ucn 3.7.7 → 3.7.9

package/README.md

@@ -5,6 +5,7 @@ UCN gives AI agents call-graph-level understanding of code. Instead of reading e
 Designed for large codebases where agents waste context on reading large files. UCN's surgical output means agents spend tokens on reasoning, not on ingesting thousands of lines to find three callers, discourages agents from cutting corners, as without UCN, agents working with large codebases tend to skip parts of the code structure, assuming they have "enough data".
 
 Everything runs locally on your machine and nothing leaves your project.
+The ucn mcp is kept light, as all 28 commands ship as a single MCP tool, under 2k tokens total.
 
 ---
 
@@ -43,7 +44,7 @@ Precise answers without reading files.
   │      $ ucn about myFunc     Works standalone, no agent required.     │
   │                                                                      │
   │   2. MCP Server             Any MCP-compatible AI agent connects     │
-  │      $ ucn --mcp            and gets 28 commands automatically.         │
+  │      $ ucn --mcp            and gets 28 commands automatically.      │
   │                                                                      │
   │   3. Agent Skill            Drop-in skill for Claude Code and        │
   │      /ucn about myFunc      OpenAI Codex CLI. No server needed.      │

package/core/project.js

@@ -3206,7 +3206,7 @@ class ProjectIndex {
             sharedCallees: []
         };
 
-        // 1. Same file functions
+        // 1. Same file functions (sorted by proximity to target)
         const fileEntry = this.files.get(def.file);
         if (fileEntry) {
             for (const sym of fileEntry.symbols) {
@@ -3218,6 +3218,10 @@ class ProjectIndex {
                     });
                 }
             }
+            // Sort by distance from target function (nearest first)
+            related.sameFile.sort((a, b) =>
+                Math.abs(a.line - def.startLine) - Math.abs(b.line - def.startLine)
+            );
         }
 
         // 2. Similar names (shared prefix/suffix, camelCase similarity)
@@ -4097,14 +4101,25 @@ class ProjectIndex {
             const language = detectLanguage(call.file);
             if (!language) return { args: null, argCount: 0 };
 
-            const parser = getParser(language);
-            if (!parser) return { args: null, argCount: 0 };
-
             // Use tree cache to avoid re-parsing the same file in batch operations
             let tree = this._treeCache?.get(call.file);
             if (!tree) {
                 const content = this._readFile(call.file);
-                tree = safeParse(parser, content);
+                // HTML files need special handling: parse script blocks as JS
+                if (language === 'html') {
+                    const htmlModule = getLanguageModule('html');
+                    const htmlParser = getParser('html');
+                    const jsParser = getParser('javascript');
+                    if (!htmlParser || !jsParser) return { args: null, argCount: 0 };
+                    const blocks = htmlModule.extractScriptBlocks(content, htmlParser);
+                    if (blocks.length === 0) return { args: null, argCount: 0 };
+                    const virtualJS = htmlModule.buildVirtualJSContent(content, blocks);
+                    tree = safeParse(jsParser, virtualJS);
+                } else {
+                    const parser = getParser(language);
+                    if (!parser) return { args: null, argCount: 0 };
+                    tree = safeParse(parser, content);
+                }
                 if (!tree) return { args: null, argCount: 0 };
                 if (!this._treeCache) this._treeCache = new Map();
                 this._treeCache.set(call.file, tree);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "ucn",
-  "version": "3.7.7",
+  "version": "3.7.9",
   "description": "Universal Code Navigator — AST-based call graph analysis for AI agents. Find callers, trace impact, detect dead code across JS/TS, Python, Go, Rust, Java, and HTML. CLI, MCP server, and agent skill.",
   "main": "index.js",
   "bin": {

package/test/parser.test.js

@@ -12871,6 +12871,32 @@ function unusedFn() { return 0; }
         fs.rmSync(tmpDir, { recursive: true, force: true });
     });
 
+    it('verify/impact analyzeCallSite works for HTML inline scripts', () => {
+        const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'ucn-html-verify-'));
+        fs.writeFileSync(path.join(tmpDir, 'game.html'), `<html><body>
+<script>
+function checkCollision(objA, objB, threshX, threshZ) { return true; }
+function update() {
+    var hitbox = { x: 1, z: 2 };
+    if (checkCollision(p, player, hitbox.x, hitbox.z)) { return; }
+}
+</script>
+</body></html>`);
+        fs.writeFileSync(path.join(tmpDir, 'package.json'), '{"name": "test"}');
+
+        const { ProjectIndex } = require('../core/project');
+        const index = new ProjectIndex(tmpDir);
+        index.build();
+
+        const result = index.verify('checkCollision');
+        assert.ok(result.found);
+        assert.strictEqual(result.totalCalls, 1);
+        assert.strictEqual(result.valid, 1, `Expected 1 valid call, got ${result.valid} valid, ${result.uncertain} uncertain`);
+        assert.strictEqual(result.uncertain, 0, 'dot-access args should not be uncertain');
+
+        fs.rmSync(tmpDir, { recursive: true, force: true });
+    });
+
     it('findCallers detects callers from HTML event handlers', () => {
         const tmpDir = fs.mkdtempSync(path.join(os.tmpdir(), 'ucn-html-callers-'));
         fs.writeFileSync(path.join(tmpDir, 'page.html'), `<html><body>