chore(release): prep gcode 0.6.1

Author: joshwilhelmi

CHANGELOG.md

@@ -7,6 +7,15 @@ All notable changes to gobby-cli are documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.6.1] — gcode
+
+### Fixed
+
+#### gcode
+
+- **FTS fallback query sanitization** — Escaped `%`, `_`, and `\` correctly in the LIKE-based fallback search path so literal user queries stay literal. Prevents malformed matches and closes a SQL-injection footgun in symbol resolution and name search.
+- **Neo4j correctness cutover** — Completed import-aware call-target classification for Python, JavaScript, and TypeScript. `gcode index` now distinguishes local symbols, unresolved callees, and external modules when writing call data, which reduces bogus graph edges and improves `callers`, `usages`, `blast-radius`, and graph-boosted search relevance. (#137)
+
 ## [0.6.0] — gcode
 
 ### Changed

Cargo.lock

@@ -25,7 +25,11 @@ This workspace contains four Gobby CLI tools plus a shared library:
 
 ### gcode — Code Search & Navigation
 
-AST-aware code search powered by tree-sitter. Indexes 18 languages into SQLite FTS5 for instant symbol lookup, content search, and file tree navigation. With Gobby, adds semantic vector search (Qdrant) and dependency graph analysis (Neo4j) — callers, usages, imports, and blast-radius. Incremental indexing, cross-project queries, and graceful degradation when services are unavailable.
+AST-aware code search powered by tree-sitter. Indexes 18 languages into SQLite
+FTS5 for symbol lookup, content search, file tree navigation, and hybrid
+ranking. When Neo4j, Qdrant, and an embeddings endpoint are configured -
+typically through Gobby - `gcode` adds graph-aware search, semantic search,
+and dependency analysis (`callers`, `usages`, `imports`, `blast-radius`).
 
 ### gsqz — Output Compression
 
@@ -60,17 +64,9 @@ Download from [GitHub Releases](https://github.com/GobbyAI/gobby-cli/releases/la
 ### From crates.io
 
 ```bash
-# gcode (with embeddings — requires cmake)
+# gcode
 cargo install gobby-code
 
-# gcode (with GPU acceleration — pick your backend)
-cargo install gobby-code --features cuda    # NVIDIA (requires CUDA toolkit)
-cargo install gobby-code --features vulkan  # Any GPU (requires Vulkan SDK)
-cargo install gobby-code --features rocm    # AMD (requires ROCm)
-
-# gcode (without embeddings)
-cargo install gobby-code --no-default-features
-
 # gsqz
 cargo install gobby-squeeze
 
@@ -81,7 +77,8 @@ cargo install gobby-local
 cargo install gobby-hooks
 ```
 
-On macOS, Metal GPU acceleration is enabled automatically. On Linux/Windows, embeddings use CPU inference by default — add a GPU feature flag for hardware acceleration.
+`gcode` graph and semantic features are configured at runtime. There are no
+Cargo feature flags for Neo4j, Qdrant, or embeddings support.
 
 ### From source
 
@@ -99,7 +96,7 @@ cargo install --path crates/ghook
 ```bash
 cargo build --workspace --no-default-features   # Build all tools
 cargo test --workspace --no-default-features    # Test all tools
-cargo clippy --workspace -- -D warnings         # Lint all tools
+cargo clippy --workspace --no-default-features -- -D warnings  # Lint all tools
 cargo fmt --all --check                         # Check formatting
 ```
 

README.md

@@ -1,6 +1,6 @@
 [package]
 name = "gobby-code"
-version = "0.6.0"
+version = "0.6.1"
 edition = "2024"
 rust-version = "1.85"
 authors = ["Josh Wilhelmi <hello@gobby.ai>"]

crates/gcode/Cargo.toml

@@ -52,7 +52,7 @@ codebase → tree-sitter AST → SQLite index → search / retrieve / navigate
 
 1. **Index** — Walk files, parse ASTs with tree-sitter, extract symbols and content chunks
 2. **Store** — SQLite for symbols + FTS5, Neo4j for call/import graphs, Qdrant for semantic vectors
-3. **Search** — Hybrid ranking: FTS5 + semantic similarity + graph relevance → Reciprocal Rank Fusion
+3. **Search** — Hybrid ranking: FTS5 + optional semantic + optional graph sources → Reciprocal Rank Fusion
 4. **Retrieve** — Byte-offset reads for exact symbol source, no file-level bloat
 
 ## Installation
@@ -86,13 +86,12 @@ Expand-Archive gcode.zip -DestinationPath .
 ### Build from source
 
 ```bash
-# With embeddings (requires cmake for llama-cpp-2)
 cargo install gobby-code
-
-# Without embeddings (no cmake needed)
-cargo install gobby-code --no-default-features
 ```
 
+Graph and semantic features are configured at runtime. You do not need Cargo
+feature flags to enable Neo4j, Qdrant, or embeddings support.
+
 ### With Gobby
 
 gcode is installed automatically as part of the [Gobby](https://github.com/GobbyAI/gobby) platform. If you're using Gobby, you already have it.
@@ -118,7 +117,7 @@ gcode tree                                # File tree with symbol counts
 
 # Dependency graph (requires Neo4j)
 gcode callers "handleAuth"                # Who calls this?
-gcode usages "handleAuth"                 # All references (calls + imports)
+gcode usages "handleAuth"                 # Incoming call sites
 gcode imports src/auth.ts                 # Import graph for a file
 gcode blast-radius "handleAuth" --depth 3 # Transitive impact analysis
 
@@ -155,14 +154,14 @@ Full indexing and text search. No external services needed.
 ```
 codebase → tree-sitter → SQLite        → FTS5 search
                           Neo4j         → call graphs, blast radius, imports
-                          Qdrant + GGUF → semantic vector search
+                          Qdrant + embeddings API → semantic vector search
                           Gobby daemon  → auto-indexing, LLM summaries,
                                           config, secrets, sessions, agents
 ```
 
 Gobby adds graph queries, semantic search, and infrastructure that makes gcode better at its core job — not just more features bolted on.
 
-**Search quality improves.** With Neo4j, `gcode search` blends FTS5 text matching with call-graph relevance. Symbols that are heavily referenced rank higher. With Qdrant, conceptual queries like "database connection pooling" find semantically similar code even when the exact words don't match.
+**Search quality improves.** With Neo4j, `gcode search` blends FTS5 text matching with call-graph relevance. With Qdrant plus a configured embeddings API, conceptual queries like "database connection pooling" can find semantically similar code even when the exact words don't match.
 
 **Config and secrets are managed.** Neo4j URLs, Qdrant API keys, and auth credentials are stored in the shared database and encrypted with Fernet. No env vars to juggle.
 
@@ -172,7 +171,7 @@ Gobby adds graph queries, semantic search, and infrastructure that makes gcode b
 |-----------|-----------|-----------|
 | AST indexing + FTS5 search | Yes | Yes |
 | Graph-boosted search ranking | — | Yes (Neo4j) |
-| Semantic vector search | — | Yes (Qdrant + GGUF) |
+| Semantic vector search | — | Yes (Qdrant + embeddings API) |
 | Call graph / blast radius | — | Yes (Neo4j) |
 | Import graph | — | Yes (Neo4j) |
 | Auto-indexing on file change | — | Yes (daemon file watcher) |
@@ -190,7 +189,7 @@ Get started with Gobby at [github.com/GobbyAI/gobby](https://github.com/GobbyAI/
 |---------------------|----------|
 | Neo4j down | Graph commands return `[]`. Search loses graph boost. |
 | Qdrant down | Search loses semantic boost. FTS5 + graph still work. |
-| GGUF model missing | Semantic embeddings disabled. FTS5 + graph still work. |
+| Embeddings API unavailable | Semantic embeddings disabled. FTS5 + graph still work. |
 | No index yet | Commands error with `Run gcode init to initialize`. |
 
 ## Language Support
@@ -203,13 +202,14 @@ gcode parses ASTs using tree-sitter with support for 18 languages:
 | **Tier 2** | Dart, Elixir |
 | **Tier 3** | JSON, YAML, Markdown (content indexing only) |
 
-## Build Features
+## Build
 
-The `embeddings` Cargo feature (default: on) enables local GGUF embedding generation via `llama-cpp-2`. Requires cmake to build. macOS builds use Metal GPU acceleration.
+`gcode` uses runtime-configured services rather than Cargo feature flags.
 
 ```bash
-cargo build --release                        # With embeddings
-cargo build --release --no-default-features  # Without embeddings (no cmake)
+cargo build --release
+cargo test --no-default-features
+cargo clippy --no-default-features -- -D warnings
 ```
 
 ## Platform Support

crates/gcode/README.md

@@ -145,7 +145,10 @@ fn build_python_module_index(root_path: &Path, candidate_files: &[PathBuf]) -> H
             continue;
         }
 
-        let mut module = rel.with_extension("").to_string_lossy().replace('/', ".");
+        let mut module = rel
+            .with_extension("")
+            .to_string_lossy()
+            .replace(['/', '\\'], ".");
         if module.ends_with(".__init__") {
             module.truncate(module.len() - ".__init__".len());
         }