ucn 4.1.0 → 4.1.2

package/README.md

@@ -34,7 +34,7 @@ UCN is deliberately lightweight:
 - **No language servers** - tree-sitter does the parsing, no compilation needed
 - **MCP is optional** - only needed if you connect UCN to an AI agent, the CLI and Skill work on their own
 
-And it's built to be **trusted**: every "who calls this?" splits into what UCN can prove and what it can't — each flagged with a reason, nothing silently dropped, [measured in CI against real compilers and language servers](#answers-you-can-trust).
+And it's built to be **trusted**. grep hands you raw text matches to verify yourself; UCN splits every "who calls this?" into what it can prove and what it can't — each flagged with a reason, nothing silently dropped. That claim is measured, not promised: CI re-derives UCN's answers from the real compilers and language servers (ts-morph, pyright, gopls, rust-analyzer, jdtls) across nineteen production repos — **96.6–100% confirmed-tier precision on eighteen of them, zero unexplained call edges, [or the build fails](#answers-you-can-trust)**.
 
 ---
 
@@ -152,7 +152,7 @@ UCN sorts every one of the 55 places the name appears:
 - **11 non-call** — imports, the definition, plain text.
 - **`0 unaccounted`** — the partition is complete. Nothing was dropped on the floor.
 
-The payoff: a **confirmed** answer is safe to refactor against, and a clean zero — no confirmed, no unverified, `0 unaccounted` — is a trustworthy zero (measured: 68 of 69 clean-zero samples across the 10-repo board agree with the compiler oracles; the one disagreement is a `new X()` on an old-style constructor function, which lands in the non-call counts, still visible). One caveat before deleting anything: callers aren't the only usages — if the NON-CALL counts are nonzero, run `ucn usages` to see what they are.
+The payoff: a **confirmed** answer is safe to refactor against, and a clean zero — no confirmed, no unverified, `0 unaccounted` — is a trustworthy zero (measured: 68 of 69 clean-zero samples across the pinned-repo board agree with the compiler oracles; the one disagreement is a `new X()` on an old-style constructor function, which lands in the non-call counts, still visible). One caveat before deleting anything: callers aren't the only usages — if the NON-CALL counts are nonzero, run `ucn usages` to see what they are.
 
 ### Measured against ground truth
 
@@ -160,13 +160,15 @@ This isn't a promise — it's a gate. CI re-derives UCN's caller answers from re
 
 | Language | Oracle | Confirmed-tier precision |
 |---|---|---|
-| TypeScript / JavaScript | ts-morph | 99.4–100% |
+| TypeScript / JavaScript | ts-morph | 99.5–100% |
 | Python | pyright (LSP) | 97.7–99.9% |
-| Go | gopls | 99.9–100% |
-| Rust | rust-analyzer | 99.0–100% |
-| Java | jdtls | 96.6% |
+| Go | gopls | 98.8–100% |
+| Rust | rust-analyzer | 99.3–100%* |
+| Java | jdtls | 96.6–100% |
 
-Ten pinned real-world repos (zod, express, httpx, rich, cobra, grpc-go, ripgrep, cursive, gson, preact-signals), three sampling seeds, every run gated at `missing-unexplained = 0` — plus a weekly fresh-repo arm: two unpinned repos the engine was never tuned on, same gate. The tree commands — `trace`, `blast`, `reverse-trace`, `affected-tests` — follow the same rule: confirmed trunk, uncertain branches flagged (`--expand-unverified` to follow). Run `ucn doctor` for the trust report on *your* repo.
+\* clap reads 92.4% — its callers live behind cargo feature gates the oracle compiles out; UCN sees the text, rust-analyzer doesn't.
+
+Nineteen pinned real-world repos (zod, preact-signals, express, hono, zustand, fastify, httpx, rich, click, cobra, grpc-go, viper, chi, ripgrep, cursive, clap, gson, javapoet, jsoup), three sampling seeds, every run gated at `missing-unexplained = 0` — plus a weekly fresh-repo arm: two unpinned repos the engine was never tuned on, same gate. The tree commands — `trace`, `blast`, `reverse-trace`, `affected-tests` — follow the same rule: confirmed trunk, uncertain branches flagged (`--expand-unverified` to follow). Run `ucn doctor` for the trust report on *your* repo.
 
 ## Change code without breaking things
 
@@ -401,7 +403,7 @@ function compareNames(a, b) {
 - **Coverage** - every command, every supported language, every surface (CLI, MCP, interactive)
 - **Systematic** - a harness exercises all command and flag combinations against real multi-language fixtures
 - **Test types** - unit, integration, per-language regression, formatter, cache, MCP edge cases, architecture parity guards
-- **Ground truth** - caller accuracy is measured against ts-morph, pyright, gopls, rust-analyzer, and jdtls on 10 pinned real repos, gated on zero unexplained edges (see [Answers you can trust](#answers-you-can-trust))
+- **Ground truth** - caller accuracy is measured against ts-morph, pyright, gopls, rust-analyzer, and jdtls on 19 pinned real repos, gated on zero unexplained edges (see [Answers you can trust](#answers-you-can-trust))
 
 ---
 

package/core/build-worker.js

@@ -61,14 +61,19 @@ function addSymbol(fileEntry, item, type) {
     if (item.traitImpl) symbol.traitImpl = true;
     if (item.traitName) symbol.traitName = item.traitName;
     if (item.isSignature) symbol.isSignature = true;
+    if (item.memberAssigned) symbol.memberAssigned = true;
 
     fileEntry.symbols.push(symbol);
-    fileEntry.bindings.push({
-        id: symbol.bindingId,
-        name: symbol.name,
-        type: symbol.type,
-        startLine: symbol.startLine,
-    });
+    // Property-assignment defs declare no lexical name (fix #269) — kept in
+    // lockstep with project.js addSymbol (the parallel≡sequential guard).
+    if (!item.memberAssigned) {
+        fileEntry.bindings.push({
+            id: symbol.bindingId,
+            name: symbol.name,
+            type: symbol.type,
+            startLine: symbol.startLine,
+        });
+    }
 }
 
 function processFile(filePath) {
@@ -119,6 +124,11 @@ function processFile(filePath) {
         }
     }
     if (content.length - lineStart > 1000) longLineCount++;
+    // A trailing newline TERMINATES the last line rather than opening a new
+    // one; an empty file has 0 lines (fix #251 — adjusted in indexFile only,
+    // so parallel-built stats reported +1 line per newline-terminated file).
+    if (content.length === 0) lineCount = 0;
+    else if (content.charCodeAt(content.length - 1) === 10) lineCount--;
 
     const isBundled = (
         content.includes('__webpack_require__') || content.includes('__webpack_modules__') ||
@@ -148,7 +158,11 @@ function processFile(filePath) {
         // the name-level scope/ownership discipline (found during fix #217).
         importBindings: imports.flatMap(i => (i.names || [])
             .filter(n => n && n !== '*' && n !== '_' && n !== '.')
-            .map(n => ({ name: n, module: i.module }))),
+            .map(n => {
+                // Rename pairing (fix #269) — lockstep with project.js.
+                const rn = (i.renames || []).find(r => r.original === n);
+                return { name: n, module: i.module, ...(rn && { alias: rn.local }) };
+            })),
         exports: exports.map(e => e.name),
         exportDetails: exports,
         symbols: [],

package/core/cache.js

@@ -109,7 +109,22 @@ const UCN_VERSION = require('../package.json').version;
 // function properties (module.exports = { doThing(x){} }) and list them in
 // exports; member-expression assignments record RHS identifier function
 // references (window.onload = handler).
-const CACHE_FORMAT_VERSION = 41;
+// v44 (fix #262): JS/TS literal ASSIGNMENTS type the variable (const lines
+// = [] → Array), and untyped reassignment deletes inferred types — call
+// records carry receiverType on literal-assigned receivers.
+// v45 (fix #265): Python typing @overload-decorated defs carry isSignature
+// (TS overload parity — pin identity closes over the overload group, and
+// pickBestDefinition prefers the implementation).
+// v46 (fix #266): Go call records mark New*-prefix-derived receiver types
+// as guesses (receiverTypeGuessed / receiverRootTypeGuessed) — convention,
+// not compiler truth; the return-type flow map overrides them and
+// exclusions never trust them. (fix #267) String-named TS module
+// declarations (`declare module '../x'` augmentations) no longer index as
+// namespace symbols — they declare no nameable identifier.
+// v47 (fix #269): Python absolute imports resolve through the PEP-517 src
+// layout (`import click` → src/click/__init__.py) — persisted
+// importGraph/exportGraph/moduleResolved content changed.
+const CACHE_FORMAT_VERSION = 47;
 
 /**
  * Save index to cache file