dsh-gitnexus-plus 0.1.3 → 0.1.4

package/lib/routes/analyze.js.map

@@ -1 +1 @@
-{"version":3,"file":"analyze.js","sourceRoot":"","sources":["../../src/routes/analyze.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3F;;;GAGG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAaxF;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA2B,EAAE,IAAsB;IACnF,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC;YAAE,OAAO;QAElD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEnC,IAAI,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QAEjC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,6EAA6E;YAC7E,+EAA+E;YAC/E,6BAA6B;YAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC;gBAAE,OAAO;YACtC,4EAA4E;YAC5E,8EAA8E;YAC9E,oEAAoE;YACpE,MAAM,KAAK,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC;YACpD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;YACtE,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC;gBAAE,OAAO;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvC,8EAA8E;YAC9E,uDAAuD;YACvD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,kFAAkF;QAClF,yCAAyC;QACzC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC,CAAC;AACxF,CAAC"}
+{"version":3,"file":"analyze.js","sourceRoot":"","sources":["../../src/routes/analyze.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,cAAc,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3F;;;GAGG;AACH,MAAM,eAAe,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,CAAC,CAAC,CAAC;AAaxF;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,SAA2B,EAAE,IAAsB;IACnF,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,eAAe,CAAC;YAAE,OAAO;QAElD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QAEnC,IAAI,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QAEjC,IAAI,GAAG,CAAC,MAAM,KAAK,MAAM,EAAE,CAAC;YAC1B,6EAA6E;YAC7E,+EAA+E;YAC/E,6BAA6B;YAC7B,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC;gBAAE,OAAO;YACtC,4EAA4E;YAC5E,8EAA8E;YAC9E,oEAAoE;YACpE,EAAE;YACF,4EAA4E;YAC5E,6EAA6E;YAC7E,2EAA2E;YAC3E,mDAAmD;YACnD,MAAM,SAAS,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,KAAK,YAAY,CAAC;YAChE,MAAM,KAAK,GAAG,CAAC,SAAS,IAAI,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,OAAO,CAAC,KAAK,GAAG,CAAC;YAClE,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,CAAC,KAAK,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC;YACjF,OAAO;QACT,CAAC;QAED,IAAI,GAAG,CAAC,MAAM,KAAK,QAAQ,EAAE,CAAC;YAC5B,IAAI,CAAC,cAAc,CAAC,GAAG,EAAE,GAAG,CAAC;gBAAE,OAAO;YACtC,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;YACvC,8EAA8E;YAC9E,uDAAuD;YACvD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,GAAG,EAAE,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACvE,OAAO;QACT,CAAC;QAED,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACjC,kFAAkF;QAClF,yCAAyC;QACzC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;IACxC,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,CAAC,CAAC;AACxF,CAAC"}

package/lib/routes/delta.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `GET /api/gitnexus/delta?repo=<project>` — "is a refresh worth running?"
+ *
+ * Read-only on purpose, and separated from the analyze route for the same reason that
+ * one is separate from coverage: the two halves have different method policies. This
+ * route answers a question about the working tree; it never starts, cancels or writes
+ * anything, so it takes only the read guard.
+ *
+ * The panel calls it before offering the refresh control, which is why it has to be
+ * fast. It is: on a clean working tree the candidate set is empty and no file is read.
+ * The engine's own bound is a candidate cap, not a time budget — see `gitnexus/delta.ts`.
+ */
+import type { WebServerService } from '@deepseek-ai/cordis';
+import type { DeltaReport } from '../gitnexus/delta.js';
+export interface DeltaRouteDeps {
+    read: (repoPath: string) => Promise<DeltaReport>;
+}
+/**
+ * @returns disposer that unregisters the route
+ */
+export declare function mountDeltaRoute(webServer: WebServerService, deps: DeltaRouteDeps): () => void;
+//# sourceMappingURL=delta.d.ts.map

package/lib/routes/delta.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"delta.d.ts","sourceRoot":"","sources":["../../src/routes/delta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,sBAAsB,CAAC;AAIxD,MAAM,WAAW,cAAc;IAC7B,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,KAAK,OAAO,CAAC,WAAW,CAAC,CAAC;CAClD;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,IAAI,CAgC7F"}

package/lib/routes/delta.js

@@ -0,0 +1,50 @@
+/**
+ * `GET /api/gitnexus/delta?repo=<project>` — "is a refresh worth running?"
+ *
+ * Read-only on purpose, and separated from the analyze route for the same reason that
+ * one is separate from coverage: the two halves have different method policies. This
+ * route answers a question about the working tree; it never starts, cancels or writes
+ * anything, so it takes only the read guard.
+ *
+ * The panel calls it before offering the refresh control, which is why it has to be
+ * fast. It is: on a clean working tree the candidate set is empty and no file is read.
+ * The engine's own bound is a candidate cap, not a time budget — see `gitnexus/delta.ts`.
+ */
+import path from 'node:path';
+import { isProjectRoot } from '../gitnexus/index-meta.js';
+import { guardHandler, passGuard, answerHead, sendJson } from './guard.js';
+const DELTA_METHODS = new Set(['GET', 'HEAD']);
+/**
+ * @returns disposer that unregisters the route
+ */
+export function mountDeltaRoute(webServer, deps) {
+    const handler = guardHandler(async (req, res) => {
+        if (!passGuard(req, res, DELTA_METHODS))
+            return;
+        const url = new URL(req.url ?? '/', 'http://127.0.0.1');
+        const repo = url.searchParams.get('repo');
+        if (repo === null || repo.trim() === '') {
+            sendJson(res, 400, { ok: false, code: 'missing-repo', message: 'repo query parameter is required' });
+            return;
+        }
+        const absRepo = path.resolve(repo);
+        // Same bound as the coverage route: a project root, so this cannot be used to
+        // probe arbitrary directories. A project without an index is *not* refused here:
+        // "no index yet" is an answer the panel renders, and the engine reports it as
+        // `comparable: false` with the reason.
+        if (!(await isProjectRoot(absRepo))) {
+            sendJson(res, 404, {
+                ok: false,
+                code: 'not-a-project',
+                message: 'directory is neither a GitNexus index nor a git repository root',
+            });
+            return;
+        }
+        if (answerHead(req, res))
+            return;
+        const report = await deps.read(absRepo);
+        sendJson(res, 200, { ok: true, delta: report, readAt: new Date().toISOString() });
+    });
+    return webServer.register({ kind: 'prefix', path: '/api/gitnexus/delta', handler });
+}
+//# sourceMappingURL=delta.js.map

package/lib/routes/delta.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"delta.js","sourceRoot":"","sources":["../../src/routes/delta.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAI3E,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAMpE;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAA2B,EAAE,IAAoB;IAC/E,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;YAAE,OAAO;QAEhD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,8EAA8E;QAC9E,iFAAiF;QACjF,8EAA8E;QAC9E,uCAAuC;QACvC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,iEAAiE;aAC3E,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACxC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IACpF,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,CAAC;AACtF,CAAC"}

package/lib/routes/file-diff.d.ts

@@ -0,0 +1,19 @@
+/**
+ * `GET /api/gitnexus/file-diff?repo=<project>&path=<file>&sha=<commit>`
+ *
+ * The patch behind one commit's effect on one file. Split from file-history because the
+ * two cost differently: the timeline is a `git log`, and the patch is a `git show` that
+ * can carry a whole minified file. The client asks for it only when the reader expands a
+ * commit.
+ *
+ * Read-only. The path is resolved inside the project root and the sha is checked against
+ * a hash shape before it reaches git.
+ */
+import type { WebServerService } from '@deepseek-ai/cordis';
+import type { CommitDiff } from '../gitnexus/git-activity.js';
+export interface FileDiffRouteDeps {
+    read: (repoPath: string, filePath: string, sha: string) => Promise<CommitDiff>;
+}
+/** @returns disposer that unregisters the route */
+export declare function mountFileDiffRoute(webServer: WebServerService, deps: FileDiffRouteDeps): () => void;
+//# sourceMappingURL=file-diff.d.ts.map

package/lib/routes/file-diff.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-diff.d.ts","sourceRoot":"","sources":["../../src/routes/file-diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAKH,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAC5D,OAAO,KAAK,EAAE,UAAU,EAAE,MAAM,6BAA6B,CAAC;AAE9D,MAAM,WAAW,iBAAiB;IAChC,IAAI,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,OAAO,CAAC,UAAU,CAAC,CAAC;CAChF;AAED,mDAAmD;AACnD,wBAAgB,kBAAkB,CAChC,SAAS,EAAE,gBAAgB,EAC3B,IAAI,EAAE,iBAAiB,GACtB,MAAM,IAAI,CA2DZ"}

package/lib/routes/file-diff.js

@@ -0,0 +1,69 @@
+/**
+ * `GET /api/gitnexus/file-diff?repo=<project>&path=<file>&sha=<commit>`
+ *
+ * The patch behind one commit's effect on one file. Split from file-history because the
+ * two cost differently: the timeline is a `git log`, and the patch is a `git show` that
+ * can carry a whole minified file. The client asks for it only when the reader expands a
+ * commit.
+ *
+ * Read-only. The path is resolved inside the project root and the sha is checked against
+ * a hash shape before it reaches git.
+ */
+import path from 'node:path';
+import { isProjectRoot } from '../gitnexus/index-meta.js';
+import { guardHandler, passGuard, answerHead, sendJson } from './guard.js';
+/** @returns disposer that unregisters the route */
+export function mountFileDiffRoute(webServer, deps) {
+    const handler = guardHandler(async (req, res) => {
+        if (!passGuard(req, res))
+            return;
+        const url = new URL(req.url ?? '/', 'http://127.0.0.1');
+        const repo = url.searchParams.get('repo');
+        const file = url.searchParams.get('path');
+        const sha = url.searchParams.get('sha');
+        if (repo === null ||
+            repo.trim() === '' ||
+            file === null ||
+            file.trim() === '' ||
+            sha === null ||
+            !/^[0-9a-fA-F]{7,40}$/.test(sha.trim())) {
+            sendJson(res, 400, {
+                ok: false,
+                code: 'missing-params',
+                message: 'repo, path and a 7–40 character hex sha are required',
+            });
+            return;
+        }
+        const absRepo = path.resolve(repo);
+        if (!(await isProjectRoot(absRepo))) {
+            sendJson(res, 404, {
+                ok: false,
+                code: 'not-a-project',
+                message: 'directory is neither a GitNexus index nor a git repository root',
+            });
+            return;
+        }
+        const relative = file.trim();
+        const prefix = absRepo.endsWith(path.sep) ? absRepo : `${absRepo}${path.sep}`;
+        const absolute = path.resolve(absRepo, relative);
+        // Windows paths compare case-insensitively; normalising both sides avoids a
+        // false "outside project" for a path the caller spelled with another drive case.
+        const inside = process.platform === 'win32'
+            ? absolute.toLowerCase().startsWith(prefix.toLowerCase())
+            : absolute.startsWith(prefix);
+        if (!inside) {
+            sendJson(res, 400, {
+                ok: false,
+                code: 'invalid-path',
+                message: 'path must resolve inside the project root',
+            });
+            return;
+        }
+        if (answerHead(req, res))
+            return;
+        const diff = await deps.read(absRepo, relative, sha.trim());
+        sendJson(res, 200, { ok: true, ...diff, readAt: new Date().toISOString() });
+    });
+    return webServer.register({ kind: 'prefix', path: '/api/gitnexus/file-diff', handler });
+}
+//# sourceMappingURL=file-diff.js.map

package/lib/routes/file-diff.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"file-diff.js","sourceRoot":"","sources":["../../src/routes/file-diff.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAQ3E,mDAAmD;AACnD,MAAM,UAAU,kBAAkB,CAChC,SAA2B,EAC3B,IAAuB;IAEvB,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QAEjC,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,KAAK,CAAC,CAAC;QACxC,IACE,IAAI,KAAK,IAAI;YACb,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAClB,IAAI,KAAK,IAAI;YACb,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE;YAClB,GAAG,KAAK,IAAI;YACZ,CAAC,qBAAqB,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,EACvC,CAAC;YACD,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,sDAAsD;aAChE,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,iEAAiE;aAC3E,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,QAAQ,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC;QAC7B,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,GAAG,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;QAC9E,MAAM,QAAQ,GAAG,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,QAAQ,CAAC,CAAC;QACjD,4EAA4E;QAC5E,iFAAiF;QACjF,MAAM,MAAM,GACV,OAAO,CAAC,QAAQ,KAAK,OAAO;YAC1B,CAAC,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC,UAAU,CAAC,MAAM,CAAC,WAAW,EAAE,CAAC;YACzD,CAAC,CAAC,QAAQ,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC;QAClC,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,2CAA2C;aACrD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QAEjC,MAAM,IAAI,GAAG,MAAM,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,QAAQ,EAAE,GAAG,CAAC,IAAI,EAAE,CAAC,CAAC;QAC5D,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;IAC9E,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,yBAAyB,EAAE,OAAO,EAAE,CAAC,CAAC;AAC1F,CAAC"}

package/lib/routes/graph.d.ts

@@ -0,0 +1,22 @@
+/**
+ * `GET /api/gitnexus/graph?repo=<project>&view=communities|community&id=<community>`
+ *
+ * The read-only endpoint behind the panel's graph view. Two views, both bounded on the
+ * server: the browser never sends Cypher and never chooses how much of the graph to
+ * load — it picks one of two projections and the budgets are applied here.
+ *
+ * `view` defaults to `communities` rather than erroring when absent: the overview is the
+ * only sensible default, and the panel's first request has no scope yet. An unknown view
+ * is a 400, not a silent fallback — a typo must not render a different graph than the
+ * caller asked for.
+ */
+import { type GraphProjection, type GraphView } from '../gitnexus/graph.js';
+import type { WebServerService } from '@deepseek-ai/cordis';
+export interface GraphRouteDeps {
+    project: (repoPath: string, view: GraphView, id: string | null) => Promise<GraphProjection>;
+}
+/**
+ * @returns disposer that unregisters the route
+ */
+export declare function mountGraphRoute(webServer: WebServerService, deps: GraphRouteDeps): () => void;
+//# sourceMappingURL=graph.d.ts.map

package/lib/routes/graph.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.d.ts","sourceRoot":"","sources":["../../src/routes/graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAIH,OAAO,EAA2B,KAAK,eAAe,EAAE,KAAK,SAAS,EAAE,MAAM,sBAAsB,CAAC;AAErG,OAAO,KAAK,EAAE,gBAAgB,EAAE,MAAM,qBAAqB,CAAC;AAI5D,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,CAAC,QAAQ,EAAE,MAAM,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,KAAK,OAAO,CAAC,eAAe,CAAC,CAAC;CAC7F;AAED;;GAEG;AACH,wBAAgB,eAAe,CAAC,SAAS,EAAE,gBAAgB,EAAE,IAAI,EAAE,cAAc,GAAG,MAAM,IAAI,CAqD7F"}

package/lib/routes/graph.js

@@ -0,0 +1,71 @@
+/**
+ * `GET /api/gitnexus/graph?repo=<project>&view=communities|community&id=<community>`
+ *
+ * The read-only endpoint behind the panel's graph view. Two views, both bounded on the
+ * server: the browser never sends Cypher and never chooses how much of the graph to
+ * load — it picks one of two projections and the budgets are applied here.
+ *
+ * `view` defaults to `communities` rather than erroring when absent: the overview is the
+ * only sensible default, and the panel's first request has no scope yet. An unknown view
+ * is a 400, not a silent fallback — a typo must not render a different graph than the
+ * caller asked for.
+ */
+import path from 'node:path';
+import { isProjectRoot } from '../gitnexus/index-meta.js';
+import { GraphError, isGraphView } from '../gitnexus/graph.js';
+import { guardHandler, passGuard, answerHead, sendJson } from './guard.js';
+const GRAPH_METHODS = new Set(['GET', 'HEAD']);
+/**
+ * @returns disposer that unregisters the route
+ */
+export function mountGraphRoute(webServer, deps) {
+    const handler = guardHandler(async (req, res) => {
+        if (!passGuard(req, res, GRAPH_METHODS))
+            return;
+        const url = new URL(req.url ?? '/', 'http://127.0.0.1');
+        const repo = url.searchParams.get('repo');
+        if (repo === null || repo.trim() === '') {
+            sendJson(res, 400, { ok: false, code: 'missing-repo', message: 'repo query parameter is required' });
+            return;
+        }
+        const rawView = url.searchParams.get('view');
+        const view = rawView === null || rawView === '' ? 'communities' : rawView;
+        if (!isGraphView(view)) {
+            sendJson(res, 400, {
+                ok: false,
+                code: 'invalid-view',
+                message: 'view must be one of: communities, community',
+            });
+            return;
+        }
+        const absRepo = path.resolve(repo);
+        // Same bound as every other read route: a project root, so this cannot be used to
+        // probe arbitrary directories.
+        if (!(await isProjectRoot(absRepo))) {
+            sendJson(res, 404, {
+                ok: false,
+                code: 'not-a-project',
+                message: 'directory is neither a GitNexus index nor a git repository root',
+            });
+            return;
+        }
+        if (answerHead(req, res))
+            return;
+        const id = url.searchParams.get('id');
+        try {
+            const projection = await deps.project(absRepo, view, id === null || id === '' ? null : id);
+            sendJson(res, 200, { ok: true, projection, readAt: new Date().toISOString() });
+        }
+        catch (error) {
+            if (error instanceof GraphError) {
+                sendJson(res, error.status, { ok: false, code: error.code, message: error.message });
+                return;
+            }
+            // `guardHandler` turns anything else into a 500; rethrow so its single error
+            // path stays the only place that formats an unexpected failure.
+            throw error;
+        }
+    });
+    return webServer.register({ kind: 'prefix', path: '/api/gitnexus/graph', handler });
+}
+//# sourceMappingURL=graph.js.map

package/lib/routes/graph.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"graph.js","sourceRoot":"","sources":["../../src/routes/graph.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,2BAA2B,CAAC;AAC1D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAwC,MAAM,sBAAsB,CAAC;AACrG,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,YAAY,CAAC;AAG3E,MAAM,aAAa,GAAwB,IAAI,GAAG,CAAC,CAAC,KAAK,EAAE,MAAM,CAAC,CAAC,CAAC;AAMpE;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,SAA2B,EAAE,IAAoB;IAC/E,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE;QAC9C,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,GAAG,EAAE,aAAa,CAAC;YAAE,OAAO;QAEhD,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,GAAG,IAAI,GAAG,EAAE,kBAAkB,CAAC,CAAC;QACxD,MAAM,IAAI,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC1C,IAAI,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,EAAE,CAAC;YACxC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC,CAAC;YACrG,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC;QAC7C,MAAM,IAAI,GAAc,OAAO,KAAK,IAAI,IAAI,OAAO,KAAK,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAE,OAAqB,CAAC;QACpG,IAAI,CAAC,WAAW,CAAC,IAAI,CAAC,EAAE,CAAC;YACvB,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,cAAc;gBACpB,OAAO,EAAE,6CAA6C;aACvD,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,MAAM,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC;QACnC,kFAAkF;QAClF,+BAA+B;QAC/B,IAAI,CAAC,CAAC,MAAM,aAAa,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC;YACpC,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE;gBACjB,EAAE,EAAE,KAAK;gBACT,IAAI,EAAE,eAAe;gBACrB,OAAO,EAAE,iEAAiE;aAC3E,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QAED,IAAI,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC;YAAE,OAAO;QAEjC,MAAM,EAAE,GAAG,GAAG,CAAC,YAAY,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC;QAEtC,IAAI,CAAC;YACH,MAAM,UAAU,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,OAAO,EAAE,IAAI,EAAE,EAAE,KAAK,IAAI,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC3F,QAAQ,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC,CAAC;QACjF,CAAC;QAAC,OAAO,KAAK,EAAE,CAAC;YACf,IAAI,KAAK,YAAY,UAAU,EAAE,CAAC;gBAChC,QAAQ,CAAC,GAAG,EAAE,KAAK,CAAC,MAAM,EAAE,EAAE,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,KAAK,CAAC,IAAI,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC;gBACrF,OAAO;YACT,CAAC;YACD,6EAA6E;YAC7E,gEAAgE;YAChE,MAAM,KAAK,CAAC;QACd,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,OAAO,SAAS,CAAC,QAAQ,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,qBAAqB,EAAE,OAAO,EAAE,CAAC,CAAC;AACtF,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "dsh-gitnexus-plus",
-  "version": "0.1.3",
-  "description": "DSH plugin: visualize a GitNexus project index, search its symbols by keyword, report what it left out, and run its incremental refresh from a sidebar panel — including detecting a missing GitNexus and installing one on request.",
+  "version": "0.1.4",
+  "description": "DSH plugin: visualize a GitNexus project index and its communities, decide whether a refresh would change anything before running it, search symbols by keyword, report what the index left out, and run incremental or FTS-repair maintenance from a sidebar panel.",
   "type": "module",
   "license": "MIT",
   "repository": {