@sdsrs/code-graph 0.45.1 → 0.45.2

package/claude-plugin/.claude-plugin/plugin.json

@@ -4,7 +4,7 @@
   "author": {
     "name": "sdsrs"
   },
-  "version": "0.45.1",
+  "version": "0.45.2",
   "keywords": [
     "code-graph",
     "ast",

package/claude-plugin/scripts/auto-update.js

@@ -197,6 +197,20 @@ function cachedBinaryNeedsUpdate(latest, { binaryPath = cachedBinaryPath(), read
   return readVersion(binaryPath) !== latest.version;
 }
 
+/**
+ * Throttle-bypass predicate: is a *present* cached binary stale relative to the
+ * last known latest release (`state.latestVersion`, set on the previous fetch —
+ * no network here)? Used so a present-but-stale binary skips the time-based
+ * throttle instead of staying pinned for up to a full check interval. Returns
+ * false when there is no prior latestVersion (first run fetches anyway) or the
+ * binary is missing (handled by the separate `binaryMissing` bypass).
+ */
+function cachedBinaryStaleVsState(state, { binaryPath = cachedBinaryPath(), readVersion = readBinaryVersion } = {}) {
+  if (!state || !state.latestVersion) return false;
+  if (!fs.existsSync(binaryPath)) return false;
+  return readVersion(binaryPath) !== state.latestVersion;
+}
+
 /**
  * Download just the platform binary from a GitHub release into the cache.
  * Used in two paths:
@@ -365,11 +379,14 @@ async function checkForUpdate({ installMissing = false } = {}) {
     // bypasses auto-update.js, so re-sync state.installedVersion every call.
     const installedVersion = readManifest().version || '0.0.0';
 
-    // Time-based throttle. A missing cache binary is a hard failure (launcher
-    // cannot start) so it overrides the throttle — without this bypass the
-    // session wedges for up to 6h waiting for the next check window.
+    // Time-based throttle. Two conditions override it: a missing cache binary
+    // (launcher cannot start) and a present-but-stale binary (otherwise it stays
+    // pinned to the old version for up to a full check interval — the binary
+    // self-heal would never run inside the throttle window). Both bypass to the
+    // fetch + self-heal path below.
     const binaryMissing = !fs.existsSync(cachedBinaryPath());
-    if (!binaryMissing && !shouldCheck(state)) {
+    const binaryStale = cachedBinaryStaleVsState(state);
+    if (!binaryMissing && !binaryStale && !shouldCheck(state)) {
       if (state.installedVersion !== installedVersion) {
         saveState({ ...state, installedVersion });
       }
@@ -446,7 +463,7 @@ module.exports = {
   getExtractedPluginVersion, readBinaryVersion, promoteVerifiedBinary,
   isSilentMode, isInstallMissingMode,
   requestJson, parseLatestRelease, fetchLatestRelease,
-  downloadBinary, cachedBinaryPath, cachedBinaryNeedsUpdate,
+  downloadBinary, cachedBinaryPath, cachedBinaryNeedsUpdate, cachedBinaryStaleVsState,
 };
 
 // CLI: node auto-update.js [check|status] [--silent] [--install-missing]

package/claude-plugin/scripts/auto-update.test.js

@@ -14,6 +14,7 @@ const {
   promoteVerifiedBinary,
   cachedBinaryPath,
   cachedBinaryNeedsUpdate,
+  cachedBinaryStaleVsState,
   downloadBinary,
   isInstallMissingMode,
   isSilentMode,
@@ -116,6 +117,32 @@ test('cachedBinaryNeedsUpdate is version-aware, not existence-only', (t) => {
   assert.equal(cachedBinaryNeedsUpdate(null, { binaryPath }), false);
 });
 
+test('cachedBinaryStaleVsState bypasses throttle only for a present-but-stale binary', (t) => {
+  const dir = mkDir(t, 'code-graph-throttle-');
+  const binaryPath = path.join(dir, 'code-graph-mcp');
+  fs.writeFileSync(binaryPath, 'x'); // present
+
+  // no prior latestVersion → don't bypass (first run fetches anyway)
+  assert.equal(cachedBinaryStaleVsState({}, { binaryPath }), false);
+  assert.equal(cachedBinaryStaleVsState(null, { binaryPath }), false);
+
+  // present + stale vs last known latest → bypass throttle (the 6h-gap fix)
+  assert.equal(
+    cachedBinaryStaleVsState({ latestVersion: '0.45.1' }, { binaryPath, readVersion: () => '0.16.6' }),
+    true,
+  );
+
+  // present + current → stay throttled
+  assert.equal(
+    cachedBinaryStaleVsState({ latestVersion: '0.45.1' }, { binaryPath, readVersion: () => '0.45.1' }),
+    false,
+  );
+
+  // missing binary → false here (the separate binaryMissing bypass handles it)
+  fs.rmSync(binaryPath);
+  assert.equal(cachedBinaryStaleVsState({ latestVersion: '0.45.1' }, { binaryPath }), false);
+});
+
 test('parseLatestRelease selects the matching platform asset', () => {
   const latest = parseLatestRelease({
     tag_name: 'v1.2.3',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdsrs/code-graph",
-  "version": "0.45.1",
+  "version": "0.45.2",
   "description": "MCP server that indexes codebases into an AST knowledge graph with semantic search, call graph traversal, and HTTP route tracing",
   "license": "MIT",
   "repository": {
@@ -35,10 +35,10 @@
     "node": ">=16"
   },
   "optionalDependencies": {
-    "@sdsrs/code-graph-linux-x64": "0.45.1",
-    "@sdsrs/code-graph-linux-arm64": "0.45.1",
-    "@sdsrs/code-graph-darwin-x64": "0.45.1",
-    "@sdsrs/code-graph-darwin-arm64": "0.45.1",
-    "@sdsrs/code-graph-win32-x64": "0.45.1"
+    "@sdsrs/code-graph-linux-x64": "0.45.2",
+    "@sdsrs/code-graph-linux-arm64": "0.45.2",
+    "@sdsrs/code-graph-darwin-x64": "0.45.2",
+    "@sdsrs/code-graph-darwin-arm64": "0.45.2",
+    "@sdsrs/code-graph-win32-x64": "0.45.2"
   }
 }