code hardening and changelog corrections

Author: GlitterKill

CHANGELOG.md

@@ -5,7 +5,7 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
-## [0.9.2] - 2026-03-21
+## [0.9.1] - 2026-03-20
 
 ### Added
 
@@ -16,37 +16,33 @@ and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0
   - Sends concise text summaries to the user (e.g., `symbol.search "foo" → 5 results`)
   - JSON responses remain unchanged for the LLM
 - `logging` capability declared in MCP Server capabilities
+- Unified runtime diagnostics via CLI `sdl-mcp info` and MCP `sdl.info`
+- `prepare-release` and `inspector` npm workflows for release preflight and MCP inspection
+- Performance cache for repo overview with singleflight deduplication (5s TTL)
 
 ### Changed
 
 - `renderSessionSummary` now skips lifetime section when no lifetime data exists (avoids misleading zeros when DB is unavailable)
 - Session-scope usage stats now fetch lifetime data from LadybugDB for combined summary display
 - Usage stats `formattedSummary` is sent as MCP notification to user and stripped from tool response (reduces unnecessary LLM context)
-
-### Removed
-
-- `renderTaskSummary` function (redundant with `renderSessionSummary`)
-
-## [0.9.1] - 2026-03-20
-
-### Added
-
-- Unified runtime diagnostics via CLI `sdl-mcp info` and MCP `sdl.info`
-- `prepare-release` and `inspector` npm workflows for release preflight and MCP inspection
-
-### Changed
-
+- Refactored pass2 edge builder into focused sub-modules (`enclosing-symbol`, `symbol-mapping`, `target-selection`, `unresolved-imports`)
 - MCP tool registration now publishes human-friendly titles, version-stamped descriptions, and shared request normalization across flat, gateway, and CLI tool-dispatch surfaces
 - Gateway `tools/list` schemas now preserve action-specific fields, descriptions, and defaults instead of collapsing to a bare envelope
 - Logging is now file-first with `SDL_LOG_FILE`, `SDL_CONSOLE_LOGGING`, temp-path fallback, and explicit shutdown flushing
 - Documentation was refreshed across CLI, architecture, troubleshooting, gateway, code-mode, and release workflow references
 
 ### Fixed
 
+- Cypher query bug: pre-compute word-boundary search strings on JS side to avoid LadybugDB expression evaluation issues in CASE expressions
+- Cypher query bug: ORDER BY in memory queries now references projected aliases instead of qualified node properties
 - Native platform package versions are synchronized with the root `sdl-mcp` release version
 - `prepare-release` now launches npm subcommands correctly on Windows
 - Release preflight packaging and stdio smoke coverage now validate the new diagnostics and tool registration surfaces
 
+### Removed
+
+- `renderTaskSummary` function (redundant with `renderSessionSummary`)
+
 ## [0.9.0] - 2026-03-17
 
 ### Added

src/mcp/tool-call-formatter.ts

@@ -25,6 +25,15 @@ function tok(n: number): string {
   return (n / 1_000_000).toFixed(2) + "M";
 }
 
+function safeRange(obj: unknown): { startLine?: number; endLine?: number } | undefined {
+  if (!obj || typeof obj !== "object") return undefined;
+  const r = obj as Record<string, unknown>;
+  return {
+    startLine: typeof r.startLine === "number" ? r.startLine : undefined,
+    endLine: typeof r.endLine === "number" ? r.endLine : undefined,
+  };
+}
+
 function rng(r: { startLine?: number; endLine?: number } | undefined): string {
   if (!r) return "";
   return `L${r.startLine ?? "?"}–${r.endLine ?? "?"}`;
@@ -68,7 +77,7 @@ function fmtSymbolGetCard(_a: Record<string, unknown>, r: Record<string, unknown
   const deps = card.deps as Record<string, unknown[]> | undefined;
   const imports = deps?.imports?.length ?? 0;
   const calls = deps?.calls?.length ?? 0;
-  return `symbol.getCard → ${str(card.name)} (${str(card.kind)})\n  File: ${shortPath(str(card.file))} ${rng(card.range as any)}\n  Deps: ${imports} imports, ${calls} calls`;
+  return `symbol.getCard → ${str(card.name)} (${str(card.kind)})\n  File: ${shortPath(str(card.file))} ${rng(safeRange(card.range))}\n  Deps: ${imports} imports, ${calls} calls`;
 }
 
 function fmtSymbolGetCards(_a: Record<string, unknown>, r: Record<string, unknown>): string | null {
@@ -82,15 +91,15 @@ function fmtCodeSkeleton(_a: Record<string, unknown>, r: Record<string, unknown>
   const orig = num(r.originalLines);
   const est = num(r.estimatedTokens);
   const trunc = r.truncated ? " (truncated)" : "";
-  return `code.getSkeleton → ${shortPath(file)}\n  ${orig} → skeleton ${rng(r.range as any)}${trunc} (~${tok(est)} tokens)`;
+  return `code.getSkeleton → ${shortPath(file)}\n  ${orig} → skeleton ${rng(safeRange(r.range))}${trunc} (~${tok(est)} tokens)`;
 }
 
 function fmtCodeHotPath(_a: Record<string, unknown>, r: Record<string, unknown>): string | null {
   const matched = r.matchedIdentifiers as string[] | undefined;
   const requested = (_a.identifiersToFind as string[])?.length ?? 0;
   const found = matched?.length ?? 0;
   const trunc = r.truncated ? " (truncated)" : "";
-  return `code.getHotPath → matched ${found}/${requested} identifiers ${rng(r.range as any)}${trunc}\n  (~${tok(num(r.estimatedTokens))} tokens)`;
+  return `code.getHotPath → matched ${found}/${requested} identifiers ${rng(safeRange(r.range))}${trunc}\n  (~${tok(num(r.estimatedTokens))} tokens)`;
 }
 
 function fmtCodeNeedWindow(_a: Record<string, unknown>, r: Record<string, unknown>): string | null {
@@ -99,10 +108,10 @@ function fmtCodeNeedWindow(_a: Record<string, unknown>, r: Record<string, unknow
   const downgraded = r.downgradedFrom ? ` (downgraded from ${str(r.downgradedFrom)})` : "";
   const est = num(r.estimatedTokens);
   if (!approved) {
-    const next = str((r as any).nextBestAction);
+    const next = str(r.nextBestAction);
     return `code.needWindow → [${status}]${next ? "\n  Suggestion: " + next : ""}`;
   }
-  return `code.needWindow → [${status}]${downgraded} ${rng(r.range as any)}\n  (~${tok(est)} tokens)`;
+  return `code.needWindow → [${status}]${downgraded} ${rng(safeRange(r.range))}\n  (~${tok(est)} tokens)`;
 }
 
 function fmtSliceBuild(_a: Record<string, unknown>, r: Record<string, unknown>): string | null {

src/mcp/tools/usage.ts

@@ -25,6 +25,46 @@ import {
 import { ValidationError, DatabaseError } from "../errors.js";
 import { ZodError } from "zod";
 
+
+const EMPTY_AGGREGATE: AggregateUsage = {
+  totalSdlTokens: 0,
+  totalRawEquivalent: 0,
+  totalSavedTokens: 0,
+  overallSavingsPercent: 0,
+  totalCalls: 0,
+  sessionCount: 0,
+};
+
+function toAggregateUsage(aggregate: Record<string, number>): AggregateUsage {
+  return {
+    totalSdlTokens: aggregate.totalSdlTokens,
+    totalRawEquivalent: aggregate.totalRawEquivalent,
+    totalSavedTokens: aggregate.totalSavedTokens,
+    overallSavingsPercent: aggregate.overallSavingsPercent,
+    totalCalls: aggregate.totalCalls,
+    sessionCount: aggregate.sessionCount,
+  };
+}
+
+async function fetchLifetimeAggregate(
+  repoId: string | undefined,
+): Promise<{ ltAggregate: AggregateUsage; allToolEntries: import("../token-accumulator.js").ToolUsageEntry[] }> {
+  try {
+    const conn = await getLadybugConn();
+    const aggregate = await getAggregateUsage(conn, { repoId });
+    const snapshots = await getUsageSnapshots(conn, { repoId, limit: 100 });
+    const allToolEntries = aggregateToolBreakdowns(
+      snapshots.map((s) => s.toolBreakdownJson),
+    );
+    return { ltAggregate: toAggregateUsage(aggregate), allToolEntries };
+  } catch {
+    process.stderr.write(
+      "[sdl-mcp] Usage stats: could not fetch lifetime data from LadybugDB\n",
+    );
+    return { ltAggregate: EMPTY_AGGREGATE, allToolEntries: [] };
+  }
+}
+
 export async function handleUsageStats(
   args: unknown,
 ): Promise<UsageStatsResponse> {
@@ -107,14 +147,7 @@ export async function handleUsageStats(
     };
 
     // Build formatted summary for history-aware scopes
-    const ltAggregate: AggregateUsage = {
-      totalSdlTokens: aggregate.totalSdlTokens,
-      totalRawEquivalent: aggregate.totalRawEquivalent,
-      totalSavedTokens: aggregate.totalSavedTokens,
-      overallSavingsPercent: aggregate.overallSavingsPercent,
-      totalCalls: aggregate.totalCalls,
-      sessionCount: aggregate.sessionCount,
-    };
+    const ltAggregate: AggregateUsage = toAggregateUsage(aggregate);
 
     if (request.scope === "both" && response.session) {
       response.formattedSummary = renderSessionSummary(
@@ -132,36 +165,12 @@ export async function handleUsageStats(
 
   // Session-only: still fetch lifetime for the combined summary
   if (request.scope === "session" && response.session) {
-    try {
-      const conn = await getLadybugConn();
-      const aggregate = await getAggregateUsage(conn, { repoId: request.repoId });
-      const snapshots = await getUsageSnapshots(conn, { repoId: request.repoId, limit: 100 });
-      const allToolEntries = aggregateToolBreakdowns(snapshots.map((s) => s.toolBreakdownJson));
-      const ltAggregate: AggregateUsage = {
-        totalSdlTokens: aggregate.totalSdlTokens,
-        totalRawEquivalent: aggregate.totalRawEquivalent,
-        totalSavedTokens: aggregate.totalSavedTokens,
-        overallSavingsPercent: aggregate.overallSavingsPercent,
-        totalCalls: aggregate.totalCalls,
-        sessionCount: aggregate.sessionCount,
-      };
-      response.formattedSummary = renderSessionSummary(
-        response.session,
-        ltAggregate,
-        allToolEntries,
-      );
-    } catch {
-      // Fallback: session-only without lifetime (DB unavailable)
-      process.stderr.write(
-        "[sdl-mcp] Usage stats: could not fetch lifetime data from LadybugDB\n",
-      );
-      // Render session section only — omit lifetime to avoid showing misleading zeros
-      response.formattedSummary = renderSessionSummary(
-        response.session,
-        { totalSdlTokens: 0, totalRawEquivalent: 0, totalSavedTokens: 0, overallSavingsPercent: 0, totalCalls: 0, sessionCount: 0 },
-        [],
-      );
-    }
+    const { ltAggregate, allToolEntries } = await fetchLifetimeAggregate(request.repoId);
+    response.formattedSummary = renderSessionSummary(
+      response.session,
+      ltAggregate,
+      allToolEntries,
+    );
   }
 
   return response;