knodin 0.8.2 → 0.8.3

package/README.md

@@ -31,16 +31,32 @@ one persistent local graph.
 - **Adopt locally:** initialize the checkout you already have and use the CLI or
   connect one MCP gateway.
 
-The practical payoff is less manual context assembly, fewer agent round trips,
-and fewer dependencies missed during review—with no hosted-service or
-source-egress overhead.
-
-The checked [behavioral-contract work](docs/BEHAVIORAL-CONTRACT.md) declares
-each production operation's intended guarantees and release-gates
-composition, recovery, confidence, and locality fixtures across every production
-operation/action path and declared egress boundary. C95 is implemented and
-terminal under the checked verifier and roadmap acceptance criteria; its stated
-limitations remain product bounds, not unsupported superiority claims.
+The practical value is less manual context assembly and fewer dependencies
+missed during review, with no hosted-service or source-egress overhead. Fewer
+agent round trips are an intended payoff; the narrow C93 replay measured no
+round-trip difference, so knodin does not claim a general productivity effect.
+
+Four checked answers define the product rather than a feature-count claim:
+
+- **Value:** less manual context assembly and fewer missed dependencies. C93
+  records the paired task method; C100 narrows one missed-dependency result from
+  a Salesforce class file to the exact Flow-invoked Apex method.
+- **ROI:** the intended mechanism is fewer corrective agent round trips without
+  hosted-service, authentication, or source-egress overhead. C93's accepted
+  two-task replay measured no round-trip benefit (both arms required one
+  correction), so this remains a product hypothesis rather than a measured
+  productivity claim. Billed cost and unobserved tokens remain unknown.
+- **Tomorrow:** run `knodin init`, check `knodin status`, then use the local CLI
+  or single MCP gateway against the checkout already on disk.
+- **Secret sauce:** stable identity, exact source evidence, explicit freshness,
+  and truthful budgets compose behind one compact local tool.
+
+The checked [behavioral contract](docs/BEHAVIORAL-CONTRACT.md) release-gates
+that composition. C101 binds the bounded resource-reachability, TypeScript DI,
+and Salesforce Flow-to-Apex evidence to the retained one-process semantic
+design. It rejects stale, truncated, ambiguous, or omission-only output when a
+mutation tries to promote it into a complete or exact claim. These are
+fixture-scoped guarantees with recorded limits, not universal superiority.
 
 ## How it compares
 
@@ -50,10 +66,11 @@ context over one locally persisted index.
 
 | Job | Typical specialized tools | knodin |
 |---|---|---|
-| Symbol navigation | CodeGraph, Serena, Sourcegraph | Ambiguity-safe definitions, callers, callees, paths, and verbatim source |
+| Symbol navigation | CodeGraph, Serena, Sourcegraph | Ambiguity-safe definitions, callers, callees, paths, bounded Inversify/tsyringe DI edges, and verbatim source |
 | Change impact and review | code-review-graph, Greptile, Graphify | Diff-aware review, impact traversal, tests, risks, and PR triage |
 | Architecture mapping | Graphify, GitNexus | Communities, hubs, boundaries, flows, wiki, and local visualization |
 | Search and context assembly | Aider repo map, Repomix, semantic search tools | Hybrid search, bounded source packs, and recoverable diagnostic compression |
+| Bounded resource and framework relationships | Code-Graph-RAG and framework-aware analyzers | Literal TS/JS resource paths, declared Inversify/tsyringe wiring, and one exact Salesforce Flow-to-Apex boundary, each with explicit omissions |
 | Deployment | Hosted services or separate local tools | One local process, SQLite graph, CLI, and one MCP gateway |
 
 ### Measured results
@@ -159,7 +176,7 @@ knodin repair
 | Command | Purpose |
 |---|---|
 | `knodin context` | Compact repository orientation and next-operation hint |
-| `knodin explain <symbol>` | Source, identity, callers, callees, and blast radius |
+| `knodin explain <symbol>` | Source, identity, typed callers/callees, static-analysis omissions, and blast radius |
 | `knodin review` | Itemized graph impact, test gaps, centrality, and bounded Git-history evidence |
 | `knodin query …` | Impact, paths, callers, callees, tests, flows, and structured graph queries |
 | `knodin search <query>` | Explainable structural-first search with a bounded local embedding fallback |

package/dist/bin/cli.js

@@ -158,7 +158,11 @@ function formatRepairHuman(result) {
             return `Repair verified: graph is healthy (${coverage.indexedFiles} indexed files, ${coverage.filesWithSymbols} files with symbols), but lifecycle routing is degraded. Run \`knodin init\`, then \`knodin status\`.\n`;
         return `Repair verified: graph is healthy (${coverage.indexedFiles} indexed files, ${coverage.filesWithSymbols} files with symbols).\n`;
     }
-    return `Repair finished with remaining issues. Run \`knodin status --deep\` for details.\n`;
+    const outstanding = result.outstandingIssues?.total ??
+        result.after.missing.files.length + result.after.missing.records.length;
+    const firstIssue = result.after.missing.files[0] ?? result.after.missing.records[0];
+    const detail = firstIssue ? ` First issue: ${firstIssue}.` : "";
+    return `Repair finished with ${outstanding.toLocaleString()} remaining issue(s).${detail} Run \`knodin status --deep\` for details.\n`;
 }
 function formatIndexHuman(result) {
     if (result.indexed.length === 0 && result.unchanged.length > 0) {
@@ -1781,7 +1785,7 @@ async function main() {
                 ? ""
                 : (rest[1] ?? "");
             if (!pattern) {
-                process.stderr.write("knodin query requires a <pattern> (lsp_diagnostics|lsp_definitions|lsp_declarations|lsp_implementations|callers_of|callees_of|imports_of|importers_of|import_cycles|file_summary|batch_outline|project_overview|shortest_path|inheritors_of|structural_implementations_of|tests_for|impact|dead_code|large_functions|large_files|rename_preview|flows|flow_of|stats|traverse|feature_path|flow_analysis|knowledge_gaps|surprising_connections|suggested_questions|architecture_overview|community|triggers_of|publishers_of|listeners_of|handlers_of|endpoints_for|consumers_of|children_of|federated_repos|mcp_tools|api_contract_mismatches)\n");
+                process.stderr.write("knodin query requires a <pattern> (lsp_diagnostics|lsp_definitions|lsp_declarations|lsp_implementations|callers_of|callees_of|imports_of|importers_of|import_cycles|file_summary|batch_outline|project_overview|shortest_path|cross_substrate_path|inheritors_of|structural_implementations_of|tests_for|impact|dead_code|large_functions|large_files|rename_preview|flows|flow_of|stats|traverse|feature_path|flow_analysis|resource_reachability|knowledge_gaps|surprising_connections|suggested_questions|architecture_overview|community|triggers_of|publishers_of|listeners_of|handlers_of|endpoints_for|consumers_of|children_of|federated_repos|mcp_tools|api_contract_mismatches)\n");
                 process.exit(1);
             }
             const directionValue = selectorValue("--direction");
@@ -1800,7 +1804,15 @@ async function main() {
             }
             // shortest_path: `knodin query shortest_path <from> <to>`
             // rename_preview: `knodin query rename_preview <old> <new>`
-            const to = pattern === "shortest_path" || pattern === "rename_preview" ? rest[2] : undefined;
+            const to = pattern === "shortest_path" ||
+                pattern === "cross_substrate_path" ||
+                pattern === "rename_preview"
+                ? rest[2]
+                : undefined;
+            if (pattern === "cross_substrate_path" && !to) {
+                process.stderr.write("knodin query cross_substrate_path requires <from> and <to>\n");
+                process.exit(1);
+            }
             if (pattern === "rename_preview" && !to) {
                 process.stderr.write("knodin query rename_preview requires <old> and <new>\n");
                 process.exit(1);
@@ -1863,6 +1875,11 @@ async function main() {
                     : undefined,
                 includeDataFlow: pattern === "traverse" ? rest.includes("--data-flow") : undefined,
                 flowVariable: pattern === "flow_analysis" ? selectorValue("--variable") : undefined,
+                resourceOffset: pattern === "resource_reachability" && selectorValue("--offset")
+                    ? Number(selectorValue("--offset"))
+                    : undefined,
+                resourceMaxBytes: pattern === "resource_reachability" ? responseBudget.bytes : undefined,
+                resourceMaxTokens: pattern === "resource_reachability" ? responseBudget.tokens : undefined,
                 architectureFacets: facetsValue,
                 topN: selectorValue("--top") ? Number(selectorValue("--top")) : undefined,
                 sort: selectorValue("--sort"),

package/dist/src/docs-sections.js

@@ -27,6 +27,7 @@ The \`query\` operation lets you ask precise, structured questions about your co
 - **tests_for <target>**: Find test files that cover this symbol.
 - **file_summary <target>**: Lists all symbols defined in a file.
 - **shortest_path <from> <to>**: Find the call-graph chain connecting two symbols.
+- **cross_substrate_path <from> <to>**: Prove one bounded static Salesforce Flow action to a uniquely resolved Apex \`@InvocableMethod\`. Returns exact XML and Apex evidence, stable endpoint identities, freshness, explicit omissions, and budget metadata; it does not resolve Terraform, dbt, or arbitrary substrate crossings.
 - **impact <symbol>**: Directional, depth-bounded symbol reach with stable selectors, relation/confidence/test filters, edge evidence, and heuristic summaries. Use \`impactMode: "file"\` explicitly for a distinctly labeled changed-file blast radius.
 - **dead_code**: Surface exported or unexported symbols with zero references.
 - **large_functions / large_files**: Spot complex "god" functions and files exceeding size thresholds.