@sdsrs/code-graph 0.45.2 → 0.45.4

package/claude-plugin/.claude-plugin/plugin.json

@@ -4,7 +4,7 @@
   "author": {
     "name": "sdsrs"
   },
-  "version": "0.45.2",
+  "version": "0.45.4",
   "keywords": [
     "code-graph",
     "ast",

package/claude-plugin/scripts/auto-update.js

@@ -367,6 +367,19 @@ async function downloadAndInstall(latest) {
 
 // ── Main Entry ─────────────────────────────────────────────
 
+/**
+ * Self-heal the cached native binary when the plugin shell is already at latest
+ * but the binary lags (missing OR a different version). This is the orchestration
+ * glue that broke twice in the field (v0.45.1, v0.45.2): the decision predicate
+ * was correct, but nothing guaranteed checkForUpdate actually invoked the download
+ * on the shell-matches-latest path. Extracted + injectable so the wiring itself is
+ * regression-tested, not just the predicate. Returns true iff a download promoted.
+ */
+async function selfHealStaleBinary(latest, { needsUpdate = cachedBinaryNeedsUpdate, download = downloadBinary } = {}) {
+  if (!needsUpdate(latest)) return false;
+  return await download(latest);
+}
+
 async function checkForUpdate({ installMissing = false } = {}) {
   try {
     // Skip in dev mode — unless the launcher explicitly requested a missing-
@@ -431,14 +444,10 @@ async function checkForUpdate({ installMissing = false } = {}) {
     }
 
     // No plugin-shell update — but self-heal the native binary if it is missing
-    // OR stale. The shell version (manifest.version) can match latest while the
-    // cached binary lags (a previous download failed silently, the cache was
-    // wiped, an `npm install -g` optionalDependency dropped the platform package,
-    // or the marketplace bumped the shell without re-fetching the binary).
-    let selfHealedBinary = false;
-    if (cachedBinaryNeedsUpdate(latest)) {
-      selfHealedBinary = await downloadBinary(latest);
-    }
+    // OR stale (see selfHealStaleBinary). The shell version (manifest.version)
+    // can match latest while the cached binary lags — this is exactly the wild
+    // failure observed in the field (shell at v0.45, binary pinned at v0.16.6).
+    const selfHealedBinary = await selfHealStaleBinary(latest);
 
     saveState({
       ...state,
@@ -464,6 +473,7 @@ module.exports = {
   isSilentMode, isInstallMissingMode,
   requestJson, parseLatestRelease, fetchLatestRelease,
   downloadBinary, cachedBinaryPath, cachedBinaryNeedsUpdate, cachedBinaryStaleVsState,
+  selfHealStaleBinary,
 };
 
 // CLI: node auto-update.js [check|status] [--silent] [--install-missing]

package/claude-plugin/scripts/auto-update.test.js

@@ -16,6 +16,7 @@ const {
   cachedBinaryNeedsUpdate,
   cachedBinaryStaleVsState,
   downloadBinary,
+  selfHealStaleBinary,
   isInstallMissingMode,
   isSilentMode,
 } = require('./auto-update');
@@ -143,6 +144,35 @@ test('cachedBinaryStaleVsState bypasses throttle only for a present-but-stale bi
   assert.equal(cachedBinaryStaleVsState({ latestVersion: '0.45.1' }, { binaryPath }), false);
 });
 
+test('selfHealStaleBinary wires the stale-binary check to a download (the v0.45.x glue)', async () => {
+  const latest = { version: '0.45.2', binaryUrl: 'https://example/bin' };
+
+  // Field failure mode: shell already at latest, binary pinned stale → MUST download.
+  let downloaded = false;
+  const healed = await selfHealStaleBinary(latest, {
+    needsUpdate: () => true,
+    download: async () => { downloaded = true; return true; },
+  });
+  assert.equal(downloaded, true, 'stale binary must trigger a download');
+  assert.equal(healed, true);
+
+  // Binary current → no download, no-op.
+  let touched = false;
+  const noop = await selfHealStaleBinary(latest, {
+    needsUpdate: () => false,
+    download: async () => { touched = true; return true; },
+  });
+  assert.equal(touched, false, 'current binary must not download');
+  assert.equal(noop, false);
+
+  // Download fails (no curl / network) → returns false so the next session retries.
+  const failed = await selfHealStaleBinary(latest, {
+    needsUpdate: () => true,
+    download: async () => false,
+  });
+  assert.equal(failed, false);
+});
+
 test('parseLatestRelease selects the matching platform asset', () => {
   const latest = parseLatestRelease({
     tag_name: 'v1.2.3',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdsrs/code-graph",
-  "version": "0.45.2",
+  "version": "0.45.4",
   "description": "MCP server that indexes codebases into an AST knowledge graph with semantic search, call graph traversal, and HTTP route tracing",
   "license": "MIT",
   "repository": {
@@ -35,10 +35,10 @@
     "node": ">=16"
   },
   "optionalDependencies": {
-    "@sdsrs/code-graph-linux-x64": "0.45.2",
-    "@sdsrs/code-graph-linux-arm64": "0.45.2",
-    "@sdsrs/code-graph-darwin-x64": "0.45.2",
-    "@sdsrs/code-graph-darwin-arm64": "0.45.2",
-    "@sdsrs/code-graph-win32-x64": "0.45.2"
+    "@sdsrs/code-graph-linux-x64": "0.45.4",
+    "@sdsrs/code-graph-linux-arm64": "0.45.4",
+    "@sdsrs/code-graph-darwin-x64": "0.45.4",
+    "@sdsrs/code-graph-darwin-arm64": "0.45.4",
+    "@sdsrs/code-graph-win32-x64": "0.45.4"
   }
 }