@graphmemory/server 1.3.0 → 1.3.1

package/dist/graphs/docs.js

@@ -21,6 +21,8 @@ const docs_1 = require("../lib/search/docs");
 const files_1 = require("../lib/search/files");
 const bm25_1 = require("../lib/search/bm25");
 const embedding_codec_1 = require("../lib/embedding-codec");
+const graph_persistence_1 = require("../lib/graph-persistence");
+const defaults_1 = require("../lib/defaults");
 function createGraph() {
     return new graphology_1.DirectedGraph({ multi: false, allowSelfLoops: false });
 }
@@ -108,7 +110,7 @@ function getFileMtime(graph, fileId) {
         return 0;
     return graph.getNodeAttribute(nodes[0], 'mtime');
 }
-function listFiles(graph, filter, limit = 20) {
+function listFiles(graph, filter, limit = defaults_1.LIST_LIMIT_SMALL) {
     const files = new Map();
     const lowerFilter = filter?.toLowerCase();
     graph.forEachNode((_, attrs) => {
@@ -153,10 +155,10 @@ function loadGraph(graphMemory, fresh = false, embeddingFingerprint) {
     if (fresh)
         return graph;
     const file = path_1.default.join(graphMemory, 'docs.json');
-    if (!fs_1.default.existsSync(file))
+    const data = (0, graph_persistence_1.readJsonWithTmpFallback)(file);
+    if (!data)
         return graph;
     try {
-        const data = JSON.parse(fs_1.default.readFileSync(file, 'utf-8'));
         const stored = data.embeddingModel;
         if (embeddingFingerprint && stored !== embeddingFingerprint) {
             process.stderr.write(`[graph] Embedding config changed, re-indexing docs graph\n`);

package/dist/graphs/file-index.js

@@ -20,6 +20,8 @@ const file_lang_1 = require("../graphs/file-lang");
 const manager_types_1 = require("../graphs/manager-types");
 const file_index_1 = require("../lib/search/file-index");
 const embedding_codec_1 = require("../lib/embedding-codec");
+const graph_persistence_1 = require("../lib/graph-persistence");
+const defaults_1 = require("../lib/defaults");
 // ---------------------------------------------------------------------------
 // CRUD
 // ---------------------------------------------------------------------------
@@ -148,7 +150,7 @@ function getFileEntryMtime(graph, filePath) {
  * Otherwise returns all file nodes matching the filters.
  */
 function listAllFiles(graph, options = {}) {
-    const { directory, extension, language, filter, limit = 50 } = options;
+    const { directory, extension, language, filter, limit = defaults_1.LIST_LIMIT_LARGE } = options;
     const lowerFilter = filter?.toLowerCase();
     const results = [];
     if (directory !== undefined) {
@@ -261,10 +263,10 @@ function loadFileIndexGraph(graphMemory, fresh = false, embeddingFingerprint) {
     if (fresh)
         return graph;
     const file = path_1.default.join(graphMemory, 'file-index.json');
-    if (!fs_1.default.existsSync(file))
+    const data = (0, graph_persistence_1.readJsonWithTmpFallback)(file);
+    if (!data)
         return graph;
     try {
-        const data = JSON.parse(fs_1.default.readFileSync(file, 'utf-8'));
         const stored = data.embeddingModel;
         if (embeddingFingerprint && stored !== embeddingFingerprint) {
             process.stderr.write(`[file-index] Embedding config changed, re-indexing file index\n`);

package/dist/graphs/knowledge.js

@@ -29,6 +29,8 @@ const knowledge_1 = require("../lib/search/knowledge");
 const bm25_1 = require("../lib/search/bm25");
 const file_mirror_1 = require("../lib/file-mirror");
 const embedding_codec_1 = require("../lib/embedding-codec");
+const graph_persistence_1 = require("../lib/graph-persistence");
+const defaults_1 = require("../lib/defaults");
 const attachment_types_1 = require("../graphs/attachment-types");
 const file_import_1 = require("../lib/file-import");
 // ---------------------------------------------------------------------------
@@ -162,7 +164,7 @@ function getNote(graph, noteId) {
     return { id: noteId, ...graph.getNodeAttributes(noteId) };
 }
 /** List notes with optional filter (substring in title/id) and tag filter. Excludes proxy nodes. */
-function listNotes(graph, filter, tag, limit = 20) {
+function listNotes(graph, filter, tag, limit = defaults_1.LIST_LIMIT_SMALL) {
     const lowerFilter = filter?.toLowerCase();
     const lowerTag = tag?.toLowerCase();
     const results = [];
@@ -179,7 +181,7 @@ function listNotes(graph, filter, tag, limit = 20) {
             if (!attrs.tags.some(t => t.toLowerCase() === lowerTag))
                 return;
         }
-        results.push({ id, title: attrs.title, content: attrs.content.slice(0, 500), tags: attrs.tags, updatedAt: attrs.updatedAt });
+        results.push({ id, title: attrs.title, content: attrs.content.slice(0, defaults_1.CONTENT_PREVIEW_LEN), tags: attrs.tags, updatedAt: attrs.updatedAt });
     });
     return results
         .sort((a, b) => b.updatedAt - a.updatedAt)
@@ -349,10 +351,10 @@ function loadKnowledgeGraph(graphMemory, fresh = false, embeddingFingerprint) {
     if (fresh)
         return graph;
     const file = path_1.default.join(graphMemory, 'knowledge.json');
-    if (!fs_1.default.existsSync(file))
+    const data = (0, graph_persistence_1.readJsonWithTmpFallback)(file);
+    if (!data)
         return graph;
     try {
-        const data = JSON.parse(fs_1.default.readFileSync(file, 'utf-8'));
         const stored = data.embeddingModel;
         if (embeddingFingerprint && stored !== embeddingFingerprint) {
             process.stderr.write(`[knowledge-graph] Embedding config changed, re-indexing knowledge graph\n`);
@@ -601,6 +603,11 @@ class KnowledgeGraphManager {
             return null;
         if (!this._graph.hasNode(noteId) || isProxy(this._graph, noteId))
             return null;
+        if (data.length > attachment_types_1.MAX_ATTACHMENT_SIZE)
+            return null;
+        const existing = (0, attachment_types_1.scanAttachments)(path_1.default.join(dir, noteId));
+        if (existing.length >= attachment_types_1.MAX_ATTACHMENTS_PER_ENTITY)
+            return null;
         const safe = (0, file_mirror_1.sanitizeFilename)(filename);
         if (!safe)
             return null;

package/dist/graphs/skill.js

@@ -31,6 +31,8 @@ const skills_1 = require("../lib/search/skills");
 const bm25_1 = require("../lib/search/bm25");
 const file_mirror_1 = require("../lib/file-mirror");
 const embedding_codec_1 = require("../lib/embedding-codec");
+const graph_persistence_1 = require("../lib/graph-persistence");
+const defaults_1 = require("../lib/defaults");
 const attachment_types_1 = require("../graphs/attachment-types");
 const file_import_1 = require("../lib/file-import");
 // ---------------------------------------------------------------------------
@@ -290,7 +292,7 @@ function getSkill(graph, skillId) {
 }
 /** List skills with optional filters. Excludes proxy nodes. */
 function listSkills(graph, opts = {}) {
-    const { source, tag, filter, limit = 50 } = opts;
+    const { source, tag, filter, limit = defaults_1.LIST_LIMIT_LARGE } = opts;
     const lowerFilter = filter?.toLowerCase();
     const lowerTag = tag?.toLowerCase();
     const results = [];
@@ -310,7 +312,7 @@ function listSkills(graph, opts = {}) {
         results.push({
             id,
             title: attrs.title,
-            description: attrs.description?.slice(0, 500),
+            description: attrs.description?.slice(0, defaults_1.CONTENT_PREVIEW_LEN),
             steps: attrs.steps,
             triggers: attrs.triggers,
             inputHints: attrs.inputHints,
@@ -493,10 +495,10 @@ function loadSkillGraph(graphMemory, fresh = false, embeddingFingerprint) {
     if (fresh)
         return graph;
     const file = path_1.default.join(graphMemory, 'skills.json');
-    if (!fs_1.default.existsSync(file))
+    const data = (0, graph_persistence_1.readJsonWithTmpFallback)(file);
+    if (!data)
         return graph;
     try {
-        const data = JSON.parse(fs_1.default.readFileSync(file, 'utf-8'));
         const stored = data.embeddingModel;
         if (embeddingFingerprint && stored !== embeddingFingerprint) {
             process.stderr.write(`[skill-graph] Embedding config changed, re-indexing skill graph\n`);
@@ -829,10 +831,15 @@ class SkillGraphManager {
             return null;
         if (!this._graph.hasNode(skillId) || isProxy(this._graph, skillId))
             return null;
+        if (data.length > attachment_types_1.MAX_ATTACHMENT_SIZE)
+            return null;
+        const entityDir = path_1.default.join(dir, skillId);
+        const existing = (0, attachment_types_1.scanAttachments)(entityDir);
+        if (existing.length >= attachment_types_1.MAX_ATTACHMENTS_PER_ENTITY)
+            return null;
         const safe = (0, file_mirror_1.sanitizeFilename)(filename);
         if (!safe)
             return null;
-        const entityDir = path_1.default.join(dir, skillId);
         (0, file_mirror_1.writeAttachment)(dir, skillId, safe, data);
         this.mirrorTracker?.recordWrite(path_1.default.join(entityDir, 'attachments', safe));
         (0, file_mirror_1.mirrorAttachmentEvent)(entityDir, 'add', safe);

package/dist/graphs/task.js

@@ -31,6 +31,8 @@ const tasks_1 = require("../lib/search/tasks");
 const bm25_1 = require("../lib/search/bm25");
 const file_mirror_1 = require("../lib/file-mirror");
 const embedding_codec_1 = require("../lib/embedding-codec");
+const graph_persistence_1 = require("../lib/graph-persistence");
+const defaults_1 = require("../lib/defaults");
 const attachment_types_1 = require("../graphs/attachment-types");
 const file_import_1 = require("../lib/file-import");
 // ---------------------------------------------------------------------------
@@ -301,7 +303,7 @@ function getTask(graph, taskId) {
 }
 /** List tasks with optional filters. Excludes proxy nodes. */
 function listTasks(graph, opts = {}) {
-    const { status, priority, tag, filter, assignee, limit = 50 } = opts;
+    const { status, priority, tag, filter, assignee, limit = defaults_1.LIST_LIMIT_LARGE } = opts;
     const lowerFilter = filter?.toLowerCase();
     const lowerTag = tag?.toLowerCase();
     const results = [];
@@ -325,7 +327,7 @@ function listTasks(graph, opts = {}) {
         results.push({
             id,
             title: attrs.title,
-            description: attrs.description?.slice(0, 500),
+            description: attrs.description?.slice(0, defaults_1.CONTENT_PREVIEW_LEN),
             status: attrs.status,
             priority: attrs.priority,
             tags: attrs.tags,
@@ -514,10 +516,10 @@ function loadTaskGraph(graphMemory, fresh = false, embeddingFingerprint) {
     if (fresh)
         return graph;
     const file = path_1.default.join(graphMemory, 'tasks.json');
-    if (!fs_1.default.existsSync(file))
+    const data = (0, graph_persistence_1.readJsonWithTmpFallback)(file);
+    if (!data)
         return graph;
     try {
-        const data = JSON.parse(fs_1.default.readFileSync(file, 'utf-8'));
         const stored = data.embeddingModel;
         if (embeddingFingerprint && stored !== embeddingFingerprint) {
             process.stderr.write(`[task-graph] Embedding config changed, re-indexing task graph\n`);
@@ -800,10 +802,15 @@ class TaskGraphManager {
             return null;
         if (!this._graph.hasNode(taskId) || isProxy(this._graph, taskId))
             return null;
+        if (data.length > attachment_types_1.MAX_ATTACHMENT_SIZE)
+            return null;
+        const entityDir = path_1.default.join(dir, taskId);
+        const existing = (0, attachment_types_1.scanAttachments)(entityDir);
+        if (existing.length >= attachment_types_1.MAX_ATTACHMENTS_PER_ENTITY)
+            return null;
         const safe = (0, file_mirror_1.sanitizeFilename)(filename);
         if (!safe)
             return null;
-        const entityDir = path_1.default.join(dir, taskId);
         (0, file_mirror_1.writeAttachment)(dir, taskId, safe, data);
         this.mirrorTracker?.recordWrite(path_1.default.join(entityDir, 'attachments', safe));
         (0, file_mirror_1.mirrorAttachmentEvent)(entityDir, 'add', safe);

package/dist/lib/defaults.js

@@ -0,0 +1,78 @@
+"use strict";
+/**
+ * Central named constants for all tunable values.
+ * Import from here instead of hardcoding magic numbers.
+ */
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.WIKI_MAX_DEPTH = exports.DEFAULT_EMBEDDING_CACHE_SIZE = exports.MIRROR_MTIME_TOLERANCE_MS = exports.MIRROR_MAX_ENTRIES = exports.MIRROR_STALE_MS = exports.ERROR_BODY_LIMIT = exports.GRACEFUL_SHUTDOWN_TIMEOUT_MS = exports.SESSION_SWEEP_INTERVAL_MS = exports.RATE_LIMIT_WINDOW_MS = exports.REMOTE_BASE_DELAY_MS = exports.REMOTE_MAX_RETRIES = exports.WS_DEBOUNCE_MS = exports.AUTO_SAVE_INTERVAL_MS = exports.MAX_PASSWORD_LEN = exports.MAX_ATTACHMENT_FILENAME_LEN = exports.MAX_PROJECT_ID_LEN = exports.MAX_LINK_KIND_LEN = exports.MAX_TARGET_NODE_ID_LEN = exports.MAX_SKILL_TRIGGERS_COUNT = exports.MAX_SKILL_TRIGGER_LEN = exports.MAX_SKILL_STEPS_COUNT = exports.MAX_SKILL_STEP_LEN = exports.MAX_ASSIGNEE_LEN = exports.MAX_DESCRIPTION_LEN = exports.MAX_SEARCH_TOP_K = exports.MAX_SEARCH_QUERY_LEN = exports.MAX_TAGS_COUNT = exports.MAX_TAG_LEN = exports.MAX_NOTE_CONTENT_LEN = exports.MAX_TITLE_LEN = exports.INDEXER_PREVIEW_LEN = exports.CONTENT_PREVIEW_LEN = exports.LIST_LIMIT_LARGE = exports.LIST_LIMIT_SMALL = exports.SIGNATURE_MAX_LEN = exports.MAX_UPLOAD_SIZE = exports.MAX_BODY_SIZE = exports.BM25_BODY_MAX_CHARS = exports.FILE_SEARCH_TOP_K = exports.SEARCH_MIN_SCORE_FILES = exports.SEARCH_MIN_SCORE_CODE = exports.SEARCH_MIN_SCORE = exports.SEARCH_BFS_DECAY = exports.SEARCH_MAX_RESULTS = exports.SEARCH_BFS_DEPTH = exports.SEARCH_TOP_K = exports.RRF_K = exports.BM25_IDF_OFFSET = exports.BM25_B = exports.BM25_K1 = void 0;
+// ---------------------------------------------------------------------------
+// Search — BM25, RRF, BFS
+// ---------------------------------------------------------------------------
+exports.BM25_K1 = 1.2;
+exports.BM25_B = 0.75;
+exports.BM25_IDF_OFFSET = 0.5;
+exports.RRF_K = 60;
+exports.SEARCH_TOP_K = 5;
+exports.SEARCH_BFS_DEPTH = 1;
+exports.SEARCH_MAX_RESULTS = 20;
+exports.SEARCH_BFS_DECAY = 0.8;
+exports.SEARCH_MIN_SCORE = 0.5;
+exports.SEARCH_MIN_SCORE_CODE = 0.3;
+exports.SEARCH_MIN_SCORE_FILES = 0.3;
+exports.FILE_SEARCH_TOP_K = 10;
+exports.BM25_BODY_MAX_CHARS = 2000;
+// ---------------------------------------------------------------------------
+// Limits — sizes, counts, truncation
+// ---------------------------------------------------------------------------
+exports.MAX_BODY_SIZE = 10 * 1024 * 1024; // 10 MB
+exports.MAX_UPLOAD_SIZE = 50 * 1024 * 1024; // 50 MB (multer)
+exports.SIGNATURE_MAX_LEN = 300;
+exports.LIST_LIMIT_SMALL = 20;
+exports.LIST_LIMIT_LARGE = 50;
+exports.CONTENT_PREVIEW_LEN = 500;
+exports.INDEXER_PREVIEW_LEN = 200;
+// ---------------------------------------------------------------------------
+// Validation — REST API schema limits
+// ---------------------------------------------------------------------------
+exports.MAX_TITLE_LEN = 500;
+exports.MAX_NOTE_CONTENT_LEN = 1_000_000;
+exports.MAX_TAG_LEN = 100;
+exports.MAX_TAGS_COUNT = 100;
+exports.MAX_SEARCH_QUERY_LEN = 2000;
+exports.MAX_SEARCH_TOP_K = 500;
+exports.MAX_DESCRIPTION_LEN = 500_000;
+exports.MAX_ASSIGNEE_LEN = 100;
+exports.MAX_SKILL_STEP_LEN = 10_000;
+exports.MAX_SKILL_STEPS_COUNT = 100;
+exports.MAX_SKILL_TRIGGER_LEN = 500;
+exports.MAX_SKILL_TRIGGERS_COUNT = 50;
+exports.MAX_TARGET_NODE_ID_LEN = 500;
+exports.MAX_LINK_KIND_LEN = 100;
+exports.MAX_PROJECT_ID_LEN = 200;
+exports.MAX_ATTACHMENT_FILENAME_LEN = 255;
+exports.MAX_PASSWORD_LEN = 256;
+// ---------------------------------------------------------------------------
+// Timing — intervals, retries, timeouts
+// ---------------------------------------------------------------------------
+exports.AUTO_SAVE_INTERVAL_MS = 30_000;
+exports.WS_DEBOUNCE_MS = 1000;
+exports.REMOTE_MAX_RETRIES = 3;
+exports.REMOTE_BASE_DELAY_MS = 200;
+exports.RATE_LIMIT_WINDOW_MS = 60_000;
+exports.SESSION_SWEEP_INTERVAL_MS = 60_000;
+exports.GRACEFUL_SHUTDOWN_TIMEOUT_MS = 5000;
+exports.ERROR_BODY_LIMIT = 500;
+// ---------------------------------------------------------------------------
+// Mirror
+// ---------------------------------------------------------------------------
+exports.MIRROR_STALE_MS = 10_000;
+exports.MIRROR_MAX_ENTRIES = 10_000;
+exports.MIRROR_MTIME_TOLERANCE_MS = 100;
+// ---------------------------------------------------------------------------
+// Embedder
+// ---------------------------------------------------------------------------
+exports.DEFAULT_EMBEDDING_CACHE_SIZE = 10_000;
+// ---------------------------------------------------------------------------
+// Parser
+// ---------------------------------------------------------------------------
+exports.WIKI_MAX_DEPTH = 10;

package/dist/lib/embedder.js

@@ -12,10 +12,11 @@ exports.cosineSimilarity = cosineSimilarity;
 const transformers_1 = require("@huggingface/transformers");
 const fs_1 = __importDefault(require("fs"));
 const path_1 = __importDefault(require("path"));
+const defaults_1 = require("../lib/defaults");
 // ---------------------------------------------------------------------------
 // LRU cache for embedding vectors (avoids re-computing identical texts)
 // ---------------------------------------------------------------------------
-const DEFAULT_CACHE_SIZE = 10_000;
+const DEFAULT_CACHE_SIZE = defaults_1.DEFAULT_EMBEDDING_CACHE_SIZE;
 class LruCache {
     maxSize;
     map = new Map();
@@ -97,26 +98,24 @@ async function loadModel(model, embedding, modelsDir, name = 'default') {
 // ---------------------------------------------------------------------------
 // Remote embedding HTTP client
 // ---------------------------------------------------------------------------
-const REMOTE_MAX_RETRIES = 3;
-const REMOTE_BASE_DELAY_MS = 200;
 async function remoteEmbed(url, texts, apiKey) {
     const headers = { 'Content-Type': 'application/json' };
     if (apiKey)
         headers['Authorization'] = `Bearer ${apiKey}`;
     const body = JSON.stringify({ texts });
-    for (let attempt = 0; attempt < REMOTE_MAX_RETRIES; attempt++) {
+    for (let attempt = 0; attempt < defaults_1.REMOTE_MAX_RETRIES; attempt++) {
         let resp;
         try {
             resp = await fetch(url, { method: 'POST', headers, body });
         }
         catch (err) {
             // Network error — retry
-            if (attempt < REMOTE_MAX_RETRIES - 1) {
-                const delay = REMOTE_BASE_DELAY_MS * 2 ** attempt;
+            if (attempt < defaults_1.REMOTE_MAX_RETRIES - 1) {
+                const delay = defaults_1.REMOTE_BASE_DELAY_MS * 2 ** attempt;
                 await new Promise(r => setTimeout(r, delay));
                 continue;
             }
-            throw new Error(`Remote embed network error after ${REMOTE_MAX_RETRIES} attempts: ${err}`);
+            throw new Error(`Remote embed network error after ${defaults_1.REMOTE_MAX_RETRIES} attempts: ${err}`);
         }
         if (resp.ok) {
             const data = await resp.json();
@@ -124,17 +123,17 @@ async function remoteEmbed(url, texts, apiKey) {
         }
         // Client errors (4xx) — don't retry
         if (resp.status < 500) {
-            const respBody = (await resp.text()).slice(0, 500);
+            const respBody = (await resp.text()).slice(0, defaults_1.ERROR_BODY_LIMIT);
             throw new Error(`Remote embed failed (${resp.status}): ${respBody}`);
         }
         // Server errors (5xx) — retry
-        if (attempt < REMOTE_MAX_RETRIES - 1) {
-            const delay = REMOTE_BASE_DELAY_MS * 2 ** attempt;
+        if (attempt < defaults_1.REMOTE_MAX_RETRIES - 1) {
+            const delay = defaults_1.REMOTE_BASE_DELAY_MS * 2 ** attempt;
             await new Promise(r => setTimeout(r, delay));
             continue;
         }
-        const respBody = (await resp.text()).slice(0, 500);
-        throw new Error(`Remote embed failed after ${REMOTE_MAX_RETRIES} attempts (${resp.status}): ${respBody}`);
+        const respBody = (await resp.text()).slice(0, defaults_1.ERROR_BODY_LIMIT);
+        throw new Error(`Remote embed failed after ${defaults_1.REMOTE_MAX_RETRIES} attempts (${resp.status}): ${respBody}`);
     }
     throw new Error('Remote embed: unreachable');
 }

package/dist/lib/embedding-codec.js

@@ -5,17 +5,15 @@
  * Backwards compatible: detects old format (number[]) on load.
  */
 Object.defineProperty(exports, "__esModule", { value: true });
+exports.float32ToBase64 = float32ToBase64;
+exports.base64ToFloat32 = base64ToFloat32;
 exports.compressEmbeddings = compressEmbeddings;
 exports.decompressEmbeddings = decompressEmbeddings;
 const EMBEDDING_FIELDS = ['embedding', 'fileEmbedding'];
 /** Convert a number[] to a Base64-encoded Float32Array. */
 function float32ToBase64(arr) {
     const f32 = new Float32Array(arr);
-    const bytes = new Uint8Array(f32.buffer);
-    let binary = '';
-    for (let i = 0; i < bytes.length; i++)
-        binary += String.fromCharCode(bytes[i]);
-    return Buffer.from(binary, 'binary').toString('base64');
+    return Buffer.from(f32.buffer).toString('base64');
 }
 /** Convert a Base64-encoded Float32Array back to number[]. */
 function base64ToFloat32(b64) {

package/dist/lib/graph-persistence.js

@@ -0,0 +1,68 @@
+"use strict";
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.readJsonWithTmpFallback = readJsonWithTmpFallback;
+const fs = __importStar(require("fs"));
+/**
+ * Try to read and parse a JSON file, falling back to .tmp if main file
+ * is missing or corrupted (recovery from interrupted save).
+ */
+function readJsonWithTmpFallback(file) {
+    const tmp = file + '.tmp';
+    // If main file missing but .tmp exists, recover it
+    if (!fs.existsSync(file) && fs.existsSync(tmp)) {
+        try {
+            fs.renameSync(tmp, file);
+        }
+        catch { /* ignore */ }
+    }
+    if (fs.existsSync(file)) {
+        try {
+            return JSON.parse(fs.readFileSync(file, 'utf-8'));
+        }
+        catch {
+            // Main file corrupted — try .tmp as fallback
+            if (fs.existsSync(tmp)) {
+                try {
+                    const data = JSON.parse(fs.readFileSync(tmp, 'utf-8'));
+                    process.stderr.write(`[graph] Recovered from .tmp file: ${file}\n`);
+                    return data;
+                }
+                catch { /* .tmp also bad */ }
+            }
+        }
+    }
+    return null;
+}

package/dist/lib/mirror-watcher.js

@@ -45,6 +45,7 @@ const chokidar_1 = __importDefault(require("chokidar"));
 const file_import_1 = require("./file-import");
 const events_log_1 = require("./events-log");
 const frontmatter_1 = require("./frontmatter");
+const defaults_1 = require("../lib/defaults");
 /**
  * Tracks recent mirror writes to suppress re-import (feedback loop prevention).
  * When mirrorNote/mirrorTask writes a file, the watcher will fire —
@@ -53,8 +54,8 @@ const frontmatter_1 = require("./frontmatter");
 class MirrorWriteTracker {
     /** Map from filePath → { mtimeMs (for comparison), recordedAt (for eviction) } */
     recentWrites = new Map();
-    static STALE_MS = 10_000; // entries older than 10s are stale
-    static MAX_ENTRIES = 10_000;
+    static STALE_MS = defaults_1.MIRROR_STALE_MS;
+    static MAX_ENTRIES = defaults_1.MIRROR_MAX_ENTRIES;
     /** Called by mirrorNote/mirrorTask after writing a file. */
     recordWrite(filePath) {
         try {
@@ -76,7 +77,7 @@ class MirrorWriteTracker {
             const stat = fs.statSync(filePath, { throwIfNoEntry: false });
             if (!stat)
                 return false;
-            if (Math.abs(stat.mtimeMs - recorded.mtimeMs) < 100) {
+            if (Math.abs(stat.mtimeMs - recorded.mtimeMs) < defaults_1.MIRROR_MTIME_TOLERANCE_MS) {
                 this.recentWrites.delete(filePath);
                 return true;
             }

package/dist/lib/parsers/docs.js

@@ -8,6 +8,7 @@ exports.clearWikiIndexCache = clearWikiIndexCache;
 const path_1 = __importDefault(require("path"));
 const fs_1 = __importDefault(require("fs"));
 const codeblock_1 = require("../../lib/parsers/codeblock");
+const defaults_1 = require("../../lib/defaults");
 // Parse a markdown file into chunks split by headings
 async function parseFile(content, absolutePath, projectDir, chunkDepth) {
     const fileId = path_1.default.relative(projectDir, absolutePath);
@@ -179,7 +180,7 @@ function getWikiIndex(projectDir) {
     if (_wikiIndex.has(projectDir))
         return _wikiIndex.get(projectDir);
     const index = new Map();
-    const MAX_DEPTH = 10;
+    const MAX_DEPTH = defaults_1.WIKI_MAX_DEPTH;
     function walk(dir, depth) {
         if (depth >= MAX_DEPTH)
             return;

package/dist/lib/parsers/languages/typescript.js

@@ -2,11 +2,12 @@
 Object.defineProperty(exports, "__esModule", { value: true });
 exports.registerTypescript = registerTypescript;
 const registry_1 = require("./registry");
+const defaults_1 = require("../../../lib/defaults");
 /** Get the previous named sibling that is a JSDoc comment. */
 function getDocComment(node) {
-    let prev = node.previousSibling;
+    let prev = node.previousNamedSibling;
     while (prev && prev.type === 'comment' && !prev.text.startsWith('/**')) {
-        prev = prev.previousSibling;
+        prev = prev.previousNamedSibling;
     }
     if (prev && prev.type === 'comment' && prev.text.startsWith('/**')) {
         return prev.text.trim();
@@ -14,28 +15,45 @@ function getDocComment(node) {
     return '';
 }
 /** Collapse whitespace and truncate. */
-function truncate(text, maxLen = 300) {
+function truncate(text, maxLen = defaults_1.SIGNATURE_MAX_LEN) {
     const collapsed = text.replace(/\s+/g, ' ').trim();
     return collapsed.length > maxLen ? collapsed.slice(0, maxLen) + '…' : collapsed;
 }
+/**
+ * Slice outerNode.text up to where bodyNode begins, using line-based
+ * slicing to avoid tree-sitter byte-offset vs JS char-offset mismatch
+ * (startIndex is UTF-8 bytes, String.slice uses UTF-16 code units).
+ */
+function sliceBeforeBody(outerNode, bodyNode) {
+    const text = outerNode.text ?? '';
+    const outerStartRow = outerNode.startPosition.row;
+    const bodyStartRow = bodyNode.startPosition.row;
+    if (bodyStartRow > outerStartRow) {
+        const lines = text.split('\n');
+        const relativeRow = bodyStartRow - outerStartRow;
+        const beforeBody = lines.slice(0, relativeRow);
+        const bodyLine = lines[relativeRow] ?? '';
+        const braceIdx = bodyLine.indexOf('{');
+        if (braceIdx >= 0)
+            beforeBody.push(bodyLine.slice(0, braceIdx));
+        return beforeBody.join('\n');
+    }
+    const braceIdx = text.indexOf('{');
+    if (braceIdx > 0)
+        return text.slice(0, braceIdx);
+    return null;
+}
 /**
  * Build signature by taking everything before the body node.
- * For code (ASCII-dominated), byte offset ≈ char offset.
  * Falls back to first line if no body found.
  */
 function buildSignature(outerNode, innerNode) {
     const bodyNode = innerNode.childForFieldName('body');
     const text = outerNode.text ?? '';
-    if (!bodyNode) {
-        // No body (type alias, ambient declaration, etc.) — use full text
+    if (!bodyNode)
         return truncate(text);
-    }
-    // Slice text from outer start up to body start
-    const headerBytes = bodyNode.startIndex - outerNode.startIndex;
-    if (headerBytes > 0) {
-        return truncate(text.slice(0, headerBytes));
-    }
-    return truncate(text.split('\n')[0]);
+    const header = sliceBeforeBody(outerNode, bodyNode);
+    return truncate(header ?? text.split('\n')[0]);
 }
 /**
  * Build signature for variable declarations.
@@ -46,10 +64,9 @@ function buildVariableSignature(outerNode, declarator) {
     if (value) {
         const valueBody = value.childForFieldName('body');
         if (valueBody) {
-            const fullText = outerNode.text ?? '';
-            const bodyOffset = valueBody.startIndex - outerNode.startIndex;
-            if (bodyOffset > 0)
-                return truncate(fullText.slice(0, bodyOffset));
+            const header = sliceBeforeBody(outerNode, valueBody);
+            if (header)
+                return truncate(header);
         }
     }
     return truncate(outerNode.text ?? '');

package/dist/lib/project-manager.js

@@ -13,11 +13,14 @@ const file_index_1 = require("../graphs/file-index");
 const task_1 = require("../graphs/task");
 const skill_1 = require("../graphs/skill");
 const indexer_1 = require("../cli/indexer");
+const code_2 = require("../lib/parsers/code");
+const docs_2 = require("../lib/parsers/docs");
 const promise_queue_1 = require("../lib/promise-queue");
 const multi_config_1 = require("../lib/multi-config");
 const mirror_watcher_1 = require("../lib/mirror-watcher");
 const team_1 = require("../lib/team");
 const path_1 = __importDefault(require("path"));
+const defaults_1 = require("../lib/defaults");
 // ---------------------------------------------------------------------------
 // ProjectManager
 // ---------------------------------------------------------------------------
@@ -264,6 +267,9 @@ class ProjectManager extends events_1.EventEmitter {
         const instance = this.projects.get(id);
         if (!instance)
             throw new Error(`Project "${id}" not found`);
+        // Clear parser caches to prevent cross-project leaks in multi-project mode
+        (0, code_2.clearPathMappingsCache)();
+        (0, docs_2.clearWikiIndexCache)();
         const gc = instance.config.graphConfigs;
         const indexer = (0, indexer_1.createProjectIndexer)(instance.docGraph, instance.codeGraph, {
             projectId: id,
@@ -358,7 +364,7 @@ class ProjectManager extends events_1.EventEmitter {
     /**
      * Start auto-save interval (every intervalMs, save dirty projects).
      */
-    startAutoSave(intervalMs = 30_000) {
+    startAutoSave(intervalMs = defaults_1.AUTO_SAVE_INTERVAL_MS) {
         this.autoSaveInterval = setInterval(() => {
             for (const instance of this.projects.values()) {
                 if (instance.dirty) {