@jefuriiij/synthra 0.1.21 → 0.1.23

package/CHANGELOG.md

@@ -7,6 +7,87 @@ For older versions, see [GitHub Releases](https://github.com/jefuriiij/synthra/r
 
 ---
 
+## [0.1.23] — 2026-06-06
+
+### Added
+
+- **Dashboard token-log dedupe can now be disabled via `SYN_DASHBOARD_DEDUPE=0`.**
+  By default, `delta.ts` deduplicates `token_log.jsonl` entries that share the
+  same project, usage totals, and second-rounded timestamp — collapsing the
+  duplicate writes that a co-installed AI tool's Stop hook may produce. Set
+  `SYN_DASHBOARD_DEDUPE=0` (also accepts `off` or `false`) to see every raw
+  entry. Useful when debugging multi-tool coexistence or auditing raw log data.
+
+- **Graph schema-migration check on load.** A new `SCHEMA_VERSION` constant is
+  exported from `src/graph/types.ts` and stamped into `info_graph.json` by
+  `buildGraph`. On server start, `http.ts` compares the stored graph's
+  `schema_version` to the current constant; if they differ it triggers an
+  automatic one-time rescan instead of serving an incompatible graph. No
+  behavior change today — all graphs are v1 and schema_version matches — but
+  this is the forward-safety mechanism for future schema bumps so existing
+  graphs are never silently misread.
+
+### Fixed
+
+- **JS/TS parser now captures member-assigned functions** (`exports.handler = fn`,
+  `module.exports.route = () => {}`, `this.x = () => {}`). Previously these
+  CommonJS/member-export patterns were invisible to the query, so modules that
+  exclusively use this style extracted zero symbols and degraded to whole-file
+  reads via `graph_read`. A member-assignment capture has been added to both
+  `JS_QUERY` and `TS_QUERY` in `src/scanner/parsers/typescript.ts`. Note: a
+  pure-wiring `server.js` whose only structure is anonymous inline-callback
+  arguments (e.g. `io.use(...)` / `socket.on(event, fn)`) is genuinely
+  symbol-less — that is correct, and the gate's symbol-hit guard already
+  prevents blocking such files.
+
+### Changed
+
+- **Policy block v4 → v5.** Adds a "large file — pull the symbol, don't
+  chunk" nudge to address recurring dogfood friction: on large files Claude
+  was reading successive line-range chunks instead of fetching the specific
+  symbol via `graph_read("file::symbol")`. The v5 block now explicitly
+  instructs: when a file is large, use `graph_read("file/path.ts::SymbolName")`
+  to pull the symbol directly rather than reading successive line-range chunks.
+  `POLICY_VERSION` bumped `4 → 5`; existing v4 blocks auto-upgrade on the
+  next `syn .` run.
+
+---
+
+## [0.1.22] — 2026-06-06
+
+### Fixed
+
+- **`graph_read` now resolves shortened file paths (path-suffix fallback).** Previously
+  `graph_read` performed an exact `path === target` match only. Passing a shortened path
+  like `appsettings.json` returned "file not found" even when
+  `connectwarev2/.../appsettings.json` was indexed. A new `resolveFileTarget` helper (now
+  exported) tries an exact match first; on a miss it looks for a unique path-suffix match
+  and serves that file; if multiple files share the suffix it reports them as ambiguous with
+  candidate paths rather than guessing. Symbol lookups use the resolved path. No API or
+  protocol change. Roadmap item #11.
+
+- **Gate content-keyword relaxation now intersects file contents, not just file paths.**
+  The Moat's recent-activity relaxation previously matched query tokens against the paths of
+  recently-touched files only. A query like `Grep "login"` would not relax on a recent save
+  of `auth.ts` unless the word "login" appeared in the path. Now the relaxation also checks
+  the recently-touched file's graph-node keywords (its indexed content), so a recent save
+  relaxes a Grep whenever the file *contains* the queried term — not just when the path
+  matches it. Completes roadmap item #3.
+
+### Changed
+
+- **Dashboard Projects card shows a first-run hint in the empty state.** When no projects
+  have run `syn .` yet, the Projects card now displays "No projects yet — run `syn .` in a
+  project to start" instead of a blank card. The Recent-turns card already carried this
+  hint; Projects now matches it. Roadmap item #10.
+
+- **`bin` path normalization (chore).** Ran `npm pkg fix` to normalize `bin` entries from
+  `./bin/syn` to `bin/syn`. Silences the cosmetic publish warnings
+  (`"bin[syn]" script name was cleaned`). `syn` and `synthra` still resolve to the same
+  entry point. Roadmap item #4.
+
+---
+
 ## [0.1.21] — 2026-06-06
 
 ### Added

package/dist/cli/index.js

@@ -18,15 +18,15 @@ var init_package = __esm({
   "package.json"() {
     package_default = {
       name: "@jefuriiij/synthra",
-      version: "0.1.21",
+      version: "0.1.23",
       publishConfig: {
         access: "public"
       },
       description: "Local context engine for AI coding assistants \u2014 graph-based context, branch-aware memory, real-time human-activity awareness, deterministic Grep/Glob gating, and a live token dashboard.",
       type: "module",
       bin: {
-        syn: "./bin/syn",
-        synthra: "./bin/syn"
+        syn: "bin/syn",
+        synthra: "bin/syn"
       },
       scripts: {
         build: "tsup",
@@ -297,13 +297,18 @@ function summarize(p) {
     models
   };
 }
+function dedupeEnabled() {
+  const v = process.env.SYN_DASHBOARD_DEDUPE;
+  return v !== "0" && v !== "off" && v !== "false";
+}
 async function loadProjectFiles(path, name, lastSeen) {
   const paths = resolvePaths(path);
   const [rawTokens, gates] = await Promise.all([
     readJsonl(paths.tokenLog),
     readJsonl(paths.gateLog)
   ]);
-  return { path, name, last_seen: lastSeen, tokens: dedupeTokens(rawTokens), gates };
+  const tokens = dedupeEnabled() ? dedupeTokens(rawTokens) : rawTokens;
+  return { path, name, last_seen: lastSeen, tokens, gates };
 }
 function dedupeTokens(entries) {
   const score2 = (model) => {
@@ -1075,7 +1080,7 @@ var public_default = `<!doctype html>
       const el = $('#proj-chart');
       el.innerHTML = '';
       if (!projects.length) {
-        el.innerHTML = '<div class="empty">No projects yet.</div>';
+        el.innerHTML = '<div class="empty">No projects yet \u2014 run <code>syn .</code> in a project to start.</div>';
         return;
       }
       const ranked = [...projects].sort((a, b) => (b.total_turns || 0) - (a.total_turns || 0));
@@ -1401,33 +1406,33 @@ exit 0
 var pre_tool_use_default = '# PreToolUse hook \u2014 Windows PowerShell.\n# THE MOAT (improvement #1). Reads the tool call from stdin (JSON), POSTs it\n# to /gate, and if the server says "block" emits a JSON deny-decision to\n# stdout. Claude Code reads stdout JSON to enforce the decision.\n# Always exits 0; failure-to-reach-server leaves Claude untouched.\n\n$ErrorActionPreference = "SilentlyContinue"\n\n$raw = [Console]::In.ReadToEnd()\nif (-not $raw) { exit 0 }\n\ntry {\n    $hookInput = $raw | ConvertFrom-Json -ErrorAction Stop\n} catch {\n    exit 0\n}\n\n$portFile = Join-Path $PWD ".synthra-graph\\mcp_port"\nif (-not (Test-Path $portFile)) { exit 0 }\n$port = (Get-Content -Path $portFile -Raw).Trim()\nif (-not $port) { exit 0 }\n\n$payload = @{\n    tool_name  = $hookInput.tool_name\n    tool_input = $hookInput.tool_input\n} | ConvertTo-Json -Depth 10 -Compress\n\ntry {\n    $resp = Invoke-RestMethod -Uri "http://127.0.0.1:$port/gate" -Method POST `\n        -Body $payload -ContentType "application/json" -TimeoutSec 3\n} catch {\n    exit 0\n}\n\nif ($resp.decision -eq "block") {\n    $denyJson = @{\n        hookSpecificOutput = @{\n            hookEventName            = "PreToolUse"\n            permissionDecision       = "deny"\n            permissionDecisionReason = $resp.reason\n        }\n    } | ConvertTo-Json -Depth 5 -Compress\n    Write-Output $denyJson\n}\nexit 0\n';
 
 // src/hooks/scripts/pre-tool-use.sh
-var pre_tool_use_default2 = `#!/usr/bin/env bash
-# PreToolUse hook \u2014 bash. POSTs the tool call to /gate; if server returns
-# "block", emits the deny-decision JSON to stdout for Claude Code to enforce.
-# Always exits 0; server failures leave Claude untouched.
-
-set +e
-
-PORT_FILE="$PWD/.synthra-graph/mcp_port"
-if [ ! -f "$PORT_FILE" ]; then exit 0; fi
-PORT=$(cat "$PORT_FILE" 2>/dev/null | tr -d '[:space:]')
-if [ -z "$PORT" ]; then exit 0; fi
-
-INPUT=$(cat 2>/dev/null)
-if [ -z "$INPUT" ]; then exit 0; fi
-
-RESP=$(curl -sS --max-time 3 -X POST -H "Content-Type: application/json" \\
-  --data "$INPUT" "http://127.0.0.1:$PORT/gate" 2>/dev/null)
-
-case "$RESP" in
-  *'"decision":"block"'*)
-    REASON=$(printf '%s' "$RESP" | sed -n 's/.*"reason"[[:space:]]*:[[:space:]]*"\\(.*\\)".*/\\1/p')
-    cat <<EOF
-{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"\${REASON}"}}
-EOF
-    ;;
-esac
-exit 0
+var pre_tool_use_default2 = `#!/usr/bin/env bash\r
+# PreToolUse hook \u2014 bash. POSTs the tool call to /gate; if server returns\r
+# "block", emits the deny-decision JSON to stdout for Claude Code to enforce.\r
+# Always exits 0; server failures leave Claude untouched.\r
+\r
+set +e\r
+\r
+PORT_FILE="$PWD/.synthra-graph/mcp_port"\r
+if [ ! -f "$PORT_FILE" ]; then exit 0; fi\r
+PORT=$(cat "$PORT_FILE" 2>/dev/null | tr -d '[:space:]')\r
+if [ -z "$PORT" ]; then exit 0; fi\r
+\r
+INPUT=$(cat 2>/dev/null)\r
+if [ -z "$INPUT" ]; then exit 0; fi\r
+\r
+RESP=$(curl -sS --max-time 3 -X POST -H "Content-Type: application/json" \\\r
+  --data "$INPUT" "http://127.0.0.1:$PORT/gate" 2>/dev/null)\r
+\r
+case "$RESP" in\r
+  *'"decision":"block"'*)\r
+    REASON=$(printf '%s' "$RESP" | sed -n 's/.*"reason"[[:space:]]*:[[:space:]]*"\\(.*\\)".*/\\1/p')\r
+    cat <<EOF\r
+{"hookSpecificOutput":{"hookEventName":"PreToolUse","permissionDecision":"deny","permissionDecisionReason":"\${REASON}"}}\r
+EOF\r
+    ;;\r
+esac\r
+exit 0\r
 `;
 
 // src/hooks/scripts/prime.ps1
@@ -1958,6 +1963,9 @@ import { resolve } from "path";
 // src/scanner/extract.ts
 import { dirname as dirname4, join as join6, posix } from "path";
 
+// src/graph/types.ts
+var SCHEMA_VERSION2 = 1;
+
 // src/scanner/hash.ts
 import { createHash } from "crypto";
 function fileHash(content) {
@@ -2294,7 +2302,7 @@ async function buildGraph(root, parsed) {
     nodes,
     edges,
     generated_at: (/* @__PURE__ */ new Date()).toISOString(),
-    schema_version: 1
+    schema_version: SCHEMA_VERSION2
   };
 }
 function buildSymbolIndex(graph) {
@@ -2828,6 +2836,7 @@ var TS_QUERY = `
 (enum_declaration name: (identifier) @enum.name) @enum
 (method_definition name: (property_identifier) @method.name) @method
 (lexical_declaration (variable_declarator name: (identifier) @const-fn.name value: [(arrow_function) (function_expression)])) @const-fn
+(assignment_expression left: (member_expression property: (property_identifier) @member-fn.name) right: [(arrow_function) (function_expression)]) @member-fn
 (import_statement source: (string) @import)
 `;
 var JS_QUERY = `
@@ -2835,6 +2844,7 @@ var JS_QUERY = `
 (class_declaration name: (identifier) @class.name) @class
 (method_definition name: (property_identifier) @method.name) @method
 (lexical_declaration (variable_declarator name: (identifier) @const-fn.name value: [(arrow_function) (function_expression)])) @const-fn
+(assignment_expression left: (member_expression property: (property_identifier) @member-fn.name) right: [(arrow_function) (function_expression)]) @member-fn
 (import_statement source: (string) @import)
 (call_expression function: (identifier) @_require_fn arguments: (arguments . (string) @require_source))
 `;
@@ -2859,7 +2869,7 @@ function shapeFromCaptures(captures) {
     const name = captures.get(`${k}.name`);
     return decl && name ? { decl, name, kind: sk } : null;
   };
-  return findDecl("function", "function") ?? findDecl("class", "class") ?? findDecl("interface", "interface") ?? findDecl("type", "type") ?? findDecl("enum", "enum") ?? findDecl("method", "method") ?? findDecl("const-fn", "function");
+  return findDecl("function", "function") ?? findDecl("class", "class") ?? findDecl("interface", "interface") ?? findDecl("type", "type") ?? findDecl("enum", "enum") ?? findDecl("method", "method") ?? findDecl("const-fn", "function") ?? findDecl("member-fn", "function");
 }
 async function parseTypeScript(f, source) {
   const grammar = grammarFor(f.ext);
@@ -3267,7 +3277,7 @@ import { basename as basename4 } from "path";
 // src/hooks/claude-md.ts
 import { readFile as readFile9, writeFile as writeFile4 } from "fs/promises";
 import { basename as basename3, dirname as dirname6 } from "path";
-var POLICY_VERSION = 4;
+var POLICY_VERSION = 5;
 var POLICY_BEGIN = `<!-- synthra-policy v${POLICY_VERSION} BEGIN -->`;
 var POLICY_END = `<!-- synthra-policy v${POLICY_VERSION} END -->`;
 var ANY_BLOCK_RE = /<!--\s*synthra-policy\s+v\d+\s+BEGIN\s*-->[\s\S]*?<!--\s*synthra-policy\s+v\d+\s+END\s*-->\s*/g;
@@ -3335,6 +3345,10 @@ function policyBlock() {
     "  reads should be rare \u2014 only when you genuinely need the full file.",
     "- If `graph_continue`'s `Files` list contains a `::` entry, pass it",
     "  verbatim to `graph_read`.",
+    "- **Large file?** Don't read it in successive line-range chunks \u2014 call",
+    '  `graph_continue` or `graph_read("file::symbol")` to pull the one symbol',
+    "  you need. Chunked whole-file Reads are exactly the cost `graph_read`",
+    "  exists to avoid.",
     "",
     "### Editing a file",
     "",
@@ -3892,7 +3906,7 @@ async function writeContextMd(path, ctx) {
 // src/memory/context-store.ts
 import { mkdir as mkdir7, readFile as readFile13, writeFile as writeFile7 } from "fs/promises";
 import { dirname as dirname8 } from "path";
-var SCHEMA_VERSION2 = 1;
+var SCHEMA_VERSION3 = 1;
 async function readEntries(path) {
   try {
     const raw = await readFile13(path, "utf8");
@@ -3904,7 +3918,7 @@ async function readEntries(path) {
 }
 async function writeEntries(path, entries) {
   await mkdir7(dirname8(path), { recursive: true });
-  const store = { schema_version: SCHEMA_VERSION2, entries };
+  const store = { schema_version: SCHEMA_VERSION3, entries };
   await writeFile7(path, JSON.stringify(store, null, 2) + "\n", "utf8");
 }
 async function appendEntry(path, entry) {
@@ -4438,15 +4452,33 @@ Reason: ${retrieval.reason}
   return textContent(`${header}
 ${packed.text}`);
 }
+function resolveFileTarget(graph, filePath) {
+  const files = graph.nodes.filter((n) => n.kind === "file");
+  const exact = files.find((n) => n.path === filePath);
+  if (exact) return { node: exact };
+  const suffix = "/" + filePath;
+  const matches = files.filter((n) => n.path.endsWith(suffix));
+  if (matches.length === 1) return { node: matches[0] };
+  if (matches.length > 1) return { ambiguous: matches.map((n) => n.path) };
+  return { none: true };
+}
 function graphRead(args, ctx) {
   const target = typeof args?.target === "string" ? args.target : "";
   if (!target) return errorContent("graph_read: 'target' (string) is required");
   const [rawFile, symbolName] = target.includes("::") ? target.split("::", 2) : [target, void 0];
   const filePath = (rawFile ?? "").trim();
-  const fileNode = ctx.graph.nodes.find(
-    (n) => n.kind === "file" && n.path === filePath
-  );
-  if (!fileNode) return errorContent(`graph_read: file not found in graph: ${filePath}`);
+  const resolved = resolveFileTarget(ctx.graph, filePath);
+  if ("ambiguous" in resolved) {
+    const shown = resolved.ambiguous.slice(0, 5).join(", ");
+    const more = resolved.ambiguous.length > 5 ? ", \u2026" : "";
+    return errorContent(
+      `graph_read: '${filePath}' matches multiple files (${shown}${more}). Pass a longer path.`
+    );
+  }
+  if ("none" in resolved) {
+    return errorContent(`graph_read: file not found in graph: ${filePath}`);
+  }
+  const fileNode = resolved.node;
   if (!symbolName) {
     return textContent(`# ${fileNode.path}
 
@@ -4454,10 +4486,10 @@ ${fileNode.content}`);
   }
   const cleanSym = symbolName.trim();
   const symbol = ctx.graph.nodes.find(
-    (n) => n.kind === "symbol" && n.file === filePath && n.name === cleanSym
+    (n) => n.kind === "symbol" && n.file === fileNode.path && n.name === cleanSym
   );
   if (!symbol) {
-    return errorContent(`graph_read: symbol '${cleanSym}' not found in ${filePath}`);
+    return errorContent(`graph_read: symbol '${cleanSym}' not found in ${fileNode.path}`);
   }
   const lines = fileNode.content.split(/\r?\n/);
   const body = lines.slice(symbol.start_line - 1, symbol.end_line).join("\n");
@@ -4623,16 +4655,32 @@ function looksLikeNonSymbolQuery(pattern) {
   }
   return false;
 }
-function recentlyTouchedMatchesQuery(recentPaths, queryTokens) {
+function recentlyTouchedMatchesQuery(recentPaths, queryTokens, graph) {
+  if (recentPaths.length === 0) return [];
+  const recent = new Set(recentPaths);
+  const keywordsByPath = /* @__PURE__ */ new Map();
+  for (const n of graph.nodes) {
+    if (n.kind === "file" && recent.has(n.path)) keywordsByPath.set(n.path, n.keywords);
+  }
   const matches = [];
   for (const path of recentPaths) {
     const lower = path.toLowerCase();
+    let matched = false;
     for (const t of queryTokens) {
       if (lower.includes(t)) {
-        matches.push(path);
+        matched = true;
         break;
       }
     }
+    if (!matched) {
+      for (const kw of keywordsByPath.get(path) ?? []) {
+        if (queryTokens.has(kw)) {
+          matched = true;
+          break;
+        }
+      }
+    }
+    if (matched) matches.push(path);
   }
   return matches;
 }
@@ -4683,7 +4731,7 @@ async function handleGate(req, ctx) {
   }
   const qTokens = new Set(tokenizeQuery(query));
   const recentPaths = ctx.activity.recentFilePaths(RECENT_ACTIVITY_WINDOW_MS);
-  const overlap = recentlyTouchedMatchesQuery(recentPaths, qTokens);
+  const overlap = recentlyTouchedMatchesQuery(recentPaths, qTokens, ctx.graph);
   if (overlap.length > 0) {
     const res2 = {
       decision: "allow",
@@ -4770,10 +4818,20 @@ ${fileCount} files indexed, ${symbolCount} symbols. Prefer the graph_* MCP tools
 // src/server/http.ts
 async function loadContext(paths) {
   try {
-    const [graph, symbolIndex] = await Promise.all([
+    let [graph, symbolIndex] = await Promise.all([
       readGraph(paths.infoGraph),
       readSymbolIndex(paths.symbolIndex)
     ]);
+    if (graph.schema_version !== SCHEMA_VERSION2) {
+      log.info(
+        `graph schema v${graph.schema_version} \u2260 current v${SCHEMA_VERSION2} \u2014 rescanning\u2026`
+      );
+      await scanProject(paths.projectRoot, { silent: true });
+      [graph, symbolIndex] = await Promise.all([
+        readGraph(paths.infoGraph),
+        readSymbolIndex(paths.symbolIndex)
+      ]);
+    }
     const activity = new ActivityStore(paths.activityLog);
     return { paths, graph, symbolIndex, activity };
   } catch (err2) {