@mrciphersmith/keryx 0.3.22 → 0.3.25

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@mrciphersmith/keryx",
-  "version": "0.3.22",
+  "version": "0.3.25",
   "description": "Version-controlled project context for AI coding agents: code graph, architecture wiki, project memory, relevant tests, quality signals, and task flows.",
   "private": false,
   "publishConfig": {
@@ -45,7 +45,7 @@
     "typecheck": "tsc --noEmit",
     "typecheck:scripts": "tsc --project tsconfig.scripts.json --noEmit",
     "test": "bun test",
-    "test:core": "bun test src/cli src/core src/shell-source-audits.test.ts src/acp/ src/assets/ src/bundle/ src/capability/ src/commands/ src/contracts/ src/ctx/ src/eval/ src/flow/ src/forgetting/ src/gdgraph/ src/gdskills/ src/governance/ src/health/ src/integrations/ src/job/ src/learning/ src/lib/ src/mcp/ src/memory/ src/metrics/ src/retention/ src/review/ src/rules/ src/sac/ src/security/ src/stack/ src/standard/ src/sync/ src/testing/ src/trigger/ src/wiki/",
+    "test:core": "bun test src/cli src/core src/impact-evidence/ src/shell-source-audits.test.ts src/acp/ src/assets/ src/bundle/ src/capability/ src/commands/ src/contracts/ src/ctx/ src/eval/ src/flow/ src/forgetting/ src/gdgraph/ src/gdskills/ src/governance/ src/health/ src/integrations/ src/job/ src/learning/ src/lib/ src/mcp/ src/memory/ src/metrics/ src/retention/ src/review/ src/rules/ src/sac/ src/security/ src/stack/ src/standard/ src/sync/ src/testing/ src/trigger/ src/wiki/ scripts/",
     "test:client:terminal": "bun test src/tui/ src/commands/shell",
     "test:client:streaming": "bun test src/harness/provider/",
     "test:client:cancel-resume": "bun test src/harness/run/ src/harness/resume/ src/harness/session/ src/session/ src/bus/ src/commands/sessions",

package/src/gdgraph/query.ts

@@ -72,7 +72,20 @@ export function getFilesDescribedBy(graph: GraphData, pageId: string): string[]
   return [...files].sort();
 }
 
-export function getOrphans(graph: GraphData): string[] {
+/**
+ * `roots` (A-8, flow 356): files reached OUT OF BAND — never by any `import`
+ * statement this graph's builder can see, so they carry no inbound OR
+ * outbound edge and would otherwise report as orphans. `src/lib/
+ * test-preload.ts` is the motivating case: `bunfig.toml`'s `[test].preload`
+ * loads it before any test module runs, which is a real caller this scan
+ * simply cannot see (it is not written as an `import`). Reporting it dead is
+ * a false positive, not a finding — `bunfigPreloadRoots` below is the one
+ * caller (`commands/gdgraph.ts`, `gdgraph/service.ts`) resolves and passes
+ * in; a caller that does not know about a project's `bunfig.toml` (e.g. this
+ * module's own unit tests, `forgetting/propagation.ts`) omits it and gets
+ * the previous, unfiltered behaviour.
+ */
+export function getOrphans(graph: GraphData, roots: ReadonlySet<string> = new Set()): string[] {
   const inbound = new Set(
     graph.edges.filter((edge) => edge.kind !== "unresolved").map((edge) => edge.to),
   );
@@ -81,10 +94,97 @@ export function getOrphans(graph: GraphData): string[] {
   );
   return graph.nodes
     .map((node) => node.path)
-    .filter((file) => !inbound.has(file) && !outbound.has(file))
+    .filter((file) => !inbound.has(file) && !outbound.has(file) && !roots.has(file))
     .sort();
 }
 
+/**
+ * `bunfig.toml`'s declared `preload` entries, resolved to graph-relative
+ * paths (forward-slash, relative to `projectRoot` — the same shape
+ * `GraphNode.path` uses) — the roots {@link getOrphans} excludes (A-8).
+ *
+ * Handles the two shapes Bun actually reads a `preload` array from: a
+ * top-level `preload = […]` (`bun run`/`bunx`) and a table-scoped one
+ * (`[test]\npreload = […]`, this repository's own `bunfig.toml`). Not a
+ * general TOML parser — narrow on purpose, one array key, matching this
+ * repository's own `mcp-servers/compat.ts` precedent of a small reader over
+ * a dependency for one config shape. An absent or unreadable `bunfig.toml`
+ * yields no roots rather than an error: most projects this graph runs
+ * against have none at all.
+ */
+/**
+ * Strip `#`-to-end-of-line comments from `text`, leaving string literals
+ * (single- or double-quoted, double-quoted honoring a `\"` escape) alone —
+ * a `#` inside a string is content, not a comment start. Review round 1,
+ * L3: without this, a commented-out `# preload = […]` line still matched
+ * {@link bunfigPreloadRoots}'s array pattern, since that pattern searched
+ * the raw text with no comment awareness.
+ */
+function stripTomlComments(text: string): string {
+  let result = "";
+  let quote: '"' | "'" | undefined;
+  for (let i = 0; i < text.length; i++) {
+    const ch = text[i];
+    if (quote !== undefined) {
+      result += ch;
+      if (ch === "\\" && quote === '"' && i + 1 < text.length) {
+        result += text[i + 1];
+        i++;
+        continue;
+      }
+      if (ch === quote) {
+        quote = undefined;
+      }
+      continue;
+    }
+    if (ch === '"' || ch === "'") {
+      quote = ch;
+      result += ch;
+      continue;
+    }
+    if (ch === "#") {
+      const newlineIndex = text.indexOf("\n", i);
+      if (newlineIndex === -1) {
+        break;
+      }
+      i = newlineIndex - 1;
+      continue;
+    }
+    result += ch;
+  }
+  return result;
+}
+
+export async function bunfigPreloadRoots(projectRoot: string): Promise<Set<string>> {
+  const roots = new Set<string>();
+  let text: string;
+  try {
+    text = await readFile(path.join(projectRoot, "bunfig.toml"), "utf8");
+  } catch {
+    return roots;
+  }
+  // Review round 1, L3: strip `#` comments (outside string literals) before
+  // matching, and anchor the key to a line start — a commented-out
+  // `# preload = […]` line must never contribute a root, and a key that
+  // merely ENDS in "preload" mid-line must never match either.
+  const stripped = stripTomlComments(text);
+  const arrayPattern = /^[ \t]*preload\s*=\s*\[([^\]]*)\]/gm;
+  const stringPattern = /"((?:[^"\\]|\\.)*)"|'([^']*)'/g;
+  for (const arrayMatch of stripped.matchAll(arrayPattern)) {
+    const body = arrayMatch[1] ?? "";
+    for (const stringMatch of body.matchAll(stringPattern)) {
+      const raw = stringMatch[1] ?? stringMatch[2] ?? "";
+      if (raw.length === 0) {
+        continue;
+      }
+      const absolute = path.resolve(projectRoot, raw);
+      const relative = path.relative(projectRoot, absolute).split(path.sep).join("/");
+      roots.add(relative);
+    }
+  }
+  return roots;
+}
+
 export function getAffected(
   graph: GraphData,
   target: string,

package/src/gdgraph/service.ts

@@ -8,7 +8,7 @@
 import { buildGraph } from "./build";
 import { computeAffected, type AffectedOptions, type AffectedResult } from "./affected";
 import { loadGdgraphConfig } from "./config";
-import { getCycles, getOrphans, loadGraph } from "./query";
+import { bunfigPreloadRoots, getCycles, getOrphans, loadGraph } from "./query";
 import { writeRepomap, type RepomapOptions, type RepomapResult } from "./repomap";
 import type { GraphData } from "./types";
 
@@ -90,7 +90,13 @@ export function createGdgraphService(): GdgraphService {
 
     async query(cwd, q) {
       const graph = await loadGraph(cwd);
-      return q === "cycles" ? getCycles(graph) : getOrphans(graph);
+      if (q === "cycles") {
+        return getCycles(graph);
+      }
+      // A-8 (flow 356): same roots as `commands/gdgraph.ts` — a `bunfig.toml`
+      // `preload` entry is a real caller this graph's scan cannot see.
+      const roots = await bunfigPreloadRoots(cwd);
+      return getOrphans(graph, roots);
     },
   };
 }