@optave/codegraph 3.12.0 → 3.13.0

package/src/domain/graph/builder/helpers.ts

@@ -48,6 +48,13 @@ export const BUILTIN_RECEIVERS: Set<string> = new Set([
   'require',
 ]);
 
+/** Phase 8.6: confidence penalty applied to CHA-dispatch edges. */
+export const CHA_DISPATCH_PENALTY = 0.1;
+/** Phase 8.6: fixed confidence for typed-receiver (interface/CHA) dispatch edges.
+ *  File proximity is not meaningful for virtual dispatch — all three engine paths
+ *  (WASM inline, WASM post-pass, native post-pass) must agree on this value. */
+export const CHA_TYPED_DISPATCH_CONFIDENCE = 0.8;
+
 /** Check if a directory entry should be skipped (ignored dirs, dotfiles). */
 function shouldSkipEntry(entry: fs.Dirent, extraIgnore: Set<string> | null): boolean {
   if (entry.name.startsWith('.') && entry.name !== '.') {
@@ -361,6 +368,9 @@ export function batchInsertEdges(db: BetterSqlite3Database, rows: unknown[][]):
   }
 }
 
+/** Confidence assigned to CHA-expanded interface/abstract dispatch edges. */
+export const CHA_DISPATCH_CONFIDENCE = 0.8;
+
 /**
  * CHA (Class Hierarchy Analysis) post-pass.
  *
@@ -454,13 +464,15 @@ export function runChaPostPass(db: BetterSqlite3Database): number {
 
   const callToMethods = db
     .prepare(
-      `SELECT e.source_id, tgt.name AS method_name
+      `SELECT e.source_id, src.name AS caller_name, tgt.name AS method_name
        FROM edges e
        JOIN nodes tgt ON e.target_id = tgt.id
+       JOIN nodes src ON e.source_id = src.id
        WHERE e.kind = 'calls' AND tgt.kind = 'method'
-       AND INSTR(tgt.name, '.') > 0`,
+       AND INSTR(tgt.name, '.') > 0
+       AND (e.technique IS NULL OR e.technique != 'cha-expanded')`,
     )
-    .all() as Array<{ source_id: number; method_name: string }>;
+    .all() as Array<{ source_id: number; caller_name: string; method_name: string }>;
 
   const seen = new Set<string>();
   // Scope deduplication to only the source_ids we are about to expand, avoiding
@@ -511,10 +523,18 @@ export function runChaPostPass(db: BetterSqlite3Database): number {
           const qualifiedName = `${cls}.${methodSuffix}`;
           const methodNodes = findMethodStmt.all(qualifiedName) as Array<{ id: number }>;
           for (const methodNode of methodNodes) {
+            if (methodNode.id === source_id) continue; // skip self-loops
             const key = `${source_id}|${methodNode.id}`;
             if (seen.has(key)) continue;
             seen.add(key);
-            newEdges.push([source_id, methodNode.id, 'calls', 0.8, 0, 'cha']);
+            newEdges.push([
+              source_id,
+              methodNode.id,
+              'calls',
+              CHA_TYPED_DISPATCH_CONFIDENCE,
+              0,
+              'cha-expanded',
+            ]);
           }
         }
 

package/src/domain/graph/builder/incremental.ts

@@ -620,6 +620,7 @@ function buildCallEdges(
         relPath,
         typeMap,
         seenCallEdges,
+        importedNames,
       );
       if (recv) {
         stmts.insertEdge.run(recv.callerId, recv.receiverId, 'receiver', recv.confidence, 0);

package/src/domain/graph/builder/pipeline.ts

@@ -15,7 +15,14 @@ import {
   MIGRATIONS,
   openDb,
 } from '../../../db/index.js';
-import { detectWorkspaces, loadConfig } from '../../../infrastructure/config.js';
+import {
+  computeConfigHash,
+  detectWorkspaces,
+  getLastAppliedGlobalConfig,
+  getLastAppliedGlobalPath,
+  loadConfig,
+  promptForConsentIfNeeded,
+} from '../../../infrastructure/config.js';
 import { debug, info, warn } from '../../../infrastructure/logger.js';
 import { loadNative } from '../../../infrastructure/native.js';
 import { toErrorMessage } from '../../../shared/errors.js';
@@ -114,6 +121,16 @@ function checkEngineSchemaMismatch(ctx: PipelineContext): void {
     );
     ctx.forceFullRebuild = true;
   }
+
+  // Config hash — promotes to full rebuild when build-relevant config changes
+  // (include/exclude/ignoreDirs/extensions/aliases/build.*).
+  // This closes the pre-existing config-change gap and covers the new global-config layer.
+  const currentConfigHash = computeConfigHash(ctx.config);
+  const prevConfigHash = meta('config_hash');
+  if (prevConfigHash && prevConfigHash !== currentConfigHash) {
+    info('Build-relevant config changed, promoting to full rebuild.');
+    ctx.forceFullRebuild = true;
+  }
 }
 
 function warnOnEmbeddingsWipe(ctx: PipelineContext): void {
@@ -172,7 +189,7 @@ function setupPipeline(ctx: PipelineContext): void {
   ctx.db = openDb(ctx.dbPath);
   initSchema(ctx.db);
 
-  ctx.config = loadConfig(ctx.rootDir);
+  ctx.config = loadConfig(ctx.rootDir, { userConfig: ctx.opts.userConfig });
   // Merge caller-supplied excludes on top of the file-config excludes so
   // programmatic callers (e.g. benchmark scripts) can extend exclusion
   // without mutating .codegraphrc.json. Native orchestrator picks this up
@@ -186,6 +203,30 @@ function setupPipeline(ctx: PipelineContext): void {
   ctx.incremental =
     ctx.opts.incremental !== false && ctx.config.build && ctx.config.build.incremental !== false;
 
+  // ── Build-time global-config notice ──────────────────────────────
+  // Use the already-parsed and sanitized global config cached by loadConfig —
+  // avoids a second disk read and the TOCTOU window between loadConfig and here.
+  const appliedGlobalPath = getLastAppliedGlobalPath();
+  if (appliedGlobalPath) {
+    const buildAffectingKeys = [
+      'include',
+      'exclude',
+      'ignoreDirs',
+      'extensions',
+      'aliases',
+      'build',
+    ];
+    const globalData = getLastAppliedGlobalConfig();
+    if (globalData) {
+      const injectedKeys = buildAffectingKeys.filter((k) => k in globalData);
+      if (injectedKeys.length > 0) {
+        process.stderr.write(
+          `ℹ global config applied (${appliedGlobalPath}) — injecting: ${injectedKeys.join(', ')} · --no-user-config to ignore\n`,
+        );
+      }
+    }
+  }
+
   initializeEngine(ctx);
   checkEngineSchemaMismatch(ctx);
   warnOnEmbeddingsWipe(ctx);
@@ -348,6 +389,12 @@ export async function buildGraph(
   ctx.rootDir = rootDir;
 
   try {
+    // Interactive consent prompt — only fires when the caller opts in (build
+    // command with TTY), a global file exists, and the repo is undecided.
+    if (opts.promptForConsent) {
+      await promptForConsentIfNeeded(rootDir);
+    }
+
     setupPipeline(ctx);
 
     // ── JS-side fast-skip for native incremental (#1054) ──────────────