@sdsrs/code-graph 0.7.3 → 0.7.5

package/README.md

@@ -234,6 +234,31 @@ npm uninstall -g @sdsrs/code-graph
 | `find_references` | Find all references to a symbol (callers, importers, inheritors). Supports `compact` mode |
 | `find_dead_code` | Find unused code — orphan symbols and exported-but-unused public APIs |
 
+## CLI Commands
+
+All tools are also available as CLI subcommands for shell scripts, hooks, and terminal workflows:
+
+| Command | MCP Equivalent | Description |
+|---------|---------------|-------------|
+| `search <query>` | `semantic_code_search` | FTS5 search by concept |
+| `ast-search [query]` | `ast_search` | Structural search with `--type`/`--returns`/`--params` filters |
+| `callgraph <symbol>` | `get_call_graph` | Show call graph (callers/callees) |
+| `impact <symbol>` | `impact_analysis` | Impact analysis (callers, routes, risk level) |
+| `show <symbol>` | `get_ast_node` | Show symbol details (code, type, signature) |
+| `map` | `project_map` | Project architecture map |
+| `overview <path>` | `module_overview` | Module symbols grouped by file and type |
+| `deps <file>` | `dependency_graph` | File-level dependency graph |
+| `trace <route>` | `trace_http_chain` | Trace HTTP route → handler → downstream calls |
+| `similar <symbol>` | `find_similar_code` | Find semantically similar code (requires embeddings) |
+| `refs <symbol>` | `find_references` | Find all references to a symbol |
+| `dead-code [path]` | `find_dead_code` | Find unused code (orphans and exported-unused) |
+| `grep <pattern>` | — | AST-context grep (ripgrep + containing function/class) |
+| `incremental-index` | — | Run incremental index update (auto-creates DB if needed) |
+| `health-check` | `get_index_status` | Query index status and freshness |
+| `benchmark` | — | Benchmark index speed, query latency, token savings |
+
+Common options: `--json` (JSON output), `--compact` (compact output), `--limit N`, `--depth N`, `--file <path>`.
+
 ## Plugin Slash Commands
 
 Available when installed as a Claude Code plugin:

package/claude-plugin/.claude-plugin/plugin.json

@@ -4,7 +4,7 @@
   "author": {
     "name": "sdsrs"
   },
-  "version": "0.7.3",
+  "version": "0.7.5",
   "keywords": [
     "code-graph",
     "ast",

package/claude-plugin/scripts/lifecycle.js

@@ -364,15 +364,53 @@ function update() {
   manifest.updatedAt = new Date().toISOString();
   writeManifest(manifest);
 
+  // 6. Clean up old cached versions (keep latest 3)
+  cleanupOldCacheVersions(3);
+
   return { oldVersion, version, settingsChanged };
 }
 
+/**
+ * Remove old plugin cache versions, keeping the N most recent.
+ * Cache layout: ~/.claude/plugins/cache/<marketplace>/<plugin>/<version>/
+ */
+function cleanupOldCacheVersions(keep = 3) {
+  const cacheParent = path.join(os.homedir(), '.claude', 'plugins', 'cache', MARKETPLACE_NAME);
+  try {
+    // List all subdirectories under the marketplace cache
+    const entries = fs.readdirSync(cacheParent, { withFileTypes: true });
+    for (const entry of entries) {
+      if (!entry.isDirectory()) continue;
+      const pluginDir = path.join(cacheParent, entry.name);
+      try {
+        const versions = fs.readdirSync(pluginDir, { withFileTypes: true })
+          .filter(d => d.isDirectory())
+          .map(d => ({
+            name: d.name,
+            path: path.join(pluginDir, d.name),
+            mtime: fs.statSync(path.join(pluginDir, d.name)).mtimeMs,
+          }))
+          .sort((a, b) => b.mtime - a.mtime); // newest first
+
+        if (versions.length <= keep) continue;
+
+        const toRemove = versions.slice(keep);
+        for (const v of toRemove) {
+          try {
+            fs.rmSync(v.path, { recursive: true, force: true });
+          } catch { /* permission error or in-use — skip */ }
+        }
+      } catch { /* can't read plugin dir — skip */ }
+    }
+  } catch { /* cache dir doesn't exist — nothing to clean */ }
+}
+
 module.exports = {
   install, uninstall, update, checkScopeConflict,
   isPluginExplicitlyDisabled, isPluginInactive, cleanupDisabledStatusline,
   readManifest, readJson, writeJsonAtomic,
   readRegistry, writeRegistry,
-  getPluginVersion,
+  getPluginVersion, cleanupOldCacheVersions,
   PLUGIN_ID, OLD_PLUGIN_IDS, MARKETPLACE_NAME, CACHE_DIR, REGISTRY_FILE,
 };
 

package/claude-plugin/scripts/mcp-launcher.js

@@ -37,19 +37,7 @@ if (!binary) {
       process.stderr.write(`[code-graph] Installed at ${binary}\n`);
     }
   } catch {
-    process.stderr.write('[code-graph] npm install failed. Trying direct download...\n');
-  }
-
-  // Fallback: direct binary download from GitHub release
-  if (!binary) {
-    try {
-      const { downloadBinarySync } = require('./auto-update');
-      if (typeof downloadBinarySync === 'function') {
-        downloadBinarySync(version);
-        clearCache();
-        binary = findBinary();
-      }
-    } catch { /* not available */ }
+    process.stderr.write('[code-graph] npm install failed.\n');
   }
 }
 

package/claude-plugin/scripts/session-init.js

@@ -47,6 +47,41 @@ function syncLifecycleConfig() {
   return 'noop';
 }
 
+/**
+ * Check if the index is stale by comparing git HEAD timestamp vs index.db mtime.
+ * If stale, spawn background incremental-index to refresh.
+ * Returns 'fresh' | 'refreshing' | 'skipped'.
+ */
+function ensureIndexFresh() {
+  const { findBinary } = require('./find-binary');
+  const bin = findBinary();
+  if (!bin) return 'skipped';
+
+  const cwd = process.cwd();
+  const dbPath = path.join(cwd, '.code-graph', 'index.db');
+  if (!fs.existsSync(dbPath)) return 'skipped';
+
+  try {
+    const dbMtime = fs.statSync(dbPath).mtimeMs;
+    // Compare with git HEAD commit timestamp
+    const gitTs = parseInt(
+      execSync('git log -1 --format=%ct', { cwd, timeout: 2000, encoding: 'utf8', stdio: ['pipe', 'pipe', 'pipe'] }).trim()
+    ) * 1000;
+    if (gitTs <= dbMtime) return 'fresh';
+
+    // Index is stale — run incremental-index in background
+    const child = spawn(bin, ['incremental-index', '--quiet'], {
+      cwd,
+      detached: true,
+      stdio: 'ignore',
+    });
+    if (child && typeof child.unref === 'function') child.unref();
+    return 'refreshing';
+  } catch {
+    return 'skipped';
+  }
+}
+
 function runSessionInit() {
   if (isPluginInactive()) {
     cleanupDisabledStatusline();
@@ -63,8 +98,9 @@ function runSessionInit() {
 
   const lifecycle = syncLifecycleConfig();
   const autoUpdateLaunched = launchBackgroundAutoUpdate();
+  const indexFreshness = ensureIndexFresh();
   const mapInjected = injectProjectMap();
-  return { inactive: false, lifecycle, autoUpdateLaunched, mapInjected };
+  return { inactive: false, lifecycle, autoUpdateLaunched, indexFreshness, mapInjected };
 }
 
 /**
@@ -99,6 +135,7 @@ function injectProjectMap() {
 module.exports = {
   launchBackgroundAutoUpdate,
   syncLifecycleConfig,
+  ensureIndexFresh,
   injectProjectMap,
   runSessionInit,
 };

package/claude-plugin/scripts/session-init.test.js

@@ -2,12 +2,28 @@
 const test = require('node:test');
 const assert = require('node:assert/strict');
 
-const { launchBackgroundAutoUpdate, syncLifecycleConfig } = require('./session-init');
+const { launchBackgroundAutoUpdate, syncLifecycleConfig, ensureIndexFresh } = require('./session-init');
 
 test('syncLifecycleConfig is exported as a callable helper', () => {
   assert.equal(typeof syncLifecycleConfig, 'function');
 });
 
+test('ensureIndexFresh is exported as a callable helper', () => {
+  assert.equal(typeof ensureIndexFresh, 'function');
+});
+
+test('ensureIndexFresh returns skipped when no index exists', () => {
+  const origCwd = process.cwd();
+  const tmpDir = require('node:os').tmpdir();
+  process.chdir(tmpDir);
+  try {
+    const result = ensureIndexFresh();
+    assert.equal(result, 'skipped');
+  } finally {
+    process.chdir(origCwd);
+  }
+});
+
 test('launchBackgroundAutoUpdate spawns detached silent updater', () => {
   const calls = [];
 

package/claude-plugin/scripts/user-prompt-context.js

@@ -3,7 +3,7 @@
 // UserPromptSubmit hook: inject relevant code-graph context based on user's question.
 // Only activates when user message references code entities + has understanding intent.
 // This is a CODE INDEX, not a memory store — only inject structural code context.
-const { execSync } = require('child_process');
+const { execFileSync } = require('child_process');
 const fs = require('fs');
 const path = require('path');
 const os = require('os');
@@ -106,7 +106,9 @@ if (result && result.trim()) {
 // --- Helpers ---
 
 function run(cmd) {
-  return execSync(cmd, {
+  const parts = cmd.match(/(?:[^\s"]+|"[^"]*")+/g) || [];
+  const args = parts.slice(1).map(a => a.replace(/^"|"$/g, ''));
+  return execFileSync(parts[0], args, {
     cwd,
     timeout: 3000,
     encoding: 'utf8',

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdsrs/code-graph",
-  "version": "0.7.3",
+  "version": "0.7.5",
   "description": "MCP server that indexes codebases into an AST knowledge graph with semantic search, call graph traversal, and HTTP route tracing",
   "license": "MIT",
   "repository": {
@@ -33,10 +33,10 @@
     "node": ">=16"
   },
   "optionalDependencies": {
-    "@sdsrs/code-graph-linux-x64": "0.7.3",
-    "@sdsrs/code-graph-linux-arm64": "0.7.3",
-    "@sdsrs/code-graph-darwin-x64": "0.7.3",
-    "@sdsrs/code-graph-darwin-arm64": "0.7.3",
-    "@sdsrs/code-graph-win32-x64": "0.7.3"
+    "@sdsrs/code-graph-linux-x64": "0.7.5",
+    "@sdsrs/code-graph-linux-arm64": "0.7.5",
+    "@sdsrs/code-graph-darwin-x64": "0.7.5",
+    "@sdsrs/code-graph-darwin-arm64": "0.7.5",
+    "@sdsrs/code-graph-win32-x64": "0.7.5"
   }
 }