@vibgrate/cli 2026.826.1 → 2026.829.1

package/DOCS.md

@@ -18,6 +18,7 @@ For a quick overview, see the [README](./README.md). This document covers everyt
   - [vg fix](#vg-fix)
   - [vg init](#vg-init)
   - [vg report](#vg-report)
+  - [vg review](#vg-review)
   - [vg sbom](#vg-sbom)
   - [vg scan](#vg-scan)
     - [Vulnerabilities and exposure attribution](#vulnerabilities-and-exposure-attribution)
@@ -420,6 +421,179 @@ vg report [--in <file>] [--format md|text|json]
 ---
 
 
+### vg review
+
+**Vibgrate Review** — architecture and security-control review of the change you
+just made, run locally from the code map. Where `vg scan` answers "how far behind
+is the stack?", `vg review` answers a different question about the same
+repository: *did this change move the system toward its declared architecture,
+weaken a security control, or create an implication the author did not account
+for?*
+
+```bash
+vg review                            # the working tree + index, vs HEAD
+vg review --base origin/main         # merge-base of HEAD and the base branch
+vg review explain arch-01            # the evidence behind one finding
+```
+
+| Flag                  | Default | Description                                                                |
+| --------------------- | ------- | -------------------------------------------------------------------------- |
+| `--base <ref>`        | —       | Review HEAD against the merge-base with `<ref>`                             |
+| `--format <fmt>`      | `text`  | `text`, `json` (the receipt), `sarif` (security findings only), `md`        |
+| `-o, --out <file>`    | —       | Write the formatted result to a file                                        |
+| `--push`              | off     | Send the receipt to Vibgrate Cloud (needs a DSN)                            |
+| `--fail-on <level>`   | from config | Gate CI on this decision: `none`, `fail`, or `needs_review`              |
+| `--explain`           | off     | Add local-model explanations. **Requires a local model; fails closed (exit 6) without one** |
+| `--include-spans`     | off     | Include evidence line ranges in the pushed receipt                          |
+| `--include-snippets`  | off     | Include capped source snippets in the pushed receipt (explicit opt-in)      |
+| `--offline` (global)  | off     | Never touch the network — no push, no model fetch                          |
+| `--write-context`     | off     | Write `.vibgrate/review-context.md` — committed agent memory                |
+| `--inject-context [file]` | off | Update the managed review block inside `CLAUDE.md` (or a named file)      |
+
+`vg review` reads the code map, so run `vg` (or `vg build`) in the repository
+first. Without a map it exits `6` — never `0`.
+
+#### Decisions
+
+Policy owns the decision, and it is the only layer that writes one. Findings —
+from the scanners or from the optional local model — have nowhere to put a
+verdict.
+
+| Decision       | Meaning                                                                       |
+| -------------- | ----------------------------------------------------------------------------- |
+| `pass`         | No material delta, or every finding is target-aligned                          |
+| `fail`         | An unresolved **protected** finding, or a high-severity finding above the confidence threshold |
+| `needs_review` | Findings a human should look at                                                |
+| `undetermined` | Not enough evidence to decide — deliberately not a pass                        |
+
+**Gating is opt-in, exactly as it is for [`vg scan`](#vg-scan).** By default
+`vg review` reports the decision, writes it to the receipt, and exits `0` — even
+on `fail`. It breaks the build only when you ask it to:
+
+| Gate | Set by | Exits `2` on |
+| --- | --- | --- |
+| `none` | the default | never |
+| `fail` | `--fail-on fail`, or `enforcement = "enforced"` with `fail_on = "fail"` | `fail` |
+| `needs_review` | `--fail-on needs_review`, or the same in config | `fail`, `needs_review`, `undetermined` |
+
+A gate failure exits `2` (`GATE_FAILED`) — the same code `vg scan`, `vg drift`
+and `vg hcs gate` use. It is deliberately **not** `1`: across this CLI `1` means
+the command itself errored, and a policy verdict of `fail` is the command
+working correctly. Machines should branch on `decision` in the receipt, which is
+unambiguous; the exit code exists for CI.
+
+`enforcement = "advisory"` means no gate at all. That is what makes the setting
+real rather than a label on the receipt — an advisory repository reports
+honestly and never blocks a merge.
+
+**Protected findings** — an unguarded entrypoint, a removed guard, a validated
+taint flow, a known-vulnerable dependency — carry `protected_finding: true`.
+While one is unresolved, policy cannot emit `pass`: not via an approved
+exception, not via low confidence, not via the quick path, and not via anything
+the model says. Turn a rule off in `.vibgrate/review.toml` if it does not apply
+to your repository; that is the only way to stop it gating.
+
+#### What it looks for
+
+| Finding | What it means |
+|---|---|
+| `boundary_bypass` | A dependency breaks the declared layering, or skips a tier |
+| `peer_deviation` | This file does something its peers do differently |
+| `unguarded_entrypoint` | **Protected.** A mutating route has no authorization guard, where its peers do |
+| `guard_removed` | **Protected.** A guard was deleted and nothing equivalent remains |
+| `known_vulnerable_dependency` | **Protected.** A changed manifest declares a package with a known advisory |
+| `duplicate_implementation` | This re-implements something the repository already has |
+| `unverified_change` | Changed code with no test reaching it |
+
+Two of these deserve a note, because they are what a linter cannot do:
+
+**Peers are graph areas and roles, not folders.** A directory is a filing
+decision; an area is a structural one. Recent files count roughly twice what
+year-old ones do, so a large abandoned wing does not get to dictate "the
+convention". Where peers are too evenly split to have one, Review says *no
+convention* instead of naming a plurality winner.
+
+**A majority is never treated as correct.** Peers establish what is *normal*;
+only `target_pattern` establishes what is *right*. A file that goes through the
+service layer while all its peers bypass it is the first one to improve — Review
+will not flag it. That is the difference between this and a consistency scanner,
+which by construction scores your best file worst.
+
+**Routes get three answers, not two.** Every route is `auth`, `not-auth`, or
+`unsure`, and `unsure` is never promoted. A guard Review does not recognise, or
+a file it could not parse, becomes an honest unknown — never "this route is
+open". Below four classified peer routes a finding is advisory and cannot gate.
+
+#### Before you write it — `assess_change`
+
+`vg review` asks "was that change sound?". The MCP tool `assess_change` asks
+"would this be sound?", while an agent is still deciding — the only point at
+which the fix is free.
+
+```jsonc
+// one call, from any MCP client wired to `vg serve`
+{ "file": "src/routes/invoices.ts", "content": "<the proposed code>" }
+```
+
+It returns the conflicts, anything the proposal duplicates, the convention its
+peers follow with example files to open, and the declared target. One tool, not
+a family of them: a family pushes the judgement into the model, and in this
+product the model never decides.
+
+#### Agent memory — `--write-context`
+
+`vg review --write-context` writes `.vibgrate/review-context.md`: the declared
+target, the conventions with exemplars, what is currently open, and what to do.
+Commit it, and the next agent starts from the answer.
+
+It tells the agent to follow the **declared target**, never "the majority" —
+otherwise a repository mid-migration ends up with memory instructing every agent
+to perpetuate the legacy it is migrating away from. `--inject-context` keeps the
+same content in a marked block inside `CLAUDE.md`, leaving everything a human
+wrote in that file untouched.
+
+#### Configuration — `.vibgrate/review.toml`
+
+```toml
+[review]
+enforcement = "advisory"          # advisory | enforced
+fail_on = "fail"                  # fail | needs_review
+target_pattern = "layered"        # the architecture you say you want
+
+[review.protected]
+unguarded_entrypoint = true
+known_vulnerable_dependency = true
+validated_taint = true
+```
+
+Read from the **trusted base branch** when `--base` is given, so a pull request
+cannot weaken the policy applied to itself.
+
+Declaring `target_pattern` is what turns a layering observation into a
+*regression*. Without it, a dependency that skips a tier is reported as a medium
+finding about the repository's own majority — because a majority is not the same
+thing as a decision, and Review will not treat it as one.
+
+#### What it does not claim
+
+Review reports change integrity. It does not prove code is secure, correct, or
+free of vulnerabilities; it does not replace Semgrep, CodeQL, a compiler, or your
+tests; and **absence of findings is not a certification**.
+
+#### Privacy
+
+Source stays on the machine. `--push` sends the receipt — decisions, claims,
+evidence ids, paths, digests, versions — never the analysis capsule and never
+source text. Line ranges are opt-in (`--include-spans`); snippets are a second,
+explicit opt-in (`--include-snippets`) and are capped. `--offline`, or simply
+having no DSN, keeps the receipt on disk.
+
+Ready-to-use workflows: `examples/github-actions/vibgrate-review.yml` and
+`vibgrate-review-sarif.yml`.
+
+---
+
+
 ### vg sbom
 
 Export [SBOMs](https://vibgrate.com/glossary/sbom) from an existing scan artifact or compare two artifacts.
@@ -654,7 +828,7 @@ Ask the code map a question using hybrid lexical + structural + semantic search.
 vg ask "<question>"
 ```
 
-A local ONNX embedding model is downloaded once on first use, then cached and fully offline. Degrades gracefully to lexical-only under `--local` or `--no-semantic`.
+A local ONNX embedding model is downloaded once on first use, then cached and fully offline. Degrades gracefully to lexical-only under `--offline` or `--no-semantic`.
 
 > **Semantic search is opt-in.** The embedding backend (`fastembed`, which pulls a native ONNX runtime) is declared as an **optional dependency**: package managers install it by default, but if it's absent — e.g. you installed with `--omit=optional`, or it failed to build on your platform — `vg ask` and `vg embed` transparently fall back to lexical + structural search. Nothing else in the CLI needs it, so `vg build`, `vg show`, `vg impact`, drift reporting, and MCP serving all run without it. If you never use semantic `ask`, you can install lean: `npm i @vibgrate/cli --omit=optional`. A host application that bundles the CLI without optional dependencies (Vibgrate for VS Code does this) can supply the backend from its own directory by setting `VIBGRATE_EMBEDDER_PATH` to a folder whose `node_modules` contains `fastembed`; when set, that copy is used first.
 
@@ -933,7 +1107,7 @@ With no `--provider`, `vg code` chooses from what you have already configured, b
 | `--session` | — | With `--stream-json`: stay open for further turns instead of exiting after one |
 | `--mock <file>` | — | Use a scripted reply instead of a model (offline; tests/CI/benchmarks) |
 | `-o, --out <file>` | — | Write the JSON result to a file (for CI/benchmarks) |
-| `--local` (global) | — | On-device model backends only — no hosted model call, no catalog fetch |
+| `--local` (global) | — | On-device model backends only — never a hosted model. Implies `--offline` |
 
 `--stream-json` is the protocol **Vibgrate for VS Code** speaks to the CLI: the panel renders the agent's steps, approves or denies each mutating tool call over stdin, and with `--session` keeps one warm graph across turns. It is a supported surface for any host UI, not just ours.
 
@@ -1260,7 +1434,7 @@ vg models catalog
 | `uninstall <name>` | Uninstall a local model — Ollama, LM Studio, or GGUF (`--dry-run` plan; TTY confirm or `--yes`; `--runtime` optional auto-detect) |
 | `host-bench` | Approach B measurement arms (`--simulate` default, `--mock`, `--live --model-path`, `--gate`) |
 | `coding-metrics` | Unified host-bench + Fusion FCS/ZNS report (`--out`, `--gate`, `--version`); publish path for release |
-| `catalog` | Live hosted model catalog (cached; not used under `--local`) |
+| `catalog` | Live hosted model catalog (cached; not used under `--offline`) |
 | `--json` | Machine-readable JSON on stdout |
 
 ```bash
@@ -1338,7 +1512,7 @@ Add `--json` for machine-readable output.
 
 ### vg serve
 
-Start [Vibgrate AI Context](https://vibgrate.com/library) — a local-first [MCP](https://vibgrate.com/glossary/model-context-protocol) serving your code map, drift, and version-correct docs to your AI assistant (fully offline under `--local`).
+Start [Vibgrate AI Context](https://vibgrate.com/library) — a local-first [MCP](https://vibgrate.com/glossary/model-context-protocol) serving your code map, drift, and version-correct docs to your AI assistant (fully offline under `--offline`).
 
 ```bash
 vg serve
@@ -1350,7 +1524,7 @@ vg serve
 | `--port <n>` | `7437` | Port for `--http` |
 | `--host <h>` | `127.0.0.1` | Host for `--http` |
 | `--savings` | — | Record local, counts-only usage savings (opt-in) |
-| `--share-stats` | — | Also upload the counts-only usage ledger to Vibgrate to improve the local MCP (opt-in; off by default; implies `--savings`; disabled under `--local`) |
+| `--share-stats` | — | Also upload the counts-only usage ledger to Vibgrate to improve the local MCP (opt-in; off by default; implies `--savings`; disabled under `--offline`) |
 | `--dedup` | — | Collapse a node's heavy relation lists on repeat reads within a session, to save tokens (opt-in) |
 | `--no-refresh` | — | Serve the map as built; skip the auto-rebuild when files change |
 
@@ -1358,7 +1532,7 @@ Via stdio (default), your AI assistant spawns the server. Via `--http`, it runs
 
 **A live status display shows what the server is doing for you.** While `vg serve` runs in a terminal, a status block on stderr updates in place: uptime, which AI clients are connected (detected from the MCP handshake), calls and average response time per tool, and — for the navigation tools with a grep/read baseline — the context tokens served vs the estimated tokens a grep-and-read agent would have burned instead, with the estimated saving labelled as such. Outside a terminal (when your assistant spawns the server) it degrades to a quiet one-line heartbeat in the server logs every 15 minutes, and only when there has been activity. The display is in-memory only and always on — nothing is written to disk or uploaded (recording and sharing below stay opt-in) — and `--quiet` turns it off.
 
-**Usage stats — local by default, sharing is opt-in.** `--savings` records a *counts-only* ledger under `.vibgrate/` — per navigation call: which tool, how it resolved (complete/partial/miss), the vg-vs-grep token figures, whether it came over the MCP (`mcp`) or the `vg` CLI (`cli`), and a coarse client label (which AI). `vg savings` reports it locally; nothing leaves your machine. `--share-stats` additionally uploads that same counts-only ledger to Vibgrate periodically, so we can see how the local MCP is used and improve it. It **never** sends code, file paths, question text, repo identity, or any credential — only counts, outcomes, token figures, the vg version, your OS/arch, and a random per-install id. It's off unless you pass the flag, is disabled entirely under `--local`, and the endpoint can be overridden with `VIBGRATE_STATS_ENDPOINT`.
+**Usage stats — local by default, sharing is opt-in.** `--savings` records a *counts-only* ledger under `.vibgrate/` — per navigation call: which tool, how it resolved (complete/partial/miss), the vg-vs-grep token figures, whether it came over the MCP (`mcp`) or the `vg` CLI (`cli`), and a coarse client label (which AI). `vg savings` reports it locally; nothing leaves your machine. `--share-stats` additionally uploads that same counts-only ledger to Vibgrate periodically, so we can see how the local MCP is used and improve it. It **never** sends code, file paths, question text, repo identity, or any credential — only counts, outcomes, token figures, the vg version, your OS/arch, and a random per-install id. It's off unless you pass the flag, is disabled entirely under `--offline`, and the endpoint can be overridden with `VIBGRATE_STATS_ENDPOINT`.
 
 **Attributing CLI calls.** The MCP path detects the calling client automatically from the connection handshake. For CLI calls, pass `--client=<ai>` (e.g. `vg "how does auth work" --client=claude`) so the call is attributed in `vg savings` and any shared stats — this is what `vg install` writes into each assistant's skill. Without `--client`, a bare `vg ask` records nothing.
 
@@ -1372,7 +1546,7 @@ The server exposes read-only tools your assistant can call over the code map and
 - `upgrade_impact` — what an upgrade will cost: version distance, how many files import the package, the vulnerabilities it fixes, and — with `changelog: true` — online breaking-change notes between your version and the latest.
 - `resolve_library`, `library_docs` — version-correct, drift-annotated library docs.
 
-All tools are read-only. The server is local-first: it always answers from your machine when it can, and its only network touches are the embedder's one-time model fetch, `upgrade_impact`'s `changelog`, and `library_docs`' fall-through to the hosted catalog when the local docs for a library are thin or missing. `--local` is the hard airgap — it disables all three.
+All tools are read-only. The server is local-first: it always answers from your machine when it can, and its only network touches are the embedder's one-time model fetch, `upgrade_impact`'s `changelog`, and `library_docs`' fall-through to the hosted catalog when the local docs for a library are thin or missing. `--offline` is the hard airgap — it disables all three.
 
 ---
 
@@ -1660,7 +1834,7 @@ vg doctor --local
 | Flag | Description |
 |------|-------------|
 | `--json` | Machine-readable JSON on stdout |
-| `--local` | Skip the hosted reachability probe |
+| `--offline` | Skip the hosted reachability probe |
 | `-C, --cwd <dir>` | Run as if started in that directory |
 
 ---
@@ -1682,7 +1856,7 @@ vg lsp --local
 | `--diagnostics` | Also publish Problems-panel diagnostics (EOL runtime, unmaintained packages, license change). **Off by default** — drift is not a defect, and the Problems panel is not filled by default. |
 | `--no-graph` | Skip the local code graph entirely: no background build; graph queries report it as turned off |
 | `--no-semantic` | Never use semantic search for graph queries (lexical only; embedding model is not downloaded) |
-| `--local` | Never touch the network (air-gapped editor sessions) |
+| `--offline` | Never touch the network (air-gapped editor sessions) |
 
 The process owns stdin/stdout until the client sends `shutdown` + `exit`. Speaks standard LSP plus a custom `vibgrate/score` notification carrying the DriftScore and its **band** (never a colour) so clients can theme correctly.
 
@@ -2224,6 +2398,25 @@ What it **does** collect:
 
 ---
 
+## `--offline` vs `--local`
+
+Two different questions, so two flags:
+
+| Flag | Question it answers | Effect |
+| --- | --- | --- |
+| `--offline` | May this reach the network? | No model download, no catalog fetch, no upload. Available on every command. |
+| `--local` | Where does inference run? | On-device backends only, never a hosted model. Consumed by [`vg code`](#vg-code). |
+
+**`--local` implies `--offline`**, so anything that already passes `--local`
+keeps its exact behaviour. The converse does not hold, and deliberately so:
+forcing on-device inference is a choice you may want on a fully connected
+machine — for privacy, cost, or latency — and `--offline` would not say it.
+
+`vg scan --offline` and `vg evidence --offline` mean the same thing they always
+have.
+
+---
+
 ## Exit Codes
 
 CI and agents branch on these, so they are a stable contract.
@@ -2239,6 +2432,8 @@ CI and agents branch on these, so they are a stable contract.
 | `6`  | `ENGINE_UNAVAILABLE`  | A required optional module is not installed and could not be fetched (see [`vg module`](#vg-module)) |
 
 `6` is deliberately distinct from `2`: a CI gate must never read "engine missing" as a gate verdict.
+The same rule is why [`vg review`](#vg-review) exits `6` when there is no code map, and why `--explain`
+exits `6` rather than quietly producing a review no model contributed to.
 
 ---
 

package/README.md

@@ -590,6 +590,7 @@ All HCS computation runs in an optional, separately-licensed engine module that
 | `vg fix` | Ranked, risk-tiered upgrade plans from the hosted planner — then apply the one you choose |
 | `vg init [path]` | Initialise config and `.vibgrate/` |
 | `vg report` | Generate a report from a scan artifact |
+| `vg review` | **Vibgrate Review** — architecture + security-control review of the current change, locally. One decision (`pass` / `needs_review` / `fail` / `undetermined`) in a signed receipt; protected findings cannot be blessed into a pass. Reports change integrity, not a proof of security. Builds or refreshes the code map itself when it is missing or stale (`--no-auto-build` opts out) |
 | `vg sbom export` / `delta` / `vex` | Export CycloneDX/SPDX SBOM, diff two artifacts, or emit an OpenVEX document |
 | `vg scan [path]` | Scan for upgrade drift |
 | `vg scan --full` | Comprehensive scan: drift + vulnerabilities + a banned-dependency report |
@@ -684,6 +685,7 @@ When `@vibgrate/cli` is installed, it registers **both** bin entries uncondition
 | [**Vibgrate AI Context**](https://vibgrate.com/library) | `vg serve` — version-correct library docs, your code map, and offline drift, served to any assistant. [Supported assistants](https://vibgrate.com/skills) · [on mcp.so](https://mcp.so/servers/cli-a2b26f) |
 | [**Vibgrate Cloud MCP**](https://vibgrate.com/mcp) | The hosted MCP server over your workspace data (OAuth 2.1) |
 | [**Vibgrate Cloud**](https://vibgrate.com/cloud) | History, trends, and team rollups. [Create a workspace](https://dash.vibgrate.com) · [pricing](https://vibgrate.com/pricing) |
+| [**Vibgrate Review**](https://vibgrate.com/cli/docs/review-command) | `vg review` — did this change move the system toward its declared architecture, or weaken a security control? Runs locally from the code map; the receipt, not the repository, is what gets pushed |
 | [**Vibgrate Evidence**](https://vibgrate.com/evidence) | `vg evidence` — freeze shipped releases, then answer "which shipped products contain this vulnerability?" as signed, offline-verifiable evidence. Jurisdiction-neutral regimes, [EU CRA](https://vibgrate.com/cra) first |
 
 **How the scores work:** [DriftScore](https://vibgrate.com/driftscore) · [RiskScore](https://vibgrate.com/riskscore) · [DriftRisk Index](https://vibgrate.com/driftrisk) · [published methodology](https://vibgrate.com/whitepapers/software-risk-and-drift-scoring-methodology) · [public index of real scans](https://vibgrate.com/driftrisk/index) · [README badges](https://vibgrate.com/badges)

package/dist/{agent-4RHH2FR2.js → agent-5GW7C7EB.js}

@@ -1,31 +1,31 @@
-export { CONTEXT_POLICY_VERSION, DISCOVERY_TOOLS, MUTATION_TOOLS, compact, compactWithModel, runAgent } from './chunk-WPQCJADP.js';
+export { CONTEXT_POLICY_VERSION, DISCOVERY_TOOLS, MUTATION_TOOLS, compact, compactWithModel, runAgent } from './chunk-NQQT75AN.js';
 import './chunk-543E6WDJ.js';
-import './chunk-PEHMRPYM.js';
-import './chunk-ZRDTI67N.js';
-import './chunk-SHD5TCZ5.js';
+import './chunk-FKCN653F.js';
+import './chunk-5RW5PIBH.js';
+import './chunk-R2FX4USU.js';
 import './chunk-3HNPVXUK.js';
 import './chunk-5HYCB55P.js';
-import './chunk-R5BGRJ6X.js';
+import './chunk-QMROD7MI.js';
 import './chunk-VIWZ4QT7.js';
-import './chunk-QONHVC4H.js';
-export { summarizeCapsule } from './chunk-LAYDXJEQ.js';
+import './chunk-TWFPHXPN.js';
+export { summarizeCapsule } from './chunk-OAYSRM7J.js';
 import './chunk-EZ7UC5Y5.js';
 import './chunk-6BEBJCK4.js';
 import './chunk-J7LKEB2R.js';
-import './chunk-NQU6E6OG.js';
+import './chunk-YL332BU2.js';
 import './chunk-VHRSG6CF.js';
 import './chunk-6H2QV5DR.js';
-import './chunk-TOHNVUDD.js';
+import './chunk-NSC7ZK62.js';
 import './chunk-T7RSQ5WD.js';
 import './chunk-6WRG7VDO.js';
-import './chunk-WU2DVESP.js';
-import './chunk-K2IWOZEQ.js';
+import './chunk-BA6YBVNT.js';
+import './chunk-FPIMNVLI.js';
 import './chunk-MVPRPSXU.js';
 import './chunk-O3LABX6I.js';
-import './chunk-JQ7OL4XG.js';
+import './chunk-UGRUG2FA.js';
 import './chunk-XP6UUCZZ.js';
 import './chunk-JFGYT6BI.js';
 import './chunk-XQNKCA2J.js';
 import './chunk-Z6ZWNWWR.js';
-//# sourceMappingURL=agent-4RHH2FR2.js.map
-//# sourceMappingURL=agent-4RHH2FR2.js.map
+//# sourceMappingURL=agent-5GW7C7EB.js.map
+//# sourceMappingURL=agent-5GW7C7EB.js.map

package/dist/{agent-4RHH2FR2.js.map → agent-5GW7C7EB.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-4RHH2FR2.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"agent-5GW7C7EB.js"}

package/dist/{approvals-XDFM346D.js → approvals-ISJFILVK.js}

@@ -1,10 +1,10 @@
-export { addApprovalRule, approvalsPath, findMatchingRule, globMatch, loadApprovalRules, normalizeCommandPrefix, removeApprovalRule, ruleForAction, ruleKey, ruleLabel, saveApprovalRules } from './chunk-PEHMRPYM.js';
-import './chunk-K2IWOZEQ.js';
+export { addApprovalRule, approvalsPath, findMatchingRule, globMatch, loadApprovalRules, normalizeCommandPrefix, removeApprovalRule, ruleForAction, ruleKey, ruleLabel, saveApprovalRules } from './chunk-FKCN653F.js';
+import './chunk-FPIMNVLI.js';
 import './chunk-O3LABX6I.js';
-import './chunk-JQ7OL4XG.js';
+import './chunk-UGRUG2FA.js';
 import './chunk-XP6UUCZZ.js';
 import './chunk-JFGYT6BI.js';
 import './chunk-XQNKCA2J.js';
 import './chunk-Z6ZWNWWR.js';
-//# sourceMappingURL=approvals-XDFM346D.js.map
-//# sourceMappingURL=approvals-XDFM346D.js.map
+//# sourceMappingURL=approvals-ISJFILVK.js.map
+//# sourceMappingURL=approvals-ISJFILVK.js.map

package/dist/{approvals-XDFM346D.js.map → approvals-ISJFILVK.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"approvals-XDFM346D.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"approvals-ISJFILVK.js"}

package/dist/{attach-LGTCYNKC.js → attach-JUSALQ75.js}

@@ -1,4 +1,4 @@
-export { attachVgd, daemonDisabledReason } from './chunk-E44I7635.js';
+export { attachVgd, daemonDisabledReason } from './chunk-KCKG3EEJ.js';
 import './chunk-A3WWRW7U.js';
 import './chunk-VHRSG6CF.js';
 import './chunk-6H2QV5DR.js';
@@ -6,5 +6,5 @@ import './chunk-XP6UUCZZ.js';
 import './chunk-JFGYT6BI.js';
 import './chunk-XQNKCA2J.js';
 import './chunk-Z6ZWNWWR.js';
-//# sourceMappingURL=attach-LGTCYNKC.js.map
-//# sourceMappingURL=attach-LGTCYNKC.js.map
+//# sourceMappingURL=attach-JUSALQ75.js.map
+//# sourceMappingURL=attach-JUSALQ75.js.map

package/dist/{attach-LGTCYNKC.js.map → attach-JUSALQ75.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"attach-LGTCYNKC.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"attach-JUSALQ75.js"}

package/dist/baseline-YL2IZZ4Y.js

@@ -0,0 +1,9 @@
+export { baselineCommand, runBaseline } from './chunk-RRSUNTZI.js';
+import './chunk-HUJZO4K5.js';
+import './chunk-PVNALGTG.js';
+import './chunk-CRAMOEBE.js';
+import './chunk-T7RSQ5WD.js';
+import './chunk-UGRUG2FA.js';
+import './chunk-Z6ZWNWWR.js';
+//# sourceMappingURL=baseline-YL2IZZ4Y.js.map
+//# sourceMappingURL=baseline-YL2IZZ4Y.js.map

package/dist/{baseline-PRY5HKL5.js.map → baseline-YL2IZZ4Y.js.map}

@@ -1 +1 @@
-{"version":3,"sources":[],"names":[],"mappings":"","file":"baseline-PRY5HKL5.js"}
+{"version":3,"sources":[],"names":[],"mappings":"","file":"baseline-YL2IZZ4Y.js"}

package/dist/{chunk-ZRDTI67N.js → chunk-5RW5PIBH.js}

@@ -1,5 +1,5 @@
 import { resolveOne } from './chunk-J7LKEB2R.js';
-import { impactOf, queryGraph } from './chunk-NQU6E6OG.js';
+import { impactOf, queryGraph } from './chunk-YL332BU2.js';
 import { vgdRequest } from './chunk-VHRSG6CF.js';
 
 // src/code/graph-backend.ts
@@ -132,5 +132,5 @@ function resolveSymbolId(graph, symbol) {
 }
 
 export { localGraphBackend, resolveGraphBackend, vgdGraphBackend };
-//# sourceMappingURL=chunk-ZRDTI67N.js.map
-//# sourceMappingURL=chunk-ZRDTI67N.js.map
+//# sourceMappingURL=chunk-5RW5PIBH.js.map
+//# sourceMappingURL=chunk-5RW5PIBH.js.map

package/dist/{chunk-ZRDTI67N.js.map → chunk-5RW5PIBH.js.map}

@@ -1 +1 @@
-{"version":3,"sources":["../src/code/graph-backend.ts"],"names":[],"mappings":";;;;;AA2DO,SAAS,kBAAkB,KAAA,EAA8B;AAC9D,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,OAAA;AAAA,IACR,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM;AACxB,MAAA,MAAM,GAAA,GAAM,UAAA,CAAW,KAAA,EAAO,KAAA,EAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,KAAA,IAAS,EAAA,EAAI,CAAA;AAC/E,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,OAAA;AAAA,QACR,OAAA,EAAS,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAC/B,EAAA,EAAI,EAAE,IAAA,CAAK,EAAA;AAAA,UACX,aAAA,EAAe,EAAE,IAAA,CAAK,aAAA;AAAA,UACtB,IAAA,EAAM,EAAE,IAAA,CAAK,IAAA;AAAA,UACb,IAAA,EAAM,EAAE,IAAA,CAAK,IAAA;AAAA,UACb,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAA,EAAM,KAAA,IAAS,CAAA;AAAA,UAC5B,OAAO,CAAA,CAAE,KAAA;AAAA,UACT,KAAK,CAAA,CAAE,GAAA;AAAA,UACP,SAAA,EAAW,CAAA,CAAE,IAAA,CAAK,SAAA,IAAa;AAAA,SACjC,CAAE;AAAA,OACJ;AAAA,IACF,CAAA;AAAA,IACA,MAAM,MAAA,CAAO,MAAA,EAAQ,IAAA,EAAM;AACzB,MAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,KAAA,EAAO,MAAM,CAAA;AAC1C,MAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,MAAA,MAAM,GAAA,GAAM,SAAS,KAAA,EAAO,IAAA,EAAM,EAAE,KAAA,EAAO,IAAA,EAAM,KAAA,IAAS,CAAA,EAAG,CAAA;AAC7D,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,OAAA;AAAA,QACR,MAAM,GAAA,CAAI,IAAA;AAAA,QACV,OAAO,GAAA,CAAI,KAAA;AAAA,QACX,QAAA,EAAU,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UACjC,IAAI,CAAA,CAAE,EAAA;AAAA,UACN,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,OAAO,CAAA,CAAE,KAAA;AAAA,UACT,YAAY,CAAA,CAAE;AAAA,SAChB,CAAE,CAAA;AAAA,QACF,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,YAAY,GAAA,CAAI;AAAA,OAClB;AAAA,IACF;AAAA,GACF;AACF;AAeO,SAAS,gBAAgB,OAAA,EAA+C;AAC7E,EAAA,MAAM,KAAA,GAAQ,iBAAA,CAAkB,OAAA,CAAQ,QAAQ,CAAA;AAChD,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,KAAY,CAAC,KAAK,IAAA,KAAS,UAAA,CAAW,KAAK,IAAI,CAAA,CAAA;AACvE,EAAA,MAAM,UAAA,GAA+B,EAAE,UAAA,EAAY,OAAA,CAAQ,UAAA,EAAW;AAEtE,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,KAAA;AAAA,IACR,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,MAAO,MAAM,OAAA;AAAA,UACjB;AAAA,YACE,EAAA,EAAI,aAAA;AAAA,YACJ,cAAc,OAAA,CAAQ,YAAA;AAAA,YACtB,KAAA;AAAA,YACA,KAAA,EAAO,MAAM,KAAA,IAAS,EAAA;AAAA,YACtB,QAAQ,OAAA,CAAQ;AAAA,WAClB;AAAA,UACA;AAAA,SACF;AAYA,QAAA,IAAI,KAAK,EAAA,IAAM,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,EAAG;AACzC,UAAA,OAAO;AAAA,YACL,MAAA,EAAQ,KAAA;AAAA,YACR,OAAA,EAAS,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,cAC/B,IAAI,CAAA,CAAE,EAAA;AAAA,cACN,eAAe,CAAA,CAAE,aAAA;AAAA,cACjB,MAAM,CAAA,CAAE,IAAA;AAAA,cACR,MAAM,CAAA,CAAE,IAAA;AAAA,cACR,MAAM,CAAA,CAAE,IAAA;AAAA,cACR,OAAO,CAAA,CAAE,KAAA;AAAA,cACT,KAAK,CAAA,CAAE,GAAA;AAAA,cACP,SAAA,EAAW;AAAA,aACb,CAAE;AAAA,WACJ;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,OAAO,KAAA,CAAM,MAAA,CAAO,KAAA,EAAO,IAAI,CAAA;AAAA,IACjC,CAAA;AAAA,IACA,MAAM,MAAA,CAAO,MAAA,EAAQ,IAAA,EAAM;AACzB,MAAA,IAAI;AACF,QAAA,MAAM,MAAO,MAAM,OAAA;AAAA,UACjB;AAAA,YACE,EAAA,EAAI,WAAA;AAAA,YACJ,cAAc,OAAA,CAAQ,YAAA;AAAA,YACtB,MAAA;AAAA,YACA,KAAA,EAAO,MAAM,KAAA,IAAS,CAAA;AAAA,YACtB,QAAQ,OAAA,CAAQ;AAAA,WAClB;AAAA,UACA;AAAA,SACF;AAQA,QAAA,IAAI,GAAA,EAAK,MAAM,GAAA,CAAI,IAAA,IAAQ,MAAM,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA,EAAG;AACtD,UAAA,OAAO;AAAA,YACL,MAAA,EAAQ,KAAA;AAAA,YACR,MAAM,GAAA,CAAI,IAAA;AAAA,YACV,KAAA,EAAO,GAAA,CAAI,KAAA,IAAS,IAAA,EAAM,KAAA,IAAS,CAAA;AAAA,YACnC,UAAU,GAAA,CAAI,QAAA;AAAA,YACd,MAAA,EAAQ,IAAI,MAAA,IAAU,CAAA;AAAA,YACtB,UAAA,EAAY,IAAI,UAAA,IAAc;AAAA,WAChC;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,OAAO,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,IAAI,CAAA;AAAA,IAClC;AAAA,GACF;AACF;AAKO,SAAS,oBAAoB,KAAA,EAKnB;AACf,EAAA,IAAI,KAAA,CAAM,YAAA,IAAgB,KAAA,CAAM,UAAA,EAAY;AAC1C,IAAA,OAAO,eAAA,CAAgB;AAAA,MACrB,cAAc,KAAA,CAAM,YAAA;AAAA,MACpB,MAAA,EAAQ,MAAM,MAAA,IAAU,MAAA;AAAA,MACxB,YAAY,KAAA,CAAM,UAAA;AAAA,MAClB,UAAU,KAAA,CAAM;AAAA,KACjB,CAAA;AAAA,EACH;AACA,EAAA,OAAO,iBAAA,CAAkB,MAAM,KAAK,CAAA;AACtC;AAEA,SAAS,eAAA,CAAgB,OAAgB,MAAA,EAA+B;AACtE,EAAA,IAAI,KAAA,CAAM,MAAM,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,EAAA,KAAO,MAAM,CAAA,EAAG,OAAO,MAAA;AACrD,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,KAAA,EAAO,MAAM,CAAA;AACpC,EAAA,IAAI,GAAA,CAAI,IAAA,EAAM,EAAA,EAAI,OAAO,IAAI,IAAA,CAAK,EAAA;AAClC,EAAA,IAAI,GAAA,CAAI,UAAA,CAAW,MAAA,KAAW,CAAA,IAAK,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA,EAAG,EAAA,EAAI,OAAO,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA,CAAE,EAAA;AACnF,EAAA,MAAM,CAAA,GAAI,OAAO,WAAA,EAAY;AAC7B,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,aAAA,EAAe,WAAA,OAAkB,CAAA,IAAK,CAAA,CAAE,IAAA,EAAM,WAAA,OAAkB,CAAC,CAAA;AACxG,EAAA,OAAO,MAAM,EAAA,IAAM,IAAA;AACrB","file":"chunk-ZRDTI67N.js","sourcesContent":["/**\n * Graph query backend for the agent tool layer (Fusion Runtime).\n *\n * Tools prefer a warm ActiveGraph in vgd when a daemon session is attached;\n * otherwise they fall back to the in-process {@link VgGraph}. Failures never\n * surface to the model as transport errors — they degrade to local query.\n */\n\nimport { queryGraph } from '../engine/query.js';\nimport { impactOf } from '../engine/impact.js';\nimport { resolveOne } from '../engine/lookup.js';\nimport { vgdRequest, type VgdClientOptions } from '../runtime/vgd/client.js';\nimport type { VgdRequest } from '../runtime/vgd/protocol.js';\nimport type { VgGraph } from '../schema.js';\n\nexport type GraphBackendSource = 'local' | 'vgd';\n\nexport interface GraphSearchHit {\n  id: string;\n  qualifiedName: string;\n  kind: string;\n  file: string;\n  line: number;\n  score: number;\n  why: string;\n  signature?: string | null;\n}\n\nexport interface GraphImpactHit {\n  id: string;\n  name: string;\n  kind: string;\n  file: string;\n  line: number;\n  depth: number;\n  confidence: number;\n}\n\nexport interface GraphImpactResult {\n  root: { id: string; name: string };\n  depth: number;\n  affected: GraphImpactHit[];\n  direct: number;\n  transitive: number;\n  source: GraphBackendSource;\n}\n\nexport interface GraphSearchResult {\n  matches: GraphSearchHit[];\n  source: GraphBackendSource;\n}\n\nexport interface GraphBackend {\n  readonly source: GraphBackendSource;\n  search(query: string, opts?: { limit?: number }): Promise<GraphSearchResult>;\n  impact(symbol: string, opts?: { depth?: number }): Promise<GraphImpactResult | null>;\n}\n\n/** Pure in-process backend over a loaded graph. */\nexport function localGraphBackend(graph: VgGraph): GraphBackend {\n  return {\n    source: 'local',\n    async search(query, opts) {\n      const res = queryGraph(graph, query, { budget: 1500, limit: opts?.limit ?? 10 });\n      return {\n        source: 'local',\n        matches: res.matches.map((m) => ({\n          id: m.node.id,\n          qualifiedName: m.node.qualifiedName,\n          kind: m.node.kind,\n          file: m.node.file,\n          line: m.node.span?.start ?? 0,\n          score: m.score,\n          why: m.why,\n          signature: m.node.signature ?? null,\n        })),\n      };\n    },\n    async impact(symbol, opts) {\n      const node = resolveSymbolId(graph, symbol);\n      if (!node) return null;\n      const imp = impactOf(graph, node, { depth: opts?.depth ?? 4 });\n      return {\n        source: 'local',\n        root: imp.root,\n        depth: imp.depth,\n        affected: imp.affected.map((a) => ({\n          id: a.id,\n          name: a.name,\n          kind: a.kind,\n          file: a.file,\n          line: a.line,\n          depth: a.depth,\n          confidence: a.confidence,\n        })),\n        direct: imp.direct,\n        transitive: imp.transitive,\n      };\n    },\n  };\n}\n\nexport interface VgdGraphBackendOptions {\n  repositoryId: string;\n  gitRef?: string;\n  socketPath?: string;\n  /** Always required for fall back when vgd has no slot or is down. */\n  fallback: VgGraph;\n  request?: (req: VgdRequest, opts?: VgdClientOptions) => Promise<unknown>;\n}\n\n/**\n * Prefer vgd query/impact; on any failure or empty daemon state, use local.\n * The returned `source` reflects which path answered.\n */\nexport function vgdGraphBackend(options: VgdGraphBackendOptions): GraphBackend {\n  const local = localGraphBackend(options.fallback);\n  const request = options.request ?? ((req, opts) => vgdRequest(req, opts));\n  const clientOpts: VgdClientOptions = { socketPath: options.socketPath };\n\n  return {\n    source: 'vgd',\n    async search(query, opts) {\n      try {\n        const res = (await request(\n          {\n            op: 'query-graph',\n            repositoryId: options.repositoryId,\n            query,\n            limit: opts?.limit ?? 10,\n            gitRef: options.gitRef,\n          },\n          clientOpts,\n        )) as {\n          ok?: boolean;\n          matches?: Array<{\n            id: string;\n            qualifiedName: string;\n            kind: string;\n            file: string;\n            line: number;\n            score: number;\n            why: string;\n          }>;\n        };\n        if (res?.ok && Array.isArray(res.matches)) {\n          return {\n            source: 'vgd',\n            matches: res.matches.map((m) => ({\n              id: m.id,\n              qualifiedName: m.qualifiedName,\n              kind: m.kind,\n              file: m.file,\n              line: m.line,\n              score: m.score,\n              why: m.why,\n              signature: null,\n            })),\n          };\n        }\n      } catch {\n        /* fall through */\n      }\n      return local.search(query, opts);\n    },\n    async impact(symbol, opts) {\n      try {\n        const res = (await request(\n          {\n            op: 'impact-of',\n            repositoryId: options.repositoryId,\n            symbol,\n            depth: opts?.depth ?? 4,\n            gitRef: options.gitRef,\n          },\n          clientOpts,\n        )) as {\n          ok?: boolean;\n          root?: { id: string; name: string };\n          depth?: number;\n          affected?: GraphImpactHit[];\n          direct?: number;\n          transitive?: number;\n        };\n        if (res?.ok && res.root && Array.isArray(res.affected)) {\n          return {\n            source: 'vgd',\n            root: res.root,\n            depth: res.depth ?? opts?.depth ?? 4,\n            affected: res.affected,\n            direct: res.direct ?? 0,\n            transitive: res.transitive ?? 0,\n          };\n        }\n      } catch {\n        /* fall through */\n      }\n      return local.impact(symbol, opts);\n    },\n  };\n}\n\n/**\n * Pick a backend: vgd when repositoryId + socket are known, else local.\n */\nexport function resolveGraphBackend(input: {\n  graph: VgGraph;\n  repositoryId?: string | null;\n  gitRef?: string | null;\n  socketPath?: string | null;\n}): GraphBackend {\n  if (input.repositoryId && input.socketPath) {\n    return vgdGraphBackend({\n      repositoryId: input.repositoryId,\n      gitRef: input.gitRef ?? undefined,\n      socketPath: input.socketPath,\n      fallback: input.graph,\n    });\n  }\n  return localGraphBackend(input.graph);\n}\n\nfunction resolveSymbolId(graph: VgGraph, symbol: string): string | null {\n  if (graph.nodes.some((n) => n.id === symbol)) return symbol;\n  const hit = resolveOne(graph, symbol);\n  if (hit.node?.id) return hit.node.id;\n  if (hit.candidates.length === 1 && hit.candidates[0]?.id) return hit.candidates[0].id;\n  const q = symbol.toLowerCase();\n  const byQn = graph.nodes.find((n) => n.qualifiedName?.toLowerCase() === q || n.name?.toLowerCase() === q);\n  return byQn?.id ?? null;\n}\n"]}
+{"version":3,"sources":["../src/code/graph-backend.ts"],"names":[],"mappings":";;;;;AA2DO,SAAS,kBAAkB,KAAA,EAA8B;AAC9D,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,OAAA;AAAA,IACR,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM;AACxB,MAAA,MAAM,GAAA,GAAM,UAAA,CAAW,KAAA,EAAO,KAAA,EAAO,EAAE,MAAA,EAAQ,IAAA,EAAM,KAAA,EAAO,IAAA,EAAM,KAAA,IAAS,EAAA,EAAI,CAAA;AAC/E,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,OAAA;AAAA,QACR,OAAA,EAAS,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UAC/B,EAAA,EAAI,EAAE,IAAA,CAAK,EAAA;AAAA,UACX,aAAA,EAAe,EAAE,IAAA,CAAK,aAAA;AAAA,UACtB,IAAA,EAAM,EAAE,IAAA,CAAK,IAAA;AAAA,UACb,IAAA,EAAM,EAAE,IAAA,CAAK,IAAA;AAAA,UACb,IAAA,EAAM,CAAA,CAAE,IAAA,CAAK,IAAA,EAAM,KAAA,IAAS,CAAA;AAAA,UAC5B,OAAO,CAAA,CAAE,KAAA;AAAA,UACT,KAAK,CAAA,CAAE,GAAA;AAAA,UACP,SAAA,EAAW,CAAA,CAAE,IAAA,CAAK,SAAA,IAAa;AAAA,SACjC,CAAE;AAAA,OACJ;AAAA,IACF,CAAA;AAAA,IACA,MAAM,MAAA,CAAO,MAAA,EAAQ,IAAA,EAAM;AACzB,MAAA,MAAM,IAAA,GAAO,eAAA,CAAgB,KAAA,EAAO,MAAM,CAAA;AAC1C,MAAA,IAAI,CAAC,MAAM,OAAO,IAAA;AAClB,MAAA,MAAM,GAAA,GAAM,SAAS,KAAA,EAAO,IAAA,EAAM,EAAE,KAAA,EAAO,IAAA,EAAM,KAAA,IAAS,CAAA,EAAG,CAAA;AAC7D,MAAA,OAAO;AAAA,QACL,MAAA,EAAQ,OAAA;AAAA,QACR,MAAM,GAAA,CAAI,IAAA;AAAA,QACV,OAAO,GAAA,CAAI,KAAA;AAAA,QACX,QAAA,EAAU,GAAA,CAAI,QAAA,CAAS,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,UACjC,IAAI,CAAA,CAAE,EAAA;AAAA,UACN,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,MAAM,CAAA,CAAE,IAAA;AAAA,UACR,OAAO,CAAA,CAAE,KAAA;AAAA,UACT,YAAY,CAAA,CAAE;AAAA,SAChB,CAAE,CAAA;AAAA,QACF,QAAQ,GAAA,CAAI,MAAA;AAAA,QACZ,YAAY,GAAA,CAAI;AAAA,OAClB;AAAA,IACF;AAAA,GACF;AACF;AAeO,SAAS,gBAAgB,OAAA,EAA+C;AAC7E,EAAA,MAAM,KAAA,GAAQ,iBAAA,CAAkB,OAAA,CAAQ,QAAQ,CAAA;AAChD,EAAA,MAAM,OAAA,GAAU,QAAQ,OAAA,KAAY,CAAC,KAAK,IAAA,KAAS,UAAA,CAAW,KAAK,IAAI,CAAA,CAAA;AACvE,EAAA,MAAM,UAAA,GAA+B,EAAE,UAAA,EAAY,OAAA,CAAQ,UAAA,EAAW;AAEtE,EAAA,OAAO;AAAA,IACL,MAAA,EAAQ,KAAA;AAAA,IACR,MAAM,MAAA,CAAO,KAAA,EAAO,IAAA,EAAM;AACxB,MAAA,IAAI;AACF,QAAA,MAAM,MAAO,MAAM,OAAA;AAAA,UACjB;AAAA,YACE,EAAA,EAAI,aAAA;AAAA,YACJ,cAAc,OAAA,CAAQ,YAAA;AAAA,YACtB,KAAA;AAAA,YACA,KAAA,EAAO,MAAM,KAAA,IAAS,EAAA;AAAA,YACtB,QAAQ,OAAA,CAAQ;AAAA,WAClB;AAAA,UACA;AAAA,SACF;AAYA,QAAA,IAAI,KAAK,EAAA,IAAM,KAAA,CAAM,OAAA,CAAQ,GAAA,CAAI,OAAO,CAAA,EAAG;AACzC,UAAA,OAAO;AAAA,YACL,MAAA,EAAQ,KAAA;AAAA,YACR,OAAA,EAAS,GAAA,CAAI,OAAA,CAAQ,GAAA,CAAI,CAAC,CAAA,MAAO;AAAA,cAC/B,IAAI,CAAA,CAAE,EAAA;AAAA,cACN,eAAe,CAAA,CAAE,aAAA;AAAA,cACjB,MAAM,CAAA,CAAE,IAAA;AAAA,cACR,MAAM,CAAA,CAAE,IAAA;AAAA,cACR,MAAM,CAAA,CAAE,IAAA;AAAA,cACR,OAAO,CAAA,CAAE,KAAA;AAAA,cACT,KAAK,CAAA,CAAE,GAAA;AAAA,cACP,SAAA,EAAW;AAAA,aACb,CAAE;AAAA,WACJ;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,OAAO,KAAA,CAAM,MAAA,CAAO,KAAA,EAAO,IAAI,CAAA;AAAA,IACjC,CAAA;AAAA,IACA,MAAM,MAAA,CAAO,MAAA,EAAQ,IAAA,EAAM;AACzB,MAAA,IAAI;AACF,QAAA,MAAM,MAAO,MAAM,OAAA;AAAA,UACjB;AAAA,YACE,EAAA,EAAI,WAAA;AAAA,YACJ,cAAc,OAAA,CAAQ,YAAA;AAAA,YACtB,MAAA;AAAA,YACA,KAAA,EAAO,MAAM,KAAA,IAAS,CAAA;AAAA,YACtB,QAAQ,OAAA,CAAQ;AAAA,WAClB;AAAA,UACA;AAAA,SACF;AAQA,QAAA,IAAI,GAAA,EAAK,MAAM,GAAA,CAAI,IAAA,IAAQ,MAAM,OAAA,CAAQ,GAAA,CAAI,QAAQ,CAAA,EAAG;AACtD,UAAA,OAAO;AAAA,YACL,MAAA,EAAQ,KAAA;AAAA,YACR,MAAM,GAAA,CAAI,IAAA;AAAA,YACV,KAAA,EAAO,GAAA,CAAI,KAAA,IAAS,IAAA,EAAM,KAAA,IAAS,CAAA;AAAA,YACnC,UAAU,GAAA,CAAI,QAAA;AAAA,YACd,MAAA,EAAQ,IAAI,MAAA,IAAU,CAAA;AAAA,YACtB,UAAA,EAAY,IAAI,UAAA,IAAc;AAAA,WAChC;AAAA,QACF;AAAA,MACF,CAAA,CAAA,MAAQ;AAAA,MAER;AACA,MAAA,OAAO,KAAA,CAAM,MAAA,CAAO,MAAA,EAAQ,IAAI,CAAA;AAAA,IAClC;AAAA,GACF;AACF;AAKO,SAAS,oBAAoB,KAAA,EAKnB;AACf,EAAA,IAAI,KAAA,CAAM,YAAA,IAAgB,KAAA,CAAM,UAAA,EAAY;AAC1C,IAAA,OAAO,eAAA,CAAgB;AAAA,MACrB,cAAc,KAAA,CAAM,YAAA;AAAA,MACpB,MAAA,EAAQ,MAAM,MAAA,IAAU,MAAA;AAAA,MACxB,YAAY,KAAA,CAAM,UAAA;AAAA,MAClB,UAAU,KAAA,CAAM;AAAA,KACjB,CAAA;AAAA,EACH;AACA,EAAA,OAAO,iBAAA,CAAkB,MAAM,KAAK,CAAA;AACtC;AAEA,SAAS,eAAA,CAAgB,OAAgB,MAAA,EAA+B;AACtE,EAAA,IAAI,KAAA,CAAM,MAAM,IAAA,CAAK,CAAC,MAAM,CAAA,CAAE,EAAA,KAAO,MAAM,CAAA,EAAG,OAAO,MAAA;AACrD,EAAA,MAAM,GAAA,GAAM,UAAA,CAAW,KAAA,EAAO,MAAM,CAAA;AACpC,EAAA,IAAI,GAAA,CAAI,IAAA,EAAM,EAAA,EAAI,OAAO,IAAI,IAAA,CAAK,EAAA;AAClC,EAAA,IAAI,GAAA,CAAI,UAAA,CAAW,MAAA,KAAW,CAAA,IAAK,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA,EAAG,EAAA,EAAI,OAAO,GAAA,CAAI,UAAA,CAAW,CAAC,CAAA,CAAE,EAAA;AACnF,EAAA,MAAM,CAAA,GAAI,OAAO,WAAA,EAAY;AAC7B,EAAA,MAAM,IAAA,GAAO,KAAA,CAAM,KAAA,CAAM,IAAA,CAAK,CAAC,CAAA,KAAM,CAAA,CAAE,aAAA,EAAe,WAAA,OAAkB,CAAA,IAAK,CAAA,CAAE,IAAA,EAAM,WAAA,OAAkB,CAAC,CAAA;AACxG,EAAA,OAAO,MAAM,EAAA,IAAM,IAAA;AACrB","file":"chunk-5RW5PIBH.js","sourcesContent":["/**\n * Graph query backend for the agent tool layer (Fusion Runtime).\n *\n * Tools prefer a warm ActiveGraph in vgd when a daemon session is attached;\n * otherwise they fall back to the in-process {@link VgGraph}. Failures never\n * surface to the model as transport errors — they degrade to local query.\n */\n\nimport { queryGraph } from '../engine/query.js';\nimport { impactOf } from '../engine/impact.js';\nimport { resolveOne } from '../engine/lookup.js';\nimport { vgdRequest, type VgdClientOptions } from '../runtime/vgd/client.js';\nimport type { VgdRequest } from '../runtime/vgd/protocol.js';\nimport type { VgGraph } from '../schema.js';\n\nexport type GraphBackendSource = 'local' | 'vgd';\n\nexport interface GraphSearchHit {\n  id: string;\n  qualifiedName: string;\n  kind: string;\n  file: string;\n  line: number;\n  score: number;\n  why: string;\n  signature?: string | null;\n}\n\nexport interface GraphImpactHit {\n  id: string;\n  name: string;\n  kind: string;\n  file: string;\n  line: number;\n  depth: number;\n  confidence: number;\n}\n\nexport interface GraphImpactResult {\n  root: { id: string; name: string };\n  depth: number;\n  affected: GraphImpactHit[];\n  direct: number;\n  transitive: number;\n  source: GraphBackendSource;\n}\n\nexport interface GraphSearchResult {\n  matches: GraphSearchHit[];\n  source: GraphBackendSource;\n}\n\nexport interface GraphBackend {\n  readonly source: GraphBackendSource;\n  search(query: string, opts?: { limit?: number }): Promise<GraphSearchResult>;\n  impact(symbol: string, opts?: { depth?: number }): Promise<GraphImpactResult | null>;\n}\n\n/** Pure in-process backend over a loaded graph. */\nexport function localGraphBackend(graph: VgGraph): GraphBackend {\n  return {\n    source: 'local',\n    async search(query, opts) {\n      const res = queryGraph(graph, query, { budget: 1500, limit: opts?.limit ?? 10 });\n      return {\n        source: 'local',\n        matches: res.matches.map((m) => ({\n          id: m.node.id,\n          qualifiedName: m.node.qualifiedName,\n          kind: m.node.kind,\n          file: m.node.file,\n          line: m.node.span?.start ?? 0,\n          score: m.score,\n          why: m.why,\n          signature: m.node.signature ?? null,\n        })),\n      };\n    },\n    async impact(symbol, opts) {\n      const node = resolveSymbolId(graph, symbol);\n      if (!node) return null;\n      const imp = impactOf(graph, node, { depth: opts?.depth ?? 4 });\n      return {\n        source: 'local',\n        root: imp.root,\n        depth: imp.depth,\n        affected: imp.affected.map((a) => ({\n          id: a.id,\n          name: a.name,\n          kind: a.kind,\n          file: a.file,\n          line: a.line,\n          depth: a.depth,\n          confidence: a.confidence,\n        })),\n        direct: imp.direct,\n        transitive: imp.transitive,\n      };\n    },\n  };\n}\n\nexport interface VgdGraphBackendOptions {\n  repositoryId: string;\n  gitRef?: string;\n  socketPath?: string;\n  /** Always required for fall back when vgd has no slot or is down. */\n  fallback: VgGraph;\n  request?: (req: VgdRequest, opts?: VgdClientOptions) => Promise<unknown>;\n}\n\n/**\n * Prefer vgd query/impact; on any failure or empty daemon state, use local.\n * The returned `source` reflects which path answered.\n */\nexport function vgdGraphBackend(options: VgdGraphBackendOptions): GraphBackend {\n  const local = localGraphBackend(options.fallback);\n  const request = options.request ?? ((req, opts) => vgdRequest(req, opts));\n  const clientOpts: VgdClientOptions = { socketPath: options.socketPath };\n\n  return {\n    source: 'vgd',\n    async search(query, opts) {\n      try {\n        const res = (await request(\n          {\n            op: 'query-graph',\n            repositoryId: options.repositoryId,\n            query,\n            limit: opts?.limit ?? 10,\n            gitRef: options.gitRef,\n          },\n          clientOpts,\n        )) as {\n          ok?: boolean;\n          matches?: Array<{\n            id: string;\n            qualifiedName: string;\n            kind: string;\n            file: string;\n            line: number;\n            score: number;\n            why: string;\n          }>;\n        };\n        if (res?.ok && Array.isArray(res.matches)) {\n          return {\n            source: 'vgd',\n            matches: res.matches.map((m) => ({\n              id: m.id,\n              qualifiedName: m.qualifiedName,\n              kind: m.kind,\n              file: m.file,\n              line: m.line,\n              score: m.score,\n              why: m.why,\n              signature: null,\n            })),\n          };\n        }\n      } catch {\n        /* fall through */\n      }\n      return local.search(query, opts);\n    },\n    async impact(symbol, opts) {\n      try {\n        const res = (await request(\n          {\n            op: 'impact-of',\n            repositoryId: options.repositoryId,\n            symbol,\n            depth: opts?.depth ?? 4,\n            gitRef: options.gitRef,\n          },\n          clientOpts,\n        )) as {\n          ok?: boolean;\n          root?: { id: string; name: string };\n          depth?: number;\n          affected?: GraphImpactHit[];\n          direct?: number;\n          transitive?: number;\n        };\n        if (res?.ok && res.root && Array.isArray(res.affected)) {\n          return {\n            source: 'vgd',\n            root: res.root,\n            depth: res.depth ?? opts?.depth ?? 4,\n            affected: res.affected,\n            direct: res.direct ?? 0,\n            transitive: res.transitive ?? 0,\n          };\n        }\n      } catch {\n        /* fall through */\n      }\n      return local.impact(symbol, opts);\n    },\n  };\n}\n\n/**\n * Pick a backend: vgd when repositoryId + socket are known, else local.\n */\nexport function resolveGraphBackend(input: {\n  graph: VgGraph;\n  repositoryId?: string | null;\n  gitRef?: string | null;\n  socketPath?: string | null;\n}): GraphBackend {\n  if (input.repositoryId && input.socketPath) {\n    return vgdGraphBackend({\n      repositoryId: input.repositoryId,\n      gitRef: input.gitRef ?? undefined,\n      socketPath: input.socketPath,\n      fallback: input.graph,\n    });\n  }\n  return localGraphBackend(input.graph);\n}\n\nfunction resolveSymbolId(graph: VgGraph, symbol: string): string | null {\n  if (graph.nodes.some((n) => n.id === symbol)) return symbol;\n  const hit = resolveOne(graph, symbol);\n  if (hit.node?.id) return hit.node.id;\n  if (hit.candidates.length === 1 && hit.candidates[0]?.id) return hit.candidates[0].id;\n  const q = symbol.toLowerCase();\n  const byQn = graph.nodes.find((n) => n.qualifiedName?.toLowerCase() === q || n.name?.toLowerCase() === q);\n  return byQn?.id ?? null;\n}\n"]}