scopecairn 0.6.0 → 0.7.0

package/README.md

@@ -66,6 +66,13 @@ npm install -g scopecairn
 
 Requires Node.js ≥ 20.
 
+Upgrade later with:
+
+```bash
+scopecairn update          # or: npm install -g scopecairn@latest
+scopecairn update --check  # only check for a new version
+```
+
 ## Agent-driven setup
 
 Install once, then just type `scopecairn ./` to your AI agent —
@@ -148,6 +155,7 @@ scopecairn agents list
 | `test-select <target>` | List test files affected by a file/symbol change target |
 | `doctor --verbose` | Also surface adapter/graph errors from `.scopecairn/last-run.log` to stderr |
 | `benchmark [--tune]` | Retrieval recall, irrelevant ratio, context reduction + weight calibration |
+| `update [--check]` | Update ScopeCairn to the latest npm release (`--check` only checks) |
 
 Agent commands (`context`, `impact`, `read`, `graph`, `status`, `doctor`)
 are read-only toward source and only write to `.scopecairn/` — safe to

package/dist/{chunk-ID4PMSFQ.js → chunk-DY2AAM62.js}

@@ -159,8 +159,15 @@ function ensureMetrics(db) {
   try {
     const syms = db.prepare(`SELECT COUNT(*) AS n FROM symbols`).get().n;
     if (syms === 0) return 0;
-    const c = db.prepare(`SELECT COUNT(*) AS n FROM node_metrics`).get().n;
-    if (c === syms) return c;
+    const missing = db.prepare(
+      `SELECT COUNT(*) AS n FROM symbols s LEFT JOIN node_metrics m ON m.node_id = s.id WHERE m.node_id IS NULL`
+    ).get().n;
+    const orphans = db.prepare(
+      `SELECT COUNT(*) AS n FROM node_metrics m LEFT JOIN symbols s ON s.id = m.node_id WHERE s.id IS NULL`
+    ).get().n;
+    if (missing === 0 && orphans === 0) {
+      return db.prepare(`SELECT COUNT(*) AS n FROM node_metrics`).get().n;
+    }
     return refreshMetrics(db);
   } catch {
     return 0;

package/dist/cli.js

@@ -2,7 +2,7 @@
 import {
   ensureMetrics,
   getMetrics
-} from "./chunk-ID4PMSFQ.js";
+} from "./chunk-DY2AAM62.js";
 import {
   nodeInCycle
 } from "./chunk-UU5WHX3D.js";
@@ -642,7 +642,8 @@ function extractGeneric(source, lang) {
   let m;
   const importLine = /^\s*import\s+(.+?)\s*$/gm;
   while ((m = importLine.exec(source)) !== null) {
-    const mod = m[1].replace(/["';]/g, "").trim().split(/\s+/)[0];
+    const goPath = lang === "go" ? m[1].match(/["`]([^"`]+)["`]/) : null;
+    const mod = goPath ? goPath[1] : m[1].replace(/["';]/g, "").trim().split(/\s+/)[0];
     if (!mod || mod === "*") continue;
     const ln = lineOf3(source, m.index);
     symbols.push({ name: `import:${mod}`, type: "import", signature: m[0].trim().slice(0, 120), startLine: ln, endLine: ln });
@@ -780,9 +781,9 @@ function extractFile(relPath, source) {
   const lang = detectLanguage(relPath);
   switch (lang) {
     case "typescript":
-      return extractTypeScript(source, relPath.endsWith("x"));
+      return extractTypeScript(source, relPath.endsWith(".tsx"));
     case "javascript":
-      return extractTypeScript(source, relPath.endsWith("x"));
+      return extractTypeScript(source, relPath.endsWith(".jsx"));
     case "python":
       return extractPython(source);
     case "html":
@@ -835,7 +836,7 @@ var STOP = /* @__PURE__ */ new Set([
   "spec"
 ]);
 function tokenizeIdentifier(raw) {
-  const parts = raw.replace(/[\\/]/g, " ").replace(/[.:\-_"']/g, " ").replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").toLowerCase().split(/[^a-z0-9]+/g).filter((t) => t.length >= 2 && !/^\d+$/.test(t) && !STOP.has(t));
+  const parts = raw.replace(/[\\/]/g, " ").replace(/[.:\-_"']/g, " ").replace(/([a-z0-9])([A-Z])/g, "$1 $2").replace(/([A-Z]+)([A-Z][a-z])/g, "$1 $2").toLowerCase().split(/[^a-z0-9]+/g).filter((t) => t.length >= 2 && !STOP.has(t));
   return [...new Set(parts)];
 }
 function tokenizeTask(text) {
@@ -868,9 +869,11 @@ function seedSearch(db, tokens, limit = 30) {
   const q = tokens.map((t) => `"${t.replace(/"/g, "")}"`).join(" OR ");
   let rows;
   try {
+    const lim = Math.max(1, Math.min(500, Math.floor(limit) || 30));
     rows = db.prepare(
       `SELECT symbol_id, bm25(symbol_index) AS rank
-         FROM symbol_index WHERE symbol_index MATCH ? LIMIT ${limit}`
+         FROM symbol_index WHERE symbol_index MATCH ?
+         ORDER BY rank LIMIT ${lim}`
     ).all(q);
   } catch {
     return [];
@@ -898,9 +901,20 @@ function symbolIdInFile(db, fileId, name) {
   const r = db.prepare(`SELECT id FROM symbols WHERE file_id = ? AND name = ? LIMIT 1`).get(fileId, name);
   return r ? r.id : null;
 }
-function globalSymbolId(db, name) {
-  const r = db.prepare(`SELECT id FROM symbols WHERE name = ? LIMIT 1`).get(name);
-  return r ? r.id : null;
+function globalSymbolId(db, name, preferDir = "") {
+  const rows = db.prepare(
+    `SELECT s.id, f.path AS p FROM symbols s JOIN files f ON f.id = s.file_id
+       WHERE s.name = ? ORDER BY s.id`
+  ).all(name);
+  if (rows.length === 0) return null;
+  if (preferDir) {
+    const sameDir = rows.find((r) => r.p.startsWith(preferDir + "/"));
+    if (sameDir) return sameDir.id;
+    const top = preferDir.split("/")[0];
+    const sameTop = rows.find((r) => r.p.split("/")[0] === top);
+    if (sameTop) return sameTop.id;
+  }
+  return rows[0].id;
 }
 function methodSymbolId(db, fileId, ids, name) {
   const local = ids.get(name);
@@ -974,9 +988,10 @@ function indexFileRelations(db, fileId, relPath, extraction, fileSym) {
     contains.run(fileSym, id);
     rels++;
   }
+  const srcDir = relPath.includes("/") ? relPath.slice(0, relPath.lastIndexOf("/")) : "";
   const resolveLocal = (name) => {
     if (name === "__file__") return fileSym;
-    return ids.get(name) ?? symbolIdInFile(db, fileId, name) ?? globalSymbolId(db, name);
+    return ids.get(name) ?? symbolIdInFile(db, fileId, name) ?? globalSymbolId(db, name, srcDir);
   };
   for (const r of extraction.relations) {
     if (r.rel === "IMPORTS") {
@@ -1004,7 +1019,7 @@ function indexFileRelations(db, fileId, relPath, extraction, fileSym) {
       continue;
     }
     const src = resolveLocal(r.from);
-    const dst = r.rel === "CALLS" && r.methodCall ? methodSymbolId(db, fileId, ids, r.to) : ids.get(r.to) ?? globalSymbolId(db, r.to);
+    const dst = r.rel === "CALLS" && r.methodCall ? methodSymbolId(db, fileId, ids, r.to) : ids.get(r.to) ?? globalSymbolId(db, r.to, srcDir);
     if (src && dst && src !== dst) {
       insRel.run(src, dst, r.rel, r.weight, r.confidence);
       rels++;
@@ -1033,9 +1048,11 @@ function linkTests(db) {
   for (const f of files) {
     const stemBase = testTarget(f.path);
     if (!stemBase) continue;
+    const stemName = stemBase.split("/").pop();
     const matches = [...byPath.keys()].filter((p) => {
-      const noExt = p.replace(/\.[^.]+$/, "");
-      return noExt === stemBase && p !== f.path;
+      if (p === f.path || testTarget(p)) return false;
+      const base = p.split("/").pop() ?? p;
+      return base.replace(/\.[^.]+$/, "") === stemName;
     });
     const srcSym = fileSymOf(f.id);
     for (const mp of matches) {
@@ -1160,13 +1177,13 @@ var META_BASENAMES = /* @__PURE__ */ new Set([
   "makefile",
   "package.json"
 ]);
-function isIndexableMetaFile(posixPath) {
+function isIndexableMetaFile(posixPath, patterns) {
   if (isSecretFile(posixPath)) return false;
   const base = (posixPath.split("/").pop() ?? "").toLowerCase();
   if (META_BASENAMES.has(base)) return true;
   const dot = base.lastIndexOf(".");
   if (dot !== -1 && META_EXTS.has(base.slice(dot))) return true;
-  if (isProtected(posixPath)) return true;
+  if (patterns ? isProtected(posixPath, patterns) : isProtected(posixPath)) return true;
   return false;
 }
 function ensureProtectedFile(repoRoot2) {
@@ -1222,6 +1239,7 @@ function loadConfig(repoRoot2) {
     cfg.wCochange = num("w_cochange", cfg.wCochange);
     cfg.maxDepth = Math.max(1, Math.min(4, Math.round(num("max_depth", cfg.maxDepth))));
     cfg.topN = Math.max(5, Math.min(100, Math.round(num("top_n", cfg.topN))));
+    cfg.decayPerHop = Math.max(0, Math.min(1, num("decay_per_hop", cfg.decayPerHop)));
   } catch {
   }
   return cfg;
@@ -1259,6 +1277,7 @@ w_recency: 0.1
 w_cochange: 0.1
 max_depth: 2
 top_n: 20
+decay_per_hop: 0.7
 `
     );
   }
@@ -1314,6 +1333,32 @@ function enclosingFunction(db, fileId, line) {
   ).all(fileId, line);
   return rows.length > 0 ? rows[0].id : null;
 }
+function cleanupOrphans(db) {
+  let n = 0;
+  n += Number(
+    db.prepare(
+      `DELETE FROM relationships
+         WHERE source_id NOT IN (SELECT id FROM symbols)
+            OR target_id NOT IN (SELECT id FROM symbols)`
+    ).run().changes
+  );
+  n += Number(
+    db.prepare(
+      `DELETE FROM node_metrics WHERE node_id NOT IN (SELECT id FROM symbols)`
+    ).run().changes
+  );
+  n += Number(
+    db.prepare(
+      `DELETE FROM clusters WHERE node_id NOT IN (SELECT id FROM symbols)`
+    ).run().changes
+  );
+  n += Number(
+    db.prepare(
+      `DELETE FROM task_context WHERE symbol_id NOT IN (SELECT id FROM symbols)`
+    ).run().changes
+  );
+  return n;
+}
 
 // src/adapters/prisma.ts
 function parsePrismaModels(content) {
@@ -1426,6 +1471,25 @@ function prismaCalls(content) {
 function resolveModel(db, name) {
   return findSymbolId(db, name, ["model"]) ?? dbLowerModel(db, name);
 }
+function derivePrismaQueries(db, fileId, content) {
+  const out = [];
+  const fileSym = fileSymbolOf(db, fileId);
+  if (!fileSym) return out;
+  for (const call of prismaCalls(content)) {
+    const modelId = resolveModel(db, call.model);
+    if (!modelId) continue;
+    const line = lineOf4(content, call.index);
+    const caller = enclosingFunction(db, fileId, line) ?? fileSym;
+    if (caller === modelId) continue;
+    out.push({
+      callerId: caller,
+      targetId: modelId,
+      weight: WEIGHT.QUERIES,
+      confidence: 0.9
+    });
+  }
+  return out;
+}
 function refreshQueries(db, files) {
   let n = 0;
   const del = db.prepare(
@@ -1433,19 +1497,12 @@ function refreshQueries(db, files) {
   );
   const ins = db.prepare(
     `INSERT INTO relationships(source_id, target_id, relationship_type, weight, confidence)
-     VALUES (?, ?, 'QUERIES', ${WEIGHT.QUERIES}, 0.9)`
+     VALUES (?, ?, 'QUERIES', ?, ?)`
   );
   for (const f of files) {
-    const fileSym = fileSymbolOf(db, f.fileId);
-    if (!fileSym) continue;
     del.run(f.fileId);
-    for (const call of prismaCalls(f.content)) {
-      const modelId = resolveModel(db, call.model);
-      if (!modelId) continue;
-      const line = lineOf4(f.content, call.index);
-      const caller = enclosingFunction(db, f.fileId, line) ?? fileSym;
-      if (caller === modelId) continue;
-      ins.run(caller, modelId);
+    for (const e of derivePrismaQueries(db, f.fileId, f.content)) {
+      ins.run(e.callerId, e.targetId, e.weight, e.confidence);
       n++;
     }
   }
@@ -1587,6 +1644,24 @@ function hasDrizzleMarker(content) {
   }
   return /db\s*\.\s*(select|selectDistinct|insert|update|delete)\b/.test(content);
 }
+function deriveDrizzleQueries(db, fileId, content) {
+  const out = [];
+  const fileSym = fileSymbolOf(db, fileId);
+  if (!fileSym) return out;
+  for (const q of parseDrizzleQueries(content)) {
+    const target = findModelInFile(db, fileId, q.table) ?? findModelGlobal(db, q.table);
+    if (!target) continue;
+    const caller = enclosingFunction(db, fileId, lineOf4(content, q.index)) ?? fileSym;
+    if (caller === target) continue;
+    out.push({
+      callerId: caller,
+      targetId: target,
+      weight: WEIGHT.QUERIES,
+      confidence: 0.85
+    });
+  }
+  return out;
+}
 function refreshDrizzleQueries(db, files) {
   let n = 0;
   const del = db.prepare(
@@ -1594,18 +1669,13 @@ function refreshDrizzleQueries(db, files) {
   );
   const ins = db.prepare(
     `INSERT INTO relationships(source_id, target_id, relationship_type, weight, confidence)
-     VALUES (?, ?, 'QUERIES', ${WEIGHT.QUERIES}, 0.85)`
+     VALUES (?, ?, 'QUERIES', ?, ?)`
   );
   for (const f of files) {
-    const fileSym = fileSymbolOf(db, f.fileId);
-    if (!fileSym || !hasDrizzleMarker(f.content)) continue;
+    if (!hasDrizzleMarker(f.content)) continue;
     del.run(f.fileId);
-    for (const q of parseDrizzleQueries(f.content)) {
-      const target = findModelInFile(db, f.fileId, q.table) ?? findModelGlobal(db, q.table);
-      if (!target) continue;
-      const caller = enclosingFunction(db, f.fileId, lineOf4(f.content, q.index)) ?? fileSym;
-      if (caller === target) continue;
-      ins.run(caller, target);
+    for (const e of deriveDrizzleQueries(db, f.fileId, f.content)) {
+      ins.run(e.callerId, e.targetId, e.weight, e.confidence);
       n++;
     }
   }
@@ -1895,6 +1965,24 @@ function findModelGlobal2(db, name) {
   const lower = name.toLowerCase();
   return rows.find((r) => r.name.toLowerCase() === lower)?.id ?? null;
 }
+function deriveSqlAlchemyQueries(db, fileId, content) {
+  const out = [];
+  const fileSym = fileSymbolOf(db, fileId);
+  if (!fileSym) return out;
+  for (const q of parseSqlAlchemyQueries(content)) {
+    const target = findModelGlobal2(db, q.model);
+    if (!target) continue;
+    const caller = enclosingFunction(db, fileId, lineOf4(content, q.index)) ?? fileSym;
+    if (caller === target) continue;
+    out.push({
+      callerId: caller,
+      targetId: target,
+      weight: WEIGHT.QUERIES,
+      confidence: 0.85
+    });
+  }
+  return out;
+}
 function refreshSqlAlchemyQueries(db, files) {
   let n = 0;
   const del = db.prepare(
@@ -1902,19 +1990,13 @@ function refreshSqlAlchemyQueries(db, files) {
   );
   const ins = db.prepare(
     `INSERT INTO relationships(source_id, target_id, relationship_type, weight, confidence)
-     VALUES (?, ?, 'QUERIES', ${WEIGHT.QUERIES}, 0.85)`
+     VALUES (?, ?, 'QUERIES', ?, ?)`
   );
   for (const f of files) {
     if (!hasSqlAlchemyMarker(f.content)) continue;
-    const fileSym = fileSymbolOf(db, f.fileId);
-    if (!fileSym) continue;
     del.run(f.fileId);
-    for (const q of parseSqlAlchemyQueries(f.content)) {
-      const target = findModelGlobal2(db, q.model);
-      if (!target) continue;
-      const caller = enclosingFunction(db, f.fileId, lineOf4(f.content, q.index)) ?? fileSym;
-      if (caller === target) continue;
-      ins.run(caller, target);
+    for (const e of deriveSqlAlchemyQueries(db, f.fileId, f.content)) {
+      ins.run(e.callerId, e.targetId, e.weight, e.confidence);
       n++;
     }
   }
@@ -1964,27 +2046,10 @@ var sqlalchemyAdapter = {
         relations++;
       }
     }
-    const del = ctx.db.prepare(
-      `DELETE FROM relationships WHERE relationship_type = 'QUERIES' AND source_id IN (SELECT id FROM symbols WHERE file_id = ?)`
-    );
-    const ins = ctx.db.prepare(
-      `INSERT INTO relationships(source_id, target_id, relationship_type, weight, confidence)
-       VALUES (?, ?, 'QUERIES', ${WEIGHT.QUERIES}, 0.85)`
+    relations += refreshSqlAlchemyQueries(
+      ctx.db,
+      files.map((f) => ({ fileId: f.fileId, rel: f.rel, content: f.content }))
     );
-    for (const f of files) {
-      if (!hasSqlAlchemyMarker(f.content)) continue;
-      const fileSym = fileSymbolOf(ctx.db, f.fileId);
-      if (!fileSym) continue;
-      del.run(f.fileId);
-      for (const q of parseSqlAlchemyQueries(f.content)) {
-        const target = findModelGlobal2(ctx.db, q.model);
-        if (!target) continue;
-        const caller = enclosingFunction(ctx.db, f.fileId, lineOf4(f.content, q.index)) ?? fileSym;
-        if (caller === target) continue;
-        ins.run(caller, target);
-        relations++;
-      }
-    }
     return { symbols, relations };
   }
 };
@@ -2037,8 +2102,10 @@ function resolveImportRel(fromRel, source) {
   const out = [];
   for (const p of parts) {
     if (p === "" || p === ".") continue;
-    if (p === "..") out.pop();
-    else out.push(p);
+    if (p === "..") {
+      if (out.length === 0) return null;
+      out.pop();
+    } else out.push(p);
   }
   return out.join("/");
 }
@@ -2169,29 +2236,54 @@ function runAdapters(db, repoRoot2, changed) {
       }
     }
   }
-  const refreshTargets = (id, relevant, refresh) => {
-    if (!active.some((a) => a.id === id)) return;
+  const derivers = [];
+  if (active.some((a) => a.id === "nextjs")) {
+    derivers.push({ relevant: nextjsAdapter.relevant, derive: derivePrismaQueries });
+  }
+  if (active.some((a) => a.id === "drizzle")) {
+    derivers.push({ relevant: drizzleAdapter.relevant, derive: deriveDrizzleQueries });
+  }
+  if (active.some((a) => a.id === "sqlalchemy")) {
+    derivers.push({
+      relevant: sqlalchemyAdapter.relevant,
+      derive: deriveSqlAlchemyQueries
+    });
+  }
+  if (derivers.length > 0) {
     try {
-      const all = db.prepare(`SELECT id, path FROM files`).all().filter((r) => relevant(r.path));
-      const inputs = [];
+      const all = db.prepare(`SELECT id, path FROM files`).all();
+      const del = db.prepare(
+        `DELETE FROM relationships WHERE relationship_type = 'QUERIES' AND source_id IN (SELECT id FROM symbols WHERE file_id = ?)`
+      );
+      const ins = db.prepare(
+        `INSERT INTO relationships(source_id, target_id, relationship_type, weight, confidence)
+         VALUES (?, ?, 'QUERIES', ?, ?)`
+      );
       for (const r of all) {
+        if (!derivers.some((d) => d.relevant(r.path))) continue;
+        let content;
         try {
-          inputs.push({
-            fileId: r.id,
-            rel: r.path,
-            content: fs11.readFileSync(path12.join(repoRoot2, ...r.path.split("/")), "utf8")
-          });
+          content = fs11.readFileSync(path12.join(repoRoot2, ...r.path.split("/")), "utf8");
         } catch {
+          continue;
+        }
+        del.run(r.id);
+        for (const d of derivers) {
+          for (const e of d.derive(db, r.id, content)) {
+            ins.run(e.callerId, e.targetId, e.weight, e.confidence);
+            relations++;
+          }
         }
       }
-      relations += refresh(db, inputs);
     } catch (err) {
       logError("adapters", err, repoRoot2);
     }
-  };
-  refreshTargets("nextjs", nextjsAdapter.relevant, refreshQueries);
-  refreshTargets("drizzle", drizzleAdapter.relevant, refreshDrizzleQueries);
-  refreshTargets("sqlalchemy", sqlalchemyAdapter.relevant, refreshSqlAlchemyQueries);
+  }
+  try {
+    cleanupOrphans(db);
+  } catch (err) {
+    logError("adapters", err, repoRoot2);
+  }
   return { adapters: active.map((a) => a.id), symbols, relations };
 }
 
@@ -2647,9 +2739,15 @@ function ensureClusters(db) {
   try {
     const syms = db.prepare(`SELECT COUNT(*) AS n FROM symbols`).get().n;
     if (syms === 0) return 0;
-    const c = db.prepare(`SELECT COUNT(*) AS n FROM clusters`).get().n;
-    if (c === syms) return c;
-    refreshClusters(db);
+    const missing = db.prepare(
+      `SELECT COUNT(*) AS n FROM symbols s LEFT JOIN clusters c ON c.node_id = s.id WHERE c.node_id IS NULL`
+    ).get().n;
+    const orphans = db.prepare(
+      `SELECT COUNT(*) AS n FROM clusters c LEFT JOIN symbols s ON s.id = c.node_id WHERE s.id IS NULL`
+    ).get().n;
+    if (missing > 0 || orphans > 0) {
+      refreshClusters(db);
+    }
     return db.prepare(`SELECT COUNT(*) AS n FROM clusters`).get().n;
   } catch {
     return 0;
@@ -3402,6 +3500,8 @@ function scanRepository(repoRoot2) {
     );
     let sourceFiles = 0;
     let metaFiles = 0;
+    const protectedPatterns = loadProtectedPatterns(repoRoot2);
+    const backfillDone = db.prepare(`SELECT value FROM meta WHERE key = 'backfill_done'`).get();
     const symbolCount = db.prepare(`SELECT COUNT(*) AS n FROM symbols`).get().n;
     let ftsCount = 0;
     try {
@@ -3409,7 +3509,7 @@ function scanRepository(repoRoot2) {
     } catch {
       ftsCount = 0;
     }
-    const backfill = symbolCount === 0 || ftsCount === 0;
+    const backfill = !backfillDone && (symbolCount === 0 || ftsCount === 0);
     const pending = [];
     const metaChanged = [];
     for (const abs of allAbs) {
@@ -3417,7 +3517,7 @@ function scanRepository(repoRoot2) {
       if (isIgnored(rel, rules)) continue;
       totalFilesSeen++;
       const source = isSourceFile(abs);
-      const meta = !source && isIndexableMetaFile(rel);
+      const meta = !source && isIndexableMetaFile(rel, protectedPatterns);
       if (!source && !meta) continue;
       if (source) sourceFiles++;
       else metaFiles++;
@@ -3478,6 +3578,10 @@ function scanRepository(repoRoot2) {
       `INSERT INTO meta(key, value) VALUES ('last_scan', datetime('now'))
        ON CONFLICT(key) DO UPDATE SET value = excluded.value`
     ).run();
+    db.prepare(
+      `INSERT INTO meta(key, value) VALUES ('backfill_done', '1')
+       ON CONFLICT(key) DO UPDATE SET value = excluded.value`
+    ).run();
     linkTests(db);
     cleanupIndex(db);
     const graphDirty = inserted + updated + removed > 0 || adapterRun.symbols > 0 || adapterRun.relations > 0;
@@ -3909,7 +4013,7 @@ async function cmdDoctor(repoRoot2, opts) {
     const db = openDb(repoRoot2);
     try {
       const { refreshCycles, getCycles, describeCycle } = await import("./cycles-6KSI4OPZ.js");
-      const { ensureMetrics: ensureMetrics2, topByPageRank } = await import("./metrics-ZWWLUYJW.js");
+      const { ensureMetrics: ensureMetrics2, topByPageRank } = await import("./metrics-BLUHSM64.js");
       const cycles = getCycles(db, 5);
       if (cycles.length === 0) {
         try {
@@ -3951,7 +4055,13 @@ async function cmdDoctor(repoRoot2, opts) {
   for (const t of AGENT_MATRIX) {
     const abs = path17.join(repoRoot2, t.rel);
     if (!fs17.existsSync(abs)) continue;
-    const text = fs17.readFileSync(abs, "utf8");
+    let text;
+    try {
+      text = fs17.readFileSync(abs, "utf8");
+    } catch {
+      console.log(`\u2717 Tidak bisa membaca ${t.rel} \u2014 dilewati.`);
+      continue;
+    }
     if (t.mode === "merge" && !text.includes(MARKER)) continue;
     matrixOk++;
     const used = extractPrefixUsed(text);
@@ -4270,7 +4380,7 @@ function cmdRead(repoRoot2, kind, name) {
       console.log(`Cannot read ${node.file}.`);
       return;
     }
-    const start = Math.max(1, row.start_line - 1);
+    const start = row.start_line;
     const end = Math.min(lines.length, Math.max(row.end_line, row.start_line + 40));
     console.log(`# ${node.name} (${node.type}) \u2014 ${node.file}:${start}-${end}`);
     console.log(lines.slice(start - 1, end).join("\n"));
@@ -4490,7 +4600,7 @@ function moduleOf2(file) {
   const i = file.indexOf("/");
   return i === -1 ? "." : file.slice(0, i);
 }
-function classify(ranked, faninOf, threshold = 0.15) {
+function classify(ranked, faninOf, threshold = 0.15, protectedPatterns) {
   const relevant = ranked.filter((r) => r.score >= threshold);
   const files = [...new Set(relevant.map((r) => r.file))];
   const modules = [...new Set(files.map(moduleOf2))];
@@ -4504,7 +4614,9 @@ function classify(ranked, faninOf, threshold = 0.15) {
     "type"
   ]);
   const highFanin = relevant.filter((r) => DEFINITIONAL.has(r.type) && faninOf(r.id) >= FANIN_THRESHOLD).map((r) => r.name);
-  const protectedHits = files.filter((f) => isProtected(f));
+  const protectedHits = files.filter(
+    (f) => protectedPatterns ? isProtected(f, protectedPatterns) : isProtected(f)
+  );
   let complexity = "SIMPLE";
   if (files.length >= 3) {
     complexity = "COMPLEX";
@@ -4747,7 +4859,8 @@ function looksLikeRepoPath(db, repoRoot2, task) {
   } catch {
   }
   try {
-    const row = db.prepare(`SELECT 1 AS ok FROM files WHERE path = ? OR path LIKE ? LIMIT 1`).get(t, `%/${t}`);
+    const esc2 = t.replace(/[\\%_]/g, (c) => "\\" + c);
+    const row = db.prepare(`SELECT 1 AS ok FROM files WHERE path = ? OR path LIKE ? ESCAPE '\\' LIMIT 1`).get(t, `%/${esc2}`);
     return !!row;
   } catch {
     return false;
@@ -4874,7 +4987,31 @@ function changedFilesVsHead(repoRoot2) {
     let p = line.slice(3).trim();
     const arrow = p.indexOf(" -> ");
     if (arrow >= 0) p = p.slice(arrow + 4);
-    if (p.startsWith('"') && p.endsWith('"')) p = p.slice(1, -1);
+    if (p.startsWith('"') && p.endsWith('"')) {
+      const inner = p.slice(1, -1);
+      const bytes = [];
+      for (let i = 0; i < inner.length; i++) {
+        if (inner[i] === "\\") {
+          const next = inner[i + 1];
+          if (next >= "0" && next <= "7") {
+            bytes.push(parseInt(inner.slice(i + 1, i + 4), 8));
+            i += 3;
+          } else if (next === "n") {
+            bytes.push(10);
+            i++;
+          } else if (next === "t") {
+            bytes.push(9);
+            i++;
+          } else {
+            bytes.push(next.charCodeAt(0));
+            i++;
+          }
+        } else {
+          bytes.push(inner.charCodeAt(i));
+        }
+      }
+      p = Buffer.from(bytes).toString("utf8");
+    }
     if (p) files.push(p);
   }
   return files;
@@ -4924,7 +5061,7 @@ Task sederhana. Gunakan pencarian langsung. Bila istilah domain tak cocok dengan
       const r = db.prepare(`SELECT COUNT(*) AS n FROM relationships WHERE target_id = ?`).get(id);
       return r.n;
     };
-    const cls = classify(result.ranked, faninOf);
+    const cls = classify(result.ranked, faninOf, 0.15, loadProtectedPatterns(repoRoot2));
     const t = db.prepare(`INSERT INTO tasks(description, complexity) VALUES (?, ?)`).run(task, opts.escalate ? "COMPLEX" : cls.complexity);
     const taskId = Number(t.lastInsertRowid);
     const insCtx = db.prepare(
@@ -4937,6 +5074,9 @@ Task sederhana. Gunakan pencarian langsung. Bila istilah domain tak cocok dengan
     const mode = opts.mode ?? "NORMAL";
     const effectiveMode = mode === "NORMAL" && cls.complexity === "SIMPLE" && cls.estimatedFiles <= 1 ? "FAST" : mode;
     const escalate = opts.escalate === true || effectiveMode === "SAFE" || effectiveMode === "AUDIT" || mode === "SAFE" || mode === "AUDIT";
+    if (effectiveMode === "FAST") {
+      result.ranked = result.ranked.slice(0, 8);
+    }
     const changed = changedFilesVsHead(repoRoot2);
     if (changed.length > 0) {
       console.log(
@@ -4980,8 +5120,8 @@ function cmdImpact(repoRoot2, target, opts = {}) {
     if (seeds.length === 0) {
       const rows = db.prepare(
         `SELECT s.id, s.name, s.type, f.path AS file FROM symbols s
-           JOIN files f ON f.id = s.file_id WHERE f.path LIKE ? LIMIT 20`
-      ).all(`%${target}`);
+           JOIN files f ON f.id = s.file_id WHERE f.path LIKE ? ESCAPE '\\' LIMIT 20`
+      ).all(`%${target.replace(/[\\%_]/g, (c) => "\\" + c)}`);
       seeds = rows;
     }
     if (seeds.length === 0) {
@@ -5188,7 +5328,7 @@ function uninstallTarget(repoRoot2, target) {
 }
 function pruneEmptyDirs(dir, stop) {
   let cur = dir;
-  while (cur.startsWith(stop) && cur !== stop) {
+  while (cur !== stop && cur.toLowerCase().startsWith(stop.toLowerCase())) {
     try {
       fs22.rmdirSync(cur);
     } catch {
@@ -5613,47 +5753,13 @@ function cmdTestSelect(repoRoot2, target) {
   }
 }
 
-// src/commands/agents.ts
-function registerAgentCommands(program2, repoRoot2) {
-  const list = program2.command("agents").description("List supported agent installers");
-  list.command("list").description("Show agent ids").action(() => {
-    console.log(agentIds().join("\n"));
-  });
-  const anti = program2.command("antigravity").description("Antigravity IDE integration");
-  anti.command("install").description("Install Skill + Workflow, print allowlist guide").action(() => {
-    const root = repoRoot2();
-    const prefix = detectPrefix(root);
-    for (const line of installAntigravity(root, prefix)) console.log(`\u2713 ${line}`);
-    console.log("");
-    console.log(allowlistText(root));
-  });
-  anti.command("uninstall").description("Remove Skill + Workflow").action(() => {
-    for (const line of uninstallAntigravity(repoRoot2())) console.log(`\u2713 ${line}`);
-  });
-  for (const t of AGENT_MATRIX) {
-    if (t.id === "agents") continue;
-    const cmd = program2.command(t.id).description(`${t.label} integration`);
-    cmd.command("install").description(`Write ${t.rel}`).action(() => {
-      const root = repoRoot2();
-      const prefix = detectPrefix(root);
-      const r = installTarget(root, t, prefix);
-      console.log(`\u2713 ${t.label}: ${r.rel} (${r.how})`);
-      if (t.id === "opencode") {
-        console.log("");
-        console.log(opencodePermissionGuide(prefix));
-      }
-    });
-    cmd.command("uninstall").description(`Remove ScopeCairn block from ${t.rel}`).action(() => {
-      const r = uninstallTarget(repoRoot2(), t);
-      console.log(`\u2713 ${t.label}: ${r.rel} (${r.how})`);
-    });
-  }
-}
+// src/commands/update.ts
+import { execFileSync as execFileSync3, execSync } from "child_process";
 
 // package.json
 var package_default = {
   name: "scopecairn",
-  version: "0.6.0",
+  version: "0.7.0",
   description: "ScopeCairn \u2014 Codebase Intelligence & Agent Optimization Layer (local-first)",
   license: "MIT",
   type: "module",
@@ -5687,7 +5793,8 @@ var package_default = {
     clean: "tsx src/cli.ts clean",
     rebuild: "tsx src/cli.ts rebuild",
     test: "tsx --test tests/*.test.ts",
-    typecheck: "tsc --noEmit"
+    typecheck: "tsc --noEmit",
+    changelog: "node scripts/changelog.js"
   },
   dependencies: {
     commander: "^12.1.0",
@@ -5702,6 +5809,85 @@ var package_default = {
   }
 };
 
+// src/commands/update.ts
+function latestVersion() {
+  try {
+    const out = execFileSync3("npm", ["view", "scopecairn", "version"], {
+      encoding: "utf8",
+      timeout: 15e3,
+      stdio: ["ignore", "pipe", "ignore"],
+      shell: process.platform === "win32"
+    }).trim();
+    return out || null;
+  } catch {
+    return null;
+  }
+}
+function cmdUpdate(opts = {}) {
+  const current = package_default.version;
+  const latest = latestVersion();
+  if (!latest) {
+    console.log("Gagal memeriksa versi terbaru (offline atau belum terpublish).");
+    console.log("Update manual: npm i -g scopecairn@latest");
+    return;
+  }
+  console.log(`Versi terpasang: ${current} | terbaru: ${latest}`);
+  if (latest === current) {
+    console.log("Sudah versi terbaru.");
+    return;
+  }
+  if (opts.check) {
+    console.log("Update tersedia. Jalankan `scopecairn update`.");
+    return;
+  }
+  try {
+    execSync("npm i -g scopecairn@latest", {
+      stdio: "inherit",
+      shell: process.platform === "win32" ? "cmd.exe" : "/bin/sh"
+    });
+    console.log(`\u2713 scopecairn diperbarui ke ${latest}.`);
+  } catch {
+    console.log("Update gagal. Jalankan manual: npm i -g scopecairn@latest");
+  }
+}
+
+// src/commands/agents.ts
+function registerAgentCommands(program2, repoRoot2) {
+  const list = program2.command("agents").description("List supported agent installers");
+  list.command("list").description("Show agent ids").action(() => {
+    console.log(agentIds().join("\n"));
+  });
+  const anti = program2.command("antigravity").description("Antigravity IDE integration");
+  anti.command("install").description("Install Skill + Workflow, print allowlist guide").action(() => {
+    const root = repoRoot2();
+    const prefix = detectPrefix(root);
+    for (const line of installAntigravity(root, prefix)) console.log(`\u2713 ${line}`);
+    console.log("");
+    console.log(allowlistText(root));
+  });
+  anti.command("uninstall").description("Remove Skill + Workflow").action(() => {
+    for (const line of uninstallAntigravity(repoRoot2())) console.log(`\u2713 ${line}`);
+  });
+  for (const t of AGENT_MATRIX) {
+    if (t.id === "agents") continue;
+    const cmd = program2.command(t.id).description(`${t.label} integration`);
+    cmd.command("install").description(`Write ${t.rel}`).action(() => {
+      const root = repoRoot2();
+      const prefix = detectPrefix(root);
+      const r = installTarget(root, t, prefix);
+      console.log(`\u2713 ${t.label}: ${r.rel} (${r.how})`);
+      if (t.id === "opencode") {
+        console.log("");
+        console.log(opencodePermissionGuide(prefix));
+      }
+    });
+    cmd.command("uninstall").description(`Remove ScopeCairn block from ${t.rel}`).action(() => {
+      const r = uninstallTarget(repoRoot2(), t);
+      console.log(`\u2713 ${t.label}: ${r.rel} (${r.how})`);
+    });
+  }
+}
+
 // src/cli.ts
 var program = new Command();
 program.name("scopecairn").description("ScopeCairn \u2014 local-first codebase intelligence layer").version(package_default.version).addHelpText(
@@ -5758,6 +5944,7 @@ program.command("init [path]").description("Initial indexing + Skill, Workflow,
 program.command("benchmark").description("Retrieval recall, irrelevant ratio, context reduction + weight tuning").option("--tune", "grid search bobot FR-05").option("--no-refresh", "skip incremental refresh (debugging/benchmark)").action(
   (opts) => cmdBenchmark(repoRoot(), opts)
 );
+program.command("update").description("Update scopecairn ke versi terbaru dari npm registry").option("--check", "hanya cek versi terbaru tanpa menginstall").action((opts) => cmdUpdate(opts));
 registerAgentCommands(program, repoRoot);
 program.parseAsync(process.argv);
 export {

package/dist/{metrics-ZWWLUYJW.js → metrics-BLUHSM64.js}

@@ -7,7 +7,7 @@ import {
   getMetrics,
   refreshMetrics,
   topByPageRank
-} from "./chunk-ID4PMSFQ.js";
+} from "./chunk-DY2AAM62.js";
 export {
   PAGERANK_DAMPING,
   computeBetweenness,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "scopecairn",
-  "version": "0.6.0",
+  "version": "0.7.0",
   "description": "ScopeCairn — Codebase Intelligence & Agent Optimization Layer (local-first)",
   "license": "MIT",
   "type": "module",
@@ -34,7 +34,8 @@
     "clean": "tsx src/cli.ts clean",
     "rebuild": "tsx src/cli.ts rebuild",
     "test": "tsx --test tests/*.test.ts",
-    "typecheck": "tsc --noEmit"
+    "typecheck": "tsc --noEmit",
+    "changelog": "node scripts/changelog.js"
   },
   "dependencies": {
     "commander": "^12.1.0",