token-pilot 0.8.1 → 0.8.2

package/CHANGELOG.md

@@ -5,6 +5,12 @@ All notable changes to Token Pilot will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.8.2] - 2026-03-08
+
+### Fixed
+- **code_audit pattern search** — inject `node_modules/.bin` into PATH so `ast-index agrep` can find `sg` (ast-grep) when it's installed as optional dependency but not in system PATH.
+- **code_audit annotations** — strip `@` prefix from annotation names (`@Injectable` → `Injectable`). ast-index expects names without `@`.
+
 ## [0.8.1] - 2026-03-08
 
 ### Added

package/dist/ast-index/client.d.ts

@@ -12,6 +12,7 @@ export declare class AstIndexClient {
     private configBinaryPath;
     private autoInstall;
     private astGrepAvailable;
+    private astGrepBinDir;
     constructor(projectRoot: string, timeout?: number, options?: {
         binaryPath?: string | null;
         autoInstall?: boolean;

package/dist/ast-index/client.js

@@ -17,6 +17,7 @@ export class AstIndexClient {
     configBinaryPath;
     autoInstall;
     astGrepAvailable = null;
+    astGrepBinDir = null;
     constructor(projectRoot, timeout = 5000, options) {
         this.projectRoot = projectRoot;
         this.timeout = timeout;
@@ -647,14 +648,24 @@ export class AstIndexClient {
     async checkAstGrep() {
         if (this.astGrepAvailable !== null)
             return this.astGrepAvailable;
+        // Try system PATH first
         try {
             await execFileAsync('sg', ['--version'], { timeout: 3000 });
             this.astGrepAvailable = true;
+            return true;
         }
-        catch {
-            this.astGrepAvailable = false;
+        catch { /* not in PATH */ }
+        // Try node_modules/.bin/sg (from optionalDependencies or source installs)
+        try {
+            const localBinDir = new URL('../../node_modules/.bin', import.meta.url).pathname;
+            await execFileAsync(localBinDir + '/sg', ['--version'], { timeout: 3000 });
+            this.astGrepBinDir = localBinDir;
+            this.astGrepAvailable = true;
+            return true;
         }
-        return this.astGrepAvailable;
+        catch { /* not found locally either */ }
+        this.astGrepAvailable = false;
+        return false;
     }
     /** Structural pattern search via ast-grep. Requires ast-grep (sg) installed. */
     async agrep(pattern, options) {
@@ -836,10 +847,16 @@ export class AstIndexClient {
         if (!this.binaryPath) {
             throw new Error('ast-index not initialized. Call init() first.');
         }
+        // If ast-grep was found in node_modules/.bin, inject it into PATH
+        // so ast-index can find sg when running agrep
+        const env = this.astGrepBinDir
+            ? { ...process.env, PATH: `${this.astGrepBinDir}:${process.env.PATH ?? ''}` }
+            : undefined;
         const { stdout, stderr } = await execFileAsync(this.binaryPath, args, {
             timeout: timeoutMs ?? this.timeout,
             maxBuffer: 10 * 1024 * 1024, // 10MB
             cwd: this.projectRoot,
+            ...(env && { env }),
         });
         if (stderr) {
             console.error(`[token-pilot] ast-index stderr (${args[0]}): ${stderr.trim()}`);

package/dist/handlers/code-audit.js

@@ -17,7 +17,8 @@ export async function handleCodeAudit(args, projectRoot, astIndex) {
         case 'deprecated':
             return handleDeprecated(limit, projectRoot, astIndex);
         case 'annotations':
-            return handleAnnotations(args.name, limit, projectRoot, astIndex);
+            // Strip @ prefix — ast-index expects "Injectable" not "@Injectable"
+            return handleAnnotations(args.name.replace(/^@/, ''), limit, projectRoot, astIndex);
         case 'all':
             return handleAll(limit, projectRoot, astIndex);
         default:

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "token-pilot",
-  "version": "0.8.1",
-  "description": "Save 80% tokens when AI reads code — MCP server for token-efficient code navigation, AST-aware structural reading instead of dumping full files into context window",
+  "version": "0.8.2",
+  "description": "Save 60-80% tokens when AI reads code — MCP server for token-efficient code navigation, AST-aware structural reading instead of dumping full files into context window",
   "type": "module",
   "main": "dist/index.js",
   "bin": {