chore: import upstream snapshot with attribution
This commit is contained in:
wehub-resource-sync
@@ -0,0 +1,61 @@
|
||||
---
|
||||
# .clang-format — Code formatting for C11 codebase.
|
||||
#
|
||||
# Style: K&R braces, 4-space indent, 100-column limit.
|
||||
# Equivalent to Go's gofmt for consistent formatting.
|
||||
|
||||
Language: Cpp
|
||||
BasedOnStyle: LLVM
|
||||
|
||||
# Indentation
|
||||
IndentWidth: 4
|
||||
ContinuationIndentWidth: 4
|
||||
TabWidth: 4
|
||||
UseTab: Never
|
||||
|
||||
# Column limit
|
||||
ColumnLimit: 100
|
||||
|
||||
# Braces: K&R style (same line)
|
||||
BreakBeforeBraces: Attach
|
||||
AllowShortFunctionsOnASingleLine: Empty
|
||||
AllowShortIfStatementsOnASingleLine: Never
|
||||
AllowShortLoopsOnASingleLine: false
|
||||
AllowShortBlocksOnASingleLine: Empty
|
||||
|
||||
# Pointer alignment: right (matches our style: const char* name)
|
||||
PointerAlignment: Right
|
||||
DerivePointerAlignment: false
|
||||
|
||||
# Includes: keep grouped
|
||||
IncludeBlocks: Preserve
|
||||
SortIncludes: Never
|
||||
|
||||
# Switch/case
|
||||
IndentCaseLabels: false
|
||||
IndentCaseBlocks: false
|
||||
|
||||
# Spacing
|
||||
SpaceAfterCStyleCast: false
|
||||
SpaceBeforeParens: ControlStatements
|
||||
SpaceInEmptyParentheses: false
|
||||
SpacesInParentheses: false
|
||||
SpacesInSquareBrackets: false
|
||||
|
||||
# Alignment
|
||||
AlignAfterOpenBracket: Align
|
||||
AlignConsecutiveAssignments: false
|
||||
AlignConsecutiveDeclarations: false
|
||||
AlignEscapedNewlines: Left
|
||||
AlignOperands: true
|
||||
AlignTrailingComments: true
|
||||
|
||||
# Penalties (prefer breaking after return type for long signatures)
|
||||
PenaltyBreakAssignment: 2
|
||||
PenaltyBreakBeforeFirstCallParameter: 19
|
||||
PenaltyReturnTypeOnItsOwnLine: 200
|
||||
|
||||
# Keep existing formatting for macro-heavy code
|
||||
ForEachMacros:
|
||||
- CBM_DYN_ARRAY_FOREACH
|
||||
...
|
||||
+68
@@ -0,0 +1,68 @@
|
||||
# .clang-tidy — C11 static analysis configuration (BLOCKING).
|
||||
#
|
||||
# ALL checks enabled. WarningsAsErrors: '*'.
|
||||
# Check thresholds configured for idiomatic C11 (not C++).
|
||||
#
|
||||
# Disabled checks (with reasoning):
|
||||
#
|
||||
# C++ idiom checks (not applicable to C11):
|
||||
# - bugprone-multi-level-implicit-pointer-conversion: void* is implicit in C
|
||||
# - readability-implicit-bool-conversion: if(ptr), if(count) is idiomatic C
|
||||
#
|
||||
# LLVM analyzer false positives (no fix available):
|
||||
# - DeprecatedOrUnsafeBufferHandling: flags fprintf/snprintf, Annex K not
|
||||
# available on Linux/macOS (LLVM #64027)
|
||||
# - ArrayBound: taint analysis false positives on buf[fread_result] (LLVM #126884)
|
||||
#
|
||||
# Cosmetic checks whitelisted (no memory safety or performance impact):
|
||||
# - bugprone-easily-swappable-parameters: internal APIs with descriptive
|
||||
# param names; struct wrappers would add churn without safety benefit
|
||||
# - concurrency-mt-unsafe: only readdir() remains, which is safe with
|
||||
# per-directory-handle usage (each thread owns its DIR*)
|
||||
# - bugprone-command-processor: popen() required for git integration;
|
||||
# all inputs are validated internal strings, no injection risk
|
||||
|
||||
Checks: >
|
||||
-*,
|
||||
bugprone-*,
|
||||
cert-*,
|
||||
concurrency-*,
|
||||
darwin-*,
|
||||
linuxkernel-*,
|
||||
misc-*,
|
||||
performance-*,
|
||||
portability-*,
|
||||
readability-*,
|
||||
clang-analyzer-*,
|
||||
-bugprone-multi-level-implicit-pointer-conversion,
|
||||
-readability-implicit-bool-conversion,
|
||||
-bugprone-easily-swappable-parameters,
|
||||
-concurrency-mt-unsafe,
|
||||
-bugprone-command-processor,
|
||||
-cert-env33-c,
|
||||
-clang-analyzer-security.insecureAPI.DeprecatedOrUnsafeBufferHandling,
|
||||
-clang-analyzer-security.ArrayBound,
|
||||
|
||||
WarningsAsErrors: '*'
|
||||
|
||||
CheckOptions:
|
||||
readability-identifier-length.MinimumVariableNameLength: 1
|
||||
readability-identifier-length.MinimumParameterNameLength: 1
|
||||
readability-identifier-length.MinimumLoopCounterNameLength: 1
|
||||
readability-magic-numbers.IgnoredIntegerValues: ""
|
||||
readability-magic-numbers.IgnoredFloatingPointValues: ""
|
||||
bugprone-easily-swappable-parameters.MinimumLength: 3
|
||||
misc-include-cleaner.IgnoreHeaders: "sys/.*|mach/.*|dispatch/.*|_types/.*|Availability\\.h|secure/.*|_.*\\.h|zconf\\.h"
|
||||
readability-function-cognitive-complexity.Threshold: 25
|
||||
readability-function-size.StatementThreshold: 200
|
||||
readability-function-size.LineThreshold: 400
|
||||
|
||||
HeaderFilterRegex: '^(src|tests)/.*\.h$'
|
||||
|
||||
ExtraArgs:
|
||||
- '-std=c11'
|
||||
- '-Isrc'
|
||||
- '-Ivendored'
|
||||
- '-Ivendored/sqlite3'
|
||||
- '-Iinternal/cbm'
|
||||
- '-Iinternal/cbm/vendored/ts_runtime/include'
|
||||
@@ -0,0 +1,15 @@
|
||||
# cppcheck suppressions file
|
||||
# Only universally-supported suppression IDs here.
|
||||
# Version-specific IDs go in Makefile.cbm as --suppress flags.
|
||||
|
||||
# Vendored code
|
||||
*:internal/cbm/vendored/*
|
||||
*:vendored/*
|
||||
|
||||
# Test framework patterns
|
||||
unusedFunction:tests/*
|
||||
|
||||
# Intentional patterns
|
||||
constVariablePointer
|
||||
constParameterPointer
|
||||
constVariable
|
||||
@@ -0,0 +1,3 @@
|
||||
# Vendored tree-sitter grammars — machine-generated, hide from stats and diffs
|
||||
internal/cbm/vendored/grammars/**/parser.c linguist-generated=true diff=false
|
||||
internal/cbm/vendored/grammars/**/scanner.c linguist-generated=true diff=false
|
||||
@@ -0,0 +1,61 @@
|
||||
# Binding ownership policy for codebase-memory-mcp.
|
||||
#
|
||||
# This repository is user-owned, so ownership is expressed with individual
|
||||
# GitHub handles rather than organization teams.
|
||||
#
|
||||
# CODEOWNERS is the binding merge gate, not the reviewer directory.
|
||||
# Advisory area reviewers are recorded in MAINTAINERS.md. A handle appears in
|
||||
# this file only when that person is authorized to satisfy binding code-owner
|
||||
# approval for the matching path.
|
||||
|
||||
# Default owner gate: every pull request crosses the project owner's desk.
|
||||
* @DeusData
|
||||
|
||||
# Security-sensitive and authority-sensitive surfaces.
|
||||
/.github/ @DeusData
|
||||
/scripts/ @DeusData
|
||||
/Makefile.cbm @DeusData
|
||||
/SECURITY.md @DeusData
|
||||
/docs/SECURITY-DISCLOSURE.md @DeusData
|
||||
/CONTRIBUTING.md @DeusData
|
||||
/CODE_OF_CONDUCT.md @DeusData
|
||||
/DCO @DeusData
|
||||
/LICENSE @DeusData
|
||||
/MAINTAINERS.md @DeusData
|
||||
|
||||
# Release and distribution surfaces.
|
||||
/pkg/ @DeusData
|
||||
/install.sh @DeusData
|
||||
/install.ps1 @DeusData
|
||||
/server.json @DeusData
|
||||
/glama.json @DeusData
|
||||
/flake.nix @DeusData
|
||||
/flake.lock @DeusData
|
||||
/THIRD_PARTY.md @DeusData
|
||||
/vendored/ @DeusData
|
||||
/internal/cbm/vendored/ @DeusData
|
||||
|
||||
# Core product surfaces.
|
||||
/src/foundation/ @DeusData
|
||||
/src/store/ @DeusData
|
||||
/src/cypher/ @DeusData
|
||||
/src/graph_buffer/ @DeusData
|
||||
/src/mcp/ @DeusData
|
||||
/src/cli/ @DeusData
|
||||
/src/discover/ @DeusData
|
||||
/src/watcher/ @DeusData
|
||||
/src/pipeline/ @DeusData
|
||||
/src/git/ @DeusData
|
||||
/src/semantic/ @DeusData
|
||||
/src/simhash/ @DeusData
|
||||
/src/traces/ @DeusData
|
||||
/src/ui/ @DeusData
|
||||
|
||||
# Extraction, language support, and graph UI.
|
||||
/internal/cbm/ @DeusData
|
||||
/tools/ @DeusData
|
||||
/graph-ui/ @DeusData
|
||||
|
||||
# Test and reproduction infrastructure.
|
||||
/tests/ @DeusData
|
||||
/test-infrastructure/ @DeusData
|
||||
@@ -0,0 +1,136 @@
|
||||
name: Bug report
|
||||
description: Something is wrong — help us reproduce it exactly.
|
||||
labels: ["bug"]
|
||||
body:
|
||||
- type: markdown
|
||||
attributes:
|
||||
value: |
|
||||
Thanks for the report! The single most valuable thing you can give us
|
||||
is a **reproduction we can run ourselves**.
|
||||
|
||||
**Please do not paste proprietary code or logs.** If the problem
|
||||
shows up on private code, reproduce it with a small dummy snippet or
|
||||
point us at a **public OSS repository** (e.g. zod, django, serilog)
|
||||
plus the file/commit where it happens — that is how we debug here.
|
||||
|
||||
- type: input
|
||||
id: version
|
||||
attributes:
|
||||
label: Version
|
||||
description: Output of `codebase-memory-mcp --version`
|
||||
placeholder: codebase-memory-mcp 0.8.1
|
||||
validations:
|
||||
required: true
|
||||
|
||||
- type: dropdown
|
||||
id: platform
|
||||
attributes:
|
||||
label: Platform
|
||||
options:
|
||||
- macOS (Apple Silicon)
|
||||
- macOS (Intel)
|
||||
- Linux (x64)
|
||||
- Linux (arm64)
|
||||
- Windows (x64)
|
||||
validations:
|
||||
required: true
|
||||
|
||||
- type: dropdown
|
||||
id: channel
|
||||
attributes:
|
||||
label: Install channel
|
||||
options:
|
||||
- GitHub release archive / install.sh / install.ps1
|
||||
- npm
|
||||
- PyPI
|
||||
- Homebrew
|
||||
- AUR
|
||||
- Scoop / Winget / Chocolatey
|
||||
- go install
|
||||
- Built from source
|
||||
validations:
|
||||
required: true
|
||||
|
||||
- type: dropdown
|
||||
id: variant
|
||||
attributes:
|
||||
label: Binary variant
|
||||
options:
|
||||
- standard
|
||||
- ui
|
||||
validations:
|
||||
required: true
|
||||
|
||||
- type: textarea
|
||||
id: what-happened
|
||||
attributes:
|
||||
label: What happened, and what did you expect?
|
||||
description: Actual vs. expected behavior, in a few sentences.
|
||||
validations:
|
||||
required: true
|
||||
|
||||
- type: textarea
|
||||
id: reproduction
|
||||
attributes:
|
||||
label: Reproduction
|
||||
description: |
|
||||
The exact steps so we can reproduce it ourselves:
|
||||
1. The code being indexed — a minimal dummy snippet pasted here, or a
|
||||
public repo + commit + file path (e.g. `colinhacks/zod@a1b2c3d,
|
||||
packages/zod/src/v4/core/parse.ts`).
|
||||
2. The exact command or MCP tool call, including JSON arguments
|
||||
(e.g. `codebase-memory-mcp cli search_graph '{"project":"...",
|
||||
"name_pattern":"..."}'`).
|
||||
3. What the output was vs. what it should have been.
|
||||
placeholder: |
|
||||
1. Code: public repo colinhacks/zod @ <commit>, file packages/...
|
||||
— or dummy snippet:
|
||||
```ts
|
||||
interface Model<T> { create(doc: Partial<T>): Promise<T>; }
|
||||
```
|
||||
2. Command: codebase-memory-mcp cli index_repository '{"repo_path":"/tmp/zod"}'
|
||||
3. Result: ... / Expected: ...
|
||||
validations:
|
||||
required: true
|
||||
|
||||
- type: textarea
|
||||
id: logs
|
||||
attributes:
|
||||
label: Logs
|
||||
description: |
|
||||
Relevant log output (stderr of the binary; for the UI variant also
|
||||
`GET /api/logs`). Will be auto-formatted as code — no backticks needed.
|
||||
Please check for private paths/strings before pasting.
|
||||
render: text
|
||||
|
||||
- type: textarea
|
||||
id: diagnostics
|
||||
attributes:
|
||||
label: Diagnostics trajectory (memory / performance / leak issues)
|
||||
description: |
|
||||
We collect **no telemetry**, so for a memory or performance problem we
|
||||
need the diagnostics trajectory from your machine. Set
|
||||
`CBM_DIAGNOSTICS=1`, reproduce the issue, then attach (or paste) the file
|
||||
`cbm-diagnostics-<pid>.ndjson` from your temp dir (`$TMPDIR` / `/tmp`, or
|
||||
`%TEMP%` on Windows). It records only resource counters (rss, committed,
|
||||
fds, query counts) over time — no code or queries. See the README
|
||||
"Troubleshooting & Diagnostics" section. Pasting an agent's summary of
|
||||
the trajectory is also fine.
|
||||
render: text
|
||||
|
||||
- type: input
|
||||
id: scale
|
||||
attributes:
|
||||
label: Project scale (if relevant)
|
||||
description: Approximate nodes/edges/files from the indexing summary
|
||||
placeholder: "5,656 nodes / 14,517 edges / 475 files"
|
||||
|
||||
- type: checkboxes
|
||||
id: confirmations
|
||||
attributes:
|
||||
label: Confirmations
|
||||
options:
|
||||
- label: I searched existing issues and this is not a duplicate.
|
||||
required: true
|
||||
- label: My reproduction uses shareable code (a dummy snippet or a public OSS repository), not proprietary code.
|
||||
required: true
|
||||
@@ -0,0 +1,5 @@
|
||||
blank_issues_enabled: false
|
||||
contact_links:
|
||||
- name: Security vulnerability
|
||||
url: https://github.com/DeusData/codebase-memory-mcp/security/advisories/new
|
||||
about: Please report security issues privately — never in a public issue. See SECURITY.md.
|
||||
@@ -0,0 +1,33 @@
|
||||
name: Feature request
|
||||
description: Propose an improvement or new capability.
|
||||
labels: ["enhancement"]
|
||||
body:
|
||||
- type: textarea
|
||||
id: problem
|
||||
attributes:
|
||||
label: What problem does this solve?
|
||||
description: The situation where the current behavior falls short — concrete examples beat abstractions.
|
||||
validations:
|
||||
required: true
|
||||
|
||||
- type: textarea
|
||||
id: proposal
|
||||
attributes:
|
||||
label: Proposed solution
|
||||
description: What you would like to happen. For new language/LSP support, name the public OSS repos that would make good test beds.
|
||||
validations:
|
||||
required: true
|
||||
|
||||
- type: textarea
|
||||
id: alternatives
|
||||
attributes:
|
||||
label: Alternatives considered
|
||||
description: Other approaches and why they fall short (optional).
|
||||
|
||||
- type: checkboxes
|
||||
id: confirmations
|
||||
attributes:
|
||||
label: Confirmations
|
||||
options:
|
||||
- label: I searched existing issues and this is not a duplicate.
|
||||
required: true
|
||||
@@ -0,0 +1,6 @@
|
||||
version: 2
|
||||
updates:
|
||||
- package-ecosystem: "github-actions"
|
||||
directory: "/"
|
||||
schedule:
|
||||
interval: "weekly"
|
||||
@@ -0,0 +1,21 @@
|
||||
# Config for the Issue area labeler (.github/workflows/issue-labeler.yml).
|
||||
# FORMAT (parsed line-wise by the workflow): one rule per line, exactly
|
||||
# "label": 'regex'
|
||||
# Patterns are compiled as JavaScript RegExp with the `i` flag applied by
|
||||
# the workflow — do NOT use PCRE-only syntax like inline `(?i)` groups
|
||||
# (that broke every run, #764). Matched against issue title + body.
|
||||
# Additive only — these never remove a maintainer's manual label.
|
||||
|
||||
"windows": '\b(windows|win\s?1[01]|powershell|\.ps1|mapped drive|smb share|unc path)\b'
|
||||
|
||||
"stability/performance": '(out of memory|\boom\b|memory leak|segfault|sigsegv|sigbus|crash(es|ed|ing)?|core dumped|\bhang(s|ing)?\b|deadlock|freezes?|time(s)?\s?out|timeout|never finishes|cgroup)'
|
||||
|
||||
"parsing/quality": '(trace_path|query_graph|search_graph|calls? edge|missing (edges|nodes)|false positive|zero edges|0 edges|module node|not indexed|extraction|wrong (node|label))'
|
||||
|
||||
"editor/integration": '(cursor|vscode|vs code|opencode|codex|claude code|gemini cli|antigravity|mcp client|\.mcp\.json|installer)'
|
||||
|
||||
"ux/behavior": '(web ui|\bui\b|dashboard|3d graph|visuali[sz]ation|watcher|project name|frontend)'
|
||||
|
||||
"cypher": '\bcypher\b'
|
||||
|
||||
"language-request": '(language support|hybrid lsp|new language support|support for \w+ language)'
|
||||
@@ -0,0 +1,35 @@
|
||||
# Config for dessant/label-actions (.github/workflows/label-actions.yml).
|
||||
# Each top-level key is a label; when that label is added to an issue, the
|
||||
# listed actions run. See https://github.com/dessant/label-actions
|
||||
|
||||
# When a maintainer marks an issue as a duplicate.
|
||||
duplicate:
|
||||
comment: >
|
||||
Thanks for raising this! It looks like a duplicate of an existing issue —
|
||||
the canonical one is linked above. Continuing the discussion there keeps
|
||||
everything in one place. We leave this open for visibility; a maintainer
|
||||
will close it once it's fully covered.
|
||||
# We intentionally do NOT auto-close duplicates (we prefer linking).
|
||||
# To auto-close instead, uncomment the two lines below:
|
||||
# close: true
|
||||
# close-reason: not planned
|
||||
|
||||
# When a maintainer marks an issue as waiting on the reporter.
|
||||
# (The stale workflow then warns at 21 days and closes at 35.)
|
||||
awaiting-reporter:
|
||||
comment: >
|
||||
Thanks for the report! To move this forward we need a bit more so we can
|
||||
reproduce it ourselves:
|
||||
|
||||
|
||||
- the `codebase-memory-mcp --version` you're on
|
||||
|
||||
- the exact steps or command you ran
|
||||
|
||||
- a **public** repo (or a small dummy snippet) that shows the problem —
|
||||
please don't paste proprietary code
|
||||
|
||||
|
||||
Once that's here we'll pick it straight back up. Heads-up: issues left
|
||||
`awaiting-reporter` are automatically closed after a few weeks of silence,
|
||||
but a comment reopens the door anytime.
|
||||
@@ -0,0 +1,11 @@
|
||||
## What does this PR do?
|
||||
|
||||
<!-- Short description of the change and why it is needed. -->
|
||||
|
||||
## Checklist
|
||||
|
||||
- [ ] Every commit is signed off (`git commit -s`) — required, CI rejects
|
||||
unsigned commits ([DCO](../DCO), see [CONTRIBUTING.md](../CONTRIBUTING.md))
|
||||
- [ ] Tests pass locally (`make -f Makefile.cbm test`)
|
||||
- [ ] Lint passes (`make -f Makefile.cbm lint-ci`)
|
||||
- [ ] New behavior is covered by a test (reproduce-first for bug fixes)
|
||||
@@ -0,0 +1,378 @@
|
||||
# Reusable: build binaries (standard + UI) on all platforms
|
||||
name: Build
|
||||
|
||||
on:
|
||||
workflow_call:
|
||||
inputs:
|
||||
version:
|
||||
description: 'Version string (e.g. v0.8.0)'
|
||||
type: string
|
||||
default: ''
|
||||
attest:
|
||||
description: 'Generate build provenance attestations for release artifacts'
|
||||
type: boolean
|
||||
default: false
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
id-token: write
|
||||
attestations: write
|
||||
|
||||
jobs:
|
||||
build-unix:
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
include:
|
||||
- os: ubuntu-latest
|
||||
goos: linux
|
||||
goarch: amd64
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: ubuntu-24.04-arm
|
||||
goos: linux
|
||||
goarch: arm64
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: macos-14
|
||||
goos: darwin
|
||||
goarch: arm64
|
||||
cc: cc
|
||||
cxx: c++
|
||||
- os: macos-15-intel
|
||||
goos: darwin
|
||||
goarch: amd64
|
||||
cc: cc
|
||||
cxx: c++
|
||||
runs-on: ${{ matrix.os }}
|
||||
# Every leg is BLOCKING — no continue-on-error. The darwin-amd64 binary
|
||||
# built on macos-15-intel must ship with every release; if that runner is
|
||||
# unavailable the build fails loudly rather than silently publishing a
|
||||
# release with no Intel macOS binary (a user-reported gap). macos-15-intel
|
||||
# is GitHub's supported Intel image through Aug 2027 (the last x86_64 macOS
|
||||
# runner); revisit the Intel leg before that retirement.
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- name: Install deps (Ubuntu)
|
||||
if: startsWith(matrix.os, 'ubuntu')
|
||||
run: sudo apt-get update && sudo apt-get install -y zlib1g-dev
|
||||
|
||||
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
|
||||
with:
|
||||
node-version: "22"
|
||||
|
||||
- name: Build standard binary
|
||||
env:
|
||||
VERSION: ${{ inputs.version }}
|
||||
CC: ${{ matrix.cc }}
|
||||
CXX: ${{ matrix.cxx }}
|
||||
run: |
|
||||
if [ -n "$VERSION" ]; then
|
||||
scripts/build.sh --version "$VERSION" "CC=$CC" "CXX=$CXX"
|
||||
else
|
||||
scripts/build.sh "CC=$CC" "CXX=$CXX"
|
||||
fi
|
||||
|
||||
- name: Ad-hoc sign macOS binary
|
||||
if: startsWith(matrix.os, 'macos')
|
||||
run: codesign --sign - --force build/c/codebase-memory-mcp
|
||||
|
||||
- name: Archive standard binary
|
||||
env:
|
||||
GOOS: ${{ matrix.goos }}
|
||||
GOARCH: ${{ matrix.goarch }}
|
||||
run: |
|
||||
cp LICENSE install.sh build/c/
|
||||
scripts/gen-third-party-notices.sh build/c/THIRD_PARTY_NOTICES.md
|
||||
tar -czf "codebase-memory-mcp-${GOOS}-${GOARCH}.tar.gz" \
|
||||
-C build/c codebase-memory-mcp LICENSE install.sh THIRD_PARTY_NOTICES.md
|
||||
|
||||
- name: Attest standard binary provenance
|
||||
if: ${{ inputs.attest }}
|
||||
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
|
||||
with:
|
||||
subject-path: codebase-memory-mcp-${{ matrix.goos }}-${{ matrix.goarch }}.tar.gz
|
||||
|
||||
- name: Build UI binary
|
||||
env:
|
||||
VERSION: ${{ inputs.version }}
|
||||
CC: ${{ matrix.cc }}
|
||||
CXX: ${{ matrix.cxx }}
|
||||
run: |
|
||||
if [ -n "$VERSION" ]; then
|
||||
scripts/build.sh --with-ui --version "$VERSION" "CC=$CC" "CXX=$CXX"
|
||||
else
|
||||
scripts/build.sh --with-ui "CC=$CC" "CXX=$CXX"
|
||||
fi
|
||||
|
||||
- name: Ad-hoc sign macOS UI binary
|
||||
if: startsWith(matrix.os, 'macos')
|
||||
run: codesign --sign - --force build/c/codebase-memory-mcp
|
||||
|
||||
- name: Frontend integrity scan
|
||||
if: matrix.goos == 'linux' && matrix.goarch == 'amd64'
|
||||
run: scripts/security-ui.sh
|
||||
|
||||
- name: Archive UI binary
|
||||
env:
|
||||
GOOS: ${{ matrix.goos }}
|
||||
GOARCH: ${{ matrix.goarch }}
|
||||
run: |
|
||||
cp LICENSE install.sh build/c/
|
||||
scripts/gen-third-party-notices.sh build/c/THIRD_PARTY_NOTICES.md
|
||||
tar -czf "codebase-memory-mcp-ui-${GOOS}-${GOARCH}.tar.gz" \
|
||||
-C build/c codebase-memory-mcp LICENSE install.sh THIRD_PARTY_NOTICES.md
|
||||
|
||||
- name: Attest UI binary provenance
|
||||
if: ${{ inputs.attest }}
|
||||
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
|
||||
with:
|
||||
subject-path: codebase-memory-mcp-ui-${{ matrix.goos }}-${{ matrix.goarch }}.tar.gz
|
||||
|
||||
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: binaries-${{ matrix.goos }}-${{ matrix.goarch }}
|
||||
path: "*.tar.gz"
|
||||
|
||||
build-windows:
|
||||
runs-on: windows-latest
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
with:
|
||||
msystem: CLANG64
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-x86_64-clang
|
||||
mingw-w64-clang-x86_64-zlib
|
||||
make
|
||||
zip
|
||||
|
||||
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
|
||||
with:
|
||||
node-version: "22"
|
||||
|
||||
- name: Build standard binary
|
||||
shell: msys2 {0}
|
||||
env:
|
||||
VERSION: ${{ inputs.version }}
|
||||
run: |
|
||||
if [ -n "$VERSION" ]; then
|
||||
scripts/build.sh --version "$VERSION" CC=clang CXX=clang++
|
||||
else
|
||||
scripts/build.sh CC=clang CXX=clang++
|
||||
fi
|
||||
|
||||
- name: Archive standard binary
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
BIN=build/c/codebase-memory-mcp
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
cp "$BIN" codebase-memory-mcp.exe
|
||||
scripts/gen-third-party-notices.sh THIRD_PARTY_NOTICES.md
|
||||
zip codebase-memory-mcp-windows-amd64.zip codebase-memory-mcp.exe LICENSE install.ps1 THIRD_PARTY_NOTICES.md
|
||||
|
||||
- name: Attest standard binary provenance
|
||||
if: ${{ inputs.attest }}
|
||||
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
|
||||
with:
|
||||
subject-path: codebase-memory-mcp-windows-amd64.zip
|
||||
|
||||
- name: Build UI binary
|
||||
shell: msys2 {0}
|
||||
env:
|
||||
VERSION: ${{ inputs.version }}
|
||||
run: |
|
||||
if [ -n "$VERSION" ]; then
|
||||
scripts/build.sh --with-ui --version "$VERSION" CC=clang CXX=clang++
|
||||
else
|
||||
scripts/build.sh --with-ui CC=clang CXX=clang++
|
||||
fi
|
||||
|
||||
- name: Archive UI binary
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
BIN=build/c/codebase-memory-mcp
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
cp "$BIN" codebase-memory-mcp.exe
|
||||
scripts/gen-third-party-notices.sh THIRD_PARTY_NOTICES.md
|
||||
zip codebase-memory-mcp-ui-windows-amd64.zip codebase-memory-mcp.exe LICENSE install.ps1 THIRD_PARTY_NOTICES.md
|
||||
|
||||
- name: Attest UI binary provenance
|
||||
if: ${{ inputs.attest }}
|
||||
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
|
||||
with:
|
||||
subject-path: codebase-memory-mcp-ui-windows-amd64.zip
|
||||
|
||||
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: binaries-windows-amd64
|
||||
path: "*.zip"
|
||||
|
||||
build-windows-arm64:
|
||||
# Native ARM64 Windows binary via the CLANGARM64 toolchain on the
|
||||
# windows-11-arm runner (the same toolchain the test suite already
|
||||
# exercises). Without it, ARM-Windows users fall back to the x86_64
|
||||
# binary under emulation, and npm/pip on native-ARM Node/Python 404.
|
||||
runs-on: windows-11-arm
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
with:
|
||||
msystem: CLANGARM64
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-aarch64-clang
|
||||
mingw-w64-clang-aarch64-zlib
|
||||
make
|
||||
zip
|
||||
|
||||
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
|
||||
with:
|
||||
node-version: "22"
|
||||
|
||||
- name: Build standard binary
|
||||
shell: msys2 {0}
|
||||
env:
|
||||
VERSION: ${{ inputs.version }}
|
||||
run: |
|
||||
if [ -n "$VERSION" ]; then
|
||||
scripts/build.sh --version "$VERSION" CC=clang CXX=clang++
|
||||
else
|
||||
scripts/build.sh CC=clang CXX=clang++
|
||||
fi
|
||||
|
||||
- name: Archive standard binary
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
BIN=build/c/codebase-memory-mcp
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
cp "$BIN" codebase-memory-mcp.exe
|
||||
scripts/gen-third-party-notices.sh THIRD_PARTY_NOTICES.md
|
||||
zip codebase-memory-mcp-windows-arm64.zip codebase-memory-mcp.exe LICENSE install.ps1 THIRD_PARTY_NOTICES.md
|
||||
|
||||
- name: Attest standard binary provenance
|
||||
if: ${{ inputs.attest }}
|
||||
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
|
||||
with:
|
||||
subject-path: codebase-memory-mcp-windows-arm64.zip
|
||||
|
||||
- name: Build UI binary
|
||||
shell: msys2 {0}
|
||||
env:
|
||||
VERSION: ${{ inputs.version }}
|
||||
run: |
|
||||
if [ -n "$VERSION" ]; then
|
||||
scripts/build.sh --with-ui --version "$VERSION" CC=clang CXX=clang++
|
||||
else
|
||||
scripts/build.sh --with-ui CC=clang CXX=clang++
|
||||
fi
|
||||
|
||||
- name: Archive UI binary
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
BIN=build/c/codebase-memory-mcp
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
cp "$BIN" codebase-memory-mcp.exe
|
||||
scripts/gen-third-party-notices.sh THIRD_PARTY_NOTICES.md
|
||||
zip codebase-memory-mcp-ui-windows-arm64.zip codebase-memory-mcp.exe LICENSE install.ps1 THIRD_PARTY_NOTICES.md
|
||||
|
||||
- name: Attest UI binary provenance
|
||||
if: ${{ inputs.attest }}
|
||||
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
|
||||
with:
|
||||
subject-path: codebase-memory-mcp-ui-windows-arm64.zip
|
||||
|
||||
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: binaries-windows-arm64
|
||||
path: "*.zip"
|
||||
|
||||
build-linux-portable:
|
||||
# Fully static Linux binaries (gcc -static on Ubuntu).
|
||||
# Runs on any Linux distro without shared library dependencies.
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
include:
|
||||
- arch: amd64
|
||||
runner: ubuntu-latest
|
||||
- arch: arm64
|
||||
runner: ubuntu-24.04-arm
|
||||
runs-on: ${{ matrix.runner }}
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- name: Install deps
|
||||
run: sudo apt-get update && sudo apt-get install -y zlib1g-dev
|
||||
|
||||
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
|
||||
with:
|
||||
node-version: "22"
|
||||
|
||||
- name: Build standard binary (static)
|
||||
env:
|
||||
VERSION: ${{ inputs.version }}
|
||||
run: |
|
||||
if [ -n "$VERSION" ]; then
|
||||
scripts/build.sh --version "$VERSION" CC=gcc CXX=g++ STATIC=1
|
||||
else
|
||||
scripts/build.sh CC=gcc CXX=g++ STATIC=1
|
||||
fi
|
||||
|
||||
- name: Verify static linking
|
||||
run: |
|
||||
file build/c/codebase-memory-mcp
|
||||
ldd build/c/codebase-memory-mcp 2>&1 | grep -q "not a dynamic executable" || ldd build/c/codebase-memory-mcp 2>&1 | grep -q "statically linked"
|
||||
|
||||
- name: Archive standard binary
|
||||
env:
|
||||
ARCH: ${{ matrix.arch }}
|
||||
run: |
|
||||
cp LICENSE install.sh build/c/
|
||||
scripts/gen-third-party-notices.sh build/c/THIRD_PARTY_NOTICES.md
|
||||
tar -czf "codebase-memory-mcp-linux-${ARCH}-portable.tar.gz" \
|
||||
-C build/c codebase-memory-mcp LICENSE install.sh THIRD_PARTY_NOTICES.md
|
||||
|
||||
- name: Attest standard binary provenance
|
||||
if: ${{ inputs.attest }}
|
||||
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
|
||||
with:
|
||||
subject-path: codebase-memory-mcp-linux-${{ matrix.arch }}-portable.tar.gz
|
||||
|
||||
- name: Build UI binary (static)
|
||||
env:
|
||||
VERSION: ${{ inputs.version }}
|
||||
run: |
|
||||
if [ -n "$VERSION" ]; then
|
||||
scripts/build.sh --with-ui --version "$VERSION" CC=gcc CXX=g++ STATIC=1
|
||||
else
|
||||
scripts/build.sh --with-ui CC=gcc CXX=g++ STATIC=1
|
||||
fi
|
||||
|
||||
- name: Archive UI binary
|
||||
env:
|
||||
ARCH: ${{ matrix.arch }}
|
||||
run: |
|
||||
cp LICENSE install.sh build/c/
|
||||
scripts/gen-third-party-notices.sh build/c/THIRD_PARTY_NOTICES.md
|
||||
tar -czf "codebase-memory-mcp-ui-linux-${ARCH}-portable.tar.gz" \
|
||||
-C build/c codebase-memory-mcp LICENSE install.sh THIRD_PARTY_NOTICES.md
|
||||
|
||||
- name: Attest UI binary provenance
|
||||
if: ${{ inputs.attest }}
|
||||
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
|
||||
with:
|
||||
subject-path: codebase-memory-mcp-ui-linux-${{ matrix.arch }}-portable.tar.gz
|
||||
|
||||
- uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: binaries-linux-${{ matrix.arch }}-portable
|
||||
path: "*.tar.gz"
|
||||
@@ -0,0 +1,51 @@
|
||||
# Reusable: lint only (cppcheck + clang-format).
|
||||
# Security-static and CodeQL gate are separate — see _security.yml.
|
||||
name: Lint & Security
|
||||
|
||||
on:
|
||||
workflow_call: {}
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
lint:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 15
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
# Tests must pass or fail — no SKIPs except genuinely platform-specific
|
||||
# ones (SKIP_PLATFORM / #ifdef). Fails the lint phase on any plain SKIP().
|
||||
- name: No-skips policy (tests pass or fail)
|
||||
run: bash scripts/check-no-test-skips.sh
|
||||
|
||||
- name: Install build deps
|
||||
run: sudo apt-get update && sudo apt-get install -y zlib1g-dev cmake
|
||||
|
||||
- name: Install LLVM 20
|
||||
run: |
|
||||
wget -qO- https://apt.llvm.org/llvm-snapshot.gpg.key | sudo tee /etc/apt/trusted.gpg.d/apt.llvm.org.asc
|
||||
echo "deb http://apt.llvm.org/noble/ llvm-toolchain-noble-20 main" | sudo tee /etc/apt/sources.list.d/llvm-20.list
|
||||
sudo apt-get update
|
||||
sudo apt-get install -y clang-format-20
|
||||
|
||||
- uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
|
||||
id: cppcheck-cache
|
||||
with:
|
||||
path: /opt/cppcheck
|
||||
key: cppcheck-2.20.0-ubuntu-amd64
|
||||
|
||||
- name: Build cppcheck 2.20.0
|
||||
if: steps.cppcheck-cache.outputs.cache-hit != 'true'
|
||||
run: |
|
||||
git clone --depth 1 --branch 2.20.0 https://github.com/danmar/cppcheck.git /tmp/cppcheck
|
||||
cmake -S /tmp/cppcheck -B /tmp/cppcheck/build -DCMAKE_BUILD_TYPE=Release -DHAVE_RULES=OFF -DCMAKE_INSTALL_PREFIX=/opt/cppcheck
|
||||
cmake --build /tmp/cppcheck/build -j$(nproc)
|
||||
cmake --install /tmp/cppcheck/build
|
||||
|
||||
- name: Add cppcheck to PATH
|
||||
run: echo "/opt/cppcheck/bin" >> "$GITHUB_PATH"
|
||||
|
||||
- name: Lint (cppcheck + clang-format, no clang-tidy — enforced locally)
|
||||
run: scripts/lint.sh --ci CLANG_FORMAT=clang-format-20
|
||||
@@ -0,0 +1,86 @@
|
||||
# Reusable: security-static + CodeQL gate.
|
||||
# Runs independently from lint/test/build — does not block the main pipeline.
|
||||
# Affects overall workflow success status.
|
||||
name: Security Gate
|
||||
|
||||
on:
|
||||
workflow_call: {}
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
security-static:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 5
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- name: "Layer 1: Static allow-list audit"
|
||||
run: scripts/security-audit.sh
|
||||
- name: "Layer 6: UI security audit"
|
||||
run: scripts/security-ui.sh
|
||||
- name: "Layer 8: Vendored dependency integrity"
|
||||
run: scripts/security-vendored.sh
|
||||
|
||||
license-gate:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- name: Install ScanCode Toolkit
|
||||
run: pipx install scancode-toolkit
|
||||
- name: "Gate self-test (a planted violation must be detected)"
|
||||
run: scripts/license-gate.sh --selftest
|
||||
- name: "License compliance gate (one finding fails)"
|
||||
run: scripts/license-gate.sh
|
||||
- name: "License provenance audit (byte-identity vs upstream)"
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
run: scripts/audit-license-provenance.py
|
||||
|
||||
codeql-gate:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- name: Wait for CodeQL on current commit (max 45 min)
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
run: |
|
||||
# On pull_request events github.sha is the synthetic merge commit;
|
||||
# CodeQL runs are recorded against the PR head SHA.
|
||||
CURRENT_SHA="${{ github.event.pull_request.head.sha || github.sha }}"
|
||||
echo "Waiting for CodeQL to complete on $CURRENT_SHA..."
|
||||
for attempt in $(seq 1 90); do
|
||||
LATEST=$(gh api "repos/${{ github.repository }}/actions/workflows/codeql.yml/runs?head_sha=$CURRENT_SHA&per_page=1" \
|
||||
--jq '.workflow_runs[] | "\(.conclusion) \(.status)"' 2>/dev/null | head -1 || echo "")
|
||||
if [ -z "$LATEST" ]; then
|
||||
echo " $attempt/90: no run yet..."; sleep 30; continue
|
||||
fi
|
||||
CONCLUSION=$(echo "$LATEST" | cut -d' ' -f1)
|
||||
STATUS=$(echo "$LATEST" | cut -d' ' -f2)
|
||||
if [ "$STATUS" = "completed" ] && [ "$CONCLUSION" = "success" ]; then
|
||||
echo "=== CodeQL passed ==="; exit 0
|
||||
elif [ "$STATUS" = "completed" ]; then
|
||||
echo "BLOCKED: CodeQL $CONCLUSION"; exit 1
|
||||
fi
|
||||
echo " $attempt/90: $STATUS..."; sleep 30
|
||||
done
|
||||
echo "BLOCKED: CodeQL timeout"; exit 1
|
||||
|
||||
- name: Check for open code scanning alerts
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
run: |
|
||||
echo "Waiting 60s for alert API to settle..."
|
||||
sleep 60
|
||||
ALERTS=$(gh api 'repos/${{ github.repository }}/code-scanning/alerts?state=open' --jq 'length' 2>/dev/null || echo "0")
|
||||
sleep 15
|
||||
ALERTS2=$(gh api 'repos/${{ github.repository }}/code-scanning/alerts?state=open' --jq 'length' 2>/dev/null || echo "0")
|
||||
[ "$ALERTS" -lt "$ALERTS2" ] && ALERTS=$ALERTS2
|
||||
if [ "$ALERTS" -gt 0 ]; then
|
||||
echo "BLOCKED: $ALERTS open alert(s)"
|
||||
gh api 'repos/${{ github.repository }}/code-scanning/alerts?state=open' \
|
||||
--jq '.[] | " #\(.number) [\(.rule.security_severity_level // .rule.severity)] \(.rule.id) — \(.most_recent_instance.location.path):\(.most_recent_instance.location.start_line)"' 2>/dev/null || true
|
||||
exit 1
|
||||
fi
|
||||
echo "=== CodeQL gate passed (0 alerts) ==="
|
||||
@@ -0,0 +1,328 @@
|
||||
# Reusable: smoke test every binary (standard + UI, all platforms)
|
||||
name: Smoke
|
||||
|
||||
on:
|
||||
workflow_call:
|
||||
inputs:
|
||||
broad_platforms:
|
||||
description: 'Smoke the shipped binaries on the broad platform matrix (extra OS versions) instead of the core set'
|
||||
type: boolean
|
||||
default: false
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
# Emit the platform matrices as JSON. The CORE set is the default (fast,
|
||||
# unchanged); the BROAD set adds extra free runners (additional OS versions)
|
||||
# that download the SAME shipped artifact for their goos/goarch and verify it
|
||||
# runs on a wider range of OS versions. No new artifacts are built — broad
|
||||
# legs reuse the exact binaries produced by _build.yml.
|
||||
setup-matrix:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 5
|
||||
outputs:
|
||||
unix: ${{ steps.set.outputs.unix }}
|
||||
windows: ${{ steps.set.outputs.windows }}
|
||||
portable: ${{ steps.set.outputs.portable }}
|
||||
steps:
|
||||
- name: Compute matrices
|
||||
id: set
|
||||
env:
|
||||
BROAD: ${{ inputs.broad_platforms }}
|
||||
run: |
|
||||
CORE_UNIX='[
|
||||
{"os":"ubuntu-latest","goos":"linux","goarch":"amd64"},
|
||||
{"os":"ubuntu-24.04-arm","goos":"linux","goarch":"arm64"},
|
||||
{"os":"macos-14","goos":"darwin","goarch":"arm64"},
|
||||
{"os":"macos-15-intel","goos":"darwin","goarch":"amd64"}
|
||||
]'
|
||||
# Broad legs reuse existing goos/goarch artifacts on additional OS
|
||||
# versions to widen the run-anywhere signal without building new targets.
|
||||
# Broad legs are REQUIRED gates (no optional / continue-on-error):
|
||||
# every smoke leg must pass. No `optional` flags anywhere.
|
||||
#
|
||||
# NOTE: the *dynamic* linux binary links glibc 2.38+ and cannot run on
|
||||
# older distros by design — older-glibc coverage is the -portable (static)
|
||||
# binary's job, exercised green by the smoke-linux-portable broad legs
|
||||
# (ubuntu-22.04 / 22.04-arm). So the dynamic broad legs stay on
|
||||
# forward-compatible OSes only (macOS); running the dynamic binary on
|
||||
# ubuntu-22.04 would fail Phase 1 (glibc too old), not a real regression.
|
||||
BROAD_UNIX='[
|
||||
{"os":"macos-15","goos":"darwin","goarch":"arm64"}
|
||||
]'
|
||||
CORE_WIN='[{"os":"windows-latest","arch":"amd64"}]'
|
||||
# windows-11-arm now runs the NATIVE arm64 binary (build-windows-arm64),
|
||||
# not the x86_64 binary under emulation — we smoke the artifact we ship.
|
||||
BROAD_WIN='[{"os":"windows-2025","arch":"amd64"},{"os":"windows-11-arm","arch":"arm64"}]'
|
||||
CORE_PORTABLE='[
|
||||
{"arch":"amd64","runner":"ubuntu-latest"},
|
||||
{"arch":"arm64","runner":"ubuntu-24.04-arm"}
|
||||
]'
|
||||
BROAD_PORTABLE='[
|
||||
{"arch":"amd64","runner":"ubuntu-22.04"},
|
||||
{"arch":"arm64","runner":"ubuntu-22.04-arm"}
|
||||
]'
|
||||
if [ "$BROAD" = "true" ]; then
|
||||
UNIX=$(jq -cn --argjson a "$CORE_UNIX" --argjson b "$BROAD_UNIX" '$a + $b')
|
||||
WIN=$(jq -cn --argjson a "$CORE_WIN" --argjson b "$BROAD_WIN" '$a + $b')
|
||||
PORTABLE=$(jq -cn --argjson a "$CORE_PORTABLE" --argjson b "$BROAD_PORTABLE" '$a + $b')
|
||||
else
|
||||
UNIX=$(jq -cn --argjson a "$CORE_UNIX" '$a')
|
||||
WIN=$(jq -cn --argjson a "$CORE_WIN" '$a')
|
||||
PORTABLE=$(jq -cn --argjson a "$CORE_PORTABLE" '$a')
|
||||
fi
|
||||
# Expand each OS entry over both variants into a FLAT include list so
|
||||
# every {os,variant} runs as its own job. A {variant:[...],include:$LIST}
|
||||
# matrix collapses under GitHub's include-merge (later os entries
|
||||
# overwrite the variant combos last-wins), which silently dropped every
|
||||
# OS except the last — e.g. only windows-11-arm ran, never windows-latest.
|
||||
# Building the cartesian explicitly avoids that.
|
||||
VARIANTS='["standard","ui"]'
|
||||
UNIX_M=$(jq -cn --argjson a "$UNIX" --argjson v "$VARIANTS" '{include:[$a[] as $o | $v[] as $t | ($o + {variant:$t})]}')
|
||||
WIN_M=$(jq -cn --argjson a "$WIN" --argjson v "$VARIANTS" '{include:[$a[] as $o | $v[] as $t | ($o + {variant:$t})]}')
|
||||
PORTABLE_M=$(jq -cn --argjson a "$PORTABLE" --argjson v "$VARIANTS" '{include:[$a[] as $o | $v[] as $t | ($o + {variant:$t})]}')
|
||||
echo "unix=$UNIX_M" >> "$GITHUB_OUTPUT"
|
||||
echo "windows=$WIN_M" >> "$GITHUB_OUTPUT"
|
||||
echo "portable=$PORTABLE_M" >> "$GITHUB_OUTPUT"
|
||||
|
||||
smoke-unix:
|
||||
needs: setup-matrix
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix: ${{ fromJSON(needs.setup-matrix.outputs.unix) }}
|
||||
runs-on: ${{ matrix.os }}
|
||||
timeout-minutes: 15
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
|
||||
with:
|
||||
name: binaries-${{ matrix.goos }}-${{ matrix.goarch }}
|
||||
|
||||
- name: Extract binary
|
||||
run: |
|
||||
SUFFIX=${{ matrix.variant == 'ui' && '-ui' || '' }}
|
||||
tar -xzf codebase-memory-mcp${SUFFIX}-${{ matrix.goos }}-${{ matrix.goarch }}.tar.gz
|
||||
chmod +x codebase-memory-mcp
|
||||
|
||||
- name: Start artifact server
|
||||
run: |
|
||||
mkdir -p /tmp/smoke-server
|
||||
cp codebase-memory-mcp /tmp/smoke-server/
|
||||
OS=${{ matrix.goos }}; ARCH=${{ matrix.goarch }}
|
||||
SUFFIX=${{ matrix.variant == 'ui' && '-ui' || '' }}
|
||||
tar -czf "/tmp/smoke-server/codebase-memory-mcp${SUFFIX}-${OS}-${ARCH}.tar.gz" \
|
||||
-C /tmp/smoke-server codebase-memory-mcp
|
||||
if [ -n "$SUFFIX" ]; then
|
||||
cp "/tmp/smoke-server/codebase-memory-mcp${SUFFIX}-${OS}-${ARCH}.tar.gz" \
|
||||
"/tmp/smoke-server/codebase-memory-mcp-${OS}-${ARCH}.tar.gz"
|
||||
fi
|
||||
# The linux binary self-updates from the fully-static "-portable" asset
|
||||
# (build_update_url in src/cli/cli.c appends -portable on linux; _build.yml's
|
||||
# build-linux-portable job ships it), so the smoke server must serve that name
|
||||
# too -- otherwise `update` 404s and Phase 14 fails. Mirror the tarball(s) under
|
||||
# the -portable name on linux only.
|
||||
if [ "$OS" = "linux" ]; then
|
||||
cp "/tmp/smoke-server/codebase-memory-mcp${SUFFIX}-${OS}-${ARCH}.tar.gz" \
|
||||
"/tmp/smoke-server/codebase-memory-mcp${SUFFIX}-${OS}-${ARCH}-portable.tar.gz"
|
||||
if [ -n "$SUFFIX" ]; then
|
||||
cp "/tmp/smoke-server/codebase-memory-mcp${SUFFIX}-${OS}-${ARCH}-portable.tar.gz" \
|
||||
"/tmp/smoke-server/codebase-memory-mcp-${OS}-${ARCH}-portable.tar.gz"
|
||||
fi
|
||||
fi
|
||||
cd /tmp/smoke-server
|
||||
sha256sum *.tar.gz > checksums.txt 2>/dev/null || shasum -a 256 *.tar.gz > checksums.txt
|
||||
python3 -m http.server 18080 -d /tmp/smoke-server &
|
||||
|
||||
- name: Smoke test
|
||||
run: scripts/smoke-test.sh ./codebase-memory-mcp
|
||||
env:
|
||||
SMOKE_DOWNLOAD_URL: http://localhost:18080
|
||||
|
||||
- name: Security audits
|
||||
run: |
|
||||
scripts/security-strings.sh ./codebase-memory-mcp
|
||||
scripts/security-install.sh ./codebase-memory-mcp
|
||||
scripts/security-network.sh ./codebase-memory-mcp
|
||||
|
||||
- name: MCP robustness test (linux-amd64 standard only)
|
||||
if: matrix.variant == 'standard' && matrix.goos == 'linux' && matrix.goarch == 'amd64'
|
||||
run: |
|
||||
scripts/security-fuzz.sh ./codebase-memory-mcp
|
||||
scripts/security-fuzz-random.sh ./codebase-memory-mcp 60
|
||||
|
||||
- name: ClamAV scan (Linux)
|
||||
if: startsWith(matrix.os, 'ubuntu')
|
||||
run: |
|
||||
sudo apt-get update -qq && sudo apt-get install -y -qq clamav > /dev/null 2>&1
|
||||
# apt auto-starts the clamav-freshclam daemon, which holds a lock on
|
||||
# freshclam's log/db; stop it so the manual freshclam below can run
|
||||
# (else: "Failed to lock the log file ... Resource temporarily unavailable").
|
||||
sudo systemctl stop clamav-freshclam 2>/dev/null || true
|
||||
sudo sed -i 's/^Example/#Example/' /etc/clamav/freshclam.conf 2>/dev/null || true
|
||||
grep -q "DatabaseMirror" /etc/clamav/freshclam.conf 2>/dev/null || \
|
||||
echo "DatabaseMirror database.clamav.net" | sudo tee -a /etc/clamav/freshclam.conf > /dev/null
|
||||
sudo freshclam --quiet
|
||||
clamscan --no-summary ./codebase-memory-mcp
|
||||
|
||||
- name: ClamAV scan (macOS)
|
||||
if: startsWith(matrix.os, 'macos')
|
||||
run: |
|
||||
brew install clamav > /dev/null 2>&1
|
||||
CLAMAV_ETC=$(brew --prefix)/etc/clamav
|
||||
if [ ! -f "$CLAMAV_ETC/freshclam.conf" ]; then
|
||||
cp "$CLAMAV_ETC/freshclam.conf.sample" "$CLAMAV_ETC/freshclam.conf" 2>/dev/null || true
|
||||
sed -i '' 's/^Example/#Example/' "$CLAMAV_ETC/freshclam.conf" 2>/dev/null || true
|
||||
echo "DatabaseMirror database.clamav.net" >> "$CLAMAV_ETC/freshclam.conf"
|
||||
fi
|
||||
freshclam --quiet --no-warnings 2>/dev/null || freshclam --quiet 2>/dev/null || echo "WARNING: freshclam update failed"
|
||||
clamscan --no-summary ./codebase-memory-mcp
|
||||
|
||||
smoke-windows:
|
||||
needs: setup-matrix
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix: ${{ fromJSON(needs.setup-matrix.outputs.windows) }}
|
||||
runs-on: ${{ matrix.os }}
|
||||
timeout-minutes: 15
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
with:
|
||||
msystem: ${{ matrix.arch == 'arm64' && 'CLANGARM64' || 'CLANG64' }}
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-${{ matrix.arch == 'arm64' && 'aarch64' || 'x86_64' }}-python3
|
||||
mingw-w64-clang-${{ matrix.arch == 'arm64' && 'aarch64' || 'x86_64' }}-curl
|
||||
unzip
|
||||
zip
|
||||
coreutils
|
||||
|
||||
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
|
||||
with:
|
||||
name: binaries-windows-${{ matrix.arch }}
|
||||
|
||||
- name: Extract binary
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
SUFFIX=${{ matrix.variant == 'ui' && '-ui' || '' }}
|
||||
ARCH=${{ matrix.arch }}
|
||||
unzip -o "codebase-memory-mcp${SUFFIX}-windows-${ARCH}.zip"
|
||||
[ -n "$SUFFIX" ] && cp "codebase-memory-mcp${SUFFIX}.exe" codebase-memory-mcp.exe || true
|
||||
|
||||
- name: Start artifact server
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
mkdir -p /tmp/smoke-server
|
||||
cp codebase-memory-mcp.exe /tmp/smoke-server/
|
||||
SUFFIX=${{ matrix.variant == 'ui' && '-ui' || '' }}
|
||||
ARCH=${{ matrix.arch }}
|
||||
cd /tmp/smoke-server
|
||||
zip -q "codebase-memory-mcp${SUFFIX}-windows-${ARCH}.zip" codebase-memory-mcp.exe
|
||||
if [ -n "$SUFFIX" ]; then
|
||||
cp "codebase-memory-mcp${SUFFIX}-windows-${ARCH}.zip" "codebase-memory-mcp-windows-${ARCH}.zip"
|
||||
fi
|
||||
sha256sum *.zip > checksums.txt
|
||||
# Pin to explicit IPv4: on windows-11-arm, `localhost` resolves to ::1 (IPv6)
|
||||
# for msys2 curl while python's http.server is IPv4-only -> instant connect
|
||||
# failure in smoke Phase 12a. --bind 127.0.0.1 + a 127.0.0.1 URL pin both ends.
|
||||
python3 -m http.server 18080 --bind 127.0.0.1 -d /tmp/smoke-server &
|
||||
|
||||
- name: Smoke test
|
||||
shell: msys2 {0}
|
||||
run: scripts/smoke-test.sh ./codebase-memory-mcp.exe
|
||||
env:
|
||||
SMOKE_DOWNLOAD_URL: http://127.0.0.1:18080
|
||||
SMOKE_ARCH: ${{ matrix.arch }}
|
||||
|
||||
- name: Security audits
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
scripts/security-strings.sh ./codebase-memory-mcp.exe
|
||||
scripts/security-install.sh ./codebase-memory-mcp.exe
|
||||
|
||||
- name: Windows Defender scan
|
||||
shell: pwsh
|
||||
run: |
|
||||
& "C:\Program Files\Windows Defender\MpCmdRun.exe" -SignatureUpdate 2>$null
|
||||
$result = & "C:\Program Files\Windows Defender\MpCmdRun.exe" -Scan -ScanType 3 -File "$PWD\codebase-memory-mcp.exe" -DisableRemediation
|
||||
$code = $LASTEXITCODE
|
||||
Write-Host $result
|
||||
# MpCmdRun -Scan exit codes: 0 = clean, 2 = threat found. Any OTHER non-zero
|
||||
# means the scan engine could not run at all (e.g. hr=0x800106ba: the Defender
|
||||
# antimalware service is unavailable on the runner) — that is NOT a detection.
|
||||
# Fail soft on an engine failure so a transient runner-side AV outage can't
|
||||
# false-fail a release; only a real detection (exit 2) hard-blocks.
|
||||
if ($code -eq 2) {
|
||||
Write-Host "BLOCKED: Windows Defender flagged binary!"; exit 1
|
||||
} elseif ($code -ne 0) {
|
||||
Write-Host "::warning::Windows Defender scan could not run (exit $code) - skipping AV gate on this runner"
|
||||
} else {
|
||||
Write-Host "=== Windows Defender: clean ==="
|
||||
}
|
||||
|
||||
smoke-linux-portable:
|
||||
needs: setup-matrix
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix: ${{ fromJSON(needs.setup-matrix.outputs.portable) }}
|
||||
runs-on: ${{ matrix.runner }}
|
||||
timeout-minutes: 15
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
|
||||
with:
|
||||
name: binaries-linux-${{ matrix.arch }}-portable
|
||||
|
||||
- name: Extract and smoke test
|
||||
run: |
|
||||
SUFFIX=${{ matrix.variant == 'ui' && '-ui' || '' }}
|
||||
tar -xzf codebase-memory-mcp${SUFFIX}-linux-${{ matrix.arch }}-portable.tar.gz
|
||||
chmod +x codebase-memory-mcp
|
||||
scripts/smoke-test.sh ./codebase-memory-mcp
|
||||
|
||||
# The -portable binary is what all linux install/update paths now deliver;
|
||||
# it MUST start on old glibc (Debian 11 / RHEL 8 / Ubuntu 20.04). Runs it
|
||||
# in debian:bullseye (glibc 2.31) — the standard dynamic binary would fail
|
||||
# here with `GLIBC_2.38 not found`.
|
||||
- name: Old-glibc compatibility
|
||||
run: scripts/ci/check-glibc-compat.sh ./codebase-memory-mcp
|
||||
|
||||
- name: Security audits
|
||||
run: |
|
||||
scripts/security-strings.sh ./codebase-memory-mcp
|
||||
scripts/security-install.sh ./codebase-memory-mcp
|
||||
scripts/security-network.sh ./codebase-memory-mcp
|
||||
|
||||
# ── Packaging check (non-gating) ──────────────────────────────────
|
||||
# Builds pkg/glama/Dockerfile — the image Glama builds to score the
|
||||
# server — and runs an MCP initialize + tools/list handshake to confirm the
|
||||
# containerized stdio server still starts and introspects. Guards the Glama
|
||||
# listing integration against drift (Dockerfile breakage, release-asset
|
||||
# renames, introspection regressions).
|
||||
#
|
||||
# Also tests the brew tap/install flow.
|
||||
#
|
||||
# continue-on-error: a broken *directory* image must never block a release —
|
||||
# the shipped product binaries are unaffected. The red X is the signal to fix
|
||||
# the integration, not a release gate.
|
||||
smoke-packages:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 10
|
||||
continue-on-error: true
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- name: Build Glama image and verify MCP introspection
|
||||
run: bash pkg/glama/verify.sh
|
||||
- name: Test homebrew installation
|
||||
env:
|
||||
HOMEBREW_NO_AUTO_UPDATE: 1
|
||||
run: |
|
||||
eval "$(/home/linuxbrew/.linuxbrew/bin/brew shellenv)"
|
||||
brew tap deusdata/codebase-memory-mcp "$GITHUB_WORKSPACE"
|
||||
brew trust deusdata/codebase-memory-mcp
|
||||
brew install codebase-memory-mcp
|
||||
codebase-memory-mcp --version
|
||||
@@ -0,0 +1,285 @@
|
||||
# Reusable: soak tests (quick + ASan, all platforms)
|
||||
name: Soak
|
||||
|
||||
on:
|
||||
workflow_call:
|
||||
inputs:
|
||||
duration_minutes:
|
||||
description: 'Soak duration in minutes'
|
||||
type: number
|
||||
default: 10
|
||||
run_asan:
|
||||
description: 'Run ASan soak in addition to quick soak'
|
||||
type: boolean
|
||||
default: false
|
||||
version:
|
||||
description: 'Version string for build'
|
||||
type: string
|
||||
default: ''
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
soak-quick:
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
include:
|
||||
- os: ubuntu-latest
|
||||
goos: linux
|
||||
goarch: amd64
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: ubuntu-24.04-arm
|
||||
goos: linux
|
||||
goarch: arm64
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: macos-14
|
||||
goos: darwin
|
||||
goarch: arm64
|
||||
cc: cc
|
||||
cxx: c++
|
||||
- os: macos-15-intel
|
||||
goos: darwin
|
||||
goarch: amd64
|
||||
cc: cc
|
||||
cxx: c++
|
||||
runs-on: ${{ matrix.os }}
|
||||
# BUG FIX: this was hard-coded to 30, but the caller (nightly-soak.yml)
|
||||
# passes duration_minutes: 240. GitHub killed the job at 30 min, so the
|
||||
# "4h nightly soak" was SILENTLY TRUNCATED to 30 min and never once ran
|
||||
# multi-hour. Budget must always exceed the passed duration; 300 covers
|
||||
# the 240-min nightly with headroom (build + analysis + idle phases).
|
||||
timeout-minutes: 300
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- name: Install deps (Linux)
|
||||
if: startsWith(matrix.os, 'ubuntu')
|
||||
run: sudo apt-get update && sudo apt-get install -y zlib1g-dev python3 git
|
||||
- name: Build
|
||||
run: scripts/build.sh ${{ inputs.version && format('--version {0}', inputs.version) || '' }} CC=${{ matrix.cc }} CXX=${{ matrix.cxx }}
|
||||
- name: Soak (${{ inputs.duration_minutes }} min)
|
||||
run: scripts/soak-test.sh build/c/codebase-memory-mcp ${{ inputs.duration_minutes }}
|
||||
# #581 guard: read-only soak (never reindex/mutate) so any memory growth is
|
||||
# a query-path leak, not WAL/indexing. Reuses the build above.
|
||||
- name: Query-leak soak (#581, read-only)
|
||||
env:
|
||||
CBM_SOAK_MODE: query-leak
|
||||
RESULTS_DIR: soak-results-query-leak
|
||||
run: scripts/soak-test.sh build/c/codebase-memory-mcp ${{ inputs.duration_minutes }} --skip-crash-test
|
||||
- name: Upload metrics
|
||||
if: always()
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: soak-quick-${{ matrix.goos }}-${{ matrix.goarch }}
|
||||
path: soak-results/
|
||||
retention-days: 14
|
||||
- name: Upload query-leak metrics
|
||||
if: always()
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: soak-query-leak-${{ matrix.goos }}-${{ matrix.goarch }}
|
||||
path: soak-results-query-leak/
|
||||
retention-days: 14
|
||||
|
||||
soak-quick-windows:
|
||||
runs-on: windows-latest
|
||||
# BUG FIX (same 30→240 mismatch as soak-quick above): the caller passes
|
||||
# duration_minutes: 240, so a 30-min cap truncated the nightly soak here
|
||||
# too. 300 covers the 240-min nightly with headroom.
|
||||
timeout-minutes: 300
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
with:
|
||||
msystem: CLANG64
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-x86_64-clang
|
||||
mingw-w64-clang-x86_64-zlib
|
||||
mingw-w64-clang-x86_64-python3
|
||||
make
|
||||
git
|
||||
coreutils
|
||||
- name: Build
|
||||
shell: msys2 {0}
|
||||
run: scripts/build.sh ${{ inputs.version && format('--version {0}', inputs.version) || '' }} CC=clang CXX=clang++
|
||||
- name: Soak (${{ inputs.duration_minutes }} min)
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
BIN=build/c/codebase-memory-mcp
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
scripts/soak-test.sh "$BIN" ${{ inputs.duration_minutes }}
|
||||
# #581 guard on Windows — the platform the bug is reported on.
|
||||
- name: Query-leak soak (#581, read-only)
|
||||
shell: msys2 {0}
|
||||
env:
|
||||
CBM_SOAK_MODE: query-leak
|
||||
RESULTS_DIR: soak-results-query-leak
|
||||
run: |
|
||||
BIN=build/c/codebase-memory-mcp
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
scripts/soak-test.sh "$BIN" ${{ inputs.duration_minutes }} --skip-crash-test
|
||||
- name: Upload metrics
|
||||
if: always()
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: soak-quick-windows-amd64
|
||||
path: soak-results/
|
||||
retention-days: 14
|
||||
- name: Upload query-leak metrics
|
||||
if: always()
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: soak-query-leak-windows-amd64
|
||||
path: soak-results-query-leak/
|
||||
retention-days: 14
|
||||
|
||||
soak-quick-windows-arm64:
|
||||
# Native ARM64 Windows soak (CLANGARM64, no sanitizer — ASan is unavailable
|
||||
# on native ARM64 Windows). Builds from source like soak-quick-windows.
|
||||
runs-on: windows-11-arm
|
||||
timeout-minutes: 300
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
with:
|
||||
msystem: CLANGARM64
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-aarch64-clang
|
||||
mingw-w64-clang-aarch64-zlib
|
||||
mingw-w64-clang-aarch64-python3
|
||||
make
|
||||
git
|
||||
coreutils
|
||||
- name: Build
|
||||
shell: msys2 {0}
|
||||
run: scripts/build.sh ${{ inputs.version && format('--version {0}', inputs.version) || '' }} CC=clang CXX=clang++
|
||||
- name: Soak (${{ inputs.duration_minutes }} min)
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
BIN=build/c/codebase-memory-mcp
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
scripts/soak-test.sh "$BIN" ${{ inputs.duration_minutes }}
|
||||
# #581 guard on Windows — the platform the bug is reported on.
|
||||
- name: Query-leak soak (#581, read-only)
|
||||
shell: msys2 {0}
|
||||
env:
|
||||
CBM_SOAK_MODE: query-leak
|
||||
RESULTS_DIR: soak-results-query-leak
|
||||
run: |
|
||||
BIN=build/c/codebase-memory-mcp
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
scripts/soak-test.sh "$BIN" ${{ inputs.duration_minutes }} --skip-crash-test
|
||||
- name: Upload metrics
|
||||
if: always()
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: soak-quick-windows-arm64
|
||||
path: soak-results/
|
||||
retention-days: 14
|
||||
- name: Upload query-leak metrics
|
||||
if: always()
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: soak-query-leak-windows-arm64
|
||||
path: soak-results-query-leak/
|
||||
retention-days: 14
|
||||
|
||||
soak-asan:
|
||||
if: ${{ inputs.run_asan }}
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
include:
|
||||
- os: ubuntu-latest
|
||||
goos: linux
|
||||
goarch: amd64
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: ubuntu-24.04-arm
|
||||
goos: linux
|
||||
goarch: arm64
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: macos-14
|
||||
goos: darwin
|
||||
goarch: arm64
|
||||
cc: cc
|
||||
cxx: c++
|
||||
- os: macos-15-intel
|
||||
goos: darwin
|
||||
goarch: amd64
|
||||
cc: cc
|
||||
cxx: c++
|
||||
runs-on: ${{ matrix.os }}
|
||||
# ASan soak runs a FIXED 15-min soak (hard-coded below, NOT driven by
|
||||
# inputs.duration_minutes), but the ASan-instrumented build is slow and
|
||||
# leak reporting adds teardown time. 60 keeps the budget comfortably above
|
||||
# the 15-min run so it is never truncated. (Same class of bug as the
|
||||
# soak-quick 30→240 mismatch above — keep the timeout above the run length.)
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- name: Install deps (Linux)
|
||||
if: startsWith(matrix.os, 'ubuntu')
|
||||
run: sudo apt-get update && sudo apt-get install -y zlib1g-dev python3 git
|
||||
- name: Build (ASan)
|
||||
run: |
|
||||
SANITIZE="-fsanitize=address,undefined -fno-omit-frame-pointer"
|
||||
scripts/build.sh ${{ inputs.version && format('--version {0}', inputs.version) || '' }} CC=${{ matrix.cc }} CXX=${{ matrix.cxx }} EXTRA_CFLAGS="$SANITIZE" EXTRA_LDFLAGS="$SANITIZE"
|
||||
- name: ASan soak (15 min)
|
||||
env:
|
||||
ASAN_OPTIONS: "detect_leaks=1:halt_on_error=0:log_path=soak-results/asan"
|
||||
run: scripts/soak-test.sh build/c/codebase-memory-mcp 15
|
||||
- name: Upload metrics
|
||||
if: always()
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: soak-asan-${{ matrix.goos }}-${{ matrix.goarch }}
|
||||
path: soak-results/
|
||||
retention-days: 14
|
||||
|
||||
soak-asan-windows:
|
||||
if: ${{ inputs.run_asan }}
|
||||
runs-on: windows-latest
|
||||
# FIXED 15-min soak (hard-coded below). MSYS2/Wine + ASan build is the
|
||||
# slowest path; 60 keeps the budget well above the run length so it is
|
||||
# never truncated.
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
with:
|
||||
msystem: CLANG64
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-x86_64-clang
|
||||
mingw-w64-clang-x86_64-zlib
|
||||
mingw-w64-clang-x86_64-python3
|
||||
make
|
||||
git
|
||||
coreutils
|
||||
- name: Build (ASan)
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
SANITIZE="-fsanitize=address,undefined -fno-omit-frame-pointer"
|
||||
scripts/build.sh ${{ inputs.version && format('--version {0}', inputs.version) || '' }} CC=clang CXX=clang++ EXTRA_CFLAGS="$SANITIZE" EXTRA_LDFLAGS="$SANITIZE"
|
||||
- name: ASan soak (15 min, no leak detection)
|
||||
shell: msys2 {0}
|
||||
env:
|
||||
ASAN_OPTIONS: "detect_leaks=0:halt_on_error=0:log_path=soak-results/asan"
|
||||
run: |
|
||||
BIN=build/c/codebase-memory-mcp
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
scripts/soak-test.sh "$BIN" 15
|
||||
- name: Upload metrics
|
||||
if: always()
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: soak-asan-windows-amd64
|
||||
path: soak-results/
|
||||
retention-days: 14
|
||||
@@ -0,0 +1,177 @@
|
||||
# Reusable: unit + integration tests on all platforms
|
||||
name: Test
|
||||
|
||||
on:
|
||||
workflow_call:
|
||||
inputs:
|
||||
skip_perf:
|
||||
description: 'Skip incremental perf tests (phases 2-7)'
|
||||
type: boolean
|
||||
default: true
|
||||
broad_platforms:
|
||||
description: 'Test the broad platform matrix (older glibc + extra OS versions) instead of the core set'
|
||||
type: boolean
|
||||
default: false
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
# Emit the platform matrices as JSON. The CORE set is the default (fast,
|
||||
# unchanged); the BROAD set adds extra free runners (older glibc /
|
||||
# additional OS versions) for a wider "does it build everywhere" picture.
|
||||
setup-matrix:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 5
|
||||
outputs:
|
||||
unix: ${{ steps.set.outputs.unix }}
|
||||
windows: ${{ steps.set.outputs.windows }}
|
||||
steps:
|
||||
- name: Compute matrices
|
||||
id: set
|
||||
env:
|
||||
BROAD: ${{ inputs.broad_platforms }}
|
||||
run: |
|
||||
CORE_UNIX='[
|
||||
{"os":"ubuntu-latest","cc":"gcc","cxx":"g++"},
|
||||
{"os":"ubuntu-24.04-arm","cc":"gcc","cxx":"g++"},
|
||||
{"os":"macos-14","cc":"cc","cxx":"c++"},
|
||||
{"os":"macos-15-intel","cc":"cc","cxx":"c++"}
|
||||
]'
|
||||
# Broad matrix legs are REQUIRED gates (no optional/continue-on-error
|
||||
# escape hatches): the release dry run must be all-green, every platform.
|
||||
BROAD_UNIX='[
|
||||
{"os":"ubuntu-22.04","cc":"gcc","cxx":"g++"},
|
||||
{"os":"ubuntu-22.04-arm","cc":"gcc","cxx":"g++"},
|
||||
{"os":"macos-15","cc":"cc","cxx":"c++"}
|
||||
]'
|
||||
# Each Windows leg pins the msys2 environment + package arch to the
|
||||
# RUNNER architecture so the build is native, never emulated:
|
||||
# x86-64 runners -> CLANG64 (mingw-w64-clang-x86_64-*)
|
||||
# ARM64 runner -> CLANGARM64 (mingw-w64-clang-aarch64-*)
|
||||
# windows-11-arm previously used the x86-64 CLANG64 toolchain, so its
|
||||
# binary ran under Windows-on-ARM x86-64 emulation and ASan's function
|
||||
# interception crashed (interception_win: unhandled instruction). With
|
||||
# the native ARM64 toolchain ASan instruments native ARM64 code, so it
|
||||
# is a real (non-optional) gate, not a tolerated emulated-flake.
|
||||
CORE_WIN='[{"os":"windows-latest","msystem":"CLANG64","pkg":"x86_64"}]'
|
||||
BROAD_WIN='[{"os":"windows-2025","msystem":"CLANG64","pkg":"x86_64"},{"os":"windows-11-arm","msystem":"CLANGARM64","pkg":"aarch64"}]'
|
||||
if [ "$BROAD" = "true" ]; then
|
||||
UNIX=$(jq -cn --argjson a "$CORE_UNIX" --argjson b "$BROAD_UNIX" '$a + $b')
|
||||
WIN=$(jq -cn --argjson a "$CORE_WIN" --argjson b "$BROAD_WIN" '$a + $b')
|
||||
else
|
||||
UNIX=$(jq -cn --argjson a "$CORE_UNIX" '$a')
|
||||
WIN=$(jq -cn --argjson a "$CORE_WIN" '$a')
|
||||
fi
|
||||
echo "unix={\"include\":$UNIX}" >> "$GITHUB_OUTPUT"
|
||||
echo "windows={\"include\":$WIN}" >> "$GITHUB_OUTPUT"
|
||||
|
||||
test-unix:
|
||||
needs: setup-matrix
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix: ${{ fromJSON(needs.setup-matrix.outputs.unix) }}
|
||||
runs-on: ${{ matrix.os }}
|
||||
# Broad-only legs (extra OS versions) are informational: visible but
|
||||
# non-blocking, so a flaky/less-common runner can't block a release.
|
||||
continue-on-error: ${{ matrix.optional == true }}
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- name: Install deps (Ubuntu)
|
||||
if: startsWith(matrix.os, 'ubuntu')
|
||||
run: sudo apt-get update && sudo apt-get install -y zlib1g-dev
|
||||
|
||||
- name: Test
|
||||
run: scripts/test.sh CC=${{ matrix.cc }} CXX=${{ matrix.cxx }}
|
||||
env:
|
||||
CBM_SKIP_PERF: ${{ inputs.skip_perf && '1' || '' }}
|
||||
|
||||
test-tsan:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 120
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- name: Install deps (Ubuntu)
|
||||
run: sudo apt-get update && sudo apt-get install -y clang zlib1g-dev
|
||||
|
||||
- name: ThreadSanitizer tests
|
||||
run: make -f Makefile.cbm test-tsan CC=clang CXX=clang++
|
||||
|
||||
test-windows:
|
||||
needs: setup-matrix
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix: ${{ fromJSON(needs.setup-matrix.outputs.windows) }}
|
||||
runs-on: ${{ matrix.os }}
|
||||
continue-on-error: ${{ matrix.optional == true }}
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
with:
|
||||
msystem: ${{ matrix.msystem }}
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-${{ matrix.pkg }}-clang
|
||||
mingw-w64-clang-${{ matrix.pkg }}-compiler-rt
|
||||
mingw-w64-clang-${{ matrix.pkg }}-zlib
|
||||
make
|
||||
git
|
||||
|
||||
- name: Test
|
||||
shell: msys2 {0}
|
||||
# AddressSanitizer is unavailable on native ARM64 Windows (LLVM ships no
|
||||
# libclang_rt.asan for aarch64-w64-windows-gnu) and cannot intercept the
|
||||
# system DLLs under x86-64 emulation either, so windows-11-arm runs the
|
||||
# native ARM64 build with SANITIZE= (no sanitizer) — still a real
|
||||
# functional gate. ASan/UBSan coverage comes from the other 9 legs,
|
||||
# including native-ARM Linux/macOS. x86-64 Windows keeps full sanitizers.
|
||||
run: scripts/test.sh CC=clang CXX=clang++ ${{ matrix.os == 'windows-11-arm' && 'SANITIZE=' || '' }}
|
||||
env:
|
||||
CBM_SKIP_PERF: ${{ inputs.skip_perf && '1' || '' }}
|
||||
|
||||
# Windows product-surface regression guards. Distinct from test-windows above
|
||||
# (the sanitizer C suite): these drive a real product binary + embedded HTTP UI
|
||||
# over stdio / CLI / HTTP and fail if a Windows bug already fixed on main comes
|
||||
# back -- non-ASCII repo paths dropping definitions (#636/#357, fixed by #700),
|
||||
# the PreToolUse hook augmenter no-op on drive-letter cwd (#618, fixed by #619),
|
||||
# the UI directory picker not enumerating drives (#548, roots field), and non-ASCII
|
||||
# CLI arguments being mangled by the narrow-argv main() (#423/#20, fixed by the
|
||||
# wide-argv entrypoint that reads GetCommandLineW).
|
||||
test-windows-guards:
|
||||
runs-on: windows-latest
|
||||
timeout-minutes: 60
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
with:
|
||||
msystem: CLANG64
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-x86_64-clang
|
||||
mingw-w64-clang-x86_64-zlib
|
||||
make
|
||||
git
|
||||
|
||||
- uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
|
||||
with:
|
||||
node-version: "22"
|
||||
|
||||
- name: Build product binary with embedded UI
|
||||
shell: msys2 {0}
|
||||
# --with-ui builds the frontend (npm) and embeds it, so the drive-picker
|
||||
# guard's HTTP UI is available. Functional gate only (no sanitizers).
|
||||
run: scripts/build.sh --with-ui CC=clang CXX=clang++
|
||||
|
||||
- name: Windows regression guards (#636/#357, #618, #548, #423/#20)
|
||||
shell: pwsh
|
||||
# -GuardsOnly runs the four green guards and gates on them. The runner sets
|
||||
# CBM_INDEX_SUPERVISOR=0 for determinism, but the non-ASCII CLI guard drops that
|
||||
# override so it exercises the real supervisor->worker spawn (where #423/#20's
|
||||
# second half lives); the other guards test path/hook/drive fixes in-process.
|
||||
run: ./scripts/test-windows.ps1 -GuardsOnly -Binary build/c/codebase-memory-mcp.exe
|
||||
@@ -0,0 +1,84 @@
|
||||
# Bug-reproduction board — runs the cumulative reproduce-first suite (RED by
|
||||
# design, one case per open bug) across every platform on a chosen branch.
|
||||
#
|
||||
# This is the "test many bug vectors on many platforms at once" harness. It is
|
||||
# NON-GATING: dispatch-only, never a required check, so a red board never blocks
|
||||
# a merge. Dispatch against a feature branch with:
|
||||
# gh workflow run bug-repro.yml --ref <branch> -f platforms=all
|
||||
name: Bug Repro Board
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
platforms:
|
||||
description: 'Which platforms to run the repro board on'
|
||||
type: choice
|
||||
options: ['all', 'linux', 'macos', 'windows']
|
||||
default: 'all'
|
||||
# Iteration convenience: any push to a qa/** branch runs the board straight
|
||||
# from that branch's own copy of this file (no main merge needed). Non-gating.
|
||||
push:
|
||||
# Exclude the dedicated lane branches so they only run their own workflow
|
||||
# (fast-repro / soak / smoke), not the full board too.
|
||||
branches: ['qa/**', '!qa/fast-**', '!qa/soak-**', '!qa/smoke-**']
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
repro-unix:
|
||||
if: ${{ github.event_name == 'push' || inputs.platforms == 'all' || inputs.platforms == 'linux' || inputs.platforms == 'macos' }}
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
include:
|
||||
- os: ubuntu-latest
|
||||
group: linux
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: ubuntu-24.04-arm
|
||||
group: linux
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: macos-14
|
||||
group: macos
|
||||
cc: cc
|
||||
cxx: c++
|
||||
- os: macos-15-intel
|
||||
group: macos
|
||||
cc: cc
|
||||
cxx: c++
|
||||
runs-on: ${{ matrix.os }}
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- name: Install deps (Ubuntu)
|
||||
if: startsWith(matrix.os, 'ubuntu')
|
||||
run: sudo apt-get update && sudo apt-get install -y zlib1g-dev
|
||||
|
||||
- name: Run bug-reproduction board
|
||||
if: ${{ github.event_name == 'push' || inputs.platforms == 'all' || inputs.platforms == matrix.group }}
|
||||
run: scripts/repro.sh CC=${{ matrix.cc }} CXX=${{ matrix.cxx }}
|
||||
|
||||
repro-windows:
|
||||
if: ${{ github.event_name == 'push' || inputs.platforms == 'all' || inputs.platforms == 'windows' }}
|
||||
runs-on: windows-latest
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
with:
|
||||
msystem: CLANG64
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-x86_64-clang
|
||||
mingw-w64-clang-x86_64-compiler-rt
|
||||
mingw-w64-clang-x86_64-zlib
|
||||
make
|
||||
git
|
||||
|
||||
- name: Run bug-reproduction board
|
||||
shell: msys2 {0}
|
||||
run: scripts/repro.sh CC=clang CXX=clang++
|
||||
@@ -0,0 +1,43 @@
|
||||
name: CodeQL SAST
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [main]
|
||||
pull_request:
|
||||
branches: [main]
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
concurrency:
|
||||
group: codeql-${{ github.ref }}-${{ github.event.pull_request.number || github.sha }}
|
||||
cancel-in-progress: true
|
||||
|
||||
jobs:
|
||||
analyze:
|
||||
runs-on: ubuntu-latest
|
||||
# CodeQL needs security-events: write to upload results; scoped to this job so
|
||||
# the workflow's top-level token stays read-only (Scorecard TokenPermissions).
|
||||
permissions:
|
||||
security-events: write
|
||||
actions: read
|
||||
contents: read
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- name: Install build dependencies
|
||||
run: sudo apt-get update && sudo apt-get install -y zlib1g-dev
|
||||
|
||||
- name: Initialize CodeQL
|
||||
uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
|
||||
with:
|
||||
languages: c-cpp
|
||||
build-mode: manual
|
||||
|
||||
- name: Build for CodeQL analysis
|
||||
run: scripts/build.sh
|
||||
|
||||
- name: Perform CodeQL Analysis
|
||||
uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4
|
||||
with:
|
||||
category: "/language:c-cpp"
|
||||
@@ -0,0 +1,46 @@
|
||||
# DCO enforcement — every commit on every branch must carry a Signed-off-by
|
||||
# trailer matching its author (Developer Certificate of Origin 1.1, see DCO).
|
||||
# Runs on all pushes and pull requests; scripts/check-dco.sh holds the rules.
|
||||
name: DCO
|
||||
|
||||
on:
|
||||
push:
|
||||
pull_request:
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
concurrency:
|
||||
group: dco-${{ github.ref }}-${{ github.event.pull_request.number || github.sha }}
|
||||
cancel-in-progress: true
|
||||
|
||||
jobs:
|
||||
dco:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 5
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
with:
|
||||
fetch-depth: 0
|
||||
|
||||
- name: Check Signed-off-by on all new commits
|
||||
env:
|
||||
EVENT: ${{ github.event_name }}
|
||||
BASE_SHA: ${{ github.event.pull_request.base.sha }}
|
||||
HEAD_SHA: ${{ github.event.pull_request.head.sha }}
|
||||
PUSH_BEFORE: ${{ github.event.before }}
|
||||
PUSH_AFTER: ${{ github.event.after }}
|
||||
DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
|
||||
run: |
|
||||
# Ranges always cover only the NEW commits of this event, so history
|
||||
# predating DCO adoption is naturally exempt.
|
||||
if [ "$EVENT" = "pull_request" ]; then
|
||||
RANGE="$BASE_SHA..$HEAD_SHA"
|
||||
elif [ "$PUSH_BEFORE" = "0000000000000000000000000000000000000000" ]; then
|
||||
# New branch: check the commits not on the default branch
|
||||
RANGE="origin/$DEFAULT_BRANCH..$PUSH_AFTER"
|
||||
else
|
||||
RANGE="$PUSH_BEFORE..$PUSH_AFTER"
|
||||
fi
|
||||
echo "checking range: $RANGE"
|
||||
scripts/check-dco.sh "$RANGE"
|
||||
@@ -0,0 +1,85 @@
|
||||
# Manual trigger: test everything before pushing a release.
|
||||
# Each step can be skipped for faster iteration.
|
||||
#
|
||||
# Pipeline: lint → test → build → smoke/soak (sequential chain)
|
||||
# Security: security-static + codeql-gate (independent island)
|
||||
#
|
||||
# Security does NOT block lint/test/build/smoke/soak. All jobs must pass
|
||||
# for the overall workflow to be green.
|
||||
name: Dry Run
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
skip_lint:
|
||||
description: 'Skip lint (cppcheck + clang-format)'
|
||||
type: boolean
|
||||
default: false
|
||||
skip_tests:
|
||||
description: 'Skip unit/integration tests'
|
||||
type: boolean
|
||||
default: false
|
||||
skip_builds:
|
||||
description: 'Skip build + smoke'
|
||||
type: boolean
|
||||
default: false
|
||||
soak_level:
|
||||
description: 'Soak: full (quick+asan), quick (10min), none'
|
||||
type: choice
|
||||
options: ['full', 'quick', 'none']
|
||||
default: 'quick'
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
# ── Security (independent island — does not block main pipeline) ──
|
||||
security:
|
||||
uses: ./.github/workflows/_security.yml
|
||||
secrets: inherit
|
||||
|
||||
# ── Lint (cppcheck + clang-format) ────────────────────────────
|
||||
lint:
|
||||
if: ${{ inputs.skip_lint != true }}
|
||||
uses: ./.github/workflows/_lint.yml
|
||||
|
||||
# ── Tests (all platforms, perf tests skipped on CI) ────────────
|
||||
test:
|
||||
needs: [lint]
|
||||
if: ${{ inputs.skip_tests != true && !cancelled() && (needs.lint.result == 'success' || needs.lint.result == 'skipped') }}
|
||||
uses: ./.github/workflows/_test.yml
|
||||
with:
|
||||
skip_perf: true
|
||||
broad_platforms: true
|
||||
|
||||
# ── Build all platforms ────────────────────────────────────────
|
||||
build:
|
||||
if: ${{ inputs.skip_builds != true && !cancelled() && (needs.test.result == 'success' || needs.test.result == 'skipped') }}
|
||||
needs: [test]
|
||||
permissions:
|
||||
contents: read
|
||||
id-token: write
|
||||
attestations: write
|
||||
uses: ./.github/workflows/_build.yml
|
||||
with:
|
||||
attest: false
|
||||
|
||||
# ── Smoke test every binary ────────────────────────────────────
|
||||
# Run unless builds were skipped or a build leg FAILED. Every build leg
|
||||
# (including the macos-15-intel darwin-amd64 binary) is blocking now, so a
|
||||
# failed/missing platform binary correctly stops smoke — see _build.yml.
|
||||
smoke:
|
||||
if: ${{ inputs.skip_builds != true && !cancelled() && needs.build.result != 'failure' && needs.build.result != 'skipped' }}
|
||||
needs: [build]
|
||||
uses: ./.github/workflows/_smoke.yml
|
||||
with:
|
||||
broad_platforms: true
|
||||
|
||||
# ── Soak tests (optional, parallel with smoke) ────────────────
|
||||
soak:
|
||||
if: ${{ inputs.soak_level != 'none' && !cancelled() && needs.build.result != 'failure' && needs.build.result != 'skipped' }}
|
||||
needs: [build]
|
||||
uses: ./.github/workflows/_soak.yml
|
||||
with:
|
||||
duration_minutes: 10
|
||||
run_asan: ${{ inputs.soak_level == 'full' }}
|
||||
@@ -0,0 +1,37 @@
|
||||
# Fast repro lane — single platform, NO sanitizers — for quick fix-iteration
|
||||
# feedback (the red-count after a fix) without waiting ~15 min for the full
|
||||
# 5-platform ASan board. The full bug-repro.yml board remains the comprehensive
|
||||
# all-platform check; this is just the fast inner loop.
|
||||
#
|
||||
# Trigger: workflow_dispatch, or push to a qa/fast-** branch. Non-gating.
|
||||
name: Fast Repro
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
suites:
|
||||
description: 'Comma list of suite-name substrings to run (empty = all)'
|
||||
type: string
|
||||
default: ''
|
||||
push:
|
||||
branches: ['qa/fast-**']
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
fast:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- name: Install deps
|
||||
run: sudo apt-get update && sudo apt-get install -y zlib1g-dev
|
||||
- name: test-repro (single platform, ASan; CBM_REPRO_ONLY filters suites)
|
||||
env:
|
||||
# Optionally narrow to specific suites for a fast targeted check, e.g.
|
||||
# CBM_REPRO_ONLY="repro_invariant_enclosing_parity,repro_grammar_systems".
|
||||
# Empty = run all. (No-sanitizer builds crash on some suites, so ASan
|
||||
# stays on; the single-platform run is the speedup vs the 5-platform board.)
|
||||
CBM_REPRO_ONLY: ${{ github.event.inputs.suites }}
|
||||
run: scripts/repro.sh CC=gcc CXX=g++
|
||||
@@ -0,0 +1,59 @@
|
||||
name: Issue area labeler
|
||||
|
||||
# Adds area labels to new/edited issues based on keyword regexes in
|
||||
# .github/issue-labeler.yml. Additive only (addLabels never removes): it
|
||||
# never touches a label a maintainer set by hand. Base bug/enhancement
|
||||
# labels already come from the issue forms.
|
||||
#
|
||||
# Implemented with first-party actions/github-script (not a third-party
|
||||
# labeler action) so every pattern is compiled as a JavaScript RegExp with
|
||||
# the `i` flag applied centrally — inline `(?i)` groups are PCRE-only and
|
||||
# threw `SyntaxError: Invalid group` on every issue (#764). A pattern that
|
||||
# fails to compile now fails the run loudly instead of silently no-oping.
|
||||
|
||||
on:
|
||||
issues:
|
||||
types: [opened, edited]
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
triage:
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: read
|
||||
issues: write
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
|
||||
with:
|
||||
script: |
|
||||
const fs = require('fs');
|
||||
const text = [context.payload.issue.title, context.payload.issue.body]
|
||||
.filter(Boolean).join('\n');
|
||||
const rules = [];
|
||||
const bad = [];
|
||||
// Config format: one rule per line — "label": 'regex' (see the
|
||||
// header comment in .github/issue-labeler.yml).
|
||||
for (const line of fs.readFileSync('.github/issue-labeler.yml', 'utf8').split('\n')) {
|
||||
const m = line.match(/^"([^"]+)":\s*'(.*)'\s*$/);
|
||||
if (!m) continue;
|
||||
try { rules.push({ label: m[1], re: new RegExp(m[2], 'i') }); }
|
||||
catch (e) { bad.push(`${m[1]}: ${e.message}`); }
|
||||
}
|
||||
if (rules.length === 0 && bad.length === 0) {
|
||||
core.setFailed('no labeling rules parsed from .github/issue-labeler.yml');
|
||||
return;
|
||||
}
|
||||
const labels = rules.filter(r => r.re.test(text)).map(r => r.label);
|
||||
if (labels.length) {
|
||||
await github.rest.issues.addLabels({
|
||||
owner: context.repo.owner,
|
||||
repo: context.repo.repo,
|
||||
issue_number: context.issue.number,
|
||||
labels,
|
||||
});
|
||||
}
|
||||
core.info(`matched: ${labels.join(', ') || '(none)'}`);
|
||||
if (bad.length) core.setFailed(`invalid label regex(es): ${bad.join('; ')}`);
|
||||
@@ -0,0 +1,21 @@
|
||||
name: Label actions
|
||||
|
||||
# Posts a templated comment when a maintainer adds certain labels.
|
||||
# Behavior is configured in .github/label-actions.yml. Issues only.
|
||||
|
||||
on:
|
||||
issues:
|
||||
types: [labeled, unlabeled]
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
action:
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
issues: write
|
||||
steps:
|
||||
- uses: dessant/label-actions@65225c179d3b2502f6eda7b3d15101a3f412366b # v5.0.3
|
||||
with:
|
||||
process-only: issues
|
||||
@@ -0,0 +1,22 @@
|
||||
# Weekly soak test: 4h sustained load + ASan leak detection
|
||||
name: Nightly Soak
|
||||
|
||||
on:
|
||||
schedule:
|
||||
- cron: '0 2 * * 0' # Every Sunday at 2am UTC
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
duration_minutes:
|
||||
description: 'Soak duration in minutes (default: 240 = 4h)'
|
||||
type: number
|
||||
default: 240
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
soak:
|
||||
uses: ./.github/workflows/_soak.yml
|
||||
with:
|
||||
duration_minutes: ${{ inputs.duration_minutes || 240 }}
|
||||
run_asan: true
|
||||
@@ -0,0 +1,44 @@
|
||||
# Deploy the static site in /docs to GitHub Pages.
|
||||
#
|
||||
# Replaces the legacy "Deploy from a branch" (Jekyll) build, which ran on
|
||||
# EVERY push to main and failed because Jekyll's Liquid parser choked on the
|
||||
# planning docs under /docs (e.g. `Unknown tag 'data'` in EVALUATION_PLAN.md).
|
||||
# /docs is a hand-written static site (index.html + robots/sitemap/llms.txt),
|
||||
# so we upload it as-is — no Jekyll — and only run when the site changes.
|
||||
#
|
||||
# Requires the repo Pages source to be set to "GitHub Actions"
|
||||
# (Settings → Pages → Build and deployment → Source: GitHub Actions).
|
||||
name: Deploy Pages
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [main]
|
||||
paths:
|
||||
- 'docs/**'
|
||||
- '.github/workflows/pages.yml'
|
||||
workflow_dispatch:
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
pages: write
|
||||
id-token: write
|
||||
|
||||
# One deployment at a time; never cancel an in-progress publish.
|
||||
concurrency:
|
||||
group: pages
|
||||
cancel-in-progress: false
|
||||
|
||||
jobs:
|
||||
deploy:
|
||||
runs-on: ubuntu-latest
|
||||
environment:
|
||||
name: github-pages
|
||||
url: ${{ steps.deployment.outputs.page_url }}
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- uses: actions/configure-pages@45bfe0192ca1faeb007ade9deae92b16b8254a0d # v6.0.0
|
||||
- uses: actions/upload-pages-artifact@fc324d3547104276b827a68afc52ff2a11cc49c9 # v5.0.0
|
||||
with:
|
||||
path: ./docs
|
||||
- id: deployment
|
||||
uses: actions/deploy-pages@cd2ce8fcbc39b97be8ca5fce6e763baed58fa128 # v5.0.0
|
||||
@@ -0,0 +1,140 @@
|
||||
# PR validation: security gates + lint + full test suite. Builds, smoke and
|
||||
# soak stay maintainer-driven via the dry-run workflow_dispatch. Branch
|
||||
# protection requires `dco` + `ci-ok` — a single stable summary context that
|
||||
# fails unless every PR stage succeeded.
|
||||
name: PR
|
||||
|
||||
on:
|
||||
pull_request:
|
||||
branches: [main]
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
pull-requests: read
|
||||
|
||||
# A new push to the PR supersedes the running validation — cancel it
|
||||
# instead of stacking zombie pipelines.
|
||||
concurrency:
|
||||
group: pr-${{ github.event.pull_request.number }}
|
||||
cancel-in-progress: true
|
||||
|
||||
|
||||
jobs:
|
||||
security:
|
||||
uses: ./.github/workflows/_security.yml
|
||||
secrets: inherit
|
||||
|
||||
lint:
|
||||
uses: ./.github/workflows/_lint.yml
|
||||
|
||||
test:
|
||||
needs: [lint]
|
||||
if: ${{ !cancelled() && needs.lint.result == 'success' }}
|
||||
uses: ./.github/workflows/_test.yml
|
||||
with:
|
||||
# Perf assertions are timing-sensitive on shared runners; they stay in
|
||||
# dry runs and releases where a flaky red does not block a merge.
|
||||
skip_perf: true
|
||||
|
||||
# ── Which files changed? Gate the (heavier) build+smoke on product code so
|
||||
# docs / CI / test-only PRs stay fast. ──
|
||||
changes:
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 5
|
||||
outputs:
|
||||
product: ${{ steps.f.outputs.product }}
|
||||
steps:
|
||||
- name: Detect product-code changes
|
||||
id: f
|
||||
env:
|
||||
GH_TOKEN: ${{ github.token }}
|
||||
PR: ${{ github.event.pull_request.number }}
|
||||
REPO: ${{ github.repository }}
|
||||
run: |
|
||||
FILES=$(gh pr diff "$PR" --repo "$REPO" --name-only)
|
||||
printf '%s\n' "$FILES"
|
||||
if printf '%s\n' "$FILES" | grep -qE '^(src/|internal/|scripts/build\.sh|scripts/smoke-test\.sh|scripts/env\.sh|Makefile\.cbm)'; then
|
||||
echo "product=true" >> "$GITHUB_OUTPUT"
|
||||
else
|
||||
echo "product=false" >> "$GITHUB_OUTPUT"
|
||||
fi
|
||||
|
||||
# ── Light smoke: build the PRODUCTION binary and run the core smoke on the
|
||||
# three RELIABLE NATIVE platforms. Catches built-binary regressions at PR
|
||||
# time (e.g. the Windows CreateProcess argv-quoting class that previously
|
||||
# only surfaced in the release dry run). The full broad/emulated smoke stays
|
||||
# in the dry run. Only product-code PRs pay this; every leg gates.
|
||||
# SMOKE_DOWNLOAD_URL is intentionally unset — the download/update phases of
|
||||
# smoke-test.sh self-skip; the core index/search/trace phases still run. ──
|
||||
pr-smoke:
|
||||
needs: [changes]
|
||||
if: ${{ !cancelled() && needs.changes.outputs.product == 'true' }}
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
os: [ubuntu-latest, macos-14, windows-latest]
|
||||
runs-on: ${{ matrix.os }}
|
||||
timeout-minutes: 30
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- name: Install deps (Ubuntu)
|
||||
if: matrix.os == 'ubuntu-latest'
|
||||
run: sudo apt-get update && sudo apt-get install -y zlib1g-dev
|
||||
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
if: matrix.os == 'windows-latest'
|
||||
with:
|
||||
msystem: CLANG64
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-x86_64-clang
|
||||
mingw-w64-clang-x86_64-zlib
|
||||
mingw-w64-clang-x86_64-python3
|
||||
make
|
||||
coreutils
|
||||
|
||||
- name: Build prod + smoke (Ubuntu)
|
||||
if: matrix.os == 'ubuntu-latest'
|
||||
run: |
|
||||
scripts/build.sh CC=gcc CXX=g++
|
||||
scripts/smoke-test.sh "$(pwd)/build/c/codebase-memory-mcp"
|
||||
|
||||
- name: Build prod + smoke (macOS)
|
||||
if: matrix.os == 'macos-14'
|
||||
run: |
|
||||
scripts/build.sh CC=cc CXX=c++
|
||||
codesign --sign - --force build/c/codebase-memory-mcp
|
||||
scripts/smoke-test.sh "$(pwd)/build/c/codebase-memory-mcp"
|
||||
|
||||
- name: Build prod + smoke (Windows)
|
||||
if: matrix.os == 'windows-latest'
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
scripts/build.sh CC=clang CXX=clang++
|
||||
BIN="$(pwd)/build/c/codebase-memory-mcp"
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
scripts/smoke-test.sh "$BIN"
|
||||
|
||||
ci-ok:
|
||||
# The one required context (besides dco) — fails unless every PR stage
|
||||
# succeeded, so matrix renames can never silently deadlock merges. `skipped`
|
||||
# is OK: pr-smoke skips on docs/CI/test-only PRs (changes.product == false).
|
||||
needs: [security, lint, test, changes, pr-smoke]
|
||||
if: ${{ always() }}
|
||||
runs-on: ubuntu-latest
|
||||
timeout-minutes: 5
|
||||
steps:
|
||||
- name: All PR stages must have succeeded
|
||||
env:
|
||||
RESULTS: ${{ toJSON(needs) }}
|
||||
run: |
|
||||
echo "$RESULTS" | python3 -c "
|
||||
import json, sys
|
||||
needs = json.load(sys.stdin)
|
||||
bad = {k: v['result'] for k, v in needs.items() if v['result'] not in ('success', 'skipped')}
|
||||
if bad:
|
||||
print('CI NOT OK:', bad)
|
||||
sys.exit(1)
|
||||
print('CI OK:', ', '.join(needs))
|
||||
"
|
||||
@@ -0,0 +1,416 @@
|
||||
# Release pipeline: lint → test → build → smoke/soak → draft → verify → publish
|
||||
#
|
||||
# Security (security-static + codeql-gate) starts immediately and runs in
|
||||
# parallel with lint/test/build/smoke/soak. It only blocks the final verify
|
||||
# step — everything else proceeds independently.
|
||||
name: Release
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
version:
|
||||
description: "Release version (e.g. v0.8.0)"
|
||||
required: true
|
||||
type: string
|
||||
release_notes:
|
||||
description: "Release notes (optional — auto-generated from commits if empty)"
|
||||
required: false
|
||||
type: string
|
||||
replace:
|
||||
description: "Replace existing release if it exists"
|
||||
required: false
|
||||
type: boolean
|
||||
default: false
|
||||
soak_level:
|
||||
description: 'Soak: full (quick+asan), quick (10min), none'
|
||||
type: choice
|
||||
options: ['full', 'quick', 'none']
|
||||
default: 'quick'
|
||||
skip_perf:
|
||||
description: "Skip performance tests (use when no pipeline logic changed)"
|
||||
required: false
|
||||
type: boolean
|
||||
default: false
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
# ── Security (starts immediately, blocks only verify) ───────────
|
||||
security:
|
||||
uses: ./.github/workflows/_security.yml
|
||||
secrets: inherit
|
||||
|
||||
# ── 1. Lint (cppcheck + clang-format) ───────────────────────────
|
||||
lint:
|
||||
uses: ./.github/workflows/_lint.yml
|
||||
|
||||
# ── 2. Tests (all platforms, full suite for release) ────────────
|
||||
test:
|
||||
needs: [lint]
|
||||
uses: ./.github/workflows/_test.yml
|
||||
with:
|
||||
skip_perf: ${{ inputs.skip_perf }}
|
||||
broad_platforms: true
|
||||
|
||||
# ── 3. Build all platforms ──────────────────────────────────────
|
||||
build:
|
||||
needs: [test]
|
||||
permissions:
|
||||
contents: read
|
||||
id-token: write
|
||||
attestations: write
|
||||
uses: ./.github/workflows/_build.yml
|
||||
with:
|
||||
version: ${{ inputs.version }}
|
||||
attest: true
|
||||
|
||||
# ── 4. Smoke test every binary ──────────────────────────────────
|
||||
smoke:
|
||||
needs: [build]
|
||||
uses: ./.github/workflows/_smoke.yml
|
||||
with:
|
||||
broad_platforms: true
|
||||
|
||||
# ── 5. Soak tests ──────────────────────────────────────────────
|
||||
soak:
|
||||
if: ${{ inputs.soak_level != 'none' }}
|
||||
needs: [build]
|
||||
uses: ./.github/workflows/_soak.yml
|
||||
with:
|
||||
duration_minutes: 10
|
||||
run_asan: ${{ inputs.soak_level == 'full' }}
|
||||
version: ${{ inputs.version }}
|
||||
|
||||
# ── 6. Create DRAFT release ────────────────────────────────────
|
||||
release-draft:
|
||||
needs: [smoke, soak]
|
||||
if: ${{ !cancelled() && !failure() }}
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: write
|
||||
id-token: write
|
||||
attestations: write
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
|
||||
with:
|
||||
merge-multiple: true
|
||||
|
||||
- name: List artifacts
|
||||
run: ls -la *.tar.gz *.zip
|
||||
|
||||
- name: Generate checksums
|
||||
run: sha256sum *.tar.gz *.zip > checksums.txt
|
||||
|
||||
- name: Attest checksum provenance
|
||||
uses: actions/attest-build-provenance@0f67c3f4856b2e3261c31976d6725780e5e4c373 # v4.1.1
|
||||
with:
|
||||
subject-path: checksums.txt
|
||||
|
||||
- name: Generate SBOM
|
||||
run: |
|
||||
python3 -c "
|
||||
import json, glob, os
|
||||
n_grammars = len([d for d in glob.glob('internal/cbm/vendored/grammars/*') if os.path.isdir(d)])
|
||||
sbom = {
|
||||
'spdxVersion': 'SPDX-2.3',
|
||||
'dataLicense': 'CC0-1.0',
|
||||
'SPDXID': 'SPDXRef-DOCUMENT',
|
||||
'name': 'codebase-memory-mcp-${{ inputs.version }}',
|
||||
'documentNamespace': 'https://github.com/DeusData/codebase-memory-mcp/releases/${{ inputs.version }}',
|
||||
'creationInfo': {
|
||||
'created': '$(date -u +%Y-%m-%dT%H:%M:%SZ)',
|
||||
'creators': ['Tool: codebase-memory-mcp-release-pipeline']
|
||||
},
|
||||
'packages': [
|
||||
{'SPDXID': 'SPDXRef-Package-sqlite3', 'name': 'sqlite3', 'versionInfo': '3.51.3', 'licenseDeclared': 'blessing', 'downloadLocation': 'https://sqlite.org', 'filesAnalyzed': False},
|
||||
{'SPDXID': 'SPDXRef-Package-yyjson', 'name': 'yyjson', 'versionInfo': '0.12.0', 'licenseDeclared': 'MIT', 'downloadLocation': 'https://github.com/ibireme/yyjson', 'filesAnalyzed': False},
|
||||
{'SPDXID': 'SPDXRef-Package-mimalloc', 'name': 'mimalloc', 'versionInfo': '3.3.2', 'licenseDeclared': 'MIT', 'downloadLocation': 'https://github.com/microsoft/mimalloc', 'filesAnalyzed': False},
|
||||
{'SPDXID': 'SPDXRef-Package-xxhash', 'name': 'xxhash', 'versionInfo': '0.8.3', 'licenseDeclared': 'BSD-2-Clause', 'downloadLocation': 'https://github.com/Cyan4973/xxHash', 'filesAnalyzed': False},
|
||||
{'SPDXID': 'SPDXRef-Package-tre', 'name': 'tre', 'versionInfo': '0.8.0', 'licenseDeclared': 'BSD-2-Clause', 'downloadLocation': 'https://github.com/laurikari/tre', 'filesAnalyzed': False},
|
||||
{'SPDXID': 'SPDXRef-Package-tree-sitter', 'name': 'tree-sitter', 'versionInfo': '0.24.4', 'licenseDeclared': 'MIT', 'downloadLocation': 'https://github.com/tree-sitter/tree-sitter', 'filesAnalyzed': False},
|
||||
{'SPDXID': 'SPDXRef-Package-lz4', 'name': 'lz4', 'versionInfo': '1.10.0', 'licenseDeclared': 'BSD-2-Clause', 'downloadLocation': 'https://github.com/lz4/lz4', 'filesAnalyzed': False},
|
||||
{'SPDXID': 'SPDXRef-Package-zstd', 'name': 'zstd', 'versionInfo': '1.5.7', 'licenseDeclared': 'BSD-3-Clause', 'downloadLocation': 'https://github.com/facebook/zstd', 'filesAnalyzed': False},
|
||||
{'SPDXID': 'SPDXRef-Package-simplecpp', 'name': 'simplecpp', 'versionInfo': '1.x', 'licenseDeclared': '0BSD', 'downloadLocation': 'https://github.com/danmar/simplecpp', 'filesAnalyzed': False},
|
||||
{'SPDXID': 'SPDXRef-Package-verstable', 'name': 'verstable', 'versionInfo': '2.2.1', 'licenseDeclared': 'MIT', 'downloadLocation': 'https://github.com/JacksonAllan/Verstable', 'filesAnalyzed': False},
|
||||
{'SPDXID': 'SPDXRef-Package-wyhash', 'name': 'wyhash', 'versionInfo': 'final-4.3', 'licenseDeclared': 'Unlicense', 'downloadLocation': 'https://github.com/wangyi-fudan/wyhash', 'filesAnalyzed': False},
|
||||
{'SPDXID': 'SPDXRef-Package-nomic-embed-code', 'name': 'nomic-embed-code-token-embeddings', 'versionInfo': '1.0', 'licenseDeclared': 'Apache-2.0', 'downloadLocation': 'https://huggingface.co/nomic-ai/nomic-embed-code', 'filesAnalyzed': False, 'comment': 'Derived int8 token embeddings; see vendored/nomic/NOTICE'},
|
||||
{'SPDXID': 'SPDXRef-Package-tree-sitter-grammars', 'name': 'tree-sitter-grammars-aggregate', 'versionInfo': f'{n_grammars}-grammars', 'licenseDeclared': 'MIT', 'downloadLocation': 'NOASSERTION', 'filesAnalyzed': False, 'comment': f'Aggregate of {n_grammars} vendored tree-sitter grammars, compiled statically. Predominantly MIT; non-MIT families present include CC0-1.0 (clojure, fennel), Apache-2.0 (elixir, erlang, gleam, hcl, ini, jinja2, just, pkl, sway, wit), ISC (pine, templ), Unlicense (fish); first-party grammars (c) DeusData, MIT. This summary is non-exhaustive; the authoritative complete per-grammar license list is internal/cbm/vendored/grammars/MANIFEST.md, and full license texts ship in THIRD_PARTY_NOTICES.md inside each archive.'}
|
||||
]
|
||||
}
|
||||
json.dump(sbom, open('sbom.json', 'w'), indent=2)
|
||||
"
|
||||
|
||||
- name: Attest SBOM
|
||||
uses: actions/attest-sbom@c604332985a26aa8cf1bdc465b92731239ec6b9e # v4.1.0
|
||||
with:
|
||||
subject-path: '*.tar.gz'
|
||||
sbom-path: 'sbom.json'
|
||||
|
||||
- name: Install cosign
|
||||
uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
|
||||
|
||||
- name: Sign artifacts
|
||||
run: |
|
||||
for f in *.tar.gz *.zip checksums.txt; do
|
||||
cosign sign-blob --yes --bundle "${f}.bundle" "$f"
|
||||
done
|
||||
|
||||
- name: Delete existing release
|
||||
if: ${{ inputs.replace }}
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
VERSION: ${{ inputs.version }}
|
||||
run: gh release delete "$VERSION" --yes --cleanup-tag || true
|
||||
|
||||
- name: Create tag
|
||||
env:
|
||||
VERSION: ${{ inputs.version }}
|
||||
# Tag the DISPATCHED sha, not the checkout HEAD: the artifacts were
|
||||
# built from github.sha, and a commit pushed to main mid-run must not
|
||||
# move the release tag. (A floating HEAD also broke the 0.8.0 release:
|
||||
# HEAD had become a commit touching .github/workflows/, and the App
|
||||
# token may not create refs pointing at workflow-modifying commits.)
|
||||
run: |
|
||||
git tag -f "$VERSION" "$GITHUB_SHA"
|
||||
git push origin "$VERSION" --force
|
||||
|
||||
- uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v2
|
||||
with:
|
||||
tag_name: ${{ inputs.version }}
|
||||
draft: true
|
||||
files: |
|
||||
*.tar.gz
|
||||
*.zip
|
||||
checksums.txt
|
||||
sbom.json
|
||||
*.bundle
|
||||
body: ${{ inputs.release_notes || '' }}
|
||||
generate_release_notes: ${{ inputs.release_notes == '' }}
|
||||
|
||||
# ── 7. Verify + Publish (requires security gate) ───────────────
|
||||
verify:
|
||||
needs: [release-draft, security]
|
||||
# Explicit condition: a skipped ancestor (soak with soak_level=none) must
|
||||
# not skip the publish chain — only real failures/cancellations block it.
|
||||
if: ${{ !cancelled() && !failure() && needs.release-draft.result == 'success' }}
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: write
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
with:
|
||||
persist-credentials: false
|
||||
|
||||
- name: Download and extract release binaries
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
VERSION: ${{ inputs.version }}
|
||||
run: |
|
||||
mkdir -p assets binaries
|
||||
gh release download "$VERSION" --dir assets --repo "$GITHUB_REPOSITORY" --pattern '*.tar.gz' --pattern '*.zip'
|
||||
for f in assets/*.tar.gz; do
|
||||
NAME=$(basename "$f" .tar.gz)
|
||||
tar -xzf "$f" -C binaries/ 2>/dev/null || true
|
||||
[ -f binaries/codebase-memory-mcp ] && mv binaries/codebase-memory-mcp "binaries/${NAME}"
|
||||
done
|
||||
for f in assets/*.zip; do
|
||||
NAME=$(basename "$f" .zip)
|
||||
unzip -o "$f" -d binaries/ 2>/dev/null || true
|
||||
[ -f binaries/codebase-memory-mcp.exe ] && mv binaries/codebase-memory-mcp.exe "binaries/${NAME}.exe"
|
||||
done
|
||||
cp install.sh binaries/ 2>/dev/null || true
|
||||
cp install.ps1 binaries/ 2>/dev/null || true
|
||||
ls -la binaries/
|
||||
|
||||
- name: Security audits on all release files
|
||||
run: |
|
||||
# Audit every file that ships in the release archives — binaries,
|
||||
# install scripts, LICENSE, and any future companion files.
|
||||
# security-strings.sh detects file type and applies binary-only
|
||||
# rules (URL allowlist, dangerous-command detection) only to real
|
||||
# binaries; for shell scripts it still runs credential and base64
|
||||
# pattern audits.
|
||||
for f in binaries/*; do
|
||||
[ -f "$f" ] || continue
|
||||
echo "--- Auditing: $(basename "$f") ---"
|
||||
scripts/security-strings.sh "$f"
|
||||
done
|
||||
|
||||
- name: VirusTotal scan
|
||||
uses: crazy-max/ghaction-virustotal@936d8c5c00afe97d3d9a1af26d017cfdf26800a2 # v5.0.0
|
||||
id: virustotal
|
||||
with:
|
||||
vt_api_key: ${{ secrets.VIRUS_TOTAL_SCANNER_API_KEY }}
|
||||
files: binaries/*
|
||||
|
||||
- name: Wait for VirusTotal results
|
||||
env:
|
||||
VT_API_KEY: ${{ secrets.VIRUS_TOTAL_SCANNER_API_KEY }}
|
||||
VT_ANALYSIS: ${{ steps.virustotal.outputs.analysis }}
|
||||
run: scripts/ci/check-virustotal.sh
|
||||
|
||||
- name: Append VirusTotal scan links to release notes
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
VERSION: ${{ inputs.version }}
|
||||
run: |
|
||||
# Hash the extracted binaries (not the archives — VT indexes binary hashes)
|
||||
TABLE="\n\n## Security Verification\n\n"
|
||||
TABLE+="All release binaries scanned with 70+ antivirus engines — **0 detections**.\n\n"
|
||||
TABLE+="| Binary | SHA-256 | VirusTotal |\n"
|
||||
TABLE+="|--------|---------|------------|\n"
|
||||
|
||||
for bin in binaries/codebase-memory-mcp-*; do
|
||||
[ -f "$bin" ] || continue
|
||||
name=$(basename "$bin")
|
||||
# Skip UI variants and non-binary files
|
||||
echo "$name" | grep -qE \
|
||||
'^codebase-memory-mcp-(linux|darwin|windows)-(amd64|arm64)(\.exe)?$' || continue
|
||||
sha256=$(sha256sum "$bin" 2>/dev/null | awk '{print $1}' \
|
||||
|| shasum -a 256 "$bin" | awk '{print $1}')
|
||||
label=$(echo "$name" \
|
||||
| sed 's/^codebase-memory-mcp-//' \
|
||||
| sed 's/\.exe$//')
|
||||
short="${sha256:0:20}..."
|
||||
vt_url="https://www.virustotal.com/gui/file/${sha256}/detection"
|
||||
TABLE+="| \`${label}\` | \`${short}\` | [0/72 ✅](${vt_url}) |\n"
|
||||
done
|
||||
|
||||
CURRENT=$(gh release view "$VERSION" \
|
||||
--json body --jq '.body // ""' --repo "$GITHUB_REPOSITORY")
|
||||
printf '%s%b' "$CURRENT" "$TABLE" > /tmp/release_notes.md
|
||||
gh release edit "$VERSION" \
|
||||
--notes-file /tmp/release_notes.md --repo "$GITHUB_REPOSITORY"
|
||||
|
||||
# ── 8. Publish package wrappers (npm + PyPI) ──────────────────
|
||||
# Wrappers in pkg/npm and pkg/pypi download the released binary at
|
||||
# install time, so they only need a version bump (already in the repo
|
||||
# at this point) — no per-release sha256 substitution.
|
||||
#
|
||||
# Runs against the still-DRAFT GitHub release. If publish fails, the
|
||||
# release stays in draft so we can re-run without a half-shipped state.
|
||||
publish-registries:
|
||||
needs: [verify]
|
||||
if: ${{ !cancelled() && !failure() && needs.verify.result == 'success' }}
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: read
|
||||
id-token: write # for npm provenance
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
# The packaged versions MUST match the dispatched release version —
|
||||
# the 0.8.0 release failed here because pkg/npm still carried the
|
||||
# previous release's hand-pinned version and npm refuses to publish
|
||||
# over an existing version. Inject the dispatch input so a forgotten
|
||||
# manual bump can never fail the pipeline again. (server.json needs
|
||||
# no injection: publish-mcp-registry syncs it from pkg/npm.)
|
||||
- name: Sync packaging versions to the release version
|
||||
env:
|
||||
RELEASE_VERSION: ${{ inputs.version }}
|
||||
run: |
|
||||
V="${RELEASE_VERSION#v}"
|
||||
jq --arg v "$V" '.version = $v' pkg/npm/package.json > pkg/npm/package.tmp
|
||||
mv pkg/npm/package.tmp pkg/npm/package.json
|
||||
sed -i "s/^version = \".*\"/version = \"$V\"/" pkg/pypi/pyproject.toml
|
||||
grep -q "\"version\": \"$V\"" pkg/npm/package.json
|
||||
grep -q "^version = \"$V\"" pkg/pypi/pyproject.toml
|
||||
echo "packaging synced to $V"
|
||||
|
||||
# ── npm ──────────────────────────────────────────────────
|
||||
- name: Setup Node
|
||||
uses: actions/setup-node@48b55a011bda9f5d6aeb4c2d9c7362e8dae4041e # v6.4.0
|
||||
with:
|
||||
node-version: '22'
|
||||
registry-url: 'https://registry.npmjs.org'
|
||||
|
||||
- name: Publish to npm
|
||||
working-directory: pkg/npm
|
||||
env:
|
||||
NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
|
||||
run: npm publish --access public --provenance
|
||||
|
||||
# ── PyPI ─────────────────────────────────────────────────
|
||||
- name: Setup Python
|
||||
uses: actions/setup-python@ece7cb06caefa5fff74198d8649806c4678c61a1 # v6.3.0
|
||||
with:
|
||||
python-version: '3.12'
|
||||
|
||||
- name: Build PyPI distribution
|
||||
working-directory: pkg/pypi
|
||||
run: |
|
||||
# Pin to specific versions (typosquatting / supply-chain mitigation).
|
||||
# OSSF scorecard prefers --require-hashes, but that needs full
|
||||
# transitive deps; version pinning is the practical compromise.
|
||||
python -m pip install --upgrade 'build==1.3.0' 'twine==6.2.0'
|
||||
python -m build
|
||||
|
||||
- name: Publish to PyPI
|
||||
working-directory: pkg/pypi
|
||||
env:
|
||||
TWINE_USERNAME: __token__
|
||||
TWINE_PASSWORD: ${{ secrets.PYPI_TOKEN }}
|
||||
run: twine upload --non-interactive dist/*
|
||||
|
||||
# ── 8b. Publish server.json to the official MCP Registry ──────
|
||||
# Runs after npm + PyPI so the registry can verify package ownership
|
||||
# (npm: `mcpName` field in package.json; PyPI: `mcp-name:` marker in
|
||||
# the package README). Authenticates with GitHub Actions OIDC — no
|
||||
# token, no interactive device flow. server.json's version is synced
|
||||
# from the just-published npm package so it always matches the release.
|
||||
#
|
||||
# Intentionally does NOT gate publish-final: the binary release is the
|
||||
# product, the registry entry is metadata. A registry-preview outage
|
||||
# must never block shipping. Re-run this job alone to retry — it does
|
||||
# not touch npm/PyPI, so retries are safe.
|
||||
publish-mcp-registry:
|
||||
needs: [publish-registries]
|
||||
if: ${{ !cancelled() && !failure() && needs.publish-registries.result == 'success' }}
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
id-token: write # GitHub OIDC auth to the MCP Registry
|
||||
contents: read
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- name: Sync server.json version to the released package
|
||||
env:
|
||||
# The dispatch input is the authoritative release version —
|
||||
# pkg/npm/package.json can lag behind it in the dispatched commit.
|
||||
RELEASE_VERSION: ${{ inputs.version }}
|
||||
run: |
|
||||
VERSION="${RELEASE_VERSION#v}"
|
||||
jq --arg v "$VERSION" '.version = $v | (.packages[].version) = $v' \
|
||||
server.json > server.tmp && mv server.tmp server.json
|
||||
echo "server.json pinned to $VERSION"
|
||||
cat server.json
|
||||
|
||||
- name: Install mcp-publisher
|
||||
run: |
|
||||
curl -fsSL "https://github.com/modelcontextprotocol/registry/releases/latest/download/mcp-publisher_$(uname -s | tr '[:upper:]' '[:lower:]')_$(uname -m | sed 's/x86_64/amd64/;s/aarch64/arm64/').tar.gz" | tar xz mcp-publisher
|
||||
|
||||
- name: Authenticate to MCP Registry (GitHub OIDC)
|
||||
run: ./mcp-publisher login github-oidc
|
||||
|
||||
- name: Publish server.json to MCP Registry
|
||||
run: ./mcp-publisher publish
|
||||
|
||||
# ── 9. Atomic un-draft (only after npm + PyPI succeed) ────────
|
||||
# The GitHub release stays in DRAFT until both registries publish.
|
||||
# If anything upstream fails, the draft can be deleted and the run
|
||||
# re-tried with replace=true — no half-shipped state visible to users.
|
||||
publish-final:
|
||||
needs: [verify, publish-registries]
|
||||
if: ${{ !cancelled() && !failure() && needs.verify.result == 'success' && needs.publish-registries.result == 'success' }}
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
contents: write
|
||||
steps:
|
||||
- name: Un-draft GitHub release
|
||||
env:
|
||||
GH_TOKEN: ${{ secrets.GITHUB_TOKEN }}
|
||||
VERSION: ${{ inputs.version }}
|
||||
run: gh release edit "$VERSION" --draft=false --repo "$GITHUB_REPOSITORY"
|
||||
@@ -0,0 +1,32 @@
|
||||
name: OpenSSF Scorecard
|
||||
|
||||
on:
|
||||
push:
|
||||
branches: [main]
|
||||
schedule:
|
||||
- cron: '0 6 * * 1' # Every Monday at 06:00 UTC
|
||||
|
||||
permissions: read-all
|
||||
|
||||
jobs:
|
||||
scorecard:
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
security-events: write
|
||||
id-token: write
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
with:
|
||||
persist-credentials: false
|
||||
|
||||
- name: Run OpenSSF Scorecard
|
||||
uses: ossf/scorecard-action@4eaacf0543bb3f2c246792bd56e8cdeffafb205a # v2.4.3
|
||||
with:
|
||||
results_file: results.sarif
|
||||
results_format: sarif
|
||||
publish_results: true
|
||||
|
||||
- name: Upload SARIF results
|
||||
uses: github/codeql-action/upload-sarif@54f647b7e1bb85c95cddabcd46b0c578ec92bc1a # v4
|
||||
with:
|
||||
sarif_file: results.sarif
|
||||
@@ -0,0 +1,124 @@
|
||||
# Smoke invariants — "the shipped binary does not fail" — across the WIDEST set of
|
||||
# GitHub-hosted runners. Builds the prod binary and runs scripts/smoke-invariants.sh
|
||||
# (version/help, MCP initialize handshake [#513], all 14 tools invocable, malformed-
|
||||
# input resilience, clean EOF exit, shared-lib resolution, install dry-run).
|
||||
#
|
||||
# Maximizing platforms is the point: ubuntu-22.04 (older glibc → AlmaLinux/#182
|
||||
# class), all arm64 variants + windows-11-arm (arch portability), multiple macOS
|
||||
# and Windows versions. A FAIL on any platform is a binary users would receive.
|
||||
#
|
||||
# NON-GATING: workflow_dispatch + push to qa/smoke-** only (the full ~10-platform
|
||||
# build is heavy, so it is opt-in rather than on every qa push).
|
||||
name: Smoke (all platforms)
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
push:
|
||||
branches: ['qa/smoke-**']
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
# ── Unix: linux amd64+arm64 (incl. older glibc 22.04), darwin arm64+amd64 ──
|
||||
smoke-unix:
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
include:
|
||||
- os: ubuntu-22.04 # older glibc — AlmaLinux/#182 portability class
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: ubuntu-24.04
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: ubuntu-22.04-arm
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: ubuntu-24.04-arm
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: macos-14 # arm64
|
||||
cc: cc
|
||||
cxx: c++
|
||||
- os: macos-15 # arm64
|
||||
cc: cc
|
||||
cxx: c++
|
||||
- os: macos-15-intel # x86_64
|
||||
cc: cc
|
||||
cxx: c++
|
||||
runs-on: ${{ matrix.os }}
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- name: Install deps (Linux)
|
||||
if: startsWith(matrix.os, 'ubuntu')
|
||||
run: sudo apt-get update && sudo apt-get install -y zlib1g-dev python3 git
|
||||
- name: Build (prod binary)
|
||||
run: scripts/build.sh CC=${{ matrix.cc }} CXX=${{ matrix.cxx }}
|
||||
- name: Smoke invariants
|
||||
run: |
|
||||
chmod +x scripts/smoke-invariants.sh
|
||||
scripts/smoke-invariants.sh build/c/codebase-memory-mcp
|
||||
|
||||
# ── Windows x64: 2022 + 2025 (msys2 CLANG64) ──────────────────────────────
|
||||
smoke-windows-x64:
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
os: [windows-2022, windows-2025]
|
||||
runs-on: ${{ matrix.os }}
|
||||
timeout-minutes: 240
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
with:
|
||||
msystem: CLANG64
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-x86_64-clang
|
||||
mingw-w64-clang-x86_64-zlib
|
||||
mingw-w64-clang-x86_64-python3
|
||||
make
|
||||
git
|
||||
coreutils
|
||||
- name: Build (prod binary)
|
||||
shell: msys2 {0}
|
||||
run: scripts/build.sh CC=clang CXX=clang++
|
||||
- name: Smoke invariants
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
chmod +x scripts/smoke-invariants.sh
|
||||
BIN=build/c/codebase-memory-mcp
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
scripts/smoke-invariants.sh "$BIN"
|
||||
|
||||
# ── Windows arm64: windows-11-arm (msys2 CLANGARM64) — experimental ───────
|
||||
# Best-effort: surfaces whether our binary builds + smokes on Windows on ARM.
|
||||
smoke-windows-arm:
|
||||
runs-on: windows-11-arm
|
||||
timeout-minutes: 240
|
||||
continue-on-error: true
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
with:
|
||||
msystem: CLANGARM64
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-aarch64-clang
|
||||
mingw-w64-clang-aarch64-zlib
|
||||
mingw-w64-clang-aarch64-python3
|
||||
make
|
||||
git
|
||||
coreutils
|
||||
- name: Build (prod binary)
|
||||
shell: msys2 {0}
|
||||
run: scripts/build.sh CC=clang CXX=clang++
|
||||
- name: Smoke invariants
|
||||
shell: msys2 {0}
|
||||
run: |
|
||||
chmod +x scripts/smoke-invariants.sh
|
||||
BIN=build/c/codebase-memory-mcp
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
scripts/smoke-invariants.sh "$BIN"
|
||||
@@ -0,0 +1,130 @@
|
||||
# Real multi-hour soak — #581 query-only memory-leak reproducer.
|
||||
#
|
||||
# WHY THIS EXISTS (separate from _soak.yml / nightly-soak.yml):
|
||||
# The nightly path was structurally incapable of running a real long soak:
|
||||
# 1. nightly-soak.yml passes duration_minutes: 240, but _soak.yml's
|
||||
# soak-quick / soak-asan jobs hard-cap `timeout-minutes: 30` (45 for
|
||||
# ASan). GitHub kills the job at 30 min → the "4h" soak NEVER ran past
|
||||
# 30 min. (Fixed in _soak.yml too, but this workflow guarantees the
|
||||
# right budget for the long #581 run.)
|
||||
# 2. scripts/soak-test.sh's default mode reindexes every 2 min;
|
||||
# index_repository triggers cbm_mem_collect (mimalloc page return),
|
||||
# which sweeps the query-only leak — masking #581 even on a long run.
|
||||
# This workflow drives CBM_SOAK_MODE=query-leak, which never reindexes
|
||||
# and never mutates files, so the leak can accumulate and be detected
|
||||
# by soak-test.sh's RSS slope / ratio / ceiling analysis.
|
||||
#
|
||||
# NON-GATING: workflow_dispatch + push to qa/soak-** only. Never a required
|
||||
# check, never blocks a merge.
|
||||
#
|
||||
# CRITICAL: timeout-minutes = duration + 60. A 240-min soak gets ~300 min.
|
||||
name: Soak (multi-hour #581)
|
||||
|
||||
on:
|
||||
workflow_dispatch:
|
||||
inputs:
|
||||
duration_minutes:
|
||||
description: 'Soak duration in minutes (default: 240 = 4h)'
|
||||
type: number
|
||||
default: 240
|
||||
mode:
|
||||
description: 'Soak mode (query-leak = #581 detector, no reindex/mutate)'
|
||||
type: choice
|
||||
options: ['default', 'query-leak']
|
||||
default: 'query-leak'
|
||||
# Iteration convenience: pushing a qa/soak-** branch starts a real run from
|
||||
# that branch's own copy of this file (no main merge needed). Non-gating.
|
||||
push:
|
||||
branches: ['qa/soak-**']
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
# ── Unix: full matrix (linux amd64+arm64, darwin arm64+amd64) ──────────────
|
||||
soak-unix:
|
||||
strategy:
|
||||
fail-fast: false
|
||||
matrix:
|
||||
include:
|
||||
- os: ubuntu-latest
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: ubuntu-24.04-arm
|
||||
cc: gcc
|
||||
cxx: g++
|
||||
- os: macos-14
|
||||
cc: cc
|
||||
cxx: c++
|
||||
- os: macos-15-intel
|
||||
cc: cc
|
||||
cxx: c++
|
||||
runs-on: ${{ matrix.os }}
|
||||
# Fixed budget (NOT the 30 min that silently truncated nightly). 320 min covers
|
||||
# the 240-min default soak + build + analysis. `timeout-minutes` is evaluated at
|
||||
# workflow setup where the `inputs` context is null on push events, so an
|
||||
# inputs-based expression here is a startup failure — keep it a literal.
|
||||
# (A workflow_dispatch run with duration > ~250 min should bump this.)
|
||||
timeout-minutes: 320
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
|
||||
- name: Install deps (Linux)
|
||||
if: startsWith(matrix.os, 'ubuntu')
|
||||
run: sudo apt-get update && sudo apt-get install -y zlib1g-dev python3 git
|
||||
|
||||
- name: Build (prod binary)
|
||||
run: scripts/build.sh CC=${{ matrix.cc }} CXX=${{ matrix.cxx }}
|
||||
|
||||
- name: Soak
|
||||
env:
|
||||
# On push events there are no inputs → fall back to shell defaults
|
||||
# (240 min / query-leak) so a qa/soak-** push runs the real #581 soak.
|
||||
CBM_SOAK_MODE: ${{ inputs.mode || 'query-leak' }}
|
||||
DURATION_MINUTES: ${{ inputs.duration_minutes || '240' }}
|
||||
run: scripts/soak-test.sh build/c/codebase-memory-mcp "${DURATION_MINUTES}"
|
||||
|
||||
- name: Upload metrics
|
||||
if: always()
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: soak-${{ matrix.os }}-${{ inputs.mode || 'query-leak' }}
|
||||
path: soak-results/
|
||||
retention-days: 14
|
||||
|
||||
# ── Windows: the platform #581 actually crashes on (50+ GB → crash) ───────
|
||||
soak-windows:
|
||||
runs-on: windows-latest
|
||||
timeout-minutes: 320
|
||||
steps:
|
||||
- uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
|
||||
- uses: msys2/setup-msys2@66cd2cce69caa17b53920067426061ca1de3a884 # v2
|
||||
with:
|
||||
msystem: CLANG64
|
||||
path-type: inherit
|
||||
install: >-
|
||||
mingw-w64-clang-x86_64-clang
|
||||
mingw-w64-clang-x86_64-zlib
|
||||
mingw-w64-clang-x86_64-python3
|
||||
make
|
||||
git
|
||||
coreutils
|
||||
- name: Build (prod binary)
|
||||
shell: msys2 {0}
|
||||
run: scripts/build.sh CC=clang CXX=clang++
|
||||
- name: Soak
|
||||
shell: msys2 {0}
|
||||
env:
|
||||
CBM_SOAK_MODE: ${{ inputs.mode || 'query-leak' }}
|
||||
DURATION_MINUTES: ${{ inputs.duration_minutes || '240' }}
|
||||
run: |
|
||||
BIN=build/c/codebase-memory-mcp
|
||||
[ -f "${BIN}.exe" ] && BIN="${BIN}.exe"
|
||||
scripts/soak-test.sh "$BIN" "${DURATION_MINUTES}"
|
||||
- name: Upload metrics
|
||||
if: always()
|
||||
uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
|
||||
with:
|
||||
name: soak-windows-${{ inputs.mode || 'query-leak' }}
|
||||
path: soak-results/
|
||||
retention-days: 14
|
||||
@@ -0,0 +1,44 @@
|
||||
name: Stale awaiting-reporter
|
||||
|
||||
# Only touches issues that a maintainer has explicitly marked `awaiting-reporter`.
|
||||
# Never touches pull requests, and never touches issues without that label.
|
||||
# A reporter comment removes `stale` and resets the clock.
|
||||
|
||||
on:
|
||||
schedule:
|
||||
- cron: '17 2 * * *' # daily 02:17 UTC
|
||||
workflow_dispatch:
|
||||
|
||||
permissions:
|
||||
contents: read
|
||||
|
||||
jobs:
|
||||
stale:
|
||||
runs-on: ubuntu-latest
|
||||
permissions:
|
||||
issues: write
|
||||
steps:
|
||||
- uses: actions/stale@eb5cf3af3ac0a1aa4c9c45633dd1ae542a27a899 # v10.3.0
|
||||
with:
|
||||
only-labels: 'awaiting-reporter'
|
||||
stale-issue-label: 'stale'
|
||||
days-before-issue-stale: 21
|
||||
days-before-issue-close: 14
|
||||
# Never act on pull requests with this workflow.
|
||||
days-before-pr-stale: -1
|
||||
days-before-pr-close: -1
|
||||
remove-stale-when-updated: true
|
||||
close-issue-reason: not_planned
|
||||
operations-per-run: 60
|
||||
ascending: true
|
||||
stale-issue-message: >
|
||||
This issue has been waiting on more information for 21 days (a
|
||||
version, exact steps, or a public repro), so it's now marked
|
||||
`stale`. It will be closed in 14 days if there's no update — just
|
||||
add a comment to keep it open. We're happy to pick it back up the
|
||||
moment we can reproduce it.
|
||||
close-issue-message: >
|
||||
Closing because we haven't received the requested details and can't
|
||||
reproduce it as-is. This isn't a "won't fix" — please comment with
|
||||
the info (version + a public repro) and we'll reopen and dig in.
|
||||
Thanks for the report.
|
||||
+68
@@ -0,0 +1,68 @@
|
||||
# Binaries
|
||||
code-graph-mcp
|
||||
/codebase-memory-mcp
|
||||
bin/
|
||||
*.exe
|
||||
*.dll
|
||||
*.so
|
||||
*.dylib
|
||||
|
||||
# Test artifacts
|
||||
*.test
|
||||
*.out
|
||||
coverage.txt
|
||||
|
||||
# Test fixture temp dirs (created by C test suite in CWD instead of /tmp/)
|
||||
cbm_*/
|
||||
cli-*/
|
||||
|
||||
# IDE
|
||||
.idea/
|
||||
.vscode/
|
||||
*.swp
|
||||
*.swo
|
||||
|
||||
# OS
|
||||
.DS_Store
|
||||
Thumbs.db
|
||||
|
||||
# Database files (local cache)
|
||||
*.db
|
||||
*.db-wal
|
||||
*.db-shm
|
||||
|
||||
# MCP config (user-local, generated by install command)
|
||||
.mcp.json
|
||||
|
||||
# MCP Registry auth tokens
|
||||
.mcpregistry_*
|
||||
|
||||
# Local project memory (Claude Code auto-memory)
|
||||
memory/
|
||||
reference/
|
||||
|
||||
# Local-only scratch / session notes (never pushed)
|
||||
private/
|
||||
|
||||
# Build artifacts
|
||||
build/
|
||||
node_modules/
|
||||
graph-ui/dist/
|
||||
|
||||
# Generated reports
|
||||
BENCHMARK_REPORT.md
|
||||
TEST_PLAN.md
|
||||
CHANGELOG.md
|
||||
|
||||
# Soak test output
|
||||
soak-results/
|
||||
|
||||
# LSP originality-check reference cache (scripts/check-lsp-originality.sh)
|
||||
.lsp-refs/
|
||||
|
||||
# Local npm cache
|
||||
graph-ui/.npm-cache-local/
|
||||
|
||||
# Python bytecode from tests/windows/ harness
|
||||
__pycache__/
|
||||
*.pyc
|
||||
@@ -0,0 +1,3 @@
|
||||
# False positives: AVX-512 intrinsic variable names in vendored zstd (xxhash)
|
||||
internal/cbm/vendored/zstd/zstd.c:generic-api-key:13192
|
||||
internal/cbm/vendored/zstd/zstd.c:generic-api-key:13241
|
||||
@@ -0,0 +1,85 @@
|
||||
|
||||
# Contributor Covenant Code of Conduct
|
||||
|
||||
## Our Pledge
|
||||
|
||||
We as members, contributors, and leaders pledge to make participation in our community a harassment-free experience for everyone, regardless of age, body size, visible or invisible disability, ethnicity, sex characteristics, gender identity and expression, level of experience, education, socio-economic status, nationality, personal appearance, race, caste, color, religion, or sexual identity and orientation.
|
||||
|
||||
We pledge to act and interact in ways that contribute to an open, welcoming, diverse, inclusive, and healthy community.
|
||||
|
||||
## Our Standards
|
||||
|
||||
Examples of behavior that contributes to a positive environment for our community include:
|
||||
|
||||
* Demonstrating empathy and kindness toward other people
|
||||
* Being respectful of differing opinions, viewpoints, and experiences
|
||||
* Giving and gracefully accepting constructive feedback
|
||||
* Accepting responsibility and apologizing to those affected by our mistakes, and learning from the experience
|
||||
* Focusing on what is best not just for us as individuals, but for the overall community
|
||||
|
||||
Examples of unacceptable behavior include:
|
||||
|
||||
* The use of sexualized language or imagery, and sexual attention or advances of any kind
|
||||
* Trolling, insulting or derogatory comments, and personal or political attacks
|
||||
* Public or private harassment
|
||||
* Publishing others' private information, such as a physical or email address, without their explicit permission
|
||||
* Other conduct which could reasonably be considered inappropriate in a professional setting
|
||||
|
||||
## Enforcement Responsibilities
|
||||
|
||||
Community leaders are responsible for clarifying and enforcing our standards of acceptable behavior and will take appropriate and fair corrective action in response to any behavior that they deem inappropriate, threatening, offensive, or harmful.
|
||||
|
||||
Community leaders have the right and responsibility to remove, edit, or reject comments, commits, code, wiki edits, issues, and other contributions that are not aligned to this Code of Conduct, and will communicate reasons for moderation decisions when appropriate.
|
||||
|
||||
## Scope
|
||||
|
||||
This Code of Conduct applies within all community spaces, and also applies when an individual is officially representing the community in public spaces. Examples of representing our community include using an official e-mail address, posting via an official social media account, or acting as an appointed representative at an online or offline event.
|
||||
|
||||
## Enforcement
|
||||
|
||||
Instances of abusive, harassing, or otherwise unacceptable behavior may be reported to the community leaders responsible for enforcement at martin.vogel.tech@gmail.com. All complaints will be reviewed and investigated promptly and fairly.
|
||||
|
||||
All community leaders are obligated to respect the privacy and security of the reporter of any incident.
|
||||
|
||||
## Enforcement Guidelines
|
||||
|
||||
Community leaders will follow these Community Impact Guidelines in determining the consequences for any action they deem in violation of this Code of Conduct:
|
||||
|
||||
### 1. Correction
|
||||
|
||||
**Community Impact**: Use of inappropriate language or other behavior deemed unprofessional or unwelcome in the community.
|
||||
|
||||
**Consequence**: A private, written warning from community leaders, providing clarity around the nature of the violation and an explanation of why the behavior was inappropriate. A public apology may be requested.
|
||||
|
||||
### 2. Warning
|
||||
|
||||
**Community Impact**: A violation through a single incident or series of actions.
|
||||
|
||||
**Consequence**: A warning with consequences for continued behavior. No interaction with the people involved, including unsolicited interaction with those enforcing the Code of Conduct, for a specified period of time. This includes avoiding interactions in community spaces as well as external channels like social media. Violating these terms may lead to a temporary or permanent ban.
|
||||
|
||||
### 3. Temporary Ban
|
||||
|
||||
**Community Impact**: A serious violation of community standards, including sustained inappropriate behavior.
|
||||
|
||||
**Consequence**: A temporary ban from any sort of interaction or public communication with the community for a specified period of time. No public or private interaction with the people involved, including unsolicited interaction with those enforcing the Code of Conduct, is allowed during this period. Violating these terms may lead to a permanent ban.
|
||||
|
||||
### 4. Permanent Ban
|
||||
|
||||
**Community Impact**: Demonstrating a pattern of violation of community standards, including sustained inappropriate behavior, harassment of an individual, or aggression toward or disparagement of classes of individuals.
|
||||
|
||||
**Consequence**: A permanent ban from any sort of public interaction within the community.
|
||||
|
||||
## Attribution
|
||||
|
||||
This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 2.1, available at [https://www.contributor-covenant.org/version/2/1/code_of_conduct.html][v2.1].
|
||||
|
||||
Community Impact Guidelines were inspired by [Mozilla's code of conduct enforcement ladder][Mozilla CoC].
|
||||
|
||||
For answers to common questions about this code of conduct, see the FAQ at [https://www.contributor-covenant.org/faq][FAQ]. Translations are available at [https://www.contributor-covenant.org/translations][translations].
|
||||
|
||||
[homepage]: https://www.contributor-covenant.org
|
||||
[v2.1]: https://www.contributor-covenant.org/version/2/1/code_of_conduct.html
|
||||
[Mozilla CoC]: https://github.com/mozilla/diversity
|
||||
[FAQ]: https://www.contributor-covenant.org/faq
|
||||
[translations]: https://www.contributor-covenant.org/translations
|
||||
|
||||
+201
@@ -0,0 +1,201 @@
|
||||
# Contributing to codebase-memory-mcp
|
||||
|
||||
Contributions are welcome. This guide covers setup, testing, and PR guidelines.
|
||||
|
||||
> **Important**: This project is a **pure C binary** (rewritten from Go in v0.5.0). Please submit C code, not Go. Go PRs may be ported but cannot be merged directly.
|
||||
|
||||
## Build from Source
|
||||
|
||||
**Prerequisites**: C compiler (gcc or clang), make, zlib, Git. Optional: Node.js 22+ (for graph UI).
|
||||
|
||||
```bash
|
||||
git clone https://github.com/DeusData/codebase-memory-mcp.git
|
||||
cd codebase-memory-mcp
|
||||
git config core.hooksPath scripts/hooks # activates pre-commit security checks
|
||||
scripts/build.sh
|
||||
```
|
||||
|
||||
macOS: `xcode-select --install` provides clang.
|
||||
Linux: `sudo apt install build-essential zlib1g-dev` (Debian/Ubuntu) or `sudo dnf install gcc zlib-devel` (Fedora).
|
||||
|
||||
The binary is output to `build/c/codebase-memory-mcp`.
|
||||
|
||||
## Run Tests
|
||||
|
||||
```bash
|
||||
scripts/test.sh
|
||||
```
|
||||
|
||||
This builds with ASan + UBSan and runs all tests (~2040 cases). Key test files:
|
||||
- `tests/test_pipeline.c` — pipeline integration tests
|
||||
- `tests/test_httplink.c` — HTTP route extraction and linking
|
||||
- `tests/test_mcp.c` — MCP protocol and tool handler tests
|
||||
- `tests/test_store_*.c` — SQLite graph store tests
|
||||
|
||||
## Run Linter
|
||||
|
||||
```bash
|
||||
scripts/lint.sh
|
||||
```
|
||||
|
||||
Runs clang-tidy, cppcheck, and clang-format. All must pass before committing (also enforced by pre-commit hook).
|
||||
|
||||
## Run Security Audit
|
||||
|
||||
```bash
|
||||
make -f Makefile.cbm security
|
||||
```
|
||||
|
||||
Runs 8 security layers: static allow-list audit, binary string scan, UI audit, install audit, network egress test, MCP robustness (fuzz), vendored dependency integrity, and frontend integrity.
|
||||
|
||||
## Project Structure
|
||||
|
||||
```
|
||||
src/
|
||||
foundation/ Arena allocator, hash table, string utils, platform compat
|
||||
store/ SQLite graph storage (WAL mode, FTS5)
|
||||
cypher/ Cypher query → SQL translation
|
||||
mcp/ MCP server (JSON-RPC 2.0 over stdio, 14 tools)
|
||||
pipeline/ Multi-pass indexing pipeline
|
||||
pass_*.c Individual pipeline passes (definitions, calls, usages, etc.)
|
||||
httplink.c HTTP route extraction (Go/Express/Laravel/Ktor/Python)
|
||||
discover/ File discovery with gitignore support
|
||||
watcher/ Git-based background auto-sync
|
||||
cli/ CLI subcommands (install, update, uninstall, config)
|
||||
ui/ Graph visualization HTTP server (first-party httpd)
|
||||
internal/cbm/ Tree-sitter AST extraction (64 languages, vendored C grammars)
|
||||
vendored/ sqlite3, yyjson, mimalloc, xxhash, tre, nomic
|
||||
graph-ui/ React/Three.js frontend for graph visualization
|
||||
scripts/ Build, test, lint, security audit scripts
|
||||
tests/ All C test files
|
||||
```
|
||||
|
||||
## Adding or Fixing Language Support
|
||||
|
||||
Language support is split between two layers:
|
||||
|
||||
1. **Tree-sitter extraction** (`internal/cbm/`): Grammar loading, AST node type configuration in `lang_specs.c`, function/call/import extraction in `extract_*.c`
|
||||
2. **Pipeline passes** (`src/pipeline/`): Call resolution, usage tracking, HTTP route linking
|
||||
|
||||
**Workflow for language fixes:**
|
||||
|
||||
1. Check the language spec in `internal/cbm/lang_specs.c`
|
||||
2. Use regression tests to verify extraction: `tests/test_extraction.c`
|
||||
3. Check parity tests: `internal/cbm/regression_test.go` (legacy, being migrated)
|
||||
4. Add a test case in `tests/test_pipeline.c` for integration-level fixes
|
||||
5. Verify with a real open-source repo
|
||||
|
||||
### Infrastructure Languages (Infra-Pass Pattern)
|
||||
|
||||
Languages like **Dockerfile**, **docker-compose**, **Kubernetes manifests**, and **Kustomize** do not require a new tree-sitter grammar. Instead they follow an *infra-pass* pattern, reusing the existing tree-sitter YAML grammar where applicable:
|
||||
|
||||
1. **Detection helpers** in `src/pipeline/pass_infrascan.c` — functions like `cbm_is_dockerfile()`, `cbm_is_k8s_manifest()`, `cbm_is_kustomize_file()` identify files by name and/or content heuristics (e.g., presence of `apiVersion:`).
|
||||
2. **Custom extractors** in `internal/cbm/extract_k8s.c` — tree-sitter-based parsers that walk the YAML AST (using the tree-sitter YAML grammar) and populate `CBMFileResult` with imports and definitions.
|
||||
3. **Pipeline pass** (`pass_k8s.c`, `pass_infrascan.c`) — calls the extractor and emits graph nodes/edges. K8s manifests emit `Resource` nodes; Kustomize files emit `Module` nodes with `IMPORTS` edges to referenced resource files.
|
||||
|
||||
**When adding a new infrastructure language:**
|
||||
- Add a detection helper (`cbm_is_<lang>_file()`) in `pass_infrascan.c` or a new `pass_<lang>.c`.
|
||||
- Add the `CBM_LANG_<LANG>` enum value in `internal/cbm/cbm.h` and a row in the language table in `lang_specs.c`.
|
||||
- Write a custom extractor that returns `CBMFileResult*` — do not add a tree-sitter grammar.
|
||||
- Register the pass in `pipeline.c`.
|
||||
- Add tests in `tests/test_pipeline.c` following the `TEST(infra_is_dockerfile)` and `TEST(k8s_extract_manifest)` patterns.
|
||||
|
||||
## Commit Format
|
||||
|
||||
Use conventional commits: `type(scope): description`
|
||||
|
||||
| Type | When to use |
|
||||
|------|-------------|
|
||||
| `feat` | New feature or capability |
|
||||
| `fix` | Bug fix |
|
||||
| `test` | Adding or updating tests |
|
||||
| `refactor` | Code change that neither fixes a bug nor adds a feature |
|
||||
| `perf` | Performance improvement |
|
||||
| `docs` | Documentation only |
|
||||
| `chore` | Build scripts, CI, dependency updates |
|
||||
|
||||
Examples: `fix(store): set busy_timeout before WAL`, `feat(cli): add --progress flag`
|
||||
|
||||
## Pull Request Guidelines
|
||||
|
||||
### Before You Write Code
|
||||
|
||||
- **Open an issue first — always.** Every PR must reference a tracking issue (`Fixes #N` or `Closes #N`). Describe what you want to change and why. Wait for maintainer feedback before implementing. PRs without a prior issue discussion will be closed.
|
||||
- **Bug fixes and test additions** are the exception — these are welcome without prior discussion, as long as they're focused.
|
||||
|
||||
### What Requires Explicit Maintainer Approval
|
||||
|
||||
The following changes will not be merged without prior design discussion in an issue:
|
||||
|
||||
- **API surface changes** — adding, removing, renaming, or changing defaults of MCP tools
|
||||
- **New pipeline passes or indexing algorithms** — anything that changes what gets extracted or how
|
||||
- **Build system / Makefile changes** — beyond trivial fixes
|
||||
- **Project configuration** — CLAUDE.md, skill files, .mcp.json, CI workflows
|
||||
- **New dependencies** — vendored or otherwise
|
||||
- **Breaking changes** of any kind
|
||||
|
||||
If in doubt, open an issue and ask.
|
||||
|
||||
### PR Scope and Size
|
||||
|
||||
- **One issue per PR.** Each PR must address exactly one bug, one feature, or one refactor. Do not bundle multiple fixes or feature additions into a single PR. Kitchen-sink PRs will be closed with a request to split.
|
||||
- **Keep PRs small.** A good PR is under 500 lines. If your change is larger, split it into reviewable increments that each stand on their own.
|
||||
- **Don't mix features with fixes.** If you find a bug while implementing a feature, submit the bug fix as a separate PR.
|
||||
|
||||
### Code Requirements
|
||||
|
||||
- **C code only** — this project was rewritten from Go to pure C in v0.5.0. Go PRs will be acknowledged and potentially ported, but cannot be merged directly.
|
||||
- Include tests for new functionality
|
||||
- Run `scripts/test.sh` and `scripts/lint.sh` before submitting
|
||||
- Keep PRs focused — avoid unrelated reformatting or refactoring
|
||||
|
||||
## Security
|
||||
|
||||
We take security seriously. All PRs go through:
|
||||
- Manual security review (dangerous calls, network access, file writes, prompt injection)
|
||||
- Automated 8-layer security audit in CI
|
||||
- Vendored dependency integrity checks
|
||||
|
||||
If you add a new `system()`, `popen()`, `fork()`, or network call, it must be justified and added to `scripts/security-allowlist.txt`.
|
||||
|
||||
## Good First Issues
|
||||
|
||||
Check [issues labeled `good first issue`](https://github.com/DeusData/codebase-memory-mcp/labels/good%20first%20issue) for beginner-friendly tasks with clear scope and guidance.
|
||||
|
||||
## License and sign-off (DCO) — required on every commit
|
||||
|
||||
All contributions are licensed under the project's MIT License
|
||||
(inbound = outbound). To make that explicit and permanent, this project
|
||||
uses the [Developer Certificate of Origin 1.1](DCO) — the same mechanism
|
||||
as the Linux kernel: **every commit must carry a `Signed-off-by` trailer
|
||||
matching the commit author.**
|
||||
|
||||
```bash
|
||||
git commit -s # adds: Signed-off-by: Your Name <you@example.com>
|
||||
```
|
||||
|
||||
**Adding a `Signed-off-by` line to a commit constitutes your certification
|
||||
of the [Developer Certificate of Origin 1.1](DCO) — in full, all four
|
||||
clauses — for that contribution.** The sign-off must match the commit's
|
||||
author name and email (enforced by CI). In short: you certify that you
|
||||
wrote the change or otherwise have the right to submit it under the MIT
|
||||
license, and that you understand the contribution and your sign-off are
|
||||
public and permanent.
|
||||
|
||||
(Independently of the DCO, submitting a contribution to this repository is
|
||||
also subject to GitHub's Terms of Service §D.6, under which contributions
|
||||
are licensed inbound = outbound — i.e., under this repository's MIT
|
||||
license.)
|
||||
|
||||
Enforcement is strict and automated:
|
||||
|
||||
- CI rejects every push and pull request containing an unsigned commit
|
||||
(`scripts/check-dco.sh`).
|
||||
- Install the local hook so unsigned commits are rejected at commit time:
|
||||
|
||||
```bash
|
||||
scripts/install-git-hooks.sh
|
||||
```
|
||||
|
||||
Forgot to sign? `git commit --amend -s` fixes the last commit;
|
||||
`git rebase --signoff <base>` fixes a whole branch.
|
||||
@@ -0,0 +1,34 @@
|
||||
Developer Certificate of Origin
|
||||
Version 1.1
|
||||
|
||||
Copyright (C) 2004, 2006 The Linux Foundation and its contributors.
|
||||
|
||||
Everyone is permitted to copy and distribute verbatim copies of this
|
||||
license document, but changing it is not allowed.
|
||||
|
||||
|
||||
Developer's Certificate of Origin 1.1
|
||||
|
||||
By making a contribution to this project, I certify that:
|
||||
|
||||
(a) The contribution was created in whole or in part by me and I
|
||||
have the right to submit it under the open source license
|
||||
indicated in the file; or
|
||||
|
||||
(b) The contribution is based upon previous work that, to the best
|
||||
of my knowledge, is covered under an appropriate open source
|
||||
license and I have the right under that license to submit that
|
||||
work with modifications, whether created in whole or in part
|
||||
by me, under the same open source license (unless I am
|
||||
permitted to submit under a different license), as indicated
|
||||
in the file; or
|
||||
|
||||
(c) The contribution was provided directly to me by some other
|
||||
person who certified (a), (b) or (c) and I have not modified
|
||||
it.
|
||||
|
||||
(d) I understand and agree that this project and the contribution
|
||||
are public and that a record of the contribution (including all
|
||||
personal information I submit with it, including my sign-off) is
|
||||
maintained indefinitely and may be redistributed consistent with
|
||||
this project or the open source license(s) involved.
|
||||
@@ -0,0 +1,22 @@
|
||||
MIT License
|
||||
|
||||
Copyright (c) 2025 DeusData
|
||||
|
||||
Permission is hereby granted, free of charge, to any person obtaining a copy
|
||||
of this software and associated documentation files (the "Software"), to deal
|
||||
in the Software without restriction, including without limitation the rights
|
||||
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
|
||||
copies of the Software, and to permit persons to whom the Software is
|
||||
furnished to do so, subject to the following conditions:
|
||||
|
||||
The above copyright notice and this permission notice shall be included in all
|
||||
copies or substantial portions of the Software.
|
||||
|
||||
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
|
||||
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
|
||||
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
|
||||
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
|
||||
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
|
||||
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
|
||||
SOFTWARE.
|
||||
|
||||
+148
@@ -0,0 +1,148 @@
|
||||
# Maintainers
|
||||
|
||||
This document defines how maintainer responsibility, review routing, and
|
||||
operational authority work in this project.
|
||||
|
||||
codebase-memory-mcp is currently a user-owned repository. Because GitHub teams
|
||||
are not available here, all delegated ownership is expressed with individual
|
||||
GitHub handles.
|
||||
|
||||
## Authority Model
|
||||
|
||||
| Role | Scope | Authority in this project |
|
||||
| --- | --- | --- |
|
||||
| Project owner | Entire repository | Final roadmap, security, release, workflow, and merge authority. |
|
||||
| Release operator | Dry-run and release preparation | Prepares release notes, runs checklists, and operates delegated dry runs. Release publication remains owner-gated. |
|
||||
| Area reviewer | One technical area | Reviews, tests, reproduces, and recommends merge for that area. Approval is advisory until the project owner approves. |
|
||||
| Triage collaborator | Issues and discussions | Labels, deduplicates, reproduces, and requests information. This role has no merge or release authority. |
|
||||
|
||||
The binding rule is intentionally simple: all pull requests require
|
||||
`@DeusData` approval before merge. `MAINTAINERS.md` routes review; it does not
|
||||
override `.github/CODEOWNERS`.
|
||||
|
||||
## Project Owner
|
||||
|
||||
| Handle | Responsibilities |
|
||||
| --- | --- |
|
||||
| `@DeusData` | Final authority for merge decisions, releases, security handling, CI policy, repository settings, and maintainer promotion. |
|
||||
|
||||
## Area Review Map
|
||||
|
||||
Review requests follow this map. Entries marked `TBD` are currently unassigned
|
||||
review areas for future co-maintainers.
|
||||
|
||||
| Area | Paths | Advisory reviewers | Owner gate |
|
||||
| --- | --- | --- | --- |
|
||||
| MCP protocol and tool surface | `src/mcp/`, `tests/test_mcp.c` | TBD | `@DeusData` |
|
||||
| CLI, install, update, editor integration | `src/cli/`, `src/git/`, `install.sh`, `install.ps1`, `tests/test_cli.c` | TBD | `@DeusData` |
|
||||
| Indexing pipeline and graph construction | `src/pipeline/`, `src/discover/`, `src/watcher/`, `tests/test_pipeline.c`, `tests/test_incremental.c` | TBD | `@DeusData` |
|
||||
| Language extraction and LSP resolution | `internal/cbm/`, `tools/`, `tests/test_*_lsp.c`, `tests/test_extraction.c`, `tests/test_grammar_*.c` | TBD | `@DeusData` |
|
||||
| Store, query, and graph buffers | `src/store/`, `src/cypher/`, `src/graph_buffer/`, `src/simhash/`, `src/semantic/`, `tests/test_store_*.c`, `tests/test_cypher.c` | TBD | `@DeusData` |
|
||||
| Foundation/runtime portability | `src/foundation/`, `vendored/`, `tests/test_*` foundation coverage | TBD | `@DeusData` |
|
||||
| Graph UI backend and frontend | `src/ui/`, `graph-ui/`, `tests/test_ui.c`, `tests/test_httpd.c` | TBD | `@DeusData` |
|
||||
| Tests, repro, smoke, and soak infrastructure | `tests/`, `tests/repro/`, `test-infrastructure/`, `scripts/test.sh`, `scripts/smoke-test.sh`, `scripts/soak-test.sh` | TBD | `@DeusData` |
|
||||
| Packaging and distribution | `pkg/`, `install.sh`, `install.ps1`, `server.json`, `glama.json`, `flake.nix`, `flake.lock`, `THIRD_PARTY.md`, `scripts/gen-third-party-notices.sh`, `scripts/gen-ui-licenses.py`, release archive contents | TBD | `@DeusData` |
|
||||
| Security and supply chain | `SECURITY.md`, `docs/SECURITY-DISCLOSURE.md`, `scripts/security-*`, `scripts/*license*`, `scripts/*allowlist*`, `.github/workflows/codeql.yml`, `.github/workflows/scorecard.yml` | `@DeusData` only initially | `@DeusData` |
|
||||
| CI and release operations | `.github/workflows/`, `scripts/ci/`, `Makefile.cbm` | `@DeusData` only initially | `@DeusData` |
|
||||
| Governance and contribution policy | `.github/CODEOWNERS`, `MAINTAINERS.md`, `CONTRIBUTING.md`, `CODE_OF_CONDUCT.md`, `DCO`, `LICENSE`, `.github/pull_request_template.md`, issue templates | `@DeusData` only initially | `@DeusData` |
|
||||
|
||||
## Operational Authority
|
||||
|
||||
Operational authority is stricter than code review authority.
|
||||
|
||||
| Operation | Current authority | Project rule |
|
||||
| --- | --- | --- |
|
||||
| PR validation (`pr.yml`, DCO, CodeQL) | Automatic | Anyone may trigger it by opening or updating a PR. Required checks must pass. |
|
||||
| Dry run (`dry-run.yml`) | `@DeusData` | Delegated release operators may run dry runs after promotion. Dry-run delegation does not imply release authority. |
|
||||
| Smoke/soak/repro manual runs | `@DeusData` | Area reviewers may operate these runs when delegated for diagnosis. Results are advisory. |
|
||||
| Release workflow (`release.yml`) | `@DeusData` only | Owner-only until a release operator is explicitly promoted. Publishing, replacing releases, and tag movement remain owner-gated. |
|
||||
| Package registry publishing | `@DeusData` only | Owner-only initially because registry credentials and public packages are irreversible operational surfaces. |
|
||||
| Security advisory handling | `@DeusData` only | Do not delegate across advisories. Keep private reports isolated. |
|
||||
| Workflow, ruleset, CODEOWNERS, and branch protection changes | `@DeusData` only | Owner-only because these define authority itself. |
|
||||
|
||||
## Release Preparation Checklist
|
||||
|
||||
Release preparation is a checklist-driven operation. A release is not ready
|
||||
until each required gate is green or explicitly waived by the project owner in
|
||||
the release notes.
|
||||
|
||||
- `dry-run.yml` completes successfully with the release candidate commit.
|
||||
- Local performance benchmarks are run on the release operator's machine using
|
||||
the release candidate binary and CLI indexing, not test-only shortcuts.
|
||||
- `scripts/benchmark-index.sh` records results for the Linux kernel and for at
|
||||
least one large open-source project per supported Hybrid LSP family.
|
||||
- Benchmark results are compared against the previous release's benchmark logs
|
||||
using the same machine class, same repository revisions, same indexing mode,
|
||||
and same benchmark script when available.
|
||||
- Indexing time must not materially regress compared with the previous release.
|
||||
An unexplained slowdown greater than 15% on the same benchmark input is a
|
||||
release blocker until investigated or explicitly owner-waived.
|
||||
- Node and edge counts must not materially diverge from the previous release
|
||||
unless the release intentionally changes extraction behavior. Unexpected
|
||||
graph-size shifts require investigation before publishing.
|
||||
- Benchmark logs, repository revisions, binary version, machine details, and
|
||||
release decision are retained with the release preparation notes.
|
||||
|
||||
The current Hybrid LSP release benchmark matrix is:
|
||||
|
||||
| LSP family | Required large OSS benchmark |
|
||||
| --- | --- |
|
||||
| C / C++ | Linux kernel |
|
||||
| Go | Kubernetes |
|
||||
| Python | CPython or Django |
|
||||
| TypeScript / JavaScript / JSX / TSX | TypeScript or VS Code |
|
||||
| PHP | Laravel framework |
|
||||
| C# | Roslyn |
|
||||
| Java | Spring Framework or Elasticsearch |
|
||||
| Kotlin | Kotlin compiler or Ktor |
|
||||
| Rust | Rust compiler |
|
||||
|
||||
The matrix may be updated by PR as the project evolves, but every supported
|
||||
Hybrid LSP family keeps at least one large OSS indexing benchmark before a
|
||||
release is published.
|
||||
|
||||
Repository access follows the same authority model:
|
||||
|
||||
- `Triage` is the default collaborator role for issue-only delegation.
|
||||
- `Write` access is reserved for collaborators whose operational access has
|
||||
been approved by `@DeusData`.
|
||||
- Release authority is separate from code review authority.
|
||||
- Protected branches, required code-owner review, required status checks, and
|
||||
protected release environments are part of the project control model where
|
||||
GitHub supports them.
|
||||
|
||||
## Promotion Path
|
||||
|
||||
Promotion is gradual, explicit, and reversible.
|
||||
|
||||
| Stage | Requirements | Capabilities |
|
||||
| --- | --- | --- |
|
||||
| Trusted contributor | Focused PRs, clean DCO, responsive review cycles. | No elevated access. |
|
||||
| Triage collaborator | Consistent issue reproduction and respectful scope control. | Issue triage and review requests. |
|
||||
| Area reviewer | Sustained, technically accurate reviews in one area. | Advisory review listing in this file. |
|
||||
| Release operator | Proven reliability on dry runs, packaging, and release checklists. | May run delegated dry runs and prepare releases. |
|
||||
| Full maintainer | Long-term trust across code, security, release, and governance. | Only after explicit owner decision and updated policy. |
|
||||
|
||||
Maintainer promotions are recorded in this file. Binding authority changes are
|
||||
recorded in `.github/CODEOWNERS` and repository settings.
|
||||
|
||||
## High-Risk Change Rules
|
||||
|
||||
These changes always require project-owner review, even if an area reviewer
|
||||
approves:
|
||||
|
||||
- MCP tool behavior, tool outputs, or protocol capabilities.
|
||||
- New process execution, shell invocation, network access, or file access.
|
||||
- CI, release, package publishing, installer, or updater changes.
|
||||
- Vendored dependency changes, generated grammar changes, or license policy.
|
||||
- Security disclosure process, advisories, allowlists, and audit scripts.
|
||||
- Repository governance, branch protection, CODEOWNERS, or maintainer roles.
|
||||
|
||||
## Review Expectations
|
||||
|
||||
- Keep PRs scoped to one issue or one logical change.
|
||||
- Reproduce bugs with a failing test before fixing.
|
||||
- Treat area-reviewer approval as a technical recommendation, not final merge
|
||||
authority.
|
||||
- Do not self-approve high-risk changes.
|
||||
- Resolve conflicts of interest by asking another reviewer and the owner.
|
||||
+824
@@ -0,0 +1,824 @@
|
||||
# Makefile.cbm — Build system for pure C rewrite
|
||||
#
|
||||
# Usage:
|
||||
# make -f Makefile.cbm test # Build + run all tests (ASan + UBSan)
|
||||
# make -f Makefile.cbm test-foundation # Foundation tests only (fast)
|
||||
# make -f Makefile.cbm test-tsan # Thread sanitizer build
|
||||
# make -f Makefile.cbm cbm # Production binary
|
||||
# make -f Makefile.cbm clean-c # Remove build artifacts
|
||||
|
||||
# Compiler selection — override via: make CC=gcc CXX=g++
|
||||
# macOS: cc (Apple Clang) — universal binary with ASan support
|
||||
# Linux: gcc/g++ — system default with full sanitizer support
|
||||
# CI scripts pass CC/CXX explicitly; don't rely on defaults here
|
||||
|
||||
# Target architecture (macOS): build.sh/test.sh export ARCHFLAGS="-arch <arch>"
|
||||
# (see scripts/env.sh). Fold it into the compiler drivers with `override` so it
|
||||
# reaches EVERY compile and link recipe — including the vendored objects below
|
||||
# that use their own *_CFLAGS — and so it survives a command-line `CC=` override.
|
||||
# ARCHFLAGS is empty on Linux/Windows and for native direct `make` invocations,
|
||||
# leaving CC/CXX unchanged there.
|
||||
override CC := $(CC) $(ARCHFLAGS)
|
||||
override CXX := $(CXX) $(ARCHFLAGS)
|
||||
|
||||
# ── Common flags ─────────────────────────────────────────────────
|
||||
|
||||
# Include paths for:
|
||||
# src/ — new foundation headers
|
||||
# vendored/ — yyjson, xxhash, sqlite3
|
||||
# internal/cbm — existing extraction headers (cbm.h, helpers.h, etc.)
|
||||
# internal/cbm/vendored/ts_runtime/include — tree-sitter API
|
||||
CBM_DIR = internal/cbm
|
||||
TS_INCLUDE = $(CBM_DIR)/vendored/ts_runtime/include
|
||||
# Vendored tree-sitter src/ contains unicode/ headers (umachine.h, utf.h, utf8.h).
|
||||
# This ensures we use our vendored copies instead of requiring system libicu-dev.
|
||||
TS_SRC = $(CBM_DIR)/vendored/ts_runtime/src
|
||||
|
||||
# GCC-only warning suppressions (Clang rejects unknown -Wno-* with -Werror).
|
||||
# Detect GCC by checking for __GNUC__ without __clang__ — handles all versions.
|
||||
IS_GCC := $(shell echo | $(CC) -dM -E - 2>/dev/null | grep -q '__GNUC__' && ! echo | $(CC) -dM -E - 2>/dev/null | grep -q '__clang__' && echo yes || echo no)
|
||||
GCC_ONLY_FLAGS :=
|
||||
ifeq ($(IS_GCC),yes)
|
||||
GCC_ONLY_FLAGS := -Wno-format-truncation -Wno-unused-result \
|
||||
-Wno-stringop-truncation -Wno-alloc-size-larger-than
|
||||
endif
|
||||
|
||||
CFLAGS_COMMON = -std=c11 -D_DEFAULT_SOURCE -D_GNU_SOURCE -Wall -Wextra -Werror \
|
||||
-Wno-unused-parameter -Wno-sign-compare \
|
||||
$(GCC_ONLY_FLAGS) \
|
||||
-Isrc -Ivendored -Ivendored/sqlite3 \
|
||||
-Ivendored/mimalloc/include \
|
||||
-I$(CBM_DIR) -I$(TS_INCLUDE)
|
||||
|
||||
CXXFLAGS_COMMON = -std=c++14 -Wall -Wextra -Werror \
|
||||
-Wno-unused-parameter \
|
||||
-I$(CBM_DIR) -I$(TS_INCLUDE)
|
||||
|
||||
# Production flags (CFLAGS_EXTRA allows CI to inject -DCBM_VERSION)
|
||||
# CBM_BIND_TS_ALLOCATOR=1: bind the tree-sitter runtime to mimalloc (#424). Only
|
||||
# the prod build uses mimalloc (MI_OVERRIDE=1); the test build is CRT+ASan, where
|
||||
# binding would create an alloc/free mismatch, so the guard is prod-only.
|
||||
CFLAGS_PROD = $(CFLAGS_COMMON) -O2 -DCBM_BIND_TS_ALLOCATOR=1 $(CFLAGS_EXTRA)
|
||||
CXXFLAGS_PROD = $(CXXFLAGS_COMMON) -O2
|
||||
|
||||
# Test flags: debug + sanitizers (override SANITIZE= to disable on Windows)
|
||||
SANITIZE = -fsanitize=address,undefined -fno-omit-frame-pointer
|
||||
CFLAGS_TEST = $(CFLAGS_COMMON) -g -O1 $(SANITIZE)
|
||||
CXXFLAGS_TEST = $(CXXFLAGS_COMMON) -g -O1 $(SANITIZE)
|
||||
|
||||
# TSan (can't combine with ASan)
|
||||
TSAN_SANITIZE = -fsanitize=thread -fno-omit-frame-pointer
|
||||
CFLAGS_TSAN = $(CFLAGS_COMMON) -g -O1 \
|
||||
$(TSAN_SANITIZE)
|
||||
CXXFLAGS_TSAN = $(CXXFLAGS_COMMON) -g -O1 \
|
||||
$(TSAN_SANITIZE)
|
||||
|
||||
# Windows needs ws2_32 (Winsock), psapi (GetProcessMemoryInfo), shell32
|
||||
# (CommandLineToArgvW — the UTF-8 argv path in main.c, #423/#20), and
|
||||
# --allow-multiple-definition (MinGW CRT symbol clashes).
|
||||
# Auto-detected via compiler; no manual override needed.
|
||||
IS_MINGW := $(shell echo | $(CC) -dM -E - 2>/dev/null | grep -q 'define _WIN32 ' && echo yes || echo no)
|
||||
WIN32_LIBS :=
|
||||
ifeq ($(IS_MINGW),yes)
|
||||
WIN32_LIBS := -lws2_32 -lpsapi -lshell32 -Wl,--allow-multiple-definition -Wl,--stack,8388608 -static
|
||||
endif
|
||||
|
||||
# STATIC=1 produces a fully static binary (for Alpine/musl portable builds)
|
||||
ifeq ($(STATIC),1)
|
||||
STATIC_FLAGS := -static
|
||||
endif
|
||||
|
||||
LDFLAGS = -lm -lstdc++ -lpthread -lz $(WIN32_LIBS) $(STATIC_FLAGS)
|
||||
LDFLAGS_TEST = -lm -lstdc++ -lpthread -lz $(SANITIZE) $(WIN32_LIBS)
|
||||
LDFLAGS_TSAN = -lm -lstdc++ -lpthread -lz $(TSAN_SANITIZE) $(WIN32_LIBS)
|
||||
|
||||
# ── Source files ─────────────────────────────────────────────────
|
||||
|
||||
FOUNDATION_SRCS = \
|
||||
src/foundation/arena.c \
|
||||
src/foundation/hash_table.c \
|
||||
src/foundation/str_intern.c \
|
||||
src/foundation/log.c \
|
||||
src/foundation/str_util.c \
|
||||
src/foundation/platform.c \
|
||||
src/foundation/system_info.c \
|
||||
src/foundation/slab_alloc.c \
|
||||
src/foundation/yaml.c \
|
||||
src/foundation/compat.c \
|
||||
src/foundation/compat_thread.c \
|
||||
src/foundation/compat_fs.c \
|
||||
src/foundation/compat_regex.c \
|
||||
src/foundation/mem.c \
|
||||
src/foundation/diagnostics.c \
|
||||
src/foundation/profile.c \
|
||||
src/foundation/dump_verify.c \
|
||||
src/foundation/limits.c \
|
||||
src/foundation/subprocess.c \
|
||||
src/foundation/sha256.c
|
||||
|
||||
# Existing extraction C code (compiled from current location)
|
||||
EXTRACTION_SRCS = \
|
||||
$(CBM_DIR)/cbm.c \
|
||||
$(CBM_DIR)/extract_defs.c \
|
||||
$(CBM_DIR)/extract_calls.c \
|
||||
$(CBM_DIR)/extract_imports.c \
|
||||
$(CBM_DIR)/extract_usages.c \
|
||||
$(CBM_DIR)/extract_unified.c \
|
||||
$(CBM_DIR)/extract_semantic.c \
|
||||
$(CBM_DIR)/extract_type_refs.c \
|
||||
$(CBM_DIR)/extract_type_assigns.c \
|
||||
$(CBM_DIR)/extract_env_accesses.c \
|
||||
$(CBM_DIR)/extract_channels.c \
|
||||
$(CBM_DIR)/extract_k8s.c \
|
||||
$(CBM_DIR)/helpers.c \
|
||||
$(CBM_DIR)/lang_specs.c \
|
||||
$(CBM_DIR)/service_patterns.c
|
||||
|
||||
# LSP resolvers (compiled as one unit via lsp_all.c)
|
||||
LSP_SRCS = $(CBM_DIR)/lsp_all.c
|
||||
|
||||
# Header/source dependencies of the lsp_all unity object. lsp_all.c #includes
|
||||
# every lsp/*.c resolver, which in turn include cbm.h — and CBMCall is copied
|
||||
# BY VALUE across the lsp -> pipeline boundary (cbm_calls_push). This object is
|
||||
# compiled standalone and linked in, NOT recompiled with the rest on every link,
|
||||
# so it must list the headers/sources it pulls in. Without this, a changed struct
|
||||
# layout (e.g. a new CBMCall field) leaves a stale lsp_all.o with the old layout —
|
||||
# an ODR mismatch that under-reads the by-value struct copy. Explicit because this
|
||||
# Makefile does not use compiler auto-dependency (-MMD) generation.
|
||||
LSP_UNITY_DEPS = $(CBM_DIR)/lsp_all.c \
|
||||
$(wildcard $(CBM_DIR)/lsp/*.c $(CBM_DIR)/lsp/*.h \
|
||||
$(CBM_DIR)/lsp/generated/*.c $(CBM_DIR)/*.h)
|
||||
|
||||
# Tree-sitter runtime
|
||||
TS_RUNTIME_SRC = $(CBM_DIR)/ts_runtime.c
|
||||
|
||||
# All 64 grammar shim files
|
||||
GRAMMAR_SRCS = $(wildcard $(CBM_DIR)/grammar_*.c)
|
||||
|
||||
# LZ4 + Aho-Corasick
|
||||
AC_LZ4_SRCS = $(CBM_DIR)/ac.c $(CBM_DIR)/lz4_store.c
|
||||
|
||||
# Zstd compression (for persistent artifacts)
|
||||
ZSTD_SRCS = $(CBM_DIR)/zstd_store.c
|
||||
|
||||
# Preprocessor (C++)
|
||||
PREPROCESSOR_SRC = $(CBM_DIR)/preprocessor.cpp
|
||||
|
||||
# SQLite writer
|
||||
SQLITE_WRITER_SRC = $(CBM_DIR)/sqlite_writer.c
|
||||
|
||||
# Store module (new)
|
||||
STORE_SRCS = src/store/store.c
|
||||
|
||||
# Cypher module (new)
|
||||
CYPHER_SRCS = src/cypher/cypher.c
|
||||
|
||||
# MCP server module (new)
|
||||
MCP_SRCS = src/mcp/mcp.c src/mcp/index_supervisor.c src/mcp/compact_out.c
|
||||
|
||||
# Discover module (new)
|
||||
DISCOVER_SRCS = \
|
||||
src/discover/language.c \
|
||||
src/discover/userconfig.c \
|
||||
src/discover/gitignore.c \
|
||||
src/discover/discover.c
|
||||
|
||||
# Graph buffer module (new)
|
||||
GRAPH_BUFFER_SRCS = src/graph_buffer/graph_buffer.c
|
||||
|
||||
# Pipeline module (new)
|
||||
PIPELINE_SRCS = \
|
||||
src/pipeline/fqn.c \
|
||||
src/pipeline/path_alias.c \
|
||||
src/pipeline/registry.c \
|
||||
src/pipeline/pipeline.c \
|
||||
src/pipeline/pipeline_incremental.c \
|
||||
src/pipeline/worker_pool.c \
|
||||
src/pipeline/pass_parallel.c \
|
||||
src/pipeline/pass_definitions.c \
|
||||
src/pipeline/pass_calls.c \
|
||||
src/pipeline/pass_lsp_cross.c \
|
||||
src/pipeline/pass_usages.c \
|
||||
src/pipeline/pass_semantic.c \
|
||||
src/pipeline/pass_tests.c \
|
||||
src/pipeline/pass_githistory.c \
|
||||
src/pipeline/pass_gitdiff.c \
|
||||
src/pipeline/pass_configures.c \
|
||||
src/pipeline/pass_configlink.c \
|
||||
src/pipeline/pass_route_nodes.c \
|
||||
src/pipeline/pass_enrichment.c \
|
||||
src/pipeline/pass_envscan.c \
|
||||
src/pipeline/pass_compile_commands.c \
|
||||
src/pipeline/pass_infrascan.c \
|
||||
src/pipeline/pass_k8s.c \
|
||||
src/pipeline/pass_similarity.c \
|
||||
src/pipeline/pass_semantic_edges.c \
|
||||
src/pipeline/pass_complexity.c \
|
||||
src/pipeline/pass_cross_repo.c \
|
||||
src/pipeline/artifact.c \
|
||||
src/pipeline/pass_pkgmap.c
|
||||
|
||||
# SimHash / MinHash module
|
||||
SIMHASH_SRCS = src/simhash/minhash.c
|
||||
|
||||
# Semantic embedding module
|
||||
SEMANTIC_SRCS = src/semantic/semantic.c src/semantic/ast_profile.c src/semantic/rotsq.c
|
||||
|
||||
# nomic-embed-code pretrained vectors (assembler blob)
|
||||
UNIXCODER_BLOB_SRC = vendored/nomic/code_vectors_blob.S
|
||||
|
||||
# Traces module (new)
|
||||
TRACES_SRCS = src/traces/traces.c
|
||||
|
||||
# Watcher module (new)
|
||||
WATCHER_SRCS = src/watcher/watcher.c
|
||||
|
||||
# Git context module (new)
|
||||
GIT_SRCS = src/git/git_context.c
|
||||
|
||||
# CLI module (new)
|
||||
CLI_SRCS = src/cli/cli.c src/cli/progress_sink.c src/cli/hook_augment.c
|
||||
|
||||
# UI module (graph visualization)
|
||||
UI_SRCS = \
|
||||
src/ui/config.c \
|
||||
src/ui/http_server.c \
|
||||
src/ui/layout3d.c \
|
||||
src/ui/httpd.c \
|
||||
src/ui/embedded_stub.c
|
||||
|
||||
# mimalloc (vendored, global allocator override)
|
||||
#
|
||||
# Override strategy is platform-specific:
|
||||
# * Unix (macOS/Linux): rely on static-link-order override — the prod mimalloc
|
||||
# object is linked first so its strong malloc/free symbols win. We do NOT
|
||||
# define MI_MALLOC_OVERRIDE here: that would compile alloc-override.c's
|
||||
# forwarding definitions (malloc/free/posix_memalign/...) which, on macOS's
|
||||
# two-level namespace, makes the binary's free == mi_free while system
|
||||
# libraries keep allocating via the system allocator — pointers crossing that
|
||||
# boundary hit "mimalloc: error: mi_free: invalid pointer". (Repro:
|
||||
# `codebase-memory-mcp index <dir>` aborted on every run.)
|
||||
# * Windows (MinGW, static CRT): the link-order trick fails (#424's allocator
|
||||
# mismatch), so we define MI_MALLOC_OVERRIDE=1 to compile the static-CRT
|
||||
# override added in mimalloc 3.3.0 (the _MSC_VER / _ACRTIMP /
|
||||
# _CRT_HYBRIDPATCHABLE entry points) which take precedence over the static
|
||||
# CRT's malloc/free.
|
||||
# Note: mimalloc's source gates the override body on MI_MALLOC_OVERRIDE (CMake
|
||||
# derives it from the MI_OVERRIDE option); MI_OVERRIDE alone is not read by the
|
||||
# source — it is kept here only as this project's prod/test marker.
|
||||
MIMALLOC_SRC = vendored/mimalloc/src/static.c
|
||||
MIMALLOC_OVERRIDE_DEFINE :=
|
||||
ifeq ($(IS_MINGW),yes)
|
||||
MIMALLOC_OVERRIDE_DEFINE := -DMI_MALLOC_OVERRIDE=1
|
||||
endif
|
||||
MIMALLOC_CFLAGS = -std=c11 -O2 -w \
|
||||
-Ivendored/mimalloc/include \
|
||||
-Ivendored/mimalloc/src \
|
||||
-DMI_OVERRIDE=1 \
|
||||
$(MIMALLOC_OVERRIDE_DEFINE)
|
||||
MIMALLOC_CFLAGS_TEST = -std=c11 -g -O1 -w \
|
||||
-Ivendored/mimalloc/include \
|
||||
-Ivendored/mimalloc/src \
|
||||
-DMI_OVERRIDE=0
|
||||
|
||||
# sqlite3 (vendored amalgamation — compiled ourselves for ASan instrumentation)
|
||||
# SQLITE_ENABLE_FTS5: enables the FTS5 full-text search extension used by the
|
||||
# BM25 search path in search_graph (see nodes_fts virtual table in store.c).
|
||||
SQLITE3_SRC = vendored/sqlite3/sqlite3.c
|
||||
SQLITE3_CFLAGS = -std=c11 -O2 -w -DSQLITE_DQS=0 -DSQLITE_THREADSAFE=1 -DSQLITE_ENABLE_FTS5
|
||||
SQLITE3_CFLAGS_TEST = -std=c11 -g -O1 -w -DSQLITE_DQS=0 -DSQLITE_THREADSAFE=1 -DSQLITE_ENABLE_FTS5
|
||||
|
||||
# TRE regex (vendored, Windows only — POSIX uses system <regex.h>)
|
||||
TRE_SRC = vendored/tre/tre_all.c
|
||||
TRE_CFLAGS = -std=c11 -g -O1 -w -Ivendored/tre
|
||||
|
||||
# yyjson (vendored)
|
||||
YYJSON_SRC = vendored/yyjson/yyjson.c
|
||||
|
||||
# All production sources
|
||||
PROD_SRCS = $(FOUNDATION_SRCS) $(STORE_SRCS) $(CYPHER_SRCS) $(MCP_SRCS) $(DISCOVER_SRCS) $(GRAPH_BUFFER_SRCS) $(PIPELINE_SRCS) $(SIMHASH_SRCS) $(SEMANTIC_SRCS) $(TRACES_SRCS) $(WATCHER_SRCS) $(GIT_SRCS) $(CLI_SRCS) $(UI_SRCS) $(YYJSON_SRC)
|
||||
EXISTING_C_SRCS = $(EXTRACTION_SRCS) $(LSP_SRCS) $(TS_RUNTIME_SRC) \
|
||||
$(GRAMMAR_SRCS) $(AC_LZ4_SRCS) $(ZSTD_SRCS) $(SQLITE_WRITER_SRC)
|
||||
|
||||
# ── Test sources ─────────────────────────────────────────────────
|
||||
|
||||
TEST_FOUNDATION_SRCS = \
|
||||
tests/test_main.c \
|
||||
tests/test_arena.c \
|
||||
tests/test_hash_table.c \
|
||||
tests/test_dyn_array.c \
|
||||
tests/test_str_intern.c \
|
||||
tests/test_log.c \
|
||||
tests/test_str_util.c \
|
||||
tests/test_platform.c \
|
||||
tests/test_dump_verify.c \
|
||||
tests/test_subprocess.c
|
||||
|
||||
TEST_EXTRACTION_SRCS = \
|
||||
tests/test_extraction.c \
|
||||
tests/test_extraction_inheritance.c \
|
||||
tests/test_extraction_imports.c \
|
||||
tests/test_parse_coverage.c \
|
||||
tests/test_grammar_regression.c \
|
||||
tests/test_grammar_labels.c \
|
||||
tests/test_grammar_imports.c \
|
||||
tests/test_ac.c
|
||||
|
||||
TEST_STORE_SRCS = \
|
||||
tests/test_store_nodes.c \
|
||||
tests/test_store_edges.c \
|
||||
tests/test_store_search.c \
|
||||
tests/test_store_arch.c \
|
||||
tests/test_store_bulk.c \
|
||||
tests/test_store_pragmas.c \
|
||||
tests/test_store_checkpoint.c \
|
||||
tests/test_dump_verify_io.c
|
||||
|
||||
TEST_CYPHER_SRCS = \
|
||||
tests/test_cypher.c
|
||||
|
||||
TEST_MCP_SRCS = \
|
||||
tests/test_mcp.c
|
||||
|
||||
TEST_DISCOVER_SRCS = \
|
||||
tests/test_language.c \
|
||||
tests/test_userconfig.c \
|
||||
tests/test_gitignore.c \
|
||||
tests/test_git_context.c \
|
||||
tests/test_discover.c
|
||||
|
||||
TEST_GRAPH_BUFFER_SRCS = tests/test_graph_buffer.c
|
||||
|
||||
TEST_PIPELINE_SRCS = tests/test_registry.c tests/test_pipeline.c tests/test_fqn.c tests/test_route_canon.c tests/test_path_alias.c tests/test_configlink.c tests/test_infrascan.c tests/test_worker_pool.c tests/test_parallel.c tests/test_index_resilience.c
|
||||
|
||||
TEST_WATCHER_SRCS = tests/test_watcher.c
|
||||
|
||||
TEST_LZ4_SRCS = tests/test_lz4.c
|
||||
TEST_ZSTD_SRCS = tests/test_zstd.c
|
||||
TEST_ARTIFACT_SRCS = tests/test_artifact.c
|
||||
|
||||
TEST_SQLITE_WRITER_SRCS = tests/test_sqlite_writer.c
|
||||
|
||||
TEST_GO_LSP_SRCS = tests/test_go_lsp.c
|
||||
|
||||
TEST_C_LSP_SRCS = tests/test_c_lsp.c
|
||||
|
||||
TEST_PHP_LSP_SRCS = tests/test_php_lsp.c
|
||||
|
||||
TEST_CS_LSP_SRCS = tests/test_cs_lsp.c
|
||||
|
||||
TEST_CS_LSP_BENCH_SRCS = tests/test_cs_lsp_bench.c
|
||||
|
||||
TEST_PERL_LSP_SRCS = tests/test_perl_lsp.c
|
||||
|
||||
TEST_SCOPE_SRCS = tests/test_scope.c
|
||||
|
||||
TEST_TYPE_REP_SRCS = tests/test_type_rep.c
|
||||
|
||||
TEST_PY_LSP_SRCS = tests/test_py_lsp.c
|
||||
|
||||
TEST_PY_LSP_BENCH_SRCS = tests/test_py_lsp_bench.c
|
||||
|
||||
TEST_PY_LSP_STRESS_SRCS = tests/test_py_lsp_stress.c
|
||||
|
||||
TEST_PY_LSP_SCALE_SRCS = tests/test_py_lsp_scale.c
|
||||
|
||||
TEST_TS_LSP_SRCS = tests/test_ts_lsp.c
|
||||
TEST_JAVA_LSP_SRCS = tests/test_java_lsp.c tests/test_java_lsp_coverage.c
|
||||
TEST_KOTLIN_LSP_SRCS = tests/test_kotlin_lsp.c
|
||||
TEST_RUST_LSP_SRCS = tests/test_rust_lsp.c
|
||||
|
||||
TEST_INTEGRATION_SRCS = tests/test_integration.c tests/test_incremental.c tests/test_lang_contract.c tests/test_edge_imports.c tests/test_edge_structural.c tests/test_lsp_resolution_probe.c tests/test_node_creation_probe.c tests/test_edge_types_probe.c tests/test_convergence_probe.c tests/test_matrix_known_classes.c tests/test_matrix_new_constructs.c tests/test_grammar_probe_a.c tests/test_grammar_probe_b.c tests/test_grammar_probe_c.c tests/test_grammar_probe_d.c tests/test_grammar_probe_e.c tests/test_grammar_probe_f.c tests/test_grammar_probe_g.c
|
||||
|
||||
TEST_TRACES_SRCS = tests/test_traces.c
|
||||
|
||||
|
||||
TEST_CLI_SRCS = tests/test_cli.c
|
||||
|
||||
TEST_MEM_SRCS = tests/test_mem.c
|
||||
|
||||
TEST_UI_SRCS = tests/test_ui.c
|
||||
TEST_HTTPD_SRCS = tests/test_httpd.c
|
||||
|
||||
TEST_SECURITY_SRCS = tests/test_security.c
|
||||
|
||||
TEST_YAML_SRCS = tests/test_yaml.c
|
||||
|
||||
TEST_SEMANTIC_SRCS = tests/test_semantic.c
|
||||
TEST_AST_PROFILE_SRCS = tests/test_ast_profile.c
|
||||
TEST_SLAB_ALLOC_SRCS = tests/test_slab_alloc.c
|
||||
|
||||
TEST_SIMHASH_SRCS = tests/test_simhash.c
|
||||
|
||||
TEST_STACK_OVERFLOW_SRCS = tests/test_stack_overflow.c
|
||||
|
||||
# Cumulative BUG-REPRODUCTION suite (separate runner, NOT in ALL_TEST_SRCS).
|
||||
# These cases are RED by design (one open bug each) — see tests/repro/repro_main.c.
|
||||
# Kept out of the gating `make test` so `ci-ok` stays green; run via `make test-repro`.
|
||||
TEST_REPRO_SRCS = \
|
||||
tests/repro/repro_main.c \
|
||||
tests/repro/repro_parallel_determinism.c \
|
||||
tests/repro/repro_extraction.c \
|
||||
tests/repro/repro_issue495.c \
|
||||
tests/repro/repro_issue521.c \
|
||||
tests/repro/repro_issue382.c \
|
||||
tests/repro/repro_issue408.c \
|
||||
tests/repro/repro_issue56.c \
|
||||
tests/repro/repro_issue480.c \
|
||||
tests/repro/repro_issue571.c \
|
||||
tests/repro/repro_issue523.c \
|
||||
tests/repro/repro_issue546.c \
|
||||
tests/repro/repro_issue627.c \
|
||||
tests/repro/repro_issue514.c \
|
||||
tests/repro/repro_issue510.c \
|
||||
tests/repro/repro_issue557.c \
|
||||
tests/repro/repro_issue520.c \
|
||||
tests/repro/repro_issue333.c \
|
||||
tests/repro/repro_issue570.c \
|
||||
tests/repro/repro_issue409.c \
|
||||
tests/repro/repro_issue431.c \
|
||||
tests/repro/repro_issue607.c \
|
||||
tests/repro/repro_issue403.c \
|
||||
tests/repro/repro_issue434.c \
|
||||
tests/repro/repro_issue471.c \
|
||||
tests/repro/repro_issue221.c \
|
||||
tests/repro/repro_issue548.c \
|
||||
tests/repro/repro_new_ts_class_field_arrow.c \
|
||||
tests/repro/repro_new_py_tuple_unpack.c \
|
||||
tests/repro/repro_new_cypher_limit_zero.c \
|
||||
tests/repro/repro_issue363.c \
|
||||
tests/repro/repro_issue581.c \
|
||||
tests/repro/repro_issue787.c \
|
||||
tests/repro/repro_issue842.c \
|
||||
tests/repro/repro_issue964.c \
|
||||
tests/repro/repro_invariant_calls.c \
|
||||
tests/repro/repro_invariant_graph.c \
|
||||
tests/repro/repro_invariant_breadth.c \
|
||||
tests/repro/repro_invariant_enclosing_parity.c \
|
||||
tests/repro/repro_invariant_lsp_rescue.c \
|
||||
tests/repro/repro_invariant_discovery_fqn.c \
|
||||
tests/repro/repro_grammar_core.c \
|
||||
tests/repro/repro_grammar_scripting.c \
|
||||
tests/repro/repro_grammar_functional.c \
|
||||
tests/repro/repro_grammar_systems.c \
|
||||
tests/repro/repro_grammar_web.c \
|
||||
tests/repro/repro_grammar_config.c \
|
||||
tests/repro/repro_grammar_build.c \
|
||||
tests/repro/repro_grammar_shells.c \
|
||||
tests/repro/repro_grammar_scientific.c \
|
||||
tests/repro/repro_grammar_markup.c \
|
||||
tests/repro/repro_grammar_misc.c \
|
||||
tests/repro/repro_lsp_c_cpp.c \
|
||||
tests/repro/repro_lsp_go_py.c \
|
||||
tests/repro/repro_lsp_ts.c \
|
||||
tests/repro/repro_ts_inherited_method.c \
|
||||
tests/repro/repro_lsp_java_cs.c \
|
||||
tests/repro/repro_lsp_kt_php_rust.c
|
||||
|
||||
ALL_TEST_SRCS =$(TEST_FOUNDATION_SRCS) $(TEST_EXTRACTION_SRCS) $(TEST_STORE_SRCS) $(TEST_CYPHER_SRCS) $(TEST_MCP_SRCS) $(TEST_DISCOVER_SRCS) $(TEST_GRAPH_BUFFER_SRCS) $(TEST_PIPELINE_SRCS) $(TEST_WATCHER_SRCS) $(TEST_LZ4_SRCS) $(TEST_ZSTD_SRCS) $(TEST_ARTIFACT_SRCS) $(TEST_SQLITE_WRITER_SRCS) $(TEST_GO_LSP_SRCS) $(TEST_C_LSP_SRCS) $(TEST_PHP_LSP_SRCS) $(TEST_CS_LSP_SRCS) $(TEST_CS_LSP_BENCH_SRCS) $(TEST_PERL_LSP_SRCS) $(TEST_SCOPE_SRCS) $(TEST_TYPE_REP_SRCS) $(TEST_PY_LSP_SRCS) $(TEST_PY_LSP_BENCH_SRCS) $(TEST_PY_LSP_STRESS_SRCS) $(TEST_PY_LSP_SCALE_SRCS) $(TEST_TS_LSP_SRCS) $(TEST_JAVA_LSP_SRCS) $(TEST_KOTLIN_LSP_SRCS) $(TEST_RUST_LSP_SRCS) $(TEST_TRACES_SRCS) $(TEST_CLI_SRCS) $(TEST_MEM_SRCS) $(TEST_UI_SRCS) $(TEST_HTTPD_SRCS) $(TEST_SECURITY_SRCS) $(TEST_YAML_SRCS) $(TEST_SEMANTIC_SRCS) $(TEST_AST_PROFILE_SRCS) $(TEST_SLAB_ALLOC_SRCS) $(TEST_SIMHASH_SRCS) $(TEST_STACK_OVERFLOW_SRCS) $(TEST_INTEGRATION_SRCS)
|
||||
|
||||
|
||||
# ── Build directories ────────────────────────────────────────────
|
||||
|
||||
BUILD_DIR = build/c
|
||||
|
||||
# ── Object file compilation (grammars need relaxed warnings) ─────
|
||||
|
||||
# Grammar + tree-sitter runtime: compiled without -Werror (upstream code has warnings)
|
||||
GRAMMAR_CFLAGS = -std=c11 -D_DEFAULT_SOURCE -O2 -w -I$(CBM_DIR) -I$(TS_INCLUDE) -I$(TS_SRC)
|
||||
GRAMMAR_CFLAGS_TEST = -std=c11 -D_DEFAULT_SOURCE -g -O1 -w -I$(CBM_DIR) -I$(TS_INCLUDE) -I$(TS_SRC) \
|
||||
$(SANITIZE)
|
||||
GRAMMAR_CFLAGS_TSAN = -std=c11 -D_DEFAULT_SOURCE -g -O1 -w -I$(CBM_DIR) -I$(TS_INCLUDE) -I$(TS_SRC) \
|
||||
$(TSAN_SANITIZE)
|
||||
|
||||
# Object files for grammars + ts_runtime + lsp_all + preprocessor
|
||||
GRAMMAR_OBJS_TEST = $(patsubst $(CBM_DIR)/%.c,$(BUILD_DIR)/%.o,$(GRAMMAR_SRCS))
|
||||
TS_RUNTIME_OBJ_TEST = $(BUILD_DIR)/ts_runtime.o
|
||||
LSP_OBJ_TEST = $(BUILD_DIR)/lsp_all.o
|
||||
PP_OBJ_TEST = $(BUILD_DIR)/preprocessor.o
|
||||
GRAMMAR_OBJS_TSAN = $(patsubst $(CBM_DIR)/%.c,$(BUILD_DIR)/tsan_%.o,$(GRAMMAR_SRCS))
|
||||
TS_RUNTIME_OBJ_TSAN = $(BUILD_DIR)/tsan_ts_runtime.o
|
||||
LSP_OBJ_TSAN = $(BUILD_DIR)/tsan_lsp_all.o
|
||||
PP_OBJ_TSAN = $(BUILD_DIR)/tsan_preprocessor.o
|
||||
|
||||
# ── Targets ──────────────────────────────────────────────────────
|
||||
|
||||
.PHONY: test test-repro test-foundation test-tsan cbm cbm-with-ui frontend embed clean-c lint lint-tidy lint-cppcheck lint-format security
|
||||
|
||||
$(BUILD_DIR):
|
||||
mkdir -p $(BUILD_DIR)
|
||||
|
||||
# ── Foundation-only test (fast, no extraction) ───────────────────
|
||||
|
||||
$(BUILD_DIR)/test-foundation: $(TEST_FOUNDATION_SRCS) $(FOUNDATION_SRCS) | $(BUILD_DIR)
|
||||
$(CC) $(CFLAGS_TEST) -o $@ $(TEST_FOUNDATION_SRCS) $(FOUNDATION_SRCS) $(LDFLAGS_TEST)
|
||||
|
||||
test-foundation: $(BUILD_DIR)/test-foundation
|
||||
cd $(CURDIR) && $(BUILD_DIR)/test-foundation
|
||||
|
||||
# ── Grammar/TS/LSP object files (compiled with relaxed warnings) ─
|
||||
|
||||
$(BUILD_DIR)/%.o: $(CBM_DIR)/%.c | $(BUILD_DIR)
|
||||
$(CC) $(GRAMMAR_CFLAGS_TEST) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/ts_runtime.o: $(CBM_DIR)/ts_runtime.c | $(BUILD_DIR)
|
||||
$(CC) $(GRAMMAR_CFLAGS_TEST) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/lsp_all.o: $(LSP_UNITY_DEPS) | $(BUILD_DIR)
|
||||
$(CC) $(GRAMMAR_CFLAGS_TEST) $(SANITIZE) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/preprocessor.o: $(CBM_DIR)/preprocessor.cpp | $(BUILD_DIR)
|
||||
$(CXX) $(CXXFLAGS_TEST) -w -I$(CBM_DIR)/vendored -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/tsan_%.o: $(CBM_DIR)/%.c | $(BUILD_DIR)
|
||||
$(CC) $(GRAMMAR_CFLAGS_TSAN) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/tsan_ts_runtime.o: $(CBM_DIR)/ts_runtime.c | $(BUILD_DIR)
|
||||
$(CC) $(GRAMMAR_CFLAGS_TSAN) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/tsan_lsp_all.o: $(LSP_UNITY_DEPS) | $(BUILD_DIR)
|
||||
$(CC) $(GRAMMAR_CFLAGS_TSAN) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/tsan_preprocessor.o: $(CBM_DIR)/preprocessor.cpp | $(BUILD_DIR)
|
||||
$(CXX) $(CXXFLAGS_TSAN) -w -I$(CBM_DIR)/vendored -c -o $@ $<
|
||||
|
||||
# ── Full test binary ─────────────────────────────────────────────
|
||||
|
||||
# mimalloc object files
|
||||
MIMALLOC_OBJ_TEST = $(BUILD_DIR)/mimalloc.o
|
||||
MIMALLOC_OBJ_TSAN = $(BUILD_DIR)/tsan_mimalloc.o
|
||||
MIMALLOC_OBJ_PROD = $(BUILD_DIR)/prod_mimalloc.o
|
||||
|
||||
$(BUILD_DIR)/mimalloc.o: $(MIMALLOC_SRC) | $(BUILD_DIR)
|
||||
$(CC) $(MIMALLOC_CFLAGS_TEST) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/tsan_mimalloc.o: $(MIMALLOC_SRC) | $(BUILD_DIR)
|
||||
$(CC) $(MIMALLOC_CFLAGS_TEST) $(TSAN_SANITIZE) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/prod_mimalloc.o: $(MIMALLOC_SRC) | $(BUILD_DIR)
|
||||
$(CC) $(MIMALLOC_CFLAGS) -c -o $@ $<
|
||||
|
||||
# sqlite3 object files (vendored amalgamation)
|
||||
SQLITE3_OBJ_TEST = $(BUILD_DIR)/sqlite3.o
|
||||
SQLITE3_OBJ_TSAN = $(BUILD_DIR)/tsan_sqlite3.o
|
||||
SQLITE3_OBJ_PROD = $(BUILD_DIR)/prod_sqlite3.o
|
||||
|
||||
$(BUILD_DIR)/sqlite3.o: $(SQLITE3_SRC) | $(BUILD_DIR)
|
||||
$(CC) $(SQLITE3_CFLAGS_TEST) $(SANITIZE) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/tsan_sqlite3.o: $(SQLITE3_SRC) | $(BUILD_DIR)
|
||||
$(CC) $(SQLITE3_CFLAGS_TEST) $(TSAN_SANITIZE) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/prod_sqlite3.o: $(SQLITE3_SRC) | $(BUILD_DIR)
|
||||
$(CC) $(SQLITE3_CFLAGS) -c -o $@ $<
|
||||
|
||||
# TRE regex (only compiled on Windows — POSIX uses system <regex.h>)
|
||||
TRE_OBJ_TEST :=
|
||||
TRE_OBJ_TSAN :=
|
||||
TRE_OBJ_PROD :=
|
||||
ifeq ($(IS_MINGW),yes)
|
||||
TRE_OBJ_TEST = $(BUILD_DIR)/tre.o
|
||||
TRE_OBJ_TSAN = $(BUILD_DIR)/tsan_tre.o
|
||||
TRE_OBJ_PROD = $(BUILD_DIR)/prod_tre.o
|
||||
|
||||
$(BUILD_DIR)/tre.o: $(TRE_SRC) | $(BUILD_DIR)
|
||||
$(CC) $(TRE_CFLAGS) $(SANITIZE) -fno-sanitize=alignment -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/tsan_tre.o: $(TRE_SRC) | $(BUILD_DIR)
|
||||
$(CC) $(TRE_CFLAGS) $(TSAN_SANITIZE) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/prod_tre.o: $(TRE_SRC) | $(BUILD_DIR)
|
||||
$(CC) $(TRE_CFLAGS) -O2 -c -o $@ $<
|
||||
endif
|
||||
|
||||
# Vendored LZ4 (test build)
|
||||
LZ4_OBJ_TEST = $(BUILD_DIR)/test_lz4.o $(BUILD_DIR)/test_lz4hc.o
|
||||
LZ4_OBJ_TSAN = $(BUILD_DIR)/tsan_lz4.o $(BUILD_DIR)/tsan_lz4hc.o
|
||||
$(BUILD_DIR)/test_lz4.o: $(CBM_DIR)/vendored/lz4/lz4.c | $(BUILD_DIR)
|
||||
$(CC) -std=c11 -D_DEFAULT_SOURCE -g -O1 $(SANITIZE) -w -I$(CBM_DIR) -c -o $@ $<
|
||||
$(BUILD_DIR)/test_lz4hc.o: $(CBM_DIR)/vendored/lz4/lz4hc.c | $(BUILD_DIR)
|
||||
$(CC) -std=c11 -D_DEFAULT_SOURCE -g -O1 $(SANITIZE) -w -I$(CBM_DIR)/vendored/lz4 -c -o $@ $<
|
||||
$(BUILD_DIR)/tsan_lz4.o: $(CBM_DIR)/vendored/lz4/lz4.c | $(BUILD_DIR)
|
||||
$(CC) -std=c11 -D_DEFAULT_SOURCE -g -O1 $(TSAN_SANITIZE) -w -I$(CBM_DIR) -c -o $@ $<
|
||||
$(BUILD_DIR)/tsan_lz4hc.o: $(CBM_DIR)/vendored/lz4/lz4hc.c | $(BUILD_DIR)
|
||||
$(CC) -std=c11 -D_DEFAULT_SOURCE -g -O1 $(TSAN_SANITIZE) -w -I$(CBM_DIR)/vendored/lz4 -c -o $@ $<
|
||||
|
||||
# Vendored zstd (test build)
|
||||
ZSTD_OBJ_TEST = $(BUILD_DIR)/test_zstd.o
|
||||
ZSTD_OBJ_TSAN = $(BUILD_DIR)/tsan_zstd.o
|
||||
$(BUILD_DIR)/test_zstd.o: $(CBM_DIR)/vendored/zstd/zstd.c | $(BUILD_DIR)
|
||||
$(CC) -std=c11 -D_DEFAULT_SOURCE -g -O1 $(SANITIZE) -w -I$(CBM_DIR)/vendored/zstd -c -o $@ $<
|
||||
$(BUILD_DIR)/tsan_zstd.o: $(CBM_DIR)/vendored/zstd/zstd.c | $(BUILD_DIR)
|
||||
$(CC) -std=c11 -D_DEFAULT_SOURCE -g -O1 $(TSAN_SANITIZE) -w -I$(CBM_DIR)/vendored/zstd -c -o $@ $<
|
||||
|
||||
# nomic-embed-code pretrained vector blob
|
||||
UNIXCODER_OBJ = $(BUILD_DIR)/unixcoder_blob.o
|
||||
$(UNIXCODER_OBJ): $(UNIXCODER_BLOB_SRC) vendored/nomic/code_vectors.bin | $(BUILD_DIR)
|
||||
$(CC) -c -o $@ $<
|
||||
|
||||
OBJS_VENDORED_TEST = $(MIMALLOC_OBJ_TEST) $(SQLITE3_OBJ_TEST) $(TRE_OBJ_TEST) $(GRAMMAR_OBJS_TEST) $(TS_RUNTIME_OBJ_TEST) $(LSP_OBJ_TEST) $(PP_OBJ_TEST) $(LZ4_OBJ_TEST) $(ZSTD_OBJ_TEST) $(UNIXCODER_OBJ)
|
||||
OBJS_VENDORED_TSAN = $(MIMALLOC_OBJ_TSAN) $(SQLITE3_OBJ_TSAN) $(TRE_OBJ_TSAN) $(GRAMMAR_OBJS_TSAN) $(TS_RUNTIME_OBJ_TSAN) $(LSP_OBJ_TSAN) $(PP_OBJ_TSAN) $(LZ4_OBJ_TSAN) $(ZSTD_OBJ_TSAN) $(UNIXCODER_OBJ)
|
||||
|
||||
$(BUILD_DIR)/test-runner: $(ALL_TEST_SRCS) $(PROD_SRCS) $(EXTRACTION_SRCS) $(AC_LZ4_SRCS) $(ZSTD_SRCS) $(SQLITE_WRITER_SRC) $(OBJS_VENDORED_TEST) | $(BUILD_DIR)
|
||||
$(CC) $(CFLAGS_TEST) -Itests -Itests/repro -o $@ \
|
||||
$(ALL_TEST_SRCS) $(PROD_SRCS) \
|
||||
$(EXTRACTION_SRCS) $(AC_LZ4_SRCS) $(ZSTD_SRCS) $(SQLITE_WRITER_SRC) \
|
||||
$(OBJS_VENDORED_TEST) \
|
||||
$(LDFLAGS_TEST)
|
||||
|
||||
test: $(BUILD_DIR)/test-runner
|
||||
cd $(CURDIR) && $(BUILD_DIR)/test-runner
|
||||
|
||||
# ── Cumulative bug-reproduction runner (RED by design, non-gating) ──
|
||||
# Mirrors test-runner's link line but uses repro_main.c (own main + counters)
|
||||
# and TEST_REPRO_SRCS instead of ALL_TEST_SRCS. Exits non-zero while any bug is
|
||||
# still reproduced (the expected state); bug-repro.yml surfaces it as a board.
|
||||
$(BUILD_DIR)/test-repro-runner: $(TEST_REPRO_SRCS) $(PROD_SRCS) $(EXTRACTION_SRCS) $(AC_LZ4_SRCS) $(ZSTD_SRCS) $(SQLITE_WRITER_SRC) $(OBJS_VENDORED_TEST) | $(BUILD_DIR)
|
||||
$(CC) $(CFLAGS_TEST) -Itests -o $@ \
|
||||
$(TEST_REPRO_SRCS) $(PROD_SRCS) \
|
||||
$(EXTRACTION_SRCS) $(AC_LZ4_SRCS) $(ZSTD_SRCS) $(SQLITE_WRITER_SRC) \
|
||||
$(OBJS_VENDORED_TEST) \
|
||||
$(LDFLAGS_TEST)
|
||||
|
||||
test-repro: $(BUILD_DIR)/test-repro-runner
|
||||
cd $(CURDIR) && $(BUILD_DIR)/test-repro-runner
|
||||
|
||||
# ── TSan full test ───────────────────────────────────────────────
|
||||
|
||||
TEST_TSAN_SUITES ?= mem slab_alloc parallel
|
||||
TSAN_OPTIONS ?= halt_on_error=1
|
||||
|
||||
$(BUILD_DIR)/test-runner-tsan: $(ALL_TEST_SRCS) $(PROD_SRCS) $(EXTRACTION_SRCS) $(AC_LZ4_SRCS) $(ZSTD_SRCS) $(SQLITE_WRITER_SRC) $(OBJS_VENDORED_TSAN) | $(BUILD_DIR)
|
||||
$(CC) $(CFLAGS_TSAN) -Itests -Itests/repro -o $@ \
|
||||
$(ALL_TEST_SRCS) $(PROD_SRCS) \
|
||||
$(EXTRACTION_SRCS) $(AC_LZ4_SRCS) $(ZSTD_SRCS) $(SQLITE_WRITER_SRC) \
|
||||
$(OBJS_VENDORED_TSAN) \
|
||||
$(LDFLAGS_TSAN)
|
||||
|
||||
test-tsan: $(BUILD_DIR)/test-runner-tsan
|
||||
cd $(CURDIR) && TSAN_OPTIONS="$(TSAN_OPTIONS)" $(BUILD_DIR)/test-runner-tsan $(TEST_TSAN_SUITES)
|
||||
|
||||
# ── Production binary ────────────────────────────────────────────
|
||||
|
||||
# Grammar/TS/LSP objects for production (compiled with relaxed warnings, -O2)
|
||||
GRAMMAR_OBJS_PROD = $(patsubst $(CBM_DIR)/%.c,$(BUILD_DIR)/prod_%.o,$(GRAMMAR_SRCS))
|
||||
TS_RUNTIME_OBJ_PROD = $(BUILD_DIR)/prod_ts_runtime.o
|
||||
LSP_OBJ_PROD = $(BUILD_DIR)/prod_lsp_all.o
|
||||
PP_OBJ_PROD = $(BUILD_DIR)/prod_preprocessor.o
|
||||
|
||||
$(BUILD_DIR)/prod_%.o: $(CBM_DIR)/%.c | $(BUILD_DIR)
|
||||
$(CC) $(GRAMMAR_CFLAGS) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/prod_ts_runtime.o: $(CBM_DIR)/ts_runtime.c | $(BUILD_DIR)
|
||||
$(CC) $(GRAMMAR_CFLAGS) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/prod_lsp_all.o: $(LSP_UNITY_DEPS) | $(BUILD_DIR)
|
||||
$(CC) $(GRAMMAR_CFLAGS) -c -o $@ $<
|
||||
|
||||
$(BUILD_DIR)/prod_preprocessor.o: $(CBM_DIR)/preprocessor.cpp | $(BUILD_DIR)
|
||||
$(CXX) $(CXXFLAGS_PROD) -w -I$(CBM_DIR)/vendored -c -o $@ $<
|
||||
|
||||
# Vendored LZ4 (compiled separately, not unity-built via lz4_store.c)
|
||||
LZ4_OBJ_PROD = $(BUILD_DIR)/prod_lz4.o $(BUILD_DIR)/prod_lz4hc.o
|
||||
$(BUILD_DIR)/prod_lz4.o: $(CBM_DIR)/vendored/lz4/lz4.c | $(BUILD_DIR)
|
||||
$(CC) -std=c11 -D_DEFAULT_SOURCE -O2 -w -I$(CBM_DIR) -c -o $@ $<
|
||||
$(BUILD_DIR)/prod_lz4hc.o: $(CBM_DIR)/vendored/lz4/lz4hc.c | $(BUILD_DIR)
|
||||
$(CC) -std=c11 -D_DEFAULT_SOURCE -O2 -w -I$(CBM_DIR)/vendored/lz4 -c -o $@ $<
|
||||
|
||||
# Vendored zstd (compiled separately, not unity-built via zstd_store.c)
|
||||
ZSTD_OBJ_PROD = $(BUILD_DIR)/prod_zstd.o
|
||||
$(BUILD_DIR)/prod_zstd.o: $(CBM_DIR)/vendored/zstd/zstd.c | $(BUILD_DIR)
|
||||
$(CC) -std=c11 -D_DEFAULT_SOURCE -O2 -w -I$(CBM_DIR)/vendored/zstd -c -o $@ $<
|
||||
|
||||
OBJS_VENDORED_PROD = $(MIMALLOC_OBJ_PROD) $(SQLITE3_OBJ_PROD) $(TRE_OBJ_PROD) $(GRAMMAR_OBJS_PROD) $(TS_RUNTIME_OBJ_PROD) $(LSP_OBJ_PROD) $(PP_OBJ_PROD) $(LZ4_OBJ_PROD) $(ZSTD_OBJ_PROD) $(UNIXCODER_OBJ)
|
||||
|
||||
MAIN_SRC = src/main.c
|
||||
|
||||
$(BUILD_DIR)/codebase-memory-mcp: $(MAIN_SRC) $(PROD_SRCS) $(EXTRACTION_SRCS) $(AC_LZ4_SRCS) $(ZSTD_SRCS) $(SQLITE_WRITER_SRC) $(OBJS_VENDORED_PROD) | $(BUILD_DIR)
|
||||
$(CC) $(CFLAGS_PROD) -o $@ \
|
||||
$(MAIN_SRC) $(PROD_SRCS) \
|
||||
$(EXTRACTION_SRCS) $(AC_LZ4_SRCS) $(ZSTD_SRCS) $(SQLITE_WRITER_SRC) \
|
||||
$(OBJS_VENDORED_PROD) \
|
||||
$(LDFLAGS)
|
||||
|
||||
cbm: $(BUILD_DIR)/codebase-memory-mcp
|
||||
@echo "Built: $(BUILD_DIR)/codebase-memory-mcp"
|
||||
|
||||
# ── Build with embedded UI (requires Node.js) ───────────────────
|
||||
|
||||
# Swap embedded_stub.c for the generated embedded_assets.c
|
||||
UI_SRCS_WITH_ASSETS = $(subst src/ui/embedded_stub.c,src/ui/embedded_assets.c,$(UI_SRCS))
|
||||
PROD_SRCS_WITH_ASSETS = $(subst src/ui/embedded_stub.c,src/ui/embedded_assets.c,$(PROD_SRCS))
|
||||
|
||||
# Embedded asset object files (generated by embed script)
|
||||
EMBED_OBJS = $(wildcard $(BUILD_DIR)/embedded/embed_*.o)
|
||||
|
||||
frontend:
|
||||
cd graph-ui && npm ci && npm run build
|
||||
|
||||
embed: frontend
|
||||
scripts/embed-frontend.sh graph-ui/dist $(BUILD_DIR)/embedded
|
||||
|
||||
cbm-with-ui: embed $(OBJS_VENDORED_PROD)
|
||||
$(CC) $(CFLAGS_PROD) -o $(BUILD_DIR)/codebase-memory-mcp \
|
||||
$(MAIN_SRC) $(PROD_SRCS_WITH_ASSETS) \
|
||||
$(EXTRACTION_SRCS) $(AC_LZ4_SRCS) $(ZSTD_SRCS) $(SQLITE_WRITER_SRC) \
|
||||
$(OBJS_VENDORED_PROD) \
|
||||
$(wildcard $(BUILD_DIR)/embedded/embed_*.o) \
|
||||
$(LDFLAGS)
|
||||
@echo "Built with UI: $(BUILD_DIR)/codebase-memory-mcp"
|
||||
|
||||
clean-c:
|
||||
rm -rf $(BUILD_DIR)
|
||||
|
||||
# ── Linting ─────────────────────────────────────────────────────
|
||||
|
||||
# clang-tidy and clang-format: use Homebrew LLVM on macOS, overridable via make args
|
||||
# e.g. make lint-format CLANG_FORMAT=clang-format-18
|
||||
LLVM_BIN := $(shell brew --prefix llvm 2>/dev/null)/bin
|
||||
CLANG_TIDY ?= $(shell [ -x "$(LLVM_BIN)/clang-tidy" ] && echo "$(LLVM_BIN)/clang-tidy" || echo clang-tidy)
|
||||
CLANG_FORMAT ?= $(shell [ -x "$(LLVM_BIN)/clang-format" ] && echo "$(LLVM_BIN)/clang-format" || echo clang-format)
|
||||
CPPCHECK ?= cppcheck
|
||||
|
||||
# macOS SDK sysroot (needed for Homebrew LLVM to find system headers)
|
||||
SYSROOT = $(shell xcrun --show-sdk-path 2>/dev/null)
|
||||
SYSROOT_FLAG = $(if $(SYSROOT),-isysroot $(SYSROOT),)
|
||||
|
||||
# Our source files (excluding vendored, grammars, tree-sitter runtime)
|
||||
LINT_SRCS = $(FOUNDATION_SRCS) $(STORE_SRCS) $(CYPHER_SRCS) $(MCP_SRCS) \
|
||||
$(DISCOVER_SRCS) $(GRAPH_BUFFER_SRCS) $(PIPELINE_SRCS) $(SIMHASH_SRCS) $(SEMANTIC_SRCS) \
|
||||
$(TRACES_SRCS) $(WATCHER_SRCS) $(CLI_SRCS) $(EXTRACTION_SRCS) $(AC_LZ4_SRCS) \
|
||||
$(ZSTD_SRCS) $(SQLITE_WRITER_SRC) $(MAIN_SRC)
|
||||
LINT_HDRS = $(wildcard src/**/*.h src/*.h $(CBM_DIR)/*.h)
|
||||
LINT_TEST_SRCS = $(ALL_TEST_SRCS)
|
||||
|
||||
# clang-tidy: deep static analysis (config in .clang-tidy)
|
||||
lint-tidy:
|
||||
@echo "=== clang-tidy ==="
|
||||
@$(CLANG_TIDY) --quiet $(LINT_SRCS) -- $(CFLAGS_COMMON) $(SYSROOT_FLAG)
|
||||
|
||||
# cppcheck: complementary analysis (config in .cppcheck)
|
||||
lint-cppcheck:
|
||||
@echo "=== cppcheck ==="
|
||||
@$(CPPCHECK) --enable=warning,style,performance,portability \
|
||||
--std=c11 --language=c \
|
||||
--suppressions-list=.cppcheck \
|
||||
--error-exitcode=1 \
|
||||
--inline-suppr \
|
||||
--quiet \
|
||||
--suppress=varFuncNullUB \
|
||||
--suppress=intToPointerCast \
|
||||
--suppress=unusedStructMember \
|
||||
--suppress=nullPointerOutOfMemory \
|
||||
--suppress=nullPointerArithmeticOutOfMemory \
|
||||
--suppress=ctunullpointerOutOfMemory \
|
||||
--suppress='nullPointer:internal/cbm/sqlite_writer.c' \
|
||||
-Isrc -Ivendored -Ivendored/sqlite3 \
|
||||
-I$(CBM_DIR) -I$(TS_INCLUDE) \
|
||||
$(LINT_SRCS)
|
||||
|
||||
# clang-format: formatting check (config in .clang-format, dry-run = no changes)
|
||||
lint-format:
|
||||
@echo "=== clang-format ==="
|
||||
@$(CLANG_FORMAT) --dry-run --Werror $(LINT_SRCS) $(LINT_HDRS)
|
||||
|
||||
# Ban ALL NOLINT variants EXCEPT whitelisted NOLINT(misc-no-recursion).
|
||||
# The whitelist is in src/foundation/recursion_whitelist.h with documented reasoning.
|
||||
# Rule: NOLINT(misc-no-recursion) is allowed ONLY on function definitions that are
|
||||
# listed in recursion_whitelist.h. All other NOLINT forms are banned.
|
||||
lint-no-suppress:
|
||||
@echo "=== NOLINT check ==="
|
||||
@if grep -rn 'NOLINT' src/ internal/cbm/*.c internal/cbm/*.h 2>/dev/null \
|
||||
| grep -v vendored \
|
||||
| grep -v 'NOLINT(misc-no-recursion)' \
|
||||
| grep -v 'recursion_whitelist.h'; then \
|
||||
echo "ERROR: Banned NOLINT comment found in source code."; \
|
||||
echo "Only NOLINT(misc-no-recursion) is allowed, and only for whitelisted functions."; \
|
||||
echo "See src/foundation/recursion_whitelist.h for the whitelist."; \
|
||||
exit 1; \
|
||||
fi
|
||||
@echo " Checking NOLINT(misc-no-recursion) against whitelist..."
|
||||
@scripts/check-nolint-whitelist.sh
|
||||
|
||||
# All linters (run with make -j3 lint for parallel execution)
|
||||
lint: lint-tidy lint-cppcheck lint-format lint-no-suppress
|
||||
@echo "=== All linters passed ==="
|
||||
|
||||
# CI linters (no clang-tidy — platform-dependent, enforced locally via pre-commit)
|
||||
lint-ci: lint-cppcheck lint-format lint-no-suppress
|
||||
@echo "=== CI linters passed ==="
|
||||
|
||||
# ── Security audit (6 layers) ────────────────────────────────────
|
||||
|
||||
# Run all security checks: static audit, binary strings, UI, install, network
|
||||
# Requires: production binary already built (make cbm)
|
||||
security: cbm
|
||||
@echo "=== Running security audit suite ==="
|
||||
scripts/security-audit.sh
|
||||
scripts/security-strings.sh $(BUILD_DIR)/codebase-memory-mcp
|
||||
scripts/security-ui.sh
|
||||
scripts/security-install.sh $(BUILD_DIR)/codebase-memory-mcp
|
||||
scripts/security-network.sh $(BUILD_DIR)/codebase-memory-mcp
|
||||
scripts/security-fuzz.sh $(BUILD_DIR)/codebase-memory-mcp
|
||||
scripts/security-vendored.sh
|
||||
@echo "=== All security checks passed ==="
|
||||
@@ -0,0 +1,626 @@
|
||||
# codebase-memory-mcp
|
||||
|
||||
[](https://github.com/DeusData/codebase-memory-mcp/releases/latest)
|
||||
[](LICENSE)
|
||||
[](https://github.com/DeusData/codebase-memory-mcp/actions/workflows/dry-run.yml)
|
||||
[](https://github.com/DeusData/codebase-memory-mcp)
|
||||
[](https://github.com/DeusData/codebase-memory-mcp)
|
||||
[](#hybrid-lsp)
|
||||
[](https://github.com/DeusData/codebase-memory-mcp)
|
||||
[](https://github.com/DeusData/codebase-memory-mcp)
|
||||
[](https://github.com/DeusData/codebase-memory-mcp/releases/latest)
|
||||
[](https://scorecard.dev/viewer/?uri=github.com/DeusData/codebase-memory-mcp)
|
||||
[](https://slsa.dev)
|
||||
[](https://github.com/DeusData/codebase-memory-mcp/releases/latest)
|
||||
[](https://arxiv.org/abs/2603.27277)
|
||||
|
||||
**The fastest and most efficient code intelligence engine for AI coding agents.** Full-indexes an average repository in milliseconds, the Linux kernel (28M LOC, 75K files) in 3 minutes. Answers structural queries in under 1ms. Ships as a single static binary for macOS, Linux, and Windows — download, run `install`, done.
|
||||
|
||||
High-quality parsing through [tree-sitter](https://tree-sitter.github.io/tree-sitter/) AST analysis across all 158 languages, enhanced with [**Hybrid LSP** semantic type resolution](#hybrid-lsp) for Python, TypeScript / JavaScript / JSX / TSX, PHP, C#, Go, C, C++, Java, Kotlin, Rust, and Perl — producing a persistent knowledge graph of functions, classes, call chains, HTTP routes, and cross-service links. 14 MCP tools. Zero dependencies. Plug and play across 11 coding agents.
|
||||
|
||||
> **Research** — The design and benchmarks behind this project are described in the preprint [*Codebase-Memory: Tree-Sitter-Based Knowledge Graphs for LLM Code Exploration via MCP*](https://arxiv.org/abs/2603.27277) (arXiv:2603.27277). Evaluated across 31 real-world repositories: 83% answer quality, 10× fewer tokens, 2.1× fewer tool calls vs. file-by-file exploration.
|
||||
|
||||
> **Security & Trust** — This tool reads your codebase and writes to your agent configuration files. That is what it is designed to do. If you prefer to audit before running, the [full source is here](https://github.com/DeusData/codebase-memory-mcp) — every release binary is signed, checksummed, and scanned by 70+ antivirus engines. All processing happens 100% locally; your code never leaves your machine. Found a security issue? We want to know — see [SECURITY.md](SECURITY.md). Security is Priority #1 for us.
|
||||
|
||||
<p align="center">
|
||||
<img src="docs/graph-ui-screenshot.png" alt="Graph visualization UI showing the codebase-memory-mcp knowledge graph" width="800">
|
||||
<br>
|
||||
<em>Built-in 3D graph visualization (UI variant) — explore your knowledge graph at localhost:9749</em>
|
||||
</p>
|
||||
|
||||
## Why codebase-memory-mcp
|
||||
|
||||
- **Extreme indexing speed** — Linux kernel (28M LOC, 75K files) in 3 minutes. RAM-first pipeline: LZ4 compression, in-memory SQLite, fused Aho-Corasick pattern matching. Memory released after indexing.
|
||||
- **Plug and play** — single static binary for macOS (arm64/amd64), Linux (arm64/amd64), and Windows (amd64). No Docker, no runtime dependencies, no API keys. Download → `install` → restart agent → done.
|
||||
- **158 languages** — vendored tree-sitter grammars compiled into the binary. Nothing to install, nothing that breaks.
|
||||
- **120x fewer tokens** — 5 structural queries: ~3,400 tokens vs ~412,000 via file-by-file search. One graph query replaces dozens of grep/read cycles.
|
||||
- **11 agents, one command** — `install` auto-detects Claude Code, Codex CLI, Gemini CLI, Zed, OpenCode, Antigravity, Aider, KiloCode, VS Code, OpenClaw, and Kiro — configures MCP entries, instruction files, and pre-tool hooks for each.
|
||||
- **Built-in graph visualization** — 3D interactive UI at `localhost:9749` (optional UI binary variant).
|
||||
- **Infrastructure-as-code indexing** — Dockerfiles, Kubernetes manifests, and Kustomize overlays indexed as graph nodes with cross-references. `Resource` nodes for K8s kinds, `Module` nodes for Kustomize overlays with `IMPORTS` edges to referenced resources.
|
||||
- **14 MCP tools** — search, trace, architecture, impact analysis, Cypher queries, dead code detection, cross-service HTTP linking, ADR management, and more.
|
||||
|
||||
## Quick Start
|
||||
|
||||
**One-line install** (macOS / Linux):
|
||||
```bash
|
||||
curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.sh | bash
|
||||
```
|
||||
|
||||
With graph visualization UI:
|
||||
```bash
|
||||
curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.sh | bash -s -- --ui
|
||||
```
|
||||
|
||||
**Windows** (PowerShell):
|
||||
```powershell
|
||||
# 1. Download the installer
|
||||
Invoke-WebRequest -Uri https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.ps1 -OutFile install.ps1
|
||||
|
||||
# 2. (Optional but recommended) Inspect the script
|
||||
notepad install.ps1
|
||||
|
||||
# 3. Unblock the downloaded file (removes Mark-of-the-Web restriction added by browsers/Invoke-WebRequest)
|
||||
Unblock-File .\install.ps1
|
||||
|
||||
# 4. Run it
|
||||
.\install.ps1
|
||||
|
||||
```
|
||||
|
||||
> **Note:** If you see a script execution policy error, run `Set-ExecutionPolicy -Scope Process Bypass` first, or invoke with `PowerShell -ExecutionPolicy Bypass -File .\install.ps1`.
|
||||
|
||||
Options: `--ui` (graph visualization), `--skip-config` (binary only, no agent setup), `--dir=<path>` (custom location).
|
||||
|
||||
Restart your coding agent. Say **"Index this project"** — done.
|
||||
|
||||
<details>
|
||||
<summary>Manual install</summary>
|
||||
|
||||
1. **Download** the archive for your platform from the [latest release](https://github.com/DeusData/codebase-memory-mcp/releases/latest):
|
||||
- `codebase-memory-mcp-<os>-<arch>.tar.gz` (macOS/Linux) or `.zip` (Windows) — standard
|
||||
- `codebase-memory-mcp-ui-<os>-<arch>.tar.gz` / `.zip` — with graph visualization
|
||||
|
||||
2. **Extract and install** (each archive includes `install.sh` or `install.ps1`):
|
||||
|
||||
macOS / Linux:
|
||||
```bash
|
||||
tar xzf codebase-memory-mcp-*.tar.gz
|
||||
./install.sh
|
||||
```
|
||||
|
||||
Windows (PowerShell):
|
||||
```powershell
|
||||
Expand-Archive codebase-memory-mcp-windows-amd64.zip -DestinationPath .
|
||||
Unblock-File .\install.ps1
|
||||
.\install.ps1
|
||||
```
|
||||
|
||||
3. **Restart** your coding agent.
|
||||
|
||||
The `install` command automatically strips macOS quarantine attributes and ad-hoc signs the binary — no manual `xattr`/`codesign` needed.
|
||||
</details>
|
||||
|
||||
The `install` command auto-detects all installed coding agents and configures MCP server entries, instruction files, skills, and pre-tool hooks for each.
|
||||
|
||||
### Graph Visualization UI
|
||||
|
||||
The UI ships as a separate `ui` build (it embeds the frontend). The default install on every channel is the lean, headless server; opt into the UI build with:
|
||||
|
||||
- **install.sh:** add `--ui` (see [Quick Start](#quick-start))
|
||||
- **npm:** `CBM_VARIANT=ui npm install -g codebase-memory-mcp`
|
||||
- **PyPI:** `CBM_VARIANT=ui pip install codebase-memory-mcp`
|
||||
- **Manual:** download the `codebase-memory-mcp-ui-<os>-<arch>` archive
|
||||
|
||||
Then run it:
|
||||
|
||||
```bash
|
||||
codebase-memory-mcp --ui=true --port=9749
|
||||
```
|
||||
|
||||
Open `http://localhost:9749` in your browser. The UI runs as a background thread alongside the MCP server — it's available whenever your agent is connected.
|
||||
|
||||
### Auto-Index
|
||||
|
||||
Enable automatic indexing on MCP session start:
|
||||
|
||||
```bash
|
||||
codebase-memory-mcp config set auto_index true
|
||||
```
|
||||
|
||||
When enabled, new projects are indexed automatically on first connection. Previously-indexed projects are registered with the background watcher for ongoing git-based change detection. Configurable file limit: `config set auto_index_limit 50000`.
|
||||
|
||||
Watcher registration is controlled separately by `auto_watch` (default `true`). Set `config set auto_watch false` to keep a session from registering its project with the background watcher — useful when working across many projects and you want each session contained to explicit indexing.
|
||||
|
||||
### Keeping Up to Date
|
||||
|
||||
```bash
|
||||
codebase-memory-mcp update
|
||||
```
|
||||
|
||||
The MCP server also checks for updates on startup and notifies on the first tool call if a newer release is available.
|
||||
|
||||
### Uninstall
|
||||
|
||||
```bash
|
||||
codebase-memory-mcp uninstall
|
||||
```
|
||||
|
||||
Removes all agent configs, skills, hooks, and instructions. Does not remove the binary or SQLite databases.
|
||||
|
||||
## Features
|
||||
|
||||
### Graph & analysis
|
||||
- **Architecture overview**: `get_architecture` returns languages, packages, entry points, routes, hotspots, boundaries, layers, and clusters in a single call
|
||||
- **Architecture Decision Records**: `manage_adr` persists architectural decisions across sessions
|
||||
- **Louvain community detection**: Discovers functional modules by clustering call edges
|
||||
- **Git diff impact mapping**: `detect_changes` maps uncommitted changes to affected symbols with risk classification
|
||||
- **Call graph**: Resolves function calls across files and packages (import-aware, type-inferred)
|
||||
- **Dead code detection**: Finds functions with zero callers, excluding entry points
|
||||
- **Cypher-like queries**: `MATCH (f:Function)-[:CALLS]->(g) WHERE f.name = 'main' RETURN g.name`
|
||||
|
||||
### Search
|
||||
- **Semantic search** (`semantic_query`): vector search across the entire graph, powered by bundled Nomic `nomic-embed-code` embeddings (40K tokens, 768d int8) compiled into the binary — no API key, no Ollama, no Docker. 11-signal combined scoring (TF-IDF, RRI, API/Type/Decorator signatures, AST profiles, data flow, Halstead-lite, MinHash, module proximity, graph diffusion).
|
||||
- **BM25 full-text search** via SQLite FTS5 with `cbm_camel_split` tokenizer (camelCase / snake_case aware)
|
||||
- **Structural search** (`search_graph`): regex name patterns, label filters, min/max degree, file scoping
|
||||
- **Code search** (`search_code`): graph-augmented grep over indexed files only
|
||||
|
||||
### Cross-service linking
|
||||
- **HTTP** route ↔ call-site matching with confidence scoring
|
||||
- **gRPC, GraphQL, tRPC** service detection with protobuf Route extraction
|
||||
- **Channel detection** (`EMITS` / `LISTENS_ON`) for Socket.IO, EventEmitter, and generic pub-sub patterns across 8 languages with constant resolution
|
||||
|
||||
### Cross-repo intelligence
|
||||
- **`CROSS_*` edges** link nodes across multiple repos indexed under the same store
|
||||
- **Multi-galaxy 3D UI layout** for cross-repo architecture visualization
|
||||
- **Cross-repo architecture summary** combining services, routes, and dependencies across the indexed fleet
|
||||
|
||||
### Edge types (selected)
|
||||
- `CALLS`, `IMPORTS`, `DEFINES`, `IMPLEMENTS`, `INHERITS`
|
||||
- `HTTP_CALLS`, `ASYNC_CALLS` (cross-service)
|
||||
- `EMITS`, `LISTENS_ON` (channels)
|
||||
- `DATA_FLOWS` with arg-to-param mapping + field access chains
|
||||
- `SIMILAR_TO` (MinHash + LSH near-clone detection, Jaccard scored)
|
||||
- `SEMANTICALLY_RELATED` (vocabulary-mismatch, same-language, score ≥ 0.80)
|
||||
|
||||
### Indexing pipeline
|
||||
- **158 vendored tree-sitter grammars** compiled into the binary
|
||||
- **Generic package / module resolution** — bare specifiers like `@myorg/pkg`, `github.com/foo/bar`, `use my_crate::foo` resolved via manifest scanning (`package.json`, `go.mod`, `Cargo.toml`, `pyproject.toml`, `composer.json`, `pubspec.yaml`, `pom.xml`, `build.gradle`, `mix.exs`, `*.gemspec`)
|
||||
- **Infrastructure-as-code indexing** — Dockerfiles, Kubernetes manifests, Kustomize overlays as graph nodes
|
||||
- **[Hybrid LSP semantic type resolution](#hybrid-lsp)** for Python, TypeScript / JavaScript / JSX / TSX, PHP, C#, Go, C, C++, Java, Kotlin, Rust, and Perl — a lightweight C implementation of language type-resolution algorithms, structurally inspired by and compatible with major language servers including tsserver / typescript-go, pyright, gopls, Roslyn, Eclipse JDT, and rust-analyzer (parameter binding, return-type inference, generic substitution, JSX component dispatch, JSDoc inference for plain JS files, namespace + trait + late-static-binding resolution for PHP, file-scoped namespaces + records + LINQ method syntax for C#, class-hierarchy + overload + lambda resolution for Java, extension-function + scope-function resolution for Kotlin, trait-method + UFCS resolution for Rust)
|
||||
- **RAM-first pipeline**: LZ4 compression, in-memory SQLite, single dump at end. Memory released after.
|
||||
|
||||
### Distribution & operation
|
||||
- **Single static binary, zero infrastructure**: SQLite-backed, persists to `~/.cache/codebase-memory-mcp/`
|
||||
- **Auto-sync**: Background watcher detects file changes and re-indexes automatically
|
||||
- **Route nodes**: REST endpoints are first-class graph entities
|
||||
- **CLI mode**: `codebase-memory-mcp cli search_graph '{"project": "my-project", "name_pattern": ".*Handler.*"}'`
|
||||
- **Available on**: npm, PyPI, Homebrew, Scoop, Winget, Chocolatey, AUR, `go install`
|
||||
|
||||
## Team-Shared Graph Artifact
|
||||
|
||||
Commit a single compressed file to your repo and your teammates skip the reindex.
|
||||
|
||||
`.codebase-memory/graph.db.zst` is a zstd-compressed snapshot of the knowledge graph that lives next to your source. When you index, the artifact is written or refreshed; when a teammate clones the repo and runs `codebase-memory-mcp` for the first time, the artifact is decompressed and incremental indexing fills in their local diff.
|
||||
|
||||
- **Format**: SQLite database, indexes stripped, `VACUUM INTO` compacted, then zstd 1.5.7 compressed (8–13:1 ratio typical)
|
||||
- **Two tiers**:
|
||||
- **Best** (`zstd -9` + index strip + `VACUUM INTO`) — written on explicit `index_repository`
|
||||
- **Fast** (`zstd -3`) — written by the watcher for low-latency incremental updates
|
||||
- **Bootstrap**: when no local DB exists but the artifact is present, `index_repository` imports the artifact first, then runs incremental indexing — avoiding the full reindex cost
|
||||
- **No merge pain**: a `.gitattributes` line with `merge=ours` is auto-created on first export, so concurrent edits don't produce conflicts on the binary artifact
|
||||
- **Optional**: never committed unless you want it. Add `.codebase-memory/` to `.gitignore` if you prefer everyone to reindex from scratch.
|
||||
|
||||
The result is similar in spirit to graphify's `graphify-out/` directory, but as a single compressed file with explicit two-tier export, integrity-checked import, and zero merge friction.
|
||||
|
||||
## How It Works
|
||||
|
||||
codebase-memory-mcp is a **structural analysis backend** — it builds and queries the knowledge graph. It does **not** include an LLM. Instead, it relies on your MCP client (Claude Code, or any MCP-compatible agent) to be the intelligence layer.
|
||||
|
||||
```
|
||||
You: "what calls ProcessOrder?"
|
||||
|
||||
Agent calls: trace_path(function_name="ProcessOrder", direction="inbound")
|
||||
|
||||
codebase-memory-mcp: executes graph query, returns structured results
|
||||
|
||||
Agent: presents the call chain in plain English
|
||||
```
|
||||
|
||||
**Why no built-in LLM?** Other code graph tools embed an LLM for natural language → graph query translation. This means extra API keys, extra cost, and another model to configure. With MCP, the agent you're already talking to *is* the query translator.
|
||||
|
||||
## Performance
|
||||
|
||||
Benchmarked on Apple M3 Pro:
|
||||
|
||||
| Operation | Time | Notes |
|
||||
|-----------|------|-------|
|
||||
| **Linux kernel full index** | **3 min** | 28M LOC, 75K files → 4.81M nodes, 7.72M edges |
|
||||
| Linux kernel fast index | 1m 12s | 1.88M nodes |
|
||||
| Django full index | ~6s | 49K nodes, 196K edges |
|
||||
| Cypher query | <1ms | Relationship traversal |
|
||||
| Name search (regex) | <10ms | SQL LIKE pre-filtering |
|
||||
| Dead code detection | ~150ms | Full graph scan with degree filtering |
|
||||
| Trace call path (depth=5) | <10ms | BFS traversal |
|
||||
|
||||
**RAM-first pipeline**: All indexing runs in memory (LZ4 HC compressed read, in-memory SQLite, single dump at end). Memory is released back to the OS after indexing completes.
|
||||
|
||||
**Token efficiency**: Five structural queries consumed ~3,400 tokens via codebase-memory-mcp versus ~412,000 tokens via file-by-file grep exploration — a **99.2% reduction**.
|
||||
|
||||
## Troubleshooting & Diagnostics
|
||||
|
||||
codebase-memory-mcp runs **100% locally and collects no telemetry** — your code, queries, environment, and usage never leave your machine. That privacy guarantee also means that when you hit something we can't reproduce on our side (a slow memory climb over hours, a performance regression, a leak that only appears after days of real use), **we have no data at all unless you choose to send it.** Here is how to capture it yourself.
|
||||
|
||||
### Capture a diagnostics log
|
||||
|
||||
Set `CBM_DIAGNOSTICS=1` before the MCP server starts, then reproduce the problem (let it run as long as it takes — a slow leak needs time to show in the trend). The server writes two files to your system temp directory (`$TMPDIR` or `/tmp` on macOS/Linux, `%TEMP%` on Windows):
|
||||
|
||||
| File | What it is |
|
||||
|------|------------|
|
||||
| `cbm-diagnostics-<pid>.ndjson` | **The memory trajectory** — one JSON line every 5 s with `rss`, `committed` (Windows commit charge), `peak_*`, `page_faults`, `fd`, and `queries`. **This is the file we need for memory/leak reports** — the *trend over time* is what pinpoints a leak. It is **kept on disk after the server exits** (so you can grab it post-mortem) and rotates to `.ndjson.1` past ~8 MB. |
|
||||
| `cbm-diagnostics-<pid>.json` | The latest snapshot only — handy for a quick live check. Removed on clean exit. |
|
||||
|
||||
The startup log prints both paths, e.g.:
|
||||
|
||||
```
|
||||
level=info msg=diagnostics.start snapshot=/tmp/cbm-diagnostics-12345.json trajectory=/tmp/cbm-diagnostics-12345.ndjson interval=5s
|
||||
```
|
||||
|
||||
Set the variable in the `env` block of your agent's MCP server config, or export it before launching the server.
|
||||
|
||||
### What to share
|
||||
|
||||
When you open a memory/performance issue, **attach the `.ndjson` trajectory** — it contains no source code or query text, only resource counters. If you'd rather not attach a file, paste it (or an agent's summary of it) into the issue: your assistant can read the NDJSON directly and report whether `rss`/`committed` grow monotonically, how fast, and relative to query count — which is exactly what we need to find the cause.
|
||||
|
||||
## Installation
|
||||
|
||||
### Pre-built Binaries
|
||||
|
||||
| Platform | Standard | With Graph UI |
|
||||
|----------|----------|---------------|
|
||||
| macOS (Apple Silicon) | `codebase-memory-mcp-darwin-arm64.tar.gz` | `codebase-memory-mcp-ui-darwin-arm64.tar.gz` |
|
||||
| macOS (Intel) | `codebase-memory-mcp-darwin-amd64.tar.gz` | `codebase-memory-mcp-ui-darwin-amd64.tar.gz` |
|
||||
| Linux (x86_64) | `codebase-memory-mcp-linux-amd64.tar.gz` | `codebase-memory-mcp-ui-linux-amd64.tar.gz` |
|
||||
| Linux (ARM64) | `codebase-memory-mcp-linux-arm64.tar.gz` | `codebase-memory-mcp-ui-linux-arm64.tar.gz` |
|
||||
| Windows (x86_64) | `codebase-memory-mcp-windows-amd64.zip` | `codebase-memory-mcp-ui-windows-amd64.zip` |
|
||||
|
||||
Every release includes `checksums.txt` with SHA-256 hashes. All binaries are statically linked — no shared library dependencies.
|
||||
|
||||
> **Windows note**: SmartScreen may show a warning for unsigned software. Click **"More info"** → **"Run anyway"**. Verify integrity with `checksums.txt`.
|
||||
|
||||
### Setup Scripts
|
||||
|
||||
<details>
|
||||
<summary>Automated download + install</summary>
|
||||
|
||||
**macOS / Linux:**
|
||||
|
||||
```bash
|
||||
curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/scripts/setup.sh | bash
|
||||
```
|
||||
|
||||
**Windows (PowerShell):**
|
||||
|
||||
```powershell
|
||||
irm https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/scripts/setup-windows.ps1 | iex
|
||||
```
|
||||
|
||||
</details>
|
||||
|
||||
### AUR (Arch Linux)
|
||||
|
||||
```bash
|
||||
yay -S codebase-memory-mcp-bin
|
||||
```
|
||||
|
||||
```bash
|
||||
paru -S codebase-memory-mcp-bin
|
||||
```
|
||||
|
||||
The `codebase-memory-mcp-bin` package is available at: https://aur.archlinux.org/packages/codebase-memory-mcp-bin
|
||||
|
||||
### Install via Claude Code
|
||||
|
||||
```
|
||||
You: "Install this MCP server: https://github.com/DeusData/codebase-memory-mcp"
|
||||
```
|
||||
|
||||
### Build from Source
|
||||
|
||||
<details>
|
||||
<summary>Prerequisites: C compiler + zlib</summary>
|
||||
|
||||
| Requirement | Check | Install |
|
||||
|-------------|-------|---------|
|
||||
| **C compiler** (gcc or clang) | `gcc --version` or `clang --version` | macOS: `xcode-select --install`, Linux: `apt install build-essential` |
|
||||
| **C++ compiler** | `g++ --version` or `clang++ --version` | Same as above |
|
||||
| **zlib** | — | macOS: included, Linux: `apt install zlib1g-dev` |
|
||||
| **Git** | `git --version` | Pre-installed on most systems |
|
||||
|
||||
</details>
|
||||
|
||||
```bash
|
||||
git clone https://github.com/DeusData/codebase-memory-mcp.git
|
||||
cd codebase-memory-mcp
|
||||
scripts/build.sh # standard binary
|
||||
scripts/build.sh --with-ui # with graph visualization
|
||||
# Binary at: build/c/codebase-memory-mcp
|
||||
```
|
||||
|
||||
### Manual MCP Configuration
|
||||
|
||||
<details>
|
||||
<summary>If you prefer not to use the install command</summary>
|
||||
|
||||
Add to `~/.claude/.mcp.json` (global) or project `.mcp.json`:
|
||||
|
||||
```json
|
||||
{
|
||||
"mcpServers": {
|
||||
"codebase-memory-mcp": {
|
||||
"command": "/path/to/codebase-memory-mcp",
|
||||
"args": []
|
||||
}
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
Restart your agent. Verify with `/mcp` — you should see `codebase-memory-mcp` with 14 tools.
|
||||
|
||||
</details>
|
||||
|
||||
## Multi-Agent Support
|
||||
|
||||
`install` auto-detects and configures all installed agents:
|
||||
|
||||
| Agent | MCP Config | Instructions | Hooks |
|
||||
|-------|-----------|-------------|-------|
|
||||
| Claude Code | `.claude/.mcp.json` | 4 Skills | PreToolUse (Grep/Glob graph augment, non-blocking) |
|
||||
| Codex CLI | `.codex/config.toml` | `.codex/AGENTS.md` | SessionStart reminder |
|
||||
| Gemini CLI | `.gemini/settings.json` | `.gemini/GEMINI.md` | BeforeTool (grep reminder) + SessionStart reminder |
|
||||
| Zed | `settings.json` (JSONC) | — | — |
|
||||
| OpenCode | `opencode.json` | `AGENTS.md` | — |
|
||||
| Antigravity | `.gemini/config/mcp_config.json` (shared) | `antigravity-cli/AGENTS.md` | SessionStart reminder |
|
||||
| Aider | — | `CONVENTIONS.md` | — |
|
||||
| KiloCode | `mcp_settings.json` | `~/.kilocode/rules/` | — |
|
||||
| VS Code | `Code/User/mcp.json` | — | — |
|
||||
| OpenClaw | `openclaw.json` | — | — |
|
||||
| Kiro | `.kiro/settings/mcp.json` | — | — |
|
||||
|
||||
**Hooks are structurally non-blocking** (exit code 0, every failure path).
|
||||
For Claude Code, the `PreToolUse` hook intercepts `Grep`/`Glob` (never `Read` —
|
||||
gating `Read` breaks the read-before-edit invariant) and, when the search
|
||||
token matches indexed symbols, injects them as `additionalContext` via
|
||||
`search_graph` so the agent gets structured context alongside its normal
|
||||
search results. For Codex, Gemini CLI, and Antigravity, a `SessionStart` hook
|
||||
injects a one-line code-discovery reminder as session context (Gemini CLI also
|
||||
keeps its `BeforeTool` reminder).
|
||||
The installed Claude shim file is named `cbm-code-discovery-gate` for
|
||||
backward compatibility with existing installs; despite the legacy name it
|
||||
never gates and never blocks.
|
||||
|
||||
## CLI Mode
|
||||
|
||||
Every MCP tool can be invoked from the command line:
|
||||
|
||||
```bash
|
||||
codebase-memory-mcp cli index_repository '{"repo_path": "/path/to/repo"}'
|
||||
codebase-memory-mcp cli list_projects
|
||||
|
||||
# Use the "name" returned by list_projects as the project value.
|
||||
codebase-memory-mcp cli search_graph '{"project": "my-project", "name_pattern": ".*Handler.*", "label": "Function"}'
|
||||
codebase-memory-mcp cli trace_path '{"project": "my-project", "function_name": "Search", "direction": "both"}'
|
||||
codebase-memory-mcp cli query_graph '{"project": "my-project", "query": "MATCH (f:Function) RETURN f.name LIMIT 5"}'
|
||||
codebase-memory-mcp cli --raw search_graph '{"project": "my-project", "label": "Function"}' | jq '.results[].name'
|
||||
```
|
||||
|
||||
## MCP Tools
|
||||
|
||||
### Indexing
|
||||
|
||||
| Tool | Description |
|
||||
|------|-------------|
|
||||
| `index_repository` | Index a repository into the graph. Auto-sync keeps it fresh after that. |
|
||||
| `list_projects` | List all indexed projects with node/edge counts. |
|
||||
| `delete_project` | Remove a project and all its graph data. |
|
||||
| `index_status` | Check indexing status of a project. |
|
||||
|
||||
### Querying
|
||||
|
||||
| Tool | Description |
|
||||
|------|-------------|
|
||||
| `search_graph` | Structured search by label, name pattern, file pattern, degree filters. Pagination via limit/offset. |
|
||||
| `trace_path` | BFS traversal — who calls a function and what it calls (alias: `trace_call_path`). Depth 1-5. |
|
||||
| `detect_changes` | Map git diff to affected symbols + blast radius with risk classification. |
|
||||
| `query_graph` | Execute Cypher-like graph queries (read-only). |
|
||||
| `get_graph_schema` | Node/edge counts, relationship patterns, property definitions per label. Run this first. |
|
||||
| `get_code_snippet` | Read source code for a function by qualified name. |
|
||||
| `get_architecture` | Codebase overview: languages, packages, routes, hotspots, clusters, ADR. |
|
||||
| `search_code` | Grep-like text search within indexed project files. |
|
||||
| `manage_adr` | CRUD for Architecture Decision Records. |
|
||||
| `ingest_traces` | Ingest runtime traces to validate HTTP_CALLS edges. |
|
||||
|
||||
## Graph Data Model
|
||||
|
||||
### Node Labels
|
||||
|
||||
`Project`, `Package`, `Folder`, `File`, `Module`, `Class`, `Function`, `Method`, `Interface`, `Enum`, `Type`, `Route`, `Resource`
|
||||
|
||||
### Edge Types
|
||||
|
||||
`CONTAINS_PACKAGE`, `CONTAINS_FOLDER`, `CONTAINS_FILE`, `DEFINES`, `DEFINES_METHOD`, `IMPORTS`, `CALLS`, `HTTP_CALLS`, `ASYNC_CALLS`, `IMPLEMENTS`, `HANDLES`, `USAGE`, `CONFIGURES`, `WRITES`, `MEMBER_OF`, `TESTS`, `USES_TYPE`, `FILE_CHANGES_WITH`
|
||||
|
||||
### Qualified Names
|
||||
|
||||
`get_code_snippet` uses qualified names: `<project>.<path_parts>.<name>`. Use `search_graph` to discover them first.
|
||||
|
||||
### Supported Cypher (openCypher read subset)
|
||||
|
||||
`query_graph` is a read-only openCypher subset:
|
||||
|
||||
- **Clauses**: `MATCH`, `OPTIONAL MATCH`, multiple `MATCH`, `WHERE`, `WITH` (+ `WITH … WHERE`), `RETURN`, `ORDER BY`, `SKIP`, `LIMIT`, `DISTINCT`, `UNWIND`, `UNION` / `UNION ALL`, `CASE`.
|
||||
- **Patterns**: labelled nodes, label alternation `(n:A|B)`, relationship types/direction, variable-length paths `[*1..3]`, inline property maps.
|
||||
- **WHERE**: `= <> < <= > >=`, `AND/OR/XOR/NOT`, `IN`, `CONTAINS`, `STARTS WITH`, `ENDS WITH`, `IS [NOT] NULL`, regex `=~`, label test `n:Label`, and `EXISTS { (n)-[:TYPE]->() }` (single-hop existence — great for dead-code, e.g. `WHERE NOT EXISTS { (f)<-[:CALLS]-() }`).
|
||||
- **Aggregates**: `count` (+`DISTINCT`), `sum`, `avg`, `min`, `max`, `collect`.
|
||||
- **Functions**: `labels`, `type`, `id`, `keys`, `properties`; `toLower/toUpper/toString/toInteger/toFloat/toBoolean`; `size`, `length`, `trim/ltrim/rtrim`, `reverse`; `coalesce`, `substring`, `replace`, `left`, `right`.
|
||||
|
||||
Anything outside this subset (write/`MERGE`/`CALL` clauses, unsupported functions, list/map literals, comprehensions, path functions, parameters) **fails with a clear `unsupported …` error** rather than returning empty results.
|
||||
|
||||
## Ignoring Files
|
||||
|
||||
Layered: hardcoded patterns (`.git`, `node_modules`, etc.) → `.gitignore` hierarchy → `.cbmignore` (project-specific, gitignore syntax). Symlinks are always skipped.
|
||||
|
||||
See [docs/cbmignore.md](docs/cbmignore.md) for the full `.cbmignore` how-to: syntax, precedence across the ignore layers, and negation semantics.
|
||||
|
||||
## Configuration
|
||||
|
||||
```bash
|
||||
codebase-memory-mcp config list # show all settings
|
||||
codebase-memory-mcp config set auto_index true # auto-index on session start
|
||||
codebase-memory-mcp config set auto_index_limit 50000 # max files for auto-index
|
||||
codebase-memory-mcp config set auto_watch false # don't register background git watcher (default: true)
|
||||
codebase-memory-mcp config reset auto_index # reset to default
|
||||
```
|
||||
|
||||
### Environment Variables
|
||||
|
||||
| Variable | Default | Description |
|
||||
|----------|---------|-------------|
|
||||
| `CBM_ALLOWED_ROOT` | *(unset)* | Restrict `index_repository` to paths within this directory. When set, a `repo_path` that resolves (after symlink / `..` resolution) outside this root is refused; unset imposes no restriction. Useful when the server may be driven by an untrusted caller, e.g. agentic or multi-tenant deployments. |
|
||||
| `CBM_CACHE_DIR` | `~/.cache/codebase-memory-mcp` | Override the database storage directory. All project indexes and config are stored here. |
|
||||
| `CBM_DIAGNOSTICS` | `false` | Set to `1` or `true` to enable periodic diagnostics output to `/tmp/cbm-diagnostics-<pid>.json`. |
|
||||
| `CBM_DOWNLOAD_URL` | *(GitHub releases)* | Override the download URL for updates. Used for testing or self-hosted deployments. |
|
||||
| `CBM_LOG_LEVEL` | `info` | Set the minimum log level. Accepted values (case-insensitive): `debug`, `info`, `warn`, `error`, `none` — or their numeric equivalents `0`–`4` matching the internal enum. Logs go to stderr; stdout is reserved for MCP JSON-RPC. |
|
||||
| `CBM_WORKERS` | *(detected)* | Override the parallel-indexing worker count returned by `cbm_default_worker_count`. Useful inside containers where `sysconf(_SC_NPROCESSORS_ONLN)` reports host CPUs rather than the cgroup's effective quota. Range 1–256; invalid values are ignored with a warning. |
|
||||
| `CBM_MEM_BUDGET_MB` | *(detected)* | Override the in-memory graph budget with an explicit cap in MiB, taking precedence over the `ram_fraction × total_RAM` default. Useful on bare-metal hosts without a cgroup limit, or to pin a budget *below* the cgroup limit so headroom is left for sibling processes. Must be a positive integer; it is clamped to detected total RAM (logged as `mem.budget.clamped`), and non-numeric or non-positive values are ignored with a warning (`mem.budget.env.invalid`). |
|
||||
| `CBM_DUMP_VERIFY_MIN_RATIO` | `0.5` | After indexing, compare persisted SQLite node count to the in-memory dump count. When persisted nodes fall below this fraction of committed nodes (and committed > 50), `index_repository` returns `status:"degraded"` instead of silent `indexed`. Range 0–1; set `0` to disable. Invalid values are ignored with a warning. |
|
||||
|
||||
```bash
|
||||
# Store indexes in a custom directory
|
||||
export CBM_CACHE_DIR=~/my-projects/cbm-data
|
||||
```
|
||||
|
||||
## Custom File Extensions
|
||||
|
||||
The JSON config files support a single key, `extra_extensions`, which maps additional file extensions to supported languages. Useful for framework-specific extensions like `.blade.php` (Laravel) or `.mjs` (ES modules). (For other tunables, see [Environment Variables](#environment-variables) and the `config` subcommand above.)
|
||||
|
||||
Need the full config-file reference? See [docs/CONFIGURATION.md](docs/CONFIGURATION.md).
|
||||
|
||||
**Per-project** (in your repo root):
|
||||
```json
|
||||
// .codebase-memory.json
|
||||
{"extra_extensions": {".blade.php": "php", ".mjs": "javascript"}}
|
||||
```
|
||||
|
||||
**Global** (applies to all projects):
|
||||
```json
|
||||
// ~/.config/codebase-memory-mcp/config.json (or $XDG_CONFIG_HOME/...)
|
||||
{"extra_extensions": {".twig": "html", ".phtml": "php"}}
|
||||
```
|
||||
|
||||
Each entry maps an extension (which **must** start with `.`) to a language name. Language names are matched **case-insensitively**. Accepted values (aliases in parentheses) are:
|
||||
|
||||
`bash` (`sh`), `c`, `c++` (`cpp`), `c#` (`csharp`), `clojure`, `cmake`, `cobol`, `common lisp` (`commonlisp`, `lisp`), `css`, `cuda`, `dart`, `dockerfile`, `elixir`, `elm`, `emacs lisp` (`emacslisp`), `erlang`, `f#` (`fsharp`), `form`, `fortran`, `glsl`, `go`, `graphql`, `groovy`, `haskell`, `hcl` (`terraform`), `html`, `ini`, `java`, `javascript`, `json`, `julia`, `kotlin`, `lean`, `lua`, `magma`, `makefile`, `markdown`, `matlab`, `meson`, `nix`, `objective-c` (`objc`), `ocaml`, `perl`, `php`, `protobuf`, `python`, `r`, `ruby`, `rust`, `scala`, `scss`, `sql`, `svelte`, `swift`, `toml`, `tsx`, `typescript`, `verilog`, `vimscript`, `vue`, `wolfram`, `xml`, `yaml`, `zig`.
|
||||
|
||||
Project config overrides global for conflicting extensions. An entry whose language name is unknown, or whose extension does not start with `.`, is skipped and a warning is logged to stderr (shown at the default `info` log level). Missing config files are ignored.
|
||||
|
||||
## Persistence
|
||||
|
||||
SQLite databases stored at `~/.cache/codebase-memory-mcp/`. Persists across restarts (WAL mode, ACID-safe). To reset: `rm -rf ~/.cache/codebase-memory-mcp/`.
|
||||
|
||||
## Troubleshooting
|
||||
|
||||
| Problem | Fix |
|
||||
|---------|-----|
|
||||
| `/mcp` doesn't show the server | Check `.mcp.json` path is absolute. Restart agent. Test: `echo '{}' \| /path/to/binary` should output JSON. |
|
||||
| `index_repository` fails | Pass absolute path: `index_repository(repo_path="/absolute/path")` |
|
||||
| `trace_path` returns 0 results | Use `search_graph(name_pattern=".*PartialName.*")` first to find the exact name. |
|
||||
| Queries return wrong project results | Add `project="name"` parameter. Use `list_projects` to see names. |
|
||||
| Binary not found after install | Add to PATH: `export PATH="$HOME/.local/bin:$PATH"` |
|
||||
| UI not loading | Ensure you downloaded the `ui` variant and ran `--ui=true`. Check `http://localhost:9749`. |
|
||||
|
||||
## Hybrid LSP
|
||||
|
||||
**Semantic type resolution beyond tree-sitter.**
|
||||
|
||||
Tree-sitter alone gives a syntactic AST. That handles naming, structure, and call sites well, but it can't tell you that `user.profile.display_name()` resolves to `Profile.display_name` declared three modules away — tree-sitter doesn't track imports, generics, inheritance, or stdlib types.
|
||||
|
||||
codebase-memory-mcp ships a **lightweight C implementation of language type-resolution algorithms, structurally inspired by and compatible with major language servers** (tsserver / typescript-go, pyright, gopls, Roslyn, Eclipse JDT, rust-analyzer), embedded directly into the static binary. No language server process, no per-project setup, no API key. We call this layer **Hybrid LSP**: it runs alongside tree-sitter on every parse and refines `CALLS`, `USAGE`, and `RESOLVED_CALLS` edges with type information, so the resulting graph mirrors what an IDE "Go to Definition" would resolve.
|
||||
|
||||
**Languages with full Hybrid LSP:**
|
||||
|
||||
| Language | What it handles |
|
||||
|----------|-----------------|
|
||||
| **Python** *(new in v0.7.0)* | imports + dotted submodule walks, dataclasses, `Self` return types, generics, `@property`, `match/case` class patterns, SQLAlchemy 2.0 `Mapped[T]`, Pydantic `BaseModel`, `typing.Annotated` / `ClassVar` / `Final` / `InitVar`, async/await, classmethod/staticmethod, narrowing (`isinstance` / `is not None` / walrus), `typing.cast` / `assert_type`, common stdlib (logging, pathlib, json, functools). Target ~95% resolution on idiomatic code. |
|
||||
| **TypeScript / JavaScript / JSX / TSX** | generics, JSX component dispatch, JSDoc inference for plain JS, `.d.ts` declarations, module re-exports, method chaining via return-type propagation, per-file overlay chained to a shared cross-file registry |
|
||||
| **PHP** *(new in v0.7.0)* | namespaces, traits, late-static-binding, PHPDoc inference, parameter binding, return-type inference |
|
||||
| **C#** *(new in v0.7.0)* | global usings, file-scoped namespaces, records (incl. C# 12 primary constructors), LINQ method syntax, `async Task<T>` / `ValueTask<T>` unwrap, generic methods, `this` / `base` dispatch, `var` inference, common BCL stdlib |
|
||||
| **Go** *(sharpened in v0.7.0)* | pre-built per-package cross-file registry, generics, embedded structs, interface satisfaction, package-aware import resolution |
|
||||
| **C / C++** *(sharpened in v0.7.0)* | pre-built per-language cross-file registry shared across C and C++; C side handles macros + `typedef` chains + header-vs-source linking; C++ side handles templates, namespaces, `auto` inference, and method resolution via class hierarchy |
|
||||
| **Java** *(new in v0.8.0)* | imports (single-type, on-demand, static), class hierarchies with `this` / `super` dispatch, generics, annotations, overload matching by arity and parameter types, lambdas / method references bound to functional interfaces, field-type inference, common JDK stdlib |
|
||||
| **Kotlin** *(new in v0.8.0)* | imports + same-package resolution, classes / objects / companion objects, extension functions, data classes, nullable-type unwrapping, scope functions (`let` / `apply` / `run` / `also` / `with`), infix calls, common stdlib |
|
||||
| **Rust** *(new in v0.8.0)* | `use` declarations + module paths, `impl` blocks and trait methods, struct fields, generics with trait bounds, operator-trait desugaring, derive-macro method synthesis, UFCS static paths, common std prelude |
|
||||
| **Perl** | packages + `@ISA` / `use parent` / `use base` inheritance with method-resolution-order dispatch, `SUPER::` calls, Exporter (`use Foo qw(...)`) import maps, `bless` / `ref($class)\|\|$class` self-type inference, qualified `Pkg::sub` static calls, curated perlfunc + CPAN OOP stdlib; unresolved receivers emit no edge (zero-edge guarantee) |
|
||||
|
||||
**Two-layer architecture:**
|
||||
|
||||
1. **Tree-sitter pass** — fast, syntactic, runs for every one of the 158 languages. Extracts definitions, calls, imports.
|
||||
2. **Hybrid LSP pass** — type-aware, runs above the tree-sitter pass per-language. Refines call edges using the import graph plus a per-file or pre-built cross-file definition registry. Languages without a Hybrid LSP pass yet fall back to textual resolution, so you always get *some* answer.
|
||||
|
||||
The result is a knowledge graph accurate enough to drive `trace_path` across packages, inheritance hierarchies, and stdlib calls — without paying for a language server process per project.
|
||||
|
||||
## Language Support
|
||||
|
||||
158 languages, all parsed via vendored tree-sitter grammars compiled into the binary. Benchmarked against 64 real open-source repositories (78 to 49K nodes):
|
||||
|
||||
| Tier | Score | Languages |
|
||||
|------|-------|-----------|
|
||||
| **Excellent** (>= 90%) | | Lua, Kotlin, C++, Perl, Objective-C, Groovy, C, Bash, Zig, Swift, CSS, YAML, TOML, HTML, SCSS, HCL, Dockerfile |
|
||||
| **Good** (75-89%) | | Python, TypeScript, TSX, Go, Rust, Java, R, Dart, JavaScript, Erlang, Elixir, Scala, Ruby, PHP, C#, SQL |
|
||||
| **Functional** (< 75%) | | OCaml, Haskell |
|
||||
|
||||
Also supported (not yet benchmarked): Ada, Agda, Apex, Assembly (NASM), Astro, AWK, Beancount, BibTeX, Bicep, Bitbake, Blade, Cairo, Cap'n Proto, Clojure, CMake, COBOL, Common Lisp, Crystal, CSV, CUDA, D, Devicetree, Diff, .env, Elm, Emacs Lisp, F#, Fennel, Fish, FORM, Fortran, FunC, GDScript, .gitattributes, .gitignore, Gleam, GLSL, GN, Go module, Go template, GraphQL, Hare, HLSL, Hyprlang, INI, ISPC, Janet, Jinja2, JSDoc, JSON, JSON5, Jsonnet, Julia, Just, Kconfig, KDL, Lean 4, Linker Script, Liquid, LLVM IR, Luau, Magma, Makefile, Markdown, MATLAB, Mermaid, Meson, Move, Nickel, Nim, Nix, Odin, Pascal, Pkl, PO (gettext), Pony, PowerShell, Prisma, .properties, Protobuf, Puppet, PureScript, Racket, Regex, requirements.txt, ReScript, RON, reStructuredText, Scheme, Slang, Smali, Smithy, Solidity, SOQL, SOSL, Squirrel, SSH config, Starlark, Svelte, Sway, SystemVerilog, TableGen, Tcl, Teal, Templ, Thrift, TLA+, Typst, Verilog, VHDL, Vim script, Vue, WGSL, WIT, Wolfram, XML, Zsh.
|
||||
|
||||
## Architecture
|
||||
|
||||
```
|
||||
src/
|
||||
main.c Entry point (MCP stdio server + CLI + install/update/config)
|
||||
mcp/ MCP server (14 tools, JSON-RPC 2.0, session detection, auto-index)
|
||||
cli/ Install/uninstall/update/config (10 agents, hooks, instructions)
|
||||
store/ SQLite graph storage (nodes, edges, traversal, search, Louvain)
|
||||
pipeline/ Multi-pass indexing (structure → definitions → calls → HTTP links → config → tests)
|
||||
cypher/ Cypher query lexer, parser, planner, executor
|
||||
discover/ File discovery (.gitignore, .cbmignore, symlink handling)
|
||||
watcher/ Background auto-sync (git polling, adaptive intervals)
|
||||
traces/ Runtime trace ingestion
|
||||
ui/ Embedded HTTP server + 3D graph visualization
|
||||
foundation/ Platform abstractions (threads, filesystem, logging, memory)
|
||||
internal/cbm/ Vendored tree-sitter grammars (158 languages) + AST extraction engine
|
||||
```
|
||||
|
||||
## Security
|
||||
|
||||
Every release binary is verified through a multi-layer pipeline before publication:
|
||||
|
||||
- **VirusTotal** — all binaries scanned by 70+ antivirus engines (zero detections required to publish)
|
||||
- **SLSA Level 3** — cryptographic build provenance generated by the trusted GitHub Actions build workflow; verify with `gh attestation verify <file> --repo DeusData/codebase-memory-mcp --signer-workflow DeusData/codebase-memory-mcp/.github/workflows/_build.yml`
|
||||
- **Sigstore cosign** — keyless signatures on all artifacts; bundles included in every release
|
||||
- **SHA-256 checksums** — `checksums.txt` published with every release; verified by both install scripts before extraction
|
||||
- **CodeQL SAST** — blocks release pipeline if any open alerts remain
|
||||
- **Zero runtime dependencies** — no transitive supply chain; all libraries vendored at compile time
|
||||
|
||||
### v0.7.0 VirusTotal scans
|
||||
|
||||
| Binary | SHA-256 | VirusTotal |
|
||||
|--------|---------|-----------|
|
||||
| `linux-amd64` | `8e12bb2d6ead7f20a6d3...` | [0/72 ✅](https://www.virustotal.com/gui/file/8e12bb2d6ead7f20a6d3bf2be1e51f978c38acce810f0734f510d134b039d152/detection) |
|
||||
| `linux-arm64` | `10f7136bfbf3950c6b2a...` | [0/72 ✅](https://www.virustotal.com/gui/file/10f7136bfbf3950c6b2a1a950bbf85e88b97ee55ab00b4dfbc2a5e9c2ede8672/detection) |
|
||||
| `darwin-arm64` | `7062a7408906344bf4f8...` | [0/72 ✅](https://www.virustotal.com/gui/file/7062a7408906344bf4f835e9580048af85d12dd2b7cec0edf869df93ad9a0592/detection) |
|
||||
| `darwin-amd64` | `28c6d640e1a0ac7bfcab...` | [0/72 ✅](https://www.virustotal.com/gui/file/28c6d640e1a0ac7bfcab5094c2186eced5264a20dcdffcb4455a1b28c5df2171/detection) |
|
||||
| `windows-amd64` | `9c3ddcf78368fd4fa891...` | [0/72 ✅](https://www.virustotal.com/gui/file/9c3ddcf78368fd4fa89156a553641bf1e03640b4fb6dd29a12c84aa5bc98cd86/detection) |
|
||||
|
||||
Scan links for every release are also included in the GitHub Release notes automatically.
|
||||
|
||||
## License
|
||||
|
||||
MIT
|
||||
@@ -0,0 +1,7 @@
|
||||
# WeHub 来源说明
|
||||
|
||||
- 原始项目：`DeusData/codebase-memory-mcp`
|
||||
- 原始仓库：https://github.com/DeusData/codebase-memory-mcp
|
||||
- 导入方式：上游默认分支的最新快照
|
||||
- 原作者、版权和许可证信息以原始仓库及本仓库 LICENSE 为准
|
||||
- 本文件仅用于记录来源，不代表 WeHub 是原项目作者
|
||||
+180
@@ -0,0 +1,180 @@
|
||||
# Security Policy
|
||||
|
||||
## Transparency & Disclaimer
|
||||
|
||||
codebase-memory-mcp interacts deeply with your filesystem. It reads source files across your entire codebase, writes to agent configuration files, and spawns background processes. This is inherent to what it does — not a bug.
|
||||
|
||||
**If you are uncomfortable with these access patterns**, please audit the source code before running. The full source is available in this repository. Release binaries produced by the current release pipeline are verifiably built from this source and can be independently verified via SLSA Build Level 3 provenance, Sigstore signatures, and SHA-256 checksums (see [Verification](#verification) below).
|
||||
|
||||
We are humans and can make mistakes. We take security seriously — it is Priority #1 for this project — but we cannot guarantee perfection. By using this software you accept responsibility for evaluating whether it meets your own security requirements.
|
||||
|
||||
## Runtime Network Behavior
|
||||
|
||||
Indexing, graph queries, semantic search, and MCP tool handling run locally. The
|
||||
MCP server does not upload source code, repository paths, graph indexes, query
|
||||
contents, environment variables, usage metrics, or telemetry.
|
||||
|
||||
The MCP server has one best-effort external runtime check: after MCP
|
||||
`initialize`, it starts a background update-check thread that requests release
|
||||
metadata from
|
||||
`https://api.github.com/repos/DeusData/codebase-memory-mcp/releases/latest`.
|
||||
That request is used only to show an update notice when a newer release exists.
|
||||
It sends no project data; only standard HTTPS metadata, such as the destination
|
||||
host and the normal `curl` request headers, are visible to GitHub and the
|
||||
network path.
|
||||
|
||||
The update check is non-blocking for MCP startup and tool calls. If the machine
|
||||
is offline, DNS fails, GitHub is unreachable, or `curl` exits with an error, the
|
||||
check is ignored. The request is also bounded with `curl --max-time 5`; a
|
||||
process shutting down immediately while the check is still running may wait for
|
||||
that bounded background thread to finish.
|
||||
|
||||
Explicit install, package-manager, and `codebase-memory-mcp update` flows are
|
||||
separate user-initiated network operations that download release assets and
|
||||
checksums from GitHub.
|
||||
|
||||
## Help Us Stay Secure
|
||||
|
||||
**We actively invite security researchers to try to break this project.**
|
||||
|
||||
If you find a vulnerability — anything from a logic bug to a remote code execution — we want to know. You will receive a fast response, public credit (if you want it), and the knowledge that you helped make a tool used by developers worldwide more secure.
|
||||
|
||||
What we consider in scope:
|
||||
|
||||
- Arbitrary code execution via MCP tool inputs or CLI arguments
|
||||
- File reads or writes outside the indexed project root
|
||||
- Shell injection through any code path
|
||||
- Binary tampering or supply chain attacks
|
||||
- Privilege escalation or sandbox escapes
|
||||
|
||||
Please report **privately** rather than as a public issue so we can fix before public disclosure. See below for how.
|
||||
|
||||
## Reporting a Vulnerability
|
||||
|
||||
If you discover a security vulnerability, please report it **privately** so we
|
||||
can fix it before public disclosure:
|
||||
|
||||
1. **Do NOT open a public issue, PR, or social-media post** for security
|
||||
vulnerabilities.
|
||||
2. **Preferred:** use GitHub's [private vulnerability reporting](https://github.com/DeusData/codebase-memory-mcp/security/advisories/new)
|
||||
(the repository's **Security → Report a vulnerability** button). This keeps
|
||||
everything in one place and starts a private advisory automatically.
|
||||
3. **Alternative:** email martin.vogel.tech@gmail.com.
|
||||
4. Include: description, reproduction steps, affected version, and potential
|
||||
impact.
|
||||
5. Include your **GitHub handle and a contact email**. We use these to credit
|
||||
you and to invite you (read-only) to privately verify the fix before its
|
||||
release — see step 4 of the
|
||||
[handling process](docs/SECURITY-DISCLOSURE.md#what-happens-after-you-report).
|
||||
Let us know if you would prefer to remain anonymous.
|
||||
|
||||
> **This is a solo, volunteer-maintained project, so security handling is
|
||||
> best-effort.** As good-faith targets — not guarantees — we aim to:
|
||||
>
|
||||
> - **acknowledge** your report within **7 days** (usually much sooner);
|
||||
> - give an **initial assessment and severity** within **14 days**;
|
||||
> - **develop, validate, and release a fix** as quickly as the severity
|
||||
> warrants — typically within **90 days**, and expedited for high-severity
|
||||
> issues.
|
||||
>
|
||||
> If something will take longer, we will tell you and keep you updated.
|
||||
|
||||
We follow **coordinated disclosure**: fixes are developed privately, validated
|
||||
across all supported platforms, released, and only then disclosed publicly via a
|
||||
[GitHub Security Advisory](https://github.com/DeusData/codebase-memory-mcp/security/advisories)
|
||||
with a **CVE** and credit to you. The full handling process — including how you
|
||||
can verify the fix before release — is documented in
|
||||
[`docs/SECURITY-DISCLOSURE.md`](docs/SECURITY-DISCLOSURE.md).
|
||||
|
||||
### Safe harbor
|
||||
|
||||
We will not pursue or support legal action against researchers who act in good
|
||||
faith — accessing only their own test data, avoiding privacy violations and
|
||||
service disruption, and giving us reasonable time to fix before public
|
||||
disclosure. Research conducted under this policy is considered authorised.
|
||||
|
||||
## Security Measures
|
||||
|
||||
This project implements multiple layers of security verification. Every release binary must pass all checks before users can download it (draft → verify → publish flow).
|
||||
|
||||
### Build-Time (CI — every commit)
|
||||
|
||||
- **8-layer security audit suite** runs on every build:
|
||||
- Layer 1: Static allow-list for dangerous calls (`system`/`popen`/`fork`) + hardcoded URLs
|
||||
- Layer 2: Binary string audit (URLs, credentials, dangerous commands)
|
||||
- Layer 3: Network egress monitoring via strace (Linux)
|
||||
- Layer 4: Install output path + content validation
|
||||
- Layer 5: Smoke test hardening (clean shutdown, residual processes, version integrity)
|
||||
- Layer 6: Graph UI audit (external domains, CORS, server binding, eval/iframe)
|
||||
- Layer 7: MCP robustness (23 adversarial JSON-RPC payloads)
|
||||
- Layer 8: Vendored dependency integrity (SHA-256 checksums, dangerous call scan)
|
||||
- **All dangerous function calls** require a reviewed entry in `scripts/security-allowlist.txt`
|
||||
- **Time-bomb pattern detection** — scans for `time()`/`sleep()` near dangerous calls (could indicate delayed activation)
|
||||
- **MCP tool handler file read audit** — tracks file read count in `mcp.c` against an expected maximum (detects added file reads that could exfiltrate data through tool responses)
|
||||
- **CodeQL SAST** — static application security testing on every push (taint analysis, CWE detection, data flow tracking). Any open alert blocks the release.
|
||||
- **Fuzz testing** — random/mutated inputs to MCP server and Cypher parser (60 seconds per build). Catches crashes, segfaults, and memory errors that structured tests miss.
|
||||
- **Native antivirus scanning** on every platform (any detection fails the build):
|
||||
- **Windows**: Windows Defender with ML heuristics — the same engine end users run
|
||||
- **Linux**: ClamAV with daily signature updates
|
||||
- **macOS**: ClamAV with daily signature updates
|
||||
|
||||
### Release-Time (draft → verify → publish)
|
||||
|
||||
Releases are created as **drafts** (invisible to users) and only published after all verification passes:
|
||||
|
||||
1. **SLSA Build Level 3 provenance for release binaries** — cryptographic attestation generated inside the trusted GitHub Actions build workflow immediately after each release archive is produced
|
||||
2. **Sigstore cosign signing** — keyless digital signatures verifiable by anyone
|
||||
3. **SBOM** — Software Bill of Materials (SPDX) listing all vendored dependencies
|
||||
4. **SHA-256 checksums** — published with every release
|
||||
5. **VirusTotal scanning** — all binaries scanned by 70+ antivirus engines (zero-tolerance: any detection blocks the release)
|
||||
6. **OpenSSF Scorecard** — repository security health score
|
||||
|
||||
Scope of the SLSA claim: this is a build provenance claim for release
|
||||
artifacts. It proves the attested archive was produced by the repository's
|
||||
trusted GitHub-hosted build workflow from repository source. It is not
|
||||
third-party certification, it is not retroactive to older releases, and it does
|
||||
not mean the source code is vulnerability-free or that maintainers cannot change
|
||||
source. Consumers should verify the signer workflow, not only repository
|
||||
ownership.
|
||||
|
||||
If ANY antivirus engine flags ANY binary, the release stays as a draft and is not published until the issue is investigated and resolved.
|
||||
|
||||
### Code-Level Defenses
|
||||
|
||||
- **Shell injection prevention** — `cbm_validate_shell_arg()` rejects metacharacters before all `popen()`/`system()` calls
|
||||
- **SQLite authorizer** — blocks `ATTACH`/`DETACH` at engine level (prevents file creation via SQL injection)
|
||||
- **CORS locked to localhost** — graph UI only accessible from localhost origins
|
||||
- **Path containment** — `realpath()` check prevents reading files outside project root
|
||||
- **Process-kill restriction** — only server-spawned PIDs can be terminated
|
||||
- **SHA-256 checksum verification** — update command verifies downloaded binary before installing
|
||||
|
||||
### Verification
|
||||
|
||||
Users can independently verify any release binary:
|
||||
|
||||
```bash
|
||||
# SLSA Build Level 3 provenance for release binaries
|
||||
gh attestation verify <downloaded-file> \
|
||||
--repo DeusData/codebase-memory-mcp \
|
||||
--signer-workflow DeusData/codebase-memory-mcp/.github/workflows/_build.yml
|
||||
|
||||
# Sigstore cosign (keyless signature)
|
||||
cosign verify-blob --bundle <file>.bundle <file>
|
||||
|
||||
# SHA-256 checksum
|
||||
sha256sum -c checksums.txt
|
||||
|
||||
# VirusTotal (upload binary or check the report links in the release notes)
|
||||
# https://www.virustotal.com/
|
||||
```
|
||||
|
||||
## Supported Versions
|
||||
|
||||
| Version | Supported |
|
||||
|---------|-----------|
|
||||
| Latest `0.8.x` | Yes — security fixes land in the newest release |
|
||||
| < 0.8 | No — please upgrade to the latest release |
|
||||
|
||||
Only the latest release is supported. Security fixes are shipped in a new
|
||||
patched release rather than backported to older versions; upgrading to the
|
||||
newest version is the supported path to receive them.
|
||||
+128
@@ -0,0 +1,128 @@
|
||||
# Third-Party Licenses
|
||||
|
||||
This project vendors third-party code. We are grateful to the authors and
|
||||
maintainers of these projects for making their work freely available.
|
||||
Every vendored component directory carries the upstream `LICENSE`
|
||||
(or `COPYING` / `NOTICE`) file alongside the sources.
|
||||
|
||||
## Tree-sitter Runtime
|
||||
|
||||
The tree-sitter C runtime is vendored in `internal/cbm/vendored/ts_runtime/`.
|
||||
|
||||
- **Project:** [tree-sitter](https://github.com/tree-sitter/tree-sitter)
|
||||
- **License:** MIT
|
||||
- **Copyright:** (c) 2018–2024 Max Brunsfeld
|
||||
|
||||
The shared scanner helpers in `internal/cbm/vendored/common/` (`scanner.h`,
|
||||
`tag.h`) originate from
|
||||
[tree-sitter-html](https://github.com/tree-sitter/tree-sitter-html) (MIT,
|
||||
(c) 2014 Max Brunsfeld) and carry that project's `LICENSE` in
|
||||
`internal/cbm/vendored/common/`.
|
||||
|
||||
The core runtime headers in `internal/cbm/vendored/common/tree_sitter/`
|
||||
(`alloc.h`, `array.h`, `parser.h`) are part of the tree-sitter C runtime
|
||||
([tree-sitter](https://github.com/tree-sitter/tree-sitter), MIT,
|
||||
(c) 2018 Max Brunsfeld) and carry their own `LICENSE` in that directory.
|
||||
|
||||
## Tree-sitter Grammars
|
||||
|
||||
159 pre-generated parsers are vendored in `internal/cbm/vendored/grammars/<lang>/`
|
||||
(generated `parser.c` plus `scanner.c` where applicable, compiled statically).
|
||||
Each grammar is the work of its upstream authors and each grammar directory
|
||||
contains the upstream `LICENSE` file.
|
||||
|
||||
The **canonical provenance record** — upstream repository, pinned commit, and
|
||||
cross-registry verification status for every grammar — is
|
||||
[`internal/cbm/vendored/grammars/MANIFEST.md`](internal/cbm/vendored/grammars/MANIFEST.md).
|
||||
|
||||
License summary:
|
||||
|
||||
- Nearly all grammars are **MIT**-licensed.
|
||||
- `clojure` ([sogaiu/tree-sitter-clojure](https://github.com/sogaiu/tree-sitter-clojure)) is **CC0-1.0**;
|
||||
`fennel` is **CC0-1.0**; `jinja2` and `just` are **Apache-2.0**;
|
||||
`pine` is **ISC** (declared by its upstream).
|
||||
- The grammars authored in-house for this project (`cobol`, `form`, `janet`,
|
||||
`magma`, `protobuf`, `wolfram`) are **MIT** under the project's own license,
|
||||
(c) DeusData. Six further grammars (`assembly`, `cfml`, `cfscript`,
|
||||
`dotenv`, `pine`, `qml`) are self-maintained forks that retain their
|
||||
original upstream authors' licenses — see the manifest for per-grammar
|
||||
provenance.
|
||||
|
||||
## Vendored C/C++ Libraries
|
||||
|
||||
| Library | Path | License | Project |
|
||||
|---------|------|---------|---------|
|
||||
| SQLite 3 | `vendored/sqlite3/` | Public Domain | [sqlite.org](https://www.sqlite.org/) |
|
||||
| mimalloc | `vendored/mimalloc/` | MIT | [microsoft/mimalloc](https://github.com/microsoft/mimalloc) |
|
||||
| yyjson | `vendored/yyjson/` | MIT | [ibireme/yyjson](https://github.com/ibireme/yyjson) |
|
||||
| xxHash | `vendored/xxhash/` | BSD-2-Clause | [Cyan4973/xxHash](https://github.com/Cyan4973/xxHash) |
|
||||
| TRE | `vendored/tre/` | BSD-2-Clause | [laurikari/tre](https://github.com/laurikari/tre) |
|
||||
| LZ4 | `internal/cbm/vendored/lz4/` | BSD-2-Clause (library files) | [lz4/lz4](https://github.com/lz4/lz4) |
|
||||
| Zstandard | `internal/cbm/vendored/zstd/` | BSD-3-Clause (dual BSD / GPLv2 — BSD selected) | [facebook/zstd](https://github.com/facebook/zstd) |
|
||||
| simplecpp | `internal/cbm/vendored/simplecpp/` | 0BSD | [danmar/simplecpp](https://github.com/danmar/simplecpp) |
|
||||
| Verstable | `internal/cbm/vendored/verstable/` | MIT | [JacksonAllan/Verstable](https://github.com/JacksonAllan/Verstable) |
|
||||
| wyhash | `internal/cbm/vendored/wyhash/` | Unlicense (public domain) | [wangyi-fudan/wyhash](https://github.com/wangyi-fudan/wyhash) |
|
||||
|
||||
The graph-UI HTTP server is a first-party implementation
|
||||
(`src/ui/httpd.c` + `src/ui/http_server.c`) — no third-party HTTP library
|
||||
is used.
|
||||
|
||||
## Embedded Model Data
|
||||
|
||||
Semantic vector search uses static token embeddings derived from the
|
||||
**nomic-embed-code** model, vendored in `vendored/nomic/`:
|
||||
|
||||
- **Model:** [nomic-ai/nomic-embed-code](https://huggingface.co/nomic-ai/nomic-embed-code)
|
||||
- **License:** Apache License 2.0
|
||||
- **Copyright:** (c) Nomic AI
|
||||
|
||||
See `vendored/nomic/NOTICE` for the exact derivation procedure
|
||||
(per-token inference + int8 quantization via `scripts/extract_nomic_vectors.py`).
|
||||
|
||||
## Hybrid LSP — Reference Language Servers
|
||||
|
||||
The Hybrid LSP layer (`internal/cbm/lsp/`) is an original C implementation
|
||||
written for this project. **It contains no source code from any language
|
||||
server.** Its type-resolution behavior is structurally inspired by, and
|
||||
validated for output compatibility against, the published behavior of the
|
||||
following language servers and language specifications. They are listed here
|
||||
as acknowledgment; their licenses are noted for reference:
|
||||
|
||||
| Language | Reference implementation / specification | Upstream license |
|
||||
|----------|-------------------------------------------|------------------|
|
||||
| TypeScript / JavaScript | tsserver ([microsoft/TypeScript](https://github.com/microsoft/TypeScript)), [typescript-go](https://github.com/microsoft/typescript-go) | Apache-2.0 |
|
||||
| Python | [pyright](https://github.com/microsoft/pyright) | MIT |
|
||||
| Go | gopls ([golang/tools](https://github.com/golang/tools)) | BSD-3-Clause |
|
||||
| PHP | PHP language reference + Composer PSR-4 autoloading specification | — |
|
||||
| C# | Roslyn ([dotnet/roslyn](https://github.com/dotnet/roslyn)) | MIT |
|
||||
| C / C++ | clangd ([llvm/llvm-project](https://github.com/llvm/llvm-project)) | Apache-2.0 WITH LLVM-exception |
|
||||
| Java | Java Language Specification; output parity with [Eclipse JDT LS](https://github.com/eclipse-jdtls/eclipse.jdt.ls) | EPL-2.0 (reference only) |
|
||||
| Kotlin | Kotlin language specification; [fwcd/kotlin-language-server](https://github.com/fwcd/kotlin-language-server) | MIT |
|
||||
| Rust | [rust-analyzer](https://github.com/rust-lang/rust-analyzer) | MIT OR Apache-2.0 |
|
||||
|
||||
### Standard-library type data
|
||||
|
||||
The stdlib type registries in `internal/cbm/lsp/generated/` were produced as
|
||||
follows:
|
||||
|
||||
- **Python** (`python_stdlib_data.c`) — generated from
|
||||
[python/typeshed](https://github.com/python/typeshed) type stubs
|
||||
(commit `a7912d521e16ff63caf7a8b64b9072542be36777`), **Apache-2.0**,
|
||||
(c) the typeshed contributors. The generator is `scripts/gen-py-stdlib.py`.
|
||||
- **Go** (`go_stdlib_data.c`) — generated by introspecting the public API of
|
||||
the Go standard library ([golang/go](https://github.com/golang/go),
|
||||
BSD-3-Clause).
|
||||
- **Java, Kotlin, C#, PHP, C/C++, Rust** — hand-curated from public API
|
||||
documentation and language specifications; no upstream source code was
|
||||
extracted or transcribed.
|
||||
|
||||
## Embedded Graph UI
|
||||
|
||||
Release binaries built with `--with-ui` embed the compiled `graph-ui/`
|
||||
frontend bundle. Its npm dependencies (React, three.js, @react-three/*,
|
||||
radix-ui, lucide-react, tailwindcss, and friends) are all under permissive
|
||||
licenses (MIT / ISC / Apache-2.0 / Zlib); the exact set is recorded in
|
||||
`graph-ui/package.json` and `graph-ui/package-lock.json`, and the per-package
|
||||
license texts of the production bundle are appended to the
|
||||
`THIRD_PARTY_NOTICES.md` shipped inside the `-ui` release archives
|
||||
(generated by `scripts/gen-ui-licenses.py`).
|
||||
@@ -0,0 +1,936 @@
|
||||
# Codebase Memory MCP -- v0.3.0 Language Benchmark
|
||||
|
||||
## Methodology
|
||||
|
||||
- **63 languages** (27 programming + 8 config/markup), 12 questions each (4 for config languages)
|
||||
- **Up to 5 attempts** per question with escalating retry strategies
|
||||
- **Real open-source repos** (medium to large: 78--49K nodes)
|
||||
- **Grading**: PASS (1.0) / PARTIAL (0.5) / FAIL (0.0), N/A excluded from denominator
|
||||
- **Platform**: Apple M3 Pro, macOS Darwin 25.3.0
|
||||
- **Date**: 2026-03-01
|
||||
|
||||
### The 12 Questions
|
||||
|
||||
| # | Category | Question | Primary MCP Tool |
|
||||
|---|----------|----------|------------------|
|
||||
| Q1 | Indexing | Verify index stats (nodes, edges, schema) | `get_graph_schema` |
|
||||
| Q2 | Discovery | Find functions/methods | `search_graph(label="Function")` |
|
||||
| Q3 | Discovery | Find classes/structs | `search_graph(label="Class")` |
|
||||
| Q4 | Pattern | Find by name pattern | `search_graph(name_pattern="...")` |
|
||||
| Q5 | Code | Get code snippet | `get_code_snippet` |
|
||||
| Q6 | Search | Text search in code | `search_code` |
|
||||
| Q7 | Trace | Outbound call trace | `trace_call_path(direction="outbound")` |
|
||||
| Q8 | Trace | Inbound call trace | `trace_call_path(direction="inbound")` |
|
||||
| Q9 | Graph | Cypher CALLS query | `query_graph` |
|
||||
| Q10 | Enrich | Params/returns/properties | `query_graph` |
|
||||
| Q11 | OOP | Inheritance/implements | `query_graph` |
|
||||
| Q12 | Files | List files & directories | `list_directory` |
|
||||
|
||||
Config/markup languages (HTML, CSS, SCSS, YAML, TOML, HCL, SQL, Dockerfile) run Q1, Q4, Q6, Q12. Other questions marked N/A.
|
||||
|
||||
---
|
||||
|
||||
## Summary Table
|
||||
|
||||
| # | Language | Repo | Nodes | Edges | Score | Pct | Tier |
|
||||
|---|----------|------|------:|------:|------:|----:|------|
|
||||
| 1 | Lua | neovim/neovim | 23,955 | 90,247 | 12/12 | 100% | 1 |
|
||||
| 2 | Kotlin | ktorio/ktor | 25,297 | 71,498 | 12/12 | 100% | 1 |
|
||||
| 3 | C++ | nlohmann/json | 5,262 | 8,681 | 12/12 | 100% | 1 |
|
||||
| 4 | Perl | mojolicious/mojo | 3,287 | 4,182 | 12/12 | 100% | 1 |
|
||||
| 5 | Objective-C | AFNetworking | 1,087 | 1,348 | 12/12 | 100% | 1 |
|
||||
| 6 | Groovy | spockframework/spock | 14,081 | 34,557 | 12/12 | 100% | 1 |
|
||||
| 7 | C | jqlang/jq | 1,330 | 3,923 | 11/11 | 100% | 1 |
|
||||
| 8 | Bash | bats-core/bats-core | 436 | 479 | 10/10 | 100% | 1 |
|
||||
| 9 | Zig | zigtools/zls | 2,824 | 10,230 | 10/10 | 100% | 1 |
|
||||
| 10 | Swift | Alamofire/Alamofire | 3,631 | 7,639 | 10.5/11 | 95% | 1 |
|
||||
| 11 | CSS | animate-css/animate.css | 295 | 214 | 4/4 | 100% | 1 |
|
||||
| 12 | YAML | kubernetes/examples | 2,110 | 1,844 | 4/4 | 100% | 1 |
|
||||
| 13 | TOML | rust-lang/cargo | 16,773 | 51,403 | 4/4 | 100% | 1 |
|
||||
| 14 | HTML | twbs/bootstrap | 2,726 | 4,135 | 4/4 | 100% | 1 |
|
||||
| 15 | SCSS | twbs/bootstrap | 2,726 | 4,135 | 4/4 | 100% | 1 |
|
||||
| 16 | HCL | hashicorp/terraform | 78 | 76 | 4/4 | 100% | 1 |
|
||||
| 17 | Dockerfile | docker-library/official-images | 1,481 | 1,588 | 4/4 | 100% | 1 |
|
||||
| 18 | Python | django/django | 49,398 | 196,022 | 10.5/12 | 87% | 2 |
|
||||
| 19 | TypeScript | nestjs/nest | 9,063 | 15,772 | 10.5/12 | 87% | 2 |
|
||||
| 20 | TSX | shadcn-ui/ui | 29,755 | 41,883 | 10.5/12 | 87% | 2 |
|
||||
| 21 | Go | codebase-memory-mcp (self) | 2,259 | 6,561 | 10.5/12 | 87% | 2 |
|
||||
| 22 | Rust | BurntSushi/ripgrep | 4,118 | 6,971 | 10.5/12 | 87% | 2 |
|
||||
| 23 | Java | spring-projects/spring-petclinic | 660 | 1,080 | 10.5/12 | 87% | 2 |
|
||||
| 24 | R | tidyverse/dplyr | 1,618 | 2,409 | 10.5/12 | 87% | 2 |
|
||||
| 25 | Dart | felangel/bloc | 5,089 | 6,430 | 10.5/12 | 87% | 2 |
|
||||
| 26 | JavaScript | lodash/lodash | 244 | 405 | 9.5/11 | 86% | 2 |
|
||||
| 27 | Erlang | ninenines/cowboy | 3,270 | 9,815 | 9.5/11 | 86% | 2 |
|
||||
| 28 | Elixir | elixir-plug/plug | 870 | 865 | 9.5/11 | 86% | 2 |
|
||||
| 29 | Scala | playframework/playframework | 19,627 | 43,764 | 9/12 | 75% | 2 |
|
||||
| 30 | Ruby | sinatra/sinatra | 1,377 | 1,893 | 9/12 | 75% | 2 |
|
||||
| 31 | PHP | laravel/framework | 38,644 | 161,242 | 9/12 | 75% | 2 |
|
||||
| 32 | C# | jasontaylordev/CleanArchitecture | 1,043 | 1,632 | 9/12 | 75% | 2 |
|
||||
| 33 | SQL | flyway/flyway | 4.5/6 | 75% | 4.5/6 | 75% | 2 |
|
||||
| 34 | OCaml | ocaml/dune | 11,691 | 10,447 | 8/11 | 72% | 3 |
|
||||
| 35 | Haskell | PostgREST/postgrest | 2,066 | 2,463 | 7.5/12 | 62% | 3 |
|
||||
|
||||
---
|
||||
|
||||
## Tier Classification
|
||||
|
||||
| Tier | Range | Count | Languages |
|
||||
|------|-------|------:|-----------|
|
||||
| **Tier 1** -- Excellent | >= 90% | 17 | Lua, Kotlin, C++, Perl, Objective-C, Groovy, C, Bash, Zig, Swift, CSS, YAML, TOML, HTML, SCSS, HCL, Dockerfile |
|
||||
| **Tier 2** -- Good | 75--89% | 16 | Python, TypeScript, TSX, Go, Rust, Java, R, Dart, JavaScript, Erlang, Elixir, Scala, Ruby, PHP, C#, SQL |
|
||||
| **Tier 3** -- Functional | < 75% | 2 | OCaml (72%), Haskell (62%) |
|
||||
|
||||
---
|
||||
|
||||
## Per-Language Results
|
||||
|
||||
### Python (django/django)
|
||||
|
||||
**Project**: `django-python` | **Repo**: `/tmp/lang-bench/django-python`
|
||||
**Nodes**: 49,398 | **Edges**: 196,022
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 49,398 nodes, 196,022 edges, 12 labels, 20 rel types |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | render_to_string (1458 in), skipUnlessDBFeature, call_command. 1005 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | ModelAdmin (511 in), ValidationError (415 in), ImproperlyConfigured. 1005 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | SimpleTestCase, TestCase, SchemaTests. 22,135 total |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | render_to_string: 11 lines from django/template/loader.py:52-62 |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO\|FIXME) | 5 matches: FIXME in admin/checks.py, TODO in admin/options.py |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(outbound) | 21 edges, 3 hops: render_to_string -> render, get_template, select_template |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | 3 callers: test_include, test_include_state, test_include_cache |
|
||||
| Q9 | Cypher CALLS | PASS | 3/5 | query_graph with project param | First 2 attempts needed project param adjustment |
|
||||
| Q10 | Properties | PARTIAL | 3/5 | query_graph(properties) | Functions returned but all properties null |
|
||||
| Q11 | Inheritance | PASS | 3/5 | query_graph(INHERITS) | 200 rows (capped): LazySettings, SimpleAdminConfig, ModelAdmin |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 21 entries: django/, docs/, tests/, extras/, pyproject.toml |
|
||||
|
||||
**Score: 10.5/12 (87%)**
|
||||
|
||||
### JavaScript (lodash/lodash)
|
||||
|
||||
**Project**: `lodash-js` | **Repo**: `/tmp/lang-bench/lodash-js`
|
||||
**Nodes**: 244 | **Edges**: 405
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 244 nodes, 405 edges, 7 labels |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | build (7 variants), baseConvert, Hash. 36 total |
|
||||
| Q3 | Find Classes | PASS | 2/5 | search_graph(Module) | No Class nodes (functional lib). Module fallback: 39 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | browser-testing.yml, markdown-doctest-setup.js. 10 total |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | build: 57 lines from lib/main/build-site.js |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 1 match: TODO in .github/workflows/ci-bun.yml |
|
||||
| Q7 | Outbound Trace | PASS | 2/5 | trace_call_path(baseConvert) | 2 edges: baseAry, self-recursive |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | 1 caller: build-dist.js module |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | 5 rows: minify->minify, build-dist.js->build |
|
||||
| Q10 | Properties | PARTIAL | 1/5 | query_graph(properties) | Functions returned but properties null |
|
||||
| Q11 | Inheritance | N/A | -- | -- | No classes/inheritance (pure functional library) |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 19 entries: dist/, fp/, lib/, test/, lodash.js |
|
||||
|
||||
**Score: 9.5/11 (86%)**
|
||||
|
||||
### TypeScript (nestjs/nest)
|
||||
|
||||
**Project**: `nestjs-ts` | **Repo**: `/tmp/lang-bench/nestjs-ts`
|
||||
**Nodes**: 9,063 | **Edges**: 15,772
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 9,063 nodes, 15,772 edges; 14 labels |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | Injectable (in=242), Module (in=209), Controller (in=117). 292 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | Post (in=128), FastifyAdapter, Module, InstanceWrapper. 1005+ total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | TestingModuleBuilder, TestController, test folders. 142 results |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | Injectable: 6 lines from common/decorators/core/injectable.decorator.ts |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 2 matches in express.spec.ts, gulp/tasks/samples.ts |
|
||||
| Q7 | Outbound Trace | PASS | 2/5 | trace_call_path(Module) | First try Injectable had 0 outbound; Module: 4 edges |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(Injectable) | 242 callers across services, interceptors, pipes, guards |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | 5 rows: gulpfile.js->register, bar.service->Injectable |
|
||||
| Q10 | Properties | PARTIAL | 1/5 | query_graph(properties) | Properties null |
|
||||
| Q11 | Inheritance | PASS | 1/5 | query_graph(INHERITS) | 200 rows: AuthGuard, BadGatewayException, ClientGrpcProxy |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 22 entries: packages/, integration/, sample/, tools/ |
|
||||
|
||||
**Score: 10.5/12 (87%)**
|
||||
|
||||
### TSX (shadcn-ui/ui)
|
||||
|
||||
**Project**: `shadcn-tsx` | **Repo**: `/tmp/lang-bench/shadcn-tsx`
|
||||
**Nodes**: 29,755 | **Edges**: 41,883
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 29,755 nodes, 41,883 edges; 13 labels |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | cn (in=558), IconPlaceholder (in=362). 7,424 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | 18 classes: RegistryError, ComponentErrorBoundary |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 146 results: search.test.ts, registries.test.ts |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet(cn) | 3 lines from apps/v4/examples/base/lib/utils.ts:4-6 |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 5 matches in registry.ts, source.config.ts |
|
||||
| Q7 | Outbound Trace | PASS | 2/5 | trace_call_path(Button) | Button->cn (1 edge) |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(cn) | 558 callers (result saved to file) |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | BlocksPage->getAllBlockIds, ChartPage->getActiveStyle |
|
||||
| Q10 | Properties | PARTIAL | 1/5 | query_graph(properties) | Properties null |
|
||||
| Q11 | Inheritance | PASS | 1/5 | query_graph(INHERITS) | 14 rows: RegistryNotFoundError, ConfigMissingError |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 17 entries: apps/, packages/, templates/ |
|
||||
|
||||
**Score: 10.5/12 (87%)**
|
||||
|
||||
### Go (codebase-memory-mcp)
|
||||
|
||||
**Project**: `codebase-memory-mcp` | **Repo**: self
|
||||
**Nodes**: 2,259 | **Edges**: 6,561
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 2,259 nodes, 6,561 edges; 13 labels |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | OpenMemory (in=136), NodeText (in=79), Parse (in=35). 918 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | Node (in=243), LanguageSpec, FileInfo, Edge. 91 structs |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 413 results: cypher_test.go, langparity_test.go |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | OpenMemory: 16 lines from internal/store/store.go:113-128 |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 4 matches in tools.go, langparity_test.go |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(outbound) | 11 edges: Open, Close, initSchema, cacheDir |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | 68 callers: test files across store/pipeline/httplink |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | printAST->printAST, main->Parse, TestLexBasicQuery->Lex |
|
||||
| Q10 | Properties | PARTIAL | 1/5 | query_graph(properties) | Properties null |
|
||||
| Q11 | Inheritance | PASS | 1/5 | query_graph(IMPLEMENTS) | 3 rows: RelPattern, FilterWhere, fusedExpandMarker |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 15 entries: cmd/, internal/, scripts/, go.mod |
|
||||
|
||||
**Score: 10.5/12 (87%)**
|
||||
|
||||
### Rust (BurntSushi/ripgrep)
|
||||
|
||||
**Project**: `ripgrep-rust` | **Repo**: `/tmp/lang-bench/ripgrep-rust`
|
||||
**Nodes**: 4,118 | **Edges**: 6,971
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 689 Functions, 2039 Methods, 294 Classes, 70 Enums |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | matcher (in=133), args (119), printer_contents (72). 689 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | HiArgs (out=93), LowArgs (out=74), Debug (in=54). 294 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | test method (in=524), SearcherTester, TestCommand. 134 results |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | matcher() from test_matcher.rs:8-10 |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 3 TODOs in globset, gitignore, overrides |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(search) | 12 callees: quit_after_match, sort, haystack_builder, search_worker |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(search) | Called by run, main, search_parallel, files_parallel |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | main->set_git_revision_hash, main->set_windows_exe_options |
|
||||
| Q10 | Properties | PASS | 1/5 | query_graph(properties) | 5 functions returned |
|
||||
| Q11 | Inheritance | PARTIAL | 1/5 | query_graph(INHERITS) | 1 result: NoCaptures. Rust traits not modeled as inheritance |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 20 entries: crates/, tests/, benchsuite/, Cargo.toml |
|
||||
|
||||
**Score: 10.5/12 (87%)**
|
||||
|
||||
### Java (spring-projects/spring-petclinic)
|
||||
|
||||
**Project**: `spring-petclinic-java` | **Repo**: `/tmp/lang-bench/spring-petclinic-java`
|
||||
**Nodes**: 660 | **Edges**: 1,080
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 167 Methods, 39 Classes, 30 Routes, 3 Interfaces |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Method) | getPet (in=12,out=6), testValidate (out=16). 167 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | OwnerControllerTests, PetController, Owner. 39 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 97 test-related nodes |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | getPet() from Owner.java:135-145 |
|
||||
| Q6 | Text Search | PARTIAL | 2/5 | search_code(error) | TODO/FIXME returned 0; "error" found 3 matches |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(outbound) | getPet calls getId, isNew, getName, getPets |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | Called by loadPetWithVisit, findPet, processCreationForm, test methods |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | toString->getName, addPet->isNew, getPet->getPets |
|
||||
| Q10 | Properties | PASS | 1/5 | query_graph(properties) | main, registerHints, getId, setId, isNew |
|
||||
| Q11 | Inheritance | PASS | 1/5 | query_graph(INHERITS) | 8 results: NamedEntity, Person, Owner, Pet, Vet |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 13 entries: src/, gradle/, pom.xml, docker-compose.yml |
|
||||
|
||||
**Score: 10.5/12 (87%)**
|
||||
|
||||
### C++ (nlohmann/json)
|
||||
|
||||
**Project**: `nlohmann-json-cpp` | **Repo**: `/tmp/lang-bench/nlohmann-json-cpp`
|
||||
**Nodes**: 5,262 | **Edges**: 8,681
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 2,456 Functions, 649 Methods, 603 Macros, 153 Classes |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | result (in=99), push_back (in=42), CAPTURE (in=35) |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | Fuzzer (out=54), MutationDispatcher (out=36). 153 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 234 test-related nodes |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | result from unit-bjdata.cpp:2935-2936 |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 3 TODOs in binary_reader.hpp, json.hpp |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(push_back) | Recursive call through json_pointer chain |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(push_back) | 23 callers: main, sax_event_consumer, lexer, binary_reader |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | main->at, main->back |
|
||||
| Q10 | Properties | PASS | 1/5 | query_graph(properties) | 5 functions returned |
|
||||
| Q11 | Inheritance | PASS | 1/5 | query_graph(INHERITS) | 21 results: parse_error, invalid_iterator, type_error, out_of_range |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 20 entries: include/, tests/, docs/, CMakeLists.txt |
|
||||
|
||||
**Score: 12/12 (100%)**
|
||||
|
||||
### C# (jasontaylordev/CleanArchitecture)
|
||||
|
||||
**Project**: `clean-architecture-csharp` | **Repo**: `/tmp/lang-bench/clean-architecture-csharp`
|
||||
**Nodes**: 1,043 | **Edges**: 1,632
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 303 Methods, 123 Classes, 5 Interfaces |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Method) | SendAsync (in=17), PaginatedList (in=11). 303 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | TodoItems (in=18), TodoLists (in=18), BaseTestFixture. 123 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 85 test-related nodes |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | SendAsync() from Testing.cs:38-45 |
|
||||
| Q6 | Text Search | PARTIAL | 2/5 | search_code(error) | TODO/FIXME=0; "error" found 3 matches |
|
||||
| Q7 | Outbound Trace | PARTIAL | 1/5 | trace_call_path(outbound) | SendAsync has 0 outbound (calls external ISender.Send) |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | 16 callers: test methods |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | NotEqualOperator->EqualOperator, GetHashCode->GetEqualityComponents |
|
||||
| Q10 | Properties | PASS | 1/5 | query_graph(properties) | AuthorizationBehaviour, Handle, LoggingBehaviour |
|
||||
| Q11 | Inheritance | PASS | 1/5 | query_graph(INHERITS) | 29 results: BaseAuditableEntity, TodoItem, TodoList |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 16 entries: src/, tests/, infra/, templates/ |
|
||||
|
||||
**Score: 9/12 (75%)**
|
||||
|
||||
### PHP (laravel/framework)
|
||||
|
||||
**Project**: `laravel-framework-php` | **Repo**: `/tmp/lang-bench/laravel-framework-php`
|
||||
**Nodes**: 39,767 | **Edges**: 148,440 (post-Phase-4–5 PHP-LSP; was 196,979 baseline, –25%)
|
||||
**CALLS edges**: 47,341 (was ~83k baseline — 43% reduction in name-fallback misroutes)
|
||||
**Tests**: 278 PHP-LSP unit tests, all passing (total project: 3,091 / 0 failed)
|
||||
**LSP module size**: ~3,700 lines C resolver + ~700 lines stdlib + ~5,500 lines tests = ~9,900 LoC
|
||||
|
||||
PHP runs through a Light Semantic Pass (`internal/cbm/lsp/php_lsp.c`,
|
||||
~3,500 lines) that approaches phpactor-grade type resolution while
|
||||
staying in-process and PHP-runtime-free. Phase 4 capabilities:
|
||||
|
||||
- Receiver-type tracking with full ancestor chain walk (cycle-detected,
|
||||
bounded to 32 hops)
|
||||
- Namespace + `use`-clause resolution (class, function, const), incl.
|
||||
`as` aliasing in both wrapped and bare forms
|
||||
- PHPDoc `@var`, `@param`, `@property`, `@method` parsing — generics
|
||||
(`Collection<User>`, `array<int, User>`) supported
|
||||
- Type narrowing: `instanceof`, `is_string/int/array/...`, `assert(...)`
|
||||
sequential narrowing, negative narrowing on early return / throw
|
||||
- Property type tracking: typed declarations, constructor property
|
||||
promotion, constructor-body inference (`$this->bar = $bar`)
|
||||
- Trait flattening with `as` aliasing
|
||||
- Late static binding chain depth, self/parent/static distinction
|
||||
- Match / ternary / clone / cast result-type evaluation
|
||||
- Foreach element-type propagation through `array<T>` and Iterator
|
||||
- Magic methods (`__call`/`__callStatic` → facade dispatch)
|
||||
- Stdlib coverage: SPL, PSR, DateTime, Throwable, Closure, plus
|
||||
Eloquent Builder/Model/Collection chains, Symfony HttpFoundation,
|
||||
Carbon date methods, PSR-7 with-builders
|
||||
|
||||
**Attribution correctness fix** (the primary metric, see
|
||||
`docs/PHP_LSP_PRE_FLIGHT.md` §6):
|
||||
- `ConfiguresPrompts.configurePrompts → helpers.value` misroute (3
|
||||
call sites): **fixed** — those typed-receiver `$prompt->value()` calls
|
||||
no longer route to the global helper. Verified: 0 misroute edges.
|
||||
- Roughly 27 500 fewer total edges, primarily from blocking
|
||||
name-fallback edges where the receiver was a vendor (un-indexed) type
|
||||
— better precision at the cost of some recall, see notes below.
|
||||
|
||||
| Q# | Question | Grade | Approach | Notes |
|
||||
|----|----------|-------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | get_graph_schema | unchanged |
|
||||
| Q2 | Find Functions | PASS | search_graph(Function) | unchanged |
|
||||
| Q3 | Find Classes | PASS | search_graph(Class) | unchanged |
|
||||
| Q4 | Pattern Search | PASS | search_graph(name_pattern=test) | unchanged |
|
||||
| Q5 | Code Snippet | PASS | get_code_snippet | unchanged |
|
||||
| Q6 | Text Search | PARTIAL | search_code | search-backend issue, separate ticket — see PHP_LSP_PRE_FLIGHT §3 |
|
||||
| Q7 | Outbound Trace | PASS | trace_call_path(outbound) | unchanged |
|
||||
| Q8 | Inbound Trace | PARTIAL | trace_call_path(inbound) | tool-side disambiguation, separate ticket — see PHP_LSP_PRE_FLIGHT §4.1 |
|
||||
| Q9 | Cypher CALLS | PASS | query_graph | unchanged |
|
||||
| Q10 | Properties | PASS | query_graph(properties) | unchanged |
|
||||
| Q11 | Inheritance | PASS | query_graph(INHERITS) | unchanged |
|
||||
| Q12 | List Directory | PASS | list_directory | unchanged |
|
||||
|
||||
**Score: 10/12 (83%)** — the two remaining PARTIALs are non-LSP issues
|
||||
tracked separately. PHP-LSP delivered the underlying graph-correctness
|
||||
win (collide-set attribution); benchmark Tier 1 (≥ 90 %) requires the
|
||||
search-recall and trace-disambiguation tickets to ship as well.
|
||||
|
||||
**Note on edge-count drop**: when the LSP knows the receiver is typed
|
||||
but the receiver class is not indexed (e.g., Composer vendor types like
|
||||
`Laravel\\Prompts\\Prompt`), it emits a synthetic
|
||||
`php_method_typed_unindexed` resolution that the bridge uses to
|
||||
**suppress** the unified extractor's name-based fallback. This trades
|
||||
recall (no edge instead of a guess) for precision (no wrong edge). The
|
||||
pre-flight argued this is the right trade for graph correctness.
|
||||
|
||||
**Test coverage**: 100 unit tests in `tests/test_php_lsp.c`, all
|
||||
passing. Total project tests: 2913 / 0 failed.
|
||||
|
||||
### Lua (neovim/neovim)
|
||||
|
||||
**Project**: `neovim-lua` | **Repo**: `/tmp/lang-bench/neovim-lua`
|
||||
**Nodes**: 23,955 | **Edges**: 90,247
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 12,311 Functions, 7,587 Variables, 1,157 Files, 399 Methods, 196 Classes |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | assert (in=825), vim.fn.bufnr (in=390), vim.fn.count (in=228) |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | cmdmod (in=84), file_buffer (out=80), TUIData (out=59). 196 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 198 test-related nodes |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | vim.validate: 21 lines from runtime/lua/vim/_core/shared.lua |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | Found across build.zig, test.yml |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(outbound) | 5 callees: vim.deprecate, is_valid, validate_spec. Depth 2: 15 more |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | 129K chars result (saved to file). Massive inbound |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | f_rpcstart->check_secure, f_termopen->f_jobstart |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(include_connected) | assert: in=825/out=2, connected to M.error, main |
|
||||
| Q11 | Inheritance | PASS | 1/5 | query_graph(INHERITS) | UGridPrinter inherits object |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 22 entries: src/, runtime/, test/, cmake/, deps/ |
|
||||
|
||||
**Score: 12/12 (100%)**
|
||||
|
||||
### Scala (playframework/playframework)
|
||||
|
||||
**Project**: `playframework-scala` | **Repo**: `/tmp/lang-bench/playframework-scala`
|
||||
**Nodes**: 19,627 | **Edges**: 43,764
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 8,018 Methods, 2,924 Variables, 2,007 Classes, 309 Interfaces |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | app (in=48), queryString (in=14), json (in=9). 71 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | Http (out=135), AbstractController (in=81), Controller (in=68) |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 636 test-related nodes |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | app: 1-line abstract def from play/api/test/package.scala |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | FIXME in CachedSpec, TODO in CryptoComponents |
|
||||
| Q7 | Outbound Trace | PARTIAL | 1/5 | trace_call_path(outbound) | queryString: abstract method, no outbound calls |
|
||||
| Q8 | Inbound Trace | PARTIAL | 1/5 | trace_call_path(inbound) | queryString: no inbound calls detected |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | fromContent->fromString, waitForCancel->waitForKey |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(include_connected) | ok: in=133/out=6, data: in=131/out=1 |
|
||||
| Q11 | Inheritance | PASS | 1/5 | query_graph(INHERITS) | 200 rows (capped): DefaultApplication, Controller, many *Spec |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 14 entries: core/, dev-mode/, documentation/, testkit/ |
|
||||
|
||||
**Score: 9/12 (75%)**
|
||||
|
||||
### Kotlin (ktorio/ktor)
|
||||
|
||||
**Project**: `ktor-kotlin` | **Repo**: `/tmp/lang-bench/ktor-kotlin`
|
||||
**Nodes**: 25,297 | **Edges**: 71,498
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 8,485 Methods, 2,865 Functions, 2,572 Classes, 1,921 Routes |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | request (in=216), content (in=186), http (in=171). 1010+ total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | ContentType (in=224), HttpRequestBuilder (in=208). 1010+ total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | testApplication (in=1504), runTest (in=359). 5,015 total |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | request: 2 lines from ktor-client-core |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | "TODO: Remove when PR fixing this file will be merged" |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(HttpClient) | 4 callees: create, apply, invokeOnCompletion |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(HttpClient) | 3 callers: config, testPluginInstalledTwice |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | getNative->error, matches->toLowerCasePreservingASCIIRules |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(include_connected) | request: in=216/out=10, content: in=186/out=6 |
|
||||
| Q11 | Inheritance | PASS | 1/5 | query_graph(INHERITS) | 200 rows (capped): HttpClientEngineBase, many *Engine |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 39 entries: ktor-client/, ktor-server/, ktor-http/ |
|
||||
|
||||
**Score: 12/12 (100%)**
|
||||
|
||||
### Ruby (sinatra/sinatra)
|
||||
|
||||
**Project**: `sinatra-ruby` | **Repo**: `/tmp/lang-bench/sinatra-ruby`
|
||||
**Nodes**: 1,377 | **Edges**: 1,893
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 786 Methods, 127 Classes, 37 Functions |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | setup (in=11), route_def, write_app_file. 37 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | Sinatra (out=172), OkJson (out=31). 127 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 183 test-related nodes |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | setup: 4 lines from test/markdown_test.rb |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 2 matches: base.rb, content_for_spec.rb |
|
||||
| Q7 | Outbound Trace | PARTIAL | 1/5 | trace_call_path(outbound) | setup in Minitest: no outbound calls (block-based) |
|
||||
| Q8 | Inbound Trace | PARTIAL | 1/5 | trace_call_path(inbound) | No inbound calls for this method |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | status_app->mock_app, mock_app->new, setup_blocks->each |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(include_connected) | it: in=38/out=3, get: in=23/out=1 |
|
||||
| Q11 | Inheritance | PASS | 1/5 | query_graph(INHERITS) | 2 results: BError->AError, ErubiTest->ERBTest |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 18 entries: lib/, test/, examples/ |
|
||||
|
||||
**Score: 9/12 (75%)**
|
||||
|
||||
### C (jqlang/jq)
|
||||
|
||||
**Project**: `jq-c` | **Repo**: `/tmp/lang-bench/jq-c`
|
||||
**Nodes**: 1,330 | **Edges**: 3,923
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 764 Functions, 159 Fields, 75 Variables, 45 Classes (structs) |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | jv_free (in=163), jv_get_kind (in=97), yyparse (out=51). 764 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | jq_state (out=25), yyguts_t (out=24), jv_parser (out=21). 45 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 25 test-related nodes: run_jq_tests, jv_test, LLVMFuzzerTestOneInput |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | jv_free: 1-line declaration from src/jv.h:55 |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 7 matches: build_manpage.py, execute.c, jv_parse.c |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(outbound) | 5 callees: jvp_invalid/number/array/string/object_free. Depth 2: jvp_refcnt_dec |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | 87K chars (saved to file). Massive caller tree |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | f_negate->type_error, f_json_parse->type_error, f_length->type_error |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(include_connected) | jv_free: in=163/out=6, jv_get_kind: in=97/out=1 |
|
||||
| Q11 | Inheritance | N/A | -- | -- | C has no class inheritance |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 23 entries: src/, tests/, docs/, build/ |
|
||||
|
||||
**Score: 11/11 (100%)**
|
||||
|
||||
### Bash (bats-core/bats-core)
|
||||
|
||||
**Project**: `bats-bash` | **Repo**: `/tmp/lang-bench/bats-bash`
|
||||
**Nodes**: 436 | **Edges**: 479
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 156 Functions, 65 Variables, 66 Modules |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | bats_print_stack_trace, main, run, bats_generate_warning. 156 total |
|
||||
| Q3 | Find Classes | N/A | -- | -- | Bash has no classes |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=run) | 6 matches: run, bats_semaphore_run, reentrant_run |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | run: 142-line function source (310-451) |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 2 TODOs in semaphore.bash, tracing.bash |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(outbound) | 6 callees: bats_quote_code, bats_format_file_line_reference |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | 3 callers across 2 hops |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | 10 rows of function call pairs |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(Variable) | 65 variables |
|
||||
| Q11 | Inheritance | N/A | -- | -- | Bash has no class hierarchy |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 66 modules found |
|
||||
|
||||
**Score: 10/10 (100%)**
|
||||
|
||||
### Zig (zigtools/zls)
|
||||
|
||||
**Project**: `zls-zig` | **Repo**: `/tmp/lang-bench/zls-zig`
|
||||
**Nodes**: 2,824 | **Edges**: 10,230
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 1,010+ Functions, 1,005 Variables, 109 Modules |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | std.ArrayList, trace, empty, resolveTypeOfNodeUncached. 1010+ total |
|
||||
| Q3 | Find Classes | N/A | -- | -- | Zig uses structs, not classes |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=resolve) | 57 matches: resolve, resolveTypeOfNodeUncached |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | trace: 19-line function showing tracy integration |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 3+ TODOs in DiagnosticsCollection.zig, DocumentStore.zig |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(outbound) | 2 callees: ___tracy_emit_zone_begin, _callstack |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | 94 callers: processMessage, create, handleConfiguration |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | main->createRequestBody, build->getVersion |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(Variable) | 1,005 variables |
|
||||
| Q11 | Inheritance | N/A | -- | -- | Zig has no inheritance |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 109 modules |
|
||||
|
||||
**Score: 10/10 (100%)**
|
||||
|
||||
### Elixir (elixir-plug/plug)
|
||||
|
||||
**Project**: `plug-elixir` | **Repo**: `/tmp/lang-bench/plug-elixir`
|
||||
**Nodes**: 870 | **Edges**: 865
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 554 Functions, 129 Classes, 80 Modules |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | parse_before_param, parse_hd_before_value. 554 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | Plug.Conn, Plug.Debugger, Plug.CSRFProtection. 129 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=parse) | 29 matches |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | match: 3-line macro source |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 3 TODOs in adapters/test/conn.ex, ssl.ex |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(outbound) | 6 edges across 2 hops |
|
||||
| Q8 | Inbound Trace | PARTIAL | 1/5 | trace_call_path(inbound) | 0 callers (entry point function) |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | parse_headers->match, skip_preamble->before_parse_headers |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(Variable) | 6 variables |
|
||||
| Q11 | Inheritance | N/A | -- | -- | Elixir uses protocols/behaviours |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 80 modules |
|
||||
|
||||
**Score: 9.5/11 (86%)**
|
||||
|
||||
### Haskell (PostgREST/postgrest)
|
||||
|
||||
**Project**: `postgrest-haskell` | **Repo**: `/tmp/lang-bench/postgrest-haskell`
|
||||
**Nodes**: 2,066 | **Edges**: 2,463
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 746 Functions, 148 Classes, 655 Variables |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | defaultenv, jwtauthheader, headers. 746 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | Thread, PostgrestTimedOut, ErrorBody. 148 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=action) | 4 matches: actionResult, actionPlan, actionResponse |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | actionPlan: 7-line Haskell source with pattern matching |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 3+ TODOs in workflow files |
|
||||
| Q7 | Outbound Trace | PARTIAL | 1/5 | trace_call_path(outbound) | 0 callees (function composition not traced as CALLS) |
|
||||
| Q8 | Inbound Trace | PARTIAL | 1/5 | trace_call_path(inbound) | 0 callers (Haskell call patterns not fully traced) |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | generate_jwt->encode, run_command->run, main->generate_jwt |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(Variable) | 655 variables |
|
||||
| Q11 | Inheritance | PARTIAL | 1/5 | query_graph(INHERITS) | 1 result: Thread (Python test helper). Typeclasses not modeled |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 184 modules |
|
||||
|
||||
**Score: 7.5/12 (62%)**
|
||||
|
||||
### OCaml (ocaml/dune)
|
||||
|
||||
**Project**: `dune-ocaml` | **Repo**: `/tmp/lang-bench/dune-ocaml`
|
||||
**Nodes**: 11,691 | **Edges**: 10,447
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 1,010+ Functions, 12 Classes, 1,005 Modules |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | value, unit, append_files_in_dir_if_not_empty. 1010+ total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | fsenv, watch, CramLexer, DuneLexer. 12 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=build) | 111 matches |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | value: 4-line OCaml source with match expression |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 3+ TODOs in workflow.yml, client.ml |
|
||||
| Q7 | Outbound Trace | PARTIAL | 1/5 | trace_call_path(outbound) | 0 callees (pure function) |
|
||||
| Q8 | Inbound Trace | PARTIAL | 1/5 | trace_call_path(inbound) | 0 callers (OCaml call analysis limited) |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | dune_trace_write->write, add_watch->isprefix |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(Variable) | 103 variables |
|
||||
| Q11 | Inheritance | N/A | -- | -- | OCaml uses modules/functors |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 1,005 modules |
|
||||
|
||||
**Score: 8/11 (72%)**
|
||||
|
||||
### Erlang (ninenines/cowboy)
|
||||
|
||||
**Project**: `cowboy-erlang` | **Repo**: `/tmp/lang-bench/cowboy-erlang`
|
||||
**Nodes**: 3,270 | **Edges**: 9,815
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 3,270 nodes, 9,815 edges; 8 labels |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | send (in=379), gun_open (in=278), do_get (in=103). 2,739 total |
|
||||
| Q3 | Find Classes | PASS | 2/5 | search_graph(Module) | No Class nodes; Module fallback: 193 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 29 results |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | send: 2 lines from src/cowboy_http3.erl |
|
||||
| Q6 | Text Search | PASS | 2/5 | search_code(error) | TODO/FIXME=0; "error" found 5 matches |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(outbound) | send->send (self-recursive) |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | 379 callers (saved to file) |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | start->compile, start->start_clear, stop->stop_listener |
|
||||
| Q10 | Properties | PARTIAL | 1/5 | query_graph(properties) | Properties null |
|
||||
| Q11 | Inheritance | N/A | -- | -- | Erlang has no class inheritance |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 12 entries: src/, test/, examples/ |
|
||||
|
||||
**Score: 9.5/11 (86%)**
|
||||
|
||||
### R (tidyverse/dplyr)
|
||||
|
||||
**Project**: `dplyr-r` | **Repo**: `/tmp/lang-bench/dplyr-r`
|
||||
**Nodes**: 1,618 | **Edges**: 2,409
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 1,027 Functions, 13 Classes, 168 test nodes |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | arrange.data.frame, group_by, filter, mutate, select. 1,027 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | rlang_api_ptrs_t, Expander, FactorExpander. 13 total (C++ structs) |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 168 results: testthat.R, test-across.R |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | arrange.data.frame: 10 lines from R/arrange.R:88-97 |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 5 matches in R/across.R about deprecation |
|
||||
| Q7 | Outbound Trace | PASS | 3/5 | trace_call_path(outbound) | C++ func found 2 edges (grouped/ungrouped) |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | 3 callers: test files |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | context.R->new_environment, starwars.R->get_all/lookup |
|
||||
| Q10 | Properties | PARTIAL | 1/5 | query_graph(properties) | Properties null |
|
||||
| Q11 | Inheritance | PASS | 1/5 | query_graph(INHERITS) | 3 rows: FactorExpander, VectorExpander, LeafExpander inherit Expander |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 21 entries: R/, src/, tests/, vignettes/ |
|
||||
|
||||
**Score: 10.5/12 (87%)**
|
||||
|
||||
### Objective-C (AFNetworking/AFNetworking)
|
||||
|
||||
**Project**: `afnetworking-objc` | **Repo**: `/tmp/lang-bench/afnetworking-objc`
|
||||
**Nodes**: 1,087 | **Edges**: 1,348
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | search_graph(File) | 89 files indexed |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | AFNetworkReachabilityCallback, data, destination. 114 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | AFSecurityPolicyTests, AFHTTPRequestSerializer. 80 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=Session) | 26 results |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | AFNetworkReachabilityCallback: 3-line function |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 1 match in AFImageDownloader.m |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(outbound) | 2 edges: Callback->PostReachabilityStatusChange->StatusForFlags |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | Callers traced |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | Function->Function edges present |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(Variable) | 32 variables |
|
||||
| Q11 | Inheritance | PASS | 1/5 | search_graph(Method) | 632 methods extracted |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 17 entries: AFNetworking/, Tests/, UIKit+AFNetworking/ |
|
||||
|
||||
**Score: 12/12 (100%)**
|
||||
|
||||
### Swift (Alamofire/Alamofire)
|
||||
|
||||
**Project**: `alamofire-swift` | **Repo**: `/tmp/lang-bench/alamofire-swift`
|
||||
**Nodes**: 3,631 | **Edges**: 7,639
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | search_graph(File) | 470 files indexed |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | write, read, responseStream, download. 117 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | Session, Result, URLEncodedFormEncoder, AFError. 371 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=Request) | 480 results |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | write: 3-line function |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 3 matches in Session.swift, SessionDelegate.swift |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(write) | 70KB+ result: 58+ callers |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | Rich caller chain |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | didCreateURLRequest->task, finish->finish |
|
||||
| Q10 | Properties | PARTIAL | 1/5 | search_graph(Variable) | 0 Variables, 817 Fields (Swift properties as Fields) |
|
||||
| Q11 | Inheritance | PASS | 1/5 | search_graph(Module) | 449 modules |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 19 entries: Source/, Tests/, Documentation/ |
|
||||
|
||||
**Score: 10.5/11 (95%)**
|
||||
|
||||
### Dart (felangel/bloc)
|
||||
|
||||
**Project**: `bloc-dart` | **Repo**: `/tmp/lang-bench/bloc-dart`
|
||||
**Nodes**: 5,089 | **Edges**: 6,430
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | search_graph(File) | 900 files indexed |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | identical, downloadFile, analyzeDependencies. 479 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | Bloc, Cubit, BlocObserver, HydratedCubit, MockBloc. 846 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=Bloc) | 268 results |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet(Bloc) | 278-line class source |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 3 matches in gradle, kotlin, dart |
|
||||
| Q7 | Outbound Trace | PARTIAL | 1/5 | trace_call_path(identical) | 0 edges (built-in function reference, leaf node) |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | Callers traced |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | generateCubitCode->get, getCubitTemplate->getFreezedCubitTemplate |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(Variable) | 592 variables |
|
||||
| Q11 | Inheritance | PASS | 1/5 | search_graph(Method) | 873 methods, 14 INHERITS edges |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 11 entries: packages/, examples/, extensions/ |
|
||||
|
||||
**Score: 10.5/12 (87%)**
|
||||
|
||||
### Perl (mojolicious/mojo)
|
||||
|
||||
**Project**: `mojo-perl` | **Repo**: `/tmp/lang-bench/mojo-perl`
|
||||
**Nodes**: 3,287 | **Edges**: 4,182
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | search_graph(File) | 192 files indexed |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | join, split, warn, decode, encode, render. 1,005 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | 0 classes (expected -- Perl uses packages) |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=render) | 26 results |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet(join) | 3-line sub returned |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 1 match in bundled highlight.js |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(join) | 114 results, rich 2-hop graph |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | 40+ callers: websocket, camelize, tablify |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | 491 CALLS edges: run->getopt, remote_address->split |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(Variable) | 1,003+ variables |
|
||||
| Q11 | Inheritance | PASS | 1/5 | search_graph(Method) | 0 methods (expected -- Perl subs are Functions) |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 9 entries: lib/, t/, examples/, script/ |
|
||||
|
||||
**Score: 12/12 (100%)**
|
||||
|
||||
### Groovy (spockframework/spock)
|
||||
|
||||
**Project**: `spock-groovy` | **Repo**: `/tmp/lang-bench/spock-groovy`
|
||||
**Nodes**: 14,081 | **Edges**: 34,557
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | search_graph(File) | 1,001 files (+ 284 unlisted) |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | cleanup, setup, println. 185 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | Specification, Issue, FailsWith. 1,005 total |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=Spec) | 802 results |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | isSatisfiedBy: interface method signature |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 3+ matches in BuilderHelper.java, PojoBuilder.java |
|
||||
| Q7 | Outbound Trace | PASS | 1/5 | trace_call_path(isSatisfiedBy) | 4 edges: matches, computeSimilarityScore |
|
||||
| Q8 | Inbound Trace | PASS | 1/5 | trace_call_path(inbound) | match, describeMismatch callers |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | 5,876 Method->Method CALLS |
|
||||
| Q10 | Properties | PASS | 1/5 | search_graph(Variable) | 1,003+ variables (1,278 total) |
|
||||
| Q11 | Inheritance | PASS | 1/5 | search_graph(Method) | 1,003+ methods (6,788 total) |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 27 entries: spock-core/, spock-specs/, build-logic/ |
|
||||
|
||||
**Score: 12/12 (100%)**
|
||||
|
||||
### SQL (flyway/flyway)
|
||||
|
||||
**Project**: `flyway-sql` | **Repo**: `/tmp/lang-bench/flyway-sql`
|
||||
**Nodes**: 10,149 | **Edges**: 23,222
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | search_graph(File) | 811 files indexed |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | 47 functions (Python/Bash helpers, not SQL functions) |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | 576 classes (Java: ClassicConfiguration, ConfigUtils) |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=Migration) | 456 results |
|
||||
| Q6 | Text Search | PARTIAL | 1/5 | search_code(CREATE TABLE) | Found in docs but no actual SQL DDL indexed |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 22 entries: flyway-core/, flyway-docker/ |
|
||||
|
||||
**Score: 4.5/6 (75%)**
|
||||
|
||||
### Dockerfile (docker-library/official-images)
|
||||
|
||||
**Project**: `official-images-dockerfile` | **Repo**: `/tmp/lang-bench/official-images-dockerfile`
|
||||
**Nodes**: 1,481 | **Edges**: 1,588
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | search_graph(File) | 206 files indexed |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=docker) | 12 results |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(FROM) | 3+ matches in workflow scripts |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 17 entries: library/, test/, Dockerfile |
|
||||
|
||||
**Score: 4/4 (100%)**
|
||||
|
||||
### CSS (animate-css/animate.css)
|
||||
|
||||
**Project**: `animate-css` | **Repo**: `/tmp/lang-bench/animate-css`
|
||||
**Nodes**: 295 | **Edges**: 214
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 117 Files, 115 Modules, 37 Variables, 3 Functions |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 0 results (no tests in CSS lib) |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 0 matches (clean codebase) |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 14 entries: source/, docs/ |
|
||||
|
||||
**Score: 4/4 (100%)**
|
||||
|
||||
### YAML (kubernetes/examples)
|
||||
|
||||
**Project**: `k8s-yaml` | **Repo**: `/tmp/lang-bench/k8s-yaml`
|
||||
**Nodes**: 2,110 | **Edges**: 1,844
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 1,235 Variables, 335 Files, 309 Modules |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 12 test-related nodes |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 9 matches across demo scripts |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 12 entries: AI/, databases/, web/ |
|
||||
|
||||
**Score: 4/4 (100%)**
|
||||
|
||||
### TOML (rust-lang/cargo)
|
||||
|
||||
**Project**: `cargo-toml` | **Repo**: `/tmp/lang-bench/cargo-toml`
|
||||
**Nodes**: 16,773 | **Edges**: 51,403
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | search_graph(Variable) | 305 variables |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_code(TODO) | 3+ TODOs in workflows, Cargo.toml |
|
||||
| Q6 | Text Search | PASS | 1/5 | list_directory(src/cargo) | 8 entries: core/, lib.rs, lints/, ops/ |
|
||||
| Q12 | List Directory | PASS | 1/5 | search_graph(Module) | 1,005+ modules |
|
||||
|
||||
**Score: 4/4 (100%)**
|
||||
|
||||
### HCL (hashicorp/terraform)
|
||||
|
||||
**Project**: `terraform-hcl` | **Repo**: `/tmp/lang-bench/terraform-hcl`
|
||||
**Nodes**: 78 | **Edges**: 76
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | search_graph(Variable) | 50 variables (version, constraints, hashes, region) |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_code(TODO) | 0 TODOs (clean config) |
|
||||
| Q6 | Text Search | PASS | 1/5 | list_directory | 6 entries: main.tf, outputs.tf, variables.tf |
|
||||
| Q12 | List Directory | PASS | 1/5 | search_graph(Module) | 5 modules: main.tf, .terraform.lock.hcl |
|
||||
|
||||
**Score: 4/4 (100%)**
|
||||
|
||||
### HTML (twbs/bootstrap)
|
||||
|
||||
**Project**: `bootstrap-scss` (shared) | **Repo**: `/tmp/lang-bench/bootstrap-scss`
|
||||
**Nodes**: 2,726 | **Edges**: 4,135
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 1,525 Variables, 267 Methods, 195 Functions, 22 Classes |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 18 test-related nodes |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 3 TODO/FIXME matches in js/src/carousel.js |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 15 entries: scss/, js/, dist/, build/ |
|
||||
|
||||
**Score: 4/4 (100%)**
|
||||
|
||||
### SCSS (twbs/bootstrap)
|
||||
|
||||
**Project**: `bootstrap-scss` (shared) | **Repo**: `/tmp/lang-bench/bootstrap-scss`
|
||||
**Nodes**: 2,726 | **Edges**: 4,135
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 1,525 Variables, 267 Methods, 195 Functions, 22 Classes |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=test) | 18 SCSS test files |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(TODO) | 3 matches |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 15 entries: scss/, js/, dist/ |
|
||||
|
||||
**Score: 4/4 (100%)**
|
||||
|
||||
---
|
||||
|
||||
## Linux Kernel Stress Test
|
||||
|
||||
**Project**: `linux-kernel` | **Subset**: `drivers/net/ethernet/intel/`
|
||||
**Files**: 387 C/H files | **Nodes**: 19,993 | **Edges**: 67,305
|
||||
|
||||
### Index Breakdown
|
||||
|
||||
| Label | Count |
|
||||
|-------|------:|
|
||||
| Function | 11,546 |
|
||||
| Class (structs) | 1,851 |
|
||||
| Method | 1,803 |
|
||||
| Macro | 1,346 |
|
||||
| Field | 1,095 |
|
||||
| Community | 734 |
|
||||
| Enum | 480 |
|
||||
| Variable | 461 |
|
||||
|
||||
### Results
|
||||
|
||||
| Q# | Question | Grade | Attempts | Approach | Notes |
|
||||
|----|----------|-------|----------|----------|-------|
|
||||
| Q1 | Index Stats | PASS | 1/5 | get_graph_schema | 14 node labels, 11 edge types, 20K nodes, 67K edges |
|
||||
| Q2 | Find Functions | PASS | 1/5 | search_graph(Function) | e1e_rphy (in=64), e1e_wphy (in=53). 11,546 total |
|
||||
| Q3 | Find Classes | PASS | 1/5 | search_graph(Class) | nic (in=86), params (in=59). 1,851 C structs |
|
||||
| Q4 | Pattern Search | PASS | 1/5 | search_graph(name_pattern=init\|probe) | 715 matches: i40e_probe (out=59), ixgbe_probe (out=43) |
|
||||
| Q5 | Code Snippet | PASS | 1/5 | get_code_snippet | e1e_rphy: 4 lines from e1000.h:543-546 |
|
||||
| Q6 | Text Search | PASS | 1/5 | search_code(BUG_ON\|WARN_ON\|pr_err) | Found across amt.c, e100.c, e1000_ethtool.c |
|
||||
| Q7 | Outbound Trace (depth=5) | PASS | 1/5 | trace_call_path(outbound) | i40e_probe: 129K chars result. Massive call tree, no timeout |
|
||||
| Q8 | Inbound Trace (depth=5) | PASS | 1/5 | trace_call_path(inbound) | e1e_rphy: 67.6K chars. 64 direct callers, deep chains |
|
||||
| Q9 | Cypher CALLS | PASS | 1/5 | query_graph | 10 CALLS edges: netdev_boot_setup, amt functions |
|
||||
| Q10 | Properties | PARTIAL | 2/5 | query_graph(Cypher) | `IS NOT NULL` not supported; retried with adjusted query |
|
||||
| Q11 | Inheritance | N/A | -- | -- | C language |
|
||||
| Q12 | List Directory | PASS | 1/5 | list_directory | 17 entries: e100.c, i40e/, ice/, ixgbe/, igb/ |
|
||||
|
||||
**Score: 11/11 (100%)** (Q11 N/A)
|
||||
|
||||
### Stress Metrics
|
||||
|
||||
| Test | Result | Size | Timeout? |
|
||||
|------|--------|-----:|----------|
|
||||
| Deep trace (depth=5, outbound, i40e_probe) | PASS | 129,026 chars | No |
|
||||
| Deep trace (depth=5, inbound, e1e_rphy) | PASS | 67,600 chars | No |
|
||||
| Deep trace (depth=5, both, e1000e_reset) | PASS | moderate | No |
|
||||
| Multi-hop Cypher (3-hop CALLS chain) | PASS | 10 valid chains | No |
|
||||
|
||||
The tool handles 20K-node kernel subsystems without timeouts. Deep traces on well-connected probe functions (out_degree=59) produce massive but complete results. Community detection identified 734 clusters -- useful for understanding driver module boundaries.
|
||||
|
||||
---
|
||||
|
||||
## Cross-Cutting Findings
|
||||
|
||||
### Strengths
|
||||
1. **Zero indexing failures** across 63 repos of all sizes (78 to 49K nodes)
|
||||
2. **100% on 17 languages** -- half the languages achieved perfect scores
|
||||
3. **No language below 62%** -- even the weakest performs core operations
|
||||
4. **Massive codebases handled**: Django (49K nodes), Laravel (38K nodes), neovim (24K nodes) -- no performance issues
|
||||
5. **Kernel-scale stress test passed**: 20K nodes, 67K edges, 129K-char traces, zero timeouts
|
||||
6. **"Removed" languages still strong**: Obj-C (100%), Perl (100%), Groovy (100%), Swift (95%), Dart (87%)
|
||||
|
||||
### Common PARTIAL Patterns
|
||||
- **Q10 (Properties)**: Most languages return functions with `properties=null`. Parameter/return extraction is incomplete -- this is the single most common deduction
|
||||
- **Q7/Q8 (Trace)**: Abstract methods, entry-point functions, and built-in references correctly return 0 edges (no false positives), but are graded PARTIAL when no alternative function has edges
|
||||
- **Q11 (Inheritance)**: Languages using alternative paradigms (traits, protocols, typeclasses, modules) have limited INHERITS edges
|
||||
|
||||
### Known Limitations
|
||||
1. **Function properties**: Parameter types and return types are not extracted for most languages, resulting in `properties=null`
|
||||
2. **Haskell call tracing**: Function composition (`f . g . h`) is not modeled as CALLS edges. Only explicit function applications are traced
|
||||
3. **OCaml call analysis**: Limited call resolution due to module functor indirection
|
||||
4. **Cypher `IS NOT NULL`**: Not supported in the Cypher parser -- use alternative query patterns
|
||||
5. **Scala/Ruby trace**: Abstract methods and block-based patterns can have 0 trace edges
|
||||
6. **query_graph 200-row cap**: Aggregation queries (COUNT) silently undercount on large codebases
|
||||
|
||||
---
|
||||
|
||||
## Aggregate Statistics
|
||||
|
||||
| Metric | Value |
|
||||
|--------|------:|
|
||||
| Languages tested | 35 |
|
||||
| Total questions asked | 370 |
|
||||
| PASS | 327 (88%) |
|
||||
| PARTIAL | 25 (7%) |
|
||||
| FAIL | 18 (5%) |
|
||||
| N/A (excluded) | 41 |
|
||||
| Weighted score | 339.5 / 370 |
|
||||
| Overall percentage | **91.8%** |
|
||||
| Perfect scores (100%) | 17 languages |
|
||||
| Tier 1 (>=90%) | 17 languages |
|
||||
| Tier 2 (75-89%) | 16 languages |
|
||||
| Tier 3 (<75%) | 2 languages |
|
||||
@@ -0,0 +1,130 @@
|
||||
# Configuration Reference
|
||||
|
||||
This page documents the configuration files that `codebase-memory-mcp` reads or writes today.
|
||||
|
||||
## At a Glance
|
||||
|
||||
| Purpose | Path | Format | Notes |
|
||||
|---|---|---|---|
|
||||
| Global custom extension mapping | `$XDG_CONFIG_HOME/codebase-memory-mcp/config.json` | JSON | Falls back to `~/.config/codebase-memory-mcp/config.json` when `XDG_CONFIG_HOME` is unset. |
|
||||
| Per-project custom extension mapping | `{repo_root}/.codebase-memory.json` | JSON | Overrides conflicting global `extra_extensions` entries. |
|
||||
| CLI-managed runtime settings | `${CBM_CACHE_DIR:-~/.cache/codebase-memory-mcp}/_config.db` | SQLite | Written by `codebase-memory-mcp config set/reset`. |
|
||||
| UI settings | `${CBM_CACHE_DIR:-~/.cache/codebase-memory-mcp}/config.json` | JSON | Stores `ui_enabled` and `ui_port`. |
|
||||
|
||||
## 1. Custom File Extension Mapping
|
||||
|
||||
Two optional JSON files let you map additional file extensions to built-in languages.
|
||||
|
||||
### Global config
|
||||
|
||||
Default path:
|
||||
|
||||
```text
|
||||
$XDG_CONFIG_HOME/codebase-memory-mcp/config.json
|
||||
```
|
||||
|
||||
Fallback when `XDG_CONFIG_HOME` is unset:
|
||||
|
||||
```text
|
||||
~/.config/codebase-memory-mcp/config.json
|
||||
```
|
||||
|
||||
### Per-project config
|
||||
|
||||
Place this file in the repository root:
|
||||
|
||||
```text
|
||||
.codebase-memory.json
|
||||
```
|
||||
|
||||
### Format
|
||||
|
||||
```json
|
||||
{
|
||||
"extra_extensions": {
|
||||
".blade.php": "php",
|
||||
".mjs": "javascript",
|
||||
".twig": "html"
|
||||
}
|
||||
}
|
||||
```
|
||||
|
||||
Notes:
|
||||
|
||||
- Extension keys must include the leading dot.
|
||||
- Language names are case-insensitive.
|
||||
- Unknown language names are skipped.
|
||||
- Missing files are ignored.
|
||||
- If the same extension appears in both files, the per-project file wins.
|
||||
|
||||
## 2. CLI-Managed Runtime Settings
|
||||
|
||||
The `config` subcommand stores runtime settings in a small SQLite database:
|
||||
|
||||
```text
|
||||
${CBM_CACHE_DIR:-~/.cache/codebase-memory-mcp}/_config.db
|
||||
```
|
||||
|
||||
Inspect or change values with the CLI:
|
||||
|
||||
```bash
|
||||
codebase-memory-mcp config list
|
||||
codebase-memory-mcp config get auto_index
|
||||
codebase-memory-mcp config set auto_index true
|
||||
codebase-memory-mcp config set auto_index_limit 50000
|
||||
codebase-memory-mcp config reset auto_index
|
||||
```
|
||||
|
||||
Current keys:
|
||||
|
||||
| Key | Default | Meaning |
|
||||
|---|---|---|
|
||||
| `auto_index` | `false` | Automatically index new projects when an MCP session starts. |
|
||||
| `auto_index_limit` | `50000` | Maximum file count allowed for automatic indexing of a new project. |
|
||||
|
||||
## 3. UI Settings
|
||||
|
||||
The optional built-in graph UI stores its settings in:
|
||||
|
||||
```text
|
||||
${CBM_CACHE_DIR:-~/.cache/codebase-memory-mcp}/config.json
|
||||
```
|
||||
|
||||
Current format:
|
||||
|
||||
```json
|
||||
{
|
||||
"ui_enabled": false,
|
||||
"ui_port": 9749
|
||||
}
|
||||
```
|
||||
|
||||
Notes:
|
||||
|
||||
- If the UI-enabled binary has embedded assets and no UI config file exists yet, the UI auto-enables on first run.
|
||||
- `CBM_CACHE_DIR` changes both the UI config location and the runtime settings database location.
|
||||
|
||||
## 4. Environment Variables
|
||||
|
||||
These environment variables affect runtime behavior:
|
||||
|
||||
| Variable | Default | Description |
|
||||
|---|---|---|
|
||||
| `CBM_ALLOWED_ROOT` | *(unset)* | Restrict `index_repository` to paths within this directory. When set, a `repo_path` that resolves (after symlink / `..` resolution) outside this root is refused; unset imposes no restriction. Useful when the server may be driven by an untrusted caller (agentic or multi-tenant deployments). |
|
||||
| `CBM_CACHE_DIR` | `~/.cache/codebase-memory-mcp` | Override the cache directory used for indexes, `_config.db`, and UI `config.json`. |
|
||||
| `CBM_DIAGNOSTICS` | `false` | Enable periodic diagnostics output to `/tmp/cbm-diagnostics-<pid>.json`. |
|
||||
| `CBM_DOWNLOAD_URL` | GitHub releases | Override the update download URL. |
|
||||
| `CBM_LOG_LEVEL` | `info` | Set stderr log level to `debug`, `info`, `warn`, `error`, or `none` (or `0`-`4`). |
|
||||
| `CBM_WORKERS` | auto-detected | Override the indexing worker count. |
|
||||
|
||||
## 5. Agent and Editor Integration Files
|
||||
|
||||
The `install` command can also write MCP entries and instruction blocks into agent/editor config files such as Claude Code, Codex, Gemini, VS Code, Cursor, Zed, and others.
|
||||
|
||||
Those target paths vary by tool and platform, so the easiest way to inspect the exact files for your machine is:
|
||||
|
||||
```bash
|
||||
codebase-memory-mcp install --dry-run
|
||||
```
|
||||
|
||||
That prints the specific config files the installer would modify without writing anything.
|
||||
+11118
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,87 @@
|
||||
# Security Disclosure & Handling Process
|
||||
|
||||
This document explains **how security reports are handled** for
|
||||
codebase-memory-mcp — what happens after you report a vulnerability, what you
|
||||
can expect from us, and how disclosure and credit work.
|
||||
|
||||
For **how to report** a vulnerability and **what is in scope**, see
|
||||
[`SECURITY.md`](../SECURITY.md). This document covers the process *after* a
|
||||
report arrives.
|
||||
|
||||
> **This is a solo, volunteer-maintained project.** Everything below is handled
|
||||
> on a good-faith, best-effort basis. The timeframes are honest targets we aim
|
||||
> to beat — not contractual guarantees. If something will take longer, we will
|
||||
> tell you and keep you updated rather than go silent.
|
||||
|
||||
## Principles
|
||||
|
||||
We follow **coordinated disclosure**:
|
||||
|
||||
1. **Fix privately, disclose publicly.** Details of an unfixed vulnerability are
|
||||
never discussed in the open. We develop and validate the fix in private, ship
|
||||
a release, and only then disclose.
|
||||
2. **Patch before publicity.** A fixed release is always available *before* the
|
||||
vulnerability is described publicly, so users can update immediately.
|
||||
3. **Credit the researcher.** Public credit by default; anonymity on request.
|
||||
4. **A bug fixed once should stay fixed.** Every fix ships with a regression
|
||||
test or guard so the same class of issue cannot silently return.
|
||||
|
||||
## What happens after you report
|
||||
|
||||
| Step | What we do | Target (best-effort) |
|
||||
|------|------------|----------------------|
|
||||
| 1. **Acknowledge** | Confirm we received your report and are looking at it. | within **7 days** (usually much sooner) |
|
||||
| 2. **Triage & severity** | Reproduce the issue and assign a severity (CVSS). | within **14 days** |
|
||||
| 3. **Fix privately** | Develop the fix in a private environment, with a regression guard, and validate it across all supported platforms (Linux, macOS, Windows) under full CI. | severity-dependent |
|
||||
| 4. **You verify** | We invite you (read-only) to confirm the fix resolves the issue and that the guard prevents regression. Your sign-off is welcomed; an unresponsive reporter will not indefinitely block a release. | — |
|
||||
| 5. **Release** | Merge the fix and cut a patched release promptly. | as fast as severity warrants |
|
||||
| 6. **Disclose** | Publish a [GitHub Security Advisory](https://github.com/DeusData/codebase-memory-mcp/security/advisories), request a **CVE** (GitHub is a CNA), and credit you. | after a short upgrade window |
|
||||
|
||||
**Overall fix timeline:** we aim to resolve and release a fix within **90 days**
|
||||
of triage, and much faster for high-severity issues. Critical, actively
|
||||
exploitable issues are handled with the highest priority.
|
||||
|
||||
## Severity
|
||||
|
||||
We assess severity using **CVSS** and prioritise accordingly. Roughly:
|
||||
|
||||
- **Critical / High** — remote code execution, sandbox/scope escape, supply-chain
|
||||
compromise. Prioritised; expedited release.
|
||||
- **Medium** — issues requiring local access, non-default configuration, or
|
||||
significant user interaction.
|
||||
- **Low** — defense-in-depth gaps, hardening, information exposure with limited
|
||||
impact.
|
||||
|
||||
## Credit & CVE
|
||||
|
||||
- You are **credited by name/handle** in the published advisory unless you ask to
|
||||
remain anonymous.
|
||||
- A **CVE identifier** is requested for each distinct vulnerability via the
|
||||
GitHub Security Advisory (one CVE per vulnerability, not per report — a single
|
||||
report may yield several).
|
||||
- The advisory lists the **affected and patched version ranges** so downstream
|
||||
tooling (e.g. Dependabot) can alert users automatically.
|
||||
|
||||
## Safe harbor
|
||||
|
||||
We will not pursue or support legal action against researchers who act in
|
||||
**good faith**, meaning you:
|
||||
|
||||
- only access, modify, or store data in **your own test environment**;
|
||||
- avoid privacy violations, data destruction, and degradation of service for
|
||||
others;
|
||||
- give us a **reasonable opportunity to fix** the issue before disclosing it
|
||||
publicly;
|
||||
- do not exploit the issue beyond the minimum necessary to demonstrate it.
|
||||
|
||||
Good-faith research conducted under this policy is considered authorised, and we
|
||||
will work with you, not against you.
|
||||
|
||||
## What we ask of you
|
||||
|
||||
- Report **privately** (see [`SECURITY.md`](../SECURITY.md)) — not as a public
|
||||
issue, PR, or social-media post.
|
||||
- Give us **reasonable time** to fix before any public write-up.
|
||||
- Provide enough detail to **reproduce** (affected version, steps, impact).
|
||||
|
||||
Thank you for helping keep a tool used by developers worldwide safe. 🙏
|
||||
@@ -0,0 +1,121 @@
|
||||
# `.cbmignore` — Excluding Files from Indexing
|
||||
|
||||
`.cbmignore` is a project-specific ignore file that controls which files the
|
||||
indexer sees. It uses gitignore-style syntax and is read from the **root of
|
||||
the indexed directory** (`<repo>/.cbmignore`). Nested `.cbmignore` files in
|
||||
subdirectories are not read.
|
||||
|
||||
It applies at **file discovery time** — the directory walk that selects files
|
||||
for parsing. Every indexing path uses the same discovery: the initial
|
||||
`index_repository`, manual re-indexing, and background auto-sync. A path
|
||||
matched by `.cbmignore` never enters the graph. Changes to `.cbmignore` take
|
||||
effect on the next (re-)index.
|
||||
|
||||
Unlike `.gitignore`, it has no effect on git itself — it only shapes what the
|
||||
indexer sees. Commit it to share indexing excludes with your team, or list it
|
||||
in `.gitignore` to keep personal excludes untracked.
|
||||
|
||||
To verify it works: directory subtrees skipped during discovery are reported
|
||||
in the `index_repository` response under `excluded`
|
||||
(`{"dirs": [up to 25 paths], "count": <total>, "truncated": <bool>}`).
|
||||
|
||||
## Syntax
|
||||
|
||||
One pattern per line. Blank lines are ignored, lines starting with `#` are
|
||||
comments, and trailing whitespace is trimmed.
|
||||
|
||||
| Feature | Meaning |
|
||||
|---|---|
|
||||
| `*` | matches any run of characters, except `/` |
|
||||
| `?` | matches exactly one character, except `/` |
|
||||
| `**` | matches across directory boundaries (`**/name`, `dir/**`, `a/**/b`) |
|
||||
| `[abc]`, `[a-z]` | character classes; `[!a-z]` / `[^a-z]` negate the class |
|
||||
| trailing `/` | pattern matches **directories only** |
|
||||
| `/` anywhere else | anchors the pattern to the repo root |
|
||||
| no `/` in pattern | matches the file/directory name at **any depth** |
|
||||
| leading `!` | negation — re-includes a previously matched path; the **last matching pattern wins** |
|
||||
|
||||
Examples:
|
||||
|
||||
```gitignore
|
||||
# Generated protobuf output, anywhere in the tree
|
||||
*.pb.go
|
||||
|
||||
# A specific top-level directory (leading / anchors to the repo root)
|
||||
/third_party/
|
||||
|
||||
# Any directory named "snapshots", at any depth (trailing / = directories only)
|
||||
snapshots/
|
||||
|
||||
# Everything under any fixtures directory
|
||||
**/fixtures/**
|
||||
|
||||
# Anchored glob: generated clients for any single-character API version
|
||||
/api/v?/generated/
|
||||
|
||||
# Character class: yearly log folders 2020-2029
|
||||
/logs/202[0-9]/
|
||||
|
||||
# Ignore all YAML, but keep CI configs (negation — last match wins)
|
||||
*.yaml
|
||||
!ci.yaml
|
||||
```
|
||||
|
||||
## Precedence
|
||||
|
||||
Discovery applies its filters in a fixed order — the first layer that rejects
|
||||
a path wins. For directories:
|
||||
|
||||
1. **Built-in skip list** — `.git`, `node_modules`, `dist`, `target`,
|
||||
`vendor`, tool caches, etc. (60+ names; the fast/moderate index modes add
|
||||
more, e.g. `docs`, `examples`, `testdata`). Not overridable from any
|
||||
ignore file today.
|
||||
2. **Repo `.gitignore`** — `<repo>/.gitignore` merged with
|
||||
`<git-common-dir>/info/exclude` (worktree-aware); later patterns win on
|
||||
conflict. Honored even when the indexed directory is not a git repo root.
|
||||
3. **Nested `.gitignore` files** — picked up during the walk and matched
|
||||
relative to their own directory.
|
||||
4. **`.cbmignore`** — a positive match skips the path; a negated match can
|
||||
only rescue paths from layer 5.
|
||||
5. **Git global excludes** — `core.excludesFile` from `~/.gitconfig` or the
|
||||
XDG git config (default `$XDG_CONFIG_HOME/git/ignore`); consulted only
|
||||
when the project is a git repo with a config.
|
||||
|
||||
For files, built-in suffix filters (`.png`, `.o`, `.db`, …; fast modes add
|
||||
archives, media, lockfiles, `.min.js`, …) and fast-mode filename/substring
|
||||
filters run **before** the ignore files, and a maximum-file-size cap runs
|
||||
after them; none of these are overridable from `.cbmignore`. Symlinks are
|
||||
always skipped.
|
||||
|
||||
## Negation (`!`) — current behavior
|
||||
|
||||
- **Within `.cbmignore`**: standard gitignore semantics. Patterns are
|
||||
evaluated top to bottom and the last matching pattern wins, so
|
||||
`!pattern` re-includes something an earlier line excluded.
|
||||
- **Parent pruning** (same caveat as git): when a directory is excluded, the
|
||||
walk never descends into it — you cannot re-include a file whose parent
|
||||
directory is excluded. Negate the directory itself if you need its
|
||||
contents.
|
||||
- **Across layers**: a `.cbmignore` negation overrides the **git global
|
||||
excludes** layer only. Example: your `~/.config/git/ignore` ignores
|
||||
`*.sql`, but this project's SQL should be indexed — add `!*.sql` to
|
||||
`.cbmignore`. Negation cannot override the built-in skip lists, the repo
|
||||
`.gitignore`/`info/exclude`, nested `.gitignore` files, the built-in
|
||||
suffix/filename filters, or the size cap.
|
||||
|
||||
### Planned (not yet implemented)
|
||||
|
||||
The negation story is being unified; none of the following works yet:
|
||||
|
||||
- `!` in `.cbmignore` will be able to un-skip ordinary built-in skip
|
||||
directories (`obj/`, `dist/`, `target/`, …) so build-output-like
|
||||
directories that actually contain source can be indexed.
|
||||
- A small safety core stays non-negatable by design — `.git`,
|
||||
`node_modules`, and worktree-internal directories — because indexing them
|
||||
risks OOM and correctness issues (see issue #489).
|
||||
- Auxiliary filesystem walkers will honor the same ignore predicate as
|
||||
discovery, so every code path sees an identical ignore decision
|
||||
(unification tracked in a follow-up issue).
|
||||
|
||||
Until these land, the "Precedence" and "Negation — current behavior" sections
|
||||
above describe the actual behavior.
|
||||
Binary file not shown.
|
After Width: | Height: | Size: 1.2 MiB |
+880
@@ -0,0 +1,880 @@
|
||||
<!DOCTYPE html>
|
||||
<html lang="en">
|
||||
<head>
|
||||
<meta charset="UTF-8">
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0">
|
||||
<title>codebase-memory-mcp — Code Intelligence Knowledge Graph for AI Coding Agents</title>
|
||||
<meta name="description" content="codebase-memory-mcp is an open-source MCP server that indexes any codebase into a persistent knowledge graph so AI coding agents answer structural questions with ~120x fewer tokens. 158 languages, Hybrid LSP type resolution, local semantic vector search, code-clone detection, sub-1ms queries, Linux kernel indexed in 3 minutes. Single static C binary, zero dependencies. Works with 11 agents including Claude Code, Codex CLI, Gemini CLI, Cursor, and Zed.">
|
||||
<meta name="keywords" content="MCP server, code intelligence, knowledge graph, tree-sitter, Hybrid LSP, semantic code search, code embeddings, code clone detection, cross-repo analysis, data-flow analysis, Claude Code, Codex CLI, Gemini CLI, Cursor, Zed, code exploration, token reduction, call graph, dead code detection">
|
||||
<meta name="author" content="DeusData">
|
||||
<meta name="robots" content="index, follow, max-image-preview:large, max-snippet:-1">
|
||||
<meta name="theme-color" content="#0d1117">
|
||||
|
||||
<!-- Open Graph -->
|
||||
<meta property="og:title" content="codebase-memory-mcp — Code Intelligence Knowledge Graph for AI Coding Agents">
|
||||
<meta property="og:description" content="Index any codebase into a persistent knowledge graph. AI agents answer structural questions with ~120x fewer tokens. 158 languages, Hybrid LSP, sub-1ms queries, single static C binary.">
|
||||
<meta property="og:type" content="website">
|
||||
<meta property="og:url" content="https://deusdata.github.io/codebase-memory-mcp/">
|
||||
<meta property="og:image" content="https://deusdata.github.io/codebase-memory-mcp/graph-ui-screenshot.png">
|
||||
<meta property="og:image:width" content="1538">
|
||||
<meta property="og:image:height" content="932">
|
||||
<meta property="og:image:alt" content="3D knowledge-graph visualization of a codebase with thousands of nodes and edges">
|
||||
<meta property="og:site_name" content="codebase-memory-mcp">
|
||||
|
||||
<!-- Twitter Card -->
|
||||
<meta name="twitter:card" content="summary_large_image">
|
||||
<meta name="twitter:title" content="codebase-memory-mcp — Code Intelligence for AI Coding Agents">
|
||||
<meta name="twitter:description" content="Index any codebase into a knowledge graph. ~120x fewer tokens for AI code exploration. 158 languages, Hybrid LSP, sub-1ms queries, single static C binary.">
|
||||
<meta name="twitter:image" content="https://deusdata.github.io/codebase-memory-mcp/graph-ui-screenshot.png">
|
||||
|
||||
<link rel="canonical" href="https://deusdata.github.io/codebase-memory-mcp/">
|
||||
<link rel="icon" href="data:image/svg+xml,%3Csvg xmlns='http://www.w3.org/2000/svg' viewBox='0 0 32 32'%3E%3Crect width='32' height='32' rx='6' fill='%230d1117'/%3E%3Cg stroke='%2358a6ff' stroke-width='2'%3E%3Cline x1='9' y1='9' x2='23' y2='16'/%3E%3Cline x1='23' y1='16' x2='10' y2='24'/%3E%3Cline x1='9' y1='9' x2='10' y2='24'/%3E%3C/g%3E%3Cg fill='%2358a6ff'%3E%3Ccircle cx='9' cy='9' r='3.5'/%3E%3Ccircle cx='23' cy='16' r='3.5'/%3E%3Ccircle cx='10' cy='24' r='3.5'/%3E%3C/g%3E%3C/svg%3E">
|
||||
|
||||
<!-- Structured data: SoftwareApplication (the tool) -->
|
||||
<script type="application/ld+json">
|
||||
{
|
||||
"@context": "https://schema.org",
|
||||
"@type": "SoftwareApplication",
|
||||
"name": "codebase-memory-mcp",
|
||||
"alternateName": "Codebase Memory MCP",
|
||||
"applicationCategory": "DeveloperApplication",
|
||||
"applicationSubCategory": "Model Context Protocol (MCP) server",
|
||||
"operatingSystem": "macOS, Linux, Windows",
|
||||
"softwareVersion": "0.8.1",
|
||||
"description": "An open-source MCP server that indexes a codebase into a persistent knowledge graph of functions, classes, call chains, HTTP routes, and cross-service links, so AI coding agents answer structural questions with roughly 120x fewer tokens than file-by-file search. Parses 158 languages via tree-sitter with Hybrid LSP semantic type resolution for 9 language families. Ships as a single static C binary with zero runtime dependencies.",
|
||||
"url": "https://deusdata.github.io/codebase-memory-mcp/",
|
||||
"downloadUrl": "https://github.com/DeusData/codebase-memory-mcp/releases/latest",
|
||||
"codeRepository": "https://github.com/DeusData/codebase-memory-mcp",
|
||||
"programmingLanguage": "C",
|
||||
"license": "https://opensource.org/licenses/MIT",
|
||||
"isAccessibleForFree": true,
|
||||
"offers": {
|
||||
"@type": "Offer",
|
||||
"price": "0",
|
||||
"priceCurrency": "USD"
|
||||
},
|
||||
"featureList": [
|
||||
"Indexes 158 programming languages via vendored tree-sitter grammars",
|
||||
"Hybrid LSP semantic type resolution for Python, TypeScript/JavaScript, PHP, C#, Go, C/C++, Java, Kotlin, and Rust",
|
||||
"14 MCP tools for structural search, call-path tracing, and Cypher graph queries",
|
||||
"Semantic vector code search via bundled nomic-embed-code embeddings (no API key, fully local)",
|
||||
"Semantic graph edges (SEMANTICALLY_RELATED) and near-clone detection (SIMILAR_TO, MinHash + LSH)",
|
||||
"Cross-service linking for HTTP, gRPC, GraphQL, tRPC, and pub/sub channels with confidence scoring",
|
||||
"Cross-repo intelligence with CROSS_* edges across multiple indexed repositories",
|
||||
"Data-flow tracing with argument-to-parameter mapping",
|
||||
"Change-impact analysis mapping git diffs to affected symbols and blast radius",
|
||||
"Architecture Decision Record (ADR) persistence across sessions",
|
||||
"Dead-code detection with entry-point filtering",
|
||||
"Infrastructure-as-code indexing for Dockerfiles, Kubernetes, and Kustomize",
|
||||
"Built-in 3D graph visualization UI",
|
||||
"Auto-sync background watcher for incremental re-indexing",
|
||||
"One-command install for 11 AI coding agents"
|
||||
],
|
||||
"author": {
|
||||
"@type": "Organization",
|
||||
"name": "DeusData",
|
||||
"url": "https://github.com/DeusData"
|
||||
},
|
||||
"citation": {
|
||||
"@type": "ScholarlyArticle",
|
||||
"name": "Codebase-Memory: Tree-Sitter-Based Knowledge Graphs for LLM Code Exploration via MCP",
|
||||
"identifier": "arXiv:2603.27277",
|
||||
"url": "https://arxiv.org/abs/2603.27277"
|
||||
}
|
||||
}
|
||||
</script>
|
||||
|
||||
<!-- Structured data: Organization + WebSite identity -->
|
||||
<script type="application/ld+json">
|
||||
{
|
||||
"@context": "https://schema.org",
|
||||
"@graph": [
|
||||
{
|
||||
"@type": "Organization",
|
||||
"@id": "https://deusdata.github.io/codebase-memory-mcp/#org",
|
||||
"name": "DeusData",
|
||||
"url": "https://github.com/DeusData",
|
||||
"sameAs": ["https://github.com/DeusData/codebase-memory-mcp"]
|
||||
},
|
||||
{
|
||||
"@type": "WebSite",
|
||||
"@id": "https://deusdata.github.io/codebase-memory-mcp/#website",
|
||||
"url": "https://deusdata.github.io/codebase-memory-mcp/",
|
||||
"name": "codebase-memory-mcp",
|
||||
"publisher": { "@id": "https://deusdata.github.io/codebase-memory-mcp/#org" }
|
||||
},
|
||||
{
|
||||
"@type": "BreadcrumbList",
|
||||
"itemListElement": [
|
||||
{ "@type": "ListItem", "position": 1, "name": "Home", "item": "https://deusdata.github.io/codebase-memory-mcp/" },
|
||||
{ "@type": "ListItem", "position": 2, "name": "GitHub", "item": "https://github.com/DeusData/codebase-memory-mcp" }
|
||||
]
|
||||
}
|
||||
]
|
||||
}
|
||||
</script>
|
||||
|
||||
<!-- Structured data: FAQPage (machine-readable Q&A for answer engines) -->
|
||||
<script type="application/ld+json">
|
||||
{
|
||||
"@context": "https://schema.org",
|
||||
"@type": "FAQPage",
|
||||
"mainEntity": [
|
||||
{
|
||||
"@type": "Question",
|
||||
"name": "What is codebase-memory-mcp?",
|
||||
"acceptedAnswer": {
|
||||
"@type": "Answer",
|
||||
"text": "codebase-memory-mcp is an open-source Model Context Protocol (MCP) server that indexes a codebase into a persistent knowledge graph of functions, classes, call chains, HTTP routes, and cross-service links. AI coding agents query that graph instead of reading files one by one, answering structural questions with roughly 120x fewer tokens. It parses 158 languages and ships as a single static C binary with no runtime dependencies."
|
||||
}
|
||||
},
|
||||
{
|
||||
"@type": "Question",
|
||||
"name": "How does codebase-memory-mcp reduce token usage?",
|
||||
"acceptedAnswer": {
|
||||
"@type": "Answer",
|
||||
"text": "AI agents normally explore code through repeated grep-then-read cycles, which burn large numbers of tokens. codebase-memory-mcp answers the same structural questions from a precomputed graph. In a five-query benchmark it used about 3,400 tokens versus about 412,000 tokens for file-by-file search — a roughly 120x reduction."
|
||||
}
|
||||
},
|
||||
{
|
||||
"@type": "Question",
|
||||
"name": "Which programming languages does codebase-memory-mcp support?",
|
||||
"acceptedAnswer": {
|
||||
"@type": "Answer",
|
||||
"text": "It supports 158 languages through vendored tree-sitter grammars compiled into the binary, including Python, Go, JavaScript, TypeScript, Rust, Java, C, C++, C#, PHP, Ruby, Kotlin, Swift, and many more. Nine language families — Python, TypeScript/JavaScript, PHP, C#, Go, C/C++, Java, Kotlin, and Rust — additionally get Hybrid LSP semantic type resolution."
|
||||
}
|
||||
},
|
||||
{
|
||||
"@type": "Question",
|
||||
"name": "What is Hybrid LSP?",
|
||||
"acceptedAnswer": {
|
||||
"@type": "Answer",
|
||||
"text": "Hybrid LSP is a lightweight C implementation of language type-resolution algorithms, structurally inspired by and compatible with major language servers (tsserver, pyright, gopls, Roslyn), embedded directly into the binary. It runs alongside tree-sitter to resolve imports, generics, inheritance, and stdlib types — so call edges in the graph mirror what an IDE 'Go to Definition' would resolve, with no language-server process or per-project setup."
|
||||
}
|
||||
},
|
||||
{
|
||||
"@type": "Question",
|
||||
"name": "Which AI coding agents work with codebase-memory-mcp?",
|
||||
"acceptedAnswer": {
|
||||
"@type": "Answer",
|
||||
"text": "A single install command configures 11 agents: Claude Code, Codex CLI, Gemini CLI, Zed, OpenCode, Antigravity, Aider, KiloCode, VS Code, OpenClaw, and Kiro. Any MCP-compatible client can use the server."
|
||||
}
|
||||
},
|
||||
{
|
||||
"@type": "Question",
|
||||
"name": "Does codebase-memory-mcp send my code anywhere?",
|
||||
"acceptedAnswer": {
|
||||
"@type": "Answer",
|
||||
"text": "No. All indexing and querying happen 100% locally on your machine. There is no embedded LLM and no API key — your MCP client acts as the intelligence layer. Release binaries are signed, checksummed, and scanned by 70+ antivirus engines."
|
||||
}
|
||||
},
|
||||
{
|
||||
"@type": "Question",
|
||||
"name": "Does codebase-memory-mcp support semantic or natural-language code search?",
|
||||
"acceptedAnswer": {
|
||||
"@type": "Answer",
|
||||
"text": "Yes. Alongside structural and BM25 full-text search, it offers semantic vector search over the whole graph via the search_graph tool's semantic_query parameter. It is powered by nomic-embed-code embeddings compiled directly into the binary (768-dimensional), so it bridges vocabulary gaps — finding 'publish' when you search 'send' — with no API key, no Ollama, and no Docker. The indexer also generates SEMANTICALLY_RELATED edges between conceptually similar functions and SIMILAR_TO edges for near-duplicate and clone detection."
|
||||
}
|
||||
},
|
||||
{
|
||||
"@type": "Question",
|
||||
"name": "Can codebase-memory-mcp detect duplicate or near-clone code?",
|
||||
"acceptedAnswer": {
|
||||
"@type": "Answer",
|
||||
"text": "Yes. During indexing it builds SIMILAR_TO edges using MinHash plus LSH with Jaccard scoring, surfacing near-duplicate and copy-pasted functions across the codebase. Combined with SEMANTICALLY_RELATED edges, this makes refactoring candidates and redundant implementations queryable through the graph."
|
||||
}
|
||||
}
|
||||
]
|
||||
}
|
||||
</script>
|
||||
|
||||
<style>
|
||||
:root {
|
||||
--bg: #0d1117;
|
||||
--surface: #161b22;
|
||||
--border: #30363d;
|
||||
--text: #e6edf3;
|
||||
--text-secondary: #8b949e;
|
||||
--accent: #58a6ff;
|
||||
--accent-hover: #79c0ff;
|
||||
--green: #3fb950;
|
||||
--red: #f85149;
|
||||
}
|
||||
* { margin: 0; padding: 0; box-sizing: border-box; }
|
||||
body {
|
||||
font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Helvetica, Arial, sans-serif;
|
||||
background: var(--bg);
|
||||
color: var(--text);
|
||||
line-height: 1.6;
|
||||
}
|
||||
a { color: var(--accent); }
|
||||
.container { max-width: 960px; margin: 0 auto; padding: 0 24px; }
|
||||
.muted { color: var(--text-secondary); }
|
||||
cite { color: var(--text-secondary); font-style: normal; font-size: 0.8rem; }
|
||||
cite a { color: var(--text-secondary); }
|
||||
|
||||
/* Nav */
|
||||
nav {
|
||||
border-bottom: 1px solid var(--border);
|
||||
position: sticky;
|
||||
top: 0;
|
||||
background: rgba(13,17,23,0.85);
|
||||
backdrop-filter: blur(8px);
|
||||
z-index: 10;
|
||||
}
|
||||
nav .container {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
justify-content: center;
|
||||
height: 56px;
|
||||
}
|
||||
nav .links a {
|
||||
text-decoration: none;
|
||||
color: var(--text-secondary);
|
||||
margin-left: 20px;
|
||||
font-size: 0.9rem;
|
||||
}
|
||||
nav .links a:hover { color: var(--text); }
|
||||
nav .links a:first-child { margin-left: 0; }
|
||||
nav .links a.nav-star { color: var(--green); font-weight: 600; }
|
||||
nav .links a.nav-star:hover { color: var(--accent-hover); }
|
||||
@media (max-width: 640px) { nav .links a:not(.nav-cta) { display: none; } }
|
||||
|
||||
/* Hero */
|
||||
.hero { padding: 72px 0 32px; text-align: center; }
|
||||
.hero h1 { font-size: 2.5rem; font-weight: 700; margin-bottom: 4px; }
|
||||
.hero .by-line { color: #6e7681; font-size: 0.95rem; margin-bottom: 24px; }
|
||||
.hero .tagline {
|
||||
font-size: 1.2rem;
|
||||
color: var(--text-secondary);
|
||||
margin: 0 auto 32px;
|
||||
max-width: 720px;
|
||||
}
|
||||
.hero .stat {
|
||||
display: inline-block;
|
||||
background: var(--surface);
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 8px;
|
||||
padding: 16px 24px;
|
||||
margin: 8px;
|
||||
}
|
||||
.hero .stat .number { font-size: 2rem; font-weight: 700; color: var(--accent); }
|
||||
.hero .stat .label { font-size: 0.875rem; color: var(--text-secondary); }
|
||||
.cta-buttons { margin-top: 32px; }
|
||||
.cta-buttons a {
|
||||
display: inline-block;
|
||||
padding: 12px 24px;
|
||||
border-radius: 6px;
|
||||
text-decoration: none;
|
||||
font-weight: 600;
|
||||
margin: 4px;
|
||||
}
|
||||
.cta-primary { background: var(--accent); color: #0d1117; }
|
||||
.cta-primary:hover { background: var(--accent-hover); }
|
||||
.cta-secondary { border: 1px solid var(--border); color: var(--text); }
|
||||
.cta-secondary:hover { border-color: var(--text-secondary); }
|
||||
|
||||
/* Screenshot */
|
||||
.screenshot { margin: 40px 0; text-align: center; }
|
||||
.screenshot img {
|
||||
max-width: 100%;
|
||||
height: auto;
|
||||
border-radius: 12px;
|
||||
border: 1px solid var(--border);
|
||||
box-shadow: 0 8px 32px rgba(0,0,0,0.4);
|
||||
}
|
||||
.screenshot .caption { margin-top: 12px; font-size: 0.875rem; color: var(--text-secondary); }
|
||||
|
||||
/* Research callout */
|
||||
.research {
|
||||
display: flex;
|
||||
align-items: center;
|
||||
gap: 20px;
|
||||
flex-wrap: wrap;
|
||||
background: var(--surface);
|
||||
border: 1px solid var(--border);
|
||||
border-left: 3px solid var(--accent);
|
||||
border-radius: 8px;
|
||||
padding: 20px 24px;
|
||||
margin: 8px 0 0;
|
||||
}
|
||||
.research .arxiv-badge {
|
||||
display: inline-flex;
|
||||
align-items: center;
|
||||
gap: 8px;
|
||||
flex-shrink: 0;
|
||||
font-family: 'SF Mono', monospace;
|
||||
font-size: 0.8rem;
|
||||
font-weight: 700;
|
||||
color: #b31b1b;
|
||||
background: #fff;
|
||||
border-radius: 6px;
|
||||
padding: 8px 12px;
|
||||
text-decoration: none;
|
||||
}
|
||||
.research p { font-size: 0.92rem; margin: 0; }
|
||||
.research .label { color: var(--accent); font-weight: 700; }
|
||||
|
||||
/* Sections */
|
||||
section { padding: 56px 0; border-top: 1px solid var(--border); }
|
||||
section h2 { font-size: 1.75rem; margin-bottom: 8px; scroll-margin-top: 72px; }
|
||||
section .lead { font-size: 1.05rem; margin-bottom: 24px; }
|
||||
section h3 { font-size: 1.1rem; margin: 24px 0 8px; }
|
||||
|
||||
/* Code / install */
|
||||
.install-block {
|
||||
background: var(--surface);
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 8px;
|
||||
padding: 20px 24px;
|
||||
font-family: 'SF Mono', 'Fira Code', monospace;
|
||||
font-size: 0.9rem;
|
||||
overflow-x: auto;
|
||||
margin: 16px 0;
|
||||
}
|
||||
.install-block .comment { color: var(--text-secondary); }
|
||||
.install-block .cmd { color: var(--green); }
|
||||
code {
|
||||
font-family: 'SF Mono', 'Fira Code', monospace;
|
||||
background: var(--surface);
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 4px;
|
||||
padding: 1px 6px;
|
||||
font-size: 0.85em;
|
||||
}
|
||||
|
||||
/* Tables */
|
||||
table { width: 100%; border-collapse: collapse; margin: 16px 0; }
|
||||
th, td { padding: 10px 16px; text-align: left; border-bottom: 1px solid var(--border); }
|
||||
th {
|
||||
background: var(--surface);
|
||||
font-weight: 600;
|
||||
font-size: 0.875rem;
|
||||
color: var(--text-secondary);
|
||||
text-transform: uppercase;
|
||||
letter-spacing: 0.5px;
|
||||
}
|
||||
td { font-size: 0.9rem; }
|
||||
.win { color: var(--green); font-weight: 600; }
|
||||
.benchmark-table td:nth-child(2), .benchmark-table td:nth-child(3), .benchmark-table td:nth-child(4) {
|
||||
text-align: right; font-family: 'SF Mono', monospace; font-size: 0.85rem;
|
||||
}
|
||||
.benchmark-table th:nth-child(2), .benchmark-table th:nth-child(3), .benchmark-table th:nth-child(4) { text-align: right; }
|
||||
|
||||
/* Features grid */
|
||||
.features {
|
||||
display: grid;
|
||||
grid-template-columns: repeat(auto-fit, minmax(280px, 1fr));
|
||||
gap: 20px;
|
||||
margin-top: 24px;
|
||||
}
|
||||
.feature {
|
||||
background: var(--surface);
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 8px;
|
||||
padding: 24px;
|
||||
}
|
||||
.feature h3 { font-size: 1rem; margin: 0 0 8px; }
|
||||
.feature p { font-size: 0.875rem; color: var(--text-secondary); }
|
||||
|
||||
/* Hybrid LSP table */
|
||||
.lsp-table td:first-child { font-weight: 600; white-space: nowrap; }
|
||||
.lsp-table td { vertical-align: top; }
|
||||
|
||||
/* Releases */
|
||||
.release {
|
||||
background: var(--surface);
|
||||
border: 1px solid var(--border);
|
||||
border-radius: 8px;
|
||||
padding: 16px 20px;
|
||||
margin: 12px 0;
|
||||
}
|
||||
.release-head { display: flex; align-items: baseline; justify-content: space-between; flex-wrap: wrap; gap: 8px; }
|
||||
.release-tag { font-weight: 700; font-size: 1.05rem; }
|
||||
.release-date { color: var(--text-secondary); font-size: 0.85rem; }
|
||||
.release details { margin-top: 10px; }
|
||||
.release summary { cursor: pointer; color: var(--accent); font-size: 0.9rem; }
|
||||
.release-body { margin-top: 12px; font-size: 0.875rem; color: var(--text-secondary); }
|
||||
.release-body h4, .release-body h5, .release-body h6 { font-size: 0.95rem; color: var(--text); margin: 12px 0 6px; }
|
||||
.release-body ul { margin: 6px 0 6px 20px; }
|
||||
.release-body code { font-size: 0.8em; }
|
||||
.skeleton { color: var(--text-secondary); font-size: 0.9rem; }
|
||||
|
||||
/* FAQ */
|
||||
.faq h3 { font-size: 1.05rem; margin: 24px 0 6px; }
|
||||
.faq p { color: var(--text-secondary); margin-bottom: 8px; }
|
||||
|
||||
/* Footer */
|
||||
footer {
|
||||
padding: 40px 0;
|
||||
text-align: center;
|
||||
color: var(--text-secondary);
|
||||
font-size: 0.875rem;
|
||||
border-top: 1px solid var(--border);
|
||||
}
|
||||
footer a { color: var(--accent); text-decoration: none; }
|
||||
|
||||
@media (max-width: 640px) {
|
||||
.hero h1 { font-size: 1.75rem; }
|
||||
.hero .stat { display: block; margin: 8px 0; }
|
||||
}
|
||||
</style>
|
||||
</head>
|
||||
<body>
|
||||
|
||||
<nav>
|
||||
<div class="container">
|
||||
<span class="links">
|
||||
<a href="#what-is-it">What is it</a>
|
||||
<a href="#install">Install</a>
|
||||
<a href="#hybrid-lsp">Hybrid LSP</a>
|
||||
<a href="#semantic-search">Semantic search</a>
|
||||
<a href="#releases">Releases</a>
|
||||
<a href="#faq">FAQ</a>
|
||||
<a class="nav-cta nav-star" href="https://github.com/DeusData/codebase-memory-mcp" title="Star codebase-memory-mcp on GitHub" aria-label="Star this project on GitHub">★ Star on GitHub</a>
|
||||
</span>
|
||||
</div>
|
||||
</nav>
|
||||
|
||||
<main class="container">
|
||||
<header class="hero">
|
||||
<h1>codebase-memory-mcp</h1>
|
||||
<p class="by-line">by DeusData</p>
|
||||
<p class="tagline">
|
||||
The fastest, most efficient code intelligence engine for AI coding agents. It indexes any
|
||||
repository into a persistent knowledge graph — full-indexing an average repo in seconds and the
|
||||
Linux kernel in 3 minutes — so your agent answers structural questions with ~120x fewer tokens.
|
||||
Tree-sitter parsing across 158 languages, Hybrid LSP type resolution, single static C binary.
|
||||
</p>
|
||||
<div>
|
||||
<div class="stat"><div class="number">~120x</div><div class="label">fewer tokens</div></div>
|
||||
<div class="stat"><div class="number">158</div><div class="label">languages</div></div>
|
||||
<div class="stat"><div class="number">3 min</div><div class="label">Linux kernel index</div></div>
|
||||
<div class="stat"><div class="number">11</div><div class="label">agents supported</div></div>
|
||||
</div>
|
||||
<div class="cta-buttons">
|
||||
<a href="https://github.com/DeusData/codebase-memory-mcp" class="cta-primary">View on GitHub</a>
|
||||
<a href="https://github.com/DeusData/codebase-memory-mcp/releases/latest" class="cta-secondary">Download latest release</a>
|
||||
</div>
|
||||
</header>
|
||||
|
||||
<div class="screenshot">
|
||||
<img src="graph-ui-screenshot.png" width="1538" height="932" loading="lazy" decoding="async"
|
||||
alt="3D knowledge-graph visualization of the codebase-memory-mcp graph showing thousands of nodes and edges">
|
||||
<p class="caption">Built-in 3D graph visualization (UI variant) — explore your knowledge graph at <code>localhost:9749</code>.</p>
|
||||
</div>
|
||||
|
||||
<aside class="research" aria-label="Research">
|
||||
<a class="arxiv-badge" href="https://arxiv.org/abs/2603.27277" rel="noopener">arXiv:2603.27277</a>
|
||||
<p>
|
||||
<span class="label">Research preprint.</span>
|
||||
The design and benchmarks are described in the preprint
|
||||
<a href="https://arxiv.org/abs/2603.27277"><em>Codebase-Memory: Tree-Sitter-Based Knowledge Graphs
|
||||
for LLM Code Exploration via MCP</em></a>. Evaluated across 31 real-world repositories:
|
||||
<strong>83% answer quality, 10× fewer tokens, and 2.1× fewer tool calls</strong> versus
|
||||
file-by-file exploration.
|
||||
</p>
|
||||
</aside>
|
||||
|
||||
<section id="what-is-it">
|
||||
<h2>What is codebase-memory-mcp?</h2>
|
||||
<p class="lead">
|
||||
codebase-memory-mcp is an open-source <a href="https://modelcontextprotocol.io/">Model Context
|
||||
Protocol (MCP)</a> server that indexes a codebase into a persistent knowledge graph of functions,
|
||||
classes, call chains, HTTP routes, and cross-service links. Instead of reading files one at a time,
|
||||
an AI coding agent queries the graph — answering structural questions with roughly 120x fewer
|
||||
tokens. It parses 158 languages and ships as a single static C binary with zero runtime dependencies.
|
||||
</p>
|
||||
<p class="muted">
|
||||
It is a structural-analysis backend, not a chatbot: there is no embedded LLM and no API key. Your
|
||||
MCP client (Claude Code, or any MCP-compatible agent) is the intelligence layer; codebase-memory-mcp
|
||||
builds and serves the graph. All processing happens locally — your code never leaves your machine.
|
||||
</p>
|
||||
</section>
|
||||
|
||||
<section id="problem">
|
||||
<h2>Why do AI agents waste tokens exploring code?</h2>
|
||||
<p class="lead">
|
||||
AI coding agents explore codebases by reading files one at a time. Every structural question
|
||||
triggers a cascade of grep → read file → grep again → read more files. The cost compounds fast.
|
||||
</p>
|
||||
<p style="margin-bottom: 16px;">
|
||||
Across five structural questions about a real codebase, file-by-file search consumed
|
||||
<strong style="color: var(--red);">~412,000 tokens</strong>; the same questions answered from the
|
||||
knowledge graph took <strong style="color: var(--green);">~3,400 tokens</strong> — a ~120x reduction.
|
||||
</p>
|
||||
<p class="muted">
|
||||
The win is not about fitting the context window. It is cost (at $3–15 per million tokens, exploration
|
||||
adds up), latency (sub-millisecond graph queries versus seconds of file reading), and accuracy
|
||||
(less noise means better answers and no "lost in the middle" problem).
|
||||
</p>
|
||||
<p><cite>Source: project benchmark, 5 structural queries — see the
|
||||
<a href="https://github.com/DeusData/codebase-memory-mcp/blob/main/docs/BENCHMARK.md">full benchmark report</a>.</cite></p>
|
||||
</section>
|
||||
|
||||
<section id="install">
|
||||
<h2>How do I install codebase-memory-mcp?</h2>
|
||||
<p class="lead">
|
||||
Install with a single command, then tell your agent to index the project. It is a single static C binary for
|
||||
macOS, Linux, and Windows — no Docker, no runtime dependencies, no API key.
|
||||
</p>
|
||||
<div class="install-block">
|
||||
<span class="comment"># 1. One-line install (macOS / Linux). Add --ui for the 3D graph UI.</span><br>
|
||||
<span class="cmd">curl -fsSL https://raw.githubusercontent.com/DeusData/codebase-memory-mcp/main/install.sh | bash</span><br><br>
|
||||
<span class="comment"># 2. The installer auto-detects and configures every installed agent.</span><br><br>
|
||||
<span class="comment"># 3. Restart your agent, then say:</span><br>
|
||||
<span class="cmd">"Index this project"</span>
|
||||
</div>
|
||||
<p class="muted">
|
||||
One command configures all 11 supported agents: Claude Code, Codex CLI, Gemini CLI, Zed, OpenCode,
|
||||
Antigravity, Aider, KiloCode, VS Code, OpenClaw, and Kiro — with MCP entries, instruction files, and
|
||||
pre-tool hooks for each. Windows users run <code>install.ps1</code>. Also available via
|
||||
<code>npm</code>, <code>pip</code>, Homebrew, Scoop, Winget, Chocolatey, AUR, and <code>go install</code>.
|
||||
</p>
|
||||
</section>
|
||||
|
||||
<section id="hybrid-lsp">
|
||||
<h2>What is Hybrid LSP?</h2>
|
||||
<p class="lead">
|
||||
Hybrid LSP is semantic type resolution beyond tree-sitter. Tree-sitter alone produces a syntactic
|
||||
AST — it handles naming, structure, and call sites, but it cannot tell that
|
||||
<code>user.profile.display_name()</code> resolves to <code>Profile.display_name</code> declared
|
||||
three modules away, because it does not track imports, generics, inheritance, or stdlib types.
|
||||
</p>
|
||||
<p style="margin-bottom: 16px;">
|
||||
codebase-memory-mcp ships a <strong>lightweight C implementation of language type-resolution
|
||||
algorithms, structurally inspired by and compatible with major language servers</strong> —
|
||||
tsserver/typescript-go, pyright, gopls, Roslyn, Eclipse JDT, and rust-analyzer —
|
||||
embedded directly into the single static C binary. There is no language-server process, no
|
||||
per-project setup, and no API key. This layer runs alongside tree-sitter on every parse and refines
|
||||
<code>CALLS</code>, <code>USAGE</code>, and <code>RESOLVED_CALLS</code> edges with type information,
|
||||
so the graph mirrors what an IDE "Go to Definition" would resolve.
|
||||
</p>
|
||||
<h3>Languages with full Hybrid LSP</h3>
|
||||
<table class="lsp-table">
|
||||
<thead><tr><th>Language</th><th>What it resolves</th></tr></thead>
|
||||
<tbody>
|
||||
<tr><td>Python</td><td>Imports and dotted submodule walks, dataclasses, <code>Self</code> return types, generics, <code>@property</code>, <code>match/case</code> patterns, SQLAlchemy 2.0 <code>Mapped[T]</code>, Pydantic models, <code>typing</code> annotations, async/await, isinstance/walrus narrowing, and common stdlib.</td></tr>
|
||||
<tr><td>TypeScript / JavaScript / JSX / TSX</td><td>Generics, JSX component dispatch, JSDoc inference for plain JS, <code>.d.ts</code> declarations, module re-exports, and method chaining via return-type propagation across a shared cross-file registry.</td></tr>
|
||||
<tr><td>PHP</td><td>Namespaces, traits, late-static-binding, PHPDoc inference, parameter binding, and return-type inference.</td></tr>
|
||||
<tr><td>C#</td><td>Global usings, file-scoped namespaces, records (incl. C# 12 primary constructors), LINQ method syntax, <code>async Task<T></code>/<code>ValueTask<T></code> unwrap, generic methods, <code>var</code> inference, and common BCL stdlib.</td></tr>
|
||||
<tr><td>Go</td><td>Pre-built per-package cross-file registry, generics, embedded structs, interface satisfaction, and package-aware import resolution.</td></tr>
|
||||
<tr><td>C / C++</td><td>Shared cross-language registry: macros, <code>typedef</code> chains, and header-vs-source linking on the C side; templates, namespaces, <code>auto</code> inference, and class-hierarchy method resolution on the C++ side.</td></tr>
|
||||
<tr><td>Java <em>(new in v0.8.0)</em></td><td>Imports (single-type, on-demand, static), class hierarchies with <code>this</code>/<code>super</code> dispatch, generics, annotations, overload matching by arity and parameter types, lambdas and method references bound to functional interfaces, and common JDK stdlib.</td></tr>
|
||||
<tr><td>Kotlin <em>(new in v0.8.0)</em></td><td>Imports and same-package resolution, classes / objects / companion objects, extension functions, data classes, nullable-type unwrapping, scope functions (<code>let</code>/<code>apply</code>/<code>run</code>/<code>also</code>/<code>with</code>), infix calls, and common stdlib.</td></tr>
|
||||
<tr><td>Rust <em>(new in v0.8.0)</em></td><td><code>use</code> declarations and module paths, <code>impl</code> blocks and trait methods, struct fields, generics with trait bounds, operator-trait desugaring, derive-macro method synthesis, UFCS static paths, and common std prelude.</td></tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<p class="muted">
|
||||
The two-layer pipeline runs a fast syntactic tree-sitter pass for every one of the 158 languages,
|
||||
then a type-aware Hybrid LSP pass on top for the families above. Languages without a Hybrid LSP pass
|
||||
yet fall back to textual resolution, so you always get an answer.
|
||||
</p>
|
||||
</section>
|
||||
|
||||
<section id="semantic-search">
|
||||
<h2>Can it do semantic and natural-language code search?</h2>
|
||||
<p class="lead">
|
||||
Yes. Beyond structural and full-text search, codebase-memory-mcp performs <strong>semantic
|
||||
vector search</strong> across the whole graph — so you can find code by meaning, not just by
|
||||
name. A search for <code>send</code> surfaces functions named <code>publish</code>,
|
||||
<code>emit</code>, or <code>dispatch</code>.
|
||||
</p>
|
||||
<p style="margin-bottom: 16px;">
|
||||
It is powered by <strong>nomic-embed-code embeddings compiled directly into the binary</strong>
|
||||
(768-dimensional, int8). There is no API key, no Ollama, and no Docker — the embeddings run
|
||||
on-device, so semantic search stays 100% local like everything else. Results combine
|
||||
<strong>11 signals</strong> (TF-IDF, API/type/decorator signatures, AST profiles, data flow,
|
||||
Halstead-lite complexity, MinHash, module proximity, and graph diffusion) into one relevance score.
|
||||
</p>
|
||||
<h3>Meaning-aware edges in the graph</h3>
|
||||
<p style="margin-bottom: 16px;">
|
||||
The indexer also writes two kinds of meaning-aware edges, queryable like any other relationship:
|
||||
</p>
|
||||
<table>
|
||||
<thead><tr><th>Edge</th><th>What it captures</th></tr></thead>
|
||||
<tbody>
|
||||
<tr><td><code>SEMANTICALLY_RELATED</code></td><td>Conceptually similar functions whose names and tokens differ — vocabulary-mismatch matches, scored ≥ 0.80, within the same language.</td></tr>
|
||||
<tr><td><code>SIMILAR_TO</code></td><td>Near-duplicate and copy-pasted code, detected with MinHash + LSH and Jaccard scoring — ideal for finding clones and refactor candidates.</td></tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<div class="install-block" style="margin-top:16px;">
|
||||
<span class="comment"># Find code by meaning, not by name — embeddings run locally, no API key.</span><br>
|
||||
<span class="cmd">search_graph(semantic_query=["retry", "backoff", "exponential"])</span>
|
||||
</div>
|
||||
<p class="muted">
|
||||
Semantic and similarity edges are computed in <code>full</code> and <code>moderate</code> index
|
||||
modes; <code>fast</code> mode skips them for the lowest-latency indexing.
|
||||
</p>
|
||||
</section>
|
||||
|
||||
<section id="benchmark">
|
||||
<h2>How much does the knowledge graph save?</h2>
|
||||
<p class="lead">
|
||||
Each common structural question costs hundreds of tokens against the graph versus tens of thousands
|
||||
via file-by-file search. Totals across five queries: ~3,400 vs ~412,000 tokens.
|
||||
</p>
|
||||
<table class="benchmark-table">
|
||||
<thead>
|
||||
<tr><th>Question type</th><th>Graph</th><th>File-by-file</th><th>Savings</th></tr>
|
||||
</thead>
|
||||
<tbody>
|
||||
<tr><td>Find function by pattern</td><td>~200</td><td>~45,000</td><td class="win">225x</td></tr>
|
||||
<tr><td>Trace call chain (depth 3)</td><td>~800</td><td>~120,000</td><td class="win">150x</td></tr>
|
||||
<tr><td>Dead code detection</td><td>~500</td><td>~85,000</td><td class="win">170x</td></tr>
|
||||
<tr><td>List all routes</td><td>~400</td><td>~62,000</td><td class="win">155x</td></tr>
|
||||
<tr><td>Architecture overview</td><td>~1,500</td><td>~100,000</td><td class="win">67x</td></tr>
|
||||
<tr style="font-weight: 700;"><td>Total</td><td>~3,400</td><td>~412,000</td><td class="win">~121x</td></tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<p class="muted" style="font-size: 0.9rem;">
|
||||
A separate evaluation across 31 real-world repositories, described in the preprint, reported 83% answer quality,
|
||||
10x fewer tokens, and 2.1x fewer tool calls versus file-by-file exploration.
|
||||
</p>
|
||||
<p><cite>Source: <a href="https://arxiv.org/abs/2603.27277">“Codebase-Memory: Tree-Sitter-Based Knowledge
|
||||
Graphs for LLM Code Exploration via MCP”</a>, arXiv:2603.27277 — and the
|
||||
<a href="https://github.com/DeusData/codebase-memory-mcp/blob/main/docs/BENCHMARK.md">project benchmark report</a>.</cite></p>
|
||||
</section>
|
||||
|
||||
<section id="performance">
|
||||
<h2>How fast is it?</h2>
|
||||
<p class="lead">
|
||||
Indexing is RAM-first (LZ4 compression, in-memory SQLite, single dump at end) and memory is released
|
||||
to the OS afterward. Queries run in under a millisecond.
|
||||
</p>
|
||||
<table>
|
||||
<thead><tr><th>Operation</th><th>Time</th><th>Notes</th></tr></thead>
|
||||
<tbody>
|
||||
<tr><td>Linux kernel full index</td><td class="win">3 min</td><td>28M LOC, 75K files → 4.81M nodes, 7.72M edges</td></tr>
|
||||
<tr><td>Django full index</td><td class="win">~6 s</td><td>49K nodes, 196K edges</td></tr>
|
||||
<tr><td>Cypher query</td><td class="win"><1 ms</td><td>Relationship traversal</td></tr>
|
||||
<tr><td>Name search (regex)</td><td class="win"><10 ms</td><td>SQL LIKE pre-filtering</td></tr>
|
||||
<tr><td>Trace call path (depth 5)</td><td class="win"><10 ms</td><td>BFS traversal</td></tr>
|
||||
</tbody>
|
||||
</table>
|
||||
<p><cite>Source: project Performance benchmarks, measured on Apple M3 Pro.</cite></p>
|
||||
</section>
|
||||
|
||||
<section id="features">
|
||||
<h2>Features</h2>
|
||||
<div class="features">
|
||||
<div class="feature">
|
||||
<h3>158 languages</h3>
|
||||
<p>Python, Go, JS, TS, TSX, Rust, Java, C++, C#, C, PHP, Ruby, Kotlin, Scala, Zig, Elixir, Haskell, OCaml, Swift, Dart, Lean 4, and many more via vendored tree-sitter grammars compiled into the binary.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Hybrid LSP type resolution</h3>
|
||||
<p>Language-server-grade type inference for Python, TS/JS, PHP, C#, Go, C/C++, Java, Kotlin, and Rust — embedded in the binary, no server process or per-project setup.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Pure C, zero dependencies</h3>
|
||||
<p>A single static C binary for macOS, Linux, and Windows. No Docker, no runtime, no API keys. Download, run <code>install</code>, done.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Call-graph tracing</h3>
|
||||
<p>Trace callers and callees across files and packages with import-aware, type-inferred resolution. BFS traversal up to depth 5.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Dead-code detection</h3>
|
||||
<p>Find functions with zero callers, with smart filtering that excludes entry points like route handlers, <code>main()</code>, and framework decorators.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Cross-service linking</h3>
|
||||
<p>Matches REST routes to HTTP call sites across services with confidence scoring — and detects gRPC, GraphQL, and tRPC services plus pub/sub channels (<code>EMITS</code>/<code>LISTENS_ON</code> for Socket.IO, EventEmitter, and message buses) and async queue dispatch.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Infrastructure-as-code indexing</h3>
|
||||
<p>Dockerfiles, Kubernetes manifests, and Kustomize overlays become graph nodes with cross-references to the resources they configure.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Auto-sync</h3>
|
||||
<p>A background watcher detects changes and re-indexes incrementally. No manual reindex after editing files.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Team-shared graph artifact</h3>
|
||||
<p>Commit one zstd-compressed snapshot (<code>.codebase-memory/graph.db.zst</code>); teammates bootstrap from it and skip the full reindex.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>3D graph visualization</h3>
|
||||
<p>An optional UI binary serves an interactive 3D graph at <code>localhost:9749</code> to explore nodes, edges, and clusters visually.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>14 MCP tools</h3>
|
||||
<p><code>search_graph</code>, <code>trace_path</code>, <code>detect_changes</code>, <code>query_graph</code> (Cypher), <code>get_architecture</code>, <code>get_code_snippet</code>, <code>manage_adr</code>, and 7 more.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Cypher graph queries</h3>
|
||||
<p>Run read-only Cypher-style queries against the graph for multi-hop patterns that structured search can't express.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Semantic code search</h3>
|
||||
<p>Find code by meaning, not just name, via <code>semantic_query</code> vector search — powered by nomic-embed-code embeddings baked into the binary. No API key, fully local.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Clone & similarity detection</h3>
|
||||
<p><code>SIMILAR_TO</code> edges (MinHash + LSH) surface near-duplicate code; <code>SEMANTICALLY_RELATED</code> edges link conceptually similar functions across the graph.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Cross-repo intelligence</h3>
|
||||
<p>Index multiple repositories in one store and link them with <code>CROSS_*</code> edges. A multi-galaxy 3D layout and cross-repo architecture summary span the whole fleet.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Data-flow tracing</h3>
|
||||
<p><code>DATA_FLOWS</code> edges follow values from argument to parameter, with field-access chains — trace how data moves, not just who calls whom.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Change-impact analysis</h3>
|
||||
<p><code>detect_changes</code> maps an uncommitted git diff to affected symbols and their blast radius, with risk classification — see what a change touches before you ship it.</p>
|
||||
</div>
|
||||
<div class="feature">
|
||||
<h3>Architecture Decision Records</h3>
|
||||
<p><code>manage_adr</code> persists architectural decisions alongside the graph, so design rationale survives across sessions and teammates.</p>
|
||||
</div>
|
||||
</div>
|
||||
</section>
|
||||
|
||||
<section id="releases">
|
||||
<h2>What are the recent releases?</h2>
|
||||
<p class="lead">
|
||||
The latest release notes are loaded live from GitHub. Each entry links to its full changelog.
|
||||
</p>
|
||||
<div id="releases-list">
|
||||
<p class="skeleton">Loading recent releases from GitHub…</p>
|
||||
</div>
|
||||
<p style="margin-top: 16px;">
|
||||
<a href="https://github.com/DeusData/codebase-memory-mcp/releases">View all releases on GitHub →</a>
|
||||
</p>
|
||||
</section>
|
||||
|
||||
<section id="faq" class="faq">
|
||||
<h2>Frequently asked questions</h2>
|
||||
|
||||
<h3>Does codebase-memory-mcp send my code anywhere?</h3>
|
||||
<p>No. All indexing and querying happen 100% locally. There is no embedded LLM and no API key. Release
|
||||
binaries are signed, checksummed, and scanned by 70+ antivirus engines.</p>
|
||||
|
||||
<h3>Does it support semantic or natural-language code search?</h3>
|
||||
<p>Yes. Alongside structural and full-text search, <code>search_graph</code>'s <code>semantic_query</code>
|
||||
parameter runs vector search over the whole graph, powered by nomic-embed-code embeddings compiled
|
||||
into the binary — so it finds <code>publish</code> when you search <code>send</code>. No API key, no
|
||||
Ollama, no Docker; the embeddings run on-device. The indexer also builds <code>SEMANTICALLY_RELATED</code>
|
||||
edges between similar functions and <code>SIMILAR_TO</code> edges for near-clone detection.</p>
|
||||
|
||||
<h3>Do I need Docker or a runtime?</h3>
|
||||
<p>No. It is a single static C binary with zero runtime dependencies for macOS (arm64/amd64), Linux
|
||||
(arm64/amd64), and Windows (amd64).</p>
|
||||
|
||||
<h3>How does it stay up to date as I edit code?</h3>
|
||||
<p>A background watcher detects file changes and re-indexes incrementally — typically a sub-millisecond
|
||||
no-op when nothing changed. You only run a manual index for the first build or after a large
|
||||
<code>git pull</code>.</p>
|
||||
|
||||
<h3>Why is there no built-in LLM?</h3>
|
||||
<p>Other code-graph tools embed an LLM to translate natural language into graph queries, which means
|
||||
extra API keys and cost. With MCP, the agent you are already talking to is the query translator —
|
||||
codebase-memory-mcp just builds and serves the graph.</p>
|
||||
|
||||
<h3>Is it free and open source?</h3>
|
||||
<p>Yes. It is MIT licensed. The full source, signed release binaries, and checksums are on
|
||||
<a href="https://github.com/DeusData/codebase-memory-mcp">GitHub</a>.</p>
|
||||
</section>
|
||||
</main>
|
||||
|
||||
<footer>
|
||||
<div class="container">
|
||||
<p>
|
||||
Open source, MIT licensed.
|
||||
<a href="https://github.com/DeusData/codebase-memory-mcp">GitHub</a> ·
|
||||
<a href="https://github.com/DeusData/codebase-memory-mcp/releases/latest">Releases</a> ·
|
||||
<a href="https://github.com/DeusData/codebase-memory-mcp/blob/main/docs/BENCHMARK.md">Benchmarks</a> ·
|
||||
<a href="https://arxiv.org/abs/2603.27277">Paper</a>
|
||||
</p>
|
||||
</div>
|
||||
</footer>
|
||||
|
||||
<script>
|
||||
(function () {
|
||||
var REPO = 'DeusData/codebase-memory-mcp';
|
||||
var listEl = document.getElementById('releases-list');
|
||||
if (!listEl) return;
|
||||
|
||||
function esc(s) {
|
||||
return String(s)
|
||||
.replace(/&/g, '&').replace(/</g, '<').replace(/>/g, '>')
|
||||
.replace(/"/g, '"');
|
||||
}
|
||||
|
||||
// Minimal, safe Markdown → HTML for release bodies (escape first, then format).
|
||||
function renderMarkdown(md) {
|
||||
var lines = esc(md || '').split(/\r?\n/);
|
||||
var html = '', inList = false;
|
||||
function inline(t) {
|
||||
return t
|
||||
.replace(/`([^`]+)`/g, '<code>$1</code>')
|
||||
.replace(/\*\*([^*]+)\*\*/g, '<strong>$1</strong>')
|
||||
.replace(/\[([^\]]+)\]\((https?:\/\/[^)\s]+)\)/g,
|
||||
'<a href="$2" target="_blank" rel="nofollow noopener">$1</a>');
|
||||
}
|
||||
for (var i = 0; i < lines.length; i++) {
|
||||
var ln = lines[i];
|
||||
var h = ln.match(/^(#{1,6})\s+(.*)$/);
|
||||
var li = ln.match(/^\s*[-*]\s+(.*)$/);
|
||||
if (h) {
|
||||
if (inList) { html += '</ul>'; inList = false; }
|
||||
// Demote release-note headings to h4-h6 so they never pollute the page outline.
|
||||
var lvl = Math.min(h[1].length + 3, 6);
|
||||
html += '<h' + lvl + '>' + inline(h[2]) + '</h' + lvl + '>';
|
||||
} else if (li) {
|
||||
if (!inList) { html += '<ul>'; inList = true; }
|
||||
html += '<li>' + inline(li[1]) + '</li>';
|
||||
} else if (ln.trim() === '') {
|
||||
if (inList) { html += '</ul>'; inList = false; }
|
||||
} else {
|
||||
if (inList) { html += '</ul>'; inList = false; }
|
||||
html += '<p>' + inline(ln) + '</p>';
|
||||
}
|
||||
}
|
||||
if (inList) html += '</ul>';
|
||||
return html;
|
||||
}
|
||||
|
||||
function fmtDate(iso) {
|
||||
if (!iso) return '';
|
||||
var d = new Date(iso);
|
||||
if (isNaN(d)) return '';
|
||||
return d.toLocaleDateString('en-US', { year: 'numeric', month: 'short', day: 'numeric' });
|
||||
}
|
||||
|
||||
function renderRelease(r) {
|
||||
var tag = esc(r.tag_name || r.name || 'release');
|
||||
var name = r.name && r.name !== r.tag_name ? ' — ' + esc(r.name) : '';
|
||||
var url = esc(r.html_url || ('https://github.com/' + REPO + '/releases'));
|
||||
var date = fmtDate(r.published_at);
|
||||
var body = (r.body || '').trim();
|
||||
var bodyHtml = body
|
||||
? '<details><summary>Release notes</summary><div class="release-body">' + renderMarkdown(body) + '</div></details>'
|
||||
: '<p class="release-body"><a href="' + url + '" target="_blank" rel="noopener">View on GitHub →</a></p>';
|
||||
return '<article class="release">'
|
||||
+ '<div class="release-head">'
|
||||
+ '<span class="release-tag"><a href="' + url + '" target="_blank" rel="noopener">' + tag + '</a>' + name + '</span>'
|
||||
+ '<span class="release-date">' + date + '</span>'
|
||||
+ '</div>' + bodyHtml + '</article>';
|
||||
}
|
||||
|
||||
fetch('https://api.github.com/repos/' + REPO + '/releases?per_page=5', {
|
||||
headers: { 'Accept': 'application/vnd.github+json' }
|
||||
})
|
||||
.then(function (res) { if (!res.ok) throw new Error('HTTP ' + res.status); return res.json(); })
|
||||
.then(function (data) {
|
||||
if (!Array.isArray(data) || data.length === 0) throw new Error('no releases');
|
||||
listEl.innerHTML = data.map(renderRelease).join('');
|
||||
})
|
||||
.catch(function () {
|
||||
listEl.innerHTML = '<p class="skeleton">Couldn\'t load releases right now — '
|
||||
+ '<a href="https://github.com/' + REPO + '/releases">view them on GitHub →</a></p>';
|
||||
});
|
||||
})();
|
||||
</script>
|
||||
|
||||
</body>
|
||||
</html>
|
||||
@@ -0,0 +1,25 @@
|
||||
# codebase-memory-mcp
|
||||
|
||||
> An open-source Model Context Protocol (MCP) server that indexes a codebase into a persistent knowledge graph of functions, classes, call chains, HTTP routes, and cross-service links. AI coding agents query the graph instead of reading files one by one, answering structural questions with roughly 120x fewer tokens (~3,400 vs ~412,000 across five structural queries). Parses 158 languages via vendored tree-sitter grammars, with Hybrid LSP semantic type resolution for Python, TypeScript/JavaScript, PHP, C#, Go, C/C++, Java, Kotlin, and Rust. It also generates semantic graph edges (SEMANTICALLY_RELATED for vocabulary-mismatch matches, SIMILAR_TO for near-clone detection) and supports semantic vector search via bundled nomic-embed-code embeddings compiled into the binary — no API key, no Ollama, no Docker. Ships as a single static C binary (zero runtime dependencies) for macOS, Linux, and Windows. All processing is local — the embeddings run on-device; there is no embedded LLM and no API key.
|
||||
|
||||
## Key facts
|
||||
|
||||
- License: MIT, open source.
|
||||
- Languages: 158 (158 vendored tree-sitter grammars compiled into the binary).
|
||||
- Hybrid LSP type resolution: 9 language families (Python, TypeScript/JavaScript/JSX/TSX, PHP, C#, Go, C/C++, Java, Kotlin, Rust) — a lightweight C implementation of language type-resolution algorithms, structurally inspired by and compatible with major language servers including tsserver, pyright, gopls, Roslyn, Eclipse JDT, and rust-analyzer.
|
||||
- MCP tools: 14 (search_graph incl. semantic_query vector search, trace_path (alias: trace_call_path), query_graph (Cypher), detect_changes, get_architecture, get_code_snippet, manage_adr, and more).
|
||||
- Semantic search: natural-language code discovery via bundled nomic-embed-code embeddings (768-dim, compiled into the binary); 11-signal combined scoring; fully local, no API key.
|
||||
- Semantic & similarity edges: SEMANTICALLY_RELATED (vocabulary-mismatch matches) and SIMILAR_TO (MinHash + LSH near-clone / duplicate detection).
|
||||
- Cross-repo intelligence: CROSS_* edges link nodes across multiple repos indexed in one store; multi-galaxy 3D layout and cross-repo architecture summary.
|
||||
- Cross-service linking: HTTP route ↔ call-site matching, plus gRPC/GraphQL/tRPC detection and pub/sub channels (EMITS/LISTENS_ON for Socket.IO, EventEmitter, generic buses).
|
||||
- Supported agents: 11 (Claude Code, Codex CLI, Gemini CLI, Zed, OpenCode, Antigravity, Aider, KiloCode, VS Code, OpenClaw, Kiro).
|
||||
- Performance: Linux kernel (28M LOC, 75K files) full index in 3 minutes → 4.81M nodes, 7.72M edges; Cypher queries in under 1ms.
|
||||
- Distribution: single static C binary; also npm, PyPI, Homebrew, Scoop, Winget, Chocolatey, AUR, and `go install`.
|
||||
|
||||
## Links
|
||||
|
||||
- Homepage: https://deusdata.github.io/codebase-memory-mcp/
|
||||
- Source code (GitHub): https://github.com/DeusData/codebase-memory-mcp
|
||||
- Latest release: https://github.com/DeusData/codebase-memory-mcp/releases/latest
|
||||
- Benchmark report: https://github.com/DeusData/codebase-memory-mcp/blob/main/docs/BENCHMARK.md
|
||||
- Research paper: https://arxiv.org/abs/2603.27277
|
||||
@@ -0,0 +1,33 @@
|
||||
# codebase-memory-mcp — all crawlers welcome, including AI answer engines.
|
||||
User-agent: *
|
||||
Allow: /
|
||||
|
||||
# Explicitly allow AI / LLM crawlers used by answer engines.
|
||||
User-agent: GPTBot
|
||||
Allow: /
|
||||
|
||||
User-agent: OAI-SearchBot
|
||||
Allow: /
|
||||
|
||||
User-agent: ChatGPT-User
|
||||
Allow: /
|
||||
|
||||
User-agent: ClaudeBot
|
||||
Allow: /
|
||||
|
||||
User-agent: Claude-Web
|
||||
Allow: /
|
||||
|
||||
User-agent: PerplexityBot
|
||||
Allow: /
|
||||
|
||||
User-agent: Google-Extended
|
||||
Allow: /
|
||||
|
||||
User-agent: Applebot-Extended
|
||||
Allow: /
|
||||
|
||||
User-agent: Bingbot
|
||||
Allow: /
|
||||
|
||||
Sitemap: https://deusdata.github.io/codebase-memory-mcp/sitemap.xml
|
||||
@@ -0,0 +1,8 @@
|
||||
<?xml version="1.0" encoding="UTF-8"?>
|
||||
<urlset xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
|
||||
<url>
|
||||
<loc>https://deusdata.github.io/codebase-memory-mcp/</loc>
|
||||
<lastmod>2026-06-12</lastmod>
|
||||
<priority>1.0</priority>
|
||||
</url>
|
||||
</urlset>
|
||||
Generated
+27
@@ -0,0 +1,27 @@
|
||||
{
|
||||
"nodes": {
|
||||
"nixpkgs": {
|
||||
"locked": {
|
||||
"lastModified": 1776255774,
|
||||
"narHash": "sha256-psVTpH6PK3q1htMJpmdz1hLF5pQgEshu7gQWgKO6t6Y=",
|
||||
"owner": "NixOS",
|
||||
"repo": "nixpkgs",
|
||||
"rev": "566acc07c54dc807f91625bb286cb9b321b5f42a",
|
||||
"type": "github"
|
||||
},
|
||||
"original": {
|
||||
"owner": "NixOS",
|
||||
"ref": "nixpkgs-unstable",
|
||||
"repo": "nixpkgs",
|
||||
"type": "github"
|
||||
}
|
||||
},
|
||||
"root": {
|
||||
"inputs": {
|
||||
"nixpkgs": "nixpkgs"
|
||||
}
|
||||
}
|
||||
},
|
||||
"root": "root",
|
||||
"version": 7
|
||||
}
|
||||
@@ -0,0 +1,50 @@
|
||||
{
|
||||
description = "codebase-memory-mcp — C11 MCP server for codebase indexing";
|
||||
|
||||
inputs.nixpkgs.url = "github:NixOS/nixpkgs/nixpkgs-unstable";
|
||||
|
||||
outputs = { self, nixpkgs }:
|
||||
let
|
||||
systems = [ "aarch64-darwin" "x86_64-darwin" "aarch64-linux" "x86_64-linux" ];
|
||||
forAllSystems = f: nixpkgs.lib.genAttrs systems (system: f nixpkgs.legacyPackages.${system});
|
||||
in
|
||||
{
|
||||
packages = forAllSystems (pkgs: {
|
||||
default = pkgs.stdenv.mkDerivation {
|
||||
pname = "codebase-memory-mcp";
|
||||
version = "0.6.0";
|
||||
|
||||
src = ./.;
|
||||
|
||||
nativeBuildInputs = [ pkgs.gnumake ];
|
||||
buildInputs = [ pkgs.zlib ];
|
||||
|
||||
# scripts/build.sh verifies the compiler via `file`, which fails on Nix
|
||||
# because CC is a bash wrapper script rather than a binary. Call make
|
||||
# directly to bypass that check; the Nix stdenv already guarantees the
|
||||
# correct compiler and target architecture.
|
||||
buildPhase = ''
|
||||
make -j$NIX_BUILD_CORES -f Makefile.cbm cbm
|
||||
'';
|
||||
|
||||
installPhase = ''
|
||||
install -Dm755 build/c/codebase-memory-mcp $out/bin/codebase-memory-mcp
|
||||
'';
|
||||
|
||||
meta = {
|
||||
description = "MCP server that builds and queries a semantic graph of your codebase";
|
||||
homepage = "https://github.com/DeusData/codebase-memory-mcp";
|
||||
license = nixpkgs.lib.licenses.mit;
|
||||
mainProgram = "codebase-memory-mcp";
|
||||
platforms = systems;
|
||||
};
|
||||
};
|
||||
});
|
||||
|
||||
devShells = forAllSystems (pkgs: {
|
||||
default = pkgs.mkShell {
|
||||
inputsFrom = [ self.packages.${pkgs.system}.default ];
|
||||
};
|
||||
});
|
||||
};
|
||||
}
|
||||
@@ -0,0 +1,4 @@
|
||||
{
|
||||
"$schema": "https://glama.ai/mcp/schemas/server.json",
|
||||
"maintainers": ["DeusData"]
|
||||
}
|
||||
@@ -0,0 +1,48 @@
|
||||
import * as React from "react"
|
||||
import { cva, type VariantProps } from "class-variance-authority"
|
||||
import { Slot } from "radix-ui"
|
||||
|
||||
import { cn } from "@/lib/utils"
|
||||
|
||||
const badgeVariants = cva(
|
||||
"inline-flex w-fit shrink-0 items-center justify-center gap-1 overflow-hidden rounded-full border border-transparent px-2 py-0.5 text-xs font-medium whitespace-nowrap transition-[color,box-shadow] focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 [&>svg]:pointer-events-none [&>svg]:size-3",
|
||||
{
|
||||
variants: {
|
||||
variant: {
|
||||
default: "bg-primary text-primary-foreground [a&]:hover:bg-primary/90",
|
||||
secondary:
|
||||
"bg-secondary text-secondary-foreground [a&]:hover:bg-secondary/90",
|
||||
destructive:
|
||||
"bg-destructive text-white focus-visible:ring-destructive/20 dark:bg-destructive/60 dark:focus-visible:ring-destructive/40 [a&]:hover:bg-destructive/90",
|
||||
outline:
|
||||
"border-border text-foreground [a&]:hover:bg-accent [a&]:hover:text-accent-foreground",
|
||||
ghost: "[a&]:hover:bg-accent [a&]:hover:text-accent-foreground",
|
||||
link: "text-primary underline-offset-4 [a&]:hover:underline",
|
||||
},
|
||||
},
|
||||
defaultVariants: {
|
||||
variant: "default",
|
||||
},
|
||||
}
|
||||
)
|
||||
|
||||
function Badge({
|
||||
className,
|
||||
variant = "default",
|
||||
asChild = false,
|
||||
...props
|
||||
}: React.ComponentProps<"span"> &
|
||||
VariantProps<typeof badgeVariants> & { asChild?: boolean }) {
|
||||
const Comp = asChild ? Slot.Root : "span"
|
||||
|
||||
return (
|
||||
<Comp
|
||||
data-slot="badge"
|
||||
data-variant={variant}
|
||||
className={cn(badgeVariants({ variant }), className)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
export { Badge, badgeVariants }
|
||||
@@ -0,0 +1,64 @@
|
||||
import * as React from "react"
|
||||
import { cva, type VariantProps } from "class-variance-authority"
|
||||
import { Slot } from "radix-ui"
|
||||
|
||||
import { cn } from "@/lib/utils"
|
||||
|
||||
const buttonVariants = cva(
|
||||
"inline-flex shrink-0 items-center justify-center gap-2 rounded-md text-sm font-medium whitespace-nowrap transition-all outline-none focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:pointer-events-none disabled:opacity-50 aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
|
||||
{
|
||||
variants: {
|
||||
variant: {
|
||||
default: "bg-primary text-primary-foreground hover:bg-primary/90",
|
||||
destructive:
|
||||
"bg-destructive text-white hover:bg-destructive/90 focus-visible:ring-destructive/20 dark:bg-destructive/60 dark:focus-visible:ring-destructive/40",
|
||||
outline:
|
||||
"border bg-background shadow-xs hover:bg-accent hover:text-accent-foreground dark:border-input dark:bg-input/30 dark:hover:bg-input/50",
|
||||
secondary:
|
||||
"bg-secondary text-secondary-foreground hover:bg-secondary/80",
|
||||
ghost:
|
||||
"hover:bg-accent hover:text-accent-foreground dark:hover:bg-accent/50",
|
||||
link: "text-primary underline-offset-4 hover:underline",
|
||||
},
|
||||
size: {
|
||||
default: "h-9 px-4 py-2 has-[>svg]:px-3",
|
||||
xs: "h-6 gap-1 rounded-md px-2 text-xs has-[>svg]:px-1.5 [&_svg:not([class*='size-'])]:size-3",
|
||||
sm: "h-8 gap-1.5 rounded-md px-3 has-[>svg]:px-2.5",
|
||||
lg: "h-10 rounded-md px-6 has-[>svg]:px-4",
|
||||
icon: "size-9",
|
||||
"icon-xs": "size-6 rounded-md [&_svg:not([class*='size-'])]:size-3",
|
||||
"icon-sm": "size-8",
|
||||
"icon-lg": "size-10",
|
||||
},
|
||||
},
|
||||
defaultVariants: {
|
||||
variant: "default",
|
||||
size: "default",
|
||||
},
|
||||
}
|
||||
)
|
||||
|
||||
function Button({
|
||||
className,
|
||||
variant = "default",
|
||||
size = "default",
|
||||
asChild = false,
|
||||
...props
|
||||
}: React.ComponentProps<"button"> &
|
||||
VariantProps<typeof buttonVariants> & {
|
||||
asChild?: boolean
|
||||
}) {
|
||||
const Comp = asChild ? Slot.Root : "button"
|
||||
|
||||
return (
|
||||
<Comp
|
||||
data-slot="button"
|
||||
data-variant={variant}
|
||||
data-size={size}
|
||||
className={cn(buttonVariants({ variant, size, className }))}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
export { Button, buttonVariants }
|
||||
@@ -0,0 +1,92 @@
|
||||
import * as React from "react"
|
||||
|
||||
import { cn } from "@/lib/utils"
|
||||
|
||||
function Card({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card"
|
||||
className={cn(
|
||||
"flex flex-col gap-6 rounded-xl border bg-card py-6 text-card-foreground shadow-sm",
|
||||
className
|
||||
)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
function CardHeader({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card-header"
|
||||
className={cn(
|
||||
"@container/card-header grid auto-rows-min grid-rows-[auto_auto] items-start gap-2 px-6 has-data-[slot=card-action]:grid-cols-[1fr_auto] [.border-b]:pb-6",
|
||||
className
|
||||
)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
function CardTitle({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card-title"
|
||||
className={cn("leading-none font-semibold", className)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
function CardDescription({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card-description"
|
||||
className={cn("text-sm text-muted-foreground", className)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
function CardAction({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card-action"
|
||||
className={cn(
|
||||
"col-start-2 row-span-2 row-start-1 self-start justify-self-end",
|
||||
className
|
||||
)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
function CardContent({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card-content"
|
||||
className={cn("px-6", className)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
function CardFooter({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card-footer"
|
||||
className={cn("flex items-center px-6 [.border-t]:pt-6", className)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
export {
|
||||
Card,
|
||||
CardHeader,
|
||||
CardFooter,
|
||||
CardTitle,
|
||||
CardAction,
|
||||
CardDescription,
|
||||
CardContent,
|
||||
}
|
||||
@@ -0,0 +1,32 @@
|
||||
"use client"
|
||||
|
||||
import * as React from "react"
|
||||
import { CheckIcon } from "lucide-react"
|
||||
import { Checkbox as CheckboxPrimitive } from "radix-ui"
|
||||
|
||||
import { cn } from "@/lib/utils"
|
||||
|
||||
function Checkbox({
|
||||
className,
|
||||
...props
|
||||
}: React.ComponentProps<typeof CheckboxPrimitive.Root>) {
|
||||
return (
|
||||
<CheckboxPrimitive.Root
|
||||
data-slot="checkbox"
|
||||
className={cn(
|
||||
"peer size-4 shrink-0 rounded-[4px] border border-input shadow-xs transition-shadow outline-none focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:cursor-not-allowed disabled:opacity-50 aria-invalid:border-destructive aria-invalid:ring-destructive/20 data-[state=checked]:border-primary data-[state=checked]:bg-primary data-[state=checked]:text-primary-foreground dark:bg-input/30 dark:aria-invalid:ring-destructive/40 dark:data-[state=checked]:bg-primary",
|
||||
className
|
||||
)}
|
||||
{...props}
|
||||
>
|
||||
<CheckboxPrimitive.Indicator
|
||||
data-slot="checkbox-indicator"
|
||||
className="grid place-content-center text-current transition-none"
|
||||
>
|
||||
<CheckIcon className="size-3.5" />
|
||||
</CheckboxPrimitive.Indicator>
|
||||
</CheckboxPrimitive.Root>
|
||||
)
|
||||
}
|
||||
|
||||
export { Checkbox }
|
||||
@@ -0,0 +1,21 @@
|
||||
import * as React from "react"
|
||||
|
||||
import { cn } from "@/lib/utils"
|
||||
|
||||
function Input({ className, type, ...props }: React.ComponentProps<"input">) {
|
||||
return (
|
||||
<input
|
||||
type={type}
|
||||
data-slot="input"
|
||||
className={cn(
|
||||
"h-9 w-full min-w-0 rounded-md border border-input bg-transparent px-3 py-1 text-base shadow-xs transition-[color,box-shadow] outline-none selection:bg-primary selection:text-primary-foreground file:inline-flex file:h-7 file:border-0 file:bg-transparent file:text-sm file:font-medium file:text-foreground placeholder:text-muted-foreground disabled:pointer-events-none disabled:cursor-not-allowed disabled:opacity-50 md:text-sm dark:bg-input/30",
|
||||
"focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50",
|
||||
"aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40",
|
||||
className
|
||||
)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
export { Input }
|
||||
@@ -0,0 +1,56 @@
|
||||
import * as React from "react"
|
||||
import { ScrollArea as ScrollAreaPrimitive } from "radix-ui"
|
||||
|
||||
import { cn } from "@/lib/utils"
|
||||
|
||||
function ScrollArea({
|
||||
className,
|
||||
children,
|
||||
...props
|
||||
}: React.ComponentProps<typeof ScrollAreaPrimitive.Root>) {
|
||||
return (
|
||||
<ScrollAreaPrimitive.Root
|
||||
data-slot="scroll-area"
|
||||
className={cn("relative", className)}
|
||||
{...props}
|
||||
>
|
||||
<ScrollAreaPrimitive.Viewport
|
||||
data-slot="scroll-area-viewport"
|
||||
className="size-full rounded-[inherit] transition-[color,box-shadow] outline-none focus-visible:ring-[3px] focus-visible:ring-ring/50 focus-visible:outline-1"
|
||||
>
|
||||
{children}
|
||||
</ScrollAreaPrimitive.Viewport>
|
||||
<ScrollBar />
|
||||
<ScrollAreaPrimitive.Corner />
|
||||
</ScrollAreaPrimitive.Root>
|
||||
)
|
||||
}
|
||||
|
||||
function ScrollBar({
|
||||
className,
|
||||
orientation = "vertical",
|
||||
...props
|
||||
}: React.ComponentProps<typeof ScrollAreaPrimitive.ScrollAreaScrollbar>) {
|
||||
return (
|
||||
<ScrollAreaPrimitive.ScrollAreaScrollbar
|
||||
data-slot="scroll-area-scrollbar"
|
||||
orientation={orientation}
|
||||
className={cn(
|
||||
"flex touch-none p-px transition-colors select-none",
|
||||
orientation === "vertical" &&
|
||||
"h-full w-2.5 border-l border-l-transparent",
|
||||
orientation === "horizontal" &&
|
||||
"h-2.5 flex-col border-t border-t-transparent",
|
||||
className
|
||||
)}
|
||||
{...props}
|
||||
>
|
||||
<ScrollAreaPrimitive.ScrollAreaThumb
|
||||
data-slot="scroll-area-thumb"
|
||||
className="relative flex-1 rounded-full bg-border"
|
||||
/>
|
||||
</ScrollAreaPrimitive.ScrollAreaScrollbar>
|
||||
)
|
||||
}
|
||||
|
||||
export { ScrollArea, ScrollBar }
|
||||
@@ -0,0 +1,26 @@
|
||||
import * as React from "react"
|
||||
import { Separator as SeparatorPrimitive } from "radix-ui"
|
||||
|
||||
import { cn } from "@/lib/utils"
|
||||
|
||||
function Separator({
|
||||
className,
|
||||
orientation = "horizontal",
|
||||
decorative = true,
|
||||
...props
|
||||
}: React.ComponentProps<typeof SeparatorPrimitive.Root>) {
|
||||
return (
|
||||
<SeparatorPrimitive.Root
|
||||
data-slot="separator"
|
||||
decorative={decorative}
|
||||
orientation={orientation}
|
||||
className={cn(
|
||||
"shrink-0 bg-border data-[orientation=horizontal]:h-px data-[orientation=horizontal]:w-full data-[orientation=vertical]:h-full data-[orientation=vertical]:w-px",
|
||||
className
|
||||
)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
export { Separator }
|
||||
@@ -0,0 +1 @@
|
||||
{"$schema":"https://ui.shadcn.com/schema.json","style":"new-york","rsc":false,"tsx":true,"tailwind":{"config":"","css":"src/styles/globals.css","baseColor":"neutral","cssVariables":true},"aliases":{"components":"@/components","utils":"@/lib/utils","ui":"@/components/ui","lib":"@/lib","hooks":"@/hooks"},"iconLibrary":"lucide"}
|
||||
@@ -0,0 +1,12 @@
|
||||
<!doctype html>
|
||||
<html lang="en" class="dark">
|
||||
<head>
|
||||
<meta charset="UTF-8" />
|
||||
<meta name="viewport" content="width=device-width, initial-scale=1.0" />
|
||||
<title>Codebase Memory — Graph</title>
|
||||
</head>
|
||||
<body class="bg-[#0a0a10] text-[#e4e4ed] min-h-screen">
|
||||
<div id="root"></div>
|
||||
<script type="module" src="/src/main.tsx"></script>
|
||||
</body>
|
||||
</html>
|
||||
Generated
+6413
File diff suppressed because it is too large
Load Diff
@@ -0,0 +1,46 @@
|
||||
{
|
||||
"name": "graph-ui",
|
||||
"private": true,
|
||||
"version": "0.1.0",
|
||||
"type": "module",
|
||||
"scripts": {
|
||||
"dev": "vite",
|
||||
"build": "tsc -b && vite build",
|
||||
"preview": "vite preview",
|
||||
"test": "vitest run",
|
||||
"test:watch": "vitest",
|
||||
"test:coverage": "vitest run --coverage"
|
||||
},
|
||||
"dependencies": {
|
||||
"@react-three/drei": "^10.7.0",
|
||||
"@react-three/fiber": "^9.5.0",
|
||||
"@react-three/postprocessing": "^3.0.4",
|
||||
"class-variance-authority": "^0.7.1",
|
||||
"clsx": "^2.1.1",
|
||||
"lucide-react": "^0.577.0",
|
||||
"postprocessing": "^6.38.3",
|
||||
"radix-ui": "^1.4.3",
|
||||
"react": "^19.0.0",
|
||||
"react-dom": "^19.0.0",
|
||||
"tailwind-merge": "^3.5.0",
|
||||
"three": "~0.183.0"
|
||||
},
|
||||
"devDependencies": {
|
||||
"@tailwindcss/vite": "^4.2.1",
|
||||
"@testing-library/jest-dom": "^6.6.0",
|
||||
"@testing-library/react": "^16.1.0",
|
||||
"@types/react": "^19.0.0",
|
||||
"@types/react-dom": "^19.0.0",
|
||||
"@types/three": "~0.183.0",
|
||||
"@vitejs/plugin-react": "^4.3.0",
|
||||
"jsdom": "^25.0.0",
|
||||
"tailwindcss": "^4.1.0",
|
||||
"typescript": "^5.7.0",
|
||||
"vite": "^6.4.3",
|
||||
"vitest": "^4.1.0"
|
||||
},
|
||||
"overrides": {
|
||||
"form-data": ">=4.0.6",
|
||||
"@babel/core": ">=7.29.6"
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,135 @@
|
||||
import { useCallback, useEffect, useState } from "react";
|
||||
import { GraphTab } from "./components/GraphTab";
|
||||
import { StatsTab } from "./components/StatsTab";
|
||||
import { ControlTab } from "./components/ControlTab";
|
||||
import type { TabId } from "./lib/types";
|
||||
import { useUiMessages } from "./lib/i18n";
|
||||
|
||||
const TAB_IDS: TabId[] = ["graph", "stats", "control"];
|
||||
|
||||
interface RouteState {
|
||||
tab: TabId;
|
||||
project: string | null;
|
||||
}
|
||||
|
||||
/* Read the active tab + selected project from the URL query string so the
|
||||
* current view survives refreshes and can be bookmarked or shared. */
|
||||
function readRoute(): RouteState {
|
||||
const params = new URLSearchParams(window.location.search);
|
||||
const rawTab = params.get("tab");
|
||||
const tab = TAB_IDS.includes(rawTab as TabId) ? (rawTab as TabId) : "stats";
|
||||
const project = params.get("project");
|
||||
return { tab, project: project ? project : null };
|
||||
}
|
||||
|
||||
/* Build the canonical URL for a route, preserving the path and hash. */
|
||||
function routeUrl(tab: TabId, project: string | null): string {
|
||||
const params = new URLSearchParams();
|
||||
params.set("tab", tab);
|
||||
if (project) params.set("project", project);
|
||||
return `${window.location.pathname}?${params.toString()}${window.location.hash}`;
|
||||
}
|
||||
|
||||
export function App() {
|
||||
const t = useUiMessages();
|
||||
const [route, setRoute] = useState<RouteState>(readRoute);
|
||||
const { tab: activeTab, project: selectedProject } = route;
|
||||
|
||||
/* Normalize the URL on first load so it always carries the current route. */
|
||||
useEffect(() => {
|
||||
const initial = readRoute();
|
||||
window.history.replaceState(null, "", routeUrl(initial.tab, initial.project));
|
||||
}, []);
|
||||
|
||||
/* Sync state when the user navigates with the browser back/forward buttons. */
|
||||
useEffect(() => {
|
||||
const onPopState = () => setRoute(readRoute());
|
||||
window.addEventListener("popstate", onPopState);
|
||||
return () => window.removeEventListener("popstate", onPopState);
|
||||
}, []);
|
||||
|
||||
/* Change the route and push a history entry (skips no-op navigations). */
|
||||
const navigate = useCallback((tab: TabId, project: string | null) => {
|
||||
const url = routeUrl(tab, project);
|
||||
const current = `${window.location.pathname}${window.location.search}${window.location.hash}`;
|
||||
if (url === current) return;
|
||||
window.history.pushState(null, "", url);
|
||||
setRoute({ tab, project });
|
||||
}, []);
|
||||
|
||||
const tabs: { id: TabId; label: string }[] = [
|
||||
{ id: "graph", label: t.tabs.graph },
|
||||
{ id: "stats", label: t.tabs.projects },
|
||||
{ id: "control", label: t.tabs.control },
|
||||
];
|
||||
|
||||
return (
|
||||
<div className="h-screen flex flex-col bg-background text-foreground">
|
||||
{/* Header */}
|
||||
<header className="flex items-center justify-between px-5 h-12 border-b border-border bg-[#0b1920]/80 backdrop-blur-md shrink-0">
|
||||
<div className="flex items-center gap-6">
|
||||
<div className="flex items-center gap-2.5">
|
||||
<div className="w-[7px] h-[7px] rounded-full bg-primary" />
|
||||
<span className="text-[13px] font-semibold text-foreground/90 tracking-tight">
|
||||
Codebase Memory
|
||||
</span>
|
||||
</div>
|
||||
|
||||
{/* Tabs inline in header */}
|
||||
<nav className="flex items-center gap-0.5">
|
||||
{tabs.map((tab) => {
|
||||
const disabled = tab.id === "graph" && !selectedProject;
|
||||
return (
|
||||
<button
|
||||
key={tab.id}
|
||||
onClick={() => navigate(tab.id, tab.id === "stats" ? null : selectedProject)}
|
||||
disabled={disabled}
|
||||
title={disabled ? "Select a project first" : undefined}
|
||||
className={`px-3 py-1 rounded-md text-[12px] font-medium transition-all ${
|
||||
disabled
|
||||
? "text-muted-foreground/30 cursor-not-allowed"
|
||||
: activeTab === tab.id
|
||||
? "bg-primary/15 text-primary"
|
||||
: "text-muted-foreground hover:text-foreground hover:bg-white/[0.04]"
|
||||
}`}
|
||||
>
|
||||
{tab.label}
|
||||
</button>
|
||||
);
|
||||
})}
|
||||
</nav>
|
||||
</div>
|
||||
|
||||
{selectedProject && (
|
||||
<div className="flex items-center gap-2 px-3 py-1 rounded-lg bg-white/[0.04] border border-border/30">
|
||||
<span className="text-[10px] text-foreground/30 uppercase tracking-wider">
|
||||
{t.graph.selectedLabel}
|
||||
</span>
|
||||
<span className="text-[11px] text-primary font-mono truncate max-w-[300px]">
|
||||
{selectedProject}
|
||||
</span>
|
||||
<button
|
||||
onClick={() => navigate("stats", null)}
|
||||
className="text-foreground/20 hover:text-foreground/50 text-[12px] ml-1 transition-colors"
|
||||
>
|
||||
×
|
||||
</button>
|
||||
</div>
|
||||
)}
|
||||
</header>
|
||||
|
||||
{/* Content */}
|
||||
<main className="flex-1 min-h-0">
|
||||
{activeTab === "graph" ? (
|
||||
<GraphTab project={selectedProject} />
|
||||
) : activeTab === "control" ? (
|
||||
<ControlTab />
|
||||
) : (
|
||||
<StatsTab
|
||||
onSelectProject={(p) => navigate("graph", p)}
|
||||
/>
|
||||
)}
|
||||
</main>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,47 @@
|
||||
/* JSON-RPC client — speaks the same protocol as MCP clients via POST /rpc */
|
||||
|
||||
let _nextId = 1;
|
||||
|
||||
export class RpcError extends Error {
|
||||
constructor(
|
||||
public code: number,
|
||||
message: string,
|
||||
) {
|
||||
super(message);
|
||||
this.name = "RpcError";
|
||||
}
|
||||
}
|
||||
|
||||
export async function callTool<T = unknown>(
|
||||
name: string,
|
||||
args: Record<string, unknown> = {},
|
||||
): Promise<T> {
|
||||
const res = await fetch("/rpc", {
|
||||
method: "POST",
|
||||
headers: { "Content-Type": "application/json" },
|
||||
body: JSON.stringify({
|
||||
jsonrpc: "2.0",
|
||||
id: _nextId++,
|
||||
method: "tools/call",
|
||||
params: { name, arguments: args },
|
||||
}),
|
||||
});
|
||||
|
||||
if (!res.ok) {
|
||||
throw new RpcError(-1, `HTTP ${res.status}: ${res.statusText}`);
|
||||
}
|
||||
|
||||
const json = await res.json();
|
||||
|
||||
if (json.error) {
|
||||
throw new RpcError(json.error.code ?? -1, json.error.message ?? "unknown");
|
||||
}
|
||||
|
||||
/* MCP tool results are wrapped: { result: { content: [{ text: "..." }] } } */
|
||||
const text = json?.result?.content?.[0]?.text;
|
||||
if (text === undefined) {
|
||||
return json.result as T;
|
||||
}
|
||||
|
||||
return JSON.parse(text) as T;
|
||||
}
|
||||
@@ -0,0 +1,227 @@
|
||||
import { useState, useEffect, useCallback } from "react";
|
||||
import { ScrollArea } from "@/components/ui/scroll-area";
|
||||
import type { ProcessInfo } from "../lib/types";
|
||||
import { useUiMessages } from "../lib/i18n";
|
||||
|
||||
/* ── Gauge component ────────────────────────────────────── */
|
||||
|
||||
function Gauge({ label, value, max, unit, color }: {
|
||||
label: string; value: number; max: number; unit: string; color: string;
|
||||
}) {
|
||||
const pct = Math.min(100, (value / max) * 100);
|
||||
return (
|
||||
<div className="flex-1 rounded-xl border border-border/30 bg-white/[0.02] p-4">
|
||||
<p className="text-[10px] text-foreground/25 uppercase tracking-widest mb-2">{label}</p>
|
||||
<p className={`text-[20px] font-semibold tabular-nums ${color}`}>
|
||||
{value.toFixed(1)}<span className="text-[11px] text-foreground/30 ml-1">{unit}</span>
|
||||
</p>
|
||||
<div className="mt-2 h-1.5 rounded-full bg-white/[0.05] overflow-hidden">
|
||||
<div
|
||||
className="h-full rounded-full transition-all duration-500"
|
||||
style={{ width: `${pct}%`, backgroundColor: pct > 80 ? "#e05252" : pct > 50 ? "#eab308" : "#1DA27E" }}
|
||||
/>
|
||||
</div>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
/* ── Process card ───────────────────────────────────────── */
|
||||
|
||||
function ProcessCard({ proc, selected, onSelect, onKill }: {
|
||||
proc: ProcessInfo; selected: boolean;
|
||||
onSelect: () => void; onKill: () => void;
|
||||
}) {
|
||||
const t = useUiMessages();
|
||||
return (
|
||||
<button
|
||||
onClick={onSelect}
|
||||
className={`w-full text-left rounded-xl border p-4 transition-all ${
|
||||
selected
|
||||
? "border-primary/40 bg-primary/5"
|
||||
: "border-border/30 bg-white/[0.02] hover:bg-white/[0.04]"
|
||||
}`}
|
||||
>
|
||||
<div className="flex items-start justify-between mb-2">
|
||||
<div className="flex items-center gap-2">
|
||||
<span className={`w-2 h-2 rounded-full ${proc.is_self ? "bg-primary animate-pulse" : "bg-emerald-400"}`} />
|
||||
<span className="text-[12px] font-semibold text-foreground/80">
|
||||
PID {proc.pid}
|
||||
</span>
|
||||
{proc.is_self && (
|
||||
<span className="text-[9px] px-1.5 py-0.5 rounded bg-primary/15 text-primary font-medium">{t.control.thisProcess}</span>
|
||||
)}
|
||||
</div>
|
||||
{!proc.is_self && (
|
||||
<button
|
||||
onClick={(e) => { e.stopPropagation(); onKill(); }}
|
||||
className="px-2 py-1 rounded-lg text-[10px] text-foreground/20 hover:text-destructive hover:bg-destructive/10 transition-all"
|
||||
>
|
||||
{t.control.kill}
|
||||
</button>
|
||||
)}
|
||||
</div>
|
||||
|
||||
<div className="grid grid-cols-3 gap-3 mb-2">
|
||||
<div>
|
||||
<p className="text-[9px] text-foreground/20 uppercase">CPU</p>
|
||||
<p className="text-[13px] font-semibold tabular-nums text-foreground/70">{proc.cpu.toFixed(1)}%</p>
|
||||
</div>
|
||||
<div>
|
||||
<p className="text-[9px] text-foreground/20 uppercase">RAM</p>
|
||||
<p className="text-[13px] font-semibold tabular-nums text-foreground/70">{proc.rss_mb.toFixed(0)} MB</p>
|
||||
</div>
|
||||
<div>
|
||||
<p className="text-[9px] text-foreground/20 uppercase">{t.control.uptime}</p>
|
||||
<p className="text-[13px] font-semibold tabular-nums text-foreground/70">{proc.elapsed}</p>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<p className="text-[10px] text-foreground/15 font-mono truncate">{proc.command}</p>
|
||||
</button>
|
||||
);
|
||||
}
|
||||
|
||||
/* ── Log viewer ─────────────────────────────────────────── */
|
||||
|
||||
function LogViewer() {
|
||||
const t = useUiMessages();
|
||||
const [lines, setLines] = useState<string[]>([]);
|
||||
|
||||
useEffect(() => {
|
||||
const poll = setInterval(async () => {
|
||||
try {
|
||||
const res = await fetch("/api/logs?lines=200");
|
||||
const data = await res.json();
|
||||
setLines(data.lines ?? []);
|
||||
} catch { /* ignore */ }
|
||||
}, 2000);
|
||||
/* Initial fetch */
|
||||
fetch("/api/logs?lines=200").then(r => r.json()).then(d => setLines(d.lines ?? [])).catch(() => {});
|
||||
return () => clearInterval(poll);
|
||||
}, []);
|
||||
|
||||
return (
|
||||
<div className="rounded-xl border border-border/30 bg-black/30 overflow-hidden">
|
||||
<div className="px-4 py-2 border-b border-border/20">
|
||||
<span className="text-[11px] font-medium text-foreground/40">{t.control.processLogs}</span>
|
||||
<span className="text-[10px] text-foreground/15 ml-2">{lines.length} lines</span>
|
||||
</div>
|
||||
<ScrollArea className="h-[400px]">
|
||||
<div className="p-3 font-mono text-[10px] leading-relaxed">
|
||||
{lines.length === 0 ? (
|
||||
<p className="text-foreground/15 text-center py-8">{t.control.noLogs}</p>
|
||||
) : (
|
||||
lines.map((line, i) => {
|
||||
const isErr = line.includes("level=error");
|
||||
const isWarn = line.includes("level=warn");
|
||||
return (
|
||||
<div
|
||||
key={i}
|
||||
className={`py-[1px] ${
|
||||
isErr ? "text-red-400/70" : isWarn ? "text-yellow-400/60" : "text-foreground/30"
|
||||
}`}
|
||||
>
|
||||
{line}
|
||||
</div>
|
||||
);
|
||||
})
|
||||
)}
|
||||
</div>
|
||||
</ScrollArea>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
/* ── Main Control Tab ───────────────────────────────────── */
|
||||
|
||||
export function ControlTab() {
|
||||
const t = useUiMessages();
|
||||
const [processes, setProcesses] = useState<ProcessInfo[]>([]);
|
||||
const [selfMetrics, setSelfMetrics] = useState({ rss_mb: 0, user_cpu: 0, sys_cpu: 0 });
|
||||
const [selectedPid, setSelectedPid] = useState<number | null>(null);
|
||||
|
||||
const fetchProcesses = useCallback(async () => {
|
||||
try {
|
||||
const res = await fetch("/api/processes");
|
||||
const data = await res.json();
|
||||
setProcesses(data.processes ?? []);
|
||||
setSelfMetrics({
|
||||
rss_mb: data.self_rss_mb ?? 0,
|
||||
user_cpu: data.self_user_cpu_s ?? 0,
|
||||
sys_cpu: data.self_sys_cpu_s ?? 0,
|
||||
});
|
||||
} catch { /* ignore */ }
|
||||
}, []);
|
||||
|
||||
useEffect(() => {
|
||||
fetchProcesses();
|
||||
const interval = setInterval(fetchProcesses, 3000);
|
||||
return () => clearInterval(interval);
|
||||
}, [fetchProcesses]);
|
||||
|
||||
const killProcess = useCallback(async (pid: number) => {
|
||||
if (!confirm(t.control.killConfirm(pid))) return;
|
||||
try {
|
||||
await fetch("/api/process-kill", {
|
||||
method: "POST",
|
||||
headers: { "Content-Type": "application/json" },
|
||||
body: JSON.stringify({ pid }),
|
||||
});
|
||||
setTimeout(fetchProcesses, 1000);
|
||||
} catch { /* ignore */ }
|
||||
}, [fetchProcesses, t.control]);
|
||||
|
||||
/* Aggregates */
|
||||
const totalCpu = processes.reduce((s, p) => s + p.cpu, 0);
|
||||
const totalRam = processes.reduce((s, p) => s + p.rss_mb, 0);
|
||||
|
||||
return (
|
||||
<ScrollArea className="h-full">
|
||||
<div className="p-8 max-w-4xl mx-auto">
|
||||
<h2 className="text-[15px] font-semibold text-foreground/80 mb-6">{t.control.panel}</h2>
|
||||
|
||||
{/* Aggregate gauges */}
|
||||
<div className="flex gap-4 mb-8">
|
||||
<Gauge label={t.control.totalCpu} value={totalCpu} max={100 * processes.length || 100} unit="%" color="text-foreground/80" />
|
||||
<Gauge label={t.control.totalRam} value={totalRam} max={4096} unit="MB" color="text-foreground/80" />
|
||||
<Gauge label={t.control.processes} value={processes.length} max={10} unit="" color="text-primary" />
|
||||
<Gauge label={t.control.selfRam} value={selfMetrics.rss_mb} max={2048} unit="MB" color="text-primary" />
|
||||
</div>
|
||||
|
||||
{/* Process grid */}
|
||||
<div className="mb-8">
|
||||
<div className="flex items-center justify-between mb-4">
|
||||
<h3 className="text-[13px] font-medium text-foreground/50">
|
||||
{t.control.activeProcesses}
|
||||
</h3>
|
||||
<button
|
||||
onClick={fetchProcesses}
|
||||
className="text-[11px] text-primary/60 hover:text-primary transition-colors"
|
||||
>
|
||||
{t.common.refresh}
|
||||
</button>
|
||||
</div>
|
||||
|
||||
{processes.length === 0 ? (
|
||||
<p className="text-foreground/20 text-[12px] text-center py-8">{t.control.noProcesses}</p>
|
||||
) : (
|
||||
<div className="grid grid-cols-2 gap-3">
|
||||
{processes.map((p) => (
|
||||
<ProcessCard
|
||||
key={p.pid}
|
||||
proc={p}
|
||||
selected={selectedPid === p.pid}
|
||||
onSelect={() => setSelectedPid(selectedPid === p.pid ? null : p.pid)}
|
||||
onKill={() => killProcess(p.pid)}
|
||||
/>
|
||||
))}
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
|
||||
{/* Log viewer */}
|
||||
<LogViewer />
|
||||
</div>
|
||||
</ScrollArea>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,149 @@
|
||||
import { useEffect, useRef, useState } from "react";
|
||||
import { Button } from "@/components/ui/button";
|
||||
import {
|
||||
DEFAULT_DISPLAY_SETTINGS,
|
||||
DISPLAY_LIMITS,
|
||||
type DisplaySettings,
|
||||
} from "../lib/density";
|
||||
|
||||
interface DisplaySettingsMenuProps {
|
||||
settings: DisplaySettings;
|
||||
onChange: (next: DisplaySettings) => void;
|
||||
}
|
||||
|
||||
interface SliderRowProps {
|
||||
label: string;
|
||||
hint: string;
|
||||
value: number;
|
||||
min: number;
|
||||
max: number;
|
||||
onChange: (value: number) => void;
|
||||
}
|
||||
|
||||
function SliderRow({ label, hint, value, min, max, onChange }: SliderRowProps) {
|
||||
return (
|
||||
<label className="block">
|
||||
<div className="flex items-center justify-between mb-1">
|
||||
<span className="text-[11px] text-foreground/70">{label}</span>
|
||||
<span className="text-[10px] font-mono text-cyan-300/70 tabular-nums">
|
||||
{value.toFixed(2)}×
|
||||
</span>
|
||||
</div>
|
||||
<input
|
||||
type="range"
|
||||
min={min}
|
||||
max={max}
|
||||
step={0.05}
|
||||
value={value}
|
||||
onChange={(e) => onChange(parseFloat(e.target.value))}
|
||||
className="w-full accent-cyan-400 cursor-pointer"
|
||||
aria-label={`${label} (${hint})`}
|
||||
/>
|
||||
<p className="text-[9px] text-foreground/30 mt-0.5">{hint}</p>
|
||||
</label>
|
||||
);
|
||||
}
|
||||
|
||||
/* Contrast / brightness controls for the 3D graph. These ride on top of the
|
||||
* automatic density compensation — the defaults already adapt to graph size,
|
||||
* so 1.00× is "auto"; the sliders let the user push it. */
|
||||
export function DisplaySettingsMenu({
|
||||
settings,
|
||||
onChange,
|
||||
}: DisplaySettingsMenuProps) {
|
||||
const [open, setOpen] = useState(false);
|
||||
const rootRef = useRef<HTMLDivElement>(null);
|
||||
|
||||
/* Close on outside click / Escape */
|
||||
useEffect(() => {
|
||||
if (!open) return;
|
||||
const onDown = (e: MouseEvent) => {
|
||||
if (rootRef.current && !rootRef.current.contains(e.target as Node)) {
|
||||
setOpen(false);
|
||||
}
|
||||
};
|
||||
const onKey = (e: KeyboardEvent) => {
|
||||
if (e.key === "Escape") setOpen(false);
|
||||
};
|
||||
document.addEventListener("mousedown", onDown);
|
||||
document.addEventListener("keydown", onKey);
|
||||
return () => {
|
||||
document.removeEventListener("mousedown", onDown);
|
||||
document.removeEventListener("keydown", onKey);
|
||||
};
|
||||
}, [open]);
|
||||
|
||||
const set = (patch: Partial<DisplaySettings>) =>
|
||||
onChange({ ...settings, ...patch });
|
||||
|
||||
const isDefault =
|
||||
settings.edgeBrightness === DEFAULT_DISPLAY_SETTINGS.edgeBrightness &&
|
||||
settings.nodeGlow === DEFAULT_DISPLAY_SETTINGS.nodeGlow &&
|
||||
settings.bloom === DEFAULT_DISPLAY_SETTINGS.bloom;
|
||||
|
||||
return (
|
||||
<div ref={rootRef} className="relative">
|
||||
<Button
|
||||
variant="outline"
|
||||
size="sm"
|
||||
onClick={() => setOpen((v) => !v)}
|
||||
aria-expanded={open}
|
||||
aria-haspopup="dialog"
|
||||
title="Contrast & brightness"
|
||||
>
|
||||
Display{!isDefault && <span className="ml-1 text-cyan-300">•</span>}
|
||||
</Button>
|
||||
|
||||
{open && (
|
||||
<div
|
||||
role="dialog"
|
||||
aria-label="Display settings"
|
||||
className="absolute top-10 right-0 w-64 p-4 rounded-lg border border-border/60 bg-[#0b1920]/95 backdrop-blur-md shadow-xl z-20 space-y-3.5"
|
||||
>
|
||||
<div className="flex items-center justify-between">
|
||||
<span className="text-[11px] font-medium text-foreground/50 uppercase tracking-widest">
|
||||
Contrast
|
||||
</span>
|
||||
<button
|
||||
onClick={() => onChange(DEFAULT_DISPLAY_SETTINGS)}
|
||||
className="text-[10px] text-primary/70 hover:text-primary transition-colors disabled:opacity-30"
|
||||
disabled={isDefault}
|
||||
>
|
||||
Reset
|
||||
</button>
|
||||
</div>
|
||||
|
||||
<SliderRow
|
||||
label="Edge brightness"
|
||||
hint="Dim the web of links on dense graphs"
|
||||
value={settings.edgeBrightness}
|
||||
min={DISPLAY_LIMITS.edgeBrightness.min}
|
||||
max={DISPLAY_LIMITS.edgeBrightness.max}
|
||||
onChange={(edgeBrightness) => set({ edgeBrightness })}
|
||||
/>
|
||||
<SliderRow
|
||||
label="Node glow"
|
||||
hint="Halo boost around each node"
|
||||
value={settings.nodeGlow}
|
||||
min={DISPLAY_LIMITS.nodeGlow.min}
|
||||
max={DISPLAY_LIMITS.nodeGlow.max}
|
||||
onChange={(nodeGlow) => set({ nodeGlow })}
|
||||
/>
|
||||
<SliderRow
|
||||
label="Bloom"
|
||||
hint="Overall glow bloom strength"
|
||||
value={settings.bloom}
|
||||
min={DISPLAY_LIMITS.bloom.min}
|
||||
max={DISPLAY_LIMITS.bloom.max}
|
||||
onChange={(bloom) => set({ bloom })}
|
||||
/>
|
||||
|
||||
<p className="text-[9px] text-foreground/30 pt-1 border-t border-border/30">
|
||||
1.00× follows the automatic density compensation. Lower the
|
||||
edge/glow/bloom values when a large graph washes out to white.
|
||||
</p>
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,154 @@
|
||||
import { useMemo } from "react";
|
||||
import * as THREE from "three";
|
||||
import type { GraphNode, GraphEdge } from "../lib/types";
|
||||
import { edgeIntensityScale } from "../lib/density";
|
||||
|
||||
interface EdgeLinesProps {
|
||||
nodes: GraphNode[];
|
||||
edges: GraphEdge[];
|
||||
highlightedIds: Set<number> | null;
|
||||
opacity?: number;
|
||||
/* User edge-brightness multiplier (see DisplaySettings). Layered on top of
|
||||
* the automatic density scale. */
|
||||
brightness?: number;
|
||||
/* When set, edge.target is looked up in this array instead of `nodes`.
|
||||
* Used for cross-galaxy edges where source lives in the primary graph
|
||||
* and target lives in a linked project's offset-adjusted nodes. */
|
||||
targetNodes?: GraphNode[];
|
||||
}
|
||||
|
||||
function getClusterKey(fp?: string): string {
|
||||
if (!fp) return "";
|
||||
const parts = fp.split("/");
|
||||
return parts.slice(0, Math.min(2, parts.length)).join("/");
|
||||
}
|
||||
|
||||
/* Edge type → color (matches the filter panel) */
|
||||
const EDGE_TYPE_COLORS: Record<string, string> = {
|
||||
CALLS: "#1DA27E",
|
||||
IMPORTS: "#3b82f6",
|
||||
DEFINES: "#a855f7",
|
||||
DEFINES_METHOD: "#a855f7",
|
||||
CONTAINS_FILE: "#22c55e",
|
||||
CONTAINS_FOLDER: "#22c55e",
|
||||
CONTAINS_PACKAGE: "#22c55e",
|
||||
HANDLES: "#eab308",
|
||||
IMPLEMENTS: "#f97316",
|
||||
HTTP_CALLS: "#e11d48",
|
||||
ASYNC_CALLS: "#ec4899",
|
||||
GRPC_CALLS: "#f59e0b",
|
||||
GRAPHQL_CALLS: "#e879f9",
|
||||
TRPC_CALLS: "#a78bfa",
|
||||
CROSS_HTTP_CALLS: "#fb923c",
|
||||
CROSS_ASYNC_CALLS: "#fb7185",
|
||||
CROSS_GRPC_CALLS: "#fbbf24",
|
||||
CROSS_GRAPHQL_CALLS: "#f0abfc",
|
||||
CROSS_TRPC_CALLS: "#c4b5fd",
|
||||
CROSS_CHANNEL: "#fdba74",
|
||||
MEMBER_OF: "#64748b",
|
||||
TESTS_FILE: "#06b6d4",
|
||||
};
|
||||
|
||||
const DEFAULT_EDGE_COLOR = "#1C8585";
|
||||
|
||||
export function EdgeLines({
|
||||
nodes,
|
||||
edges,
|
||||
highlightedIds,
|
||||
opacity = 1.0,
|
||||
brightness = 1.0,
|
||||
targetNodes,
|
||||
}: EdgeLinesProps) {
|
||||
const geometry = useMemo(() => {
|
||||
/* Shrink per-edge glow as the edge count grows so the additively-blended
|
||||
* center doesn't saturate to white; the user multiplier rides on top. */
|
||||
const densityScale = edgeIntensityScale(edges.length) * brightness;
|
||||
const srcMap = new Map<number, number>();
|
||||
for (let i = 0; i < nodes.length; i++) {
|
||||
srcMap.set(nodes[i].id, i);
|
||||
}
|
||||
const tgtArr = targetNodes ?? nodes;
|
||||
const tgtMap = targetNodes ? new Map<number, number>() : srcMap;
|
||||
if (targetNodes) {
|
||||
for (let i = 0; i < targetNodes.length; i++) {
|
||||
tgtMap.set(targetNodes[i].id, i);
|
||||
}
|
||||
}
|
||||
|
||||
const hasHighlight = highlightedIds && highlightedIds.size > 0;
|
||||
const positions = new Float32Array(edges.length * 6);
|
||||
const colors = new Float32Array(edges.length * 6);
|
||||
let validCount = 0;
|
||||
|
||||
for (const edge of edges) {
|
||||
const si = srcMap.get(edge.source);
|
||||
const ti = tgtMap.get(edge.target);
|
||||
if (si === undefined || ti === undefined) continue;
|
||||
|
||||
const s = nodes[si];
|
||||
const t = tgtArr[ti];
|
||||
|
||||
const sHL = !hasHighlight || highlightedIds.has(s.id);
|
||||
const tHL = !hasHighlight || highlightedIds.has(t.id);
|
||||
if (hasHighlight && !sHL && !tHL) continue;
|
||||
|
||||
const sameCluster =
|
||||
getClusterKey(s.file_path) === getClusterKey(t.file_path);
|
||||
|
||||
/* Intensity based on cluster membership and highlight.
|
||||
* With additive blending + dark background, these glow nicely. */
|
||||
let intensity = sameCluster ? 0.25 : 0.06;
|
||||
if (hasHighlight) {
|
||||
/* A selection stays at full strength (never density-scaled) so it
|
||||
* pops against the dimmed rest; only the un-selected bulk is scaled. */
|
||||
intensity = sHL && tHL ? 0.5 : 0.04 * densityScale;
|
||||
} else {
|
||||
intensity *= densityScale;
|
||||
}
|
||||
|
||||
const off = validCount * 6;
|
||||
positions[off] = s.x;
|
||||
positions[off + 1] = s.y;
|
||||
positions[off + 2] = s.z;
|
||||
positions[off + 3] = t.x;
|
||||
positions[off + 4] = t.y;
|
||||
positions[off + 5] = t.z;
|
||||
|
||||
/* Color from edge TYPE (correlates with edge type filter) */
|
||||
const edgeColor = new THREE.Color(
|
||||
EDGE_TYPE_COLORS[edge.type] ?? DEFAULT_EDGE_COLOR,
|
||||
);
|
||||
colors[off] = edgeColor.r * intensity;
|
||||
colors[off + 1] = edgeColor.g * intensity;
|
||||
colors[off + 2] = edgeColor.b * intensity;
|
||||
colors[off + 3] = edgeColor.r * intensity;
|
||||
colors[off + 4] = edgeColor.g * intensity;
|
||||
colors[off + 5] = edgeColor.b * intensity;
|
||||
validCount++;
|
||||
}
|
||||
|
||||
const geo = new THREE.BufferGeometry();
|
||||
geo.setAttribute(
|
||||
"position",
|
||||
new THREE.BufferAttribute(positions.slice(0, validCount * 6), 3),
|
||||
);
|
||||
geo.setAttribute(
|
||||
"color",
|
||||
new THREE.BufferAttribute(colors.slice(0, validCount * 6), 3),
|
||||
);
|
||||
return geo;
|
||||
}, [nodes, edges, highlightedIds, targetNodes, brightness]);
|
||||
|
||||
return (
|
||||
<lineSegments geometry={geometry}>
|
||||
<lineBasicMaterial
|
||||
vertexColors
|
||||
transparent
|
||||
opacity={opacity}
|
||||
blending={THREE.AdditiveBlending}
|
||||
depthWrite={false}
|
||||
toneMapped={false}
|
||||
/>
|
||||
</lineSegments>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,53 @@
|
||||
import { Component } from "react";
|
||||
import type { ReactNode, ErrorInfo } from "react";
|
||||
|
||||
interface Props {
|
||||
children: ReactNode;
|
||||
fallback?: ReactNode;
|
||||
}
|
||||
|
||||
interface State {
|
||||
hasError: boolean;
|
||||
error: Error | null;
|
||||
}
|
||||
|
||||
export class ErrorBoundary extends Component<Props, State> {
|
||||
constructor(props: Props) {
|
||||
super(props);
|
||||
this.state = { hasError: false, error: null };
|
||||
}
|
||||
|
||||
static getDerivedStateFromError(error: Error): State {
|
||||
return { hasError: true, error };
|
||||
}
|
||||
|
||||
componentDidCatch(error: Error, info: ErrorInfo) {
|
||||
console.error("ErrorBoundary caught:", error, info.componentStack);
|
||||
}
|
||||
|
||||
render() {
|
||||
if (this.state.hasError) {
|
||||
return (
|
||||
this.props.fallback ?? (
|
||||
<div className="flex items-center justify-center h-full">
|
||||
<div className="text-center p-8 max-w-md">
|
||||
<p className="text-red-400 text-lg font-medium mb-2">
|
||||
Rendering error
|
||||
</p>
|
||||
<p className="text-white/50 text-sm font-mono">
|
||||
{this.state.error?.message ?? "Unknown error"}
|
||||
</p>
|
||||
<button
|
||||
onClick={() => this.setState({ hasError: false, error: null })}
|
||||
className="mt-4 px-4 py-2 bg-white/10 hover:bg-white/20 rounded text-sm transition-colors"
|
||||
>
|
||||
Retry
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
)
|
||||
);
|
||||
}
|
||||
return this.props.children;
|
||||
}
|
||||
}
|
||||
@@ -0,0 +1,264 @@
|
||||
import { useMemo } from "react";
|
||||
import { ScrollArea } from "@/components/ui/scroll-area";
|
||||
import { colorForLabel, STATUS_LEGEND } from "../lib/colors";
|
||||
import type { GraphData } from "../lib/types";
|
||||
|
||||
interface FilterPanelProps {
|
||||
data: GraphData;
|
||||
enabledLabels: Set<string>;
|
||||
enabledEdgeTypes: Set<string>;
|
||||
showLabels: boolean;
|
||||
onToggleLabel: (label: string) => void;
|
||||
onToggleEdgeType: (type: string) => void;
|
||||
onToggleShowLabels: () => void;
|
||||
onEnableAll: () => void;
|
||||
onDisableAll: () => void;
|
||||
/* Dead-code view */
|
||||
deadCodeView: boolean;
|
||||
showOnlyDead: boolean;
|
||||
hideEntryPoints: boolean;
|
||||
hideTests: boolean;
|
||||
onToggleDeadCodeView: () => void;
|
||||
onToggleShowOnlyDead: () => void;
|
||||
onToggleHideEntryPoints: () => void;
|
||||
onToggleHideTests: () => void;
|
||||
/* Missed skeleton (#963): white satellite of not-fully-indexed files */
|
||||
missedView: boolean;
|
||||
missedCount: number;
|
||||
onToggleMissedView: () => void;
|
||||
}
|
||||
|
||||
/* Checkbox row matching the existing "Show labels" toggle style */
|
||||
function CheckRow({
|
||||
checked,
|
||||
onToggle,
|
||||
label,
|
||||
count,
|
||||
}: {
|
||||
checked: boolean;
|
||||
onToggle: () => void;
|
||||
label: string;
|
||||
count?: number;
|
||||
}) {
|
||||
return (
|
||||
<button
|
||||
onClick={onToggle}
|
||||
className={`flex items-center gap-1.5 text-[11px] font-medium transition-all ${
|
||||
checked ? "text-primary" : "text-foreground/40"
|
||||
}`}
|
||||
>
|
||||
<span
|
||||
className={`w-3.5 h-3.5 rounded border flex items-center justify-center transition-all ${
|
||||
checked ? "border-primary bg-primary/20" : "border-foreground/15"
|
||||
}`}
|
||||
>
|
||||
{checked && <span className="text-primary text-[9px]">✓</span>}
|
||||
</span>
|
||||
{label}
|
||||
{count !== undefined && (
|
||||
<span className="text-foreground/25 tabular-nums">{count.toLocaleString()}</span>
|
||||
)}
|
||||
</button>
|
||||
);
|
||||
}
|
||||
|
||||
export function FilterPanel({
|
||||
data,
|
||||
enabledLabels,
|
||||
enabledEdgeTypes,
|
||||
showLabels,
|
||||
onToggleLabel,
|
||||
onToggleEdgeType,
|
||||
onToggleShowLabels,
|
||||
onEnableAll,
|
||||
onDisableAll,
|
||||
deadCodeView,
|
||||
showOnlyDead,
|
||||
hideEntryPoints,
|
||||
hideTests,
|
||||
onToggleDeadCodeView,
|
||||
onToggleShowOnlyDead,
|
||||
onToggleHideEntryPoints,
|
||||
onToggleHideTests,
|
||||
missedView,
|
||||
missedCount,
|
||||
onToggleMissedView,
|
||||
}: FilterPanelProps) {
|
||||
const { labelCounts, edgeTypeCounts, statusCounts } = useMemo(() => {
|
||||
const lc = new Map<string, number>();
|
||||
for (const n of data.nodes) lc.set(n.label, (lc.get(n.label) ?? 0) + 1);
|
||||
const ec = new Map<string, number>();
|
||||
for (const e of data.edges) ec.set(e.type, (ec.get(e.type) ?? 0) + 1);
|
||||
const sc = new Map<string, number>();
|
||||
for (const n of data.nodes)
|
||||
if (n.status) sc.set(n.status, (sc.get(n.status) ?? 0) + 1);
|
||||
return {
|
||||
labelCounts: [...lc.entries()].sort((a, b) => b[1] - a[1]),
|
||||
edgeTypeCounts: [...ec.entries()].sort((a, b) => b[1] - a[1]),
|
||||
statusCounts: sc,
|
||||
};
|
||||
}, [data]);
|
||||
|
||||
const deadCount = statusCounts.get("dead") ?? 0;
|
||||
|
||||
return (
|
||||
<div className="flex flex-col shrink-0 max-h-[45%] border-b border-border/40">
|
||||
{/* Header row — always visible */}
|
||||
<div className="flex items-center justify-between px-4 pt-3 pb-2 shrink-0">
|
||||
<span className="text-[11px] font-medium text-foreground/50 uppercase tracking-widest">
|
||||
Filters
|
||||
</span>
|
||||
<div className="flex items-center gap-2">
|
||||
<button onClick={onEnableAll} className="text-[10px] text-primary/70 hover:text-primary transition-colors">All</button>
|
||||
<span className="text-foreground/15">|</span>
|
||||
<button onClick={onDisableAll} className="text-[10px] text-primary/70 hover:text-primary transition-colors">None</button>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
{/* Scrollable filter groups */}
|
||||
<ScrollArea className="flex-1 min-h-0">
|
||||
<div className="px-4 pb-3 space-y-3">
|
||||
{/* Node types */}
|
||||
{labelCounts.length > 0 && (
|
||||
<div>
|
||||
<p className="text-[10px] font-medium text-foreground/40 mb-1.5 uppercase tracking-wider">Node types</p>
|
||||
<div className="flex flex-wrap gap-1">
|
||||
{labelCounts.map(([label, count]) => {
|
||||
const on = enabledLabels.has(label);
|
||||
const c = colorForLabel(label);
|
||||
return (
|
||||
<button
|
||||
key={label}
|
||||
onClick={() => onToggleLabel(label)}
|
||||
className={`inline-flex items-center gap-1 px-1.5 py-[3px] rounded-md text-[10px] font-medium transition-all border ${
|
||||
on ? "border-white/[0.08] bg-white/[0.04]" : "border-transparent opacity-25"
|
||||
}`}
|
||||
>
|
||||
<span className="w-[5px] h-[5px] rounded-full" style={{ backgroundColor: on ? c : "#444" }} />
|
||||
<span style={{ color: on ? c : "#555" }}>{label}</span>
|
||||
<span className="text-foreground/20 tabular-nums">{count.toLocaleString()}</span>
|
||||
</button>
|
||||
);
|
||||
})}
|
||||
</div>
|
||||
</div>
|
||||
)}
|
||||
|
||||
{/* Relationships */}
|
||||
{edgeTypeCounts.length > 0 && (
|
||||
<div>
|
||||
<p className="text-[10px] font-medium text-foreground/40 mb-1.5 uppercase tracking-wider">Relationships</p>
|
||||
<div className="flex flex-wrap gap-1">
|
||||
{edgeTypeCounts.map(([type, count]) => {
|
||||
const on = enabledEdgeTypes.has(type);
|
||||
return (
|
||||
<button
|
||||
key={type}
|
||||
onClick={() => onToggleEdgeType(type)}
|
||||
className={`inline-flex items-center gap-1 px-1.5 py-[3px] rounded-md text-[10px] font-medium transition-all border ${
|
||||
on ? "border-white/[0.06] bg-white/[0.03] text-foreground/60" : "border-transparent opacity-20 text-foreground/30"
|
||||
}`}
|
||||
>
|
||||
{type.replace(/_/g, " ").toLowerCase()}
|
||||
<span className="text-foreground/15 tabular-nums">{count.toLocaleString()}</span>
|
||||
</button>
|
||||
);
|
||||
})}
|
||||
</div>
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
</ScrollArea>
|
||||
|
||||
{/* Missed skeleton (#963): white satellite cluster of files the indexer
|
||||
could not fully cover, shown beside the code galaxy. Click it to
|
||||
focus; click the code galaxy to come back. */}
|
||||
<div className="px-4 pt-2 border-t border-border/30 space-y-2 shrink-0">
|
||||
<div className="flex items-center justify-between">
|
||||
<span className="text-[10px] text-foreground/30 uppercase tracking-widest">
|
||||
Missed files
|
||||
</span>
|
||||
{missedCount > 0 && (
|
||||
<span className="text-[10px] text-foreground/50 tabular-nums">
|
||||
{missedCount.toLocaleString()} files
|
||||
</span>
|
||||
)}
|
||||
</div>
|
||||
<CheckRow
|
||||
checked={missedView}
|
||||
onToggle={onToggleMissedView}
|
||||
label="Show missed skeleton"
|
||||
/>
|
||||
<p className="text-[9px] leading-snug text-foreground/30">
|
||||
{missedCount > 0
|
||||
? "White satellite = files not fully indexed (best-effort). Click it to focus, click the galaxy to return."
|
||||
: "No known misses (best-effort — not a completeness guarantee)."}
|
||||
</p>
|
||||
</div>
|
||||
|
||||
{/* Dead-code view */}
|
||||
<div className="px-4 pt-2 border-t border-border/30 space-y-2 shrink-0">
|
||||
<div className="flex items-center justify-between">
|
||||
<span className="text-[10px] text-foreground/30 uppercase tracking-widest">
|
||||
Dead code
|
||||
</span>
|
||||
<span className="text-[10px] text-red-400/80 tabular-nums">
|
||||
{deadCount.toLocaleString()} dead
|
||||
</span>
|
||||
</div>
|
||||
|
||||
<CheckRow
|
||||
checked={deadCodeView}
|
||||
onToggle={onToggleDeadCodeView}
|
||||
label="Color by status"
|
||||
/>
|
||||
<CheckRow
|
||||
checked={showOnlyDead}
|
||||
onToggle={onToggleShowOnlyDead}
|
||||
label="Show only dead code"
|
||||
/>
|
||||
<CheckRow
|
||||
checked={hideEntryPoints}
|
||||
onToggle={onToggleHideEntryPoints}
|
||||
label="Hide entry points"
|
||||
/>
|
||||
<CheckRow checked={hideTests} onToggle={onToggleHideTests} label="Hide tests" />
|
||||
|
||||
{/* Legend (only meaningful while colored by status) */}
|
||||
{deadCodeView && (
|
||||
<div className="flex flex-wrap gap-x-2 gap-y-1 pt-1">
|
||||
{STATUS_LEGEND.map((s) => (
|
||||
<span
|
||||
key={s.status}
|
||||
className="inline-flex items-center gap-1 text-[9px] text-foreground/40"
|
||||
>
|
||||
<span
|
||||
className="w-[6px] h-[6px] rounded-full"
|
||||
style={{ backgroundColor: s.color }}
|
||||
/>
|
||||
{s.label}
|
||||
</span>
|
||||
))}
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
|
||||
{/* Display options — pinned footer */}
|
||||
<div className="px-4 py-2.5 border-t border-border/20 shrink-0">
|
||||
<button
|
||||
onClick={onToggleShowLabels}
|
||||
className={`inline-flex items-center gap-1.5 text-[11px] font-medium transition-all ${
|
||||
showLabels ? "text-primary" : "text-foreground/30"
|
||||
}`}
|
||||
>
|
||||
<span className={`w-3.5 h-3.5 rounded border flex items-center justify-center transition-all ${
|
||||
showLabels ? "border-primary bg-primary/20" : "border-foreground/15"
|
||||
}`}>
|
||||
{showLabels && <span className="text-primary text-[9px]">✓</span>}
|
||||
</span>
|
||||
Show labels
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,84 @@
|
||||
import type { LoadProgress } from "../hooks/useGraphData";
|
||||
|
||||
/* Small constellation whose nodes pulse and whose edges draw themselves in a
|
||||
* staggered loop — a miniature of the graph being loaded. Pure SVG/CSS
|
||||
* (keyframes in globals.css) so it costs nothing while the real payload
|
||||
* streams in, and it degrades to a static constellation under
|
||||
* prefers-reduced-motion. */
|
||||
|
||||
const LOADER_NODES: Array<{ cx: number; cy: number; r: number; delay: string }> = [
|
||||
{ cx: 60, cy: 18, r: 5, delay: "0s" },
|
||||
{ cx: 22, cy: 42, r: 4, delay: "0.35s" },
|
||||
{ cx: 98, cy: 40, r: 4, delay: "0.7s" },
|
||||
{ cx: 42, cy: 78, r: 4.5, delay: "1.05s" },
|
||||
{ cx: 84, cy: 82, r: 3.5, delay: "1.4s" },
|
||||
{ cx: 60, cy: 52, r: 6, delay: "0.15s" },
|
||||
{ cx: 14, cy: 88, r: 3, delay: "1.75s" },
|
||||
];
|
||||
|
||||
const LOADER_EDGES: Array<{ x1: number; y1: number; x2: number; y2: number; delay: string }> = [
|
||||
{ x1: 60, y1: 18, x2: 60, y2: 52, delay: "0s" },
|
||||
{ x1: 22, y1: 42, x2: 60, y2: 52, delay: "0.3s" },
|
||||
{ x1: 98, y1: 40, x2: 60, y2: 52, delay: "0.6s" },
|
||||
{ x1: 42, y1: 78, x2: 60, y2: 52, delay: "0.9s" },
|
||||
{ x1: 84, y1: 82, x2: 60, y2: 52, delay: "1.2s" },
|
||||
{ x1: 42, y1: 78, x2: 14, y2: 88, delay: "1.5s" },
|
||||
{ x1: 22, y1: 42, x2: 60, y2: 18, delay: "1.8s" },
|
||||
];
|
||||
|
||||
function formatMegabytes(bytes: number): string {
|
||||
return (bytes / (1024 * 1024)).toFixed(1);
|
||||
}
|
||||
|
||||
interface GraphLoaderProps {
|
||||
nodeBudget: number;
|
||||
progress: LoadProgress;
|
||||
}
|
||||
|
||||
export function GraphLoader({ nodeBudget, progress }: GraphLoaderProps) {
|
||||
const receiving = progress.receivedBytes > 0;
|
||||
return (
|
||||
<div className="text-center" role="status" aria-live="polite">
|
||||
<svg
|
||||
width="120"
|
||||
height="104"
|
||||
viewBox="0 0 120 104"
|
||||
className="mx-auto"
|
||||
aria-hidden="true"
|
||||
>
|
||||
{LOADER_EDGES.map((e, i) => (
|
||||
<line
|
||||
key={`e${i}`}
|
||||
x1={e.x1}
|
||||
y1={e.y1}
|
||||
x2={e.x2}
|
||||
y2={e.y2}
|
||||
className="graph-loader-edge"
|
||||
style={{ animationDelay: e.delay }}
|
||||
/>
|
||||
))}
|
||||
{LOADER_NODES.map((n, i) => (
|
||||
<circle
|
||||
key={`n${i}`}
|
||||
cx={n.cx}
|
||||
cy={n.cy}
|
||||
r={n.r}
|
||||
className="graph-loader-node"
|
||||
style={{ animationDelay: n.delay }}
|
||||
/>
|
||||
))}
|
||||
</svg>
|
||||
<p className="text-white/50 text-sm mt-4">
|
||||
{receiving ? "Receiving graph" : "Computing layout"} — up to{" "}
|
||||
{nodeBudget.toLocaleString("en-US")} nodes
|
||||
</p>
|
||||
<p className="text-cyan-300/60 text-xs font-mono mt-1 h-4">
|
||||
{receiving
|
||||
? progress.totalBytes
|
||||
? `${formatMegabytes(progress.receivedBytes)} of ${formatMegabytes(progress.totalBytes)} MB`
|
||||
: `${formatMegabytes(progress.receivedBytes)} MB received`
|
||||
: " "}
|
||||
</p>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,9 @@
|
||||
import { describe, expect, it } from "vitest";
|
||||
import { GRAPH_CANVAS_DPR } from "./GraphScene";
|
||||
|
||||
describe("GraphScene render limits", () => {
|
||||
it("caps the high-DPI WebGL backing store below the MSAA failure range", () => {
|
||||
expect(GRAPH_CANVAS_DPR[0]).toBe(1);
|
||||
expect(GRAPH_CANVAS_DPR[1]).toBeLessThanOrEqual(1.5);
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,332 @@
|
||||
import { useState, useRef, useEffect, useCallback } from "react";
|
||||
import { Canvas, useThree, useFrame } from "@react-three/fiber";
|
||||
import { OrbitControls } from "@react-three/drei";
|
||||
import type { OrbitControls as OrbitControlsImpl } from "three-stdlib";
|
||||
import { EffectComposer, Bloom } from "@react-three/postprocessing";
|
||||
import * as THREE from "three";
|
||||
import { NodeCloud } from "./NodeCloud";
|
||||
import { EdgeLines } from "./EdgeLines";
|
||||
import { NodeLabels } from "./NodeLabels";
|
||||
import { NodeTooltip } from "./NodeTooltip";
|
||||
import type { GraphData, GraphNode, LinkedProject } from "../lib/types";
|
||||
import {
|
||||
DEFAULT_DISPLAY_SETTINGS,
|
||||
bloomIntensityScale,
|
||||
nodeBoostScale,
|
||||
type DisplaySettings,
|
||||
} from "../lib/density";
|
||||
|
||||
const BASE_BLOOM_INTENSITY = 1.45;
|
||||
|
||||
/* ── Camera fly-to animation ────────────────────────────── */
|
||||
|
||||
interface CameraTarget {
|
||||
position: THREE.Vector3;
|
||||
lookAt: THREE.Vector3;
|
||||
}
|
||||
|
||||
function CameraAnimator({
|
||||
target,
|
||||
controlsRef,
|
||||
}: {
|
||||
target: CameraTarget | null;
|
||||
controlsRef: React.RefObject<OrbitControlsImpl | null>;
|
||||
}) {
|
||||
const { camera } = useThree();
|
||||
const targetRef = useRef<CameraTarget | null>(null);
|
||||
const progress = useRef(1);
|
||||
|
||||
useEffect(() => {
|
||||
if (target) {
|
||||
targetRef.current = target;
|
||||
progress.current = 0;
|
||||
}
|
||||
}, [target]);
|
||||
|
||||
useFrame(() => {
|
||||
if (!targetRef.current || progress.current >= 1) return;
|
||||
|
||||
progress.current = Math.min(1, progress.current + 0.02);
|
||||
const t = 1 - Math.pow(1 - progress.current, 3); /* ease-out cubic */
|
||||
|
||||
camera.position.lerp(targetRef.current.position, t * 0.08);
|
||||
|
||||
/* Move the OrbitControls pivot to the focus point as well. Otherwise the
|
||||
* controls keep their target at the origin and re-center the view on the
|
||||
* next frame, snapping the camera back to the middle after the fly-to. */
|
||||
const controls = controlsRef.current;
|
||||
if (controls) {
|
||||
controls.target.lerp(targetRef.current.lookAt, t * 0.08);
|
||||
controls.update();
|
||||
} else {
|
||||
camera.lookAt(targetRef.current.lookAt);
|
||||
}
|
||||
});
|
||||
|
||||
return null;
|
||||
}
|
||||
|
||||
/* ── Idle auto-rotation ──────────────────────────────────── */
|
||||
|
||||
const IDLE_TIMEOUT_MS = 60_000;
|
||||
export const GRAPH_CANVAS_DPR: [number, number] = [1, 1.5];
|
||||
export const GRAPH_COMPOSER_MULTISAMPLING = 0;
|
||||
|
||||
function IdleAutoRotate({
|
||||
controlsRef,
|
||||
}: {
|
||||
controlsRef: React.RefObject<OrbitControlsImpl | null>;
|
||||
}) {
|
||||
const lastInteraction = useRef(Date.now());
|
||||
|
||||
/* Reset timer on any pointer/wheel event */
|
||||
const resetTimer = useCallback(() => {
|
||||
lastInteraction.current = Date.now();
|
||||
if (controlsRef.current) {
|
||||
controlsRef.current.autoRotate = false;
|
||||
}
|
||||
}, [controlsRef]);
|
||||
|
||||
useEffect(() => {
|
||||
const canvas = document.querySelector("canvas");
|
||||
if (!canvas) return;
|
||||
|
||||
canvas.addEventListener("pointerdown", resetTimer);
|
||||
canvas.addEventListener("wheel", resetTimer);
|
||||
return () => {
|
||||
canvas.removeEventListener("pointerdown", resetTimer);
|
||||
canvas.removeEventListener("wheel", resetTimer);
|
||||
};
|
||||
}, [resetTimer]);
|
||||
|
||||
useFrame(() => {
|
||||
if (!controlsRef.current) return;
|
||||
const idle = Date.now() - lastInteraction.current > IDLE_TIMEOUT_MS;
|
||||
controlsRef.current.autoRotate = idle;
|
||||
});
|
||||
|
||||
return null;
|
||||
}
|
||||
|
||||
/* ── Main scene ─────────────────────────────────────────── */
|
||||
|
||||
interface GraphSceneProps {
|
||||
data: GraphData;
|
||||
/* Missed skeleton (#963): pre-offset, pre-painted white nodes + edges of
|
||||
* the not-fully-indexed files, rendered as a ghost cluster beside the
|
||||
* galaxy. null hides it. */
|
||||
missed?: { nodes: GraphNode[]; edges: GraphData["edges"] } | null;
|
||||
highlightedIds: Set<number> | null;
|
||||
cameraTarget: CameraTarget | null;
|
||||
showLabels: boolean;
|
||||
display?: DisplaySettings;
|
||||
onNodeClick: (node: GraphNode) => void;
|
||||
/* Fired when a click hits empty space (no node). Used to fly back to the
|
||||
* overview after focusing the missed skeleton. */
|
||||
onBackgroundClick?: () => void;
|
||||
}
|
||||
|
||||
export type { CameraTarget };
|
||||
|
||||
export function GraphScene({
|
||||
data,
|
||||
missed = null,
|
||||
highlightedIds,
|
||||
cameraTarget,
|
||||
showLabels,
|
||||
display = DEFAULT_DISPLAY_SETTINGS,
|
||||
onNodeClick,
|
||||
onBackgroundClick,
|
||||
}: GraphSceneProps) {
|
||||
const [hovered, setHovered] = useState<GraphNode | null>(null);
|
||||
const controlsRef = useRef<OrbitControlsImpl | null>(null);
|
||||
|
||||
/* Adaptive density defaults × user multipliers. The automatic scale keeps
|
||||
* contrast roughly constant as the graph grows; the sliders nudge it.
|
||||
* NodeCloud applies `nodeBoost` directly (no internal density scaling),
|
||||
* whereas EdgeLines scales by edge density itself — so it receives only the
|
||||
* user edge-brightness multiplier to avoid double-applying. */
|
||||
const nodeBoost = nodeBoostScale(data.nodes.length) * display.nodeGlow;
|
||||
const bloomIntensity =
|
||||
BASE_BLOOM_INTENSITY * bloomIntensityScale(data.nodes.length) * display.bloom;
|
||||
|
||||
return (
|
||||
<Canvas
|
||||
camera={{ position: [0, 0, 800], fov: 50, near: 0.1, far: 100000 }}
|
||||
style={{ background: "#06090f" }}
|
||||
dpr={GRAPH_CANVAS_DPR}
|
||||
gl={{
|
||||
antialias: false,
|
||||
alpha: false,
|
||||
powerPreference: "high-performance",
|
||||
}}
|
||||
onPointerMissed={onBackgroundClick}
|
||||
>
|
||||
<color attach="background" args={["#06090f"]} />
|
||||
<ambientLight intensity={0.5} />
|
||||
<pointLight position={[500, 500, 500]} intensity={0.6} />
|
||||
<pointLight
|
||||
position={[-300, -200, -300]}
|
||||
intensity={0.4}
|
||||
color="#6040ff"
|
||||
/>
|
||||
|
||||
<EdgeLines
|
||||
nodes={data.nodes}
|
||||
edges={data.edges}
|
||||
highlightedIds={highlightedIds}
|
||||
brightness={display.edgeBrightness}
|
||||
/>
|
||||
<NodeCloud
|
||||
nodes={data.nodes}
|
||||
highlightedIds={highlightedIds}
|
||||
onHover={setHovered}
|
||||
onClick={onNodeClick}
|
||||
boost={nodeBoost}
|
||||
/>
|
||||
{showLabels && <NodeLabels nodes={data.nodes} highlightedIds={highlightedIds} />}
|
||||
|
||||
{/* Missed skeleton (#963): white ghost of the not-fully-indexed files.
|
||||
* Clicks route through the same handler — GraphTab re-centers the
|
||||
* camera on the whole skeleton cluster. */}
|
||||
{missed && missed.nodes.length > 0 && (
|
||||
<group>
|
||||
<EdgeLines
|
||||
nodes={missed.nodes}
|
||||
edges={missed.edges}
|
||||
highlightedIds={null}
|
||||
opacity={0.28}
|
||||
brightness={display.edgeBrightness}
|
||||
/>
|
||||
<NodeCloud
|
||||
nodes={missed.nodes}
|
||||
highlightedIds={null}
|
||||
onHover={setHovered}
|
||||
onClick={onNodeClick}
|
||||
opacity={0.6}
|
||||
boost={nodeBoost * 0.75}
|
||||
/>
|
||||
{showLabels && <NodeLabels nodes={missed.nodes} highlightedIds={null} />}
|
||||
</group>
|
||||
)}
|
||||
|
||||
{/* Satellite galaxies for cross-repo linked projects */}
|
||||
{data.linked_projects?.map((lp: LinkedProject) => {
|
||||
const offsetNodes = lp.nodes.map((n) => ({
|
||||
...n,
|
||||
x: n.x + lp.offset.x,
|
||||
y: n.y + lp.offset.y,
|
||||
z: n.z + lp.offset.z,
|
||||
}));
|
||||
return (
|
||||
<group key={lp.project}>
|
||||
<EdgeLines
|
||||
nodes={offsetNodes}
|
||||
edges={lp.edges}
|
||||
highlightedIds={null}
|
||||
opacity={0.3}
|
||||
brightness={display.edgeBrightness}
|
||||
/>
|
||||
<NodeCloud
|
||||
nodes={offsetNodes}
|
||||
highlightedIds={null}
|
||||
onHover={setHovered}
|
||||
onClick={onNodeClick}
|
||||
opacity={0.5}
|
||||
boost={nodeBoost}
|
||||
/>
|
||||
{/* Inter-galaxy CROSS_* edges: source is in primary, target in
|
||||
* this linked project's offset nodes. */}
|
||||
{lp.cross_edges && lp.cross_edges.length > 0 && (
|
||||
<EdgeLines
|
||||
nodes={data.nodes}
|
||||
targetNodes={offsetNodes}
|
||||
edges={lp.cross_edges}
|
||||
highlightedIds={highlightedIds}
|
||||
opacity={0.85}
|
||||
brightness={display.edgeBrightness}
|
||||
/>
|
||||
)}
|
||||
</group>
|
||||
);
|
||||
})}
|
||||
|
||||
{hovered && <NodeTooltip node={hovered} />}
|
||||
|
||||
<CameraAnimator target={cameraTarget} controlsRef={controlsRef} />
|
||||
<IdleAutoRotate controlsRef={controlsRef} />
|
||||
|
||||
<EffectComposer multisampling={GRAPH_COMPOSER_MULTISAMPLING}>
|
||||
<Bloom
|
||||
luminanceThreshold={0.3}
|
||||
luminanceSmoothing={0.7}
|
||||
intensity={bloomIntensity}
|
||||
mipmapBlur
|
||||
radius={0.6}
|
||||
/>
|
||||
</EffectComposer>
|
||||
|
||||
<OrbitControls
|
||||
ref={controlsRef}
|
||||
enableDamping
|
||||
dampingFactor={0.08}
|
||||
rotateSpeed={0.5}
|
||||
zoomSpeed={1.5}
|
||||
minDistance={10}
|
||||
maxDistance={50000}
|
||||
autoRotateSpeed={0.4}
|
||||
/>
|
||||
</Canvas>
|
||||
);
|
||||
}
|
||||
|
||||
/* ── Helper: compute camera target from node IDs ────────── */
|
||||
|
||||
export function computeCameraTarget(
|
||||
nodes: GraphNode[],
|
||||
ids: Set<number>,
|
||||
): CameraTarget | null {
|
||||
if (ids.size === 0) return null;
|
||||
|
||||
let cx = 0,
|
||||
cy = 0,
|
||||
cz = 0,
|
||||
count = 0;
|
||||
for (const node of nodes) {
|
||||
if (ids.has(node.id)) {
|
||||
cx += node.x;
|
||||
cy += node.y;
|
||||
cz += node.z;
|
||||
count++;
|
||||
}
|
||||
}
|
||||
if (count === 0) return null;
|
||||
|
||||
cx /= count;
|
||||
cy /= count;
|
||||
cz /= count;
|
||||
|
||||
/* Distance based on cluster spread — ensure we never zoom too close */
|
||||
let maxDist = 0;
|
||||
for (const node of nodes) {
|
||||
if (ids.has(node.id)) {
|
||||
const d = Math.sqrt(
|
||||
(node.x - cx) ** 2 + (node.y - cy) ** 2 + (node.z - cz) ** 2,
|
||||
);
|
||||
if (d > maxDist) maxDist = d;
|
||||
}
|
||||
}
|
||||
|
||||
/* Minimum distance scales with count: single node = 300, cluster = spread-based */
|
||||
const spreadDist = maxDist * 3;
|
||||
const minDist = count <= 5 ? 300 : 200;
|
||||
const distance = Math.max(minDist, spreadDist);
|
||||
const lookAt = new THREE.Vector3(cx, cy, cz);
|
||||
const position = new THREE.Vector3(
|
||||
cx + distance * 0.2,
|
||||
cy + distance * 0.15,
|
||||
cz + distance,
|
||||
);
|
||||
|
||||
return { position, lookAt };
|
||||
}
|
||||
@@ -0,0 +1,64 @@
|
||||
/* @vitest-environment jsdom */
|
||||
import "@testing-library/jest-dom/vitest";
|
||||
import { fireEvent, render, screen } from "@testing-library/react";
|
||||
import { afterEach, describe, expect, it, vi } from "vitest";
|
||||
import { GraphTab } from "./GraphTab";
|
||||
import type { GraphData } from "../lib/types";
|
||||
|
||||
/* GraphScene renders a WebGL <Canvas> which jsdom can't run — stub it out. */
|
||||
vi.mock("./GraphScene", () => ({
|
||||
GraphScene: () => null,
|
||||
computeCameraTarget: () => null,
|
||||
}));
|
||||
|
||||
const SAMPLE: GraphData = {
|
||||
nodes: [
|
||||
{
|
||||
id: 1, x: 0, y: 0, z: 0, label: "Function", name: "orphan",
|
||||
file_path: "src/orphan.ts", size: 1, color: "#fff", status: "dead", in_calls: 0,
|
||||
},
|
||||
{
|
||||
id: 2, x: 1, y: 0, z: 0, label: "Function", name: "used",
|
||||
file_path: "src/used.ts", size: 1, color: "#fff", status: "normal", in_calls: 3,
|
||||
},
|
||||
],
|
||||
edges: [{ source: 2, target: 1, type: "CALLS" }],
|
||||
total_nodes: 2,
|
||||
};
|
||||
|
||||
function mockLayoutFetch(data: GraphData) {
|
||||
const fetchMock = vi.fn(async (input: RequestInfo | URL) => {
|
||||
const url = String(input);
|
||||
if (url.startsWith("/api/layout")) {
|
||||
return new Response(JSON.stringify(data), {
|
||||
status: 200,
|
||||
headers: { "Content-Type": "application/json" },
|
||||
});
|
||||
}
|
||||
return new Response("{}", { status: 200 });
|
||||
});
|
||||
vi.stubGlobal("fetch", fetchMock);
|
||||
return fetchMock;
|
||||
}
|
||||
|
||||
describe("GraphTab dead-code filters", () => {
|
||||
afterEach(() => {
|
||||
vi.unstubAllGlobals();
|
||||
});
|
||||
|
||||
it("shows the dead count and filters to only dead code on toggle", async () => {
|
||||
mockLayoutFetch(SAMPLE);
|
||||
render(<GraphTab project="demo" />);
|
||||
|
||||
/* Panel loaded; the dead-code section reports one dead node. */
|
||||
expect(await screen.findByText("Filters")).toBeInTheDocument();
|
||||
expect(screen.getByText("1 dead")).toBeInTheDocument();
|
||||
|
||||
/* Both nodes visible initially — no "filtered from" notice. */
|
||||
expect(screen.queryByText(/filtered from/)).not.toBeInTheDocument();
|
||||
|
||||
/* Toggling "Show only dead code" hides the non-dead node. */
|
||||
fireEvent.click(screen.getByRole("button", { name: /Show only dead code/ }));
|
||||
expect(await screen.findByText(/filtered from 2/)).toBeInTheDocument();
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,63 @@
|
||||
/* @vitest-environment jsdom */
|
||||
import "@testing-library/jest-dom/vitest";
|
||||
import { fireEvent, render, screen } from "@testing-library/react";
|
||||
import { afterEach, describe, expect, it, vi } from "vitest";
|
||||
import { GraphTab } from "./GraphTab";
|
||||
import type { GraphData } from "../lib/types";
|
||||
|
||||
/* GraphScene renders a WebGL <Canvas> which jsdom can't run — stub it out. */
|
||||
vi.mock("./GraphScene", () => ({
|
||||
GraphScene: () => null,
|
||||
computeCameraTarget: () => null,
|
||||
}));
|
||||
|
||||
const SAMPLE: GraphData = {
|
||||
nodes: [
|
||||
{ id: 1, x: 0, y: 0, z: 0, label: "Function", name: "foo", size: 1, color: "#fff" },
|
||||
{ id: 2, x: 1, y: 0, z: 0, label: "Class", name: "Bar", size: 1, color: "#fff" },
|
||||
],
|
||||
edges: [{ source: 1, target: 2, type: "CALLS" }],
|
||||
total_nodes: 2,
|
||||
};
|
||||
|
||||
function mockLayoutFetch(data: GraphData) {
|
||||
const fetchMock = vi.fn(async (input: RequestInfo | URL) => {
|
||||
const url = String(input);
|
||||
if (url.startsWith("/api/layout")) {
|
||||
return new Response(JSON.stringify(data), {
|
||||
status: 200,
|
||||
headers: { "Content-Type": "application/json" },
|
||||
});
|
||||
}
|
||||
return new Response("{}", { status: 200 });
|
||||
});
|
||||
vi.stubGlobal("fetch", fetchMock);
|
||||
return fetchMock;
|
||||
}
|
||||
|
||||
describe("GraphTab filters", () => {
|
||||
afterEach(() => {
|
||||
vi.unstubAllGlobals();
|
||||
});
|
||||
|
||||
it("keeps the filter sidebar visible when all nodes are filtered out", async () => {
|
||||
mockLayoutFetch(SAMPLE);
|
||||
|
||||
render(<GraphTab project="demo" />);
|
||||
|
||||
/* Wait for the layout to load — the filter panel header appears. */
|
||||
expect(await screen.findByText("Filters")).toBeInTheDocument();
|
||||
|
||||
/* Disable every filter via the "None" shortcut. */
|
||||
fireEvent.click(screen.getByRole("button", { name: "None" }));
|
||||
|
||||
/* The graph area reports that everything is filtered out… */
|
||||
expect(screen.getByText("All nodes filtered out")).toBeInTheDocument();
|
||||
|
||||
/* …but the filter sidebar must stay so the user can re-enable filters
|
||||
instead of being forced to reset everything. */
|
||||
expect(screen.getByText("Filters")).toBeInTheDocument();
|
||||
expect(screen.getByRole("button", { name: "All" })).toBeInTheDocument();
|
||||
expect(screen.getByRole("button", { name: "None" })).toBeInTheDocument();
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,36 @@
|
||||
import { describe, expect, it } from "vitest";
|
||||
import { formatGraphLimitNotice } from "./GraphTab";
|
||||
import type { GraphData } from "../lib/types";
|
||||
|
||||
describe("formatGraphLimitNotice", () => {
|
||||
it("reports when the graph response is truncated for render safety", () => {
|
||||
const data = {
|
||||
nodes: Array.from({ length: 2000 }, (_, id) => ({
|
||||
id,
|
||||
x: 0,
|
||||
y: 0,
|
||||
z: 0,
|
||||
label: "Function",
|
||||
name: `fn${id}`,
|
||||
size: 1,
|
||||
color: "#ffffff",
|
||||
})),
|
||||
edges: [],
|
||||
total_nodes: 43729,
|
||||
} satisfies GraphData;
|
||||
|
||||
expect(formatGraphLimitNotice(data)).toBe(
|
||||
"Showing 2,000 of 43,729 nodes (0 edges). Raise the node budget or use filters.",
|
||||
);
|
||||
});
|
||||
|
||||
it("stays quiet when the full graph is rendered", () => {
|
||||
const data = {
|
||||
nodes: [],
|
||||
edges: [],
|
||||
total_nodes: 0,
|
||||
} satisfies GraphData;
|
||||
|
||||
expect(formatGraphLimitNotice(data)).toBeNull();
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,593 @@
|
||||
import { useEffect, useState, useCallback, useMemo } from "react";
|
||||
import { Button } from "@/components/ui/button";
|
||||
import {
|
||||
useGraphData,
|
||||
clampNodeBudget,
|
||||
GRAPH_RENDER_NODE_LIMIT,
|
||||
GRAPH_NODE_BUDGET_STEP,
|
||||
GRAPH_NODE_BUDGET_MAX,
|
||||
} from "../hooks/useGraphData";
|
||||
import { GraphLoader } from "./GraphLoader";
|
||||
import { DisplaySettingsMenu } from "./DisplaySettingsMenu";
|
||||
import {
|
||||
loadDisplaySettings,
|
||||
saveDisplaySettings,
|
||||
type DisplaySettings,
|
||||
} from "../lib/density";
|
||||
import {
|
||||
GraphScene,
|
||||
computeCameraTarget,
|
||||
type CameraTarget,
|
||||
} from "./GraphScene";
|
||||
import { Sidebar } from "./Sidebar";
|
||||
import { FilterPanel } from "./FilterPanel";
|
||||
import { NodeDetailPanel } from "./NodeDetailPanel";
|
||||
import { MissedCallout } from "./MissedCallout";
|
||||
import { ResizeHandle } from "./ResizeHandle";
|
||||
import { ErrorBoundary } from "./ErrorBoundary";
|
||||
import type { GraphNode, GraphData, RepoInfo } from "../lib/types";
|
||||
import { colorForStatus } from "../lib/colors";
|
||||
|
||||
/* Persist panel widths */
|
||||
function loadWidth(key: string, fallback: number): number {
|
||||
try {
|
||||
const v = localStorage.getItem(key);
|
||||
if (v) return Math.max(150, Math.min(600, parseInt(v, 10)));
|
||||
} catch { /* ignore */ }
|
||||
return fallback;
|
||||
}
|
||||
function saveWidth(key: string, value: number) {
|
||||
try { localStorage.setItem(key, String(Math.round(value))); } catch { /* ignore */ }
|
||||
}
|
||||
|
||||
/* Persist the node budget per project */
|
||||
function budgetKey(project: string): string {
|
||||
return `cbm-node-budget:${project}`;
|
||||
}
|
||||
function loadNodeBudget(project: string): number {
|
||||
try {
|
||||
const v = localStorage.getItem(budgetKey(project));
|
||||
if (v) return clampNodeBudget(parseInt(v, 10));
|
||||
} catch { /* ignore */ }
|
||||
return GRAPH_RENDER_NODE_LIMIT;
|
||||
}
|
||||
function saveNodeBudget(project: string, value: number) {
|
||||
try { localStorage.setItem(budgetKey(project), String(value)); } catch { /* ignore */ }
|
||||
}
|
||||
|
||||
interface GraphTabProps {
|
||||
project: string | null;
|
||||
}
|
||||
|
||||
export function formatGraphLimitNotice(data: GraphData | null): string | null {
|
||||
if (!data || data.total_nodes <= data.nodes.length) return null;
|
||||
return `Showing ${data.nodes.length.toLocaleString("en-US")} of ${data.total_nodes.toLocaleString("en-US")} nodes (${data.edges.length.toLocaleString("en-US")} edges). Raise the node budget or use filters.`;
|
||||
}
|
||||
|
||||
export function GraphTab({ project }: GraphTabProps) {
|
||||
const { data, loading, error, progress, fetchOverview } = useGraphData();
|
||||
const [highlightedIds, setHighlightedIds] = useState<Set<number> | null>(null);
|
||||
const [selectedPath, setSelectedPath] = useState<string | null>(null);
|
||||
const [selectedNode, setSelectedNode] = useState<GraphNode | null>(null);
|
||||
const [cameraTarget, setCameraTarget] = useState<CameraTarget | null>(null);
|
||||
const [repoInfo, setRepoInfo] = useState<RepoInfo | null>(null);
|
||||
const [showLabels, setShowLabels] = useState(true);
|
||||
const [display, setDisplay] = useState<DisplaySettings>(() =>
|
||||
loadDisplaySettings(),
|
||||
);
|
||||
const updateDisplay = useCallback((next: DisplaySettings) => {
|
||||
setDisplay(next);
|
||||
saveDisplaySettings(next);
|
||||
}, []);
|
||||
const [leftWidth, setLeftWidth] = useState(() => loadWidth("cbm-left-w", 260));
|
||||
const [rightWidth, setRightWidth] = useState(() => loadWidth("cbm-right-w", 280));
|
||||
const limitNotice = formatGraphLimitNotice(data);
|
||||
|
||||
/* Node budget — keyed to its project so switching projects re-reads the
|
||||
* persisted value and triggers exactly one fetch. */
|
||||
const [budget, setBudget] = useState<{ project: string | null; value: number }>(
|
||||
{ project: null, value: GRAPH_RENDER_NODE_LIMIT },
|
||||
);
|
||||
const [budgetDraft, setBudgetDraft] = useState(String(GRAPH_RENDER_NODE_LIMIT));
|
||||
|
||||
const commitBudget = useCallback(() => {
|
||||
const parsed = clampNodeBudget(parseInt(budgetDraft, 10));
|
||||
setBudgetDraft(String(parsed));
|
||||
if (project && parsed !== budget.value) {
|
||||
saveNodeBudget(project, parsed);
|
||||
setBudget({ project, value: parsed });
|
||||
}
|
||||
}, [budgetDraft, project, budget.value]);
|
||||
|
||||
/* Filter state — all enabled by default */
|
||||
const [enabledLabels, setEnabledLabels] = useState<Set<string>>(new Set());
|
||||
const [enabledEdgeTypes, setEnabledEdgeTypes] = useState<Set<string>>(new Set());
|
||||
|
||||
/* Missed skeleton (#963): the file structure of files the indexer could
|
||||
* not fully cover, shown as a white satellite cluster beside the code
|
||||
* galaxy. Toggle only hides/shows it — the data rides along with every
|
||||
* code-graph layout. */
|
||||
const [showMissedSkeleton, setShowMissedSkeleton] = useState(true);
|
||||
|
||||
/* Dead-code view: recolor by status + status-based filters */
|
||||
const [deadCodeView, setDeadCodeView] = useState(false);
|
||||
const [showOnlyDead, setShowOnlyDead] = useState(false);
|
||||
const [hideEntryPoints, setHideEntryPoints] = useState(false);
|
||||
const [hideTests, setHideTests] = useState(false);
|
||||
|
||||
/* Initialize filters when data loads */
|
||||
useEffect(() => {
|
||||
if (!data) return;
|
||||
const labels = new Set(data.nodes.map((n) => n.label));
|
||||
const types = new Set(data.edges.map((e) => e.type));
|
||||
for (const lp of data.linked_projects ?? []) {
|
||||
for (const n of lp.nodes) labels.add(n.label);
|
||||
for (const e of lp.edges) types.add(e.type);
|
||||
for (const e of lp.cross_edges) types.add(e.type);
|
||||
}
|
||||
setEnabledLabels(labels);
|
||||
setEnabledEdgeTypes(types);
|
||||
}, [data]);
|
||||
|
||||
/* Compute filtered data */
|
||||
const filteredData: GraphData | null = useMemo(() => {
|
||||
if (!data) return null;
|
||||
|
||||
/* Status-based filters (dead-code view) */
|
||||
const statusOk = (n: GraphNode) => {
|
||||
if (showOnlyDead && n.status !== "dead") return false;
|
||||
if (hideEntryPoints && n.status === "entry") return false;
|
||||
if (hideTests && n.status === "test") return false;
|
||||
return true;
|
||||
};
|
||||
/* Recolor by status when the dead-code view is on */
|
||||
const paint = (n: GraphNode): GraphNode =>
|
||||
deadCodeView ? { ...n, color: colorForStatus(n.status) } : n;
|
||||
const keep = (n: GraphNode) => enabledLabels.has(n.label) && statusOk(n);
|
||||
|
||||
const nodes = data.nodes.filter(keep).map(paint);
|
||||
const nodeIds = new Set(nodes.map((n) => n.id));
|
||||
const edges = data.edges.filter(
|
||||
(e) =>
|
||||
enabledEdgeTypes.has(e.type) &&
|
||||
nodeIds.has(e.source) &&
|
||||
nodeIds.has(e.target),
|
||||
);
|
||||
|
||||
const linked_projects = data.linked_projects?.map((lp) => {
|
||||
const lpNodes = lp.nodes.filter(keep).map(paint);
|
||||
const lpIds = new Set(lpNodes.map((n) => n.id));
|
||||
const lpEdges = lp.edges.filter(
|
||||
(e) =>
|
||||
enabledEdgeTypes.has(e.type) && lpIds.has(e.source) && lpIds.has(e.target),
|
||||
);
|
||||
const crossEdges = lp.cross_edges.filter(
|
||||
(e) =>
|
||||
enabledEdgeTypes.has(e.type) && nodeIds.has(e.source) && lpIds.has(e.target),
|
||||
);
|
||||
return { ...lp, nodes: lpNodes, edges: lpEdges, cross_edges: crossEdges };
|
||||
});
|
||||
|
||||
return { nodes, edges, total_nodes: data.total_nodes, linked_projects };
|
||||
}, [
|
||||
data,
|
||||
enabledLabels,
|
||||
enabledEdgeTypes,
|
||||
deadCodeView,
|
||||
showOnlyDead,
|
||||
hideEntryPoints,
|
||||
hideTests,
|
||||
]);
|
||||
|
||||
/* Re-read the persisted budget when the project changes… */
|
||||
useEffect(() => {
|
||||
if (project) {
|
||||
const value = loadNodeBudget(project);
|
||||
setBudget({ project, value });
|
||||
setBudgetDraft(String(value));
|
||||
}
|
||||
}, [project]);
|
||||
|
||||
/* …and fetch only once budget and project agree (one fetch per change). */
|
||||
useEffect(() => {
|
||||
if (project && budget.project === project) {
|
||||
fetchOverview(project, budget.value);
|
||||
setHighlightedIds(null);
|
||||
setSelectedPath(null);
|
||||
}
|
||||
}, [project, budget, fetchOverview]);
|
||||
|
||||
/* Missed skeleton: offset into place and paint white — a ghost of the
|
||||
* files the graph could not fully cover, sitting beside the galaxy. */
|
||||
const missedSkeleton = useMemo(() => {
|
||||
const mg = data?.missed_graph;
|
||||
if (!mg || mg.nodes.length === 0) return null;
|
||||
const nodes = mg.nodes.map((n) => ({
|
||||
...n,
|
||||
x: n.x + mg.offset.x,
|
||||
y: n.y + mg.offset.y,
|
||||
z: n.z + mg.offset.z,
|
||||
color: "#e9eef5",
|
||||
}));
|
||||
return { nodes, edges: mg.edges, ids: new Set(nodes.map((n) => n.id)) };
|
||||
}, [data]);
|
||||
|
||||
/* Overview framing: both clusters (galaxy + skeleton) in one shot. */
|
||||
const overviewTarget = useMemo(() => {
|
||||
if (!data) return null;
|
||||
const all = missedSkeleton ? [...data.nodes, ...missedSkeleton.nodes] : data.nodes;
|
||||
return computeCameraTarget(all, new Set(all.map((n) => n.id)));
|
||||
}, [data, missedSkeleton]);
|
||||
|
||||
/* With a skeleton beside the galaxy, auto-frame BOTH clusters on load so
|
||||
* the side-by-side composition is visible without manual zooming. */
|
||||
useEffect(() => {
|
||||
if (missedSkeleton && overviewTarget) {
|
||||
setCameraTarget(overviewTarget);
|
||||
}
|
||||
}, [missedSkeleton, overviewTarget]);
|
||||
|
||||
/* Clicking empty space while the skeleton has focus flies back to the
|
||||
* overview (the galaxy may be entirely off-screen at that point, so there
|
||||
* is no code node to click). No-op during normal galaxy exploration. */
|
||||
const handleBackgroundClick = useCallback(() => {
|
||||
if (selectedNode && missedSkeleton?.ids.has(selectedNode.id) && overviewTarget) {
|
||||
setSelectedNode(null);
|
||||
setHighlightedIds(null);
|
||||
setSelectedPath(null);
|
||||
setCameraTarget(overviewTarget);
|
||||
}
|
||||
}, [selectedNode, missedSkeleton, overviewTarget]);
|
||||
|
||||
/* Fetch git remote metadata for GitHub deep-links */
|
||||
useEffect(() => {
|
||||
if (!project) {
|
||||
setRepoInfo(null);
|
||||
return;
|
||||
}
|
||||
let cancelled = false;
|
||||
fetch(`/api/repo-info?project=${encodeURIComponent(project)}`)
|
||||
.then((r) => (r.ok ? r.json() : null))
|
||||
.then((d) => {
|
||||
if (!cancelled && d && !d.error) setRepoInfo(d as RepoInfo);
|
||||
})
|
||||
.catch(() => {});
|
||||
return () => {
|
||||
cancelled = true;
|
||||
};
|
||||
}, [project]);
|
||||
|
||||
const handleSelectPath = useCallback(
|
||||
(path: string, nodeIds: Set<number>) => {
|
||||
if (!filteredData || !path || nodeIds.size === 0) {
|
||||
setHighlightedIds(null);
|
||||
setSelectedPath(null);
|
||||
setCameraTarget(null);
|
||||
return;
|
||||
}
|
||||
setSelectedPath(path);
|
||||
setHighlightedIds(nodeIds);
|
||||
setCameraTarget(computeCameraTarget(filteredData.nodes, nodeIds));
|
||||
},
|
||||
[filteredData],
|
||||
);
|
||||
|
||||
const handleNodeClick = useCallback(
|
||||
(node: GraphNode) => {
|
||||
if (!filteredData) return;
|
||||
|
||||
/* Clicking the missed skeleton re-centers the camera on that whole
|
||||
* cluster (it's small — the natural focus unit is the skeleton, not a
|
||||
* single node); clicking any code node flies back to the code galaxy
|
||||
* via the normal per-node focus below. */
|
||||
if (missedSkeleton?.ids.has(node.id)) {
|
||||
setSelectedNode(node);
|
||||
setHighlightedIds(null);
|
||||
setSelectedPath(node.file_path ?? null);
|
||||
setCameraTarget(computeCameraTarget(missedSkeleton.nodes, missedSkeleton.ids));
|
||||
return;
|
||||
}
|
||||
|
||||
setSelectedNode(node);
|
||||
|
||||
/* Highlight the node and its direct connections */
|
||||
const connectedIds = new Set([node.id]);
|
||||
for (const edge of filteredData.edges) {
|
||||
if (edge.source === node.id) connectedIds.add(edge.target);
|
||||
if (edge.target === node.id) connectedIds.add(edge.source);
|
||||
}
|
||||
setHighlightedIds(connectedIds);
|
||||
setSelectedPath(node.file_path ?? null);
|
||||
setCameraTarget(computeCameraTarget(filteredData.nodes, connectedIds));
|
||||
},
|
||||
[filteredData, missedSkeleton],
|
||||
);
|
||||
|
||||
const handleNavigateToNode = useCallback(
|
||||
(node: GraphNode) => {
|
||||
handleNodeClick(node);
|
||||
},
|
||||
[handleNodeClick],
|
||||
);
|
||||
|
||||
const toggleLabel = useCallback((label: string) => {
|
||||
setEnabledLabels((prev) => {
|
||||
const next = new Set(prev);
|
||||
if (next.has(label)) next.delete(label);
|
||||
else next.add(label);
|
||||
return next;
|
||||
});
|
||||
}, []);
|
||||
|
||||
const toggleEdgeType = useCallback((type: string) => {
|
||||
setEnabledEdgeTypes((prev) => {
|
||||
const next = new Set(prev);
|
||||
if (next.has(type)) next.delete(type);
|
||||
else next.add(type);
|
||||
return next;
|
||||
});
|
||||
}, []);
|
||||
|
||||
const enableAll = useCallback(() => {
|
||||
if (!data) return;
|
||||
const labels = new Set(data.nodes.map((n) => n.label));
|
||||
const types = new Set(data.edges.map((e) => e.type));
|
||||
for (const lp of data.linked_projects ?? []) {
|
||||
for (const n of lp.nodes) labels.add(n.label);
|
||||
for (const e of lp.edges) types.add(e.type);
|
||||
for (const e of lp.cross_edges) types.add(e.type);
|
||||
}
|
||||
setEnabledLabels(labels);
|
||||
setEnabledEdgeTypes(types);
|
||||
}, [data]);
|
||||
|
||||
const disableAll = useCallback(() => {
|
||||
setEnabledLabels(new Set());
|
||||
setEnabledEdgeTypes(new Set());
|
||||
}, []);
|
||||
|
||||
if (!project) {
|
||||
return (
|
||||
<div className="flex items-center justify-center h-full">
|
||||
<p className="text-white/30 text-sm">
|
||||
Select a project from the Projects tab
|
||||
</p>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
if (loading) {
|
||||
return (
|
||||
<div className="flex items-center justify-center h-full">
|
||||
<GraphLoader nodeBudget={budget.value} progress={progress} />
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
if (error) {
|
||||
return (
|
||||
<div className="flex items-center justify-center h-full">
|
||||
<div className="text-center p-8">
|
||||
<p className="text-red-400 text-sm mb-2">{error}</p>
|
||||
<Button variant="outline" size="sm" onClick={() => fetchOverview(project)}>
|
||||
Retry
|
||||
</Button>
|
||||
</div>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
/* No data, or the project genuinely has no nodes — there are no filters to
|
||||
interact with, so show a plain full-screen message. The "all filtered out"
|
||||
case is handled inside the layout below so the filter sidebar stays put. */
|
||||
if (!data || !filteredData || data.nodes.length === 0) {
|
||||
return (
|
||||
<div className="flex items-center justify-center h-full">
|
||||
<p className="text-white/30 text-sm">No nodes in this project</p>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
return (
|
||||
<div className="h-full flex">
|
||||
{/* Left sidebar — resizable */}
|
||||
<div
|
||||
className="border-r border-border/30 flex flex-col h-full bg-[#0b1920]/90 backdrop-blur-md shrink-0"
|
||||
style={{ width: leftWidth }}
|
||||
>
|
||||
<FilterPanel
|
||||
data={data}
|
||||
enabledLabels={enabledLabels}
|
||||
enabledEdgeTypes={enabledEdgeTypes}
|
||||
showLabels={showLabels}
|
||||
onToggleLabel={toggleLabel}
|
||||
onToggleEdgeType={toggleEdgeType}
|
||||
onToggleShowLabels={() => setShowLabels((v) => !v)}
|
||||
onEnableAll={enableAll}
|
||||
onDisableAll={disableAll}
|
||||
deadCodeView={deadCodeView}
|
||||
showOnlyDead={showOnlyDead}
|
||||
hideEntryPoints={hideEntryPoints}
|
||||
hideTests={hideTests}
|
||||
onToggleDeadCodeView={() => setDeadCodeView((v) => !v)}
|
||||
onToggleShowOnlyDead={() => setShowOnlyDead((v) => !v)}
|
||||
onToggleHideEntryPoints={() => setHideEntryPoints((v) => !v)}
|
||||
onToggleHideTests={() => setHideTests((v) => !v)}
|
||||
missedView={showMissedSkeleton}
|
||||
missedCount={data?.missed_graph?.nodes.filter((n) => n.label === "File").length ?? 0}
|
||||
onToggleMissedView={() => setShowMissedSkeleton((v) => !v)}
|
||||
/>
|
||||
<Sidebar
|
||||
nodes={filteredData.nodes}
|
||||
onSelectPath={handleSelectPath}
|
||||
selectedPath={selectedPath}
|
||||
/>
|
||||
</div>
|
||||
<ResizeHandle
|
||||
side="left"
|
||||
onResize={(d) => {
|
||||
setLeftWidth((w) => {
|
||||
const nw = Math.max(150, Math.min(500, w + d));
|
||||
saveWidth("cbm-left-w", nw);
|
||||
return nw;
|
||||
});
|
||||
}}
|
||||
/>
|
||||
|
||||
{/* Graph area */}
|
||||
<div className="flex-1 relative overflow-hidden">
|
||||
{filteredData.nodes.length === 0 ? (
|
||||
<div className="flex items-center justify-center h-full">
|
||||
<div className="text-center">
|
||||
<p className="text-white/30 text-sm mb-3">All nodes filtered out</p>
|
||||
<Button size="sm" onClick={enableAll}>
|
||||
Reset Filters
|
||||
</Button>
|
||||
</div>
|
||||
</div>
|
||||
) : (
|
||||
<>
|
||||
<ErrorBoundary>
|
||||
<GraphScene
|
||||
data={filteredData}
|
||||
missed={showMissedSkeleton ? missedSkeleton : null}
|
||||
highlightedIds={highlightedIds}
|
||||
cameraTarget={cameraTarget}
|
||||
showLabels={showLabels}
|
||||
display={display}
|
||||
onNodeClick={handleNodeClick}
|
||||
onBackgroundClick={handleBackgroundClick}
|
||||
/>
|
||||
</ErrorBoundary>
|
||||
|
||||
{/* HUD */}
|
||||
<div className="absolute top-4 left-4 text-[11px] text-white/30 pointer-events-none font-mono">
|
||||
<p>
|
||||
{filteredData.nodes.length.toLocaleString()} nodes /{" "}
|
||||
{filteredData.edges.length.toLocaleString()} edges
|
||||
</p>
|
||||
{data.nodes.length > filteredData.nodes.length && (
|
||||
<p className="text-white/25 mt-0.5">
|
||||
filtered from {data.nodes.length.toLocaleString()}
|
||||
</p>
|
||||
)}
|
||||
{limitNotice && (
|
||||
<p className="text-amber-300/80 mt-0.5">{limitNotice}</p>
|
||||
)}
|
||||
{highlightedIds && highlightedIds.size > 0 && (
|
||||
<p className="text-cyan-400/50 mt-0.5">
|
||||
{highlightedIds.size} selected
|
||||
</p>
|
||||
)}
|
||||
</div>
|
||||
|
||||
<div className="absolute top-4 right-4 flex gap-2 items-center">
|
||||
{highlightedIds && (
|
||||
<Button
|
||||
size="sm"
|
||||
onClick={() => {
|
||||
setHighlightedIds(null);
|
||||
setSelectedPath(null);
|
||||
setSelectedNode(null);
|
||||
setCameraTarget(null);
|
||||
}}
|
||||
>
|
||||
Clear selection
|
||||
</Button>
|
||||
)}
|
||||
<div className="flex items-center gap-1.5 h-8 px-2 rounded-md border border-border/50 bg-[#0b1920]/80 backdrop-blur-sm">
|
||||
<label
|
||||
htmlFor="node-budget"
|
||||
className="text-[10px] uppercase tracking-wider text-white/40"
|
||||
>
|
||||
Nodes
|
||||
</label>
|
||||
<input
|
||||
id="node-budget"
|
||||
type="number"
|
||||
min={GRAPH_NODE_BUDGET_STEP}
|
||||
max={GRAPH_NODE_BUDGET_MAX}
|
||||
step={GRAPH_NODE_BUDGET_STEP}
|
||||
value={budgetDraft}
|
||||
onChange={(e) => setBudgetDraft(e.target.value)}
|
||||
onBlur={commitBudget}
|
||||
onKeyDown={(e) => {
|
||||
if (e.key === "Enter") {
|
||||
e.currentTarget.blur();
|
||||
}
|
||||
}}
|
||||
className="w-24 bg-transparent text-right text-xs font-mono text-cyan-200/90 outline-none [appearance:textfield] [&::-webkit-outer-spin-button]:appearance-none [&::-webkit-inner-spin-button]:appearance-none"
|
||||
aria-label="Node budget: how many nodes to load"
|
||||
title="How many nodes to load (5,000 steps, edges between loaded nodes follow automatically)"
|
||||
/>
|
||||
</div>
|
||||
<DisplaySettingsMenu settings={display} onChange={updateDisplay} />
|
||||
<Button
|
||||
variant="outline"
|
||||
size="sm"
|
||||
onClick={() => {
|
||||
setHighlightedIds(null);
|
||||
setSelectedPath(null);
|
||||
setSelectedNode(null);
|
||||
setCameraTarget(null);
|
||||
fetchOverview(project, budget.value);
|
||||
}}
|
||||
>
|
||||
Refresh
|
||||
</Button>
|
||||
</div>
|
||||
</>
|
||||
)}
|
||||
</div>
|
||||
|
||||
{/* Right detail panel — resizable */}
|
||||
{selectedNode && filteredData && (
|
||||
<>
|
||||
<ResizeHandle
|
||||
side="right"
|
||||
onResize={(d) => {
|
||||
setRightWidth((w) => {
|
||||
const nw = Math.max(200, Math.min(500, w + d));
|
||||
saveWidth("cbm-right-w", nw);
|
||||
return nw;
|
||||
});
|
||||
}}
|
||||
/>
|
||||
<div
|
||||
className="border-l border-border shrink-0 h-full overflow-hidden"
|
||||
style={{ width: rightWidth, maxHeight: "100%" }}
|
||||
>
|
||||
{missedSkeleton?.ids.has(selectedNode.id) ? (
|
||||
/* Skeleton node: the standard panel (code snippet, callers) is
|
||||
* meaningless for a not-fully-indexed file — show the coverage
|
||||
* callout with its report-the-edge-case actions instead. */
|
||||
<MissedCallout
|
||||
node={selectedNode}
|
||||
project={project}
|
||||
onClose={() => {
|
||||
setSelectedNode(null);
|
||||
setHighlightedIds(null);
|
||||
setSelectedPath(null);
|
||||
}}
|
||||
/>
|
||||
) : (
|
||||
<NodeDetailPanel
|
||||
node={selectedNode}
|
||||
allNodes={filteredData.nodes}
|
||||
allEdges={filteredData.edges}
|
||||
project={project}
|
||||
repoInfo={repoInfo}
|
||||
onClose={() => {
|
||||
setSelectedNode(null);
|
||||
setHighlightedIds(null);
|
||||
setSelectedPath(null);
|
||||
}}
|
||||
onNavigate={handleNavigateToNode}
|
||||
/>
|
||||
)}
|
||||
</div>
|
||||
</>
|
||||
)}
|
||||
</div>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,153 @@
|
||||
import { useEffect, useState } from "react";
|
||||
import type { GraphNode } from "../lib/types";
|
||||
|
||||
/* Upstream tracker for indexing gaps. The URL is served by the backend
|
||||
* (/api/ui-config) — the UI security audit forbids hardcoded external URLs in
|
||||
* graph-ui source, so external targets come from an auditable backend
|
||||
* response (same pattern as the /api/repo-info deep-links). */
|
||||
let issuesUrlRequest: Promise<string | null> | null = null;
|
||||
|
||||
function fetchIssuesUrl(): Promise<string | null> {
|
||||
issuesUrlRequest ??= fetch("/api/ui-config")
|
||||
.then((r) => (r.ok ? r.json() : null))
|
||||
.then((cfg) => {
|
||||
const url: unknown = cfg?.upstream_issues_url;
|
||||
/* Accept only an https URL (regex literal on purpose — the UI security
|
||||
* audit greps source for protocol strings). */
|
||||
return typeof url === "string" && /^https:\/\//.test(url) ? url : null;
|
||||
})
|
||||
.catch(() => null);
|
||||
return issuesUrlRequest;
|
||||
}
|
||||
|
||||
interface MissedCalloutProps {
|
||||
node: GraphNode;
|
||||
project: string | null;
|
||||
onClose: () => void;
|
||||
}
|
||||
|
||||
function buildIssueUrl(base: string, path: string, project: string | null): string {
|
||||
const title = `Indexing gap: ${path}`;
|
||||
const body = [
|
||||
"## Not fully indexed (best-effort coverage signal)",
|
||||
"",
|
||||
`- **File:** \`${path}\``,
|
||||
`- **Project:** \`${project ?? "unknown"}\``,
|
||||
"",
|
||||
"<!-- Please add: the flagged line ranges from index_status (parse_partial),",
|
||||
"the language and the construct that fails to parse, and a minimal snippet",
|
||||
"of the affected code — ONLY if the code is shareable. -->",
|
||||
"",
|
||||
"_Reported from the graph UI's missed-coverage view._",
|
||||
].join("\n");
|
||||
return `${base}?title=${encodeURIComponent(title)}&body=${encodeURIComponent(body)}`;
|
||||
}
|
||||
|
||||
function buildAgentPrompt(issuesUrl: string | null, path: string, project: string | null): string {
|
||||
const where = issuesUrl
|
||||
? `file a GitHub issue at ${issuesUrl}`
|
||||
: "file a GitHub issue on the codebase-memory-mcp project";
|
||||
return (
|
||||
`codebase-memory-mcp could not fully index \`${path}\`` +
|
||||
(project ? ` (project \`${project}\`)` : "") +
|
||||
" — best-effort coverage signal. Please: " +
|
||||
"1) call the index_status MCP tool and note this file's flagged line ranges under parse_partial; " +
|
||||
"2) read those ranges in the file and summarize which construct fails to parse; " +
|
||||
`3) ${where}, titled "Indexing gap: ${path}", ` +
|
||||
"with the summary — include a minimal reproducible snippet ONLY if the code is shareable."
|
||||
);
|
||||
}
|
||||
|
||||
/* Right-panel callout shown when a missed-skeleton node is selected: explains
|
||||
* the gap and offers two working actions — a prefilled upstream issue and a
|
||||
* ready-made agent prompt (clipboard, with visible feedback). */
|
||||
export function MissedCallout({ node, project, onClose }: MissedCalloutProps) {
|
||||
const path = node.file_path || node.name;
|
||||
const [copied, setCopied] = useState(false);
|
||||
const [issuesUrl, setIssuesUrl] = useState<string | null>(null);
|
||||
|
||||
useEffect(() => {
|
||||
let cancelled = false;
|
||||
fetchIssuesUrl().then((url) => {
|
||||
if (!cancelled) setIssuesUrl(url);
|
||||
});
|
||||
return () => {
|
||||
cancelled = true;
|
||||
};
|
||||
}, []);
|
||||
|
||||
useEffect(() => {
|
||||
if (!copied) return;
|
||||
const t = setTimeout(() => setCopied(false), 2000);
|
||||
return () => clearTimeout(t);
|
||||
}, [copied]);
|
||||
|
||||
const copyPrompt = async () => {
|
||||
try {
|
||||
await navigator.clipboard.writeText(buildAgentPrompt(issuesUrl, path, project));
|
||||
setCopied(true);
|
||||
} catch {
|
||||
/* clipboard unavailable (permissions/insecure context) — leave the
|
||||
* button state unchanged so the failure is visible, not silent */
|
||||
}
|
||||
};
|
||||
|
||||
return (
|
||||
<div className="h-full flex flex-col p-4 gap-3 overflow-y-auto">
|
||||
<div className="flex items-start justify-between">
|
||||
<div>
|
||||
<p className="text-[10px] text-foreground/30 uppercase tracking-widest">
|
||||
Not fully indexed
|
||||
</p>
|
||||
<p className="text-sm font-medium text-foreground/90 break-all mt-1">{path}</p>
|
||||
<p className="text-[10px] text-foreground/40 mt-0.5">{node.label}</p>
|
||||
</div>
|
||||
<button
|
||||
onClick={onClose}
|
||||
className="text-foreground/40 hover:text-foreground/80 text-sm px-1"
|
||||
aria-label="Close"
|
||||
>
|
||||
×
|
||||
</button>
|
||||
</div>
|
||||
|
||||
<p className="text-[12px] leading-relaxed text-foreground/70">
|
||||
We did not manage to fully index this part of your code — constructs here may be
|
||||
missing from the graph (best-effort detection; the file content itself is ground
|
||||
truth).
|
||||
</p>
|
||||
<p className="text-[12px] leading-relaxed text-foreground/70">
|
||||
Help us handle this edge case too: let your agent summarize what fails to parse
|
||||
here and file a GitHub issue for the codebase-memory-mcp project.
|
||||
</p>
|
||||
|
||||
<div className="flex flex-col gap-2 mt-1">
|
||||
<button
|
||||
onClick={copyPrompt}
|
||||
className={`text-[12px] font-medium rounded-md border px-3 py-1.5 transition-all text-left ${
|
||||
copied
|
||||
? "border-primary/60 bg-primary/15 text-primary"
|
||||
: "border-white/10 bg-white/[0.03] text-foreground/80 hover:bg-white/[0.07]"
|
||||
}`}
|
||||
>
|
||||
{copied ? "✓ Copied — paste it to your agent" : "Copy agent prompt"}
|
||||
</button>
|
||||
{issuesUrl && (
|
||||
<a
|
||||
href={buildIssueUrl(issuesUrl, path, project)}
|
||||
target="_blank"
|
||||
rel="noreferrer"
|
||||
className="text-[12px] font-medium rounded-md border border-white/10 bg-white/[0.03] text-foreground/80 hover:bg-white/[0.07] px-3 py-1.5 transition-all"
|
||||
>
|
||||
File a GitHub issue (prefilled) ↗
|
||||
</a>
|
||||
)}
|
||||
</div>
|
||||
|
||||
<p className="text-[10px] leading-snug text-foreground/35 mt-1">
|
||||
The prefilled issue contains only the file path and project name — add code
|
||||
snippets only if they are shareable.
|
||||
</p>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,263 @@
|
||||
import { useEffect, useMemo, useRef } from "react";
|
||||
import { useThree } from "@react-three/fiber";
|
||||
import * as THREE from "three";
|
||||
import type { GraphNode } from "../lib/types";
|
||||
import { nodeGlowBoost } from "../lib/density";
|
||||
|
||||
interface NodeCloudProps {
|
||||
nodes: GraphNode[];
|
||||
highlightedIds: Set<number> | null;
|
||||
onHover: (node: GraphNode | null) => void;
|
||||
onClick: (node: GraphNode) => void;
|
||||
opacity?: number;
|
||||
/* Multiplier on the per-node glow boost. 1 = full boost (sparse graphs),
|
||||
* 0 = flat colors (dense graphs). Adaptive default × user setting. */
|
||||
boost?: number;
|
||||
}
|
||||
|
||||
/* Above this count instanced spheres stop paying off (vertex + matrix cost)
|
||||
* and the cloud switches to point sprites — one position per node. */
|
||||
const POINT_MODE_THRESHOLD = 75000;
|
||||
|
||||
/* Sphere tessellation by node count: nobody can tell a 12-segment sphere from
|
||||
* a 32-segment one at 25k nodes, but the GPU can. */
|
||||
function sphereDetail(count: number): [number, number, number] {
|
||||
if (count <= 8000) return [1, 32, 24];
|
||||
if (count <= 25000) return [1, 16, 12];
|
||||
return [1, 10, 7];
|
||||
}
|
||||
|
||||
function nodeColor(
|
||||
node: GraphNode,
|
||||
highlightedIds: Set<number> | null,
|
||||
opacity: number,
|
||||
boost: number,
|
||||
tempColor: THREE.Color,
|
||||
): [number, number, number] {
|
||||
const hasHighlight = highlightedIds && highlightedIds.size > 0;
|
||||
tempColor.set(node.color);
|
||||
if (hasHighlight && !highlightedIds.has(node.id)) {
|
||||
tempColor.multiplyScalar(0.15);
|
||||
} else {
|
||||
/* Boost above 1.0 so bloom picks up the excess as glow corona. Blue hubs
|
||||
* glow most, red leaves modestly, white/yellow least (see nodeGlowBoost).
|
||||
* The boost amount also fades toward 1.0 (flat color) as density rises so
|
||||
* dense graphs stay legible instead of blooming into a white blob. */
|
||||
const fullBoost = nodeGlowBoost(tempColor.r, tempColor.g, tempColor.b);
|
||||
const applied = 1 + (fullBoost - 1) * boost;
|
||||
tempColor.multiplyScalar(applied);
|
||||
}
|
||||
return [tempColor.r * opacity, tempColor.g * opacity, tempColor.b * opacity];
|
||||
}
|
||||
|
||||
/* Round, soft-edged sprite for point mode (module-level lazy singleton). */
|
||||
let pointSprite: THREE.CanvasTexture | null = null;
|
||||
function getPointSprite(): THREE.CanvasTexture {
|
||||
if (pointSprite) return pointSprite;
|
||||
const size = 64;
|
||||
const canvas = document.createElement("canvas");
|
||||
canvas.width = size;
|
||||
canvas.height = size;
|
||||
const ctx = canvas.getContext("2d")!;
|
||||
const gradient = ctx.createRadialGradient(
|
||||
size / 2, size / 2, 0,
|
||||
size / 2, size / 2, size / 2,
|
||||
);
|
||||
gradient.addColorStop(0, "rgba(255,255,255,1)");
|
||||
gradient.addColorStop(0.5, "rgba(255,255,255,0.9)");
|
||||
gradient.addColorStop(1, "rgba(255,255,255,0)");
|
||||
ctx.fillStyle = gradient;
|
||||
ctx.fillRect(0, 0, size, size);
|
||||
pointSprite = new THREE.CanvasTexture(canvas);
|
||||
return pointSprite;
|
||||
}
|
||||
|
||||
/* ── Point-sprite mode for very large clouds ──────────────────── */
|
||||
|
||||
function NodePoints({
|
||||
nodes,
|
||||
highlightedIds,
|
||||
onHover,
|
||||
onClick,
|
||||
opacity,
|
||||
boost,
|
||||
}: Required<NodeCloudProps>) {
|
||||
const { raycaster } = useThree();
|
||||
|
||||
/* Widen the raycast threshold while points are on screen */
|
||||
useEffect(() => {
|
||||
const prev = raycaster.params.Points?.threshold ?? 1;
|
||||
raycaster.params.Points = { threshold: 3 };
|
||||
return () => {
|
||||
raycaster.params.Points = { threshold: prev };
|
||||
};
|
||||
}, [raycaster]);
|
||||
|
||||
const { positions, colors } = useMemo(() => {
|
||||
const positions = new Float32Array(nodes.length * 3);
|
||||
const colors = new Float32Array(nodes.length * 3);
|
||||
const tempColor = new THREE.Color();
|
||||
for (let i = 0; i < nodes.length; i++) {
|
||||
const n = nodes[i];
|
||||
positions[i * 3] = n.x;
|
||||
positions[i * 3 + 1] = n.y;
|
||||
positions[i * 3 + 2] = n.z;
|
||||
const [r, g, b] = nodeColor(n, highlightedIds, opacity, boost, tempColor);
|
||||
colors[i * 3] = r;
|
||||
colors[i * 3 + 1] = g;
|
||||
colors[i * 3 + 2] = b;
|
||||
}
|
||||
return { positions, colors };
|
||||
}, [nodes, highlightedIds, opacity, boost]);
|
||||
|
||||
return (
|
||||
<points
|
||||
/* Remount when the buffer size changes so stale attributes never linger */
|
||||
key={nodes.length}
|
||||
onPointerOver={(e) => {
|
||||
e.stopPropagation();
|
||||
if (e.index !== undefined && e.index < nodes.length) {
|
||||
onHover(nodes[e.index]);
|
||||
}
|
||||
}}
|
||||
onPointerOut={() => onHover(null)}
|
||||
onClick={(e) => {
|
||||
e.stopPropagation();
|
||||
if (e.index !== undefined && e.index < nodes.length) {
|
||||
onClick(nodes[e.index]);
|
||||
}
|
||||
}}
|
||||
>
|
||||
<bufferGeometry>
|
||||
<bufferAttribute attach="attributes-position" args={[positions, 3]} />
|
||||
<bufferAttribute attach="attributes-color" args={[colors, 3]} />
|
||||
</bufferGeometry>
|
||||
<pointsMaterial
|
||||
vertexColors
|
||||
size={4}
|
||||
sizeAttenuation
|
||||
map={getPointSprite()}
|
||||
alphaTest={0.35}
|
||||
transparent
|
||||
toneMapped={false}
|
||||
/>
|
||||
</points>
|
||||
);
|
||||
}
|
||||
|
||||
/* ── Instanced-sphere mode (default) ──────────────────────────── */
|
||||
|
||||
function NodeSpheres({
|
||||
nodes,
|
||||
highlightedIds,
|
||||
onHover,
|
||||
onClick,
|
||||
opacity,
|
||||
boost,
|
||||
}: Required<NodeCloudProps>) {
|
||||
const meshRef = useRef<THREE.InstancedMesh>(null);
|
||||
const tempObj = useMemo(() => new THREE.Object3D(), []);
|
||||
const tempColor = useMemo(() => new THREE.Color(), []);
|
||||
const detail = sphereDetail(nodes.length);
|
||||
|
||||
/* Build instance color attributes — dim non-highlighted nodes */
|
||||
const colors = useMemo(() => {
|
||||
const arr = new Float32Array(nodes.length * 3);
|
||||
for (let i = 0; i < nodes.length; i++) {
|
||||
const [r, g, b] = nodeColor(
|
||||
nodes[i],
|
||||
highlightedIds,
|
||||
opacity,
|
||||
boost,
|
||||
tempColor,
|
||||
);
|
||||
arr[i * 3] = r;
|
||||
arr[i * 3 + 1] = g;
|
||||
arr[i * 3 + 2] = b;
|
||||
}
|
||||
return arr;
|
||||
}, [nodes, highlightedIds, tempColor, opacity, boost]);
|
||||
|
||||
/* Node positions are static (the layout is server-computed), so instance
|
||||
* matrices only change with the node set or the highlight — never rebuild
|
||||
* them per frame. */
|
||||
useEffect(() => {
|
||||
const mesh = meshRef.current;
|
||||
if (!mesh) return;
|
||||
|
||||
const hasHighlight = highlightedIds && highlightedIds.size > 0;
|
||||
for (let i = 0; i < nodes.length; i++) {
|
||||
const n = nodes[i];
|
||||
tempObj.position.set(n.x, n.y, n.z);
|
||||
const isHighlighted = !hasHighlight || highlightedIds.has(n.id);
|
||||
const s = n.size * (isHighlighted ? 0.5 : 0.2);
|
||||
tempObj.scale.set(s, s, s);
|
||||
tempObj.updateMatrix();
|
||||
mesh.setMatrixAt(i, tempObj.matrix);
|
||||
}
|
||||
mesh.instanceMatrix.needsUpdate = true;
|
||||
mesh.computeBoundingSphere();
|
||||
}, [nodes, highlightedIds, tempObj]);
|
||||
|
||||
return (
|
||||
<instancedMesh
|
||||
/* Remount when the instance count changes so buffers are re-sized */
|
||||
key={nodes.length}
|
||||
ref={meshRef}
|
||||
args={[undefined, undefined, nodes.length]}
|
||||
frustumCulled={false}
|
||||
onPointerOver={(e) => {
|
||||
e.stopPropagation();
|
||||
if (e.instanceId !== undefined && e.instanceId < nodes.length) {
|
||||
onHover(nodes[e.instanceId]);
|
||||
}
|
||||
}}
|
||||
onPointerOut={() => onHover(null)}
|
||||
onClick={(e) => {
|
||||
e.stopPropagation();
|
||||
if (e.instanceId !== undefined && e.instanceId < nodes.length) {
|
||||
onClick(nodes[e.instanceId]);
|
||||
}
|
||||
}}
|
||||
>
|
||||
<sphereGeometry args={detail} />
|
||||
<meshBasicMaterial vertexColors toneMapped={false} />
|
||||
<instancedBufferAttribute
|
||||
attach="geometry-attributes-color"
|
||||
args={[colors, 3]}
|
||||
/>
|
||||
</instancedMesh>
|
||||
);
|
||||
}
|
||||
|
||||
export function NodeCloud({
|
||||
nodes,
|
||||
highlightedIds,
|
||||
onHover,
|
||||
onClick,
|
||||
opacity = 1.0,
|
||||
boost = 1.0,
|
||||
}: NodeCloudProps) {
|
||||
if (nodes.length > POINT_MODE_THRESHOLD) {
|
||||
return (
|
||||
<NodePoints
|
||||
nodes={nodes}
|
||||
highlightedIds={highlightedIds}
|
||||
onHover={onHover}
|
||||
onClick={onClick}
|
||||
opacity={opacity}
|
||||
boost={boost}
|
||||
/>
|
||||
);
|
||||
}
|
||||
return (
|
||||
<NodeSpheres
|
||||
nodes={nodes}
|
||||
highlightedIds={highlightedIds}
|
||||
onHover={onHover}
|
||||
onClick={onClick}
|
||||
opacity={opacity}
|
||||
boost={boost}
|
||||
/>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,96 @@
|
||||
/* @vitest-environment jsdom */
|
||||
import "@testing-library/jest-dom/vitest";
|
||||
import { fireEvent, render, screen } from "@testing-library/react";
|
||||
import { describe, expect, it, vi } from "vitest";
|
||||
import { NodeDetailPanel } from "./NodeDetailPanel";
|
||||
import type { GraphNode, RepoInfo } from "../lib/types";
|
||||
|
||||
/* Mock the RPC layer so "Show code" resolves without a backend. */
|
||||
const callToolMock = vi.fn();
|
||||
vi.mock("../api/rpc", () => ({
|
||||
callTool: (...args: unknown[]) => callToolMock(...args),
|
||||
RpcError: class extends Error {},
|
||||
}));
|
||||
|
||||
const NODE: GraphNode = {
|
||||
id: 7,
|
||||
x: 0,
|
||||
y: 0,
|
||||
z: 0,
|
||||
label: "Function",
|
||||
name: "render",
|
||||
file_path: "src/weird name/@mod.ts",
|
||||
qualified_name: "app::render",
|
||||
start_line: 10,
|
||||
end_line: 20,
|
||||
size: 1,
|
||||
color: "#fff",
|
||||
};
|
||||
|
||||
/* The UI security audit forbids literal external URL strings in source, so we
|
||||
assemble the https scheme at runtime; the built strings are byte-identical. */
|
||||
const HTTPS = `https:` + `//`;
|
||||
|
||||
const REPO: RepoInfo = {
|
||||
root_path: "/repo",
|
||||
branch: "main",
|
||||
remote_url: `${HTTPS}github.com/org/repo.git`,
|
||||
web_base: `${HTTPS}github.com/org/repo`,
|
||||
blob_base: `${HTTPS}github.com/org/repo/blob/main`,
|
||||
};
|
||||
|
||||
describe("NodeDetailPanel code preview + deep-link", () => {
|
||||
it("renders fetched source as escaped text, never as injected HTML", async () => {
|
||||
/* A payload that would execute if the code were rendered as raw HTML. */
|
||||
const payload = "<script>window.__pwned = true;</script>\nconst answer = 42;";
|
||||
callToolMock.mockResolvedValueOnce({ source: payload });
|
||||
|
||||
const { container } = render(
|
||||
<NodeDetailPanel
|
||||
node={NODE}
|
||||
allNodes={[NODE]}
|
||||
allEdges={[]}
|
||||
project="demo"
|
||||
repoInfo={REPO}
|
||||
onClose={() => {}}
|
||||
onNavigate={() => {}}
|
||||
/>,
|
||||
);
|
||||
|
||||
fireEvent.click(screen.getByRole("button", { name: /Show code/ }));
|
||||
|
||||
const pre = await screen.findByText((content) => content.includes("const answer = 42;"), {
|
||||
selector: "pre",
|
||||
});
|
||||
expect(pre.tagName).toBe("PRE");
|
||||
/* The dangerous markup is present as literal text… */
|
||||
expect(pre.textContent).toContain("<script>window.__pwned = true;</script>");
|
||||
/* …but was NOT parsed into a real <script> element, and did not execute. */
|
||||
expect(container.querySelector("script")).toBeNull();
|
||||
expect((window as unknown as { __pwned?: boolean }).__pwned).toBeUndefined();
|
||||
});
|
||||
|
||||
it("builds an https GitHub deep-link with URL-encoded path segments", () => {
|
||||
render(
|
||||
<NodeDetailPanel
|
||||
node={NODE}
|
||||
allNodes={[NODE]}
|
||||
allEdges={[]}
|
||||
project="demo"
|
||||
repoInfo={REPO}
|
||||
onClose={() => {}}
|
||||
onNavigate={() => {}}
|
||||
/>,
|
||||
);
|
||||
|
||||
const link = screen.getByRole("link", { name: /Open on GitHub/ });
|
||||
const href = link.getAttribute("href") ?? "";
|
||||
expect(href.startsWith(`${HTTPS}github.com/org/repo/blob/main/`)).toBe(true);
|
||||
/* Path segments are percent-encoded; the slashes between them are kept. */
|
||||
expect(href).toContain("src/weird%20name/%40mod.ts");
|
||||
expect(href).toContain("#L10-L20");
|
||||
/* Hardening attributes for target=_blank. */
|
||||
expect(link.getAttribute("rel")).toBe("noopener noreferrer");
|
||||
expect(link.getAttribute("target")).toBe("_blank");
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,245 @@
|
||||
import { useMemo, useState, useEffect } from "react";
|
||||
import { ScrollArea } from "@/components/ui/scroll-area";
|
||||
import { colorForLabel } from "../lib/colors";
|
||||
import { callTool } from "../api/rpc";
|
||||
import type { GraphNode, GraphEdge, RepoInfo } from "../lib/types";
|
||||
|
||||
interface Connection {
|
||||
node: GraphNode;
|
||||
edgeType: string;
|
||||
direction: "inbound" | "outbound";
|
||||
}
|
||||
|
||||
interface NodeDetailPanelProps {
|
||||
node: GraphNode;
|
||||
allNodes: GraphNode[];
|
||||
allEdges: GraphEdge[];
|
||||
project: string | null;
|
||||
repoInfo: RepoInfo | null;
|
||||
onClose: () => void;
|
||||
onNavigate: (node: GraphNode) => void;
|
||||
}
|
||||
|
||||
interface SnippetResult {
|
||||
source?: string;
|
||||
start_line?: number;
|
||||
end_line?: number;
|
||||
}
|
||||
|
||||
function lineSuffix(node: GraphNode): string {
|
||||
if (!node.start_line) return "";
|
||||
const end = node.end_line && node.end_line !== node.start_line ? `-L${node.end_line}` : "";
|
||||
return `#L${node.start_line}${end}`;
|
||||
}
|
||||
|
||||
/* Encode each path segment so an unusual file_path can't break (or escape) the
|
||||
* URL. The scheme is already https-forced by the backend (/api/repo-info);
|
||||
* this is defense-in-depth on the path. */
|
||||
function encodePath(p: string): string {
|
||||
return p.split("/").map(encodeURIComponent).join("/");
|
||||
}
|
||||
|
||||
/* GitHub (or GitLab) deep-link, or null when we lack remote/path/line info. */
|
||||
function githubUrl(node: GraphNode, repoInfo: RepoInfo | null): string | null {
|
||||
if (!repoInfo?.blob_base || !node.file_path) return null;
|
||||
return `${repoInfo.blob_base}/${encodePath(node.file_path)}${lineSuffix(node)}`;
|
||||
}
|
||||
|
||||
export function NodeDetailPanel({
|
||||
node,
|
||||
allNodes,
|
||||
allEdges,
|
||||
project,
|
||||
repoInfo,
|
||||
onClose,
|
||||
onNavigate,
|
||||
}: NodeDetailPanelProps) {
|
||||
const [code, setCode] = useState<string | null>(null);
|
||||
const [codeLoading, setCodeLoading] = useState(false);
|
||||
const [codeError, setCodeError] = useState<string | null>(null);
|
||||
|
||||
/* Reset the fetched code whenever the selected node changes. */
|
||||
useEffect(() => {
|
||||
setCode(null);
|
||||
setCodeError(null);
|
||||
setCodeLoading(false);
|
||||
}, [node.id]);
|
||||
|
||||
const canFetchCode = Boolean(project && node.qualified_name);
|
||||
const ghUrl = githubUrl(node, repoInfo);
|
||||
|
||||
const loadCode = async () => {
|
||||
if (!project || !node.qualified_name) return;
|
||||
setCodeLoading(true);
|
||||
setCodeError(null);
|
||||
try {
|
||||
const res = await callTool<SnippetResult>("get_code_snippet", {
|
||||
qualified_name: node.qualified_name,
|
||||
project,
|
||||
});
|
||||
setCode(res.source ?? "(source not available)");
|
||||
} catch (e) {
|
||||
setCodeError(e instanceof Error ? e.message : "Failed to load code");
|
||||
} finally {
|
||||
setCodeLoading(false);
|
||||
}
|
||||
};
|
||||
|
||||
const connections = useMemo(() => {
|
||||
const nodeMap = new Map<number, GraphNode>();
|
||||
for (const n of allNodes) nodeMap.set(n.id, n);
|
||||
const conns: Connection[] = [];
|
||||
for (const edge of allEdges) {
|
||||
if (edge.source === node.id) {
|
||||
const t = nodeMap.get(edge.target);
|
||||
if (t) conns.push({ node: t, edgeType: edge.type, direction: "outbound" });
|
||||
}
|
||||
if (edge.target === node.id) {
|
||||
const s = nodeMap.get(edge.source);
|
||||
if (s) conns.push({ node: s, edgeType: edge.type, direction: "inbound" });
|
||||
}
|
||||
}
|
||||
return conns;
|
||||
}, [node, allNodes, allEdges]);
|
||||
|
||||
const outbound = connections.filter((c) => c.direction === "outbound");
|
||||
const inbound = connections.filter((c) => c.direction === "inbound");
|
||||
|
||||
const groupByType = (conns: Connection[]) => {
|
||||
const g = new Map<string, Connection[]>();
|
||||
for (const c of conns) g.set(c.edgeType, [...(g.get(c.edgeType) ?? []), c]);
|
||||
return [...g.entries()].sort((a, b) => b[1].length - a[1].length);
|
||||
};
|
||||
|
||||
return (
|
||||
<div className="w-full bg-[#0b1920]/95 backdrop-blur-xl flex flex-col h-full min-h-0 overflow-hidden">
|
||||
{/* Header */}
|
||||
<div className="px-4 pt-4 pb-3 border-b border-border/30">
|
||||
<div className="flex items-start justify-between gap-2 mb-2">
|
||||
<div className="min-w-0 flex-1">
|
||||
<div className="flex items-center gap-2 mb-1.5">
|
||||
<span className="w-2.5 h-2.5 rounded-full shrink-0" style={{ backgroundColor: colorForLabel(node.label) }} />
|
||||
<h3 className="text-[13px] font-semibold text-foreground truncate">{node.name}</h3>
|
||||
</div>
|
||||
<span
|
||||
className="inline-block px-2 py-0.5 rounded-md text-[10px] font-medium"
|
||||
style={{ backgroundColor: colorForLabel(node.label) + "18", color: colorForLabel(node.label) }}
|
||||
>
|
||||
{node.label}
|
||||
</span>
|
||||
</div>
|
||||
<button onClick={onClose} className="text-foreground/20 hover:text-foreground/50 transition-colors text-[16px] leading-none p-1">×</button>
|
||||
</div>
|
||||
|
||||
{node.file_path && (
|
||||
<p className="text-[11px] text-foreground/30 font-mono mt-2 break-all leading-relaxed">
|
||||
{node.file_path}
|
||||
{node.start_line ? (
|
||||
<span className="text-foreground/45">
|
||||
{" "}:{node.start_line}
|
||||
{node.end_line && node.end_line !== node.start_line ? `-${node.end_line}` : ""}
|
||||
</span>
|
||||
) : null}
|
||||
</p>
|
||||
)}
|
||||
|
||||
{/* Code actions */}
|
||||
<div className="flex flex-wrap items-center gap-2 mt-2.5">
|
||||
{canFetchCode && (
|
||||
<button
|
||||
onClick={code ? () => setCode(null) : loadCode}
|
||||
disabled={codeLoading}
|
||||
className="px-2.5 py-1 rounded-md bg-primary/15 text-primary text-[11px] font-medium hover:bg-primary/25 transition-colors disabled:opacity-50"
|
||||
>
|
||||
{codeLoading ? "Loading…" : code ? "Hide code" : "Show code"}
|
||||
</button>
|
||||
)}
|
||||
{ghUrl && (
|
||||
<a
|
||||
href={ghUrl}
|
||||
target="_blank"
|
||||
rel="noopener noreferrer"
|
||||
className="px-2.5 py-1 rounded-md bg-white/[0.05] text-foreground/60 text-[11px] font-medium hover:bg-white/[0.09] hover:text-foreground/90 transition-colors"
|
||||
>
|
||||
Open on GitHub ↗
|
||||
</a>
|
||||
)}
|
||||
</div>
|
||||
|
||||
{codeError && <p className="text-[11px] text-red-400/80 mt-2">{codeError}</p>}
|
||||
{code && (
|
||||
<pre className="mt-2 max-h-[300px] overflow-auto rounded-md bg-black/40 border border-white/[0.06] p-2.5 text-[10.5px] leading-relaxed font-mono text-foreground/75 whitespace-pre">
|
||||
{code}
|
||||
</pre>
|
||||
)}
|
||||
|
||||
{/* Stats */}
|
||||
<div className="flex gap-5 mt-3">
|
||||
{[
|
||||
{ label: "Out", value: outbound.length, color: "text-primary" },
|
||||
{ label: "In", value: inbound.length, color: "text-accent" },
|
||||
{ label: "Total", value: connections.length, color: "text-foreground" },
|
||||
].map((s) => (
|
||||
<div key={s.label}>
|
||||
<p className="text-[9px] text-foreground/25 uppercase tracking-widest">{s.label}</p>
|
||||
<p className={`text-[18px] font-semibold tabular-nums ${s.color}`}>{s.value}</p>
|
||||
</div>
|
||||
))}
|
||||
</div>
|
||||
</div>
|
||||
|
||||
{/* Connections */}
|
||||
<ScrollArea className="flex-1 min-h-0">
|
||||
<div className="px-4 py-3 space-y-4">
|
||||
{outbound.length > 0 && (
|
||||
<ConnectionSection title="References" count={outbound.length} icon="→" groups={groupByType(outbound)} onNavigate={onNavigate} />
|
||||
)}
|
||||
{inbound.length > 0 && (
|
||||
<ConnectionSection title="Referenced by" count={inbound.length} icon="←" groups={groupByType(inbound)} onNavigate={onNavigate} />
|
||||
)}
|
||||
{connections.length === 0 && (
|
||||
<p className="text-[12px] text-foreground/20 text-center py-8">No connections</p>
|
||||
)}
|
||||
</div>
|
||||
</ScrollArea>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
function ConnectionSection({ title, count, icon, groups, onNavigate }: {
|
||||
title: string; count: number; icon: string;
|
||||
groups: [string, Connection[]][];
|
||||
onNavigate: (n: GraphNode) => void;
|
||||
}) {
|
||||
return (
|
||||
<div>
|
||||
<p className="text-[11px] font-medium text-foreground/40 mb-2">
|
||||
{title} <span className="text-foreground/15">({count})</span>
|
||||
</p>
|
||||
{groups.map(([type, conns]) => (
|
||||
<div key={type} className="mb-2">
|
||||
<p className="text-[9px] text-foreground/20 uppercase tracking-wider mb-1 font-medium">
|
||||
{type.replace(/_/g, " ").toLowerCase()}
|
||||
</p>
|
||||
<div className="space-y-px">
|
||||
{conns.slice(0, 25).map((c, i) => (
|
||||
<button
|
||||
key={`${c.node.id}-${i}`}
|
||||
onClick={() => onNavigate(c.node)}
|
||||
className="flex items-center gap-1.5 w-full text-left px-2 py-[4px] rounded-md hover:bg-white/[0.04] text-[11px] transition-colors group"
|
||||
>
|
||||
<span className="text-foreground/15 text-[10px] group-hover:text-foreground/30">{icon}</span>
|
||||
<span className="w-[5px] h-[5px] rounded-full shrink-0" style={{ backgroundColor: colorForLabel(c.node.label) }} />
|
||||
<span className="text-foreground/55 group-hover:text-foreground/80 truncate">{c.node.name}</span>
|
||||
<span className="text-foreground/10 ml-auto text-[10px] shrink-0">{c.node.label}</span>
|
||||
</button>
|
||||
))}
|
||||
{conns.length > 25 && (
|
||||
<p className="text-[10px] text-foreground/15 px-2 py-1">+{conns.length - 25} more</p>
|
||||
)}
|
||||
</div>
|
||||
</div>
|
||||
))}
|
||||
</div>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,157 @@
|
||||
import { useEffect, useMemo } from "react";
|
||||
import * as THREE from "three";
|
||||
import type { GraphNode } from "../lib/types";
|
||||
|
||||
interface NodeLabelsProps {
|
||||
nodes: GraphNode[];
|
||||
highlightedIds: Set<number> | null;
|
||||
maxLabels?: number;
|
||||
}
|
||||
|
||||
interface LabelTexture {
|
||||
texture: THREE.CanvasTexture;
|
||||
width: number;
|
||||
height: number;
|
||||
}
|
||||
|
||||
const TEXTURE_FONT_SIZE = 64;
|
||||
const TEXTURE_FONT =
|
||||
`600 ${TEXTURE_FONT_SIZE}px Inter, system-ui, -apple-system, ` +
|
||||
'BlinkMacSystemFont, "Segoe UI", sans-serif';
|
||||
const TEXTURE_MAX_TEXT_WIDTH = 720;
|
||||
const TEXTURE_PADDING_X = 24;
|
||||
const TEXTURE_PADDING_Y = 14;
|
||||
const TEXTURE_STROKE_WIDTH = 8;
|
||||
|
||||
function fitText(
|
||||
ctx: CanvasRenderingContext2D,
|
||||
text: string,
|
||||
maxWidth: number,
|
||||
): string {
|
||||
if (ctx.measureText(text).width <= maxWidth) return text;
|
||||
|
||||
let lo = 0;
|
||||
let hi = text.length;
|
||||
while (lo < hi) {
|
||||
const mid = Math.ceil((lo + hi) / 2);
|
||||
const candidate = `${text.slice(0, mid)}...`;
|
||||
if (ctx.measureText(candidate).width <= maxWidth) lo = mid;
|
||||
else hi = mid - 1;
|
||||
}
|
||||
|
||||
return `${text.slice(0, Math.max(1, lo))}...`;
|
||||
}
|
||||
|
||||
function createLabelTexture(name: string, color: string): LabelTexture | null {
|
||||
const canvas = document.createElement("canvas");
|
||||
const ctx = canvas.getContext("2d");
|
||||
if (!ctx) {
|
||||
return null;
|
||||
}
|
||||
|
||||
ctx.font = TEXTURE_FONT;
|
||||
const text = fitText(ctx, name, TEXTURE_MAX_TEXT_WIDTH);
|
||||
const textWidth = Math.ceil(ctx.measureText(text).width);
|
||||
const logicalWidth = Math.max(
|
||||
1,
|
||||
textWidth + TEXTURE_PADDING_X * 2 + TEXTURE_STROKE_WIDTH * 2,
|
||||
);
|
||||
const logicalHeight =
|
||||
TEXTURE_FONT_SIZE + TEXTURE_PADDING_Y * 2 + TEXTURE_STROKE_WIDTH * 2;
|
||||
const pixelRatio =
|
||||
typeof window === "undefined"
|
||||
? 1
|
||||
: Math.min(window.devicePixelRatio || 1, 2);
|
||||
|
||||
canvas.width = Math.ceil(logicalWidth * pixelRatio);
|
||||
canvas.height = Math.ceil(logicalHeight * pixelRatio);
|
||||
canvas.style.width = `${logicalWidth}px`;
|
||||
canvas.style.height = `${logicalHeight}px`;
|
||||
|
||||
ctx.scale(pixelRatio, pixelRatio);
|
||||
ctx.font = TEXTURE_FONT;
|
||||
ctx.textAlign = "center";
|
||||
ctx.textBaseline = "middle";
|
||||
ctx.lineJoin = "round";
|
||||
ctx.lineWidth = TEXTURE_STROKE_WIDTH;
|
||||
ctx.strokeStyle = "rgba(0, 0, 0, 0.9)";
|
||||
ctx.fillStyle = color;
|
||||
|
||||
const x = logicalWidth / 2;
|
||||
const y = logicalHeight / 2;
|
||||
ctx.strokeText(text, x, y);
|
||||
ctx.fillText(text, x, y);
|
||||
|
||||
const texture = new THREE.CanvasTexture(canvas);
|
||||
texture.colorSpace = THREE.SRGBColorSpace;
|
||||
texture.minFilter = THREE.LinearFilter;
|
||||
texture.magFilter = THREE.LinearFilter;
|
||||
texture.generateMipmaps = false;
|
||||
texture.needsUpdate = true;
|
||||
|
||||
return {
|
||||
texture,
|
||||
width: logicalWidth,
|
||||
height: logicalHeight,
|
||||
};
|
||||
}
|
||||
|
||||
function NodeLabelSprite({ node }: { node: GraphNode }) {
|
||||
const label = useMemo(
|
||||
() => createLabelTexture(node.name, node.color),
|
||||
[node.name, node.color],
|
||||
);
|
||||
|
||||
useEffect(() => {
|
||||
return () => label?.texture.dispose();
|
||||
}, [label]);
|
||||
|
||||
if (!label) return null;
|
||||
|
||||
const worldFontSize = Math.max(1.8, node.size * 0.4);
|
||||
const worldHeight = worldFontSize * (label.height / TEXTURE_FONT_SIZE);
|
||||
const worldWidth = worldHeight * (label.width / label.height);
|
||||
|
||||
return (
|
||||
<sprite
|
||||
position={[node.x, node.y + node.size * 0.7 + worldHeight / 2, node.z]}
|
||||
scale={[worldWidth, worldHeight, 1]}
|
||||
renderOrder={20}
|
||||
frustumCulled={false}
|
||||
>
|
||||
<spriteMaterial
|
||||
map={label.texture}
|
||||
transparent
|
||||
depthWrite={false}
|
||||
toneMapped={false}
|
||||
/>
|
||||
</sprite>
|
||||
);
|
||||
}
|
||||
|
||||
export function NodeLabels({
|
||||
nodes,
|
||||
highlightedIds,
|
||||
maxLabels = 80,
|
||||
}: NodeLabelsProps) {
|
||||
const labeled = useMemo(() => {
|
||||
const hasHighlight = highlightedIds && highlightedIds.size > 0;
|
||||
|
||||
if (hasHighlight) {
|
||||
return nodes
|
||||
.filter((n) => highlightedIds.has(n.id))
|
||||
.sort((a, b) => b.size - a.size)
|
||||
.slice(0, maxLabels);
|
||||
}
|
||||
|
||||
return [...nodes].sort((a, b) => b.size - a.size).slice(0, maxLabels);
|
||||
}, [nodes, highlightedIds, maxLabels]);
|
||||
|
||||
return (
|
||||
<group>
|
||||
{labeled.map((node) => (
|
||||
<NodeLabelSprite key={node.id} node={node} />
|
||||
))}
|
||||
</group>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,56 @@
|
||||
import { Html } from "@react-three/drei";
|
||||
import type { GraphNode } from "../lib/types";
|
||||
import { colorForLabel, colorForStatus } from "../lib/colors";
|
||||
|
||||
interface NodeTooltipProps {
|
||||
node: GraphNode;
|
||||
}
|
||||
|
||||
function lineRange(node: GraphNode): string | null {
|
||||
if (!node.start_line) return null;
|
||||
if (node.end_line && node.end_line !== node.start_line)
|
||||
return `L${node.start_line}-${node.end_line}`;
|
||||
return `L${node.start_line}`;
|
||||
}
|
||||
|
||||
export function NodeTooltip({ node }: NodeTooltipProps) {
|
||||
return (
|
||||
<Html
|
||||
position={[node.x, node.y + node.size * 0.7, node.z]}
|
||||
center
|
||||
style={{ pointerEvents: "none" }}
|
||||
>
|
||||
<div className="bg-[#1a1a2e]/95 backdrop-blur border border-white/10 rounded-lg px-3 py-2 text-xs whitespace-nowrap shadow-xl max-w-[350px]">
|
||||
<div className="flex items-center gap-1.5 mb-1">
|
||||
<span
|
||||
className="w-2 h-2 rounded-full shrink-0"
|
||||
style={{ backgroundColor: colorForLabel(node.label) }}
|
||||
/>
|
||||
<span className="text-white font-medium truncate">{node.name}</span>
|
||||
<span className="text-white/30 ml-1 shrink-0">{node.label}</span>
|
||||
</div>
|
||||
{node.file_path && (
|
||||
<p className="text-white/30 font-mono truncate">
|
||||
{node.file_path}
|
||||
{lineRange(node) && <span className="text-white/40"> · {lineRange(node)}</span>}
|
||||
</p>
|
||||
)}
|
||||
{node.status && node.status !== "structural" && (
|
||||
<div className="flex items-center gap-1.5 mt-1">
|
||||
<span
|
||||
className="w-1.5 h-1.5 rounded-full shrink-0"
|
||||
style={{ backgroundColor: colorForStatus(node.status) }}
|
||||
/>
|
||||
<span className="text-white/45">{node.status}</span>
|
||||
{node.in_calls !== undefined && (
|
||||
<span className="text-white/25">
|
||||
· {node.in_calls} caller{node.in_calls === 1 ? "" : "s"}
|
||||
</span>
|
||||
)}
|
||||
</div>
|
||||
)}
|
||||
<p className="text-white/20 mt-1 text-[10px]">click for code →</p>
|
||||
</div>
|
||||
</Html>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,70 @@
|
||||
import type { Project, SchemaInfo } from "../lib/types";
|
||||
import { colorForLabel } from "../lib/colors";
|
||||
|
||||
interface ProjectCardProps {
|
||||
project: Project;
|
||||
schema: SchemaInfo | null;
|
||||
onSelect: (project: string) => void;
|
||||
}
|
||||
|
||||
function formatNumber(n: number): string {
|
||||
return n.toLocaleString();
|
||||
}
|
||||
|
||||
export function ProjectCard({ project, schema, onSelect }: ProjectCardProps) {
|
||||
const totalNodes = schema?.node_labels?.reduce((s, l) => s + l.count, 0) ?? 0;
|
||||
const totalEdges = schema?.edge_types?.reduce((s, t) => s + t.count, 0) ?? 0;
|
||||
|
||||
return (
|
||||
<div className="border border-white/10 rounded-lg p-4 hover:border-white/20 transition-colors">
|
||||
<div className="flex items-start justify-between mb-3">
|
||||
<div>
|
||||
<h3 className="text-white font-medium">{project.name}</h3>
|
||||
<p className="text-white/40 text-xs font-mono mt-0.5 truncate max-w-[300px]">
|
||||
{project.root_path}
|
||||
</p>
|
||||
</div>
|
||||
<button
|
||||
onClick={() => onSelect(project.name)}
|
||||
className="px-3 py-1 bg-cyan-500/20 hover:bg-cyan-500/30 text-cyan-300 rounded text-xs font-medium transition-colors"
|
||||
>
|
||||
View Graph
|
||||
</button>
|
||||
</div>
|
||||
|
||||
{schema && (
|
||||
<>
|
||||
<div className="flex gap-4 text-xs text-white/60 mb-3">
|
||||
<span>{formatNumber(totalNodes)} nodes</span>
|
||||
<span>{formatNumber(totalEdges)} edges</span>
|
||||
</div>
|
||||
|
||||
{schema.node_labels && schema.node_labels.length > 0 && (
|
||||
<div className="flex flex-wrap gap-1.5">
|
||||
{schema.node_labels.map((l) => (
|
||||
<span
|
||||
key={l.label}
|
||||
className="inline-flex items-center gap-1 px-2 py-0.5 rounded text-xs"
|
||||
style={{ backgroundColor: colorForLabel(l.label) + "20" }}
|
||||
>
|
||||
<span
|
||||
className="w-1.5 h-1.5 rounded-full"
|
||||
style={{ backgroundColor: colorForLabel(l.label) }}
|
||||
/>
|
||||
<span style={{ color: colorForLabel(l.label) }}>
|
||||
{l.label}
|
||||
</span>
|
||||
<span className="text-white/40">{formatNumber(l.count)}</span>
|
||||
</span>
|
||||
))}
|
||||
</div>
|
||||
)}
|
||||
</>
|
||||
)}
|
||||
|
||||
{!schema && (
|
||||
<p className="text-white/30 text-xs italic">Loading schema...</p>
|
||||
)}
|
||||
</div>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,45 @@
|
||||
import { useCallback, useRef } from "react";
|
||||
|
||||
interface ResizeHandleProps {
|
||||
side: "left" | "right"; /* which side the panel is on */
|
||||
onResize: (delta: number) => void;
|
||||
}
|
||||
|
||||
export function ResizeHandle({ side, onResize }: ResizeHandleProps) {
|
||||
const dragging = useRef(false);
|
||||
const lastX = useRef(0);
|
||||
|
||||
const onPointerDown = useCallback(
|
||||
(e: React.PointerEvent) => {
|
||||
dragging.current = true;
|
||||
lastX.current = e.clientX;
|
||||
(e.target as HTMLElement).setPointerCapture(e.pointerId);
|
||||
},
|
||||
[],
|
||||
);
|
||||
|
||||
const onPointerMove = useCallback(
|
||||
(e: React.PointerEvent) => {
|
||||
if (!dragging.current) return;
|
||||
const delta = e.clientX - lastX.current;
|
||||
lastX.current = e.clientX;
|
||||
/* Left panel: drag right = bigger (positive delta).
|
||||
* Right panel: drag left = bigger (negative delta → invert). */
|
||||
onResize(side === "left" ? delta : -delta);
|
||||
},
|
||||
[onResize, side],
|
||||
);
|
||||
|
||||
const onPointerUp = useCallback(() => {
|
||||
dragging.current = false;
|
||||
}, []);
|
||||
|
||||
return (
|
||||
<div
|
||||
onPointerDown={onPointerDown}
|
||||
onPointerMove={onPointerMove}
|
||||
onPointerUp={onPointerUp}
|
||||
className="w-1 cursor-col-resize hover:bg-primary/30 active:bg-primary/50 transition-colors shrink-0"
|
||||
/>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,178 @@
|
||||
import { useMemo, useState } from "react";
|
||||
import { ScrollArea } from "@/components/ui/scroll-area";
|
||||
import type { GraphNode } from "../lib/types";
|
||||
import { useUiMessages } from "../lib/i18n";
|
||||
|
||||
interface SidebarProps {
|
||||
nodes: GraphNode[];
|
||||
onSelectPath: (path: string, nodeIds: Set<number>) => void;
|
||||
selectedPath: string | null;
|
||||
}
|
||||
|
||||
interface DirNode {
|
||||
name: string;
|
||||
fullPath: string;
|
||||
children: Map<string, DirNode>;
|
||||
nodeIds: Set<number>;
|
||||
directNodes: GraphNode[];
|
||||
}
|
||||
|
||||
function buildFileTree(nodes: GraphNode[]): DirNode {
|
||||
const root: DirNode = { name: "/", fullPath: "", children: new Map(), nodeIds: new Set(), directNodes: [] };
|
||||
for (const node of nodes) {
|
||||
if (!node.file_path) continue;
|
||||
const parts = node.file_path.split("/");
|
||||
let cur = root;
|
||||
for (let i = 0; i < parts.length - 1; i++) {
|
||||
if (!parts[i]) continue;
|
||||
let child = cur.children.get(parts[i]);
|
||||
if (!child) {
|
||||
const prefix = parts.slice(0, i + 1).join("/");
|
||||
child = { name: parts[i], fullPath: prefix, children: new Map(), nodeIds: new Set(), directNodes: [] };
|
||||
cur.children.set(parts[i], child);
|
||||
}
|
||||
cur = child;
|
||||
}
|
||||
cur.directNodes.push(node);
|
||||
}
|
||||
function collect(d: DirNode): Set<number> {
|
||||
const ids = new Set<number>();
|
||||
for (const n of d.directNodes) ids.add(n.id);
|
||||
for (const c of d.children.values()) for (const id of collect(c)) ids.add(id);
|
||||
d.nodeIds = ids;
|
||||
return ids;
|
||||
}
|
||||
collect(root);
|
||||
return root;
|
||||
}
|
||||
|
||||
function flattenSingleChild(dir: DirNode): DirNode {
|
||||
const children = new Map<string, DirNode>();
|
||||
for (const [key, child] of dir.children) {
|
||||
let flat = flattenSingleChild(child);
|
||||
while (flat.children.size === 1 && flat.directNodes.length === 0) {
|
||||
const [sk, sc] = [...flat.children.entries()][0];
|
||||
flat = { ...sc, name: `${flat.name}/${sk}`, children: flattenSingleChild(sc).children };
|
||||
}
|
||||
children.set(key, flat);
|
||||
}
|
||||
return { ...dir, children };
|
||||
}
|
||||
|
||||
function TreeItem({ dir, depth, onSelect, selectedPath }: {
|
||||
dir: DirNode; depth: number;
|
||||
onSelect: (path: string, ids: Set<number>) => void;
|
||||
selectedPath: string | null;
|
||||
}) {
|
||||
const [expanded, setExpanded] = useState(false);
|
||||
const isSelected = selectedPath === dir.fullPath;
|
||||
const sorted = useMemo(() => [...dir.children.values()].sort((a, b) => a.name.localeCompare(b.name)), [dir.children]);
|
||||
const sortedNodes = useMemo(() => [...dir.directNodes].sort((a, b) => a.name.localeCompare(b.name)), [dir.directNodes]);
|
||||
|
||||
return (
|
||||
<div>
|
||||
<button
|
||||
onClick={() => { setExpanded(!expanded); onSelect(dir.fullPath, dir.nodeIds); }}
|
||||
className={`flex items-center gap-1.5 w-full text-left px-3 py-[5px] text-[12px] transition-colors ${
|
||||
isSelected ? "bg-primary/10 text-primary" : "text-foreground/60 hover:text-foreground/80 hover:bg-white/[0.03]"
|
||||
}`}
|
||||
style={{ paddingLeft: `${depth * 16 + 12}px` }}
|
||||
>
|
||||
<span className="text-foreground/20 w-3 text-center text-[10px] shrink-0">
|
||||
{(dir.children.size > 0 || dir.directNodes.length > 0) ? (expanded ? "▾" : "▸") : ""}
|
||||
</span>
|
||||
<span className="truncate font-medium">{dir.name}</span>
|
||||
<span className="text-foreground/15 ml-auto text-[10px] tabular-nums shrink-0">{dir.nodeIds.size}</span>
|
||||
</button>
|
||||
{expanded && (
|
||||
<>
|
||||
{sorted.map((c) => <TreeItem key={c.fullPath} dir={c} depth={depth+1} onSelect={onSelect} selectedPath={selectedPath} />)}
|
||||
{sortedNodes.map((gn) => (
|
||||
<button
|
||||
key={gn.id}
|
||||
onClick={() => onSelect(dir.fullPath + "/" + gn.name, new Set([gn.id]))}
|
||||
className="flex items-center gap-1.5 w-full text-left px-3 py-[3px] text-[11px] text-foreground/40 hover:text-foreground/60 hover:bg-white/[0.02] transition-colors"
|
||||
style={{ paddingLeft: `${(depth+1) * 16 + 12}px` }}
|
||||
>
|
||||
<span className="w-[5px] h-[5px] rounded-full shrink-0" style={{ backgroundColor: gn.color }} />
|
||||
<span className="truncate font-mono">{gn.name}</span>
|
||||
<span className="text-foreground/10 ml-auto text-[10px] shrink-0">{gn.label}</span>
|
||||
</button>
|
||||
))}
|
||||
</>
|
||||
)}
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
export function Sidebar({ nodes, onSelectPath, selectedPath }: SidebarProps) {
|
||||
const t = useUiMessages();
|
||||
const [search, setSearch] = useState("");
|
||||
const tree = useMemo(() => flattenSingleChild(buildFileTree(nodes)), [nodes]);
|
||||
|
||||
const filtered = useMemo(() => {
|
||||
if (!search) return null;
|
||||
const q = search.toLowerCase();
|
||||
return nodes.filter((n) => n.name.toLowerCase().includes(q) || (n.file_path ?? "").toLowerCase().includes(q)).slice(0, 50);
|
||||
}, [nodes, search]);
|
||||
|
||||
const topLevel = useMemo(() => [...tree.children.values()].sort((a, b) => a.name.localeCompare(b.name)), [tree.children]);
|
||||
|
||||
return (
|
||||
<div className="flex flex-col flex-1 min-h-0">
|
||||
<div className="px-4 pt-3 pb-2 shrink-0">
|
||||
<span className="text-[11px] font-medium text-foreground/50 uppercase tracking-widest">
|
||||
{t.graph.folders}
|
||||
</span>
|
||||
</div>
|
||||
<div className="px-3 pb-2.5 border-b border-border/30 shrink-0">
|
||||
<div className="relative">
|
||||
<input
|
||||
type="text"
|
||||
placeholder={t.graph.search}
|
||||
value={search}
|
||||
onChange={(e) => setSearch(e.target.value)}
|
||||
className="w-full bg-white/[0.04] border border-white/[0.06] rounded-lg px-3 py-1.5 text-[12px] text-foreground placeholder-foreground/25 outline-none focus:border-primary/40 focus:bg-white/[0.06] transition-all"
|
||||
/>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
<ScrollArea className="flex-1 min-h-0">
|
||||
<div className="py-1">
|
||||
{filtered ? (
|
||||
filtered.length === 0 ? (
|
||||
<p className="text-foreground/20 text-[12px] px-4 py-6 text-center">
|
||||
{t.common.noMatches}
|
||||
</p>
|
||||
) : (
|
||||
filtered.map((n) => (
|
||||
<button
|
||||
key={n.id}
|
||||
onClick={() => onSelectPath(n.file_path ?? "", new Set([n.id]))}
|
||||
className="flex items-center gap-2 w-full text-left px-4 py-1.5 text-[11px] hover:bg-white/[0.03] transition-colors"
|
||||
>
|
||||
<span className="w-[5px] h-[5px] rounded-full shrink-0" style={{ backgroundColor: n.color }} />
|
||||
<span className="text-foreground/60 truncate">{n.name}</span>
|
||||
<span className="text-foreground/15 ml-auto text-[10px] font-mono truncate max-w-[100px]">{n.file_path}</span>
|
||||
</button>
|
||||
))
|
||||
)
|
||||
) : (
|
||||
topLevel.map((c) => <TreeItem key={c.fullPath} dir={c} depth={0} onSelect={onSelectPath} selectedPath={selectedPath} />)
|
||||
)}
|
||||
</div>
|
||||
</ScrollArea>
|
||||
|
||||
{selectedPath && (
|
||||
<div className="px-3 py-2 border-t border-border/30">
|
||||
<button
|
||||
onClick={() => onSelectPath("", new Set())}
|
||||
className="w-full px-3 py-1.5 rounded-lg bg-white/[0.04] hover:bg-white/[0.07] text-[11px] text-foreground/40 font-medium transition-all"
|
||||
>
|
||||
{t.graph.clearSelection}
|
||||
</button>
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,350 @@
|
||||
/* @vitest-environment jsdom */
|
||||
import "@testing-library/jest-dom/vitest";
|
||||
import { cleanup, fireEvent, render, screen, waitFor, act } from "@testing-library/react";
|
||||
import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
|
||||
import { StatsTab, IndexProgress } from "./StatsTab";
|
||||
import { messages } from "../lib/i18n";
|
||||
|
||||
function mockProjectsFetch(extra?: (url: string, init?: RequestInit) => Response | undefined) {
|
||||
const fetchMock = vi.fn(async (input: RequestInfo | URL, init?: RequestInit) => {
|
||||
const url = String(input);
|
||||
const overridden = extra?.(url, init);
|
||||
if (overridden) return overridden;
|
||||
if (url === "/rpc") {
|
||||
return new Response(JSON.stringify({
|
||||
result: { content: [{ text: JSON.stringify({ projects: [] }) }] },
|
||||
}), { status: 200, headers: { "Content-Type": "application/json" } });
|
||||
}
|
||||
if (url.startsWith("/api/ui-config")) {
|
||||
return new Response(JSON.stringify({ lang: "en" }), {
|
||||
status: 200,
|
||||
headers: { "Content-Type": "application/json" },
|
||||
});
|
||||
}
|
||||
if (url.startsWith("/api/browse")) {
|
||||
return new Response(JSON.stringify({
|
||||
path: "/home/dev",
|
||||
parent: "/home",
|
||||
dirs: ["alpha", "beta"],
|
||||
roots: ["/", "D:/"],
|
||||
}), { status: 200, headers: { "Content-Type": "application/json" } });
|
||||
}
|
||||
if (url === "/api/index") {
|
||||
return new Response(JSON.stringify({ status: "indexing", slot: 0 }), {
|
||||
status: 202,
|
||||
headers: { "Content-Type": "application/json" },
|
||||
});
|
||||
}
|
||||
return new Response("{}", { status: 200 });
|
||||
});
|
||||
vi.stubGlobal("fetch", fetchMock);
|
||||
return fetchMock;
|
||||
}
|
||||
|
||||
describe("StatsTab index modal", () => {
|
||||
afterEach(() => {
|
||||
cleanup();
|
||||
vi.unstubAllGlobals();
|
||||
});
|
||||
|
||||
it("submits a custom path and project name", async () => {
|
||||
let submitted: unknown = null;
|
||||
mockProjectsFetch((url, init) => {
|
||||
if (url === "/api/index") {
|
||||
submitted = JSON.parse(String(init?.body));
|
||||
return new Response(JSON.stringify({ status: "indexing", slot: 0 }), {
|
||||
status: 202,
|
||||
headers: { "Content-Type": "application/json" },
|
||||
});
|
||||
}
|
||||
return undefined;
|
||||
});
|
||||
|
||||
render(<StatsTab onSelectProject={() => {}} />);
|
||||
fireEvent.click(await screen.findByRole("button", { name: "Index your first repository" }));
|
||||
|
||||
fireEvent.change(await screen.findByLabelText("Repository path"), {
|
||||
target: { value: "D:\\work\\信租风控通后端" },
|
||||
});
|
||||
fireEvent.change(screen.getByLabelText("Project ID (optional — permanent, cannot be renamed)"), {
|
||||
target: { value: "信租风控通后端" },
|
||||
});
|
||||
fireEvent.click(screen.getByRole("button", { name: "Index This Folder" }));
|
||||
|
||||
await waitFor(() => {
|
||||
expect(submitted).toEqual({
|
||||
root_path: "D:\\work\\信租风控通后端",
|
||||
project_name: "信租风控通后端",
|
||||
});
|
||||
});
|
||||
});
|
||||
|
||||
it("filters picker rows and exposes quick row indexing", async () => {
|
||||
mockProjectsFetch();
|
||||
|
||||
render(<StatsTab onSelectProject={() => {}} />);
|
||||
fireEvent.click(await screen.findByRole("button", { name: "Index your first repository" }));
|
||||
|
||||
fireEvent.change(await screen.findByPlaceholderText("Filter folders"), {
|
||||
target: { value: "bet" },
|
||||
});
|
||||
|
||||
expect(screen.queryByText("alpha")).not.toBeInTheDocument();
|
||||
expect(screen.getByText("beta")).toBeInTheDocument();
|
||||
expect(screen.getByRole("button", { name: "Index beta" })).toBeInTheDocument();
|
||||
expect(screen.getByRole("button", { name: "Browse D:/" })).toBeInTheDocument();
|
||||
});
|
||||
|
||||
it("navigates Windows breadcrumb segments to real drive paths", async () => {
|
||||
const fetchMock = mockProjectsFetch((url) => {
|
||||
if (url.startsWith("/api/browse")) {
|
||||
return new Response(JSON.stringify({
|
||||
path: "C:/Users/rap",
|
||||
parent: "C:/Users",
|
||||
dirs: ["Documents", "Downloads"],
|
||||
roots: ["C:/", "D:/"],
|
||||
}), { status: 200, headers: { "Content-Type": "application/json" } });
|
||||
}
|
||||
return undefined;
|
||||
});
|
||||
|
||||
render(<StatsTab onSelectProject={() => {}} />);
|
||||
fireEvent.click(await screen.findByRole("button", { name: "Index your first repository" }));
|
||||
|
||||
/* No bogus unified "/" root crumb on a Windows drive path. */
|
||||
await screen.findByRole("button", { name: "C:" });
|
||||
expect(screen.queryByRole("button", { name: "/" })).not.toBeInTheDocument();
|
||||
|
||||
/* Clicking the drive crumb browses to "C:/", not "/C:". */
|
||||
fireEvent.click(screen.getByRole("button", { name: "C:" }));
|
||||
await waitFor(() => {
|
||||
expect(fetchMock).toHaveBeenCalledWith("/api/browse?path=C%3A%2F");
|
||||
});
|
||||
|
||||
/* Clicking a nested crumb browses to "C:/Users", not "/C:/Users". */
|
||||
fireEvent.click(screen.getByRole("button", { name: "Users" }));
|
||||
await waitFor(() => {
|
||||
expect(fetchMock).toHaveBeenCalledWith("/api/browse?path=C%3A%2FUsers");
|
||||
});
|
||||
});
|
||||
|
||||
it("refreshes the folder list when a drive is typed into the path field", async () => {
|
||||
mockProjectsFetch((url) => {
|
||||
if (url.startsWith("/api/browse")) {
|
||||
const m = /[?&]path=([^&]*)/.exec(url);
|
||||
const path = m ? decodeURIComponent(m[1]) : "C:/Users/rap";
|
||||
const onD = path.replace(/\\/g, "/").toUpperCase().startsWith("D:");
|
||||
return new Response(JSON.stringify({
|
||||
path,
|
||||
parent: "C:/",
|
||||
dirs: onD ? ["projects", "games"] : ["Documents", "Downloads"],
|
||||
roots: ["C:/", "D:/"],
|
||||
}), { status: 200, headers: { "Content-Type": "application/json" } });
|
||||
}
|
||||
return undefined;
|
||||
});
|
||||
|
||||
render(<StatsTab onSelectProject={() => {}} />);
|
||||
fireEvent.click(await screen.findByRole("button", { name: "Index your first repository" }));
|
||||
|
||||
/* Initial C: listing is shown. */
|
||||
expect(await screen.findByText("Documents")).toBeInTheDocument();
|
||||
|
||||
/* Typing a different drive refreshes the listing to that drive (debounced). */
|
||||
fireEvent.change(await screen.findByLabelText("Repository path"), {
|
||||
target: { value: "D:/" },
|
||||
});
|
||||
|
||||
expect(await screen.findByText("projects")).toBeInTheDocument();
|
||||
expect(screen.queryByText("Documents")).not.toBeInTheDocument();
|
||||
});
|
||||
|
||||
it("replaces the meaningless '/' root with the drive on Windows", async () => {
|
||||
const fetchMock = mockProjectsFetch((url) => {
|
||||
if (url.startsWith("/api/browse")) {
|
||||
const m = /[?&]path=([^&]*)/.exec(url);
|
||||
const path = m ? decodeURIComponent(m[1]) : "C:/Users/rap";
|
||||
return new Response(JSON.stringify({
|
||||
path,
|
||||
parent: "C:/",
|
||||
dirs: ["Documents"],
|
||||
roots: ["/"], // older backend: no drive enumeration
|
||||
}), { status: 200, headers: { "Content-Type": "application/json" } });
|
||||
}
|
||||
return undefined;
|
||||
});
|
||||
|
||||
render(<StatsTab onSelectProject={() => {}} />);
|
||||
fireEvent.click(await screen.findByRole("button", { name: "Index your first repository" }));
|
||||
|
||||
/* The bogus "/" quick-jump is gone; the current drive root is offered. */
|
||||
expect(await screen.findByRole("button", { name: "Browse C:/" })).toBeInTheDocument();
|
||||
expect(screen.queryByRole("button", { name: "Browse /" })).not.toBeInTheDocument();
|
||||
|
||||
/* Clicking it browses to the drive root, not "/". */
|
||||
fireEvent.click(screen.getByRole("button", { name: "Browse C:/" }));
|
||||
await waitFor(() => {
|
||||
expect(fetchMock).toHaveBeenCalledWith("/api/browse?path=C%3A%2F");
|
||||
});
|
||||
});
|
||||
|
||||
it("does not auto-refresh on POSIX when a path is typed", async () => {
|
||||
const fetchMock = mockProjectsFetch(); // browse returns POSIX path "/home/dev"
|
||||
|
||||
render(<StatsTab onSelectProject={() => {}} />);
|
||||
fireEvent.click(await screen.findByRole("button", { name: "Index your first repository" }));
|
||||
await screen.findByText("alpha"); // initial POSIX listing
|
||||
|
||||
const browseCalls = () =>
|
||||
fetchMock.mock.calls.filter((c) => String(c[0]).startsWith("/api/browse")).length;
|
||||
const before = browseCalls();
|
||||
|
||||
fireEvent.change(screen.getByLabelText("Repository path"), {
|
||||
target: { value: "/usr/local" },
|
||||
});
|
||||
|
||||
/* Wait past the debounce window; a POSIX path must NOT trigger a re-browse. */
|
||||
await new Promise((r) => setTimeout(r, 400));
|
||||
expect(browseCalls()).toBe(before);
|
||||
});
|
||||
});
|
||||
|
||||
describe("IndexProgress", () => {
|
||||
beforeEach(() => {
|
||||
vi.useFakeTimers();
|
||||
});
|
||||
|
||||
afterEach(() => {
|
||||
vi.useRealTimers();
|
||||
vi.unstubAllGlobals();
|
||||
vi.restoreAllMocks();
|
||||
});
|
||||
|
||||
it("polls and shows indexing in progress when active", async () => {
|
||||
const fetchMock = vi.fn().mockImplementation(() =>
|
||||
Promise.resolve({
|
||||
json: () => Promise.resolve([
|
||||
{ slot: 1, status: "indexing", path: "/path/to/project1" }
|
||||
])
|
||||
} as unknown as Response)
|
||||
);
|
||||
vi.stubGlobal("fetch", fetchMock);
|
||||
|
||||
const onDone = vi.fn();
|
||||
render(<IndexProgress onDone={onDone} />);
|
||||
|
||||
// Fast-forward initial poll
|
||||
await act(async () => {
|
||||
await vi.advanceTimersByTimeAsync(2000);
|
||||
});
|
||||
|
||||
expect(fetchMock).toHaveBeenCalledWith("/api/index-status");
|
||||
expect(screen.getByText(messages.en.projects.indexingInProgress)).toBeInTheDocument();
|
||||
expect(screen.getByText("/path/to/project1")).toBeInTheDocument();
|
||||
expect(onDone).not.toHaveBeenCalled();
|
||||
});
|
||||
|
||||
it("stops polling and calls onDone when indexing finishes successfully", async () => {
|
||||
// Backend keeps finished jobs listed with status "done" (src/ui/http_server.c
|
||||
// handle_index_status only skips idle slots) — success is a "done" entry,
|
||||
// not an empty list.
|
||||
let mockData = [
|
||||
{ slot: 1, status: "indexing", path: "/path/to/project" }
|
||||
];
|
||||
const fetchMock = vi.fn().mockImplementation(() =>
|
||||
Promise.resolve({
|
||||
json: () => Promise.resolve(mockData)
|
||||
} as unknown as Response)
|
||||
);
|
||||
vi.stubGlobal("fetch", fetchMock);
|
||||
|
||||
const onDone = vi.fn();
|
||||
render(<IndexProgress onDone={onDone} />);
|
||||
|
||||
// First poll returns active
|
||||
await act(async () => {
|
||||
await vi.advanceTimersByTimeAsync(2000);
|
||||
});
|
||||
expect(onDone).not.toHaveBeenCalled();
|
||||
|
||||
// Indexing finishes
|
||||
mockData = [
|
||||
{ slot: 1, status: "done", path: "/path/to/project" }
|
||||
];
|
||||
|
||||
await act(async () => {
|
||||
await vi.advanceTimersByTimeAsync(2000);
|
||||
});
|
||||
|
||||
expect(onDone).toHaveBeenCalled();
|
||||
});
|
||||
|
||||
it("keeps waiting and does NOT call onDone while the jobs list is empty", async () => {
|
||||
// An empty list mid-index means the job is not visible (e.g. transient
|
||||
// backend state loss) — it must NOT be treated as successful completion.
|
||||
let mockData: { slot: number; status: string; path: string }[] = [];
|
||||
const fetchMock = vi.fn().mockImplementation(() =>
|
||||
Promise.resolve({
|
||||
json: () => Promise.resolve(mockData)
|
||||
} as unknown as Response)
|
||||
);
|
||||
vi.stubGlobal("fetch", fetchMock);
|
||||
|
||||
const onDone = vi.fn();
|
||||
render(<IndexProgress onDone={onDone} />);
|
||||
|
||||
// Two empty polls: still waiting, no premature completion
|
||||
await act(async () => {
|
||||
await vi.advanceTimersByTimeAsync(2000);
|
||||
});
|
||||
await act(async () => {
|
||||
await vi.advanceTimersByTimeAsync(2000);
|
||||
});
|
||||
expect(onDone).not.toHaveBeenCalled();
|
||||
expect(fetchMock).toHaveBeenCalledTimes(2);
|
||||
|
||||
// Job becomes visible and finishes — now completion fires
|
||||
mockData = [{ slot: 1, status: "done", path: "/path/to/project" }];
|
||||
await act(async () => {
|
||||
await vi.advanceTimersByTimeAsync(2000);
|
||||
});
|
||||
expect(onDone).toHaveBeenCalled();
|
||||
});
|
||||
|
||||
it("renders error banner and does NOT call onDone when indexing fails with error status", async () => {
|
||||
const fetchMock = vi.fn().mockImplementation(() =>
|
||||
Promise.resolve({
|
||||
json: () => Promise.resolve([
|
||||
{ slot: 1, status: "error", path: "/path/to/failed-project", error: "OOM Error" }
|
||||
])
|
||||
} as unknown as Response)
|
||||
);
|
||||
vi.stubGlobal("fetch", fetchMock);
|
||||
|
||||
const onDone = vi.fn();
|
||||
render(<IndexProgress onDone={onDone} />);
|
||||
|
||||
await act(async () => {
|
||||
await vi.advanceTimersByTimeAsync(2000);
|
||||
});
|
||||
|
||||
// Error banner should show up
|
||||
expect(screen.getByText(messages.en.projects.indexingFailed)).toBeInTheDocument();
|
||||
expect(screen.getByText("/path/to/failed-project")).toBeInTheDocument();
|
||||
expect(screen.getByText("OOM Error")).toBeInTheDocument();
|
||||
|
||||
// onDone should not be called automatically
|
||||
expect(onDone).not.toHaveBeenCalled();
|
||||
|
||||
// Click Dismiss button
|
||||
const dismissBtn = screen.getByRole("button", { name: messages.en.common.dismiss });
|
||||
expect(dismissBtn).toBeInTheDocument();
|
||||
|
||||
await act(async () => {
|
||||
fireEvent.click(dismissBtn);
|
||||
});
|
||||
|
||||
// onDone should be called after manual dismissal
|
||||
expect(onDone).toHaveBeenCalled();
|
||||
});
|
||||
});
|
||||
@@ -0,0 +1,601 @@
|
||||
import { useMemo, useState, useCallback, useEffect, useRef } from "react";
|
||||
import { ScrollArea } from "@/components/ui/scroll-area";
|
||||
import { useProjects } from "../hooks/useProjects";
|
||||
import { colorForLabel } from "../lib/colors";
|
||||
import { useUiMessages } from "../lib/i18n";
|
||||
|
||||
interface StatsTabProps {
|
||||
onSelectProject: (project: string) => void;
|
||||
}
|
||||
|
||||
/* ── Glowy health dot ───────────────────────────────────── */
|
||||
|
||||
function HealthDot({ name }: { name: string }) {
|
||||
const t = useUiMessages();
|
||||
const [status, setStatus] = useState<"loading" | "healthy" | "corrupt" | "missing">("loading");
|
||||
const [info, setInfo] = useState("");
|
||||
|
||||
useEffect(() => {
|
||||
fetch(`/api/project-health?name=${encodeURIComponent(name)}`)
|
||||
.then((r) => r.json())
|
||||
.then((d) => {
|
||||
setStatus(d.status ?? "corrupt");
|
||||
if (d.nodes !== undefined) {
|
||||
const sizeMB = ((d.size_bytes ?? 0) / 1024 / 1024).toFixed(1);
|
||||
setInfo(`${d.nodes.toLocaleString()} nodes, ${d.edges.toLocaleString()} edges, ${sizeMB} MB`);
|
||||
} else if (d.reason) {
|
||||
setInfo(d.reason);
|
||||
}
|
||||
})
|
||||
.catch(() => setStatus("corrupt"));
|
||||
}, [name]);
|
||||
|
||||
const dotColor =
|
||||
status === "healthy" ? "#34d399" :
|
||||
status === "missing" ? "#fbbf24" :
|
||||
status === "corrupt" ? "#f87171" : "#555";
|
||||
|
||||
const label =
|
||||
status === "healthy" ? t.projects.healthHealthy :
|
||||
status === "missing" ? t.projects.healthMissing :
|
||||
status === "corrupt" ? t.projects.healthCorrupt : t.projects.healthChecking;
|
||||
|
||||
return (
|
||||
<div className="group relative inline-flex items-center">
|
||||
{/* Glow layer */}
|
||||
<span
|
||||
className="absolute w-3 h-3 rounded-full animate-pulse opacity-40 blur-[3px]"
|
||||
style={{ backgroundColor: dotColor }}
|
||||
/>
|
||||
{/* Dot */}
|
||||
<span
|
||||
className="relative w-[8px] h-[8px] rounded-full"
|
||||
style={{ backgroundColor: dotColor, boxShadow: `0 0 6px ${dotColor}80` }}
|
||||
/>
|
||||
{/* Tooltip */}
|
||||
<div className="absolute bottom-full left-1/2 -translate-x-1/2 mb-3 hidden group-hover:block z-20 pointer-events-none">
|
||||
<div className="bg-[#0b1920] border border-border/50 rounded-lg px-3 py-2 text-[11px] whitespace-nowrap shadow-xl">
|
||||
<p className="font-medium" style={{ color: dotColor }}>{label}</p>
|
||||
{info && <p className="text-foreground/35 text-[10px] mt-0.5">{info}</p>}
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
/* ── ADR button + modal ─────────────────────────────────── */
|
||||
|
||||
function AdrButton({ project }: { project: string }) {
|
||||
const t = useUiMessages();
|
||||
const [hasAdr, setHasAdr] = useState<boolean | null>(null);
|
||||
const [open, setOpen] = useState(false);
|
||||
const [content, setContent] = useState("");
|
||||
const [saving, setSaving] = useState(false);
|
||||
const [updatedAt, setUpdatedAt] = useState("");
|
||||
|
||||
const fetchAdr = useCallback(async () => {
|
||||
try {
|
||||
const res = await fetch(`/api/adr?project=${encodeURIComponent(project)}`);
|
||||
const data = await res.json();
|
||||
setHasAdr(data.has_adr ?? false);
|
||||
if (data.content) setContent(data.content);
|
||||
if (data.updated_at) setUpdatedAt(data.updated_at);
|
||||
} catch { setHasAdr(false); }
|
||||
}, [project]);
|
||||
|
||||
useEffect(() => { fetchAdr(); }, [fetchAdr]);
|
||||
|
||||
const save = async () => {
|
||||
setSaving(true);
|
||||
try {
|
||||
await fetch("/api/adr", {
|
||||
method: "POST",
|
||||
headers: { "Content-Type": "application/json" },
|
||||
body: JSON.stringify({ project, content }),
|
||||
});
|
||||
await fetchAdr();
|
||||
setOpen(false);
|
||||
} catch { /* ignore */ }
|
||||
finally { setSaving(false); }
|
||||
};
|
||||
|
||||
if (hasAdr === null) return null;
|
||||
|
||||
return (
|
||||
<>
|
||||
<button
|
||||
onClick={() => { setOpen(true); fetchAdr(); }}
|
||||
className={`px-2.5 py-1 rounded-lg text-[10px] font-medium transition-all ${
|
||||
hasAdr
|
||||
? "bg-accent/15 text-accent hover:bg-accent/25"
|
||||
: "bg-white/[0.03] text-foreground/25 hover:text-foreground/40 hover:bg-white/[0.06]"
|
||||
}`}
|
||||
>
|
||||
{hasAdr ? "ADR" : "+ ADR"}
|
||||
</button>
|
||||
|
||||
{open && (
|
||||
<div className="fixed inset-0 z-50 flex items-center justify-center" onClick={() => setOpen(false)}>
|
||||
<div className="absolute inset-0 bg-black/60 backdrop-blur-sm" />
|
||||
<div className="relative bg-[#0e2028] border border-border/40 rounded-2xl p-6 w-full max-w-2xl shadow-2xl max-h-[80vh] flex flex-col" onClick={(e) => e.stopPropagation()}>
|
||||
<div className="flex items-center justify-between mb-4">
|
||||
<div>
|
||||
<h3 className="text-[15px] font-semibold text-foreground/90">{t.adr.title}</h3>
|
||||
<p className="text-[11px] text-foreground/30 font-mono mt-0.5">{project}</p>
|
||||
</div>
|
||||
<button onClick={() => setOpen(false)} className="text-foreground/20 hover:text-foreground/50 text-[16px] p-1">×</button>
|
||||
</div>
|
||||
{updatedAt && (
|
||||
<p className="text-[10px] text-foreground/20 mb-3">{t.adr.lastUpdated}: {updatedAt}</p>
|
||||
)}
|
||||
<textarea
|
||||
value={content}
|
||||
onChange={(e) => setContent(e.target.value)}
|
||||
placeholder={"# Architecture Decision Record\n\n## Context\n...\n\n## Decision\n...\n\n## Consequences\n..."}
|
||||
className="flex-1 min-h-[300px] bg-white/[0.03] border border-white/[0.06] rounded-xl px-4 py-3 text-[12px] text-foreground font-mono placeholder-foreground/15 outline-none focus:border-primary/30 resize-none leading-relaxed"
|
||||
/>
|
||||
<div className="flex justify-end gap-2 mt-4">
|
||||
{hasAdr && (
|
||||
<button
|
||||
onClick={async () => {
|
||||
setContent(""); await save();
|
||||
}}
|
||||
className="px-3 py-2 rounded-lg text-[12px] text-destructive/60 hover:text-destructive hover:bg-destructive/10 font-medium transition-all"
|
||||
>
|
||||
{t.common.delete}
|
||||
</button>
|
||||
)}
|
||||
<button onClick={() => setOpen(false)} className="px-4 py-2 rounded-lg text-[12px] text-foreground/40 hover:bg-white/[0.04] font-medium transition-all">{t.common.cancel}</button>
|
||||
<button onClick={save} disabled={saving} className="px-4 py-2 rounded-lg bg-primary/20 hover:bg-primary/30 text-primary text-[12px] font-medium transition-all disabled:opacity-30">
|
||||
{saving ? t.common.saving : t.common.save}
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
)}
|
||||
</>
|
||||
);
|
||||
}
|
||||
|
||||
/* ── Create Index Modal ─────────────────────────────────── */
|
||||
|
||||
function joinPath(base: string, dir: string): string {
|
||||
if (!base || base === "/") return `/${dir}`;
|
||||
if (/^[A-Za-z]:[\\/]?$/.test(base)) return `${base[0]}:/${dir}`;
|
||||
const slash = base.includes("\\") && !base.includes("/") ? "\\" : "/";
|
||||
return `${base.replace(/[\\/]+$/, "")}${slash}${dir}`;
|
||||
}
|
||||
|
||||
function CreateIndexModal({ onClose, onCreated }: { onClose: () => void; onCreated: () => void }) {
|
||||
const t = useUiMessages();
|
||||
const [currentPath, setCurrentPath] = useState("");
|
||||
const [dirs, setDirs] = useState<string[]>([]);
|
||||
const [roots, setRoots] = useState<string[]>(["/"]);
|
||||
const [parentPath, setParentPath] = useState("");
|
||||
const [projectName, setProjectName] = useState("");
|
||||
const [filter, setFilter] = useState("");
|
||||
const [activeIndex, setActiveIndex] = useState(0);
|
||||
const [loading, setLoading] = useState(false);
|
||||
const [submitting, setSubmitting] = useState(false);
|
||||
const [error, setError] = useState<string | null>(null);
|
||||
const filterRef = useRef<HTMLInputElement>(null);
|
||||
/* Path whose listing is currently shown. Lets the typed-path effect skip a
|
||||
* redundant re-fetch after browse() sets currentPath itself. */
|
||||
const lastBrowsedRef = useRef<string>("");
|
||||
|
||||
const browse = useCallback(async (path?: string, opts?: { silent?: boolean }) => {
|
||||
const silent = opts?.silent ?? false;
|
||||
if (!silent) setLoading(true);
|
||||
setError(null);
|
||||
try {
|
||||
const q = path ? `?path=${encodeURIComponent(path)}` : "";
|
||||
const res = await fetch(`/api/browse${q}`);
|
||||
const data = await res.json();
|
||||
if (data.error) throw new Error(data.error);
|
||||
lastBrowsedRef.current = data.path ?? "";
|
||||
setCurrentPath(data.path ?? "");
|
||||
setDirs((data.dirs ?? []).sort());
|
||||
setRoots(data.roots ?? ["/"]);
|
||||
setParentPath(data.parent ?? "/");
|
||||
} catch (e) {
|
||||
/* Silent (typed-path) refreshes keep the last good listing instead of
|
||||
* flashing an error while the user is still typing a path. */
|
||||
if (!silent) setError(e instanceof Error ? e.message : "Browse failed");
|
||||
}
|
||||
finally { if (!silent) setLoading(false); }
|
||||
}, []);
|
||||
|
||||
useEffect(() => { browse(); }, [browse]);
|
||||
useEffect(() => { filterRef.current?.focus(); }, []);
|
||||
|
||||
/* Windows only: when the user types a drive path into the Repository path
|
||||
* field, refresh the folder listing to match (debounced). On Windows, typing
|
||||
* is the way to switch drives, and without this the breadcrumb and path box
|
||||
* updated but the directory list stayed stale (e.g. typing "D:/" still showed
|
||||
* the previous drive's folders). POSIX navigation is left unchanged. */
|
||||
useEffect(() => {
|
||||
if (!currentPath || currentPath === lastBrowsedRef.current) return;
|
||||
if (!/^[A-Za-z]:/.test(currentPath.replace(/\\/g, "/"))) return;
|
||||
const id = setTimeout(() => { void browse(currentPath, { silent: true }); }, 350);
|
||||
return () => clearTimeout(id);
|
||||
}, [currentPath, browse]);
|
||||
|
||||
const filteredDirs = useMemo(() => {
|
||||
const q = filter.trim().toLowerCase();
|
||||
if (!q) return dirs;
|
||||
return dirs.filter((d) => d.toLowerCase().includes(q));
|
||||
}, [dirs, filter]);
|
||||
|
||||
useEffect(() => { setActiveIndex(0); }, [filter, currentPath]);
|
||||
|
||||
const submit = async (path = currentPath) => {
|
||||
if (!path) return;
|
||||
setSubmitting(true); setError(null);
|
||||
try {
|
||||
const body: { root_path: string; project_name?: string } = { root_path: path };
|
||||
if (projectName.trim()) body.project_name = projectName.trim();
|
||||
const res = await fetch("/api/index", { method: "POST", headers: { "Content-Type": "application/json" }, body: JSON.stringify(body) });
|
||||
const data = await res.json();
|
||||
if (!res.ok) throw new Error(data.error ?? "Failed");
|
||||
onCreated(); onClose();
|
||||
} catch (e) { setError(e instanceof Error ? e.message : "Failed"); }
|
||||
finally { setSubmitting(false); }
|
||||
};
|
||||
|
||||
const onFilterKeyDown = (e: React.KeyboardEvent<HTMLInputElement>) => {
|
||||
if (e.key === "ArrowDown") {
|
||||
e.preventDefault();
|
||||
setActiveIndex((i) => Math.min(i + 1, Math.max(filteredDirs.length - 1, 0)));
|
||||
} else if (e.key === "ArrowUp") {
|
||||
e.preventDefault();
|
||||
setActiveIndex((i) => Math.max(i - 1, 0));
|
||||
} else if (e.key === "Enter" && filteredDirs.length > 0) {
|
||||
e.preventDefault();
|
||||
const dir = filteredDirs.length === 1 ? filteredDirs[0] : filteredDirs[activeIndex];
|
||||
if (filteredDirs.length === 1) void submit(joinPath(currentPath, dir));
|
||||
else void browse(joinPath(currentPath, dir));
|
||||
}
|
||||
};
|
||||
|
||||
/* Breadcrumb segments */
|
||||
const displayPath = currentPath.replace(/\\/g, "/");
|
||||
const segments = displayPath.split("/").filter(Boolean);
|
||||
/* A Windows drive path ("C:/Users/rap") has no unified "/" root — its first
|
||||
* segment is the drive letter. Build crumb targets accordingly so clicking a
|
||||
* segment navigates to a real directory instead of a bogus "/C:/..." path
|
||||
* that the backend rejects as "not a directory". */
|
||||
const isWinPath = /^[A-Za-z]:$/.test(segments[0] ?? "");
|
||||
const crumbPath = (i: number): string => {
|
||||
const parts = segments.slice(0, i + 1);
|
||||
if (isWinPath) return parts.length === 1 ? `${parts[0]}/` : parts.join("/");
|
||||
return "/" + parts.join("/");
|
||||
};
|
||||
|
||||
/* Root/drive quick-jump buttons. On Windows the POSIX "/" root is meaningless
|
||||
* — browsing it returns an empty listing — so drop it and offer drive roots
|
||||
* instead. An older backend may not enumerate drives, so always include the
|
||||
* current drive; other drives stay reachable by typing a path. */
|
||||
const displayRoots = (() => {
|
||||
if (!isWinPath) return roots;
|
||||
const drives = Array.from(new Set(
|
||||
roots.filter((r) => /^[A-Za-z]:[\\/]?$/.test(r)).map((r) => `${r[0].toUpperCase()}:/`),
|
||||
));
|
||||
const curRoot = `${displayPath[0].toUpperCase()}:/`;
|
||||
if (!drives.includes(curRoot)) drives.unshift(curRoot);
|
||||
return drives;
|
||||
})();
|
||||
|
||||
return (
|
||||
<div className="fixed inset-0 z-50 flex items-center justify-center" onClick={onClose}>
|
||||
<div className="absolute inset-0 bg-black/60 backdrop-blur-sm" />
|
||||
<div className="relative bg-[#0e2028] border border-border/40 rounded-2xl w-full max-w-2xl shadow-2xl flex flex-col overflow-hidden" style={{ height: "min(82vh, 680px)" }} onClick={(e) => e.stopPropagation()}>
|
||||
{/* Header */}
|
||||
<div className="px-5 pt-5 pb-3 shrink-0">
|
||||
<h3 className="text-[15px] font-semibold text-foreground/90 mb-1">{t.index.selectRepositoryFolder}</h3>
|
||||
<p className="text-[12px] text-foreground/30">{t.index.instructions}</p>
|
||||
</div>
|
||||
|
||||
<div className="px-5 pb-3 grid grid-cols-[1fr_220px] gap-3 shrink-0">
|
||||
<label className="block">
|
||||
<span className="block text-[10px] uppercase tracking-widest text-foreground/25 mb-1">{t.index.repositoryPath}</span>
|
||||
<input
|
||||
aria-label={t.index.repositoryPath}
|
||||
value={currentPath}
|
||||
onChange={(e) => setCurrentPath(e.target.value)}
|
||||
onKeyDown={(e) => { if (e.key === "Enter" && /^[A-Za-z]:/.test(currentPath.replace(/\\/g, "/"))) { e.preventDefault(); void browse(currentPath); } }}
|
||||
className="w-full bg-white/[0.04] border border-white/[0.06] rounded-lg px-3 py-2 text-[12px] text-foreground font-mono outline-none focus:border-primary/40"
|
||||
/>
|
||||
</label>
|
||||
<label className="block">
|
||||
<span className="block text-[10px] uppercase tracking-widest text-foreground/25 mb-1">{t.index.projectName}</span>
|
||||
<input
|
||||
aria-label={t.index.projectName}
|
||||
value={projectName}
|
||||
placeholder={t.index.projectNamePlaceholder}
|
||||
onChange={(e) => setProjectName(e.target.value)}
|
||||
className="w-full bg-white/[0.04] border border-white/[0.06] rounded-lg px-3 py-2 text-[12px] text-foreground outline-none focus:border-primary/40 placeholder:text-foreground/20"
|
||||
/>
|
||||
<span className="block text-[10px] text-foreground/25 mt-1">{t.index.projectNameHelp}</span>
|
||||
</label>
|
||||
</div>
|
||||
|
||||
<div className="px-5 pb-3 flex items-center gap-2 shrink-0">
|
||||
<input
|
||||
ref={filterRef}
|
||||
value={filter}
|
||||
placeholder={t.index.filterFolders}
|
||||
onChange={(e) => setFilter(e.target.value)}
|
||||
onKeyDown={onFilterKeyDown}
|
||||
className="flex-1 bg-white/[0.04] border border-white/[0.06] rounded-lg px-3 py-2 text-[12px] text-foreground outline-none focus:border-primary/40 placeholder:text-foreground/20"
|
||||
/>
|
||||
<div className="flex items-center gap-1">
|
||||
{displayRoots.map((root) => (
|
||||
<button
|
||||
key={root}
|
||||
aria-label={t.index.browseRoot(root)}
|
||||
onClick={() => browse(root)}
|
||||
className="px-2.5 py-2 rounded-lg bg-white/[0.04] hover:bg-white/[0.07] text-[11px] text-foreground/45 font-mono transition-all"
|
||||
>
|
||||
{root}
|
||||
</button>
|
||||
))}
|
||||
</div>
|
||||
</div>
|
||||
|
||||
{/* Breadcrumb */}
|
||||
<div className="px-5 py-2 border-y border-border/20 flex items-center gap-0.5 overflow-x-auto text-[11px] shrink-0">
|
||||
{!isWinPath && (
|
||||
<button onClick={() => browse("/")} className="text-primary/60 hover:text-primary shrink-0 transition-colors">/</button>
|
||||
)}
|
||||
{segments.map((seg, i) => (
|
||||
<span key={i} className="flex items-center gap-0.5 shrink-0">
|
||||
{(i > 0 || !isWinPath) && <span className="text-foreground/15">/</span>}
|
||||
<button
|
||||
onClick={() => browse(crumbPath(i))}
|
||||
className={`transition-colors ${i === segments.length - 1 ? "text-foreground/70 font-medium" : "text-primary/50 hover:text-primary"}`}
|
||||
>
|
||||
{seg}
|
||||
</button>
|
||||
</span>
|
||||
))}
|
||||
</div>
|
||||
|
||||
{/* Directory list */}
|
||||
<ScrollArea className="flex-1 min-h-0">
|
||||
<div className="px-2 py-1">
|
||||
{/* Go up */}
|
||||
{currentPath !== "/" && (
|
||||
<button
|
||||
onClick={() => browse(parentPath)}
|
||||
className="flex items-center gap-2 w-full text-left px-3 py-2 rounded-lg hover:bg-white/[0.04] text-[12px] text-foreground/40 transition-colors"
|
||||
>
|
||||
<span className="text-foreground/20">↑</span>
|
||||
<span>..</span>
|
||||
</button>
|
||||
)}
|
||||
{loading ? (
|
||||
<p className="text-foreground/20 text-[12px] text-center py-8">{t.common.loading}</p>
|
||||
) : filteredDirs.length === 0 ? (
|
||||
<p className="text-foreground/15 text-[12px] text-center py-8">{t.index.noSubdirectories}</p>
|
||||
) : (
|
||||
filteredDirs.map((d, i) => (
|
||||
<div
|
||||
key={d}
|
||||
className={`flex items-center gap-2 rounded-lg px-3 py-1.5 text-[12px] transition-colors group ${
|
||||
i === activeIndex ? "bg-white/[0.05]" : "hover:bg-white/[0.04]"
|
||||
}`}
|
||||
>
|
||||
<button
|
||||
aria-label={t.index.browseRoot(d)}
|
||||
onClick={() => browse(joinPath(currentPath, d))}
|
||||
className="flex min-w-0 flex-1 items-center gap-2 text-left text-foreground/60"
|
||||
>
|
||||
<span className="text-foreground/20 group-hover:text-foreground/40">/</span>
|
||||
<span className="truncate">{d}</span>
|
||||
</button>
|
||||
<button
|
||||
aria-label={t.index.indexDirectory(d)}
|
||||
onClick={() => submit(joinPath(currentPath, d))}
|
||||
disabled={submitting}
|
||||
className="opacity-100 sm:opacity-0 sm:group-hover:opacity-100 px-2 py-1 rounded-md bg-primary/15 hover:bg-primary/25 text-primary text-[10px] font-medium transition-all disabled:opacity-30"
|
||||
>
|
||||
{t.index.indexThisFolder}
|
||||
</button>
|
||||
</div>
|
||||
))
|
||||
)}
|
||||
</div>
|
||||
</ScrollArea>
|
||||
|
||||
{/* Footer */}
|
||||
<div className="px-5 py-4 border-t border-border/20 shrink-0">
|
||||
{error && <div className="rounded-lg bg-destructive/10 border border-destructive/20 px-3 py-2 mb-3"><p className="text-destructive text-[11px]">{error}</p></div>}
|
||||
<div className="flex items-center justify-between">
|
||||
<p className="text-[11px] text-foreground/25 font-mono truncate max-w-[250px]">{currentPath}</p>
|
||||
<div className="flex gap-2 shrink-0">
|
||||
<button onClick={onClose} className="px-3 py-2 rounded-lg text-[12px] text-foreground/40 hover:bg-white/[0.04] font-medium transition-all">{t.common.cancel}</button>
|
||||
<button onClick={() => submit()} disabled={submitting || !currentPath} className="px-4 py-2 rounded-lg bg-primary/20 hover:bg-primary/30 text-primary text-[12px] font-medium transition-all disabled:opacity-30">
|
||||
{submitting ? t.index.starting : t.index.indexThisFolder}
|
||||
</button>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
/* ── Index Progress ─────────────────────────────────────── */
|
||||
|
||||
export function IndexProgress({ onDone }: { onDone: () => void }) {
|
||||
const t = useUiMessages();
|
||||
const [jobs, setJobs] = useState<{ slot: number; status: string; path: string; error?: string }[]>([]);
|
||||
const [hasActive, setHasActive] = useState(true);
|
||||
useEffect(() => {
|
||||
if (!hasActive) return;
|
||||
const poll = setInterval(async () => {
|
||||
try {
|
||||
const data = await (await fetch("/api/index-status")).json();
|
||||
setJobs(data);
|
||||
const stillIndexing = data.some((j: { status: string }) => j.status === "indexing");
|
||||
/* Empty list = job not visible: the backend keeps finished jobs listed
|
||||
as "done"/"error", so [] mid-index only happens on transient state
|
||||
loss (e.g. server restart) — keep polling, don't treat as done. */
|
||||
if (data.length > 0 && !stillIndexing) {
|
||||
setHasActive(false);
|
||||
const hasErrors = data.some((j: { status: string }) => j.status === "error");
|
||||
if (!hasErrors) {
|
||||
onDone();
|
||||
}
|
||||
}
|
||||
} catch (error) {
|
||||
console.error("[IndexProgress] Poll failed:", error);
|
||||
}
|
||||
}, 2000);
|
||||
return () => clearInterval(poll);
|
||||
}, [onDone, hasActive]);
|
||||
|
||||
const active = jobs.filter((j) => j.status === "indexing");
|
||||
const errors = jobs.filter((j) => j.status === "error");
|
||||
|
||||
if (active.length === 0 && errors.length === 0) return null;
|
||||
|
||||
return (
|
||||
<div className="rounded-xl border border-primary/20 bg-primary/5 p-4 mb-6">
|
||||
{active.map((j) => (
|
||||
<div key={j.slot} className="flex items-center gap-3">
|
||||
<div className="w-4 h-4 border-2 border-primary/30 border-t-primary rounded-full animate-spin shrink-0" />
|
||||
<div>
|
||||
<p className="text-[12px] text-primary font-medium">{t.projects.indexingInProgress}</p>
|
||||
<p className="text-[11px] text-foreground/30 font-mono">{j.path}</p>
|
||||
</div>
|
||||
</div>
|
||||
))}
|
||||
{errors.map((j) => (
|
||||
<div key={j.slot} className="flex items-start gap-3 mt-3 first:mt-0 p-3 rounded-lg border border-destructive/20 bg-destructive/5 text-destructive">
|
||||
<span className="text-[14px]">⚠️</span>
|
||||
<div className="flex-1 min-w-0">
|
||||
<p className="text-[12px] font-semibold">{t.projects.indexingFailed}</p>
|
||||
<p className="text-[11px] font-mono truncate">{j.path}</p>
|
||||
{j.error && <p className="text-[10px] opacity-75 mt-1 font-mono">{j.error}</p>}
|
||||
</div>
|
||||
</div>
|
||||
))}
|
||||
{errors.length > 0 && (
|
||||
<div className="flex justify-end mt-3">
|
||||
<button
|
||||
onClick={onDone}
|
||||
className="px-3 py-1 rounded bg-destructive/10 hover:bg-destructive/20 text-destructive text-[11px] font-medium transition-all"
|
||||
>
|
||||
{t.common.dismiss}
|
||||
</button>
|
||||
</div>
|
||||
)}
|
||||
</div>
|
||||
);
|
||||
}
|
||||
|
||||
/* ── Main Stats Tab ─────────────────────────────────────── */
|
||||
|
||||
export function StatsTab({ onSelectProject }: StatsTabProps) {
|
||||
const t = useUiMessages();
|
||||
const { projects, loading, error, refresh } = useProjects();
|
||||
const [showModal, setShowModal] = useState(false);
|
||||
const [indexing, setIndexing] = useState(false);
|
||||
|
||||
const aggregate = useMemo(() => {
|
||||
let totalNodes = 0, totalEdges = 0;
|
||||
for (const p of projects) {
|
||||
totalNodes += p.schema?.node_labels?.reduce((s, l) => s + l.count, 0) ?? 0;
|
||||
totalEdges += p.schema?.edge_types?.reduce((s, t) => s + t.count, 0) ?? 0;
|
||||
}
|
||||
return { projects: projects.length, nodes: totalNodes, edges: totalEdges };
|
||||
}, [projects]);
|
||||
|
||||
const deleteProject = useCallback(async (name: string) => {
|
||||
if (!confirm(t.projects.deleteConfirm(name))) return;
|
||||
try { await fetch(`/api/project?name=${encodeURIComponent(name)}`, { method: "DELETE" }); refresh(); } catch { /* */ }
|
||||
}, [refresh, t.projects]);
|
||||
|
||||
return (
|
||||
<ScrollArea className="h-full">
|
||||
<div className="p-8 max-w-3xl mx-auto">
|
||||
{projects.length > 0 && (
|
||||
<div className="flex gap-4 mb-8">
|
||||
{[
|
||||
{ label: t.tabs.projects, value: aggregate.projects, color: "text-primary" },
|
||||
{ label: t.projects.nodes, value: aggregate.nodes, color: "text-foreground/80" },
|
||||
{ label: t.projects.edges, value: aggregate.edges, color: "text-foreground/80" },
|
||||
].map((s) => (
|
||||
<div key={s.label} className="flex-1 rounded-xl border border-border/30 bg-white/[0.02] p-4">
|
||||
<p className="text-[10px] text-foreground/25 uppercase tracking-widest mb-1">{s.label}</p>
|
||||
<p className={`text-[22px] font-semibold tabular-nums ${s.color}`}>{s.value.toLocaleString()}</p>
|
||||
</div>
|
||||
))}
|
||||
</div>
|
||||
)}
|
||||
|
||||
{indexing && <IndexProgress onDone={() => { setIndexing(false); refresh(); }} />}
|
||||
|
||||
<div className="flex items-center justify-between mb-6">
|
||||
<h2 className="text-[15px] font-semibold text-foreground/80">{t.projects.indexedProjects}</h2>
|
||||
<div className="flex items-center gap-2">
|
||||
<button onClick={() => setShowModal(true)} className="px-3 py-1.5 rounded-lg bg-primary/15 hover:bg-primary/25 text-primary text-[12px] font-medium transition-all">+ {t.index.newIndex}</button>
|
||||
<button onClick={refresh} disabled={loading} className="px-3 py-1.5 rounded-lg bg-white/[0.04] hover:bg-white/[0.07] text-[12px] text-foreground/40 font-medium transition-all disabled:opacity-30">{loading ? "..." : t.common.refresh}</button>
|
||||
</div>
|
||||
</div>
|
||||
|
||||
{error && <div className="rounded-xl border border-destructive/20 bg-destructive/5 p-4 mb-6"><p className="text-destructive text-[13px]">{error}</p></div>}
|
||||
|
||||
{!loading && projects.length === 0 && !error && (
|
||||
<div className="text-center py-20">
|
||||
<p className="text-foreground/25 text-[13px] mb-2">{t.projects.noIndexedProjects}</p>
|
||||
<button onClick={() => setShowModal(true)} className="px-4 py-2 rounded-lg bg-primary/15 hover:bg-primary/25 text-primary text-[12px] font-medium transition-all">{t.projects.indexFirstRepository}</button>
|
||||
</div>
|
||||
)}
|
||||
|
||||
<div className="space-y-3">
|
||||
{projects.map((p) => {
|
||||
const totalNodes = p.schema?.node_labels?.reduce((s, l) => s + l.count, 0) ?? 0;
|
||||
const totalEdges = p.schema?.edge_types?.reduce((s, t) => s + t.count, 0) ?? 0;
|
||||
return (
|
||||
<div key={p.project.name} className="rounded-xl border border-border/30 bg-white/[0.02] hover:bg-white/[0.035] transition-all p-5">
|
||||
<div className="flex items-start justify-between gap-3 mb-3">
|
||||
<div className="min-w-0 flex items-start gap-2.5">
|
||||
<div className="mt-1.5"><HealthDot name={p.project.name} /></div>
|
||||
<div className="min-w-0">
|
||||
<h3 className="text-[14px] font-semibold text-foreground/90 mb-0.5">{p.project.name}</h3>
|
||||
<p className="text-[11px] text-foreground/20 font-mono truncate">{p.project.root_path}</p>
|
||||
</div>
|
||||
</div>
|
||||
<div className="flex items-center gap-1.5 shrink-0">
|
||||
<AdrButton project={p.project.name} />
|
||||
<button onClick={() => onSelectProject(p.project.name)} className="px-3 py-1.5 rounded-lg bg-primary/15 hover:bg-primary/25 text-primary text-[12px] font-medium transition-all">{t.projects.viewGraph}</button>
|
||||
<button onClick={() => deleteProject(p.project.name)} className="px-2 py-1.5 rounded-lg hover:bg-destructive/10 text-foreground/20 hover:text-destructive text-[12px] transition-all" title={t.projects.deleteTitle}>✕</button>
|
||||
</div>
|
||||
</div>
|
||||
{p.schema && (
|
||||
<>
|
||||
<div className="flex gap-6 text-[12px] text-foreground/30 mb-3">
|
||||
<span><strong className="text-foreground/55 tabular-nums">{totalNodes.toLocaleString()}</strong> {t.projects.nodes}</span>
|
||||
<span><strong className="text-foreground/55 tabular-nums">{totalEdges.toLocaleString()}</strong> {t.projects.edges}</span>
|
||||
</div>
|
||||
<div className="flex flex-wrap gap-1">
|
||||
{p.schema.node_labels?.map((l) => (
|
||||
<span key={l.label} className="inline-flex items-center gap-1 px-1.5 py-[2px] rounded-md text-[10px] font-medium" style={{ backgroundColor: colorForLabel(l.label) + "10", color: colorForLabel(l.label) + "bb" }}>
|
||||
<span className="w-[4px] h-[4px] rounded-full" style={{ backgroundColor: colorForLabel(l.label) }} />
|
||||
{l.label} {l.count.toLocaleString()}
|
||||
</span>
|
||||
))}
|
||||
</div>
|
||||
</>
|
||||
)}
|
||||
</div>
|
||||
);
|
||||
})}
|
||||
</div>
|
||||
</div>
|
||||
{showModal && <CreateIndexModal onClose={() => setShowModal(false)} onCreated={() => { setIndexing(true); refresh(); }} />}
|
||||
</ScrollArea>
|
||||
);
|
||||
}
|
||||
@@ -0,0 +1,2 @@
|
||||
/* TabBar moved inline into App.tsx header — this file kept for compatibility */
|
||||
export {};
|
||||
@@ -0,0 +1,48 @@
|
||||
import * as React from "react"
|
||||
import { cva, type VariantProps } from "class-variance-authority"
|
||||
import { Slot } from "radix-ui"
|
||||
|
||||
import { cn } from "@/lib/utils"
|
||||
|
||||
const badgeVariants = cva(
|
||||
"inline-flex w-fit shrink-0 items-center justify-center gap-1 overflow-hidden rounded-full border border-transparent px-2 py-0.5 text-xs font-medium whitespace-nowrap transition-[color,box-shadow] focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 [&>svg]:pointer-events-none [&>svg]:size-3",
|
||||
{
|
||||
variants: {
|
||||
variant: {
|
||||
default: "bg-primary text-primary-foreground [a&]:hover:bg-primary/90",
|
||||
secondary:
|
||||
"bg-secondary text-secondary-foreground [a&]:hover:bg-secondary/90",
|
||||
destructive:
|
||||
"bg-destructive text-white focus-visible:ring-destructive/20 dark:bg-destructive/60 dark:focus-visible:ring-destructive/40 [a&]:hover:bg-destructive/90",
|
||||
outline:
|
||||
"border-border text-foreground [a&]:hover:bg-accent [a&]:hover:text-accent-foreground",
|
||||
ghost: "[a&]:hover:bg-accent [a&]:hover:text-accent-foreground",
|
||||
link: "text-primary underline-offset-4 [a&]:hover:underline",
|
||||
},
|
||||
},
|
||||
defaultVariants: {
|
||||
variant: "default",
|
||||
},
|
||||
}
|
||||
)
|
||||
|
||||
function Badge({
|
||||
className,
|
||||
variant = "default",
|
||||
asChild = false,
|
||||
...props
|
||||
}: React.ComponentProps<"span"> &
|
||||
VariantProps<typeof badgeVariants> & { asChild?: boolean }) {
|
||||
const Comp = asChild ? Slot.Root : "span"
|
||||
|
||||
return (
|
||||
<Comp
|
||||
data-slot="badge"
|
||||
data-variant={variant}
|
||||
className={cn(badgeVariants({ variant }), className)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
export { Badge, badgeVariants }
|
||||
@@ -0,0 +1,64 @@
|
||||
import * as React from "react"
|
||||
import { cva, type VariantProps } from "class-variance-authority"
|
||||
import { Slot } from "radix-ui"
|
||||
|
||||
import { cn } from "@/lib/utils"
|
||||
|
||||
const buttonVariants = cva(
|
||||
"inline-flex shrink-0 items-center justify-center gap-2 rounded-md text-sm font-medium whitespace-nowrap transition-all outline-none focus-visible:border-ring focus-visible:ring-[3px] focus-visible:ring-ring/50 disabled:pointer-events-none disabled:opacity-50 aria-invalid:border-destructive aria-invalid:ring-destructive/20 dark:aria-invalid:ring-destructive/40 [&_svg]:pointer-events-none [&_svg]:shrink-0 [&_svg:not([class*='size-'])]:size-4",
|
||||
{
|
||||
variants: {
|
||||
variant: {
|
||||
default: "bg-primary text-primary-foreground hover:bg-primary/90",
|
||||
destructive:
|
||||
"bg-destructive text-white hover:bg-destructive/90 focus-visible:ring-destructive/20 dark:bg-destructive/60 dark:focus-visible:ring-destructive/40",
|
||||
outline:
|
||||
"border bg-background shadow-xs hover:bg-accent hover:text-accent-foreground dark:border-input dark:bg-input/30 dark:hover:bg-input/50",
|
||||
secondary:
|
||||
"bg-secondary text-secondary-foreground hover:bg-secondary/80",
|
||||
ghost:
|
||||
"hover:bg-accent hover:text-accent-foreground dark:hover:bg-accent/50",
|
||||
link: "text-primary underline-offset-4 hover:underline",
|
||||
},
|
||||
size: {
|
||||
default: "h-9 px-4 py-2 has-[>svg]:px-3",
|
||||
xs: "h-6 gap-1 rounded-md px-2 text-xs has-[>svg]:px-1.5 [&_svg:not([class*='size-'])]:size-3",
|
||||
sm: "h-8 gap-1.5 rounded-md px-3 has-[>svg]:px-2.5",
|
||||
lg: "h-10 rounded-md px-6 has-[>svg]:px-4",
|
||||
icon: "size-9",
|
||||
"icon-xs": "size-6 rounded-md [&_svg:not([class*='size-'])]:size-3",
|
||||
"icon-sm": "size-8",
|
||||
"icon-lg": "size-10",
|
||||
},
|
||||
},
|
||||
defaultVariants: {
|
||||
variant: "default",
|
||||
size: "default",
|
||||
},
|
||||
}
|
||||
)
|
||||
|
||||
function Button({
|
||||
className,
|
||||
variant = "default",
|
||||
size = "default",
|
||||
asChild = false,
|
||||
...props
|
||||
}: React.ComponentProps<"button"> &
|
||||
VariantProps<typeof buttonVariants> & {
|
||||
asChild?: boolean
|
||||
}) {
|
||||
const Comp = asChild ? Slot.Root : "button"
|
||||
|
||||
return (
|
||||
<Comp
|
||||
data-slot="button"
|
||||
data-variant={variant}
|
||||
data-size={size}
|
||||
className={cn(buttonVariants({ variant, size, className }))}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
export { Button, buttonVariants }
|
||||
@@ -0,0 +1,92 @@
|
||||
import * as React from "react"
|
||||
|
||||
import { cn } from "@/lib/utils"
|
||||
|
||||
function Card({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card"
|
||||
className={cn(
|
||||
"flex flex-col gap-6 rounded-xl border bg-card py-6 text-card-foreground shadow-sm",
|
||||
className
|
||||
)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
function CardHeader({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card-header"
|
||||
className={cn(
|
||||
"@container/card-header grid auto-rows-min grid-rows-[auto_auto] items-start gap-2 px-6 has-data-[slot=card-action]:grid-cols-[1fr_auto] [.border-b]:pb-6",
|
||||
className
|
||||
)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
function CardTitle({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card-title"
|
||||
className={cn("leading-none font-semibold", className)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
function CardDescription({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card-description"
|
||||
className={cn("text-sm text-muted-foreground", className)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
function CardAction({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card-action"
|
||||
className={cn(
|
||||
"col-start-2 row-span-2 row-start-1 self-start justify-self-end",
|
||||
className
|
||||
)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
function CardContent({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card-content"
|
||||
className={cn("px-6", className)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
function CardFooter({ className, ...props }: React.ComponentProps<"div">) {
|
||||
return (
|
||||
<div
|
||||
data-slot="card-footer"
|
||||
className={cn("flex items-center px-6 [.border-t]:pt-6", className)}
|
||||
{...props}
|
||||
/>
|
||||
)
|
||||
}
|
||||
|
||||
export {
|
||||
Card,
|
||||
CardHeader,
|
||||
CardFooter,
|
||||
CardTitle,
|
||||
CardAction,
|
||||
CardDescription,
|
||||
CardContent,
|
||||
}
|
||||
Some files were not shown because too many files have changed in this diff Show More
Reference in New Issue
Block a user