graph-indexer 1.2.0 → 2.0.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (60) hide show
  1. package/CHANGELOG.md +412 -0
  2. package/README.md +216 -596
  3. package/SECURITY.md +68 -0
  4. package/TRADEMARK.md +31 -0
  5. package/cli-ui.mjs +78 -0
  6. package/config.mjs +179 -28
  7. package/daemon-ctl.mjs +175 -0
  8. package/daemon-lock.mjs +69 -0
  9. package/embedders/python/mlx_embed_server.py +61 -0
  10. package/embedders/python/requirements-mlx.txt +5 -0
  11. package/embedders/setup-mlx.mjs +110 -0
  12. package/embeddings.mjs +489 -0
  13. package/engine/binary.mjs +399 -0
  14. package/{core-engine.mjs → engine/memory.mjs} +107 -440
  15. package/{sqlite-store.mjs → engine/sqlite.mjs} +137 -42
  16. package/enrichment.mjs +111 -32
  17. package/git-signals.mjs +248 -0
  18. package/indexer.mjs +151 -42
  19. package/init.mjs +1603 -171
  20. package/layout.mjs +123 -0
  21. package/mcp/format.mjs +61 -0
  22. package/mcp/tools.mjs +1157 -0
  23. package/mcp/topology.mjs +551 -0
  24. package/mcp-server.mjs +55 -24
  25. package/package.json +44 -13
  26. package/parse/extractor.mjs +617 -0
  27. package/parse/imports.mjs +365 -0
  28. package/parse/languages.mjs +89 -0
  29. package/parse/metadata.mjs +655 -0
  30. package/parse/routes.mjs +327 -0
  31. package/prompts/CORE.md +86 -0
  32. package/prompts/DOMAIN_TEMPLATE.md +46 -0
  33. package/prompts/INTEGRATION.md +123 -0
  34. package/prompts/frameworks/ANDROID.md +17 -0
  35. package/prompts/frameworks/ASPNET_CORE.md +19 -0
  36. package/prompts/frameworks/FASTAPI_DJANGO.md +19 -0
  37. package/prompts/frameworks/LARAVEL_SYMFONY.md +22 -0
  38. package/prompts/frameworks/NODE_EXPRESS_NESTJS.md +18 -0
  39. package/prompts/frameworks/RAILS.md +20 -0
  40. package/prompts/frameworks/REACT.md +20 -0
  41. package/prompts/frameworks/SPRING_BOOT.md +19 -0
  42. package/prompts/languages/BASH.md +22 -0
  43. package/prompts/languages/C.md +21 -0
  44. package/prompts/languages/CSHARP.md +24 -0
  45. package/prompts/languages/CSS_SCSS.md +22 -0
  46. package/prompts/languages/GO.md +23 -0
  47. package/prompts/languages/JAVA.md +23 -0
  48. package/prompts/languages/JAVASCRIPT_TYPESCRIPT.md +24 -0
  49. package/prompts/languages/KOTLIN.md +24 -0
  50. package/prompts/languages/PHP.md +23 -0
  51. package/prompts/languages/PYTHON.md +23 -0
  52. package/prompts/languages/RUBY.md +23 -0
  53. package/prompts/languages/RUST.md +21 -0
  54. package/prompts/languages/SWIFT.md +21 -0
  55. package/search-core.mjs +254 -43
  56. package/storage.mjs +28 -3
  57. package/watch-daemon.mjs +69 -23
  58. package/PROMPT.md +0 -182
  59. package/mcp-tools.mjs +0 -545
  60. package/parser-utils.mjs +0 -1170
package/README.md CHANGED
@@ -1,17 +1,12 @@
1
1
  <div align="center">
2
- <!-- Reemplaza la URL de abajo con la ruta a tu nuevo logo profesional en formato SVG o PNG transparente -->
3
2
  <img src="https://raw.githubusercontent.com/MaquinaTech/graph-indexer/main/assets/logo.jpg" alt="Graph Indexer Logo" width="250" />
4
3
 
5
4
  <h1>Graph Indexer</h1>
6
5
 
7
6
  <p>
8
- <strong>Zero-Database · Air-Gapped · AST-Precise · Hybrid Search · Monorepo-Scale</strong>
9
- </p>
10
- <p>
11
- <em>An MCP server that lets AI coding agents search your codebase by concept instead of reading files, cutting context usage by 65–88% per query.</em>
7
+ <em>A local MCP server that gives AI coding agents an AST-precise, topology-aware index of your codebase.</em>
12
8
  </p>
13
9
 
14
- <!-- Badges -->
15
10
  <a href="https://www.npmjs.com/package/graph-indexer"><img src="https://img.shields.io/npm/v/graph-indexer?color=007acc&style=for-the-badge" alt="npm version"></a>
16
11
  <a href="https://www.npmjs.com/package/graph-indexer"><img src="https://img.shields.io/npm/dt/graph-indexer?color=4caf50&style=for-the-badge" alt="NPM Downloads"></a>
17
12
  <a href="https://nodejs.org"><img src="https://img.shields.io/badge/Node.js-%3E%3D18-brightgreen?style=for-the-badge&logo=nodedotjs" alt="Node.js 18+"></a>
@@ -20,683 +15,308 @@
20
15
 
21
16
  <br />
22
17
 
23
- ---
24
-
25
- ## Table of Contents
26
-
27
- - [What it does](#what-it-does)
28
- - [Results](#results)
29
- - [Getting started](#getting-started)
30
- - [Storage backends](#storage-backends)
31
- - [Semantic enrichment](#semantic-enrichment)
32
- - [MCP tools](#mcp-tools)
33
- - [Configuration](#configuration)
34
- - [Supported languages](#supported-languages)
35
- - [How it works](#how-it-works)
36
- - [Best practices](#best-practices)
37
- - [Troubleshooting](#troubleshooting)
38
- - [Development](#development)
39
- - [Security](#security)
40
- - [License](#license)
41
-
42
- ---
43
-
44
18
  ## What it does
45
19
 
46
- graph-indexer pre-indexes your codebase into an AST-precise search index and exposes it as an MCP server. Instead of reading full files, AI agents call `search_code("payment validation")` and get back the exact functions that match — with type signatures, docstrings, decorators, inheritance edges, dependency graph, and call sites — in a fraction of the tokens.
47
-
48
- It runs entirely on your machine. No external database, no cloud APIs, no telemetry. Two design choices make it suitable for any repository size:
49
-
50
- - A **default in-memory engine** that is instant and dependency-free, and an optional **disk-backed SQLite backend** that holds the index on disk so retrieval RAM stays flat on enterprise monorepos that would otherwise exhaust Node's heap.
51
- - Optional **local-LLM semantic enrichment** that teaches the index what each core component *does*, so conceptual queries match code that shares none of their words.
52
-
53
- **Token comparison:**
20
+ Graph Indexer is a local [Model Context Protocol](https://modelcontextprotocol.io) server that builds an AST-precise index of your repository with Tree-sitter and serves it to AI coding agents. Instead of grepping text or embedding whole files, it indexes *semantic chunks* — functions, classes, methods — and the call graph and import topology that connect them, so an agent can find the right symbol, see every caller and dependency that would be affected by a change, and resolve references across files. It runs entirely on your machine: the default search path is lexical (BM25 + morphological stemming) and needs no model, no daemon, and no network. Dense vector embeddings, LLM enrichment, and an LLM reranker are all available but off by default — you opt into each one when you have a measured reason to.
54
21
 
55
- ```
56
- Agent task: "Add error handling to the payment processing flow"
57
-
58
- Without graph-indexer:
59
- readFile("src/payments/service.ts") → 8,400 tokens
60
- readFile("src/payments/handlers.ts") → 6,200 tokens
61
- readFile("src/types/payment.ts") → 1,800 tokens
62
- Total: ~ 16,400 tokens
63
-
64
- With graph-indexer:
65
- search_code("payment processing") → 650 tokens (5 exact chunks)
66
- get_chunk("chunk_id") → 280 tokens (full function body)
67
- Total: ~ 930 tokens
68
- ```
69
-
70
- The difference compounds across a session. Agents that read files also lack topology — they can't see which other functions call the one they're modifying, so they miss side effects.
71
-
72
- ---
22
+ **Why it matters for AI coding agents:**
73
23
 
74
- ## Results
75
-
76
- Measured across 5 production open-source codebases (8,296 AST chunks, 100 ground-truth queries:
77
- 69 **symbolic** — the developer names or paraphrases the symbol — and 31 **semantic** — agent-style
78
- behavioural descriptions sharing few or no words with the code).
79
-
80
- * **Average Token Savings:** 79.0%
81
- * **Strict Success@5 (Hybrid + Rerank):** 82%
82
- * **Strict MRR (Symbolic queries):** 0.84
83
-
84
- ### Token savings per query
85
-
86
- | Project | Language | Chunks | Recall@5 (loose) | Savings |
87
- | :--- | :--- | ---: | ---: | ---: |
88
- | Axios v1.6.0 | JavaScript | 450 | 0.89 | **69.7%** |
89
- | Express 4.18.2 | JavaScript | 389 | 0.95 | **88.7%** |
90
- | NestJS v10.4.9 | TypeScript | 2,675 | 0.95 | **67.5%** |
91
- | FastAPI 0.103.0 | Python | 3,694 | 0.76 | **85.5%** |
92
- | Gin v1.9.1 | Go | 1,088 | 0.94 | **83.7%** |
93
- | **Mean** | | **8,296** | **0.90** | **79.0%** |
94
-
95
- > Savings = tokens in the returned chunk snippets vs the full source files containing the top-5
96
- > results, at 4 chars/token. Search latency is sub-millisecond lexical; the hybrid channel adds
97
- > one local embedding call plus a streamed vector scan (a few ms at this corpus size).
98
-
99
- ### Search quality (strict)
100
-
101
- Strict scoring: a result counts **only** if its symbol name (or its class, for method chunks)
102
- exactly equals the ground truth — no substring matching, no file-path credit. Hybrid =
103
- BM25 + `nomic-embed-text` vectors with `qwen2.5-coder:1.5b` enrichment; rerank adds the
104
- opt-in `qwen2.5-coder:7b` judge on natural-language queries.
105
-
106
- | Project | Strict success@5 | **Rank-1 (strict)** | MRR (strict) |
107
- | :--- | ---: | ---: | ---: |
108
- | Axios v1.6.0 | 0.74 | 0.68 | 0.72 |
109
- | Express 4.18.2 | 0.90 | 0.62 | 0.73 |
110
- | NestJS v10.4.9 | 0.67 | 0.57 | 0.60 |
111
- | FastAPI 0.103.0 | 0.81 | 0.67 | 0.74 |
112
- | Gin v1.9.1 | 1.00 | 0.78 | 0.84 |
113
- | **Mean (hybrid + rerank)** | **0.82** | **0.66** | **0.73** |
114
-
115
- Split by query style and configuration (the numbers that matter for agent workflows):
116
-
117
- | Channel | Rank-1 | MRR | Success@5 |
118
- | :--- | ---: | ---: | ---: |
119
- | **Symbolic** (name-lookup, 69q), hybrid | **0.80** | **0.84** | — |
120
- | **Semantic** (behavioural, 31q), hybrid + rerank | **0.35** | **0.47** | **0.65** |
121
- | Semantic, hybrid (no rerank) | 0.23 | 0.37 | 0.55 |
122
- | Semantic, lexical-only (no Ollama) | 0.19 | 0.29 | 0.48 |
123
-
124
- Read the semantic rows with their denominator in mind: under *strict* scoring several of those
125
- queries are unwinnable in-repo (the expected symbol is an anonymous default export, or is
126
- re-exported from a dependency whose implementation isn't in the codebase), and most strict
127
- "misses" still land the right file in the top-2 — which the loose channel (0.89) credits and an
128
- agent can use. Symbol-naming queries — the bulk of real agent traffic — find the exact chunk
129
- first try 80% of the time and in the top ranks (MRR 0.84) almost always.
130
-
131
- Ranking favours exact symbol matches even for short, high-signal names — `res.json`,
132
- `req.get`, `app.all` — by gating the name boost on corpus **document frequency** instead of a
133
- blunt length cutoff (with singular/plural equivalence, so `BackgroundTask` finds
134
- `BackgroundTasks`). Natural-language queries are detected and ranked **vector-first** (with the
135
- name/path boosts gated on semantic agreement), so behavioural questions aren't drowned by
136
- keyword noise. Test, spec, example and sandbox chunks are demoted in both channels.
137
-
138
- **Backend parity is exact**: every rank-assigning sort uses deterministic tie-breaking and both
139
- stores funnel vector candidates through one shared finalizer, so the in-memory engine and the
140
- SQLite store return **identical top-5 chunk ids for 100/100 benchmark queries** — verified, not
141
- approximate.
142
-
143
- Reproduce every view:
24
+ - **Up to 98.2% Token Savings:** Delivers the exact AST chunk needed instead of dumping 1M token context files.
25
+ - **Blast radius before every edit.** `get_call_graph` and `find_references` surface every caller, subclass, and dependency a change would touch, so the agent reasons about impact on code it never opened.
26
+ - **Private by default.** Everything runs locally; the default path makes zero network calls and needs no model — your code never leaves your machine.
27
+ - **One command, any language.** Guided setup wires your editors in seconds, and the zero-dependency lexical engine indexes 14 languages out of the box.
144
28
 
145
- ```bash
146
- npm run test:setup # clone the 5 fixture repos
147
- npm run test # loose hit-rate + token savings + indexing stats
148
- npm run test:eval # strict symbol-level accuracy, lexical channel
149
- OLLAMA_HOST=http://localhost:11434 node test/evaluate.mjs --embeddings # hybrid
150
- OLLAMA_HOST=http://localhost:11434 node test/evaluate.mjs --embeddings --use-sqlite # parity
151
- OLLAMA_HOST=http://localhost:11434 RERANK_MODEL=qwen2.5-coder:7b \
152
- node test/evaluate.mjs --embeddings --rerank # + judge
153
- ```
154
-
155
- > The strict harness ([test/evaluate.mjs](test/evaluate.mjs)) exists specifically to keep
156
- > these numbers honest and prevent the tool from being tuned to a friendly benchmark — it
157
- > reports the inflation gap (loose minus strict) per suite so regressions in real precision
158
- > can't hide behind a permissive hit-rate, and it splits the symbolic and semantic channels
159
- > so neither inflates the other.
160
-
161
- ---
29
+ ## 📦 Prerequisites
162
30
 
163
- ## Getting started
31
+ * **Node.js** 18+ (22+ recommended if you hit >15k chunks for automatic SQLite scaling).
32
+ * **OS:** Agnostic. macOS Apple Silicon required only for the optional MLX GPU acceleration.
33
+ * **Optional:** Ollama for embeddings, enrichment, and reranking (see [Ollama setup](#ollama-setup)).
34
+ * **Optional:** Python 3.10+ for the MLX embedder (macOS Apple Silicon only).
164
35
 
165
- **Requirements:** Node.js v18+ · Ollama (optional, for semantic search and enrichment) · Node.js v22.5+ for the optional SQLite backend
36
+ ## Quick start
166
37
 
167
- ### 1. Install
38
+ ### 1. Run the Interactive Indexer
39
+ Go to your project root (works for Python, Go, Rust, TS/JS, C#, and 9 more languages) and run:
168
40
 
169
41
  ```bash
170
- npm install graph-indexer --save-dev
171
- npx graph-indexer init
42
+ npx graph-indexer /path/to/your/repo
172
43
  ```
173
44
 
174
- `init` auto-detects your IDE (Claude, Cursor, VS Code), adds npm scripts to `package.json`, updates `.gitignore`, and opens an interactive language selector:
45
+ That runs the [guided setup](#guided-setup) against that repo, which leaves it ready to use. It is idempotent — re-run it whenever you add a language or change a setting; it merges into what you already have and never clobbers another tool's config. Every generated file lands in `.graph-indexer/` (git-ignored), so your repo root stays clean.
175
46
 
176
- ```
177
- ⚙️ Select languages (Arrows/Tab: move, Space: toggle, Enter: confirm):
178
-
179
- ❯ ◯ TypeScript / TSX .ts, .tsx
180
- ◯ JavaScript .js, .jsx, .mjs, .cjs
181
- ◯ Python .py
182
- ◯ Go .go
183
- ◯ Rust .rs
184
- ◯ PHP .php
185
- ◯ Java .java
186
- ◯ Kotlin .kt, .kts
187
- ◯ C# .cs
188
- ◯ Ruby .rb
189
- ◯ CSS / SCSS .css, .scss
190
- ```
191
-
192
- Navigate with **↑ ↓**, toggle with **Space**, confirm with **Enter**. Leaving all unselected enables every language. Your selection is saved to `.graph-indexer.json`. Pass `--all-languages` to skip the prompt.
47
+ ### 2. Connect Your Agent
193
48
 
194
- ### 2. Index your codebase
195
-
196
- **With semantic search (recommended):**
197
- ```bash
198
- # Install Ollama: https://ollama.ai
199
- ollama pull nomic-embed-text
200
- npm run mcp:index
201
- ```
49
+ **If you ran the guided setup and selected your agent in step 4, this is already done — skip ahead.**
202
50
 
203
- **Lexical-only (no Ollama required):**
204
- ```bash
205
- INDEXER_EMBEDDINGS=off npm run mcp:index
206
- ```
51
+ The guided setup writes the MCP config automatically (with absolute paths that survive GUI launches) for **Claude Code** (`.mcp.json`), **Claude Desktop**, **Cursor** (`.cursor/mcp.json`), and **VS Code** (`.vscode/mcp.json`). Re-run `npx graph-indexer /path/to/your/repo` at any time to add or refresh a client.
207
52
 
208
- Lexical-only still scores loose recall@5 = 0.90 and strict symbolic MRR 0.81 on the benchmarks above — only the semantic (behavioural-query) channel needs embeddings.
53
+ <details>
54
+ <summary>Manual wiring (if you skipped setup or use a client not listed above)</summary>
209
55
 
210
- **On a large monorepo, keep retrieval RAM flat with the SQLite backend:**
211
- ```bash
212
- npm run mcp:index -- --use-sqlite
213
- ```
56
+ #### Claude Code — CLI
214
57
 
215
- **Sharpen conceptual recall with local-LLM enrichment:**
216
58
  ```bash
217
- ollama pull qwen2.5-coder:1.5b
218
- npm run mcp:index -- --llm-enrichment
59
+ claude mcp add graph-indexer -- npx -y -p graph-indexer idx-mcp --repo /path/to/your/repo
219
60
  ```
220
61
 
221
- The two options compose (`--use-sqlite --llm-enrichment`) and can be made permanent in `.graph-indexer.json` — see [Configuration](#configuration).
62
+ #### Cursor — `.cursor/mcp.json`
222
63
 
223
- ### 3. Configure your IDE
224
-
225
- `init` writes the config automatically. Manual examples:
226
-
227
- **Claude Desktop** (`~/Library/Application Support/Claude/claude_desktop_config.json`):
228
64
  ```json
229
65
  {
230
66
  "mcpServers": {
231
67
  "graph-indexer": {
232
- "command": "npm",
233
- "args": ["run", "--prefix", "/path/to/project", "mcp:start"],
234
- "env": { "MCP_PROJECT_ROOT": "/path/to/project" }
68
+ "command": "npx",
69
+ "args": ["-y", "-p", "graph-indexer", "idx-mcp", "--repo", "/path/to/your/repo"]
235
70
  }
236
71
  }
237
72
  }
238
73
  ```
239
74
 
240
- **Cursor** (`.cursor/mcp.json`) and **Claude Code** (`.mcp.json`):
75
+ #### VS Code — `.vscode/mcp.json`
76
+
241
77
  ```json
242
78
  {
243
- "mcpServers": {
79
+ "servers": {
244
80
  "graph-indexer": {
245
- "command": "npm",
246
- "args": ["run", "mcp:start"],
247
- "env": { "MCP_PROJECT_ROOT": "${workspaceFolder}" }
81
+ "command": "npx",
82
+ "args": ["-y", "-p", "graph-indexer", "idx-mcp", "--repo", "/path/to/your/repo"]
248
83
  }
249
84
  }
250
85
  }
251
86
  ```
252
87
 
253
- **VS Code** (`.vscode/mcp.json`):
88
+ #### Claude Desktop — `claude_desktop_config.json`
89
+
254
90
  ```json
255
91
  {
256
- "servers": {
92
+ "mcpServers": {
257
93
  "graph-indexer": {
258
- "type": "stdio",
259
- "command": "npm",
260
- "args": ["run", "mcp:start"],
261
- "env": { "MCP_PROJECT_ROOT": "${workspaceFolder}" }
94
+ "command": "npx",
95
+ "args": ["-y", "-p", "graph-indexer", "idx-mcp", "--repo", "/path/to/your/repo"]
262
96
  }
263
97
  }
264
98
  }
265
99
  ```
266
100
 
267
- The server reads the backend from `.graph-indexer.json`, so the same launch config works for both the in-memory and SQLite indexes.
268
-
269
- ### 4. Add the agent system prompt
270
-
271
- Copy [PROMPT.md](./PROMPT.md) into your AI agent's system prompt to instruct it to use graph-indexer tools instead of reading files directly.
272
-
273
- ---
274
-
275
- ## Storage backends
276
-
277
- The same index, the same tools, the same ranking — two ways to hold the data. The MCP tools are written against a storage contract and never see which backend is active.
278
-
279
- | Backend | Default | Resident RAM* | Dependencies | Best for |
280
- | :--- | :--- | ---: | :--- | :--- |
281
- | **In-memory** | ✅ | ~586 MB | none | Single packages and services; instant cold start. |
282
- | **SQLite** | `--use-sqlite` | ~79 MB | none — uses Node's built-in `node:sqlite` | Monorepos / 1M+ LOC where holding every chunk in the heap would OOM. |
283
-
284
- > *Resident set serving the **same** 50,000-chunk corpus, measured in isolated processes by
285
- > [test/scale.mjs](test/scale.mjs). The in-memory engine keeps every chunk and the full inverted
286
- > index in the heap, so its footprint grows with the codebase; the SQLite store keeps only the
287
- > small file-level dependency graph resident and reads chunks, posting lists and vectors from disk
288
- > on demand, so its footprint stays flat regardless of corpus size — an **87% smaller** resident
289
- > set here, and the gap widens as the repo grows.
290
-
291
- The SQLite backend adds **no external dependency**: `node:sqlite` ships inside Node (v22.5+). Lexical BM25 reads from an indexed `postings` table, symbols and call edges from indexed columns, and vectors live in the shared `code-index.embeddings.bin` — point reads are `pread` on demand. Because both backends feed the same fusion-and-boost ranker with deterministic tie-breaking, switching is purely an operational choice with **zero** quality trade-off (identical top-5 ids on the full benchmark).
292
-
293
- ### Vector search that stays fast at monorepo scale
294
-
295
- Below 10k vectors the semantic channel runs an exact streaming scan of the bin (~20 ms worst
296
- case). Above it, a **binary-quantized sketch** takes over: each vector's sign bits (768 dims →
297
- 96 bytes, 0.1 % of the float data) are kept in RAM; a query does a Hamming-distance pass over
298
- packed Uint32 words, then exact-cosine rescores only the top candidates from disk. Measured on
299
- synthetic corpora (warm):
300
-
301
- | Corpus | Exact scan | Sketch | Speedup | Sketch RAM |
302
- | ---: | ---: | ---: | ---: | ---: |
303
- | 50,000 vectors | 104 ms | **5–11 ms** | ~20× | ~9 MB |
304
- | 200,000 vectors | 519 ms | **11 ms** | ~36× | ~35 MB |
305
-
306
- The sketch recovers the exact top-10 (10/10 in validation) because it rescores 2× the candidate
307
- budget with true cosine before ranking. It is **append-aware**: daemon updates extend it by
308
- scanning only the unseen tail of the bin, and a full re-index is detected by fingerprint and
309
- triggers a rebuild. `test/scale.mjs` asserts hybrid queries stay interactive (<60 ms) at 50k
310
- chunks on both backends.
311
-
312
- ```bash
313
- npm run mcp:index -- --use-sqlite # writes code-index.db
314
- ```
315
-
316
- ### Live updates on both backends
317
-
318
- The watch daemon keeps **whichever backend is configured** fresh, incrementally:
319
-
320
- - **In-memory** — the daemon rewrites the JSON snapshot; a running MCP server watches the file and reloads it automatically.
321
- - **SQLite** — each file save becomes one WAL transaction (`applyFileUpdate`): the file's old chunks, postings and call edges are replaced with exact BM25 bookkeeping, and new vectors are *appended* to the embeddings bin (O(changed chunks), never a full rewrite). Running MCP servers detect the commit via `PRAGMA data_version` on their next query and refresh themselves — no re-indexing, no restarts.
322
-
323
- Daemon startup is also O(changed files): files older than the index artifact are skipped during the initial scan, so edits made while the daemon was down are picked up without re-parsing the whole repo.
324
-
325
- ---
326
-
327
- ## Semantic enrichment
328
-
329
- Embeddings match text proximity, not intent. A query like *"payment gateway webhook bottleneck"* misses the function that handles it if that function never spells out those words. Enrichment closes that gap.
330
-
331
- With `--llm-enrichment`, the indexer routes every substantive **production-source chunk** (tests, specs and example trees are excluded — agents search for implementations) through a local LLM via Ollama, producing per chunk:
332
-
333
- - a one-line **summary** in developer vocabulary, and
334
- - a set of **concept tags** (e.g. `authentication, JWT, middleware`).
335
-
336
- These ride **three** retrieval paths: the tags join the chunk's BM25 lexical document as high-IDF domain terms; the summary leads the code-payload embedding; and — decisive for natural-language queries — each enriched chunk gets a **second, summary-only vector**. A one-line behavioural query embeds far closer to a one-line summary than to hundreds of characters of code, so conceptual searches hit code that shares none of their words.
337
-
338
- Enrichment is **incremental**: results are cached in `code-index.enrichment.json` keyed by content hash, so a re-index only sends new or changed code to the LLM (the embedding cache keys account for enrichment too, so nothing is re-embedded needlessly). Each run enriches up to `maxChunks` new chunks, ordered by file centrality (PageRank), and coverage accumulates across runs. The watch daemon re-attaches cached enrichment on every file save and live-enriches changed chunks. Generation is best-effort — if the model is unreachable the index is built without enrichment rather than failing.
339
-
340
- ```bash
341
- ollama pull qwen2.5-coder:1.5b
342
- npm run mcp:index -- --llm-enrichment
343
- ```
344
-
345
- The model, the file-selection ratio and the per-run cap are all configurable (see [Configuration](#configuration)). Enrichment is fully optional and leaves the default index byte-for-byte unchanged when disabled.
346
-
347
- ### LLM reranking (query time, opt-in)
348
-
349
- Fusion resolves most queries, but a natural-language query can end in a near-tie between the
350
- semantically right chunk and a lexically similar neighbour — a gap no static boost can close.
351
- With `rerank.enabled` (or `search_code(..., rerank: true)`), the fused top-8 is shown to a local
352
- LLM judge — one line per candidate — which reorders them. Measured effect on the strict semantic
353
- channel: **rank-1 0.23 → 0.35, MRR 0.37 → 0.47, success@5 0.55 → 0.65**, with the symbolic
354
- channel untouched (the judge only fires on natural-language queries, never on symbol lookups or
355
- `exact_tokens` calls). Cost: one generation call (~1–2 s with `qwen2.5-coder:7b`). Best-effort —
356
- any model failure preserves the original order.
357
-
358
- ---
359
-
360
- ## MCP tools
361
-
362
- ### `search_code`
363
-
364
- Hybrid BM25 + vector search over the index. The primary entry point for agents.
365
-
366
- | Parameter | Type | Default | Description |
367
- | :--- | :--- | :--- | :--- |
368
- | `query` | string | required | Natural language description of the logic to find |
369
- | `exact_tokens` | string? | — | Exact symbol name — guarantees rank-1 placement |
370
- | `detail` | `"signatures"` \| `"smart"` \| `"full"` | `"smart"` | How much code to return per result |
371
- | `top_k` | number | `5` | Results to return (1–20) |
372
- | `include_topology` | boolean | `true` | Include imports / used-by / calls |
373
- | `min_score` | number | `0.3` | Minimum relevance threshold |
374
- | `token_budget` | number? | auto | Cap total tokens returned |
375
- | `rerank` | boolean? | config | LLM-judge rerank for natural-language queries (see `rerank.*` config) |
376
-
377
- **`detail` levels:**
101
+ > **Note:** The `-p graph-indexer idx-mcp` form is required — `npx graph-indexer` runs the setup wizard, not the MCP server. If `npx` isn't on your GUI PATH (common on macOS when launching editors from Finder/Dock), run the guided setup instead — it writes absolute paths that always work.
378
102
 
379
- | Value | Cost | Returns |
380
- | :--- | ---: | :--- |
381
- | `"signatures"` | ~20 tok | Name, type, params, return type, topology |
382
- | `"smart"` (default) | ~150 tok | Signature + lines relevant to the query |
383
- | `"full"` | ~300 tok | Signature + complete source body |
103
+ </details>
384
104
 
385
- For purely conceptual queries with no lexical overlap, `"smart"` falls back to a structural skeleton — control-flow lines and call sites — so the agent always gets meaningful signal about what the code does, never a blind truncation.
105
+ Once connected, the agent can call `search_code`. A query like `search_code("rate limiting middleware")` returns ranked semantic chunks, not whole files:
386
106
 
387
- ---
388
-
389
- ### `resolve_symbol`
390
-
391
- O(1) lookup by exact name — no search ranking needed.
392
-
393
- | Parameter | Type | Description |
394
- | :--- | :--- | :--- |
395
- | `symbol` | string | Exact function, class, or type name (e.g. `"validateToken"`) |
396
-
397
- ---
398
-
399
- ### `get_chunk`
400
-
401
- Returns the source code of a single chunk by its ID.
402
-
403
- | Parameter | Type | Default | Description |
404
- | :--- | :--- | :--- | :--- |
405
- | `chunk_id` | string | required | ID from `search_code` results |
406
- | `view` | `"full"` \| `"signature"` | `"full"` | Full body or first line only |
407
-
408
- ---
409
-
410
- ### `get_chunk_summary`
411
-
412
- Signature + docstring + calls without the body. ~50 tokens vs ~300 for full.
413
-
414
- | Parameter | Type | Default | Description |
415
- | :--- | :--- | :--- | :--- |
416
- | `chunk_id` | string | required | ID from `search_code` results |
417
- | `expand_calls` | boolean | `false` | Resolve each outgoing call's signature inline (~150 tok) instead of issuing a follow-up tool call per dependency |
418
-
419
- ---
420
-
421
- ### `get_file_skeleton`
422
-
423
- All top-level exports and definitions in a file with line numbers — no bodies.
424
-
425
- | Parameter | Type | Description |
426
- | :--- | :--- | :--- |
427
- | `file_path` | string | Relative path (e.g. `src/utils/auth.ts`) |
428
-
429
- ---
430
-
431
- ### `get_call_graph`
432
-
433
- Every chunk across the repo that calls a specific function.
434
-
435
- | Parameter | Type | Description |
436
- | :--- | :--- | :--- |
437
- | `target_function` | string | Exact function name (e.g. `"validateToken"`) |
438
-
439
- Call this before modifying any exported function to find all affected call sites.
440
-
441
- ---
442
-
443
- ### `get_repo_map`
444
-
445
- Compact symbol map ordered by PageRank (most-imported files first). Orients agents in an unfamiliar codebase in ~1,500 tokens.
446
-
447
- | Parameter | Type | Default | Description |
448
- | :--- | :--- | :--- | :--- |
449
- | `path_filter` | string? | — | Limit to files whose path contains this string |
450
- | `max_files` | number | `80` | Maximum files to include |
451
- | `sort_by` | `"importance"` \| `"path"` | `"importance"` | Sort order |
452
-
453
- ---
454
-
455
- ### `list_index_stats`
456
-
457
- Index health snapshot: storage backend, chunk count, file count, symbol table size, vector count, search mode, daemon status, index age.
458
-
459
- ---
460
-
461
- ### `graph://dependencies/{file_path}` (resource)
462
-
463
- Full bidirectional dependency topology for a file: what it imports and what imports it.
464
-
465
- ---
466
-
467
- ## Configuration
468
-
469
- ### `.graph-indexer.json`
470
-
471
- All persistent settings live in one file at the project root, written by `init` and read by the indexer, watcher and server:
472
-
473
- ```json
474
- {
475
- "languages": ["typescript", "javascript", "python"],
476
- "storage": "sqlite",
477
- "enrichment": {
478
- "enabled": true,
479
- "model": "qwen2.5-coder:1.5b",
480
- "coreRatio": 0.15,
481
- "maxChunks": 400
107
+ ```jsonc
108
+ [
109
+ {
110
+ "score": 8.41,
111
+ "chunk": {
112
+ "id": "src/middleware/rateLimit.ts:14",
113
+ "file_path": "src/middleware/rateLimit.ts",
114
+ "name": "rateLimiter",
115
+ "node_type": "function_declaration",
116
+ "start_line": 14, "end_line": 47,
117
+ "calls": ["tokenBucket", "getClientKey"],
118
+ "class_context": ""
119
+ }
482
120
  }
483
- }
121
+ ]
484
122
  ```
485
123
 
486
- | Key | Default | Description |
487
- | :--- | :--- | :--- |
488
- | `languages` | all installed | Parsers to load. Valid keys: `typescript`, `javascript`, `python`, `go`, `rust`, `php`, `java`, `kotlin`, `csharp`, `ruby`, `css`. |
489
- | `storage` | `"memory"` | `"memory"` (in-heap, zero-dependency) or `"sqlite"` (disk-backed). |
490
- | `ollamaHost` | `"http://localhost:11434"` | Ollama endpoint (also settable via `OLLAMA_HOST`). |
491
- | `embedModel` | `"nomic-embed-text"` | Embedding model (index and queries must use the same one). |
492
- | `enrichment.enabled` | `false` | Run local-LLM enrichment during indexing. |
493
- | `enrichment.model` | `"qwen2.5-coder:1.5b"` | Ollama model used for generation. |
494
- | `enrichment.coreRatio` | `1.0` | Share of production files eligible (by PageRank). `1.0` = all; tests/examples are always excluded. |
495
- | `enrichment.maxChunks` | `500` | Cap on **new** LLM calls per index run — the cache accumulates coverage across runs. |
496
- | `enrichment.concurrency` | `12` | Parallel Ollama requests during enrichment. |
497
- | `rerank.enabled` | `false` | LLM-judge reranking of natural-language queries (+50% semantic rank-1, ~1–2 s per NL query). |
498
- | `rerank.model` | `"qwen2.5-coder:7b"` | Judge model. Quality matters: 7B measured a large gain where 1.5B measured ~none. |
499
- | `rerank.topM` | `8` | Fused results shown to the judge (8 measured better than 10). |
500
-
501
- ### CLI flags
502
-
503
- Flags override the config file for a single run:
504
-
505
- | Flag | Equivalent |
506
- | :--- | :--- |
507
- | `--repo <dir>` | Index a directory other than the cwd |
508
- | `--use-sqlite` | `"storage": "sqlite"` |
509
- | `--llm-enrichment` | `"enrichment.enabled": true` |
510
- | `--enrich-model <name>` | `"enrichment.model"` |
511
- | `--enrich-max <n>` | `"enrichment.maxChunks"` for this run |
512
- | `--enrich-concurrency <n>` | `"enrichment.concurrency"` for this run |
513
-
514
- ### Environment variables
515
-
516
- | Variable | Default | Description |
517
- | :--- | :--- | :--- |
518
- | `MCP_PROJECT_ROOT` | `process.cwd()` | Project root directory |
519
- | `OLLAMA_HOST` | `http://localhost:11434` | Ollama API endpoint |
520
- | `INDEXER_EMBEDDINGS` | — | Set to `off` to disable vector embeddings |
521
-
522
- Re-run `init` at any time to change languages, or `init --all-languages` to enable every installed parser without the prompt.
124
+ The agent can then call `get_call_graph("rateLimiter")` to see what calls it (the blast radius) before changing it.
523
125
 
524
- ---
126
+ ## Guided setup
525
127
 
526
- ## Supported languages
128
+ `npx graph-indexer <path>` runs an interactive wizard that leaves the repo ready to use. It is **idempotent** — re-run it whenever you add a language or change a setting; it merges into what you already have and never clobbers another tool's config. Every generated file lands in `.graph-indexer/` (git-ignored), so your repo root stays clean.
527
129
 
528
- | Language | Extensions | Chunks extracted |
529
- | :--- | :--- | :--- |
530
- | TypeScript / TSX | `.ts`, `.tsx` | functions, classes, methods, exports |
531
- | JavaScript | `.js`, `.jsx`, `.mjs`, `.cjs` | functions, classes, expressions |
532
- | Python | `.py` | functions, classes |
533
- | Go | `.go` | functions, methods, types |
534
- | Rust | `.rs` | fn, struct, enum, trait, impl |
535
- | Java | `.java` | class, method, interface, constructor, enum |
536
- | Kotlin | `.kt`, `.kts` | function, class, object, companion |
537
- | C# | `.cs` | class, method, interface, property, enum |
538
- | Ruby | `.rb` | method, class, module |
539
- | PHP | `.php` | function, class |
540
- | CSS / SCSS | `.css`, `.scss` | rule sets |
130
+ Before the steps, it scans the repo to pre-select your stack — languages from a bounded file walk, frameworks from your manifests (`package.json`, `pyproject.toml`, `composer.json`, `pom.xml`, `Gemfile`, `*.csproj`, …) — and, if it finds a pre-v1.4 layout, tidies those stray artifacts into `.graph-indexer/` first. Then six steps:
541
131
 
542
- Oversized "god classes" are split automatically: a class longer than ~200 lines is indexed as a compact skeleton header plus one independently searchable chunk per method, so a single `get_chunk` never blows the token budget and every method stays reachable by search.
132
+ | Step | You choose | What happens |
133
+ |------|------------|--------------|
134
+ | **1 · Languages** | Languages to index | Detected languages are pre-checked — press Enter to accept. Selecting none indexes **all** supported languages. |
135
+ | **2 · Frameworks** | Prompt add-ons | Filtered to your languages and pre-checked from detection. Sharpens the agent prompt for React, Express/NestJS, FastAPI/Django, Spring, Rails, Laravel/Symfony, ASP.NET, or Android. |
136
+ | **3 · Search engine & LLM** | Retrieval engine | **Press Enter for the recommended default** — lexical search, no LLM, no network. Everything heavier is opt-in (see below). |
137
+ | **4 · Agents & IDEs** | Your coding tools | Multi-select which agents to wire: Claude Code/Desktop, Cursor, VS Code/Copilot, Windsurf, Cline/Roo, JetBrains Junie, Codex (AGENTS.md), Gemini CLI. Pre-checked from your saved choice, else what's detected, else all. Drives steps 5 **and** 7 — deselect a tool and graph-indexer generates nothing for it. |
138
+ | **5 · MCP server wiring** | *(automatic)* | Wires the MCP server for each **selected** editor (VS Code, Cursor, Claude Desktop, Claude Code). **Merge-safe**: your other MCP servers and keys are preserved. |
139
+ | **6 · Project files & daemon** | *(automatic)* | Adds `mcp:*` npm scripts (index + daemon control), a managed `.gitignore` block, and `.graph-indexer/config.json` (which remembers your agent selection). |
140
+ | **7 · Agent instructions** | *(automatic)* | Always writes the canonical layered prompt (`GRAPH_INDEXER_PROMPT.md`) + a `GRAPH_INDEXER_DOMAIN.md` template for your own rules. Then, for each **selected** agent: `@`-imports (no duplication) in `CLAUDE.md` and `GEMINI.md`; rule files for Cursor, Windsurf, and Cline/Roo; and managed blocks in `.github/copilot-instructions.md`, `.junie/guidelines.md`, and `AGENTS.md` (Codex/Zed/Jules) — preserving anything already there. |
543
141
 
544
- ---
142
+ It finishes with a grouped summary (created / updated / kept / skipped / warnings), offers to **build the index now**, and prints your next steps.
545
143
 
546
- ## How it works
144
+ **Most repos need nothing past step 3's default** — the lexical engine has zero dependencies and works in any language. Step 3 only branches when you decline the defaults:
547
145
 
548
- ### Architecture
146
+ - **Storage** — `auto` (in-memory, promoting to SQLite past ~15k chunks), or force in-memory / SQLite.
147
+ - **Embeddings** — `off` (default), `auto`, **Ollama**, **local** (in-process MiniLM, ~25 MB on first index), or **Apple Metal (MLX)** on macOS. Ollama is probed only when you actually pick it; choosing MLX offers to provision its Python venv on the spot.
148
+ - **Enrichment / reranker** — off by default. A measured per-language note is shown before the reranker prompt (it helps Go/Python, regresses JS/TS). Model pickers are provider-aware, and if you select MLX the wizard verifies `mlx_lm.server` end-to-end — installing `mlx-lm`, starting the server, and pre-loading the model — so your first index can't fail against a server that isn't up.
549
149
 
550
- graph-indexer is organised around a small set of cohesive modules with a strict separation between *retrieval math*, *storage*, and *transport*:
551
-
552
- ```
553
- config.mjs Resolves CLI flags > env > .graph-indexer.json into one config.
554
- parser-utils.mjs Tree-sitter parsing, chunk extraction, Ollama embeddings.
555
- search-core.mjs Shared retrieval math: tokenisation, BM25, RRF fusion + boosts
556
- (query-adaptive NL weighting), PageRank, embedding cache keys.
557
- The numbers are measured once here and reused.
558
- core-engine.mjs MemoryGraphIndex — the default in-heap store — plus the
559
- embeddings-bin codecs (write/read/append/scan) and the
560
- binary-quantized vector sketch (Hamming prefilter + rescore).
561
- sqlite-store.mjs SqliteGraphStore — the disk-backed store (node:sqlite) with
562
- per-file incremental writes and data_version live refresh.
563
- storage.mjs createStore(config) — picks a backend; documents the contract
564
- both implement (searchHybrid, getChunk, applyFileUpdate, …).
565
- enrichment.mjs Optional LLM summaries + concept tags, cached by content hash.
566
- mcp-tools.mjs The eight tools, written against the storage contract only.
567
- mcp-server.mjs Thin bootstrap: config → store → tools → stdio.
568
- indexer.mjs Bootstrap indexer. watch-daemon.mjs Incremental updates.
569
- ```
150
+ ### Non-interactive & preview
570
151
 
571
- Because both stores call the identical `fuseAndRank` from `search-core`, the in-memory and SQLite backends are rank-consistent by construction, and a single change to the ranking math applies everywhere.
152
+ | Flag | Effect |
153
+ |------|--------|
154
+ | `--yes`, `-y` | Accept all detected/default selections — no prompts (CI). |
155
+ | `--dry-run` | Print every file action without writing anything. |
156
+ | `--all-languages` | Index every supported language (implies `--yes`). |
157
+ | `--help`, `-h` | Show usage. |
572
158
 
573
- ### Indexing
159
+ Setup also runs non-interactively whenever stdin isn't a TTY, so piping into it behaves like `--yes`.
574
160
 
575
- When you run `npm run mcp:index`:
161
+ ## How it works
576
162
 
577
- 1. **Parses** every source file with Tree-sitter — no regex, exact AST boundaries.
578
- 2. **Extracts chunks**: named functions, classes, methods, and exports — including Go/Rust `type`/`struct` declarations by their real name — each with docstring, parameters, return type, call sites, type references, **decorators/annotations** (`@Controller`, `@Injectable`, `@app.route`), and **inheritance edges** (`extends`/`implements`/base classes).
579
- 3. **Builds a dependency graph**: bidirectional import map so each chunk knows what it imports and what imports it.
580
- 4. **(Optional) Enriches** production-source chunks with LLM summaries + concept tags (cache-first; only new code pays an LLM call).
581
- 5. **Creates two indexes**: a BM25 inverted index (lexical) and per-chunk float32 embeddings via Ollama `nomic-embed-text` (optional) — two vectors per enriched chunk (code payload + summary-only).
582
- 6. **Persists** to the configured backend: `code-index.json` + `code-index.embeddings.bin`, or `code-index.db` + the same embeddings binary.
163
+ - **AST indexing.** Tree-sitter parses each file into a syntax tree, and the indexer extracts one *chunk* per top-level definition (function, class, method, struct, …) with its name, parameters, line range, call sites, and enclosing class. A "god class" is split so its methods become their own chunks. Supported languages: **TypeScript/JavaScript** (`.ts .tsx .js .jsx .mjs .cjs`), **Python**, **Go**, **Rust**, **Java**, **Kotlin**, **C#**, **C**, **Ruby**, **PHP**, **Bash**, and **Swift**, plus **CSS/SCSS**.
164
+ - **Retrieval.** A hybrid ranker fuses a lexical channel (BM25 with camelCase splitting and language-agnostic Porter stemming) with an optional dense-vector channel (local embeddings) via Reciprocal Rank Fusion. With embeddings off, only the lexical channel runs — and it is the default.
165
+ - **Call graph.** `get_call_graph` returns the callers and callees of a symbol — the *blast radius* of a change — so an agent can see what it might break before editing code it never read.
166
+ - **Backend parity.** The in-memory and SQLite backends share the same ranking core, so they return identical top-5 results for the same query (enforced by `test/sqlite.mjs`).
167
+
168
+ ### MCP tools
169
+
170
+ | Tool | Returns |
171
+ |------|---------|
172
+ | `search_code` | Ranked semantic chunks for a natural-language or symbol query. |
173
+ | `get_chunk` | The full source of one chunk by id. |
174
+ | `get_chunk_summary` | A compact summary of a chunk (signature, calls, context). |
175
+ | `resolve_symbol` | Exact, case-insensitive symbol lookup by name. |
176
+ | `get_file_skeleton` | The top-level structure (symbols + signatures) of a file. |
177
+ | `get_call_graph` | Callers and callees of a symbol — the blast radius. |
178
+ | `find_references` | Where a symbol is used: callers, subclasses, and type references. |
179
+ | `find_routes` | HTTP routes mapped to their handler chunks (NestJS, FastAPI/Flask, Spring, Express/Koa). |
180
+ | `get_subgraph` | A bounded connected subgraph around a seed symbol — its callees, high-confidence callers, and type/inheritance users, in one call. |
181
+ | `get_repo_map` | A high-level map of the repository's modules and topology. |
182
+ | `list_index_stats` | Index health: chunk/file/symbol/vector counts and the active config. |
583
183
 
584
- A background watcher daemon applies changed files incrementally to **either** backend (JSON
585
- snapshot rewrites for in-memory, per-file WAL transactions for SQLite). It respects
586
- `.gitignore` and skips `node_modules`, build output, and dot-directories, so it never traverses
587
- (or exhausts OS file-watcher limits on) dependency trees.
184
+ ## Configuration
588
185
 
589
- ### Search pipeline
186
+ Everything beyond the lexical default is opt-in. The server, indexer, and daemon all print their **effective configuration** at startup (storage backend, model names, which optional features are on), and emit a visible warning whenever an opt-in feature has a known trade-off — nothing is enabled silently.
187
+
188
+ ### Headline trade-offs
189
+
190
+ | Option | Default | When to enable | Cost |
191
+ |--------|---------|----------------|------|
192
+ | `--embeddings` | off | Larger repos where recall matters; lifts success@5 | Requires Ollama or the in-process MiniLM model; slower indexing |
193
+ | `--embed-model qwen3-embedding:4b` | `nomic-embed-text` | Better code recall + symbolic precision | slower indexing; requires Ollama |
194
+ | `--enrichment` | off | Only useful paired with `--rerank`; alone it regresses | slowest indexing |
195
+ | `--rerank` | off | Go/Python repos with weak semantic recall; regresses JS repos | Requires an Ollama 7B model; adds query latency |
196
+ | `--use-sqlite` | `auto` | Repos past ~15k chunks or memory-constrained environments | Slightly higher query latency; needs Node 22+ |
197
+
198
+ For most repos, the default (lexical + stemming, no embeddings) is the right starting point. Enable embeddings when you notice the agent missing chunks it should find. Enable the reranker only on Go or Python repos after measuring whether it helps — it is known to regress JavaScript repositories.
199
+
200
+ ### All CLI flags
201
+
202
+ | Flag | Default | Effect |
203
+ |------|---------|--------|
204
+ | `--repo <path>` | current directory | Repository to index / serve. |
205
+ | `--embeddings` | off | Enable the dense-vector channel. |
206
+ | `--embed-model <model>` | `nomic-embed-text` | Ollama embedding model (e.g. `qwen3-embedding:4b`). |
207
+ | `--embed-provider <auto\|ollama\|local\|mlx\|off>` | `auto` | Force the embedding backend (see [Embedder backends](#embedder-backends)). |
208
+ | `--mlx-embed-model <model>` | `mlx-community/all-MiniLM-L6-v2-4bit` | Model loaded by the MLX (Apple Metal) embedder. |
209
+ | `--use-sqlite` | `auto` | Force the disk-backed SQLite backend. |
210
+ | `--enrichment` | off | Enable LLM enrichment of central chunks. |
211
+ | `--enrich-model <model>` | `qwen2.5-coder:1.5b` | Model used for enrichment. |
212
+ | `--enrich-max <n>` | 500 | Cap on new LLM calls per index run. |
213
+ | `--enrich-concurrency <n>` | 4 | Parallel Ollama requests during enrichment. |
214
+ | `--rerank` | off | Enable the LLM reranker (one call per NL query). |
215
+ | `--no-git-signals` | (signals on) | Skip collecting local git churn/recency/co-change. |
216
+ | `--git-rank-boost <0..1>` | 0 | Opt-in weight for git recency/churn in ranking (0 = ranking unchanged). |
217
+ | `--llm-provider <ollama\|mlx>` | `ollama` | LLM backend for enrichment, reranking, and HyDE. `mlx` routes calls to a local `mlx_lm.server`. |
218
+ | `--mlx-lm-host <url>` | `http://localhost:8080` | Endpoint for the `mlx_lm.server` when `--llm-provider mlx` is set. |
219
+
220
+ ### All environment variables
221
+
222
+ | Variable | Default | Effect |
223
+ |----------|---------|--------|
224
+ | `MCP_PROJECT_ROOT` | current directory | Repository root when `--repo` is not given. |
225
+ | `OLLAMA_HOST` | `http://localhost:11434` | Ollama endpoint for embeddings/enrichment/rerank. |
226
+ | `INDEXER_EMBEDDINGS` | `off` | `on` enables embeddings; `off` always wins over `--embeddings`. |
227
+ | `EMBED_MODEL` | `nomic-embed-text` | Ollama embedding model (overrides config; overridden by `--embed-model`). |
228
+ | `INDEXER_EMBED_PROVIDER` | `auto` | `auto` \| `ollama` \| `local` \| `mlx` \| `off`. |
229
+ | `INDEXER_MLX_EMBED_MODEL` | `mlx-community/all-MiniLM-L6-v2-4bit` | Model loaded by the MLX embedder (overridden by `--mlx-embed-model`). |
230
+ | `INDEXER_MLX_BATCH_SIZE` | 32 | Texts per batch sent to the MLX subprocess (raise on large unified memory). |
231
+ | `INDEXER_STORAGE` | `auto` | `auto` \| `memory` \| `sqlite`. |
232
+ | `ENRICH_MODEL` | (unset) | Naming a model enables enrichment and selects it. |
233
+ | `RERANK_MODEL` | (unset) | Naming a model enables the reranker and selects it. |
234
+ | `INDEXER_GIT_SIGNALS` | (on) | Set to `off` to skip git-signal collection. |
235
+ | `INDEXER_GIT_RANK_BOOST` | 0 | Opt-in git recency/churn ranking weight (0..1). |
236
+ | `INDEXER_LLM_PROVIDER` | `ollama` | LLM backend for enrichment, reranking, and HyDE: `ollama` or `mlx`. |
237
+ | `INDEXER_MLX_LM_HOST` | `http://localhost:8080` | Endpoint for the `mlx_lm.server` when `INDEXER_LLM_PROVIDER=mlx`. |
238
+ | `INDEXER_EMBED_CONCURRENCY` | 4 | Parallel embedding batches; lower to 1 for large models on modest hardware. |
239
+ | `INDEXER_EMBED_TIMEOUT_MS` | 120000 | Per-batch embedding timeout; raise for very large models. |
240
+
241
+ When embeddings are enabled, the provider is selected in this order, and every fallback is logged (never silent): Ollama with `EMBED_MODEL` if set and reachable → Ollama with `nomic-embed-text` → the in-process MiniLM model (optional `@huggingface/transformers`) → lexical-only with a warning.
242
+
243
+ ### Embedder backends
244
+
245
+ Set the backend with `--embed-provider` (or `INDEXER_EMBED_PROVIDER`). `mlx` is a native Python embedder that runs the Apple Metal GPU as a reused subprocess — faster in-process vectors than the bundled Xenova path, with no running Ollama daemon. The in-process (`local`) and `mlx` backends produce all-MiniLM-L6-v2-family **384-dim** vectors; the default `auto`→Ollama path uses `nomic-embed-text` (768-dim).
246
+
247
+ | Backend | `--embed-provider` | Platform | Throughput¹ | Setup |
248
+ |---------|--------------------|----------|-------------|-------|
249
+ | Auto (Ollama → local → off) | `auto` (default) | any | varies | none |
250
+ | In-process (Xenova) | `local` | any | ~18 ch/s | `npm i @huggingface/transformers` |
251
+ | **Apple Metal (MLX)** | **`mlx`** | **macOS Apple Silicon** | **~42 ch/s** | `npm run embed:setup:mlx` |
252
+ | Ollama daemon | `ollama` | any | ~14 ch/s² | `ollama serve` + `ollama pull` |
253
+
254
+ ¹ **Throughput is hardware-dependent.** These figures are the median of 3 cold builds on an **Apple M2 Mac mini (24 GB)** indexing the `express-js` fixture (389 chunks): `node bench/cell.mjs express-js <E0|E0_MLX|O0>`. Expect different numbers on other chips; reproduce on your own machine. Throughput also varies with system load, model warm state, and corpus size — larger repos amortize cold-start better (e.g. Ollama/nomic reaches ~32 ch/s on the larger `gin` corpus).
255
+
256
+ ² On Apple Silicon, Ollama already uses the Metal GPU internally (via llama.cpp). The `mlx` provider's advantage comes from a smaller model (all-MiniLM-L6-v2-4bit, 22M params, 384-dim) and no HTTP round-trip, not from GPU vs CPU.
257
+
258
+ The index records which provider/model built it (in the `code-index.embeddings.bin.meta.json` sidecar) and queries with the same one, so vectors never get mixed across models. Switching providers or the MLX model between builds is detected and triggers a clean re-embed.
259
+
260
+ **macOS Apple Silicon (recommended):**
590
261
 
591
- ```
592
- Source files
593
- │
594
- ▼
595
- Tree-sitter AST
596
- │
597
- ├──► Chunks ──► BM25 inverted index ──┐
598
- │ └──► Float32 embeddings ──┤── RRF fusion ──► Ranked results ──► MCP tools
599
- │ │ (search-core)
600
- └──► Dependency graph ────────────────┘
262
+ ```bash
263
+ npm run embed:setup:mlx # one-time: creates embedders/venv-mlx + installs MLX
264
+ npx idx-index --repo . --embeddings --embed-provider mlx
601
265
  ```
602
266
 
603
- 1. **BM25 lexical search** — O(query_terms) over the inverted index / `postings` table.
604
- 2. **Vector search** — exact cosine below 10k vectors; binary-sketch Hamming prefilter +
605
- exact rescore above it (5–11 ms at 50k+, see [Storage backends](#storage-backends)). Both
606
- code and summary vectors compete; hits fold onto their chunk through one shared finalizer.
607
- 3. **RRF fusion** merges both lists — lexical-led (1.5×/1.0×) for keyword queries,
608
- vector-led (1.0×/1.6×) for natural-language ones.
609
- 4. **Score boosts**: exact name match +2.0× (df-gated, plural-aware), suffix match +1.4×,
610
- path token +1.4×, test/example files demoted; on NL queries, boosts require semantic
611
- agreement (the chunk must also be a vector candidate).
612
- 5. **(Opt-in) LLM rerank** of the fused top-8 on natural-language queries.
267
+ `embed:setup:mlx` provisions a **dedicated Python virtualenv** under `embedders/venv-mlx` (so MLX's deps never touch your system Python) and is idempotent — re-running it is a no-op once ready. The interactive setup (`npx graph-indexer`) offers MLX directly and can run this step for you. The first index downloads the model (~90 MB) into the Hugging Face cache; later builds reuse it.
613
268
 
614
- ---
615
-
616
- ## Best practices
617
-
618
- **Write descriptive docstrings.** Docstrings are embedded alongside code — better documentation directly improves semantic search quality.
619
-
620
- **Use specific function names.** Names like `fetchAndCacheUserProfile` trigger the exact-name boost (2.0×) and reliably appear as rank-1 results when queried by name.
621
-
622
- **Export named functions, not anonymous ones.** Anonymous default exports can't be targeted by `resolve_symbol` and rank lower in name-boost scoring.
269
+ Choose a different MLX model with `--mlx-embed-model <id>` (or `INDEXER_MLX_EMBED_MODEL`); it must be an `mlx_embeddings`-compatible sentence model, and the default `mlx-community/all-MiniLM-L6-v2-4bit` is the proven option. Tune batch size with `INDEXER_MLX_BATCH_SIZE` (default 32; lower to 16 on 8 GB machines, raise to 64 on M-series Max/Ultra). `mlx` is macOS-only; requesting it elsewhere fails fast with the alternative to use.
623
270
 
624
- **Avoid catch-all utility files.** Files that mix unrelated utilities produce weaker per-chunk signals. One responsibility per module indexes more cleanly.
271
+ ## Benchmarks
625
272
 
626
- **Reach for the SQLite backend when the heap gets tight.** If indexing a large monorepo pushes Node toward its memory limit, switch to `--use-sqlite`; retrieval quality is identical and resident memory stops scaling with the codebase.
273
+ Every number here is produced by the eval harness on cold, isolated builds — never hand-edited — with **strict scoring** (exact symbol match, no file-path fallback) against a **held-out** split (~20–25% per language, never used to tune). Reproduce it all with `npm run test:eval`.
627
274
 
628
- ---
275
+ What the measurements say, across 18 real-world fixtures spanning every supported language:
629
276
 
630
- ## Troubleshooting
277
+ - **The zero-dependency lexical default is the right starting point.** It wins the held-out metric outright on 2 fixtures, and 6 more need only a cheap in-process embedder — so **8 of 18 run with no Ollama and no network**. Most repos never need more.
278
+ - **Symbolic lookups are strong** (mean rank-1 ≈ 0.70). Behavioural, natural-language queries are harder (≈ 0.30 on the default path) — that's where the optional embedding and reranker channels earn their keep.
279
+ - **Optional features are measured, not assumed.** Dense embeddings lift recall on larger repos; the LLM reranker is language- and repo-dependent (it lifts 8 fixtures but taxes JavaScript and Spring); enrichment helps only where proven (just rust). Setup surfaces each trade-off before you enable it.
280
+ - **Backend parity:** the in-memory and SQLite backends return byte-identical top-5 on all 18 fixtures (gated by `test/sqlite.mjs`).
631
281
 
632
- **Index takes too long**
633
- - Verify Ollama is running: `curl http://localhost:11434/api/tags`
634
- - Use lexical-only mode: `INDEXER_EMBEDDINGS=off npm run mcp:index`
282
+ Per-fixture best configs, 3× spreads, and copy-paste enable flags live in **[docs/benchmarks/BENCH_PER_FIXTURE.md](docs/benchmarks/BENCH_PER_FIXTURE.md)**.
635
283
 
636
- **Indexing a huge repo runs out of memory**
637
- - Build with `--use-sqlite` so chunks live on disk instead of the heap
638
- - Confirm the active backend with `list_index_stats()`
284
+ ### Structural coverage by language
639
285
 
640
- **`--use-sqlite` reports node:sqlite is unavailable**
641
- - The SQLite backend needs Node v22.5+; upgrade Node, or use the default in-memory backend
286
+ `get_call_graph` and `find_references` are richest for typed languages. Every verdict is confirmed by invocation on the real index, not by reading field counts:
642
287
 
643
- **Search returns irrelevant results**
644
- - Use `exact_tokens` for known symbol names
645
- - For conceptual queries, index with `--llm-enrichment` and embeddings enabled
646
- - Check coverage with `list_index_stats()`; increase `top_k` to see more candidates
288
+ | Capability | Strong | Limited |
289
+ |---|---|---|
290
+ | **Call graph** (callers/callees) | resolves on every supported language | Java/Spring is class-granular; SCSS effectively none |
291
+ | **Caller precision** | receiver-aware: TS/JS, Python, C#, Swift, PHP | name-only: Go, Rust, Kotlin, Ruby, Bash, C |
292
+ | **Typed `find_references`** | precise: TS/JS, Python · field-precise: C# | heuristic: Java/PHP/Kotlin/Swift/Rust/Go/C · empty: Ruby, Bash, SCSS, dynamic JS/Python |
647
293
 
648
- **MCP server won't connect**
649
- - Verify `MCP_PROJECT_ROOT` points to the indexed directory
650
- - Check the index exists: `ls -la code-index.json` (or `code-index.db`)
651
- - Test manually: `npm run mcp:start`
294
+ AST chunking and lexical search cover **every** supported language; only the typed cross-reference channel narrows for dynamic ones.
652
295
 
653
- **Results are stale after file changes**
654
- - The daemon updates both backends live and running servers refresh automatically; check `list_index_stats()` for daemon status
655
- - If the daemon isn't running, restart the MCP server (it spawns the daemon) or run `npm run mcp:index` manually
296
+ ### Where it's weakest (honestly)
656
297
 
657
- ---
298
+ - Behavioural, natural-language recall on the default path (rank-1 ≈ 0.30) — closing it needs the embedding/reranker channel, not lexical tuning.
299
+ - The hardest fixtures stay below 0.65 held-out success@5 even with the full stack (rails 0.50, rust 0.61).
300
+ - Java/Spring `get_call_graph` reports at class granularity (the god-class split only fires ≥200 lines); SCSS has no meaningful call graph.
301
+ - LLM enrichment without reranking regresses precision — enable it only paired with `--rerank`.
658
302
 
659
- ## Development
303
+ ## Reproducing the benchmarks
660
304
 
661
305
  ```bash
662
- git clone https://github.com/MaquinaTech/graph-indexer.git
663
- cd graph-indexer
664
- npm install
665
- npm run mcp:index # index this repo
666
- npm run mcp:start # start MCP server
306
+ npm run test:all # full unit + integration suite
307
+ npm run test:setup # index the benchmark fixtures
308
+ npm run test:eval # default lexical path — prints the HELD-OUT block
309
+ npm run test:eval -- --suite css # any single fixture (18 authored suites)
310
+ npm run test:eval -- --embeddings # hybrid eval (requires Ollama)
311
+ npm run test:eval -- --verbose # per-query breakdown incl. file-rank column
312
+ node test/sqlite.mjs # backend-parity gate (memory ↔ SQLite top-5)
313
+ node bench/cell.mjs <fixture> L1 # cold rebuild + score one fixture
667
314
  ```
668
315
 
669
- ### Tests
670
-
671
- | Command | Scope |
672
- | :--- | :--- |
673
- | `npm run test` | Integration suite: indexing + loose hit-rate + token savings across 5 fixtures |
674
- | `npm run test:eval` | Strict symbol-level accuracy (rank-1, precision, nDCG) |
675
- | `npm run test:unit` | Pure helpers, chunk splitting |
676
- | `npm run test:sqlite` | SQLite round-trip + rank consistency vs the in-memory engine |
677
- | `npm run test:enrich` | HyDE enrichment, including the lexically-disjoint rank-1 flip |
678
- | `npm run test:mcp` | End-to-end MCP server over stdio |
679
- | `npm run test:scale` | Mock 50k-chunk corpus proving SQLite RAM stays bounded |
680
- | `npm run test:all` | Every dependency-free suite above, no Ollama required |
316
+ The harness is [test/evaluate.mjs](test/evaluate.mjs); deeper reproduction notes live in [docs/benchmarks/BENCH_BASELINE.md](docs/benchmarks/BENCH_BASELINE.md) and [docs/benchmarks/BENCH_FULL_SUITE.md](docs/benchmarks/BENCH_FULL_SUITE.md).
681
317
 
682
318
  ---
683
319
 
684
- ## Security
685
-
686
- graph-indexer runs locally and is air-gapped by default — its only outbound calls
687
- are to a local Ollama endpoint for embeddings and optional enrichment (skipped entirely with
688
- `INDEXER_EMBEDDINGS=off` and without `--llm-enrichment`). It never executes the code it indexes,
689
- and the index artifacts contain source snippets, so keep them git-ignored (as `init` configures).
690
-
691
- See [SECURITY.md](SECURITY.md) for the full threat model and how to report a
692
- vulnerability.
693
-
694
- ---
695
-
696
- ## License
697
-
698
- Released under the [MIT License](LICENSE). Copyright (c) 2026 MaquinaTech.
699
-
700
- ---
701
-
702
- Built by [MaquinaTech](https://github.com/MaquinaTech) · [Issues](https://github.com/MaquinaTech/graph-indexer/issues) · [npm](https://www.npmjs.com/package/graph-indexer)
320
+ <div align="center">
321
+ <sub>MIT licensed · runs entirely on your machine · see <a href="SECURITY.md">SECURITY.md</a> and <a href="TRADEMARK.md">TRADEMARK.md</a></sub>
322
+ </div>