@sdsrs/code-graph 0.92.0 → 0.93.1

package/claude-plugin/.claude-plugin/plugin.json

@@ -4,7 +4,7 @@
   "author": {
     "name": "sdsrs"
   },
-  "version": "0.92.0",
+  "version": "0.93.1",
   "keywords": [
     "code-graph",
     "ast",

package/claude-plugin/scripts/pre-grep-guide.js

@@ -570,6 +570,16 @@ function buildNoHitsFyi(pattern) {
   return `[code-graph] FYI: \`code-graph-mcp grep "${pattern}"\` found no matches — raw grep proceeding. (Regex-metachar patterns: \`code-graph-mcp grep -F\` searches literally.)`;
 }
 
+// v0.92 — cg was allowed to answer but the binary ran-and-failed ('unavailable')
+// or could not be found ('no-binary'). Like buildNoHitsFyi this is a breadcrumb
+// only (PreToolUse exit-0 stdout → debug log, never the model); the operative
+// effect at the call site is the ALLOW (no deny emitted) so the raw grep runs
+// intact instead of a static deny that would hand the model nothing.
+function buildUnavailableFyi(pattern, status) {
+  const why = status === 'no-binary' ? 'binary not found' : 'ran but failed';
+  return `[code-graph] FYI: \`code-graph-mcp grep "${pattern}"\` unavailable (${why}) — raw grep proceeding.`;
+}
+
 // --- Main execution (only when run directly) ---
 
 // Kill switch: matches user-prompt-context.js convention. =1 forces silence
@@ -687,9 +697,24 @@ function runMain() {
       }
     }
 
-    if (answer.status === 'no-hits') {
-      recordRecommendation(root, { hook: 'grep', action: 'hint', fallthrough: 'no-hits' });
-      process.stdout.write(buildNoHitsFyi(pattern) + '\n');
+    // v0.92 — cg was allowed to answer but couldn't deliver hits: 'no-hits'
+    // (regex-dialect miss ≠ proof of absence), 'unavailable' (binary ran but
+    // failed/timed out), or 'no-binary' (binary missing). In every case a static
+    // deny hands the model NOTHING — pure friction that teaches the
+    // CODE_GRAPH_NO_BLOCK_GREP bypass (ubuntu-sec 2026-07 dogfood: the only 2
+    // non-converting denies were `unavailable`, one a `def render` compound cmd
+    // that then half-ran — grep blocked, `; python3 …` tail dropped, no result).
+    // ALLOW the raw grep so the command runs intact; record the fallthrough
+    // reason so the funnel still tells no-hits / unavailable / no-binary apart.
+    // Exception: CODE_GRAPH_NO_ANSWER_IN_DENY=1 means the user opted into the
+    // static deny (the answer never ran → status stays the default 'unavailable')
+    // — that path falls through to the v0.46 static deny below.
+    if (answer.status !== 'hits' && !isAnswerDisabled()) {
+      recordRecommendation(root, { hook: 'grep', action: 'hint', fallthrough: answer.status });
+      process.stdout.write(
+        (answer.status === 'no-hits'
+          ? buildNoHitsFyi(pattern)
+          : buildUnavailableFyi(pattern, answer.status)) + '\n');
       return;
     }
 
@@ -769,6 +794,7 @@ module.exports = {
   buildBlockReason,
   buildBlockReasonWithAnswer,
   buildNoHitsFyi,
+  buildUnavailableFyi,   // v0.92 — allow-on-unavailable breadcrumb
   commandHash,
   isOnCooldown,
   markCooldown,

package/claude-plugin/scripts/pre-grep-guide.test.js

@@ -1127,24 +1127,25 @@ test('e2e: stub reports no matches → grep allowed with FYI + records fallthrou
   }
 });
 
-test('e2e: stub fails → static deny (v0.46 fallback) + records answered:false', () => {
+test('e2e: stub ran-and-failed → grep ALLOWED (no static deny) + records fallthrough:unavailable', () => {
+  // v0.92 — a binary that ran but failed (exit 3) can't answer, so a static deny
+  // would hand the model nothing (pure friction that teaches the bypass). ALLOW
+  // the raw grep instead; the funnel still distinguishes this from no-hits /
+  // no-binary via the `fallthrough` field on the recorded hint event.
   const uniq = `StubBoom${Date.now()}`;
   const fixture = e2eFixture(`process.exit(3);`);
   const cmd = `grep -rn "${uniq}" src/`;
   try {
     const res = runHook(cmd, fixture);
     assert.equal(res.status, 0);
-    const out = JSON.parse(res.stdout);
-    assert.equal(out.hookSpecificOutput.permissionDecision, 'deny');
-    // static reason, no embedded results
-    assert.match(out.hookSpecificOutput.permissionDecisionReason, /denied by code-graph hook/);
+    // No deny JSON — plain FYI text means the grep proceeds.
+    assert.throws(() => JSON.parse(res.stdout));
+    assert.match(res.stdout, /unavailable \(ran but failed\)/);
     const rec = JSON.parse(fsE2e.readFileSync(
       pathE2e.join(fixture.dir, '.code-graph', 'recommendations.jsonl'), 'utf8').trim());
-    assert.equal(rec.action, 'deny');
-    assert.equal(rec.answered, false);
-    // A binary that ran but failed (exit 3) is a runtime 'unavailable' — the
-    // funnel must NOT confuse this with a missing-binary ('no-binary') deny.
-    assert.equal(rec.reason, 'unavailable');
+    assert.equal(rec.action, 'hint');
+    // Runtime-fail must stay distinguishable from a missing-binary fallthrough.
+    assert.equal(rec.fallthrough, 'unavailable');
   } finally {
     cleanupFixture(fixture, cmd);
   }
@@ -1222,7 +1223,12 @@ test('e2e: compound `grep …; sed` → deny answers grep AND flags the unanswer
   }
 });
 
-test('e2e: compound cmd + answer failure → STATIC deny still flags tail + records tail:true', () => {
+test('e2e: compound cmd + answer failure → grep ALLOWED, whole command runs intact (no half-run tail drop)', () => {
+  // v0.92 — the marquee fix: when cg can't answer, a static deny used to block
+  // the grep AND drop the `&& cargo test` tail, leaving the model with nothing +
+  // a re-issue chore (ubuntu-sec: the `grep "def render" …; python3 …` case).
+  // Now the whole compound command is ALLOWED to run intact — no deny, no tail
+  // note, no half-run. Recorded as a hint/fallthrough so the funnel still sees it.
   const uniq = `StubTailBoom${Date.now()}`;
   const fixture = e2eFixture(`process.exit(3);`);
   const cmd = `grep -n "${uniq}" src/foo.rs && cargo test -q`;
@@ -1231,16 +1237,14 @@ test('e2e: compound cmd + answer failure → STATIC deny still flags tail + reco
     fsE2e.writeFileSync(pathE2e.join(fixture.dir, 'src', 'foo.rs'), 'fn x() {}\n');
     const res = runHook(cmd, fixture);
     assert.equal(res.status, 0);
-    const out = JSON.parse(res.stdout);
-    assert.equal(out.hookSpecificOutput.permissionDecision, 'deny');
-    const reason = out.hookSpecificOutput.permissionDecisionReason;
-    assert.match(reason, /denied by code-graph hook/);  // static fallback path
-    assert.match(reason, /did NOT run/);
-    assert.match(reason, /cargo test -q/);
+    // No deny JSON — the whole compound command proceeds, tail included.
+    assert.throws(() => JSON.parse(res.stdout));
+    assert.match(res.stdout, /unavailable \(ran but failed\)/);
     const rec = JSON.parse(fsE2e.readFileSync(
       pathE2e.join(fixture.dir, '.code-graph', 'recommendations.jsonl'), 'utf8').trim());
-    assert.equal(rec.answered, false);
-    assert.equal(rec.tail, true);
+    assert.equal(rec.action, 'hint');
+    assert.equal(rec.fallthrough, 'unavailable');
+    assert.equal(rec.tail, undefined);   // nothing dropped → no tail flag
   } finally {
     cleanupFixture(fixture, cmd);
   }
@@ -1264,13 +1268,14 @@ test('e2e: simple (non-compound) denied grep → no tail field in the deny recor
   }
 });
 
-test('e2e: missing binary → static deny records reason:no-binary (flagship-dark, distinct from no-hits & unavailable)', () => {
-  // The whole point of the `reason` field: a deny that fell back because the
-  // binary could not be found ('no-binary') must be distinguishable in the log
-  // from one where the binary ran but had nothing useful. We can't make
-  // findBinary() return null in-repo (dev target/release is always there), so
-  // run the child with a `--require` shim that forces it null — and DON'T set
-  // _CG_ANSWER_BINARY (it would short-circuit before findBinary()).
+test('e2e: missing binary → grep ALLOWED (no static deny) records fallthrough:no-binary (distinct from no-hits & unavailable)', () => {
+  // v0.92 — when the binary can't be found the hook can't answer AND denying
+  // would block the user's only search tool, so it ALLOWS the raw grep. The
+  // `fallthrough` field still keeps a missing-binary case distinguishable in the
+  // funnel from no-hits / runtime-unavailable. We can't make findBinary() return
+  // null in-repo (dev target/release is always there), so run the child with a
+  // `--require` shim that forces it null — and DON'T set _CG_ANSWER_BINARY (it
+  // would short-circuit before findBinary()).
   const uniq = `StubGone${Date.now()}`;
   const fixture = e2eFixture(`process.stdout.write('unused\\n');`);
   const shim = pathE2e.join(fixture.dir, 'no-binary-shim.js');
@@ -1302,16 +1307,14 @@ Module.prototype.require = function (id) {
       },
     });
     assert.equal(res.status, 0);
-    const out = JSON.parse(res.stdout);
-    // Still a deny, still the static fallback copy (no embedded answer).
-    assert.equal(out.hookSpecificOutput.permissionDecision, 'deny');
-    assert.match(out.hookSpecificOutput.permissionDecisionReason, /denied by code-graph hook/);
+    // No deny JSON — the raw grep proceeds; FYI names the missing-binary cause.
+    assert.throws(() => JSON.parse(res.stdout));
+    assert.match(res.stdout, /unavailable \(binary not found\)/);
     const rec = JSON.parse(fsE2e.readFileSync(
       pathE2e.join(fixture.dir, '.code-graph', 'recommendations.jsonl'), 'utf8').trim());
-    assert.equal(rec.action, 'deny');
-    assert.equal(rec.answered, false);
-    assert.equal(rec.reason, 'no-binary',
-      'a missing-binary deny must be distinguishable from an unavailable (runtime-fail) deny');
+    assert.equal(rec.action, 'hint');
+    assert.equal(rec.fallthrough, 'no-binary',
+      'a missing-binary fallthrough must be distinguishable from an unavailable (runtime-fail) one');
   } finally {
     cleanupFixture(fixture, cmd);
   }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@sdsrs/code-graph",
-  "version": "0.92.0",
+  "version": "0.93.1",
   "description": "MCP server that indexes codebases into an AST knowledge graph with semantic search, call graph traversal, and HTTP route tracing",
   "license": "MIT",
   "repository": {
@@ -35,10 +35,10 @@
     "node": ">=16"
   },
   "optionalDependencies": {
-    "@sdsrs/code-graph-linux-x64": "0.92.0",
-    "@sdsrs/code-graph-linux-arm64": "0.92.0",
-    "@sdsrs/code-graph-darwin-x64": "0.92.0",
-    "@sdsrs/code-graph-darwin-arm64": "0.92.0",
-    "@sdsrs/code-graph-win32-x64": "0.92.0"
+    "@sdsrs/code-graph-linux-x64": "0.93.1",
+    "@sdsrs/code-graph-linux-arm64": "0.93.1",
+    "@sdsrs/code-graph-darwin-x64": "0.93.1",
+    "@sdsrs/code-graph-darwin-arm64": "0.93.1",
+    "@sdsrs/code-graph-win32-x64": "0.93.1"
   }
 }