@sdsrs/code-graph 0.7.10 → 0.7.12

package/claude-plugin/.claude-plugin/plugin.json

@@ -4,7 +4,7 @@
   "author": {
     "name": "sdsrs"
   },
-  "version": "0.7.10",
+  "version": "0.7.12",
   "keywords": [
     "code-graph",
     "ast",

package/claude-plugin/hooks/hooks.json

@@ -2,48 +2,15 @@
   "hooks": {
     "PreToolUse": [
       {
-        "matcher": "tool == \"Grep\"",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/pre-search-guide.js\"",
-            "timeout": 2
-          }
-        ],
-        "description": "Suggest code-graph alternatives on first Grep call"
-      },
-      {
-        "matcher": "tool == \"Glob\"",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/pre-glob-guide.js\"",
-            "timeout": 2
-          }
-        ],
-        "description": "Suggest code-graph alternatives on first Glob call"
-      },
-      {
-        "matcher": "tool == \"Agent\"",
-        "hooks": [
-          {
-            "type": "command",
-            "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/pre-explore-guide.js\"",
-            "timeout": 2
-          }
-        ],
-        "description": "Suggest code-graph tools before spawning Explore agents"
-      },
-      {
-        "matcher": "tool == \"Edit\" || tool == \"Write\"",
+        "matcher": "tool == \"Edit\"",
         "hooks": [
           {
             "type": "command",
             "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/pre-edit-guide.js\"",
-            "timeout": 2
+            "timeout": 4
           }
         ],
-        "description": "Remind about impact_analysis before first code modification"
+        "description": "Auto-inject impact analysis when editing function definitions with 2+ callers"
       }
     ],
     "PostToolUse": [
@@ -66,10 +33,10 @@
           {
             "type": "command",
             "command": "node \"${CLAUDE_PLUGIN_ROOT}/scripts/user-prompt-context.js\"",
-            "timeout": 4
+            "timeout": 5
           }
         ],
-        "description": "Inject relevant code-graph context based on user's question"
+        "description": "Inject code-graph structural context (impact, overview, callgraph) based on user intent"
       }
     ],
     "SessionStart": [

package/claude-plugin/scripts/pre-edit-guide.js

@@ -1,21 +1,105 @@
 #!/usr/bin/env node
 'use strict';
-// PreToolUse hook: On FIRST Edit/Write call per session window, remind Claude
-// to check impact analysis before modifying functions. Fast and non-blocking.
+// PreToolUse(Edit) hook: auto-inject impact analysis when editing function definitions.
+// Only fires when:
+//   1. The old_string contains a function/method definition (signature being modified)
+//   2. The symbol has 2+ production callers (high impact)
+//   3. Same symbol not queried in last 2 minutes
+// Silently exits otherwise — zero noise for normal edits.
+const { execFileSync } = require('child_process');
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
 
-const flag = path.join(os.tmpdir(), '.code-graph-edit-guided');
-const WINDOW_MS = 2 * 60 * 60 * 1000; // 2 hours
+const cwd = process.cwd();
+const dbPath = path.join(cwd, '.code-graph', 'index.db');
+if (!fs.existsSync(dbPath)) process.exit(0);
 
+// --- Parse tool input ---
+let input;
 try {
-  const stat = fs.statSync(flag);
-  if (Date.now() - stat.mtimeMs < WINDOW_MS) process.exit(0);
-} catch { /* first time */ }
-
-fs.writeFileSync(flag, '');
-process.stdout.write(
-  '[code-graph] Before modifying functions, consider checking blast radius:\n' +
-  '  code-graph-mcp impact <function_name>\n'
-);
+  input = JSON.parse(fs.readFileSync('/dev/stdin', 'utf8'));
+} catch { process.exit(0); }
+
+const oldStr = (input.tool_input && input.tool_input.old_string) || '';
+if (!oldStr || oldStr.length < 10) process.exit(0);
+
+// --- Extract function/method signature from the edited text ---
+// Match function definitions across languages: Rust, JS/TS, Python, Go, Java/C#/Kotlin, Ruby, PHP
+const fnPatterns = [
+  /(?:pub\s+)?(?:async\s+)?fn\s+(\w+)/,                        // Rust
+  /(?:export\s+)?(?:async\s+)?function\s+(\w+)/,                // JS/TS
+  /(?:const|let|var)\s+(\w+)\s*=\s*(?:async\s+)?(?:\([^)]*\)|_)\s*=>/, // JS arrow
+  /(?:async\s+)?(\w+)\s*\([^)]*\)\s*\{/,                       // JS method / Go func
+  /def\s+(\w+)/,                                                // Python/Ruby
+  /func\s+(\w+)/,                                               // Go/Swift
+  /(?:public|private|protected|static|override|virtual|abstract|internal)\s+\S+\s+(\w+)\s*\(/, // Java/C#/Kotlin
+  /(?:public\s+)?function\s+(\w+)/,                             // PHP
+];
+
+let symbol = null;
+for (const pat of fnPatterns) {
+  const m = oldStr.match(pat);
+  if (m) {
+    // Find the first captured group
+    symbol = m[1] || m[2];
+    break;
+  }
+}
+
+if (!symbol || symbol.length < 3) process.exit(0);
+
+// Skip common patterns that aren't real function names
+if (/^(if|for|while|switch|catch|else|return|new|get|set|try)$/i.test(symbol)) {
+  process.exit(0);
+}
+
+// --- Per-symbol cooldown: 2 minutes ---
+const cooldownFile = path.join(os.tmpdir(), `.cg-impact-${symbol}`);
+try {
+  if (Date.now() - fs.statSync(cooldownFile).mtimeMs < 120000) process.exit(0);
+} catch { /* first time for this symbol */ }
+
+// --- Run impact analysis (JSON mode for programmatic parsing) ---
+let jsonResult;
+try {
+  const raw = execFileSync('code-graph-mcp', ['impact', symbol, '--json'], {
+    cwd,
+    timeout: 2500,
+    encoding: 'utf8',
+    stdio: ['pipe', 'pipe', 'pipe'],
+  });
+  jsonResult = JSON.parse(raw);
+} catch {
+  // Symbol not found, timeout, or parse error — exit silently
+  process.exit(0);
+}
+
+// --- Only inject if high-impact (2+ production callers) ---
+const directCallers = jsonResult.direct_callers || 0;
+const totalCallers = jsonResult.total_callers || 0;
+const affectedFiles = jsonResult.affected_files || 0;
+const risk = jsonResult.risk || 'low';
+
+if (directCallers < 2) process.exit(0);
+
+// Mark cooldown
+try { fs.writeFileSync(cooldownFile, ''); } catch { /* ok */ }
+
+// --- Inject compact impact summary ---
+const routeCount = jsonResult.affected_routes || 0;
+const testCount = jsonResult.tests_affected || 0;
+
+let summary = `[code-graph:impact] ${symbol}() — Risk: ${risk}\n`;
+summary += `  ${directCallers} direct callers, ${totalCallers} total across ${affectedFiles} files`;
+if (routeCount > 0) summary += `, ${routeCount} routes affected`;
+if (testCount > 0) summary += ` (${testCount} tests)`;
+summary += '\n';
+
+// List direct callers compactly
+const callers = (jsonResult.callers || []).filter(c => c.depth === 1);
+if (callers.length > 0) {
+  summary += '  Callers: ' + callers.map(c => `${c.name} (${c.file})`).join(', ') + '\n';
+}
+
+process.stdout.write(summary);

package/claude-plugin/scripts/user-prompt-context.js

@@ -1,8 +1,8 @@
 #!/usr/bin/env node
 'use strict';
-// UserPromptSubmit hook: inject relevant code-graph context based on user's question.
-// Only activates when user message references code entities + has understanding intent.
-// This is a CODE INDEX, not a memory store — only inject structural code context.
+// UserPromptSubmit hook: inject relevant code-graph RESULTS based on user's intent.
+// Strategy: PUSH structural context (not suggestions) that Grep/Read cannot provide.
+// This is a CODE INDEX — only inject structural code context (impact, overview, callgraph).
 const { execFileSync } = require('child_process');
 const fs = require('fs');
 const path = require('path');
@@ -31,13 +31,27 @@ if (!fs.existsSync(MANIFEST_PATH)) {
   process.exit(0);
 }
 
-// --- Rate limiting ---
-const flag = path.join(os.tmpdir(), '.code-graph-prompt-ctx');
-const COOLDOWN_MS = 60 * 1000; // 1 minute between injections
-try {
-  const stat = fs.statSync(flag);
-  if (Date.now() - stat.mtimeMs < COOLDOWN_MS) process.exit(0);
-} catch { /* first time */ }
+// --- Per-type rate limiting (replaces single global cooldown) ---
+const COOLDOWNS = {
+  impact:    30 * 1000,     // 30s — impact context changes during rapid edits
+  overview:  5 * 60 * 1000, // 5min — module structure rarely changes mid-session
+  callgraph: 60 * 1000,     // 1min
+  search:    60 * 1000,     // 1min
+};
+
+function isCoolingDown(type) {
+  try {
+    const flag = path.join(os.tmpdir(), `.code-graph-ctx-${type}`);
+    const stat = fs.statSync(flag);
+    return Date.now() - stat.mtimeMs < (COOLDOWNS[type] || 60000);
+  } catch { return false; }
+}
+
+function markCooldown(type) {
+  try {
+    fs.writeFileSync(path.join(os.tmpdir(), `.code-graph-ctx-${type}`), '');
+  } catch { /* ok */ }
+}
 
 // --- Read user message ---
 let message;
@@ -87,51 +101,75 @@ const symbolCandidates = (message.match(/\b(?:[A-Z]\w*(?:::\w+)+|[a-z]\w*(?:_\w+
   .filter(s => !STOP_WORDS.has(s.toLowerCase()))
   .slice(0, 3);
 
+// Fallback: plain lowercase words (8+ chars) likely to be function/type names.
+// Only when strict patterns found nothing — avoids false positives from English prose.
+// Minimum 8 chars filters most common English words while keeping technical terms
+// (authenticate, serialize, initialize, dispatch, resolver, etc.)
+if (symbolCandidates.length === 0) {
+  const plain = (message.match(/\b[a-z][a-z]{7,}\b/g) || [])
+    .filter(s => !STOP_WORDS.has(s))
+    .filter(s => !/^(possible|together|actually|something|different|important|following|available|necessary|currently|implement|operation|otherwise|beginning|knowledge|attention|according|certainly|sometimes|direction|recommend|structure|describe|question|complete|generate|anything|continue|consider|response|approach|happened|recently|probably|expected|previous|original|specific|directly|received|required|supposed|separate|designed|finished|provided|included|prepared|combined|properly|remember|whatever|although|document|handling|existing|everyone|standard|research|personal|relative|absolute|practice|language|thousand|national|evidence)$/.test(s));
+  symbolCandidates.push(...plain.slice(0, 2));
+}
+
 // Detect intent keywords (EN + ZH, derived from user's actual prompt history)
 const intentImpact = /(?:impact|影响|修改前|改之前|blast radius|before (?:edit|chang|modif)|risk|风险|改动范围|波及|问题在|bug|干扰|冲突|卡)/i.test(message);
+const intentModify = /(?:改(?!变)|修改|重构|\brefactor\b|\bchange\b|\brename\b|移动|\bmove\b|删(?!除文件)|\bremove\b|替换|\breplace\b|\bupdate\b|升级|\bmigrate\b|迁移|拆分|\bsplit\b|合并|\bmerge\b|提取|\bextract\b|改成|改为|换成|转为|异步|同步)/i.test(message);
 const intentUnderstand = /(?:how does|怎么工作|怎么实现|怎么做|什么|理解|看看|看一下|了解|分析|explain|understand|架构|architecture|structure|overview|模块|概览|干什么|做什么|工作原理|逻辑|机制|流程|功能|结合度|效率|评估|调研|是什么|有什么|能用不|高效不|达标|起作用|科学|深入思考|源码)/i.test(message);
 const intentCallgraph = /(?:who calls|what calls|调用|call(?:graph|er|ee)|trace|链路|追踪|谁调|被谁调|调了谁|上下游|依赖关系|触发|路径|覆盖|介入)/i.test(message);
 const intentSearch = /(?:where is|在哪|find|search|搜索|找|locate|哪里用|哪里定义|定义在|实现在|处理没|在源码|加不加)/i.test(message);
 
 // Need entities AND intent, or strong entity signal (qualified names like Foo::bar)
 const hasQualifiedSymbol = symbolCandidates.some(s => s.includes('::'));
-const hasIntent = intentImpact || intentUnderstand || intentCallgraph || intentSearch;
+const hasIntent = intentImpact || intentModify || intentUnderstand || intentCallgraph || intentSearch;
 if (!hasIntent && !hasQualifiedSymbol && filePaths.length === 0) {
   process.exit(0);
 }
 
-// --- Run ONE targeted CLI query ---
+// --- Semantic output prefixes ---
+const PREFIXES = {
+  impact:    '[code-graph:impact] Blast radius — review before editing:',
+  overview:  '[code-graph:structure] Module structure:',
+  callgraph: '[code-graph:callgraph] Call relationships:',
+  search:    '[code-graph:search] Relevant code:',
+};
+
+// --- Run ONE targeted CLI query (per-type cooldown allows different types to fire) ---
+let queryType = null;
 let result = '';
 try {
-  if (intentImpact && symbolCandidates.length > 0) {
-    result = run(`code-graph-mcp impact "${symbolCandidates[0]}"`);
-  } else if (filePaths.length > 0 && intentUnderstand) {
-    // Overview of the mentioned file's directory
-    const dir = filePaths[0].replace(/\/[^/]+$/, '/');
-    result = run(`code-graph-mcp overview "${dir}"`);
-  } else if (intentCallgraph && symbolCandidates.length > 0) {
-    result = run(`code-graph-mcp callgraph "${symbolCandidates[0]}" --depth 2`);
-  } else if ((intentSearch || hasQualifiedSymbol) && symbolCandidates.length > 0) {
-    result = run(`code-graph-mcp search "${symbolCandidates[0]}" --limit 8`);
-  } else if (filePaths.length > 0) {
+  // Priority: impact/modify > callgraph > understand/overview > search
+  // intentModify + symbol → inject impact so Claude knows blast radius before editing
+  if ((intentImpact || intentModify) && symbolCandidates.length > 0 && !isCoolingDown('impact')) {
+    queryType = 'impact';
+    result = run('code-graph-mcp', ['impact', symbolCandidates[0]]);
+  } else if (intentCallgraph && symbolCandidates.length > 0 && !isCoolingDown('callgraph')) {
+    queryType = 'callgraph';
+    result = run('code-graph-mcp', ['callgraph', symbolCandidates[0], '--depth', '2']);
+  } else if (filePaths.length > 0 && (intentUnderstand || !hasIntent) && !isCoolingDown('overview')) {
+    queryType = 'overview';
     const dir = filePaths[0].replace(/\/[^/]+$/, '/');
-    result = run(`code-graph-mcp overview "${dir}"`);
+    result = run('code-graph-mcp', ['overview', dir]);
+  } else if ((intentSearch || hasQualifiedSymbol) && symbolCandidates.length > 0 && !isCoolingDown('search')) {
+    queryType = 'search';
+    result = run('code-graph-mcp', ['search', symbolCandidates[0], '--limit', '8']);
+  } else if (intentUnderstand && symbolCandidates.length > 0 && !isCoolingDown('search')) {
+    queryType = 'search';
+    result = run('code-graph-mcp', ['search', symbolCandidates[0], '--limit', '8']);
   }
 } catch {
   process.exit(0);
 }
 
-if (result && result.trim()) {
-  fs.writeFileSync(flag, ''); // update cooldown
-  process.stdout.write(result.trim() + '\n');
+if (result && result.trim() && queryType) {
+  markCooldown(queryType);
+  process.stdout.write(`${PREFIXES[queryType]}\n${result.trim()}\n`);
 }
 
 // --- Helpers ---
 
-function run(cmd) {
-  const parts = cmd.match(/(?:[^\s"]+|"[^"]*")+/g) || [];
-  const args = parts.slice(1).map(a => a.replace(/^"|"$/g, ''));
-  return execFileSync(parts[0], args, {
+function run(cmd, args) {
+  return execFileSync(cmd, args, {
     cwd,
     timeout: 3000,
     encoding: 'utf8',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdsrs/code-graph",
-  "version": "0.7.10",
+  "version": "0.7.12",
   "description": "MCP server that indexes codebases into an AST knowledge graph with semantic search, call graph traversal, and HTTP route tracing",
   "license": "MIT",
   "repository": {
@@ -33,10 +33,10 @@
     "node": ">=16"
   },
   "optionalDependencies": {
-    "@sdsrs/code-graph-linux-x64": "0.7.10",
-    "@sdsrs/code-graph-linux-arm64": "0.7.10",
-    "@sdsrs/code-graph-darwin-x64": "0.7.10",
-    "@sdsrs/code-graph-darwin-arm64": "0.7.10",
-    "@sdsrs/code-graph-win32-x64": "0.7.10"
+    "@sdsrs/code-graph-linux-x64": "0.7.12",
+    "@sdsrs/code-graph-linux-arm64": "0.7.12",
+    "@sdsrs/code-graph-darwin-x64": "0.7.12",
+    "@sdsrs/code-graph-darwin-arm64": "0.7.12",
+    "@sdsrs/code-graph-win32-x64": "0.7.12"
   }
 }

package/claude-plugin/scripts/pre-explore-guide.js

@@ -1,24 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-// PreToolUse hook: On FIRST Agent call per session window, suggest
-// code-graph CLI commands for structural code understanding before spawning agents.
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-
-const flag = path.join(os.tmpdir(), '.code-graph-explore-guided');
-const WINDOW_MS = 2 * 60 * 60 * 1000; // 2 hours
-
-try {
-  const stat = fs.statSync(flag);
-  if (Date.now() - stat.mtimeMs < WINDOW_MS) process.exit(0);
-} catch { /* first time */ }
-
-fs.writeFileSync(flag, '');
-process.stdout.write(
-  '[code-graph] For code structure understanding, try CLI first (one Bash call vs agent):\n' +
-  '  code-graph-mcp map                  \u2190 full architecture overview\n' +
-  '  code-graph-mcp overview src/module  \u2190 module structure and exports\n' +
-  '  code-graph-mcp callgraph symbol     \u2190 trace call chains\n' +
-  'Explore agents remain best for: non-code files, runtime behavior, open-ended investigation.\n'
-);

package/claude-plugin/scripts/pre-glob-guide.js

@@ -1,38 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-// PreToolUse hook: On FIRST Glob call per session window, suggest
-// code-graph CLI commands — but only when exploring project structure,
-// NOT finding specific files by name.
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-
-const flag = path.join(os.tmpdir(), '.code-graph-glob-guided');
-const WINDOW_MS = 2 * 60 * 60 * 1000; // 2 hours
-
-try {
-  const stat = fs.statSync(flag);
-  if (Date.now() - stat.mtimeMs < WINDOW_MS) process.exit(0);
-} catch { /* first time */ }
-
-// Parse tool input to detect intent — skip for specific file lookups
-try {
-  const input = JSON.parse(fs.readFileSync('/dev/stdin', 'utf8'));
-  const pattern = (input && input.tool_input && input.tool_input.pattern) || '';
-  // Skip suggestion for: specific file patterns (has extension), config files, specific names
-  if (/\.(json|yaml|yml|toml|md|txt|env|lock|config|rc)$/i.test(pattern)) {
-    process.exit(0);
-  }
-  // Skip for patterns with specific filenames (not just wildcards like **/*.ts)
-  if (!pattern.includes('*') && /[\w-]+\.\w{1,5}$/.test(pattern)) {
-    process.exit(0);
-  }
-} catch { /* stdin not available or parse error — show guide anyway */ }
-
-fs.writeFileSync(flag, '');
-process.stdout.write(
-  '[code-graph] If exploring project structure (not finding specific files):\n' +
-  '  code-graph-mcp map              \u2190 project architecture (modules, deps, entry points)\n' +
-  '  code-graph-mcp overview src/mcp \u2190 module symbols grouped by file and type\n' +
-  'Glob remains best for: finding specific files, configs, non-code assets.\n'
-);

package/claude-plugin/scripts/pre-search-guide.js

@@ -1,39 +0,0 @@
-#!/usr/bin/env node
-'use strict';
-// PreToolUse hook: On FIRST Grep call per session window, suggest
-// code-graph CLI commands — but only when the pattern looks like code understanding
-// (function names, module patterns), NOT exact string/constant searches.
-const fs = require('fs');
-const path = require('path');
-const os = require('os');
-
-const flag = path.join(os.tmpdir(), '.code-graph-search-guided');
-const WINDOW_MS = 2 * 60 * 60 * 1000; // 2 hours
-
-try {
-  const stat = fs.statSync(flag);
-  if (Date.now() - stat.mtimeMs < WINDOW_MS) process.exit(0);
-} catch { /* first time */ }
-
-// Parse tool input to detect intent — skip for literal/constant searches
-try {
-  const input = JSON.parse(fs.readFileSync('/dev/stdin', 'utf8'));
-  const pattern = (input && input.tool_input && input.tool_input.pattern) || '';
-  // Skip suggestion for: quoted strings, TODO/FIXME, constants, exact literals, error messages
-  if (/^["']|^(TODO|FIXME|HACK|WARN|ERROR|const )|^\w+[=:]/i.test(pattern)) {
-    process.exit(0);
-  }
-  // Skip for very short patterns (likely exact match)
-  if (pattern.length <= 3) {
-    process.exit(0);
-  }
-} catch { /* stdin not available or parse error — show guide anyway */ }
-
-fs.writeFileSync(flag, '');
-process.stdout.write(
-  '[code-graph] CLI commands for code understanding (via Bash):\n' +
-  '  code-graph-mcp grep "pattern"     \u2190 AST context grep (match + containing function/class)\n' +
-  '  code-graph-mcp search "concept"   \u2190 semantic search (find code by concept, not exact name)\n' +
-  '  code-graph-mcp callgraph symbol   \u2190 call chain tracing\n' +
-  'Grep remains best for: exact strings, constants, regex, non-code files.\n'
-);