@sdsrs/code-graph 0.116.0 → 0.118.0

package/claude-plugin/templates/code-graph-snapshot.yml

@@ -22,15 +22,20 @@ jobs:
     permissions:
       contents: write
     steps:
-      - uses: actions/checkout@v4
+      # SHA-pinned, not `@v4`: a floating major tag is mutable, so anyone who can
+      # move it runs their code in a job that holds `contents: write` on your
+      # repo. These are the same commits code-graph-mcp's own workflows pin.
+      # Update by copying a new SHA from the action's release page, not by
+      # switching back to a tag.
+      - uses: actions/checkout@d23441a48e516b6c34aea4fa41551a30e30af803 # v6
         with:
           fetch-depth: 0
-      - uses: actions/setup-node@v4
+      - uses: actions/setup-node@249970729cb0ef3589644e2896645e5dc5ba9c38 # v6
         with:
           node-version: '20'
       - name: Build snapshot
         run: |
-          npx -y -p @sdsrs/code-graph@0.116.0 code-graph-mcp snapshot create --out snapshot.db
+          npx -y -p @sdsrs/code-graph@0.118.0 code-graph-mcp snapshot create --out snapshot.db
           zstd -9 snapshot.db -o snapshot.db.zst
           mv snapshot.db.zst "code-graph-snapshot-${GITHUB_SHA:0:7}.db.zst"
       - name: Upload to release

package/claude-plugin/templates/plugin_code_graph_mcp.md

@@ -35,8 +35,12 @@ type: reference
 > - `module_overview include_deps=true` / `include_dead=true`
 > - `get_call_graph route_path="GET /api/x"`
 >
-> 旧名（`impact_analysis` 等）仍作为向后兼容 dispatcher 别名可调（raw JSON-RPC /
-> SDK 脚本场景），但 Claude Code 内强烈建议用上面的新 flag 形式。CLI 子命令
+> `impact_analysis` **已删除**——dispatcher 里没有这个 arm，按名调用返回
+> `Unknown tool`。改用 `get_ast_node include_impact=true`，或 CLI `impact`。
+> 其余旧名（`read_snippet` / `dependency_graph` / `find_similar_code` /
+> `find_dead_code` / `trace_http_chain` + alias `find_http_route`）仍是向后兼容
+> dispatcher 别名（raw JSON-RPC / SDK 脚本场景），但 Claude Code 内一律用上面的
+> 新 flag 形式。CLI 子命令
 > （`code-graph-mcp impact|similar|deps|dead-code|trace`）保持不变，给 Bash 工作流。
 
 ## 何时调用 MCP/CLI（替代多步 Grep/Read）
@@ -73,10 +77,14 @@ type: reference
 ### 旧名兼容 + CLI 速查（v0.18.4 fold 后）
 
 v0.18.4 把原"进阶 5"折叠进核心 7 的 flag。**Claude Code 内**首选上表的新 flag 形式。
-旧名（`impact_analysis` / `find_similar_code` / `dependency_graph` / `find_dead_code` /
-`trace_http_chain` + alias `find_http_route`）作为 dispatcher 向后兼容**仍可调用**
-（raw JSON-RPC / MCP SDK / 既有脚本不破），但 Claude Code 的 ToolSearch 仍然不为
-hidden 5 加载 schema —— 实操中走新 flag。CLI 子命令保持原样：
+
+可按名调用的只有这 7 个：`project_map` / `semantic_code_search` / `get_call_graph` /
+`get_ast_node` / `module_overview` / `ast_search` / `find_references`。
+`impact_analysis` **不在其列，已从 dispatcher 删除**——按名调用返回 `Unknown tool`。
+隐藏旧名 `read_snippet` / `dependency_graph` / `find_similar_code` / `find_dead_code` /
+`trace_http_chain`（+ alias `find_http_route`）仍有 dispatcher arm，raw JSON-RPC / MCP
+SDK / 既有脚本不破；但它们不在 `tools/list`，Claude Code 的 ToolSearch 不为其加载
+schema —— 实操中一律走新 flag。CLI 子命令保持原样：
 
 | 意图 | CLI（Bash 工作流） | 等价 MCP 新形式 |
 |------|--------------------|------------------|
@@ -121,7 +129,7 @@ code-graph-mcp overview src/mcp/         # 模块总览
 code-graph-mcp callgraph SYMBOL          # 调用图
 code-graph-mcp impact SYMBOL             # 影响面（--change-type ∈ signature|behavior|remove，默认 behavior）
 code-graph-mcp show SYMBOL                # 节点详情
-code-graph-mcp refs SYMBOL --relation calls  # --relation ∈ calls|imports|inherits|implements|references|all
+code-graph-mcp refs SYMBOL --relation calls  # --relation ∈ calls|imports|inherits|implements|references|exports|routes_to|all
 code-graph-mcp refs SYMBOL --min-confidence extracted  # ∈ extracted|inferred|ambiguous；extracted=只看精确边（callgraph/impact/trace 同款）
 code-graph-mcp centrality                 # 架构咽喉（betweenness 桥节点；补 map 的 caller_count）
 code-graph-mcp cycles                     # 循环导入依赖（文件级 import 环 / SCC）

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdsrs/code-graph",
-  "version": "0.116.0",
+  "version": "0.118.0",
   "description": "MCP server that indexes codebases into an AST knowledge graph with semantic search, call graph traversal, and HTTP route tracing",
   "license": "MIT",
   "repository": {
@@ -29,16 +29,16 @@
   ],
   "scripts": {
     "build": "cargo build --release --no-default-features && node scripts/copy-binary.js",
-    "prepare": "git rev-parse --git-dir > /dev/null 2>&1 && git config core.hooksPath scripts/githooks || true"
+    "prepare": "node scripts/setup-git-hooks.js"
   },
   "engines": {
     "node": ">=16"
   },
   "optionalDependencies": {
-    "@sdsrs/code-graph-linux-x64": "0.116.0",
-    "@sdsrs/code-graph-linux-arm64": "0.116.0",
-    "@sdsrs/code-graph-darwin-x64": "0.116.0",
-    "@sdsrs/code-graph-darwin-arm64": "0.116.0",
-    "@sdsrs/code-graph-win32-x64": "0.116.0"
+    "@sdsrs/code-graph-linux-x64": "0.118.0",
+    "@sdsrs/code-graph-linux-arm64": "0.118.0",
+    "@sdsrs/code-graph-darwin-x64": "0.118.0",
+    "@sdsrs/code-graph-darwin-arm64": "0.118.0",
+    "@sdsrs/code-graph-win32-x64": "0.118.0"
   }
 }