAAA,CAAA,OAAA,EAAQ,EAAG,WAAW,CAAA;AAC1D,IAAM,eAAA,GAAuB,IAAA,CAAA,IAAA,CAAK,cAAA,EAAgB,YAAY,CAAA;AAE9D,IAAM,eAAA,GAAkB,GAAA;AAgCjB,SAAS,eAAA,CAAgB,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAoB;AACnF,EAAA,MAAM,OAAO,GAAA,CAAI,YAAA,IAAgB,EAAA,EAAI,IAAA,GAAO,WAAA,EAAY;AACxD,EAAA,IAAI,QAAQ,EAAA,IAAM,GAAA,KAAQ,GAAA,IAAO,GAAA,KAAQ,SAAS,OAAO,cAAA;AACzD,EAAA,MAAM,MAAM,GAAA,CAAI,kBAAA,IAAsB,EAAA,EAAI,IAAA,GAAO,WAAA,EAAY;AAC7D,EAAA,IAAI,OAAO,GAAA,IAAO,EAAA,KAAO,OAAA,IAAW,EAAA,KAAO,OAAO,OAAO,oBAAA;AACzD,EAAA,OAAO,IAAA;AACT;AAGA,IAAM,WAAA,GAAc;AAAA,EAClB,IAAA;AAAA,EACA,gBAAA;AAAA,EACA,WAAA;AAAA,EACA,UAAA;AAAA,EACA,QAAA;AAAA,EACA,WAAA;AAAA,EACA,aAAA;AAAA,EACA;AACF,CAAA;AAGO,SAAS,IAAA,CAAK,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAc;AAClE,EAAA,OAAO,WAAA,CAAY,IAAA,CAAK,CAAC,CAAA,KAAM;AAC7B,IAAA,MAAM,OAAO,GAAA,CAAI,CAAC,KAAK,EAAA,EAAI,IAAA,GAAO,WAAA,EAAY;AAC9C,IAAA,OAAO,GAAA,KAAQ,EAAA,IAAM,GAAA,KAAQ,GAAA,IAAO,GAAA,KAAQ,OAAA;AAAA,EAC9C,CAAC,CAAA;AACH;AAcO,SAAS,SAAA,CAAU,GAAA,GAAyB,OAAA,CAAQ,GAAA,EAAa;AACtE,EAAA,IAAI,eAAA,CAAgB,GAAG,CAAA,KAAM,IAAA,IAAQ,KAAK,GAAG,CAAA,SAAU,UAAA,EAAW;AAClE,EAAA,IAAI;AACF,IAAA,MAAM,QAAA,GAAc,EAAA,CAAA,YAAA,CAAa,eAAA,EAAiB,MAAM,EAAE,IAAA,EAAK;AAC/D,IAAA,IAAI,MAAA,CAAO,QAAQ,CAAA,EAAG,OAAO,QAAA;AAAA,EAC/B,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,MAAM,KAAK,UAAA,EAAW;AACtB,EAAA,IAAI;AACF,IAAG,EAAA,CAAA,SAAA,CAAU,cAAA,EAAgB,EAAE,SAAA,EAAW,MAAM,CAAA;AAChD,IAAG,iBAAc,eAAA,EAAiB,EAAA,GAAK,MAAM,EAAE,IAAA,EAAM,KAAO,CAAA;AAAA,EAC9D,CAAA,CAAA,MAAQ;AAAA,EAER;AACA,EAAA,OAAO,EAAA;AACT;AAEA,SAAS,OAAO,CAAA,EAAoB;AAClC,EAAA,OAAO,iEAAA,CAAkE,KAAK,CAAC,CAAA;AACjF;AAEA,SAAS,UAAA,GAAqB;AAC5B,EAAA,OAAO,UAAA,EAAW;AACpB;AAGO,SAAS,aAAA,GAAwB;AACtC,EAAA,MAAM,QAAA,GAAW,QAAQ,GAAA,CAAI,uBAAA;AAC7B,EAAA,IAAI,QAAA,IAAY,cAAA,CAAe,IAAA,CAAK,QAAQ,GAAG,OAAO,QAAA;AACtD,EAAA,OAAO,CAAA,QAAA,EAAW,mBAAmB,CAAA,wBAAA,CAAA;AACvC;AAEA,SAAS,WAAW,IAAA,EAAsB;AACxC,EAAA,OAAY,IAAA,CAAA,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,EAAG,WAAW,CAAA;AAC9C;AAEA,SAAS,eAAe,IAAA,EAAsB;AAC5C,EAAA,OAAY,IAAA,CAAA,IAAA,CAAK,QAAA,CAAS,IAAI,CAAA,EAAG,eAAe,CAAA;AAClD;AAEA,SAAS,WAAW,IAAA,EAAsB;AACxC,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,KAAK,KAAA,CAAS,EAAA,CAAA,YAAA,CAAa,WAAW,IAAI,CAAA,EAAG,MAAM,CAAC,CAAA;AAChE,IAAA,OAAO,OAAO,IAAI,MAAA,KAAW,QAAA,IAAY,IAAI,MAAA,IAAU,CAAA,GAAI,IAAI,MAAA,GAAS,CAAA;AAAA,EAC1E,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,CAAA;AAAA,EACT;AACF;AAEA,SAAS,WAAA,CAAY,MAAc,MAAA,EAAsB;AACvD,EAAA,IAAI;AACF,IAAG,aAAU,QAAA,CAAS,IAAI,GAAG,EAAE,SAAA,EAAW,MAAM,CAAA;AAChD,IAAG,EAAA,CAAA,aAAA,CAAc,UAAA,CAAW,IAAI,CAAA,EAAG,IAAA,CAAK,UAAU,EAAE,MAAA,EAAQ,CAAA,GAAI,IAAI,CAAA;AAAA,EACtE,CAAA,CAAA,MAAQ;AAAA,EAER;AACF;AAOO,SAAS,UAAA,CACd,IAAA,EACA,UAAA,EACA,EAAA,GAAK,WAAU,EACkC;AACjD,EAAA,MAAM,IAAA,GAAO,eAAe,IAAI,CAAA;AAChC,EAAA,IAAI,IAAA,GAAO,CAAA;AACX,EAAA,IAAI;AACF,IAAA,IAAA,GAAU,EAAA,CAAA,QAAA,CAAS,IAAI,CAAA,CAAE,IAAA;AAAA,EAC3B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,SAAA,EAAW,CAAA,EAAE;AAAA,EACrC;AAEA,EAAA,MAAM,KAAA,GAAQ,UAAA,GAAa,IAAA,GAAO,CAAA,GAAI,UAAA;AACtC,EAAA,IAAI,SAAS,IAAA,EAAM,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,WAAW,IAAA,EAAK;AAEzD,EAAA,IAAI,IAAA,GAAO,EAAA;AACX,EAAA,IAAI;AACF,IAAA,MAAM,EAAA,GAAQ,EAAA,CAAA,QAAA,CAAS,IAAA,EAAM,GAAG,CAAA;AAChC,IAAA,IAAI;AACF,MAAA,MAAM,GAAA,GAAM,MAAA,CAAO,KAAA,CAAM,IAAA,GAAO,KAAK,CAAA;AACrC,MAAG,YAAS,EAAA,EAAI,GAAA,EAAK,CAAA,EAAG,GAAA,CAAI,QAAQ,KAAK,CAAA;AACzC,MAAA,IAAA,GAAO,GAAA,CAAI,SAAS,MAAM,CAAA;AAAA,IAC5B,CAAA,SAAE;AACA,MAAG,aAAU,EAAE,CAAA;AAAA,IACjB;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,SAAA,EAAW,UAAA,EAAW;AAAA,EAC9C;AAIA,EAAA,MAAM,MAAA,GAAS,IAAA,CAAK,WAAA,CAAY,IAAI,CAAA;AACpC,EAAA,IAAI,SAAS,CAAA,EAAG,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,WAAW,KAAA,EAAM;AACvD,EAAA,MAAM,QAAA,GAAW,QAAQ,MAAA,GAAS,CAAA;AAClC,EAAA,MAAM,IAAA,uBAAW,GAAA,EAAsB;AACvC,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,IAAI,KAAA,GAAQ,QAAA;AACZ,EAAA,IAAI,KAAA,GAAQ,CAAA,QAAA;AACZ,EAAA,KAAA,MAAW,IAAA,IAAQ,KAAK,KAAA,CAAM,CAAA,EAAG,MAAM,CAAA,CAAE,KAAA,CAAM,IAAI,CAAA,EAAG;AACpD,IAAA,IAAI,CAAC,IAAA,CAAK,IAAA,EAAK,EAAG;AAClB,IAAA,IAAI,CAAA;AACJ,IAAA,IAAI;AACF,MAAA,CAAA,GAAI,IAAA,CAAK,MAAM,IAAI,CAAA;AAAA,IACrB,CAAA,CAAA,MAAQ;AACN,MAAA;AAAA,IACF;AACA,IAAA,MAAM,MAAA,GAAiB,EAAE,MAAA,IAAU,KAAA;AACnC,IAAA,MAAM,MAAA,GAAS,EAAE,MAAA,IAAU,SAAA;AAC3B,IAAA,MAAM,OAAA,GAAmB,EAAE,OAAA,IAAW,UAAA;AACtC,IAAA,MAAM,GAAA,GAAM,GAAG,MAAM,CAAA,CAAA,EAAI,MAAM,CAAA,CAAA,EAAI,CAAA,CAAE,IAAI,CAAA,CAAA,EAAI,OAAO,CAAA,CAAA;AACpD,IAAA,MAAM,GAAA,GAAM,IAAA,CAAK,GAAA,CAAI,GAAG,CAAA,IAAK;AAAA,MAC3B,MAAA;AAAA,MACA,MAAA;AAAA,MACA,MAAM,CAAA,CAAE,IAAA;AAAA,MACR,OAAA;AAAA,MACA,KAAA,EAAO,CAAA;AAAA,MACP,QAAA,EAAU,CAAA;AAAA,MACV,cAAA,EAAgB;AAAA,KAClB;AACA,IAAA,GAAA,CAAI,KAAA,EAAA;AACJ,IAAA,GAAA,CAAI,QAAA,IAAY,EAAE,QAAA,IAAY,CAAA;AAC9B,IAAA,GAAA,CAAI,cAAA,IAAkB,EAAE,cAAA,IAAkB,CAAA;AAC1C,IAAA,IAAA,CAAK,GAAA,CAAI,KAAK,GAAG,CAAA;AACjB,IAAA,KAAA,EAAA;AACA,IAAA,IAAI,OAAO,CAAA,CAAE,EAAA,KAAO,QAAA,EAAU;AAC5B,MAAA,IAAI,CAAA,CAAE,EAAA,GAAK,KAAA,EAAO,KAAA,GAAQ,CAAA,CAAE,EAAA;AAC5B,MAAA,IAAI,CAAA,CAAE,EAAA,GAAK,KAAA,EAAO,KAAA,GAAQ,CAAA,CAAE,EAAA;AAAA,IAC9B;AAAA,EACF;AACA,EAAA,IAAI,KAAA,KAAU,CAAA,IAAK,CAAC,MAAA,CAAO,QAAA,CAAS,KAAK,CAAA,EAAG,OAAO,EAAE,KAAA,EAAO,IAAA,EAAM,SAAA,EAAW,QAAA,EAAS;AACtF,EAAA,MAAM,KAAA,GAAoB;AAAA,IACxB,aAAA,EAAe,cAAA;AAAA,IACf,SAAA,EAAW,EAAA;AAAA,IACX,SAAA,EAAW,OAAA;AAAA,IACX,IAAI,OAAA,CAAQ,QAAA;AAAA,IACZ,MAAM,OAAA,CAAQ,IAAA;AAAA,IACd,WAAA,EAAa,IAAI,IAAA,CAAK,KAAK,EAAE,WAAA,EAAY;AAAA,IACzC,SAAA,EAAW,IAAI,IAAA,CAAK,KAAK,EAAE,WAAA,EAAY;AAAA,IACvC,UAAA,EAAY,KAAA;AAAA,IACZ,IAAA,EAAM,CAAC,GAAG,IAAA,CAAK,QAAQ;AAAA,GACzB;AACA,EAAA,OAAO,EAAE,KAAA,EAAO,SAAA,EAAW,QAAA,EAAS;AACtC;AAMA,eAAe,UAAU,KAAA,EAAqC;AAC5D,EAAA,MAAM,UAAA,GAAa,IAAI,eAAA,EAAgB;AACvC,EAAA,MAAM,QAAQ,UAAA,CAAW,MAAM,UAAA,CAAW,KAAA,IAAS,eAAe,CAAA;AAClE,EAAA,KAAA,CAAM,KAAA,IAAQ;AACd,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,KAAA,CAAM,aAAA,EAAc,EAAG;AAAA,MACvC,MAAA,EAAQ,MAAA;AAAA,MACR,OAAA,EAAS,EAAE,cAAA,EAAgB,kBAAA,EAAoB,YAAY,OAAA,EAAQ;AAAA,MACnE,IAAA,EAAM,IAAA,CAAK,SAAA,CAAU,KAAK,CAAA;AAAA,MAC1B,QAAQ,UAAA,CAAW;AAAA,KACpB,CAAA;AACD,IAAA,OAAO,GAAA,CAAI,EAAA;AAAA,EACb,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,KAAA;AAAA,EACT,CAAA,SAAE;AACA,IAAA,YAAA,CAAa,KAAK,CAAA;AAAA,EACpB;AACF;AAOO,IAAM,cAAN,MAAkB;AAAA,EAKvB,YAA6B,IAAA,EAAc;AAAd,IAAA,IAAA,CAAA,IAAA,GAAA,IAAA;AAC3B,IAAA,IAAA,CAAK,MAAA,GAAS,WAAW,IAAI,CAAA;AAAA,EAC/B;AAAA,EAF6B,IAAA;AAAA,EAJZ,KAAK,SAAA,EAAU;AAAA,EACxB,MAAA;AAAA,EACA,QAAA,GAAW,KAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUnB,MAAM,KAAA,GAAuB;AAC3B,IAAA,IAAI,KAAK,QAAA,EAAU;AACnB,IAAA,IAAA,CAAK,QAAA,GAAW,IAAA;AAChB,IAAA,IAAI;AACF,MAAA,MAAM,EAAE,KAAA,EAAO,SAAA,EAAU,GAAI,UAAA,CAAW,KAAK,IAAA,EAAM,IAAA,CAAK,MAAA,EAAQ,IAAA,CAAK,EAAE,CAAA;AACvE,MAAA,IAAI,CAAC,KAAA,EAAO;AAEV,QAAA,IAAI,SAAA,GAAY,KAAK,MAAA,EAAQ;AAC3B,UAAA,IAAA,CAAK,MAAA,GAAS,SAAA;AACd,UAAA,WAAA,CAAY,IAAA,CAAK,MAAM,SAAS,CAAA;AAAA,QAClC;AACA,QAAA;AAAA,MACF;AACA,MAAA,MAAM,EAAA,GAAK,MAAM,SAAA,CAAU,KAAK,CAAA;AAChC,MAAA,IAAI,EAAA,EAAI;AACN,QAAA,IAAA,CAAK,MAAA,GAAS,SAAA;AACd,QAAA,WAAA,CAAY,IAAA,CAAK,MAAM,SAAS,CAAA;AAAA,MAClC;AAAA,IACF,CAAA,CAAA,MAAQ;AAAA,IAER,CAAA,SAAE;AACA,MAAA,IAAA,CAAK,QAAA,GAAW,KAAA;AAAA,IAClB;AAAA,EACF;AACF","file":"chunk-D3SV3JWB.js","sourcesContent":["import * as fs from 'node:fs';\nimport * as os from 'node:os';\nimport * as path from 'node:path';\nimport { randomUUID } from 'node:crypto';\nimport { cacheDir } from './cache.js';\nimport { VERSION } from '../version.js';\nimport { resolveIngestHost } from '../reporting/regions.js';\nimport type { SavingEntry, Source, Outcome } from './savings.js';\n\n/**\n * Opt-in usage-stats sharing for `vg serve --share-stats`.\n *\n * This is the ONLY path in `vg serve` that sends anything off the machine, and\n * it is off unless the operator explicitly asks for it. What we send is the\n * same counts-only ledger `vg savings` reports locally — per (source, client,\n * tool, outcome): how many calls and the vg-vs-grep token figures — plus the vg\n * version, OS/arch, and a random per-install id. We never send code, file paths,\n * question text, repo identity, or any credential. See GUARDRAILS §3.4.\n *\n * Even when the flag is passed, the universal `DO_NOT_TRACK` opt-out (or\n * `VIBGRATE_TELEMETRY=0`) wins: nothing is uploaded and no install id is ever\n * minted or persisted (see `telemetryOptOut` / `installId`).\n *\n * Design:\n *  - The local ledger (savings.jsonl) is the single source of truth; the flusher\n *    reads only the tail past a persisted byte offset, so a batch is sent once.\n *  - Fire-and-forget with a short timeout. A network problem never blocks a tool\n *    call and never throws — the offset only advances on a confirmed 2xx, so a\n *    failed batch is retried on the next flush.\n *  - Fully offline-safe: under `--local` the sharer is never constructed.\n */\n\n/** Payload schema version — must match the server's `mcpUsageStatsSchema`. */\nconst SCHEMA_VERSION = '1';\n/** Where the offset (and cached install id) live, per repo, beside the ledger. */\nconst OFFSET_FILE = 'stats-share.json';\n/** The machine-global anonymous install id lives here (stable across repos). */\nconst INSTALL_ID_DIR = path.join(os.homedir(), '.vibgrate');\nconst INSTALL_ID_FILE = path.join(INSTALL_ID_DIR, 'install-id');\n/** Give a flush POST a hard ceiling so a hung endpoint never stalls shutdown. */\nconst SEND_TIMEOUT_MS = 4000;\n\n/** One aggregated row of the shared batch — counts only. */\nexport interface StatsRow {\n  source: Source;\n  client: string;\n  tool: string;\n  outcome: Outcome;\n  calls: number;\n  vgTokens: number;\n  baselineTokens: number;\n}\n\n/** The counts-only batch POSTed to the ingest endpoint. */\nexport interface StatsBatch {\n  schemaVersion: string;\n  installId: string;\n  vgVersion: string;\n  os: string;\n  arch: string;\n  windowStart: string;\n  windowEnd: string;\n  totalCalls: number;\n  rows: StatsRow[];\n}\n\n/**\n * The universal opt-out (https://consoledonottrack.com) plus a tool-specific\n * alias, honoured even when `--share-stats` is passed explicitly. Pure function\n * of the environment for testability. Returns the name of the variable that\n * opted out (for the disclosure message), or null when sharing may proceed.\n */\nexport function telemetryOptOut(env: NodeJS.ProcessEnv = process.env): string | null {\n  const dnt = (env.DO_NOT_TRACK ?? '').trim().toLowerCase();\n  if (dnt !== '' && dnt !== '0' && dnt !== 'false') return 'DO_NOT_TRACK';\n  const vt = (env.VIBGRATE_TELEMETRY ?? '').trim().toLowerCase();\n  if (vt === '0' || vt === 'false' || vt === 'off') return 'VIBGRATE_TELEMETRY';\n  return null;\n}\n\n/** Common CI environment markers — a CI runner is never an interactive session. */\nconst CI_ENV_VARS = [\n  'CI',\n  'GITHUB_ACTIONS',\n  'GITLAB_CI',\n  'CIRCLECI',\n  'TRAVIS',\n  'BUILDKITE',\n  'JENKINS_URL',\n  'TF_BUILD',\n] as const;\n\n/** True when running under a recognised CI system. Pure function of the env. */\nexport function isCI(env: NodeJS.ProcessEnv = process.env): boolean {\n  return CI_ENV_VARS.some((v) => {\n    const val = (env[v] ?? '').trim().toLowerCase();\n    return val !== '' && val !== '0' && val !== 'false';\n  });\n}\n\n/**\n * Read (or lazily create) the anonymous per-install id — a random UUID stored in\n * `~/.vibgrate/install-id`. It is *not* tied to the user, the repo, or any\n * account; it only lets us de-duplicate batches from the same install when\n * aggregating. If the home dir isn't writable we fall back to an ephemeral id\n * so sharing still works (it just can't be de-duplicated across restarts).\n *\n * Under an env opt-out no id is ever read or persisted (the sharing path isn't\n * reached then either — this is defence in depth), and on CI runners the id is\n * ephemeral: a persisted id on a shared/throwaway runner would be meaningless\n * for de-duplication and would leave state behind on machines we don't own.\n */\nexport function installId(env: NodeJS.ProcessEnv = process.env): string {\n  if (telemetryOptOut(env) !== null || isCI(env)) return randomUuid();\n  try {\n    const existing = fs.readFileSync(INSTALL_ID_FILE, 'utf8').trim();\n    if (isUuid(existing)) return existing;\n  } catch {\n    /* not created yet */\n  }\n  const id = randomUuid();\n  try {\n    fs.mkdirSync(INSTALL_ID_DIR, { recursive: true });\n    fs.writeFileSync(INSTALL_ID_FILE, id + '\\n', { mode: 0o600 });\n  } catch {\n    /* home dir read-only — use the ephemeral id for this process */\n  }\n  return id;\n}\n\nfunction isUuid(s: string): boolean {\n  return /^[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}$/i.test(s);\n}\n\nfunction randomUuid(): string {\n  return randomUUID();\n}\n\n/** Resolve the ingest endpoint: env override wins, else the default region host. */\nexport function statsEndpoint(): string {\n  const override = process.env.VIBGRATE_STATS_ENDPOINT;\n  if (override && /^https?:\\/\\//.test(override)) return override;\n  return `https://${resolveIngestHost()}/v1/ingest/cli-mcp-usage`;\n}\n\nfunction offsetPath(root: string): string {\n  return path.join(cacheDir(root), OFFSET_FILE);\n}\n\nfunction ledgerFilePath(root: string): string {\n  return path.join(cacheDir(root), 'savings.jsonl');\n}\n\nfunction readOffset(root: string): number {\n  try {\n    const raw = JSON.parse(fs.readFileSync(offsetPath(root), 'utf8')) as { offset?: number };\n    return typeof raw.offset === 'number' && raw.offset >= 0 ? raw.offset : 0;\n  } catch {\n    return 0;\n  }\n}\n\nfunction writeOffset(root: string, offset: number): void {\n  try {\n    fs.mkdirSync(cacheDir(root), { recursive: true });\n    fs.writeFileSync(offsetPath(root), JSON.stringify({ offset }) + '\\n');\n  } catch {\n    /* best-effort; a lost offset just means one batch may re-send */\n  }\n}\n\n/**\n * Aggregate the ledger entries after `fromOffset` into a counts-only batch.\n * Returns the batch (or null if there's nothing new) and the new byte offset to\n * persist once the batch is confirmed sent.\n */\nexport function buildBatch(\n  root: string,\n  fromOffset: number,\n  id = installId(),\n): { batch: StatsBatch | null; newOffset: number } {\n  const file = ledgerFilePath(root);\n  let size = 0;\n  try {\n    size = fs.statSync(file).size;\n  } catch {\n    return { batch: null, newOffset: 0 };\n  }\n  // The ledger was truncated/recreated under us — re-read from the top.\n  const start = fromOffset > size ? 0 : fromOffset;\n  if (start >= size) return { batch: null, newOffset: size };\n\n  let text = '';\n  try {\n    const fd = fs.openSync(file, 'r');\n    try {\n      const buf = Buffer.alloc(size - start);\n      fs.readSync(fd, buf, 0, buf.length, start);\n      text = buf.toString('utf8');\n    } finally {\n      fs.closeSync(fd);\n    }\n  } catch {\n    return { batch: null, newOffset: fromOffset };\n  }\n\n  // Only whole lines are complete; a trailing partial line (mid-append) is left\n  // for the next flush by rewinding the offset to the last newline.\n  const lastNl = text.lastIndexOf('\\n');\n  if (lastNl < 0) return { batch: null, newOffset: start };\n  const consumed = start + lastNl + 1;\n  const rows = new Map<string, StatsRow>();\n  let total = 0;\n  let minTs = Infinity;\n  let maxTs = -Infinity;\n  for (const line of text.slice(0, lastNl).split('\\n')) {\n    if (!line.trim()) continue;\n    let e: SavingEntry;\n    try {\n      e = JSON.parse(line) as SavingEntry;\n    } catch {\n      continue;\n    }\n    const source: Source = e.source ?? 'mcp';\n    const client = e.client ?? 'unknown';\n    const outcome: Outcome = e.outcome ?? 'complete';\n    const key = `${source}|${client}|${e.tool}|${outcome}`;\n    const row = rows.get(key) ?? {\n      source,\n      client,\n      tool: e.tool,\n      outcome,\n      calls: 0,\n      vgTokens: 0,\n      baselineTokens: 0,\n    };\n    row.calls++;\n    row.vgTokens += e.vgTokens ?? 0;\n    row.baselineTokens += e.baselineTokens ?? 0;\n    rows.set(key, row);\n    total++;\n    if (typeof e.ts === 'number') {\n      if (e.ts < minTs) minTs = e.ts;\n      if (e.ts > maxTs) maxTs = e.ts;\n    }\n  }\n  if (total === 0 || !Number.isFinite(minTs)) return { batch: null, newOffset: consumed };\n  const batch: StatsBatch = {\n    schemaVersion: SCHEMA_VERSION,\n    installId: id,\n    vgVersion: VERSION,\n    os: process.platform,\n    arch: process.arch,\n    windowStart: new Date(minTs).toISOString(),\n    windowEnd: new Date(maxTs).toISOString(),\n    totalCalls: total,\n    rows: [...rows.values()],\n  };\n  return { batch, newOffset: consumed };\n}\n\n/**\n * POST a batch to the endpoint. Never throws; returns whether it was accepted.\n * A short timeout keeps a hung endpoint from stalling the caller (e.g. shutdown).\n */\nasync function postBatch(batch: StatsBatch): Promise<boolean> {\n  const controller = new AbortController();\n  const timer = setTimeout(() => controller.abort(), SEND_TIMEOUT_MS);\n  timer.unref?.();\n  try {\n    const res = await fetch(statsEndpoint(), {\n      method: 'POST',\n      headers: { 'Content-Type': 'application/json', Connection: 'close' },\n      body: JSON.stringify(batch),\n      signal: controller.signal,\n    });\n    return res.ok;\n  } catch {\n    return false;\n  } finally {\n    clearTimeout(timer);\n  }\n}\n\n/**\n * Periodic + on-shutdown flusher for one serve session. Holds the install id and\n * the persisted offset so each flush reads only new ledger lines and advances the\n * offset only when the batch is confirmed sent.\n */\nexport class StatsSharer {\n  private readonly id = installId();\n  private offset: number;\n  private flushing = false;\n\n  constructor(private readonly root: string) {\n    this.offset = readOffset(root);\n  }\n\n  /**\n   * Flush any new ledger entries. Single-flight (a slow POST won't overlap the\n   * next tick). Best-effort: any failure is swallowed and retried next time.\n   */\n  async flush(): Promise<void> {\n    if (this.flushing) return;\n    this.flushing = true;\n    try {\n      const { batch, newOffset } = buildBatch(this.root, this.offset, this.id);\n      if (!batch) {\n        // Nothing to send, but still advance past consumed blank/partial space.\n        if (newOffset > this.offset) {\n          this.offset = newOffset;\n          writeOffset(this.root, newOffset);\n        }\n        return;\n      }\n      const ok = await postBatch(batch);\n      if (ok) {\n        this.offset = newOffset;\n        writeOffset(this.root, newOffset);\n      }\n    } catch {\n      /* never let sharing break serving */\n    } finally {\n      this.flushing = false;\n    }\n  }\n}\n"]}

package/dist/chunk-EGMBHPXV.js

@@ -0,0 +1,127 @@
+// src/install/content.ts
+var NUDGE_BEGIN = "<!-- vg:begin -->";
+var NUDGE_END = "<!-- vg:end -->";
+var INSTALL_CONTENT_VERSION = 2;
+var VERSION_MARKER_RE = /<!--\s*vg:v(\d+)\b[^>]*-->/;
+function versionMarker() {
+  return `<!-- vg:v${INSTALL_CONTENT_VERSION} \xB7 managed by \`vg install\` \u2014 auto-refreshed when these instructions evolve; remove this line to opt out -->`;
+}
+function installedContentVersion(text) {
+  const m = VERSION_MARKER_RE.exec(text);
+  return m ? Number(m[1]) : null;
+}
+function clientFlag(client) {
+  return client ? `--client=${client}` : "--client=<your-ai>";
+}
+function skillMarkdown(client) {
+  const cf = clientFlag(client);
+  return `---
+name: vg
+description: Query the local code graph (vg) for structure, impact, and navigation instead of grepping/reading many files.
+---
+
+${versionMarker()}
+
+# vg \u2014 the code map
+
+This repo has a deterministic code graph built by \`vg\`. Prefer it over reading or
+grepping many files \u2014 it is smaller, more relevant context, and free.
+
+## Use the MCP tools \u2014 not the CLI
+
+When the \`vg\` MCP server is registered (it is after \`vg install\`), **always call
+its read-only tools instead of shelling out to the CLI.** The server keeps the
+map parsed, the relation index warm, and the embedding model loaded across
+calls, so an MCP call answers in milliseconds \u2014 while every CLI invocation pays
+Node startup plus a fresh map parse, hundreds of times more. Tools:
+\`query_graph\`, \`get_node\`, \`impact_of\`, \`find_path\`, \`list_hubs\`, \`list_areas\`,
+\`get_graph_summary\`, \`search_symbols\`. They are side-effect-free and
+auto-approvable, and the server records which client is calling automatically.
+Reach for the CLI only when the MCP server is genuinely unavailable \u2014 never as
+the first resort.
+
+## CLI fallback \u2014 only when the MCP server is unavailable
+
+If (and only if) no \`vg\` MCP server is available, use the CLI \u2014 and **always
+pass \`${cf}\`** so your calls are counted (that's how the CLI-vs-MCP split is
+measured and the tools improved):
+
+- **Understand code:** \`vg "<question>" ${cf}\` \u2014 a budget-bounded, fact-annotated context block.
+- **Find a symbol:** \`vg show <name> ${cf}\` \u2014 what it is, what it calls, what calls it.
+- **Before changing something:** \`vg impact <name> ${cf}\` \u2014 what breaks if you change it.
+- **Navigate:** \`vg path <A> <B> ${cf}\`, \`vg tree <name> ${cf}\`.
+
+## Dependencies & library docs
+
+- **Upgrade drift:** \`vg drift\` lists what is outdated across dependencies
+  (offline; \`--online\` for currency). \`vg scan\` scores upgrade drift and
+  \`vg report\` renders it (text | json | sarif | md).
+- **Version-correct docs:** \`vg lib <name>\` returns drift-annotated, version-
+  specific usage docs for a library \u2014 inject these instead of guessing an API.
+
+### Library-docs discipline
+
+When a task needs a library's API, use the docs tools before web search or
+training-data recall \u2014 they are official content matched to the version **this
+project has installed**, and they win when the two conflict.
+
+- **Workflow:** \`resolve_library\` once per library, then \`library_docs\` with the
+  returned \`targetId\` and a focused query (good: "zod refine custom error
+  message"; bad: "zod"). Never guess a targetId.
+- **Budget:** at most **3 docs calls per task**. If 2 \`library_docs\` calls have
+  not surfaced the section you need, read the package source under
+  \`node_modules\` instead of searching again.
+- **Skip the docs tools** for language built-ins, stable well-known syntax, or
+  an API already shown in the current context \u2014 they add nothing there.
+
+## Keep it fresh
+
+The map keeps itself fresh: \`vg ask\` and the MCP tools detect changed files
+and rebuild it incrementally before answering \u2014 you can edit code and query
+immediately. Running \`vg\` after a large pull still warms everything in one go.
+The map lives at \`.vibgrate/graph.json\` and is deterministic (byte-identical
+across machines).
+`;
+}
+function nudgeMarkdown(smallRepo, client) {
+  const cf = clientFlag(client);
+  if (smallRepo) {
+    return `${NUDGE_BEGIN}
+${versionMarker()}
+## Code navigation (vg)
+
+This repo is small enough that searching files directly is fine. Still, before a
+change, the \`vg\` graph shows what breaks: use the \`vg\` MCP tools when the server
+is registered (\`impact_of\`, \`query_graph\` \u2014 the warm server answers far faster
+than spawning the CLI). Only without the server, fall back to the CLI and pass
+\`${cf}\` so the call is counted: \`vg impact <name> ${cf}\`,
+\`vg "<question>" ${cf}\`.
+${NUDGE_END}`;
+  }
+  return `${NUDGE_BEGIN}
+${versionMarker()}
+## Code navigation (vg) \u2014 use the MCP tools first
+
+A deterministic code graph is available. It is usually the faster, cheaper path
+than reading or grepping many files. **When the \`vg\` MCP server is registered,
+always use its tools** (\`query_graph\`, \`get_node\`, \`impact_of\`,
+\`search_symbols\`, \u2026) \u2014 the map, indexes, and embedding model stay warm across
+calls, so they answer in milliseconds, while every CLI invocation pays Node
+startup plus a fresh map parse. Fall back to the CLI only when the server is
+unavailable, and then pass \`${cf}\` so the call is counted:
+
+- \`vg "<question>" ${cf}\` \u2014 a compact, fact-annotated context block for a question.
+- \`vg show <name> ${cf}\` \u2014 what a symbol is, its callers and callees.
+- \`vg impact <name> ${cf}\` \u2014 what breaks if you change it.
+
+This is advisory, not mandatory \u2014 remove it with \`vg uninstall\` (or delete this
+block).
+${NUDGE_END}`;
+}
+function mcpServerEntry(launch = { command: "vg", args: ["serve"] }) {
+  return { command: launch.command, args: launch.args };
+}
+
+export { INSTALL_CONTENT_VERSION, NUDGE_BEGIN, NUDGE_END, installedContentVersion, mcpServerEntry, nudgeMarkdown, skillMarkdown, versionMarker };
+//# sourceMappingURL=chunk-EGMBHPXV.js.map
+//# sourceMappingURL=chunk-EGMBHPXV.js.map

package/dist/chunk-EGMBHPXV.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/install/content.ts"],"names":[],"mappings":";AAQO,IAAM,WAAA,GAAc;AACpB,IAAM,SAAA,GAAY;AAalB,IAAM,uBAAA,GAA0B;AAEvC,IAAM,iBAAA,GAAoB,4BAAA;AAGnB,SAAS,aAAA,GAAwB;AACtC,EAAA,OAAO,YAAY,uBAAuB,CAAA,qHAAA,CAAA;AAC5C;AAMO,SAAS,wBAAwB,IAAA,EAA6B;AACnE,EAAA,MAAM,CAAA,GAAI,iBAAA,CAAkB,IAAA,CAAK,IAAI,CAAA;AACrC,EAAA,OAAO,CAAA,GAAI,MAAA,CAAO,CAAA,CAAE,CAAC,CAAC,CAAA,GAAI,IAAA;AAC5B;AAOA,SAAS,WAAW,MAAA,EAAyB;AAC3C,EAAA,OAAO,MAAA,GAAS,CAAA,SAAA,EAAY,MAAM,CAAA,CAAA,GAAK,oBAAA;AACzC;AAEO,SAAS,cAAc,MAAA,EAAyB;AACrD,EAAA,MAAM,EAAA,GAAK,WAAW,MAAM,CAAA;AAC5B,EAAA,OAAO,CAAA;AAAA;AAAA;AAAA;;AAAA,EAKP,eAAe;;AAAA;;AAAA;AAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;;AAAA;AAAA,OAAA,EAuBR,EAAE,CAAA;AAAA;;AAAA,yCAAA,EAGgC,EAAE,CAAA;AAAA,sCAAA,EACL,EAAE,CAAA;AAAA,oDAAA,EACY,EAAE,CAAA;AAAA,kCAAA,EACpB,EAAE,wBAAwB,EAAE,CAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;;AAAA;AAAA;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,CAAA;AAiChE;AAEO,SAAS,aAAA,CAAc,WAAoB,MAAA,EAAyB;AACzE,EAAA,MAAM,EAAA,GAAK,WAAW,MAAM,CAAA;AAC5B,EAAA,IAAI,SAAA,EAAW;AACb,IAAA,OAAO,GAAG,WAAW;AAAA,EACvB,eAAe;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA,EAAA,EAOb,EAAE,iDAAiD,EAAE,CAAA;AAAA,kBAAA,EACrC,EAAE,CAAA;AAAA,EACpB,SAAS,CAAA,CAAA;AAAA,EACT;AACA,EAAA,OAAO,GAAG,WAAW;AAAA,EACrB,eAAe;AAAA;;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,6BAAA,EASc,EAAE,CAAA;;AAAA,oBAAA,EAEX,EAAE,CAAA;AAAA,mBAAA,EACH,EAAE,CAAA;AAAA,qBAAA,EACA,EAAE,CAAA;;AAAA;AAAA;AAAA,EAIvB,SAAS,CAAA,CAAA;AACX;AAGO,SAAS,cAAA,CAAe,SAAsB,EAAE,OAAA,EAAS,MAAM,IAAA,EAAM,CAAC,OAAO,CAAA,EAAE,EAGpF;AACA,EAAA,OAAO,EAAE,OAAA,EAAS,MAAA,CAAO,OAAA,EAAS,IAAA,EAAM,OAAO,IAAA,EAAK;AACtD","file":"chunk-EGMBHPXV.js","sourcesContent":["/**\n * Shared, deterministic content for `vg install`: the skill body and the advisory\n * nudge. Posture is deliberately lighter-touch — the nudge\n * *suggests* the graph as the faster path, never asserts \"MANDATORY\"\n * (VG-ASSISTANT-INSTALL §1). On small repos we say searching is fine.\n */\n\nexport const SKILL_MARKER = 'vg-graph-skill';\nexport const NUDGE_BEGIN = '<!-- vg:begin -->';\nexport const NUDGE_END = '<!-- vg:end -->';\n\n/**\n * Version of the generated instruction content (skill + nudge). Bump on ANY\n * wording/structure change to those templates: files written by `vg install`\n * carry this number in an HTML-comment marker, and `vg` builds auto-refresh\n * installed copies whose marker is older (see registry.ts\n * refreshInstalledInstructions) — so evolved instructions reach existing\n * repos the first time a new CLI version builds there.\n *\n * History: v1 = the unversioned originals (detected by their headings);\n * v2 = versioned markers + the strong MCP-first recommendation.\n */\nexport const INSTALL_CONTENT_VERSION = 2;\n\nconst VERSION_MARKER_RE = /<!--\\s*vg:v(\\d+)\\b[^>]*-->/;\n\n/** The marker line embedded in every generated instruction file. */\nexport function versionMarker(): string {\n  return `<!-- vg:v${INSTALL_CONTENT_VERSION} · managed by \\`vg install\\` — auto-refreshed when these instructions evolve; remove this line to opt out -->`;\n}\n\n/**\n * The content version a previously-written instruction file carries, or null\n * when it has no marker (pre-versioning installs, or user-authored files).\n */\nexport function installedContentVersion(text: string): number | null {\n  const m = VERSION_MARKER_RE.exec(text);\n  return m ? Number(m[1]) : null;\n}\n\n/**\n * The `--client` value the skill/nudge tells the assistant to pass to `vg` so its\n * CLI calls are attributed. `vg install <assistant>` passes the assistant id\n * (e.g. `claude`, `cursor`); the canonical reference copy uses a placeholder.\n */\nfunction clientFlag(client?: string): string {\n  return client ? `--client=${client}` : '--client=<your-ai>';\n}\n\nexport function skillMarkdown(client?: string): string {\n  const cf = clientFlag(client);\n  return `---\nname: vg\ndescription: Query the local code graph (vg) for structure, impact, and navigation instead of grepping/reading many files.\n---\n\n${versionMarker()}\n\n# vg — the code map\n\nThis repo has a deterministic code graph built by \\`vg\\`. Prefer it over reading or\ngrepping many files — it is smaller, more relevant context, and free.\n\n## Use the MCP tools — not the CLI\n\nWhen the \\`vg\\` MCP server is registered (it is after \\`vg install\\`), **always call\nits read-only tools instead of shelling out to the CLI.** The server keeps the\nmap parsed, the relation index warm, and the embedding model loaded across\ncalls, so an MCP call answers in milliseconds — while every CLI invocation pays\nNode startup plus a fresh map parse, hundreds of times more. Tools:\n\\`query_graph\\`, \\`get_node\\`, \\`impact_of\\`, \\`find_path\\`, \\`list_hubs\\`, \\`list_areas\\`,\n\\`get_graph_summary\\`, \\`search_symbols\\`. They are side-effect-free and\nauto-approvable, and the server records which client is calling automatically.\nReach for the CLI only when the MCP server is genuinely unavailable — never as\nthe first resort.\n\n## CLI fallback — only when the MCP server is unavailable\n\nIf (and only if) no \\`vg\\` MCP server is available, use the CLI — and **always\npass \\`${cf}\\`** so your calls are counted (that's how the CLI-vs-MCP split is\nmeasured and the tools improved):\n\n- **Understand code:** \\`vg \"<question>\" ${cf}\\` — a budget-bounded, fact-annotated context block.\n- **Find a symbol:** \\`vg show <name> ${cf}\\` — what it is, what it calls, what calls it.\n- **Before changing something:** \\`vg impact <name> ${cf}\\` — what breaks if you change it.\n- **Navigate:** \\`vg path <A> <B> ${cf}\\`, \\`vg tree <name> ${cf}\\`.\n\n## Dependencies & library docs\n\n- **Upgrade drift:** \\`vg drift\\` lists what is outdated across dependencies\n  (offline; \\`--online\\` for currency). \\`vg scan\\` scores upgrade drift and\n  \\`vg report\\` renders it (text | json | sarif | md).\n- **Version-correct docs:** \\`vg lib <name>\\` returns drift-annotated, version-\n  specific usage docs for a library — inject these instead of guessing an API.\n\n### Library-docs discipline\n\nWhen a task needs a library's API, use the docs tools before web search or\ntraining-data recall — they are official content matched to the version **this\nproject has installed**, and they win when the two conflict.\n\n- **Workflow:** \\`resolve_library\\` once per library, then \\`library_docs\\` with the\n  returned \\`targetId\\` and a focused query (good: \"zod refine custom error\n  message\"; bad: \"zod\"). Never guess a targetId.\n- **Budget:** at most **3 docs calls per task**. If 2 \\`library_docs\\` calls have\n  not surfaced the section you need, read the package source under\n  \\`node_modules\\` instead of searching again.\n- **Skip the docs tools** for language built-ins, stable well-known syntax, or\n  an API already shown in the current context — they add nothing there.\n\n## Keep it fresh\n\nThe map keeps itself fresh: \\`vg ask\\` and the MCP tools detect changed files\nand rebuild it incrementally before answering — you can edit code and query\nimmediately. Running \\`vg\\` after a large pull still warms everything in one go.\nThe map lives at \\`.vibgrate/graph.json\\` and is deterministic (byte-identical\nacross machines).\n`;\n}\n\nexport function nudgeMarkdown(smallRepo: boolean, client?: string): string {\n  const cf = clientFlag(client);\n  if (smallRepo) {\n    return `${NUDGE_BEGIN}\n${versionMarker()}\n## Code navigation (vg)\n\nThis repo is small enough that searching files directly is fine. Still, before a\nchange, the \\`vg\\` graph shows what breaks: use the \\`vg\\` MCP tools when the server\nis registered (\\`impact_of\\`, \\`query_graph\\` — the warm server answers far faster\nthan spawning the CLI). Only without the server, fall back to the CLI and pass\n\\`${cf}\\` so the call is counted: \\`vg impact <name> ${cf}\\`,\n\\`vg \"<question>\" ${cf}\\`.\n${NUDGE_END}`;\n  }\n  return `${NUDGE_BEGIN}\n${versionMarker()}\n## Code navigation (vg) — use the MCP tools first\n\nA deterministic code graph is available. It is usually the faster, cheaper path\nthan reading or grepping many files. **When the \\`vg\\` MCP server is registered,\nalways use its tools** (\\`query_graph\\`, \\`get_node\\`, \\`impact_of\\`,\n\\`search_symbols\\`, …) — the map, indexes, and embedding model stay warm across\ncalls, so they answer in milliseconds, while every CLI invocation pays Node\nstartup plus a fresh map parse. Fall back to the CLI only when the server is\nunavailable, and then pass \\`${cf}\\` so the call is counted:\n\n- \\`vg \"<question>\" ${cf}\\` — a compact, fact-annotated context block for a question.\n- \\`vg show <name> ${cf}\\` — what a symbol is, its callers and callees.\n- \\`vg impact <name> ${cf}\\` — what breaks if you change it.\n\nThis is advisory, not mandatory — remove it with \\`vg uninstall\\` (or delete this\nblock).\n${NUDGE_END}`;\n}\n\n/** The MCP server entry registered for local stdio use. */\nexport function mcpServerEntry(launch: ServeLaunch = { command: 'vg', args: ['serve'] }): {\n  command: string;\n  args: string[];\n} {\n  return { command: launch.command, args: launch.args };\n}\n\nexport interface ServeLaunch {\n  command: string;\n  args: string[];\n  /** Human-readable explanation when the launch is not the plain `vg serve`. */\n  note?: string;\n}\n"]}

package/dist/{chunk-DIZ5KI5Q.js → chunk-FHSEK64W.js}

@@ -1,12 +1,12 @@
-import { readGlobal, applyGlobalOptions } from './chunk-YENM3HT7.js';
+import { readGlobal, applyGlobalOptions } from './chunk-N6R4XPLX.js';
 import { json, info, c } from './chunk-CT5BS56U.js';
-import { VGD_PROTOCOL_VERSION, startVgdServer } from './chunk-KYM55VZX.js';
+import { VGD_PROTOCOL_VERSION, startVgdServer } from './chunk-VOEEYCR3.js';
 import { CliError, ExitCode } from './chunk-MS6V5XKB.js';
 import { init_cli_invocation, reinvokeCli } from './chunk-EZ7UC5Y5.js';
-import { loadGraph } from './chunk-7M4E7UGX.js';
+import { loadGraph } from './chunk-RL7JYG3D.js';
 import { vgdIsRunning, vgdRequest } from './chunk-VHRSG6CF.js';
 import { vgdSocketPath, vgdPidPath } from './chunk-6H2QV5DR.js';
-import { VERSION } from './chunk-G3ACLBMG.js';
+import { VERSION } from './chunk-UGRUG2FA.js';
 import * as fs from 'fs';
 import * as net from 'net';
 import * as path2 from 'path';
@@ -311,7 +311,7 @@ function registerDaemon(program) {
       throw new CliError(loaded.error, ExitCode.NOT_FOUND);
     }
     if (!loaded.ok) {
-      const { loadGraph: loadGraph2 } = await import('./load-7C5VETRD.js');
+      const { loadGraph: loadGraph2 } = await import('./load-UAVA732M.js');
       const { detectGitRef } = await import('./git-ref-LMT3EXYY.js');
       const { repositoryIdFromRoot } = await import('./paths-RVK6FKRN.js');
       const graph = loadGraph2(root, global.graph);
@@ -652,5 +652,5 @@ async function repositoryIdForCwd(socketPath, root) {
 }
 
 export { compareDaemonVersion, ensureVgd, ensureVgdSoft, registerDaemon, requireGraph, restartVgdIfRunning, retireWedgedVgd, rootOf, startDetachedVgd, stopVgd, vgdCliVersion, vgdVersionSkew };
-//# sourceMappingURL=chunk-DIZ5KI5Q.js.map
-//# sourceMappingURL=chunk-DIZ5KI5Q.js.map
+//# sourceMappingURL=chunk-FHSEK64W.js.map
+//# sourceMappingURL=chunk-FHSEK64W.js.map