@sdsrs/code-graph 0.101.0 → 0.103.0

package/claude-plugin/scripts/version-utils.js

@@ -3,12 +3,20 @@ const { execFileSync } = require('child_process');
 const fs = require('fs');
 const path = require('path');
 
-const VERSION_OUTPUT_RE = /^code-graph-mcp\s+(\d+\.\d+\.\d+)$/;
+// Tolerant match: the version line anywhere in the output (m flag), optional
+// "v" prefix, and anything after the numeric triple (build-metadata suffixes
+// like "1.2.3 (abc123)" or "-dev"). The old fully-anchored /^...$/ turned ANY
+// deviation into null, which upstream reads as "broken binary" → judged
+// permanently stale → re-download every session, with the fresh download
+// rejected by the same parse: a self-sustaining loop.
+const VERSION_OUTPUT_RE = /^code-graph-mcp\s+v?(\d+\.\d+\.\d+)/m;
 
 function readBinaryVersion(binaryPath) {
   try {
     const out = execFileSync(binaryPath, ['--version'], {
-      timeout: 2000,
+      // 5s: a cold exec of a freshly-written ~40MB binary (page-in, Windows AV
+      // scan) regularly exceeded the old 2s, misclassifying a good binary.
+      timeout: 5000,
       stdio: ['pipe', 'pipe', 'pipe'],
     }).toString().trim();
     const match = out.match(VERSION_OUTPUT_RE);
@@ -18,6 +26,37 @@ function readBinaryVersion(binaryPath) {
   }
 }
 
+/**
+ * Compare semver-ish version strings; returns -1, 0, or 1. Numeric triple
+ * compared ordinally (missing/non-numeric parts → 0); a pre-release suffix
+ * sorts BELOW its release ("1.2.3-rc1" < "1.2.3"), two pre-releases compare
+ * as plain strings. Single canonical implementation — auto-update.js and
+ * find-binary.js each carried a divergent copy whose pre-release semantics
+ * disagreed (Number("4-rc1")→NaN→0 vs parseInt("3-rc1")→3), a silent
+ * mis-ordering trap if release tags ever adopt "-rc" suffixes.
+ */
+function compareVersions(a, b) {
+  const parse = (v) => {
+    const s = String(v);
+    const dash = s.indexOf('-');
+    const core = dash === -1 ? s : s.slice(0, dash);
+    return {
+      nums: core.split('.').map((x) => parseInt(x, 10)),
+      pre: dash === -1 ? null : s.slice(dash + 1),
+    };
+  };
+  const pa = parse(a), pb = parse(b);
+  for (let i = 0; i < 3; i++) {
+    const x = Number.isFinite(pa.nums[i]) ? pa.nums[i] : 0;
+    const y = Number.isFinite(pb.nums[i]) ? pb.nums[i] : 0;
+    if (x !== y) return x < y ? -1 : 1;
+  }
+  if (pa.pre && !pb.pre) return -1;
+  if (!pa.pre && pb.pre) return 1;
+  if (pa.pre && pb.pre && pa.pre !== pb.pre) return pa.pre < pb.pre ? -1 : 1;
+  return 0;
+}
+
 function isDevMode(pluginRoot = path.resolve(__dirname, '..')) {
   // Explicit opt-in always wins (also lets users force dev mode in any layout)
   if (process.env.CODE_GRAPH_DEV === '1') return true;
@@ -55,4 +94,4 @@ function getNewestMtime(dir, ext = '.rs') {
   return newest;
 }
 
-module.exports = { readBinaryVersion, isDevMode, getNewestMtime, VERSION_OUTPUT_RE };
+module.exports = { readBinaryVersion, compareVersions, isDevMode, getNewestMtime, VERSION_OUTPUT_RE };

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdsrs/code-graph",
-  "version": "0.101.0",
+  "version": "0.103.0",
   "description": "MCP server that indexes codebases into an AST knowledge graph with semantic search, call graph traversal, and HTTP route tracing",
   "license": "MIT",
   "repository": {
@@ -36,10 +36,10 @@
     "node": ">=16"
   },
   "optionalDependencies": {
-    "@sdsrs/code-graph-linux-x64": "0.101.0",
-    "@sdsrs/code-graph-linux-arm64": "0.101.0",
-    "@sdsrs/code-graph-darwin-x64": "0.101.0",
-    "@sdsrs/code-graph-darwin-arm64": "0.101.0",
-    "@sdsrs/code-graph-win32-x64": "0.101.0"
+    "@sdsrs/code-graph-linux-x64": "0.103.0",
+    "@sdsrs/code-graph-linux-arm64": "0.103.0",
+    "@sdsrs/code-graph-darwin-x64": "0.103.0",
+    "@sdsrs/code-graph-darwin-arm64": "0.103.0",
+    "@sdsrs/code-graph-win32-x64": "0.103.0"
   }
 }