ucn 5.1.1 → 5.2.0

package/.claude/skills/ucn/SKILL.md

@@ -41,7 +41,7 @@ three. The text block is the whole response on every surface.
 
 Persistent indexes live in a per-user, project-keyed cache rather than the analyzed repository. Set `UCN_CACHE_DIR` to override the cache root; CLI `--no-cache` bypasses persistence and `--clear-cache` removes the current project's cache. Legacy `<project>/.ucn-cache` directories are migrated on first use.
 
-Supported source families are JavaScript/TypeScript/TSX, Python, Go, Rust, Java, C, C++, C#, and HTML inline JavaScript/event handlers. C/C++ uses `compile_commands.json` when available to classify headers and resolve include paths. Recoverable preprocessor branches contribute AST-proven source facts, so a single selected configuration does not silently erase definitions or calls; UCN still cannot prove which branch a particular build activates. This is portable AST analysis, not a compiler build; macros, templates, generated code, reflection, and external dependency semantics can remain unverified.
+Supported source families are JavaScript/TypeScript/TSX, Python, Go, Rust, Java, C, C++, C#, and HTML inline JavaScript/event handlers. C/C++ uses `compile_commands.json` when available to classify headers and resolve include paths. Recoverable preprocessor branches contribute AST-proven source facts, so a single selected configuration does not silently erase definitions or calls; disagreeing conditional macro identities stay visible as unverified. C++ resolution uses namespace ownership, static overload shape (including arrays), and macro-parameter requalification. C# resolution uses declared property/field receiver types plus overload and hiding discipline. This is portable AST analysis, not a compiler build; macros, templates, generated code, reflection, and external dependency semantics can remain unverified.
 
 `repo` readiness is task-specific. Its headline is navigation readiness;
 refactor, deletion, semantic recall, and the sampled evidence mix are separate
@@ -114,9 +114,16 @@ rejected, and unsupported advanced syntax should be handed to ripgrep.
 call candidates. Calls proved to belong to another same-name target are
 disclosed separately and excluded from the activity total.
 
-`plan` always includes the selected declaration plus indexed call/import/export
-previews. Read `changeSummary`, and manually review any edit marked
-`needsReview`; the command previews changes but does not apply or compile them.
+For `plan --rename-to`, the selected declaration is only the starting point.
+When the index proves the relationship, the rename unit closes over
+overload/signature groups, base and override declarations, Rust trait slots,
+Go interface slots and their satisfiers, exact call and value-reference tokens,
+imports/exports, Python `__all__` strings, and module-attribute references.
+Exact token/expression spans keep a foreign same-named occurrence on the same
+line unchanged. Open external interfaces, incomplete ownership, unresolved
+dispatch, or an inexact token route to `needsReview` instead of a synthesized
+edit. Read `changeSummary` and every review item. `plan` previews only: it does
+not modify files, run a compiler, or prove runtime compatibility.
 
 ## Efficient use
 

package/.claude/skills/ucn/references/commands.md

@@ -25,7 +25,7 @@ structural or code-only search.
 | `impact [handle]` | Show direct symbol impact when given a handle; without one, analyze the Git diff. |
 | `tests <handle\|file>` | Find statically linked direct tests. Set `--depth=N` for transitive affected tests. Empty results are not runtime coverage proof. |
 | `check [handle]` | Validate confirmed call-site arity for a symbol; without one, run the composed pre-commit diagnostic. |
-| `plan <handle>` | Preview `--rename-to`, `--add-param`, or `--remove-param` edits, including the selected declaration and indexed call/import/export sites. Review `changeSummary` and `needsReview`. |
+| `plan <handle>` | Preview `--rename-to`, `--add-param`, or `--remove-param` edits. For renames, the proven closure can include overload/signature groups, inheritance/trait/Go-interface slots, exact call/reference tokens, imports/exports, Python `__all__` strings, and module-attribute references. Open ownership or method sets stay `needsReview`; the command never applies or compiles edits. |
 
 ## Repository and architecture
 
@@ -84,4 +84,4 @@ Omit the target for the current project. A target may be a file, directory, or q
 
 ## Language notes
 
-Supported source families are JavaScript/TypeScript/TSX, Python, Go, Rust, Java, C, C++, C#, and HTML inline JavaScript/event handlers. C/C++ consumes `compile_commands.json` when present for header-language and include-path context, and retains AST-proven facts across recoverable preprocessor branches. UCN remains portable AST analysis: it does not run a compiler, preprocessor, Roslyn, or an LSP during normal queries, and it does not assert which conditional branch a build activates.
+Supported source families are JavaScript/TypeScript/TSX, Python, Go, Rust, Java, C, C++, C#, and HTML inline JavaScript/event handlers. C/C++ consumes `compile_commands.json` when present for header-language and include-path context, and retains AST-proven facts across recoverable preprocessor branches. C++ call identity uses namespace ownership, static overload shape (including arrays), and macro requalification; disagreeing conditional macro definitions remain visible as unverified. C# uses declared property/field receiver types and overload/hiding discipline. UCN remains portable AST analysis: it does not run a compiler, preprocessor, Roslyn, or an LSP during normal queries, and it does not assert which conditional branch a build activates.

package/README.md

@@ -39,6 +39,8 @@ It's deliberately lightweight:
 
 - **No required background process** - the CLI parses on demand, answers, and
   exits. MCP stays warm only when you choose to run it.
+- **No HTTP or network stack** - MCP uses a local, dependency-free stdio
+  transport; UCN never opens a port.
 - **No language servers, no compilation** - tree-sitter does the analysis
   without building the project.
 - **No config** - point it at a directory and ask.
@@ -200,7 +202,7 @@ ACCOUNT, CONTRACT, and WARNING lines survive the cut.
 Don't take the tiers on faith. Release gates re-derive UCN's answers from real
 compilers and language servers on a ten-repository board of pinned production
 codebases, and publishing is blocked unless they pass. The latest full
-release-board run (2026-08-11):
+release-board run (2026-08-24):
 
 | Repository | Pinned commit | Oracle | Caller precision | Caller recall | Callee prec / recall | Command checks |
 |---|---|---|---:|---:|---:|---:|
@@ -211,16 +213,16 @@ release-board run (2026-08-11):
 | [ripgrep](https://github.com/BurntSushi/ripgrep) | [`82313cf9`](https://github.com/BurntSushi/ripgrep/commit/82313cf95849bfe425109ad9506a52154879b1b1) | rust-analyzer | 100% | 100% | 100% / 100% | 100% |
 | [clap](https://github.com/clap-rs/clap) | [`d3e59a9a`](https://github.com/clap-rs/clap/commit/d3e59a9ab214910b9dad02921b7ef42c6400de9b) | rust-analyzer | 100% | 100% | 100% / 100% | 100% |
 | [javapoet](https://github.com/square/javapoet) | [`b9017a95`](https://github.com/square/javapoet/commit/b9017a9503b76e11b4ad4c1a9f050e2d29112cb0) | JDT LS | 100% | 100% | 100% / 100% | 100% |
-| [newtonsoft-json](https://github.com/JamesNK/Newtonsoft.Json) | [`4f73e743`](https://github.com/JamesNK/Newtonsoft.Json/commit/4f73e74372445108d2c1bda37b36e6f5e43402e0) | Roslyn | 99.4% | 100% | 100% / 100% | 100% |
+| [newtonsoft-json](https://github.com/JamesNK/Newtonsoft.Json) | [`4f73e743`](https://github.com/JamesNK/Newtonsoft.Json/commit/4f73e74372445108d2c1bda37b36e6f5e43402e0) | Roslyn | 100% | 100% | 100% / 100% | 100% |
 | [cjson](https://github.com/DaveGamble/cJSON) | [`c859b25d`](https://github.com/DaveGamble/cJSON/commit/c859b25da02955fef659d658b8f324b5cde87be3) | clangd | 100% | 100% | 100% / 100% | 100% |
-| [fmt](https://github.com/fmtlib/fmt) | [`e424e3f2`](https://github.com/fmtlib/fmt/commit/e424e3f2e607da02742f73db84873b8084fc714c) | clangd | 99.6% | 100% | 100% / 100% | 100% |
+| [fmt](https://github.com/fmtlib/fmt) | [`e424e3f2`](https://github.com/fmtlib/fmt/commit/e424e3f2e607da02742f73db84873b8084fc714c) | clangd | 100% | 100% | 100% / 100% | 100% |
 
 On the same run: **zero** in-scope oracle call edges missing from the answer
 (the release gate) on every repository, **zero** false-dead `deadcode` claims
 in the oracle-visible sample, **8,000 / 8,000** cross-command consistency
 comparisons in agreement, **10 / 10** repositories inside the performance
-budget (slowest median cold build 15.4K lines/second by wall time, worst query
-p95 73.8 ms, highest peak RSS 771 MB), and 3,383 automated tests with no
+budget (slowest normalized median cold build 17.4K lines/second by wall time,
+worst query p95 83.0 ms, highest peak RSS 908.5 MB), and 3,609 automated tests with no
 failures or skips. The same gates run in CI (the scheduled
 [Eval workflow](https://github.com/mleoca/ucn/actions/workflows/eval.yml) and
 every release tag), and `npm run trust:gate` reproduces the release board
@@ -234,10 +236,11 @@ external population. Unverified precision is reported separately and is
 intentionally much lower on dispatch-heavy code: those entries are review
 candidates, never confirmed claims.
 
-Beyond the publish gate, a scheduled board re-checks 22 pinned repositories
+Beyond the publish gate, a scheduled board re-checks 24 pinned repositories
 across every supported oracle language (zod, express, hono, zustand, fastify,
-rich, click, grpc-go, chi, cursive, gson, jsoup, and friends), plus a rotating
-fresh-repo arm of codebases the engine was never tuned on. Repositories that
+rich, click, attrs, grpc-go, chi, cursive, itertools, gson, jsoup, and
+friends), plus a rotating fresh-repo arm of codebases the engine was never
+tuned on. Repositories that
 expose a gap stay on the board; they don't get removed to keep a table pretty.
 These are measured results on pinned code, not a claim of universal program
 understanding or identical performance on every machine.
@@ -299,8 +302,17 @@ cli/index.js (2 changes)
 ... (more changes in core/discovery.js, core/cache.js, core/project.js, test/integration.test.js)
 ```
 
-Anything `plan` can't represent safely is marked `needsReview` instead of
-being silently rewritten. Before committing, point the same machinery at your
+For a rename, `plan` closes the change over every relationship the index can
+prove: overload/signature groups, base and override declarations, Rust trait
+slots, Go interface slots and their satisfiers, exact call and value-reference
+tokens, imports/exports, Python `__all__` strings, and module-attribute
+references. It edits exact token or expression spans, so another same-named
+call on the same line is not swept up accidentally.
+
+Open external interfaces, incomplete ownership, unresolved dispatch, or an
+inexact token are marked `needsReview` instead of receiving a synthesized
+edit. `plan` previews changes; it does not modify files or replace the
+compiler and test suite. Before committing, point the same machinery at your
 Git diff:
 
 ```bash
@@ -518,10 +530,13 @@ evidence.
 - **C** - functions, structs, macros, includes, calls, entry points, API
   analysis.
 - **C++** - C coverage plus classes, methods, constructors, inheritance,
-  namespaces, overloads, templates, typed field receivers.
+  namespaces, overloads, templates, typed field receivers, static array-shape
+  selection, and macro requalification. Conditional macro disagreement stays
+  visible as unverified.
 - **C#** - namespaces, classes/interfaces/records, fields/properties,
-  attributes, overload-aware calls, async flow, top-level programs, .NET stack
-  frames, ASP.NET/HttpClient endpoints.
+  attributes, declared property/field receiver types, overload and hiding
+  discipline, async flow, top-level programs, .NET stack frames, and
+  ASP.NET/HttpClient endpoints.
 - **HTML** - inline JavaScript and `on*` event handlers.
 
 For C and C++, a `compile_commands.json` improves header-language,

package/core/cache.js

@@ -617,7 +617,34 @@ function clearAllCaches() {
 // object they patch (`console.log = fn` → 'console') — so the builtin-global
 // exclusion can see cross-file that a project def rebinds the global's
 // member (fix #286a); impl-kind symbols leave the bindings table (#286b).
-const CACHE_FORMAT_VERSION = 173;
+// v177: C++ `template <>` full-specialization defs persist isSpecialization
+// (fix #299A — identity closure with the primary template), and C++
+// argument-position calls through a local callable variable record kind
+// 'expr' instead of call:NAME (fix #299B shadow guard).
+// v178: extendsGraph entries persist the defining symbol's startLine so
+// scope-aware consumers can pick the right def when several same-name
+// classes live in one file — function-local test subclasses (fix #300,
+// attrs-measured); Go range VALUE variables are typed from the container's
+// element type (declared fields/params/vars/literals — `for _, route :=
+// range r.routes` types route as Route; fix #300, mux-measured), changing
+// persisted call-record receiverTypes.
+// v179: Go unnamed interface parameters are retained in paramsStructured;
+// old caches report zero-arity interface methods and break rename closure.
+// v183: Go calls persist exact spans, builtin-new receiver types, indexed
+// multi-return assignment targets, and lexical-closure result hints for exact
+// chain/tuple flow; Rust macro-token calls retain compiler-declared closure
+// parameter receiver types, and Rust functions retain generic trait bounds.
+// v184: Python constructor-result records no longer retain a receiverType
+// inferred from an uppercase name that is value-bound in the lexical scope
+// (fix #304).  Reject v183 calls shards so stale false receiver evidence
+// cannot survive an engine upgrade.
+// v185: C# deep member receivers retain their root+field path instead of a
+// false terminal receiverType copied from the root variable (fix #305).
+// v188: C++ call records retain enclosing macro-argument positions and macro
+// symbols retain AST-derived parameter qualification/forwarding effects, so
+// replacement-list requalification cannot masquerade as lexical calls
+// (fix #306).
+const CACHE_FORMAT_VERSION = 188;
 
 /**
  * Save index to cache file