fix: v0.47.1 — gate AST_INDEX_WALK_UP on .git marker + deterministic CLI tests (#56)

- fix(ast-index): AST_INDEX_WALK_UP is now set only when projectRoot has no
  `.git` marker of its own. Forcing it on every spawn let a git worktree nested
  under the main repo walk up past its own gitlink and escape to the parent
  repo's index, returning the wrong files. Marker computed once
  (computeHasGitMarker), recomputed on updateProjectRoot. Bare monorepo subdirs
  (no marker) keep walk-up.

- docs(adr): 0002-ast-index-multi-root-scoping — records the walk-up gate
  (accepted) and the deferred --local/subtree plan to re-enable ast-index on
  multi-repo parents (proposed).

- test: neutralise CLAUDE_PROJECT_DIR + CLAUDE_PLUGIN_ROOT in index/installer
  setup so git-detection and install assertions are deterministic regardless of
  which suites share a vitest worker. Mock the git exec seam to drop the real
  3s-timeout flake; retry guards the residual race. Type the explore exec mock.

Full suite: only the 3 pre-existing context-mode-detector env failures remain
(real local .mcp.json; clean in CI). npm audit 0.

Co-authored-by: shahinyanm <mher.shahinyan@12go.asia>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: 3 people

.claude-plugin/marketplace.json

@@ -6,14 +6,14 @@
   },
   "metadata": {
     "description": "Token Pilot — save 60-90% tokens when AI reads code",
-    "version": "0.47.0"
+    "version": "0.47.1"
   },
   "plugins": [
     {
       "name": "token-pilot",
       "source": "./",
       "description": "Reduces token consumption by 60-90% via AST-aware lazy file reading, structural symbol navigation, and cross-session tool-usage analytics. 24 MCP tools + 25 subagents + budget watchdog hooks.",
-      "version": "0.47.0",
+      "version": "0.47.1",
       "author": {
         "name": "Digital-Threads"
       },

.claude-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "token-pilot",
-  "version": "0.47.0",
+  "version": "0.47.1",
   "description": "Saves 60-90% tokens on AI code reading. AST-aware lazy reads, symbol navigation, find_usages, structural git diff/log, edit-safety guard, Task-routing matcher, cross-session telemetry (errors + diagnostics), 25 tp-* subagents tiered to haiku/sonnet/opus with budget watchdog.",
   "author": {
     "name": "Digital-Threads",

CHANGELOG.md

@@ -5,6 +5,26 @@ All notable changes to Token Pilot will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.47.1] - 2026-06-24
+
+### Fixed — gate AST_INDEX_WALK_UP on the `.git` marker (nested-worktree escape)
+
+`exec()` set `AST_INDEX_WALK_UP=1` unconditionally. The flag tells ast-index to
+traverse past nested VCS markers and reuse a parent-level index — it exists for
+bare monorepo subdirs (no `.git`, no local DB). But forcing it when `projectRoot`
+is itself a git repo/worktree root let a worktree nested under the main repo
+(`main-repo/.worktrees/feature`) walk up past its own `.git` and **escape to the
+main repo's index, returning the wrong files**. Now the flag is set only when
+`projectRoot` has no `.git` marker of its own (a `.git` dir or worktree gitlink
+file both count). See `docs/adr/0002-ast-index-multi-root-scoping.md` — also
+records the deferred `--local`/subtree plan for multi-repo parents.
+
+### Fixed — deterministic CLI tests under parallel sharding
+
+`index.test.ts` / `installer.test.ts` now neutralise `CLAUDE_PROJECT_DIR` and
+`CLAUDE_PLUGIN_ROOT` in setup so the git-detection and install assertions don't
+flake when another suite leaks those env vars into a shared vitest worker.
+
 ## [0.47.0] - 2026-06-24
 
 ### Added — `explore` tool: one-shot ranked context + graph blast-radius

agents/tp-api-surface-tracker.md

@@ -9,7 +9,7 @@ tools:
   - mcp__token-pilot__read_symbol
   - Bash
 model: haiku
-token_pilot_version: "0.47.0"
+token_pilot_version: "0.47.1"
 token_pilot_body_hash: dd184501203fa7f3c73f419c4ffbe33c4be75400cb64a7a51733a3fe23f6e085
 requiredMcpServers:
   - "token-pilot"

agents/tp-audit-scanner.md

@@ -11,7 +11,7 @@ tools:
   - Grep
   - Read
 model: sonnet
-token_pilot_version: "0.47.0"
+token_pilot_version: "0.47.1"
 token_pilot_body_hash: d172f600bf32277ea6eb4cbbee4542ddd698a986dcd96997d33930561964569b
 requiredMcpServers:
   - "token-pilot"

agents/tp-commit-writer.md

@@ -8,7 +8,7 @@ tools:
   - mcp__token-pilot__test_summary
   - mcp__token-pilot__outline
   - Bash
-token_pilot_version: "0.47.0"
+token_pilot_version: "0.47.1"
 token_pilot_body_hash: de64a406b5176de19f7422619c7de7949b1f28865f225402c9cea9255f377428
 requiredMcpServers:
   - "token-pilot"

agents/tp-context-engineer.md

@@ -13,7 +13,7 @@ tools:
   - Edit
   - Glob
 model: sonnet
-token_pilot_version: "0.47.0"
+token_pilot_version: "0.47.1"
 token_pilot_body_hash: 68b32af2dacd82ebe52c4eec93edb903d452688274c3065218270627c564d8b0
 requiredMcpServers:
   - "token-pilot"

agents/tp-dead-code-finder.md

@@ -11,7 +11,7 @@ tools:
   - Grep
   - Read
 model: sonnet
-token_pilot_version: "0.47.0"
+token_pilot_version: "0.47.1"
 token_pilot_body_hash: d9b7f5b7ae6f4ae21305c775361bcab097cc774370a6d976c093571d46d55021
 requiredMcpServers:
   - "token-pilot"

agents/tp-debugger.md

@@ -12,7 +12,7 @@ tools:
   - Read
   - Bash
 model: sonnet
-token_pilot_version: "0.47.0"
+token_pilot_version: "0.47.1"
 token_pilot_body_hash: 052413de8d92377edcde6ae5c823f5378db304baccfa29e8866467f42553a500
 requiredMcpServers:
   - "token-pilot"

agents/tp-dep-health.md

@@ -9,7 +9,7 @@ tools:
   - Bash
   - Read
 model: haiku
-token_pilot_version: "0.47.0"
+token_pilot_version: "0.47.1"
 token_pilot_body_hash: e14dc57493d816f8c2e017963e2ef5f66bea50fd0b805a80e8a0d97c968427e7
 requiredMcpServers:
   - "token-pilot"