npm - githits - Versions diffs - 0.4.4 → 0.4.6 - Mend

githits 0.4.4 → 0.4.6

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (25) hide show

package/.claude-plugin/marketplace.json +1 -1
package/.claude-plugin/plugin.json +1 -1
package/.plugin/plugin.json +1 -1
package/GEMINI.md +6 -4
package/README.md +5 -4
package/commands/example.md +2 -1
package/commands/help.md +3 -2
package/commands/search.md +2 -1
package/dist/cli.js +2236 -385
package/dist/index.js +1 -1
package/dist/shared/{chunk-k35egwwf.js → chunk-2fdxv7pe.js} +2 -2
package/dist/shared/{chunk-96tjsv6y.js → chunk-a1hzwt2m.js} +1 -1
package/dist/shared/{chunk-tfqxat16.js → chunk-f16s86ze.js} +882 -84
package/gemini-extension.json +1 -1
package/package.json +12 -10
package/plugins/claude/.claude-plugin/plugin.json +1 -1
package/plugins/claude/commands/example.md +2 -1
package/plugins/claude/commands/help.md +3 -2
package/plugins/claude/commands/search.md +2 -1
package/plugins/claude/skills/search/SKILL.md +2 -0
package/skills/githits-code/SKILL.md +81 -0
package/skills/githits-code/references/code-and-docs.md +49 -0
package/skills/githits-package/SKILL.md +90 -0
package/skills/githits-package/references/package.md +51 -0
package/skills/search/SKILL.md +0 -40

package/dist/shared/{chunk-tfqxat16.js → chunk-f16s86ze.js} RENAMED Viewed

@@ -1,7 +1,7 @@
 import {
   __require,
   version
-} from "./chunk-96tjsv6y.js";
+} from "./chunk-a1hzwt2m.js";
 // src/services/app-config-paths.ts
 var APP_DIR = "githits";
@@ -195,7 +195,7 @@ class AuthServiceImpl {
         }
         if (url.pathname !== "/callback") {
           if (callbackHandled) {
-            sendHtmlResponse(res, 200, successHtml("Authentication already completed."));
+            sendHtmlResponse(res, 200, successHtml("You're already signed in."));
             return;
           }
           sendHtmlResponse(res, 404, errorHtml("Invalid callback path.", "Run `githits login` to start authentication."));
@@ -303,11 +303,12 @@ function parseRefreshTokenResponse(data) {
     expiresIn: d.expires_in || 3600
   };
 }
-function successHtml(title = "Authentication successful") {
+function successHtml(title = "You're signed in") {
   return `<!DOCTYPE html>
 <html><head>
 <title>GitHits CLI</title>
 <meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&family=Lexend:wght@600&display=swap" rel="stylesheet">
@@ -369,29 +370,7 @@ function successHtml(title = "Authentication successful") {
   }
   .text-muted {
     color: #abb2bf;
-  }
-  .tip {
-    font-family: 'Inter', sans-serif;
-    font-weight: 400;
-    font-size: 14px;
-    line-height: 20px;
-    color: #abb2bf;
-    margin: 0;
-    text-align: center;
-    text-wrap: pretty;
-  }
-  .tip-label {
-    font-weight: 600;
-    color: #ffffff;
-  }
-  code {
-    font-family: 'Consolas', monospace;
-    font-size: 13px;
-    background: rgba(255, 255, 255, 0.08);
-    padding: 1px 6px;
-    border-radius: 4px;
-    color: #ffffff;
-  }
+  }${COPY_BTN_CSS}
 </style>
 </head>
 <body>
@@ -403,10 +382,10 @@ function successHtml(title = "Authentication successful") {
     </div>
     <div class="message">
       <h1 class="heading">${escapeHtml(title)}</h1>
-      <p class="text text-muted">You can close this window and return to the terminal.</p>
+      <p class="text text-muted">You can close this window and return to your terminal.</p>
     </div>
-    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 554 129.3" width="103" height="24" role="img" aria-label="GitHits">
+    <svg class="wordmark" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 554 129.3" width="103" height="24" role="img" aria-label="GitHits">
       <title>GitHits</title>
       <defs>
         <linearGradient id="wm-grad" x1="234.9" y1="64.7" x2="555.5" y2="64.7" gradientUnits="userSpaceOnUse">
@@ -419,16 +398,30 @@ function successHtml(title = "Authentication successful") {
       <path d="M239.1,64.8v-24h-18.8V8.5h-25v32.3h-18.8v24h18.8v62.6h25v-62.6h18.8ZM161.1,40.8h-25v86.6h25V40.8ZM91.6,84.6h-26.8v-24h54s1.2,4.3,1.1,12.1c-.3,30.6-25.3,55.5-55.9,55.7h-.5C27.4,128.4-1.6,98.3,0,61.8,1.5,29.6,27.4,3.4,59.6,1.4c21-1.2,40,7.7,52.4,22.4l-17.2,17.2c-7.7-10.1-20.3-16.4-34.3-15.4-19.4,1.4-35,17.1-36.4,36.5-1.6,23,16.6,42.2,39.3,42.2s28-19.7,28-19.7h.2Z" fill="#ff4fae" />
     </svg>
-    <p class="tip"><span class="tip-label">TIP:</span> Run <code>npx githits --help</code> to discover what else you can do.</p>
+    ${HELP_CTA}
   </div>
+  ${COPY_SCRIPT_HTML}
 </body></html>`;
 }
+var KNOWN_OAUTH_ERROR_MESSAGES = {
+  access_denied: "Access was denied."
+};
+function describeOauthError(code, description) {
+  const mapped = KNOWN_OAUTH_ERROR_MESSAGES[code];
+  if (mapped)
+    return mapped;
+  if (description) {
+    return /[.!?]$/.test(description) ? description : `${description}.`;
+  }
+  return "Something went wrong while signing in.";
+}
 function evaluateCallback(input) {
   if (input.error) {
     const message = input.errorDescription ? `${input.error}: ${input.errorDescription}` : input.error;
+    const browserMessage = describeOauthError(input.error, input.errorDescription);
     return {
       statusCode: 200,
-      html: errorHtml(message, "Run `githits login` to try again."),
+      html: errorHtml(browserMessage, input.error, RETRY_CTA),
       result: { type: "oauth_error", message }
     };
   }
@@ -436,7 +429,7 @@ function evaluateCallback(input) {
     if (input.state !== input.expectedState) {
       return {
         statusCode: 400,
-        html: errorHtml("Authentication failed security validation (state mismatch)", "Run `githits login` to try again."),
+        html: errorHtml("Sign-in could not be verified for security reasons.", undefined, RETRY_CTA),
         result: {
           type: "state_mismatch",
           message: "Security validation failed (state mismatch)"
@@ -451,19 +444,20 @@ function evaluateCallback(input) {
   }
   return {
     statusCode: 400,
-    html: errorHtml("Authentication callback was missing required parameters", "Run `githits login` to try again."),
+    html: errorHtml("Sign-in did not complete correctly.", undefined, RETRY_CTA),
     result: {
       type: "invalid_callback",
       message: "Authentication callback missing required parameters"
     }
   };
 }
-function errorHtml(error, nextStep) {
-  const nextStepHtml = nextStep ? `<p>${escapeHtml(nextStep)}</p>` : "";
+function errorHtml(error, errorCode, ctaHtml) {
+  const errorCodeHtml = errorCode ? `<p class="error-code">Error code: <code>${escapeHtml(errorCode)}</code></p>` : "";
   return `<!DOCTYPE html>
 <html><head>
 <title>GitHits CLI</title>
 <meta charset="utf-8">
+<meta name="viewport" content="width=device-width, initial-scale=1">
 <link rel="preconnect" href="https://fonts.googleapis.com">
 <link rel="preconnect" href="https://fonts.gstatic.com" crossorigin>
 <link href="https://fonts.googleapis.com/css2?family=Inter:wght@400;600;700&family=Lexend:wght@600&display=swap" rel="stylesheet">
@@ -529,21 +523,40 @@ function errorHtml(error, nextStep) {
   .footer-text {
     font-family: 'Inter', sans-serif;
     font-weight: 400;
-    font-size: 14px;
-    line-height: 20px;
+    font-size: 12px;
+    line-height: 16px;
     color: #abb2bf;
     margin: 0;
     text-align: center;
     text-wrap: pretty;
   }
   .footer-link {
-    color: #ffffff;
+    color: inherit;
     text-decoration: underline;
     text-underline-offset: 2px;
   }
-  .footer-link:hover {
+  .error-code {
+    font-family: 'Inter', sans-serif;
+    font-weight: 400;
+    font-size: 12px;
+    line-height: 16px;
     color: #abb2bf;
+    opacity: 0.7;
+    margin: 4px 0 0;
+    text-align: center;
+  }
+  .error-code code {
+    font-size: 11px;
+    padding: 0 5px;
   }
+  code {
+    font-family: 'Consolas', monospace;
+    font-size: 13px;
+    background: rgba(255, 255, 255, 0.08);
+    padding: 1px 6px;
+    border-radius: 4px;
+    color: #ffffff;
+  }${COPY_BTN_CSS}
 </style>
 </head>
 <body>
@@ -556,13 +569,14 @@ function errorHtml(error, nextStep) {
     </div>
     <div class="message">
-      <h1 class="heading">Authentication failed</h1>
+      <h1 class="heading">Sign-in failed</h1>
       <p class="text text-muted">${escapeHtml(error)}</p>
+      ${errorCodeHtml}
     </div>
-    ${nextStepHtml}
+    ${ctaHtml ?? ""}
-    <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 554 129.3" width="103" height="24" role="img" aria-label="GitHits">
+    <svg class="wordmark" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 554 129.3" width="103" height="24" role="img" aria-label="GitHits">
       <title>GitHits</title>
       <defs>
         <linearGradient id="wm-grad" x1="234.9" y1="64.7" x2="555.5" y2="64.7" gradientUnits="userSpaceOnUse">
@@ -577,6 +591,7 @@ function errorHtml(error, nextStep) {
     <p class="footer-text">Having trouble? Check our <a class="footer-link" href="https://app.githits.com/docs/" target="_blank" rel="noopener noreferrer">documentation</a> or contact <a class="footer-link" href="mailto:support@githits.com">support</a>.</p>
   </div>
+  ${COPY_SCRIPT_HTML}
 </body></html>`;
 }
 function sendHtmlResponse(res, statusCode, html) {
@@ -597,6 +612,108 @@ function closeServer(server) {
     });
   });
 }
+var COPY_ICON_SVG = `<svg class="githits-cli-icon githits-cli-icon-copy" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="2" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><rect x="9" y="9" width="13" height="13" rx="2" ry="2"></rect><path d="M5 15H4a2 2 0 0 1-2-2V4a2 2 0 0 1 2-2h9a2 2 0 0 1 2 2v1"></path></svg>`;
+var CHECK_ICON_SVG = `<svg class="githits-cli-icon githits-cli-icon-check" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24" fill="none" stroke="currentColor" stroke-width="3" stroke-linecap="round" stroke-linejoin="round" aria-hidden="true"><polyline points="20 6 9 17 4 12"></polyline></svg>`;
+function commandButton(cmd) {
+  const escaped = escapeHtml(cmd);
+  return `<button type="button" class="githits-cli-btn" data-copy="${escaped}" aria-label="Copy command: ${escaped}"><span class="githits-cli-cmd">${escaped}</span>${COPY_ICON_SVG}${CHECK_ICON_SVG}</button>`;
+}
+function ctaBlock(introHtml, commands) {
+  const buttons = commands.map(commandButton).join(`
+      `);
+  return `<div class="cli-cta">
+      <p class="tip">${introHtml}</p>
+      ${buttons}
+    </div>`;
+}
+var COPY_BTN_CSS = `
+  .wordmark {
+    margin: 16px 0;
+  }
+  .cli-cta {
+    display: flex;
+    flex-direction: column;
+    align-items: center;
+    gap: 12px;
+    margin: 16px 0 0;
+  }
+  .wordmark + .cli-cta {
+    margin-top: 0;
+  }
+  .tip {
+    font-family: 'Inter', sans-serif;
+    font-weight: 400;
+    font-size: 14px;
+    line-height: 20px;
+    color: #d5d9df;
+    margin: 0;
+    text-align: center;
+    text-wrap: pretty;
+  }
+  .githits-cli-btn {
+    display: inline-flex;
+    align-items: center;
+    gap: 0.5rem;
+    background-color: rgba(255, 255, 255, 0.08);
+    border: none;
+    border-radius: 0.5rem;
+    padding: 1rem 1.25rem;
+    font-family: Consolas, ui-monospace, SFMono-Regular, Menlo, Monaco, monospace;
+    font-size: 14px;
+    font-weight: 500;
+    color: #abb2bf;
+    cursor: pointer;
+    line-height: 1;
+    transition: background-color 0.2s ease, transform 0.1s ease, color 0.2s ease;
+  }
+  .githits-cli-btn:hover {
+    color: #d5d9df;
+  }
+  .githits-cli-btn:active {
+    transform: scale(0.98);
+  }
+  .githits-cli-btn:focus-visible {
+    outline: 2px solid #abb2bf;
+    outline-offset: 2px;
+  }
+  .githits-cli-cmd {
+    white-space: nowrap;
+  }
+  .githits-cli-icon {
+    width: 14px;
+    height: 14px;
+    color: #abb2bf;
+    flex-shrink: 0;
+  }
+  .githits-cli-btn.copied .githits-cli-icon-copy { display: none; }
+  .githits-cli-btn:not(.copied) .githits-cli-icon-check { display: none; }
+  .githits-cli-btn.copied .githits-cli-icon { color: #abb2bf; }`;
+var COPY_SCRIPT_HTML = `<script>
+(function() {
+  var timers = new WeakMap();
+  var buttons = document.querySelectorAll('.githits-cli-btn');
+  for (var i = 0; i < buttons.length; i++) {
+    buttons[i].addEventListener('click', function(e) {
+      var target = e.currentTarget;
+      var text = target.getAttribute('data-copy');
+      if (!text || !navigator.clipboard) return;
+      navigator.clipboard.writeText(text).then(function() {
+        target.classList.add('copied');
+        var existing = timers.get(target);
+        if (existing) clearTimeout(existing);
+        timers.set(target, setTimeout(function() {
+          target.classList.remove('copied');
+          timers.delete(target);
+        }, 1500));
+      });
+    });
+  }
+})();
+</script>`;
+var RETRY_CTA = ctaBlock("To try again, run these commands in your terminal:", ["npx githits@latest logout", "npx githits@latest login"]);
+var HELP_CTA = ctaBlock("Explore available commands with:", [
+  "npx githits@latest --help"
+]);
 function escapeHtml(text) {
   return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;").replace(/'/g, "&#39;");
 }
@@ -1400,11 +1517,17 @@ class GitHitsServiceImpl {
         method: "POST",
         headers: this.headers(),
         body: JSON.stringify({
+          ...params.exampleId !== undefined && {
+            example_id: params.exampleId
+          },
           ...params.solutionId !== undefined && {
             solution_id: params.solutionId
           },
           accepted: params.accepted,
-          feedback_text: params.feedbackText ?? null
+          feedback_text: params.feedbackText ?? null,
+          ...params.toolName !== undefined && {
+            tool_name: params.toolName
+          }
         })
       });
       if (!response.ok) {
@@ -1482,10 +1605,14 @@ class CodeNavigationGraphQLError extends Error {
 class CodeNavigationIndexingError extends Error {
   indexingRef;
   availableVersions;
-  constructor(message, indexingRef, availableVersions) {
+  availableRefs;
+  targetResolution;
+  constructor(message, indexingRef, availableVersions, availableRefs, targetResolution) {
     super(message);
     this.indexingRef = indexingRef;
     this.availableVersions = availableVersions;
+    this.availableRefs = availableRefs;
+    this.targetResolution = targetResolution;
     this.name = "CodeNavigationIndexingError";
   }
 }
@@ -1570,6 +1697,63 @@ class CodeNavigationBackendError extends Error {
     this.name = "CodeNavigationBackendError";
   }
 }
+var TARGET_RESOLUTION_AVAILABLE_REFS_SELECTION = `
+availableRefs {
+  version
+  ref
+}`;
+var TARGET_RESOLUTION_SELECTION = `
+targetResolution {
+  requested {
+    kind
+    registry
+    packageName
+    version
+    repoUrl
+    gitRef
+    commitSha
+  }
+  resolvedRequested {
+    kind
+    registry
+    packageName
+    version
+    repoUrl
+    gitRef
+    commitSha
+  }
+  served {
+    kind
+    registry
+    packageName
+    version
+    repoUrl
+    gitRef
+    commitSha
+  }
+  freshness
+  freshnessReason
+  indexingRef
+  availableVersions {
+    version
+    ref
+  }
+  ${TARGET_RESOLUTION_AVAILABLE_REFS_SELECTION}
+}`;
+var CODE_CONTEXT_AVAILABLE_VERSIONS_SELECTION = `
+availableVersions {
+  version
+  ref
+}`;
+var DISCOVERY_TARGET_PROGRESS_RETRY_SELECTION = `
+availableVersions {
+  version
+  ref
+}
+availableRefs {
+  version
+  ref
+}`;
 var UNIFIED_SEARCH_QUERY = `
 query UnifiedSearch(
   $targets: [SearchPackageInput!]!
@@ -1646,6 +1830,7 @@ query UnifiedSearch(
         requestedTargetLabel
         freshTargetLabel
         servedTargetLabel
+        ${TARGET_RESOLUTION_SELECTION}
         indexingStatus
         codeIndexState
         resultCount
@@ -1692,6 +1877,8 @@ query UnifiedSearch(
         freshness
         indexingRef
         requestedRefKind
+        ${TARGET_RESOLUTION_SELECTION}
+        ${DISCOVERY_TARGET_PROGRESS_RETRY_SELECTION}
       }
       expiresAt
     }
@@ -1733,6 +1920,8 @@ query UnifiedSearchStatus($searchRef: String!, $includeResults: Boolean!) {
       freshness
       indexingRef
       requestedRefKind
+      ${TARGET_RESOLUTION_SELECTION}
+      ${DISCOVERY_TARGET_PROGRESS_RETRY_SELECTION}
     }
     expiresAt
     results {
@@ -1788,6 +1977,7 @@ query UnifiedSearchStatus($searchRef: String!, $includeResults: Boolean!) {
         requestedTargetLabel
         freshTargetLabel
         servedTargetLabel
+        ${TARGET_RESOLUTION_SELECTION}
         indexingStatus
         codeIndexState
         resultCount
@@ -1853,6 +2043,25 @@ var availableVersionSchema = z2.object({
   version: z2.string().nullable().optional(),
   ref: z2.string()
 });
+var targetResolutionIdentitySchema = z2.object({
+  kind: z2.string().nullable().optional(),
+  registry: z2.string().nullable().optional(),
+  packageName: z2.string().nullable().optional(),
+  version: z2.string().nullable().optional(),
+  repoUrl: z2.string().nullable().optional(),
+  gitRef: z2.string().nullable().optional(),
+  commitSha: z2.string().nullable().optional()
+}).nullable().optional();
+var targetResolutionSchema = z2.object({
+  requested: targetResolutionIdentitySchema,
+  resolvedRequested: targetResolutionIdentitySchema,
+  served: targetResolutionIdentitySchema,
+  freshness: z2.string().nullable().optional(),
+  freshnessReason: z2.string().nullable().optional(),
+  indexingRef: z2.string().nullable().optional(),
+  availableVersions: z2.array(availableVersionSchema).nullable().optional(),
+  availableRefs: z2.array(availableVersionSchema).nullable().optional()
+}).nullable().optional();
 var unifiedSearchSourceSchema = z2.enum(["AUTO", "DOCS", "CODE", "SYMBOL"]);
 var unifiedSearchResultTypeSchema = z2.enum([
   "DOCUMENTATION_PAGE",
@@ -1909,6 +2118,7 @@ var unifiedSearchSourceStatusSchema = z2.object({
   requestedTargetLabel: z2.string().nullable().optional(),
   freshTargetLabel: z2.string().nullable().optional(),
   servedTargetLabel: z2.string().nullable().optional(),
+  targetResolution: targetResolutionSchema,
   indexingStatus: z2.string().nullable().optional(),
   codeIndexState: z2.string().nullable().optional(),
   resultCount: z2.number().int().nullable().optional(),
@@ -1950,7 +2160,10 @@ var unifiedSearchProgressTargetSchema = z2.object({
   served: z2.string().nullable().optional(),
   freshness: z2.string().nullable().optional(),
   indexingRef: z2.string().nullable().optional(),
-  requestedRefKind: z2.string().nullable().optional()
+  requestedRefKind: z2.string().nullable().optional(),
+  targetResolution: targetResolutionSchema,
+  availableVersions: z2.array(availableVersionSchema).nullable().optional(),
+  availableRefs: z2.array(availableVersionSchema).nullable().optional()
 });
 var unifiedSearchRequestedTargetSchema = z2.object({
   registry: z2.string().nullable().optional(),
@@ -2010,6 +2223,7 @@ var listRepoFilesResponseSchema = z2.object({
   hasMore: z2.boolean(),
   indexedVersion: z2.string().nullable().optional(),
   resolution: navigationResolutionSchema,
+  targetResolution: targetResolutionSchema,
   diagnostics: navigationDiagnosticsSchema,
   codeIndexState: z2.string(),
   indexingRef: z2.string().nullable().optional(),
@@ -2078,6 +2292,7 @@ query ListRepoFiles(
       resolvedRef
       commitSha
     }
+    ${TARGET_RESOLUTION_SELECTION}
     diagnostics {
       hint
     }
@@ -2100,7 +2315,9 @@ var codeContextResponseSchema = z2.object({
   gitRef: z2.string().nullable().optional(),
   isBinary: z2.boolean().nullable().optional(),
   codeIndexState: z2.string(),
-  indexingRef: z2.string().nullable().optional()
+  indexingRef: z2.string().nullable().optional(),
+  availableVersions: z2.array(availableVersionSchema).nullable().optional(),
+  targetResolution: targetResolutionSchema
 });
 var fetchCodeContextGraphQLResponseSchema = z2.object({
   data: z2.object({
@@ -2142,6 +2359,8 @@ query FetchCodeContext(
     isBinary
     codeIndexState
     indexingRef
+    ${CODE_CONTEXT_AVAILABLE_VERSIONS_SELECTION}
+    ${TARGET_RESOLUTION_SELECTION}
   }
 }`;
 var grepRepoMatchSchema = z2.object({
@@ -2192,6 +2411,7 @@ var grepRepoResponseSchema = z2.object({
   uniqueFilesMatched: z2.number().int(),
   indexedVersion: z2.string().nullable().optional(),
   resolution: navigationResolutionSchema,
+  targetResolution: targetResolutionSchema,
   codeIndexState: z2.string(),
   indexingRef: z2.string().nullable().optional(),
   availableVersions: z2.array(availableVersionSchema).nullable().optional()
@@ -2300,6 +2520,7 @@ query GrepRepo(
       resolvedRef
       commitSha
     }
+    ${TARGET_RESOLUTION_SELECTION}
     codeIndexState
     indexingRef
     availableVersions {
@@ -2331,6 +2552,35 @@ class CodeNavigationServiceImpl {
     this.tokenProvider = tokenProvider;
     this.fetchFn = fetchFn;
   }
+  async postGraphqlWithTargetResolutionFallback(input) {
+    const response = await postPkgseerGraphql({
+      endpointUrl: this.codeNavigationUrl,
+      token: input.token,
+      query: input.query,
+      variables: input.variables,
+      fetchFn: this.fetchFn
+    });
+    if (response.status < 200 || response.status >= 300)
+      return response;
+    if (!hasSchemaMismatchErrors(response.parsedBody))
+      return response;
+    for (const fallbackQuery of buildTargetResolutionFallbackQueries(input.query)) {
+      debugLog("code-nav", {
+        event: "target-resolution-query-fallback"
+      });
+      const fallbackResponse = await postPkgseerGraphql({
+        endpointUrl: this.codeNavigationUrl,
+        token: input.token,
+        query: fallbackQuery,
+        variables: input.variables,
+        fetchFn: this.fetchFn
+      });
+      if (!hasSchemaMismatchErrors(fallbackResponse.parsedBody)) {
+        return fallbackResponse;
+      }
+    }
+    return response;
+  }
   async search(params) {
     return executeWithTokenRefresh({
       getToken: () => this.tokenProvider.getToken(),
@@ -2371,12 +2621,10 @@ class CodeNavigationServiceImpl {
     debugUnifiedSearchRequest(variables);
     debugGraphqlWireRequest("search", UNIFIED_SEARCH_QUERY, variables);
     try {
-      response = await postPkgseerGraphql({
-        endpointUrl: this.codeNavigationUrl,
+      response = await this.postGraphqlWithTargetResolutionFallback({
         token,
         query: UNIFIED_SEARCH_QUERY,
-        variables,
-        fetchFn: this.fetchFn
+        variables
       });
     } catch (cause) {
       if (cause instanceof PkgseerTransportError) {
@@ -2403,15 +2651,13 @@ class CodeNavigationServiceImpl {
   async executeUnifiedSearchStatus(token, searchRef) {
     let response;
     try {
-      response = await postPkgseerGraphql({
-        endpointUrl: this.codeNavigationUrl,
+      response = await this.postGraphqlWithTargetResolutionFallback({
         token,
         query: UNIFIED_SEARCH_STATUS_QUERY,
         variables: {
           searchRef,
           includeResults: true
-        },
-        fetchFn: this.fetchFn
+        }
       });
     } catch (cause) {
       if (cause instanceof PkgseerTransportError) {
@@ -2486,7 +2732,7 @@ class CodeNavigationServiceImpl {
     }
     switch (code) {
       case "PACKAGE_INDEXING":
-        return new CodeNavigationIndexingError(this.createIndexingMessage(indexingRef), indexingRef, parseAvailableVersions(extensions));
+        return new CodeNavigationIndexingError(this.createIndexingMessage(indexingRef), indexingRef, parseAvailableVersions(extensions), parseAvailableRefs(extensions), parseTargetResolution(extensions));
       case "GREP_PATTERN_TOO_SHORT":
       case "GREP_PATTERN_TOO_LONG":
       case "GREP_PATTERN_INVALID":
@@ -2633,6 +2879,7 @@ class CodeNavigationServiceImpl {
         requestedTargetLabel: entry.requestedTargetLabel ?? undefined,
         freshTargetLabel: entry.freshTargetLabel ?? undefined,
         servedTargetLabel: entry.servedTargetLabel ?? undefined,
+        targetResolution: normaliseTargetResolution(entry.targetResolution),
         indexingStatus: entry.indexingStatus ?? undefined,
         codeIndexState: entry.codeIndexState ?? undefined,
         resultCount: entry.resultCount ?? undefined,
@@ -2674,17 +2921,18 @@ class CodeNavigationServiceImpl {
         served: target.served ?? undefined,
         freshness: target.freshness ?? undefined,
         indexingRef: target.indexingRef ?? undefined,
-        requestedRefKind: normaliseRequestedRefKind(target.requestedRefKind)
+        requestedRefKind: normaliseRequestedRefKind(target.requestedRefKind),
+        targetResolution: normaliseTargetResolution(target.targetResolution),
+        availableVersions: normaliseAvailableVersions(target.availableVersions),
+        availableRefs: normaliseAvailableVersions(target.availableRefs)
       })),
       expiresAt: progress.expiresAt ?? undefined
     };
   }
   throwIfIndexing(data) {
     if (data.codeIndexState === "INDEXING") {
-      throw new CodeNavigationIndexingError(this.createIndexingMessage(data.indexingRef ?? undefined), data.indexingRef ?? undefined, data.availableVersions?.map((entry) => ({
-        version: entry.version ?? undefined,
-        ref: entry.ref
-      })));
+      const targetResolution = normaliseTargetResolution(data.targetResolution);
+      throw new CodeNavigationIndexingError(this.createIndexingMessage(data.indexingRef ?? targetResolution?.indexingRef), data.indexingRef ?? targetResolution?.indexingRef, normaliseAvailableVersions(data.availableVersions) ?? targetResolution?.availableVersions, targetResolution?.availableRefs, targetResolution);
     }
   }
   async listFiles(params) {
@@ -2698,8 +2946,7 @@ class CodeNavigationServiceImpl {
   async executeListFiles(token, params) {
     let response;
     try {
-      response = await postPkgseerGraphql({
-        endpointUrl: this.codeNavigationUrl,
+      response = await this.postGraphqlWithTargetResolutionFallback({
         token,
         query: LIST_REPO_FILES_QUERY,
         variables: {
@@ -2724,8 +2971,7 @@ class CodeNavigationServiceImpl {
           includeHidden: params.includeHidden,
           limit: params.limit,
           waitTimeoutMs: params.waitTimeoutMs
-        },
-        fetchFn: this.fetchFn
+        }
       });
     } catch (cause) {
       if (cause instanceof PkgseerTransportError) {
@@ -2765,6 +3011,7 @@ class CodeNavigationServiceImpl {
         resolvedRef: data.resolution.resolvedRef ?? undefined,
         commitSha: data.resolution.commitSha ?? undefined
       } : undefined,
+      targetResolution: normaliseTargetResolution(data.targetResolution),
       hint: data.diagnostics?.hint ?? undefined
     };
   }
@@ -2779,8 +3026,7 @@ class CodeNavigationServiceImpl {
   async executeReadFile(token, params) {
     let response;
     try {
-      response = await postPkgseerGraphql({
-        endpointUrl: this.codeNavigationUrl,
+      response = await this.postGraphqlWithTargetResolutionFallback({
         token,
         query: FETCH_CODE_CONTEXT_QUERY,
         variables: {
@@ -2793,8 +3039,7 @@ class CodeNavigationServiceImpl {
           startLine: params.startLine,
           endLine: params.endLine,
           waitTimeoutMs: params.waitTimeoutMs
-        },
-        fetchFn: this.fetchFn
+        }
       });
     } catch (cause) {
       if (cause instanceof PkgseerTransportError) {
@@ -2816,10 +3061,7 @@ class CodeNavigationServiceImpl {
     if (!data) {
       throw new MalformedCodeNavigationResponseError("Malformed response from code navigation service.");
     }
-    this.throwIfIndexing({
-      codeIndexState: data.codeIndexState,
-      indexingRef: data.indexingRef
-    });
+    this.throwIfIndexing(data);
     return {
       filePath: data.filePath ?? undefined,
       language: data.language ?? undefined,
@@ -2827,7 +3069,9 @@ class CodeNavigationServiceImpl {
       startLine: data.startLine ?? undefined,
       endLine: data.endLine ?? undefined,
       content: data.content ?? undefined,
-      isBinary: data.isBinary ?? undefined
+      isBinary: data.isBinary ?? undefined,
+      targetResolution: normaliseTargetResolution(data.targetResolution),
+      availableVersions: normaliseAvailableVersions(data.availableVersions)
     };
   }
   async grepRepo(params) {
@@ -2841,8 +3085,7 @@ class CodeNavigationServiceImpl {
   async executeGrepRepo(token, params) {
     let response;
     try {
-      response = await postPkgseerGraphql({
-        endpointUrl: this.codeNavigationUrl,
+      response = await this.postGraphqlWithTargetResolutionFallback({
         token,
         query: buildGrepRepoQuery(params.symbolFields),
         variables: {
@@ -2869,8 +3112,7 @@ class CodeNavigationServiceImpl {
           maxMatchesPerFile: params.maxMatchesPerFile,
           cursor: params.cursor,
           symbolFields: params.symbolFields
-        },
-        fetchFn: this.fetchFn
+        }
       });
     } catch (cause) {
       if (cause instanceof PkgseerTransportError) {
@@ -2939,7 +3181,8 @@ class CodeNavigationServiceImpl {
         requestedRef: data.resolution.requestedRef ?? undefined,
         resolvedRef: data.resolution.resolvedRef ?? undefined,
         commitSha: data.resolution.commitSha ?? undefined
-      } : undefined
+      } : undefined,
+      targetResolution: normaliseTargetResolution(data.targetResolution)
     };
   }
 }
@@ -2957,6 +3200,31 @@ function parseDetail2(body) {
   }
   return;
 }
+function buildTargetResolutionFallbackQueries(query) {
+  const candidates = [
+    query.replaceAll(TARGET_RESOLUTION_AVAILABLE_REFS_SELECTION, ""),
+    query.replaceAll(DISCOVERY_TARGET_PROGRESS_RETRY_SELECTION, ""),
+    query.replaceAll(CODE_CONTEXT_AVAILABLE_VERSIONS_SELECTION, ""),
+    query.replaceAll(TARGET_RESOLUTION_SELECTION, "").replaceAll(DISCOVERY_TARGET_PROGRESS_RETRY_SELECTION, "").replaceAll(CODE_CONTEXT_AVAILABLE_VERSIONS_SELECTION, "")
+  ];
+  return candidates.filter((candidate, index, all) => candidate !== query && all.indexOf(candidate) === index);
+}
+function hasSchemaMismatchErrors(parsedBody) {
+  if (!parsedBody || typeof parsedBody !== "object")
+    return false;
+  const errors = parsedBody.errors;
+  if (!Array.isArray(errors))
+    return false;
+  return errors.some((entry) => {
+    if (!entry || typeof entry !== "object")
+      return false;
+    const error = entry;
+    if (typeof error.message !== "string")
+      return false;
+    const code = typeof error.extensions?.code === "string" ? error.extensions.code : undefined;
+    return isGraphQLSchemaMismatchError({ message: error.message, code });
+  });
+}
 function getPrimaryExtensions(errors) {
   for (const error of errors) {
     if (error.extensions && Object.keys(error.extensions).length > 0) {
@@ -2975,6 +3243,20 @@ function getGraphQLIndexingRef(errors) {
 }
 function parseAvailableVersions(extensions) {
   const raw = extensions?.available_versions ?? extensions?.availableVersions;
+  return parseAvailableArtifacts(raw);
+}
+function parseAvailableRefs(extensions) {
+  const raw = extensions?.available_refs ?? extensions?.availableRefs;
+  return parseAvailableArtifacts(raw);
+}
+function parseTargetResolution(extensions) {
+  const raw = extensions?.target_resolution ?? extensions?.targetResolution;
+  const parsed = targetResolutionSchema.safeParse(raw);
+  if (!parsed.success)
+    return;
+  return normaliseTargetResolution(parsed.data);
+}
+function parseAvailableArtifacts(raw) {
   if (!Array.isArray(raw))
     return;
   const parsed = [];
@@ -2991,6 +3273,48 @@ function parseAvailableVersions(extensions) {
   }
   return parsed.length > 0 ? parsed : undefined;
 }
+function normaliseAvailableVersions(entries) {
+  if (!entries || entries.length === 0)
+    return;
+  return entries.map((entry) => ({
+    version: entry.version ?? undefined,
+    ref: entry.ref
+  }));
+}
+function normaliseTargetResolution(resolution) {
+  if (!resolution)
+    return;
+  return {
+    requested: normaliseTargetResolutionIdentity(resolution.requested),
+    resolvedRequested: normaliseTargetResolutionIdentity(resolution.resolvedRequested),
+    served: normaliseTargetResolutionIdentity(resolution.served),
+    freshness: resolution.freshness ?? undefined,
+    freshnessReason: resolution.freshnessReason ?? undefined,
+    indexingRef: resolution.indexingRef ?? undefined,
+    availableVersions: normaliseAvailableVersions(resolution.availableVersions) ?? [],
+    availableRefs: normaliseAvailableVersions(resolution.availableRefs) ?? []
+  };
+}
+function normaliseTargetResolutionIdentity(identity) {
+  if (!identity)
+    return;
+  const out = {};
+  if (identity.kind)
+    out.kind = identity.kind;
+  if (identity.registry)
+    out.registry = identity.registry;
+  if (identity.packageName)
+    out.packageName = identity.packageName;
+  if (identity.version)
+    out.version = identity.version;
+  if (identity.repoUrl)
+    out.repoUrl = identity.repoUrl;
+  if (identity.gitRef)
+    out.gitRef = identity.gitRef;
+  if (identity.commitSha)
+    out.commitSha = identity.commitSha;
+  return Object.keys(out).length > 0 ? out : undefined;
+}
 function isAuthMessage(message) {
   const lower = message.toLowerCase();
   return lower.includes("unauthorized") || lower.includes("forbidden") || lower.includes("permission") || lower.includes("authentication");
@@ -3062,14 +3386,31 @@ function getEnvApiToken() {
 }
 // src/services/exec-service.ts
 import { spawn } from "node:child_process";
+function isWindowsAbsolutePath(command) {
+  return /^[a-zA-Z]:[\\/]/.test(command) || command.startsWith("\\\\");
+}
+function normalizeSpawnCommand(command, args, platform = process.platform) {
+  if (platform !== "win32") {
+    return { command, args };
+  }
+  if (isWindowsAbsolutePath(command) && /\s/.test(command)) {
+    return {
+      command: `"${command.replaceAll('"', "\\\"")}"`,
+      args,
+      shell: true
+    };
+  }
+  return { command, args, shell: true };
+}
 class ExecServiceImpl {
   async exec(command, args) {
     return new Promise((resolve, reject) => {
-      const child = spawn(command, args, {
+      const spawnCommand = normalizeSpawnCommand(command, args);
+      const child = spawn(spawnCommand.command, spawnCommand.args, {
         stdio: ["ignore", "pipe", "pipe"],
         env: { ...process.env },
-        ...process.platform === "win32" && { shell: true }
+        ...spawnCommand.shell !== undefined && { shell: spawnCommand.shell }
       });
       const stdoutChunks = [];
       const stderrChunks = [];
@@ -4167,7 +4508,10 @@ query PackageSummary($registry: Registry!, $name: String!) {
 var packageVersionIdentitySchema = z3.object({
   name: z3.string().nullable().optional(),
   registry: z3.string().nullable().optional(),
-  version: z3.string().nullable().optional()
+  version: z3.string().nullable().optional(),
+  publishedAt: z3.string().nullable().optional(),
+  deprecated: z3.boolean().nullable().optional(),
+  deprecationReason: z3.string().nullable().optional()
 });
 var vulnerabilityDetailSchema = z3.object({
   osvId: z3.string().nullable().optional(),
@@ -4291,6 +4635,86 @@ var dependencyGraphSchema = z3.object({
   nodes: z3.array(dependencyGraphNodeSchema),
   edges: z3.array(dependencyGraphEdgeSchema)
 });
+var vulnerabilityCountSummarySchema = z3.object({
+  totalVulnerabilities: z3.number().int(),
+  critical: z3.number().int(),
+  high: z3.number().int(),
+  medium: z3.number().int(),
+  low: z3.number().int(),
+  unknown: z3.number().int()
+});
+var vulnerabilitySummaryDetailSchema = z3.object({
+  osvId: z3.string().nullable().optional(),
+  registry: z3.string().nullable().optional(),
+  packageName: z3.string().nullable().optional(),
+  summary: z3.string().nullable().optional(),
+  severityScore: z3.number().nullable().optional(),
+  severityType: z3.string().nullable().optional(),
+  affectedVersionRanges: z3.array(z3.string()).nullable().optional(),
+  fixedInVersions: z3.array(z3.string()).nullable().optional(),
+  publishedAt: z3.string().nullable().optional(),
+  modifiedAt: z3.string().nullable().optional(),
+  withdrawnAt: z3.string().nullable().optional(),
+  aliases: z3.array(z3.string()).nullable().optional(),
+  isMalicious: z3.boolean().nullable().optional()
+});
+var transitiveDependencyVulnerabilitySchema = z3.object({
+  version: z3.string(),
+  affectsResolvedVersion: z3.boolean(),
+  matchedAffectedVersionRanges: z3.array(z3.string()),
+  fixVersionsAboveResolved: z3.array(z3.string()),
+  nearestFixedVersion: z3.string().nullable().optional(),
+  advisory: vulnerabilitySummaryDetailSchema
+});
+var transitiveVulnerablePackageSchema = z3.object({
+  registry: z3.string(),
+  name: z3.string(),
+  versions: z3.array(z3.string()),
+  affectedCount: z3.number().int(),
+  nonAffectingCount: z3.number().int(),
+  totalCount: z3.number().int(),
+  maxSeverityScore: z3.number().nullable().optional(),
+  maxSeverityLabel: z3.string().nullable().optional(),
+  advisoryIds: z3.array(z3.string()),
+  mostCritical: vulnerabilitySummaryDetailSchema.nullable().optional(),
+  advisoryOccurrences: z3.array(transitiveDependencyVulnerabilitySchema).nullable().optional()
+});
+var transitiveVulnerabilitySummarySchema = z3.object({
+  affected: vulnerabilityCountSummarySchema,
+  nonAffecting: vulnerabilityCountSummarySchema,
+  combined: vulnerabilityCountSummarySchema,
+  totalPackagesAnalyzed: z3.number().int(),
+  affectedPackageCount: z3.number().int(),
+  packages: z3.array(transitiveVulnerablePackageSchema),
+  calculatedAt: z3.string().nullable().optional()
+}).nullable().optional();
+var dependencyDeprecationReasonSchema = z3.object({
+  version: z3.string(),
+  reason: z3.string().nullable().optional()
+});
+var deprecatedDependencySchema = z3.object({
+  registry: z3.string(),
+  name: z3.string(),
+  versions: z3.array(z3.string()),
+  reasons: z3.array(dependencyDeprecationReasonSchema)
+});
+var outdatedDependencyVersionSchema = z3.object({
+  version: z3.string(),
+  severity: z3.string()
+});
+var outdatedDependencySchema = z3.object({
+  registry: z3.string(),
+  name: z3.string(),
+  latestVersion: z3.string().nullable().optional(),
+  severity: z3.string(),
+  versions: z3.array(outdatedDependencyVersionSchema),
+  repositoryUrl: z3.string().nullable().optional()
+});
+var duplicateDependencySchema = z3.object({
+  registry: z3.string().nullable().optional(),
+  name: z3.string(),
+  versions: z3.array(z3.string())
+});
 var dependencyConflictEdgeSchema = z3.object({
   fromIndex: z3.number().int().nullable().optional(),
   toIndex: z3.number().int(),
@@ -4302,6 +4726,24 @@ var dependencyConflictSchema = z3.object({
   requiredVersions: z3.array(z3.string()),
   conflictingEdges: z3.array(dependencyConflictEdgeSchema)
 });
+var dependencyIssueConflictSchema = z3.object({
+  registry: z3.string().nullable().optional(),
+  name: z3.string(),
+  versions: z3.array(z3.string()),
+  requiredVersions: z3.array(z3.string()),
+  conflictingEdges: z3.array(dependencyConflictEdgeSchema)
+});
+var dependencyIssuesSummarySchema = z3.object({
+  totalCount: z3.number().int(),
+  deprecatedCount: z3.number().int(),
+  outdatedCount: z3.number().int(),
+  duplicateCount: z3.number().int(),
+  conflictCount: z3.number().int(),
+  deprecatedPackages: z3.array(deprecatedDependencySchema),
+  outdatedPackages: z3.array(outdatedDependencySchema),
+  duplicatePackages: z3.array(duplicateDependencySchema),
+  conflicts: z3.array(dependencyIssueConflictSchema)
+}).nullable().optional();
 var circularDependencyCycleSchema = z3.object({
   cycleStart: z3.string(),
   circularPath: z3.array(z3.string()),
@@ -4318,7 +4760,9 @@ var transitiveDependencySchema = z3.object({
   uniqueDependencies: z3.array(z3.string()).nullable().optional(),
   dependencyConflicts: z3.array(dependencyConflictSchema).nullable().optional(),
   circularDependencyCycles: z3.array(circularDependencyCycleSchema).nullable().optional(),
-  dependencyGraph: dependencyGraphSchema.nullable().optional()
+  dependencyGraph: dependencyGraphSchema.nullable().optional(),
+  vulnerabilitySummary: transitiveVulnerabilitySummarySchema,
+  dependencyIssues: dependencyIssuesSummarySchema
 }).nullable().optional();
 var dependencyBundleSchema = z3.object({
   direct: z3.array(directDependencySchema).nullable().optional(),
@@ -4448,6 +4892,203 @@ query PackageDependencies(
     }
   }
 }`;
+var PACKAGE_UPGRADE_DEPENDENCY_PROBE_QUERY = `
+query PackageUpgradeDependencyProbe(
+  $registry: Registry!
+  $name: String!
+  $version: String!
+  $includeTransitiveRisk: Boolean!
+  $includeTransitiveSecurity: Boolean!
+  $includeDependencyIssues: Boolean!
+  $includeDependencyChanges: Boolean!
+  $includeGroups: Boolean!
+  $lifecycle: [String!]
+  $minSeverity: Float
+) {
+  packageDependencies(
+    registry: $registry
+    name: $name
+    version: $version
+    includeTransitive: $includeTransitiveRisk
+    lifecycle: $lifecycle
+  ) {
+    package {
+      name
+      registry
+      version
+      publishedAt
+      deprecated
+      deprecationReason
+    }
+    dependencies {
+      direct {
+        name
+        versionConstraint
+        type
+      }
+      transitive @include(if: $includeTransitiveRisk) {
+        dependencyGraph @include(if: $includeDependencyChanges) {
+          formatVersion
+          nodes {
+            registry
+            name
+            version
+          }
+          edges {
+            fromIndex
+            toIndex
+            constraint
+            dependencyType
+          }
+        }
+        vulnerabilitySummary(minSeverity: $minSeverity) @include(if: $includeTransitiveSecurity) {
+          affected {
+            totalVulnerabilities
+            critical
+            high
+            medium
+            low
+            unknown
+          }
+          nonAffecting {
+            totalVulnerabilities
+            critical
+            high
+            medium
+            low
+            unknown
+          }
+          combined {
+            totalVulnerabilities
+            critical
+            high
+            medium
+            low
+            unknown
+          }
+          totalPackagesAnalyzed
+          affectedPackageCount
+          calculatedAt
+          packages {
+            registry
+            name
+            versions
+            affectedCount
+            nonAffectingCount
+            totalCount
+            maxSeverityScore
+            maxSeverityLabel
+            advisoryIds(scope: AFFECTED)
+            mostCritical {
+              osvId
+              registry
+              packageName
+              summary
+              severityScore
+              severityType
+              affectedVersionRanges
+              fixedInVersions
+              publishedAt
+              modifiedAt
+              withdrawnAt
+              aliases
+              isMalicious
+            }
+            advisoryOccurrences(scope: AFFECTED, minSeverity: $minSeverity, limit: 5) {
+              version
+              affectsResolvedVersion
+              matchedAffectedVersionRanges
+              fixVersionsAboveResolved
+              nearestFixedVersion
+              advisory {
+                osvId
+                registry
+                packageName
+                summary
+                severityScore
+                severityType
+                affectedVersionRanges
+                fixedInVersions
+                publishedAt
+                modifiedAt
+                withdrawnAt
+                aliases
+                isMalicious
+              }
+            }
+          }
+        }
+        dependencyIssues @include(if: $includeDependencyIssues) {
+          totalCount
+          deprecatedCount
+          outdatedCount
+          duplicateCount
+          conflictCount
+          deprecatedPackages {
+            registry
+            name
+            versions
+            reasons {
+              version
+              reason
+            }
+          }
+          outdatedPackages {
+            registry
+            name
+            latestVersion
+            severity
+            versions {
+              version
+              severity
+            }
+            repositoryUrl
+          }
+          duplicatePackages {
+            registry
+            name
+            versions
+          }
+          conflicts {
+            registry
+            name
+            versions
+            requiredVersions
+            conflictingEdges {
+              fromIndex
+              toIndex
+              versionConstraint
+              dependencyType
+            }
+          }
+        }
+      }
+    }
+    dependencyGroups @include(if: $includeGroups) {
+      primaryGroup
+      environmentMarkers {
+        type
+        value
+        raw
+      }
+      groups {
+        name
+        lifecycle
+        conditionType
+        conditionValue
+        selectionMode
+        exclusiveGroup
+        fallbackPriority
+        compatibleWith
+        defaultEnabled
+        dependencies {
+          name
+          constraint
+        }
+      }
+    }
+  }
+}`;
 var changelogPackageInfoSchema = z3.object({
   name: z3.string().nullable().optional(),
   registry: z3.string().nullable().optional(),
@@ -4915,7 +5556,10 @@ class PackageIntelligenceServiceImpl {
     const identity = {
       name,
       version: version2,
-      registry: data.package?.registry ?? undefined
+      registry: data.package?.registry ?? undefined,
+      publishedAt: data.package?.publishedAt ?? undefined,
+      deprecated: data.package?.deprecated ?? undefined,
+      deprecationReason: data.package?.deprecationReason ?? undefined
     };
     const security = data.security ? {
       affectedVulnerabilityCount: data.security.affectedVulnerabilityCount,
@@ -4955,6 +5599,58 @@ class PackageIntelligenceServiceImpl {
       executeWithToken: (token) => this.executePackageDependencies(token, params)
     }));
   }
+  async packageUpgradeDependencyProbe(params) {
+    return withTelemetrySpan("pkg-intel.upgrade-dependency-probe.request", () => executeWithTokenRefresh({
+      getToken: () => this.tokenProvider.getToken(),
+      forceRefresh: () => this.tokenProvider.forceRefresh(),
+      shouldRefresh: (error) => error instanceof AuthenticationError,
+      executeWithToken: (token) => this.executePackageUpgradeDependencyProbe(token, params)
+    }));
+  }
+  async executePackageUpgradeDependencyProbe(token, params) {
+    const includeTransitiveRisk = params.includeTransitiveSecurity === true || params.includeDependencyIssues === true || params.includeDependencyChanges === true;
+    let response;
+    try {
+      response = await postPkgseerGraphql({
+        endpointUrl: this.endpointUrl,
+        token,
+        query: PACKAGE_UPGRADE_DEPENDENCY_PROBE_QUERY,
+        variables: {
+          registry: params.registry,
+          name: params.packageName,
+          version: params.version,
+          includeTransitiveRisk,
+          includeTransitiveSecurity: params.includeTransitiveSecurity === true,
+          includeDependencyIssues: params.includeDependencyIssues === true,
+          includeDependencyChanges: params.includeDependencyChanges === true,
+          includeGroups: params.includeGroups === true,
+          lifecycle: params.includeGroups === true ? ["peer"] : undefined,
+          minSeverity: params.minSeverity
+        },
+        fetchFn: this.fetchFn
+      });
+    } catch (cause) {
+      if (cause instanceof PkgseerTransportError) {
+        throw new PackageIntelligenceNetworkError("Could not reach the package intelligence service. Check your connection or set GITHITS_CODE_NAV_URL.", { cause });
+      }
+      throw cause;
+    }
+    if (response.status < 200 || response.status >= 300) {
+      throw this.createHttpError(response);
+    }
+    const parsed = dependenciesGraphQLResponseSchema.safeParse(response.parsedBody);
+    if (!parsed.success) {
+      throw new MalformedPackageIntelligenceResponseError("Malformed response from the package-intelligence service.");
+    }
+    if (parsed.data.errors && parsed.data.errors.length > 0) {
+      throw promoteGenericVersionNotFound(this.createGraphQLError(parsed.data.errors), params);
+    }
+    const data = parsed.data.data?.packageDependencies;
+    if (!data) {
+      throw new MalformedPackageIntelligenceResponseError("Empty response from the package-intelligence service.");
+    }
+    return this.normaliseDependencyReport(data);
+  }
   async executePackageDependencies(token, params) {
     let response;
     try {
@@ -5003,7 +5699,10 @@ class PackageIntelligenceServiceImpl {
     const identity = {
       name,
       version: version2,
-      registry: data.package?.registry ?? undefined
+      registry: data.package?.registry ?? undefined,
+      publishedAt: data.package?.publishedAt ?? undefined,
+      deprecated: data.package?.deprecated ?? undefined,
+      deprecationReason: data.package?.deprecationReason ?? undefined
     };
     const bundle = data.dependencies;
     const dependencies = bundle ? {
@@ -5049,7 +5748,9 @@ class PackageIntelligenceServiceImpl {
             constraint: e.constraint ?? undefined,
             dependencyType: e.dependencyType ?? undefined
           }))
-        } : undefined
+        } : undefined,
+        vulnerabilitySummary: this.normaliseTransitiveVulnerabilitySummary(bundle.transitive.vulnerabilitySummary),
+        dependencyIssues: this.normaliseDependencyIssuesSummary(bundle.transitive.dependencyIssues)
       } : undefined
     } : undefined;
     const dependencyGroups = data.dependencyGroups ? {
@@ -5081,6 +5782,103 @@ class PackageIntelligenceServiceImpl {
       dependencyGroups
     };
   }
+  normaliseTransitiveVulnerabilitySummary(summary) {
+    if (!summary)
+      return;
+    return {
+      affected: summary.affected,
+      nonAffecting: summary.nonAffecting,
+      combined: summary.combined,
+      totalPackagesAnalyzed: summary.totalPackagesAnalyzed,
+      affectedPackageCount: summary.affectedPackageCount,
+      calculatedAt: summary.calculatedAt ?? undefined,
+      packages: summary.packages.map((pkg) => ({
+        registry: pkg.registry,
+        name: pkg.name,
+        versions: pkg.versions,
+        affectedCount: pkg.affectedCount,
+        nonAffectingCount: pkg.nonAffectingCount,
+        totalCount: pkg.totalCount,
+        maxSeverityScore: pkg.maxSeverityScore ?? undefined,
+        maxSeverityLabel: pkg.maxSeverityLabel ?? undefined,
+        advisoryIds: pkg.advisoryIds,
+        mostCritical: pkg.mostCritical ? this.normaliseVulnerabilitySummaryDetail(pkg.mostCritical) : undefined,
+        advisoryOccurrences: pkg.advisoryOccurrences?.map((occurrence) => ({
+          version: occurrence.version,
+          affectsResolvedVersion: occurrence.affectsResolvedVersion,
+          matchedAffectedVersionRanges: occurrence.matchedAffectedVersionRanges,
+          fixVersionsAboveResolved: occurrence.fixVersionsAboveResolved,
+          nearestFixedVersion: occurrence.nearestFixedVersion ?? undefined,
+          advisory: this.normaliseVulnerabilitySummaryDetail(occurrence.advisory)
+        })) ?? undefined
+      }))
+    };
+  }
+  normaliseVulnerabilitySummaryDetail(advisory) {
+    return {
+      osvId: advisory.osvId ?? undefined,
+      registry: advisory.registry ?? undefined,
+      packageName: advisory.packageName ?? undefined,
+      summary: advisory.summary ?? undefined,
+      severityScore: advisory.severityScore ?? undefined,
+      severityType: advisory.severityType ?? undefined,
+      affectedVersionRanges: advisory.affectedVersionRanges ?? undefined,
+      fixedInVersions: advisory.fixedInVersions ?? undefined,
+      publishedAt: advisory.publishedAt ?? undefined,
+      modifiedAt: advisory.modifiedAt ?? undefined,
+      withdrawnAt: advisory.withdrawnAt ?? undefined,
+      aliases: advisory.aliases ?? undefined,
+      isMalicious: advisory.isMalicious ?? undefined
+    };
+  }
+  normaliseDependencyIssuesSummary(issues) {
+    if (!issues)
+      return;
+    return {
+      totalCount: issues.totalCount,
+      deprecatedCount: issues.deprecatedCount,
+      outdatedCount: issues.outdatedCount,
+      duplicateCount: issues.duplicateCount,
+      conflictCount: issues.conflictCount,
+      deprecatedPackages: issues.deprecatedPackages.map((pkg) => ({
+        registry: pkg.registry,
+        name: pkg.name,
+        versions: pkg.versions,
+        reasons: pkg.reasons.map((reason) => ({
+          version: reason.version,
+          reason: reason.reason ?? undefined
+        }))
+      })),
+      outdatedPackages: issues.outdatedPackages.map((pkg) => ({
+        registry: pkg.registry,
+        name: pkg.name,
+        latestVersion: pkg.latestVersion ?? undefined,
+        severity: pkg.severity,
+        versions: pkg.versions.map((version2) => ({
+          version: version2.version,
+          severity: version2.severity
+        })),
+        repositoryUrl: pkg.repositoryUrl ?? undefined
+      })),
+      duplicatePackages: issues.duplicatePackages.map((pkg) => ({
+        registry: pkg.registry ?? undefined,
+        name: pkg.name,
+        versions: pkg.versions
+      })),
+      conflicts: issues.conflicts.map((conflict) => ({
+        registry: conflict.registry ?? undefined,
+        name: conflict.name,
+        versions: conflict.versions,
+        requiredVersions: conflict.requiredVersions,
+        conflictingEdges: conflict.conflictingEdges.map((edge) => ({
+          fromIndex: edge.fromIndex ?? undefined,
+          toIndex: edge.toIndex,
+          versionConstraint: edge.versionConstraint,
+          dependencyType: edge.dependencyType
+        }))
+      }))
+    };
+  }
   async packageChangelog(params) {
     return withTelemetrySpan("pkg-intel.changelog.request", () => executeWithTokenRefresh({
       getToken: () => this.tokenProvider.getToken(),