@aroman22/codegraph-vba 1.5.2 → 1.6.0

package/npm-shim.js

@@ -45,7 +45,14 @@ async function main() {
   // Happy path: the npm-installed optional dependency. Fall back to a download
   // when the registry didn't deliver it.
   var resolved = resolveInstalledBundle() || (await selfHealBundle());
-  var res = childProcess.spawnSync(resolved.command, resolved.args, { stdio: 'inherit' });
+  // Thread the MCP host's pid (our parent) down to the bundled server so its
+  // orphan watchdog can poll the host directly. Without this, the server can
+  // only watch THIS shim — and a shim killed during the server's first ~100ms
+  // of startup used to leave the server orphaned forever (issue #1185). An
+  // already-set value (an outer launcher) wins.
+  var env = Object.assign({}, process.env);
+  if (!env.CODEGRAPH_HOST_PPID) env.CODEGRAPH_HOST_PPID = String(process.ppid);
+  var res = childProcess.spawnSync(resolved.command, resolved.args, { stdio: 'inherit', windowsHide: true, env: env });
   if (res.error) {
     process.stderr.write('codegraph: ' + res.error.message + '\n');
     process.exit(1);
@@ -105,7 +112,7 @@ async function selfHealBundle() {
   // Already downloaded by a previous run? Use it even when downloads are
   // disabled — CODEGRAPH_NO_DOWNLOAD blocks fetching, not a cached bundle.
   var cached = launcherIn(dest);
-  if (cached) return cached;
+  if (cached) { pruneOldBundles(bundlesDir, dest); return cached; }
 
   if (process.env.CODEGRAPH_NO_DOWNLOAD) {
     fail('the network fallback is disabled (CODEGRAPH_NO_DOWNLOAD is set).');
@@ -149,6 +156,7 @@ async function selfHealBundle() {
 
   var ready = launcherIn(dest);
   if (!ready) fail('downloaded bundle is missing its launcher under ' + dest + '.');
+  pruneOldBundles(bundlesDir, dest);
   process.stderr.write('codegraph: bundle ready.\n');
   return ready;
 }
@@ -221,7 +229,7 @@ function extract(archive, destDir) {
   var args = isWindows
     ? ['-xf', archive, '-C', destDir, '--strip-components=1']
     : ['-xzf', archive, '-C', destDir, '--strip-components=1'];
-  var res = childProcess.spawnSync('tar', args, { stdio: 'ignore' });
+  var res = childProcess.spawnSync('tar', args, { stdio: 'ignore', windowsHide: true });
   if (res.error) throw new Error('tar unavailable: ' + res.error.message);
   if (res.status !== 0) throw new Error('tar exited ' + res.status);
 }
@@ -230,6 +238,27 @@ function rmrf(p) {
   try { fs.rmSync(p, { recursive: true, force: true }); } catch (e) { /* best effort */ }
 }
 
+// Drop sibling bundles for OTHER versions of this same platform target, keeping
+// only keepDir. The self-heal cache otherwise accumulates a full ~50 MB bundle
+// per version forever (issue #1074). Best-effort: a locked/busy dir (a
+// concurrent run still mapping an older node.exe on Windows) just stays — rmrf
+// already swallows its own errors, and the readdir is guarded — so cleanup can
+// never break a working command. Only this target's "<target>-<version>" dirs
+// are touched; other platforms' bundles and the ".dl-*" staging dirs are left
+// alone.
+function pruneOldBundles(bundlesDir, keepDir) {
+  var keep = path.basename(keepDir);
+  try {
+    var names = fs.readdirSync(bundlesDir);
+    for (var i = 0; i < names.length; i++) {
+      var name = names[i];
+      if (name === keep) continue;
+      if (name.indexOf(target + '-') !== 0) continue;
+      rmrf(path.join(bundlesDir, name));
+    }
+  } catch (e) { /* best effort — never break a working run over cleanup */ }
+}
+
 function fail(reason) {
   process.stderr.write(
     'codegraph: no prebuilt bundle for ' + target + '.\n' +

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@aroman22/codegraph-vba",
-  "version": "1.5.2",
+  "version": "1.6.0",
   "description": "Local-first code intelligence for AI agents (MCP). Self-contained — bundles its own runtime.",
   "bin": {
     "codegraph-vba": "npm-shim.js"
@@ -15,12 +15,12 @@
     "./package.json": "./package.json"
   },
   "optionalDependencies": {
-    "@aroman22/codegraph-vba-darwin-arm64": "1.5.2",
-    "@aroman22/codegraph-vba-darwin-x64": "1.5.2",
-    "@aroman22/codegraph-vba-linux-arm64": "1.5.2",
-    "@aroman22/codegraph-vba-linux-x64": "1.5.2",
-    "@aroman22/codegraph-vba-win32-arm64": "1.5.2",
-    "@aroman22/codegraph-vba-win32-x64": "1.5.2"
+    "@aroman22/codegraph-vba-darwin-arm64": "1.6.0",
+    "@aroman22/codegraph-vba-darwin-x64": "1.6.0",
+    "@aroman22/codegraph-vba-linux-arm64": "1.6.0",
+    "@aroman22/codegraph-vba-linux-x64": "1.6.0",
+    "@aroman22/codegraph-vba-win32-arm64": "1.6.0",
+    "@aroman22/codegraph-vba-win32-x64": "1.6.0"
   },
   "files": [
     "npm-shim.js",

package/dist/reasoning/config.d.ts

@@ -1,45 +0,0 @@
-/** Managed tier ("CodeGraph AI") — the metered gateway used when logged in. */
-export declare const MANAGED_DEFAULT_URL = "https://ai.getcodegraph.com/v1";
-/** The gateway's public model id (it translates this to the upstream provider id). */
-export declare const MANAGED_DEFAULT_MODEL = "openai/gpt-oss-120b";
-export interface OffloadConfig {
-    /** Managed tier: route through CodeGraph AI (metered) with the logged-in org token. */
-    managed?: boolean;
-    /** OpenAI-compatible base URL ending in `/v1` (e.g. https://api.cerebras.ai/v1). */
-    url?: string;
-    /** Model id to request (default `gpt-oss-120b` BYO, `openai/gpt-oss-120b` managed). */
-    model?: string;
-    /** Name of the env var holding the provider API key (never persisted). BYO only. */
-    keyEnv?: string;
-    /** reasoning_effort: low | medium | high (default `low`). */
-    effort?: string;
-    /** Output style: plain | report (default `plain`). */
-    style?: string;
-}
-export interface ResolvedOffload {
-    /** True when the offload is usable (endpoint present; for managed, a token too). */
-    enabled: boolean;
-    /** Managed tier (CodeGraph AI, metered) vs BYO endpoint. */
-    managed: boolean;
-    url?: string;
-    model: string;
-    /** Resolved API key / org token (from env, the configured `keyEnv`, or login), if any. */
-    apiKey?: string;
-    /** Where the key/token came from (for `status` display) — never the secret itself. */
-    keySource?: string;
-    effort: string;
-    style: string;
-    timeoutMs: number;
-    maxTokens: number;
-    strip: boolean;
-    debug: boolean;
-    /** Where the endpoint came from — drives `codegraph offload status`. */
-    origin: 'env' | 'config' | 'none';
-}
-/** The persisted offload block (empty object if none). */
-export declare function readOffloadConfig(): OffloadConfig;
-/** Persist (or, with `null`, clear) the offload block, leaving other config keys intact. */
-export declare function writeOffloadConfig(offload: OffloadConfig | null): void;
-/** Merge the persisted config with `CODEGRAPH_OFFLOAD_*` env overrides (env wins). */
-export declare function resolveOffload(env?: NodeJS.ProcessEnv): ResolvedOffload;
-//# sourceMappingURL=config.d.ts.map

package/dist/reasoning/credentials.d.ts

@@ -1,5 +0,0 @@
-/** The stored managed-offload org token, if the machine is logged in. */
-export declare function readOffloadToken(): string | undefined;
-/** Persist (or, with `null`, clear) the managed-offload org token at `0600`. */
-export declare function writeOffloadToken(token: string | null): void;
-//# sourceMappingURL=credentials.d.ts.map

package/dist/reasoning/login.d.ts

@@ -1,21 +0,0 @@
-/** Dashboard base for the device-login endpoints; override for testing via CODEGRAPH_LOGIN_URL. */
-export declare function loginBaseUrl(): string;
-/** The dashboard's response to a device-authorization start request. */
-export interface DeviceStart {
-    device_code: string;
-    user_code: string;
-    verification_uri: string;
-    /** Same URL with the code prefilled, for one-click open. */
-    verification_uri_complete?: string;
-    /** Seconds the CLI should wait between polls. */
-    interval?: number;
-    /** Seconds until the request expires. */
-    expires_in?: number;
-}
-/** Begin a device-authorization request. */
-export declare function startDeviceLogin(): Promise<DeviceStart>;
-/** Poll until the user approves in the browser; resolves with the org token. */
-export declare function pollForToken(deviceCode: string, intervalSec: number, expiresInSec: number): Promise<string>;
-/** Best-effort: open a URL in the default browser. Never throws — the URL is also printed. */
-export declare function openBrowser(url: string): Promise<void>;
-//# sourceMappingURL=login.d.ts.map

package/dist/reasoning/reasoner.d.ts

@@ -1,43 +0,0 @@
-interface SynthArgs {
-    query: string;
-    context: string;
-}
-/** True when a reasoning offload endpoint is configured (env or `~/.codegraph/config.json`). */
-export declare function isOffloadEnabled(): boolean;
-export interface OffloadUsage {
-    plan?: string;
-    allowance?: number;
-    used?: number;
-    overage?: number;
-    remaining?: number;
-    periodEnd?: number;
-    unlimited?: boolean;
-    banned?: boolean;
-    tokensLast30?: number;
-    callsLast30?: number;
-    creditsLast30?: number;
-    models?: string[];
-}
-/**
- * GET `/v1/usage` from the configured (managed) endpoint → the org's credit
- * balance/usage, or null on any failure. Drives `codegraph offload status`.
- */
-export declare function fetchUsage(): Promise<OffloadUsage | null>;
-/**
- * Strip sections of the explore output addressed to the AGENT (not useful to a
- * reasoning model): the "Not shown above" pointer list, the completeness signal,
- * the explore-budget note, the trimmed/truncation notices, and the redundant
- * "## Exploration:/Found N symbols" header (the query is sent separately). Left
- * in, some models regurgitate them ("We have 2 explore calls. Let's explore…")
- * and they add noise. Source code, blast radius, relationships, and flow stay.
- * Opt-in (`CODEGRAPH_OFFLOAD_STRIP=1`) — default off (it also removes the "Not
- * shown above" pointers, which can be useful navigation).
- */
-export declare function stripAgentDirectives(context: string): string;
-/**
- * Offload reasoning over the retrieved `context` to the configured model and
- * return its synthesized answer, or null to signal "fall back to local source".
- */
-export declare function synthesizeOffload({ query, context }: SynthArgs): Promise<string | null>;
-export {};
-//# sourceMappingURL=reasoner.d.ts.map