@tekyzinc/gsd-t 4.10.11 → 4.10.12

package/CHANGELOG.md

@@ -2,6 +2,17 @@
 
 All notable changes to GSD-T are documented here. Updated with each release.
 
+## [4.10.12] - 2026-06-27
+
+### Fixed — freshness hash mismatch made every graph query re-index the whole repo
+
+`compute_touched_files` hashed files with md5 (full length) while the indexer stores sha256 sliced to 16 chars — a guaranteed permanent mismatch. So every file read as "edited" on every query and freshness re-indexed the entire repo (re-running SCIP), hanging `gsd-t graph status` for 30s+ (then reporting graph-unavailable) on large projects.
+
+- `bin/gsd-t-graph-freshness.cjs`: `hashFileContent` now `sha256().slice(0,16)` — matches the indexer's `contentHash` exactly. `EXCLUDE_DIRS` synced with the indexer's `SKIP_DIRS` (`.venv`/`site-packages`/etc.) so freshness doesn't see phantom ADDs from vendored dirs the indexer skipped.
+- 5 D4 freshness test fixtures seeded stores with md5 hashes — updated to sha256(16) to match the real store.
+
+Measured on Tekyz-CRM: `gsd-t graph status` 30s-timeout-unavailable → 0.38s ok; `compute_touched_files` 291ms / 11,821-files-stale → 12ms / 0-stale. This also makes graph queries cheap enough for ambient grep-interception (the next milestone). Suite: 2502/2502 pass.
+
 ## [4.10.11] - 2026-06-27
 
 ### Fixed — M96: the code graph now actually runs in projects (native-dep resolution)

package/README.md

@@ -1,6 +1,6 @@
 # GSD-T: Contract-Driven Development for Claude Code
 
-**v4.10.11** - A methodology for reliable, parallelizable development using Claude Code with optional Agent Teams support.
+**v4.10.12** - A methodology for reliable, parallelizable development using Claude Code with optional Agent Teams support.
 
 **Eliminates context rot** — task-level fresh dispatch (one subagent per task, ~10-20% context each) means compaction never triggers.
 **Compaction-proof debug loops** — `gsd-t headless --debug-loop` runs test-fix-retest cycles as separate `claude -p` sessions. A JSONL debug ledger persists all hypothesis/fix/learning history across fresh sessions. Anti-repetition preamble injection prevents retrying failed hypotheses. Escalation tiers (sonnet → opus → human) and a hard iteration ceiling enforced externally.

package/bin/gsd-t-graph-freshness.cjs

@@ -48,22 +48,32 @@ function fail(msg) { return `${C.red}✘${C.reset} ${msg}`; }
 // ─── Source-file extensions the indexer tracks ────────────────────────────────
 const TRACKED_EXTS = new Set(['.js', '.mjs', '.cjs', '.ts', '.tsx', '.jsx', '.py']);
 
-// ─── Content-hash (SHA-256 hex, first 16 bytes → 32 hex chars) ───────────────
-// Using MD5 for speed (same family as graph-store.js) — collision-resistance
-// is not required here; we only need change-detection fidelity.
+// ─── Content-hash — MUST match the indexer's contentHash EXACTLY ─────────────
+// The indexer (gsd-t-graph-index.cjs::contentHash) stores sha256(content) sliced
+// to the first 16 hex chars. Freshness MUST compute the identical value, or EVERY
+// file reads as "edited" on every query (the hash never matches) and freshness
+// re-indexes the whole repo — the hang. (Was md5/full-length: a guaranteed
+// permanent mismatch.) [RULE] freshness-hash-matches-indexer-hash
 function hashFileContent(filePath) {
   try {
     const content = fs.readFileSync(filePath);
-    return crypto.createHash('md5').update(content).digest('hex');
+    return crypto.createHash('sha256').update(content).digest('hex').slice(0, 16);
   } catch {
     return null;
   }
 }
 
 // ─── Walk the working tree for source files ───────────────────────────────────
+// MUST stay in sync with the indexer's SKIP_DIRS (gsd-t-graph-index.cjs). If
+// freshness walks a dir the indexer skipped, every file in it reads as a phantom
+// ADD on every query → re-index storm (bee-poc/Tekyz-CRM: 9,008 phantom adds from
+// .venv + build bundles). [RULE] freshness-excludes-match-indexer-skipdirs
 const EXCLUDE_DIRS = new Set([
   'node_modules', '.git', 'dist', 'build', 'coverage',
   '.gsd-t', '.claude', '__pycache__', '.next', 'out',
+  '.cache', '.nyc_output', '.turbo',
+  '.venv', 'venv', 'env', '.dart_tool', 'Pods', 'vendor', '.gradle',
+  '.idea', '.vscode', 'tmp', '.tmp', 'site-packages',
 ]);
 
 function walkTree(dir, results = []) {

package/bin/gsd-t-graph-index.cjs

@@ -70,6 +70,11 @@ const SKIP_DIRS = new Set([
   'node_modules', '.next', 'dist', 'build', '.git',
   '.cache', '__pycache__', 'coverage', '.nyc_output',
   'out', '.turbo',
+  // M96 follow-up: vendored / generated trees that aren't project source and
+  // explode the file count (bee-poc had 18K files from .venv + iOS build assets,
+  // hanging scip-typescript at 8.5GB). Exclude language vendor/build dirs.
+  '.venv', 'venv', 'env', '.dart_tool', 'Pods', 'vendor', '.gradle',
+  '.idea', '.vscode', 'tmp', '.tmp', 'site-packages',
 ]);
 
 // ── Content hash ──────────────────────────────────────────────────────────────

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tekyzinc/gsd-t",
-  "version": "4.10.11",
+  "version": "4.10.12",
   "description": "GSD-T: Contract-Driven Development for Claude Code — 54 slash commands with headless-by-default workflow spawning, unattended supervisor relay with event stream, graph-powered code analysis, real-time agent dashboard, task telemetry, doc-ripple enforcement, backlog management, impact analysis, test sync, milestone archival, and PRD generation",
   "author": "Tekyz, Inc.",
   "license": "MIT",