feat: port the colby v1.6.2 graph semantics, framework resolvers and synthesis

.github/workflows/ci.yml

@@ -193,7 +193,8 @@ jobs:
 
   # FSEvents is the one native-recursive watcher backend no other job runs:
   # Linux uses inotify and Windows ReadDirectoryChangesW. This job runs the
-  # symlink-following scan and watcher tests on macOS (#770).
+  # symlink-following scan and watcher tests on macOS (#770), and the burst
+  # that may drop or coalesce events (#1397).
   macos-watcher:
     name: macOS Watcher
     needs: workspace-version
@@ -229,6 +230,9 @@ jobs:
           cargo test -p codegraph-extract --locked --test scan_symlinks
           cargo test -p codegraph-watch --locked symlink
 
+      - name: Run the event-loss convergence test
+        run: cargo test -p codegraph-watch --locked --test event_loss
+
   ui:
     name: UI
     runs-on: ubuntu-24.04

Cargo.toml

@@ -75,12 +75,12 @@ indicatif = { version = "0.18", features = ["rayon"] }
 jsonc-parser = { version = "0.34", features = ["cst", "serde"] }
 
 # Self-update from GitHub Releases (mise-style `codegraph self-update`)
-# self_update 0.43+ moved to quick-xml ^0.38 (fixes RUSTSEC-2026-0194/0195) and
-# indicatif ^0.18; the builder API used by cmd_self_update is unchanged (no break
-# until the 1.0.0-rc line). 0.44 also made the HTTP client optional: `reqwest` must
-# be listed explicitly, and `rustls` gates on it (`reqwest?/rustls`), so keep both
-# to get reqwest+rustls (no native-tls/OpenSSL) as before. Keep default-features=false.
-self_update = { version = "0.44", default-features = false, features = ["reqwest", "rustls", "archive-tar", "archive-zip", "compression-flate2", "compression-zip-deflate"] }
+# self_update 1.3.1 extracts zip archives through zip ^9 (RUSTSEC-2026-0367/0368/
+# 0369 hit zip 6, which 0.44 required). Since 1.0 each backend, the progress bar
+# and the tar.gz decoder are features of their own (`github`, `progress-bar`,
+# `compression-tar-gz`), and quick-xml only comes with the `s3` backend. The HTTP
+# client stays reqwest with rustls (no native-tls/OpenSSL). Keep default-features=false.
+self_update = { version = "1.3.1", default-features = false, features = ["reqwest", "rustls", "github", "progress-bar", "archive-tar", "archive-zip", "compression-tar-gz", "compression-zip-deflate"] }
 
 # Benchmarking
 criterion = "0.8"

Makefile

@@ -119,7 +119,7 @@ guardrail:
 
 script-tests:
 	@for test_script in scripts/tests/*.test.sh; do \
-		echo "Running $$test_script"; bash "$$test_script"; \
+		echo "Running $$test_script"; bash "$$test_script" || exit 1; \
 	done
 
 # Keep all supported local/CI entry points byte-for-byte equivalent in ordering.

crates/codegraph-bench/Cargo.toml

@@ -23,6 +23,7 @@ serde_json = { workspace = true }
 anyhow = { workspace = true }
 clap = { workspace = true }
 rusqlite = { workspace = true }
+sha2 = { workspace = true }
 codegraph-core = { path = "../codegraph-core" }
 codegraph-extract = { path = "../codegraph-extract" }
 

crates/codegraph-bench/fixtures/commonjs/index.js

@@ -0,0 +1,5 @@
+'use strict';
+
+const app = require('./lib/app');
+
+module.exports = app;

crates/codegraph-bench/fixtures/commonjs/lib/app.js

@@ -0,0 +1,15 @@
+'use strict';
+
+const { default: Service } = require('./service');
+const util = require('./util'),
+  format = require('./format');
+
+function createApp() {
+  const service = new Service();
+  return util.wrap(format.title(service.name()));
+}
+
+module.exports = createApp;
+module.exports.setCharset = function setCharset(value) {
+  return format.title(value);
+};

crates/codegraph-bench/fixtures/commonjs/lib/chain.js

@@ -0,0 +1,7 @@
+'use strict';
+
+const wrap = require('./util').wrap;
+
+module.exports = function chain(value) {
+  return require('./format').title(wrap(value));
+};

crates/codegraph-bench/fixtures/commonjs/lib/format.js

@@ -0,0 +1,7 @@
+'use strict';
+
+function title(value) {
+  return String(value).toUpperCase();
+}
+
+module.exports = { title };

crates/codegraph-bench/fixtures/commonjs/lib/service.js

@@ -0,0 +1,9 @@
+'use strict';
+
+class Service {
+  name() {
+    return 'service';
+  }
+}
+
+exports.default = Service;

crates/codegraph-bench/fixtures/commonjs/lib/util.js

@@ -0,0 +1,5 @@
+'use strict';
+
+exports.wrap = function wrap(value) {
+  return '[' + value + ']';
+};

crates/codegraph-bench/fixtures/commonjs/package.json

@@ -0,0 +1,8 @@
+{
+  "name": "commonjs-fixture",
+  "private": true,
+  "main": "index.js",
+  "dependencies": {
+    "supertest": "6.3.0"
+  }
+}

crates/codegraph-bench/fixtures/commonjs/test/app.test.js

@@ -0,0 +1,12 @@
+'use strict';
+
+const request = require('supertest');
+const createApp = require('../');
+const { setCharset } = require('../lib/app');
+
+describe('app', () => {
+  it('builds', () => {
+    request(createApp());
+    setCharset('utf-8');
+  });
+});

crates/codegraph-bench/fixtures/csharp/src/App/Nested.cs

@@ -0,0 +1,26 @@
+namespace Outer
+{
+    namespace Inner
+    {
+        public class Deep
+        {
+            public void Dive() { Surface(); }
+            public void Surface() { }
+        }
+    }
+
+    public class Shallow
+    {
+        public void Call() { new Inner.Deep().Dive(); }
+    }
+}
+
+namespace JetBrains.Annotations
+{
+    public class Guard { }
+}
+
+namespace Second
+{
+    public class Two { }
+}

crates/codegraph-bench/fixtures/csharp/src/App/Partial.cs

@@ -0,0 +1,12 @@
+namespace App
+{
+    public partial class Report
+    {
+        public void Render() { Header(); }
+    }
+
+    public partial class Report
+    {
+        private void Header() { }
+    }
+}