gitnexus 1.4.10 → 1.5.0

package/dist/server/git-clone.d.ts

@@ -0,0 +1,25 @@
+/**
+ * Git Clone Utility
+ *
+ * Shallow-clones repositories into ~/.gitnexus/repos/{name}/.
+ * If already cloned, does git pull instead.
+ */
+/** Extract the repository name from a git URL (HTTPS or SSH). */
+export declare function extractRepoName(url: string): string;
+/** Get the clone target directory for a repo name. */
+export declare function getCloneDir(repoName: string): string;
+/**
+ * Validate a git URL to prevent SSRF attacks.
+ * Only allows https:// and http:// schemes. Blocks private/internal addresses.
+ */
+export declare function validateGitUrl(url: string): void;
+export interface CloneProgress {
+    phase: 'cloning' | 'pulling';
+    message: string;
+}
+/**
+ * Clone or pull a git repository.
+ * If targetDir doesn't exist: git clone --depth 1
+ * If targetDir exists with .git: git pull --ff-only
+ */
+export declare function cloneOrPull(url: string, targetDir: string, onProgress?: (progress: CloneProgress) => void): Promise<string>;

package/dist/server/git-clone.js

@@ -0,0 +1,91 @@
+/**
+ * Git Clone Utility
+ *
+ * Shallow-clones repositories into ~/.gitnexus/repos/{name}/.
+ * If already cloned, does git pull instead.
+ */
+import { spawn } from 'child_process';
+import path from 'path';
+import os from 'os';
+import fs from 'fs/promises';
+/** Extract the repository name from a git URL (HTTPS or SSH). */
+export function extractRepoName(url) {
+    const cleaned = url.replace(/\/+$/, '');
+    const lastSegment = cleaned.split(/[/:]/).pop() || 'unknown';
+    return lastSegment.replace(/\.git$/, '');
+}
+/** Get the clone target directory for a repo name. */
+export function getCloneDir(repoName) {
+    return path.join(os.homedir(), '.gitnexus', 'repos', repoName);
+}
+/**
+ * Validate a git URL to prevent SSRF attacks.
+ * Only allows https:// and http:// schemes. Blocks private/internal addresses.
+ */
+export function validateGitUrl(url) {
+    let parsed;
+    try {
+        parsed = new URL(url);
+    }
+    catch {
+        throw new Error('Invalid URL');
+    }
+    if (!['https:', 'http:'].includes(parsed.protocol)) {
+        throw new Error('Only https:// and http:// git URLs are allowed');
+    }
+    const host = parsed.hostname.toLowerCase();
+    if (host === 'localhost' ||
+        host === '[::1]' ||
+        /^127\./.test(host) ||
+        /^10\./.test(host) ||
+        /^172\.(1[6-9]|2\d|3[01])\./.test(host) ||
+        /^192\.168\./.test(host) ||
+        /^169\.254\./.test(host) ||
+        /^0\./.test(host)) {
+        throw new Error('Cloning from private/internal addresses is not allowed');
+    }
+}
+/**
+ * Clone or pull a git repository.
+ * If targetDir doesn't exist: git clone --depth 1
+ * If targetDir exists with .git: git pull --ff-only
+ */
+export async function cloneOrPull(url, targetDir, onProgress) {
+    const exists = await fs.access(path.join(targetDir, '.git')).then(() => true, () => false);
+    if (exists) {
+        onProgress?.({ phase: 'pulling', message: 'Pulling latest changes...' });
+        await runGit(['pull', '--ff-only'], targetDir);
+    }
+    else {
+        validateGitUrl(url);
+        await fs.mkdir(path.dirname(targetDir), { recursive: true });
+        onProgress?.({ phase: 'cloning', message: `Cloning ${url}...` });
+        await runGit(['clone', '--depth', '1', url, targetDir]);
+    }
+    return targetDir;
+}
+function runGit(args, cwd) {
+    return new Promise((resolve, reject) => {
+        const proc = spawn('git', args, {
+            cwd,
+            stdio: ['ignore', 'pipe', 'pipe'],
+        });
+        let stderr = '';
+        proc.stderr.on('data', (chunk) => {
+            stderr += chunk;
+        });
+        proc.on('close', (code) => {
+            if (code === 0)
+                resolve();
+            else {
+                // Log full stderr internally but don't expose it to API callers (SSRF mitigation)
+                if (stderr.trim())
+                    console.error(`git ${args[0]} stderr: ${stderr.trim()}`);
+                reject(new Error(`git ${args[0]} failed (exit code ${code})`));
+            }
+        });
+        proc.on('error', (err) => {
+            reject(new Error(`Failed to spawn git: ${err.message}`));
+        });
+    });
+}

package/dist/storage/git.js

@@ -24,9 +24,7 @@ export const getCurrentCommit = (repoPath) => {
  */
 export const getGitRoot = (fromPath) => {
     try {
-        const raw = execSync('git rev-parse --show-toplevel', { cwd: fromPath })
-            .toString()
-            .trim();
+        const raw = execSync('git rev-parse --show-toplevel', { cwd: fromPath }).toString().trim();
         // On Windows, git returns /d/Projects/Foo — path.resolve normalizes to D:\Projects\Foo
         return path.resolve(raw);
     }

package/dist/storage/repo-manager.d.ts

@@ -119,13 +119,16 @@ export declare const unregisterRepo: (repoPath: string) => Promise<void>;
 export declare const listRegisteredRepos: (opts?: {
     validate?: boolean;
 }) => Promise<RegistryEntry[]>;
-export type LLMProvider = 'openai' | 'cursor';
 export interface CLIConfig {
     apiKey?: string;
     model?: string;
     baseUrl?: string;
-    provider?: LLMProvider;
+    provider?: 'openai' | 'openrouter' | 'azure' | 'custom' | 'cursor';
     cursorModel?: string;
+    /** Azure api-version query param (e.g. '2024-10-21'). Only used when provider is 'azure'. */
+    apiVersion?: string;
+    /** Set true when the deployment is a reasoning model (o1, o3, o4-mini). Auto-detected for OpenAI; must be set for Azure deployments. */
+    isReasoningModel?: boolean;
 }
 /**
  * Get the path to the global CLI config file

package/dist/storage/repo-manager.js

@@ -208,9 +208,7 @@ export const registerRepo = async (repoPath, meta) => {
     const existing = entries.findIndex((e) => {
         const a = path.resolve(e.path);
         const b = resolved;
-        return process.platform === 'win32'
-            ? a.toLowerCase() === b.toLowerCase()
-            : a === b;
+        return process.platform === 'win32' ? a.toLowerCase() === b.toLowerCase() : a === b;
     });
     const entry = {
         name,
@@ -294,6 +292,8 @@ export const saveCLIConfig = async (config) => {
         try {
             await fs.chmod(configPath, 0o600);
         }
-        catch { /* best-effort */ }
+        catch {
+            /* best-effort */
+        }
     }
 };

package/dist/types/pipeline.d.ts

@@ -1,18 +1,6 @@
-import { GraphNode, GraphRelationship, KnowledgeGraph } from '../core/graph/types.js';
+import type { KnowledgeGraph } from '../core/graph/types.js';
 import { CommunityDetectionResult } from '../core/ingestion/community-processor.js';
 import { ProcessDetectionResult } from '../core/ingestion/process-processor.js';
-export type PipelinePhase = 'idle' | 'extracting' | 'structure' | 'parsing' | 'imports' | 'calls' | 'heritage' | 'communities' | 'processes' | 'enriching' | 'complete' | 'error';
-export interface PipelineProgress {
-    phase: PipelinePhase;
-    percent: number;
-    message: string;
-    detail?: string;
-    stats?: {
-        filesProcessed: number;
-        totalFiles: number;
-        nodesCreated: number;
-    };
-}
 export interface PipelineResult {
     graph: KnowledgeGraph;
     /** Absolute path to the repo root — used for lazy file reads during LadybugDB loading */
@@ -22,11 +10,3 @@ export interface PipelineResult {
     communityResult?: CommunityDetectionResult;
     processResult?: ProcessDetectionResult;
 }
-export interface SerializablePipelineResult {
-    nodes: GraphNode[];
-    relationships: GraphRelationship[];
-    repoPath: string;
-    totalFileCount: number;
-}
-export declare const serializePipelineResult: (result: PipelineResult) => SerializablePipelineResult;
-export declare const deserializePipelineResult: (serialized: SerializablePipelineResult, createGraph: () => KnowledgeGraph) => PipelineResult;

package/dist/types/pipeline.js

@@ -1,18 +1 @@
-// Helper to convert PipelineResult to serializable format
-export const serializePipelineResult = (result) => ({
-    nodes: [...result.graph.iterNodes()],
-    relationships: [...result.graph.iterRelationships()],
-    repoPath: result.repoPath,
-    totalFileCount: result.totalFileCount,
-});
-// Helper to reconstruct from serializable format (used in main thread)
-export const deserializePipelineResult = (serialized, createGraph) => {
-    const graph = createGraph();
-    serialized.nodes.forEach(node => graph.addNode(node));
-    serialized.relationships.forEach(rel => graph.addRelationship(rel));
-    return {
-        graph,
-        repoPath: serialized.repoPath,
-        totalFileCount: serialized.totalFileCount,
-    };
-};
+export {};

package/hooks/claude/gitnexus-hook.cjs

@@ -64,10 +64,26 @@ function extractPattern(toolName, toolInput) {
     const tokens = cmd.split(/\s+/);
     let foundCmd = false;
     let skipNext = false;
-    const flagsWithValues = new Set(['-e', '-f', '-m', '-A', '-B', '-C', '-g', '--glob', '-t', '--type', '--include', '--exclude']);
+    const flagsWithValues = new Set([
+      '-e',
+      '-f',
+      '-m',
+      '-A',
+      '-B',
+      '-C',
+      '-g',
+      '--glob',
+      '-t',
+      '--type',
+      '--include',
+      '--exclude',
+    ]);
 
     for (const token of tokens) {
-      if (skipNext) { skipNext = false; continue; }
+      if (skipNext) {
+        skipNext = false;
+        continue;
+      }
       if (!foundCmd) {
         if (/\brg$|\bgrep$/.test(token)) foundCmd = true;
         continue;
@@ -110,18 +126,20 @@ function resolveCliPath() {
 function runGitNexusCli(cliPath, args, cwd, timeout) {
   const isWin = process.platform === 'win32';
   if (cliPath) {
-    return spawnSync(
-      process.execPath,
-      [cliPath, ...args],
-      { encoding: 'utf-8', timeout, cwd, stdio: ['pipe', 'pipe', 'pipe'] }
-    );
+    return spawnSync(process.execPath, [cliPath, ...args], {
+      encoding: 'utf-8',
+      timeout,
+      cwd,
+      stdio: ['pipe', 'pipe', 'pipe'],
+    });
   }
   // On Windows, invoke npx.cmd directly (no shell needed)
-  return spawnSync(
-    isWin ? 'npx.cmd' : 'npx',
-    ['-y', 'gitnexus', ...args],
-    { encoding: 'utf-8', timeout: timeout + 5000, cwd, stdio: ['pipe', 'pipe', 'pipe'] }
-  );
+  return spawnSync(isWin ? 'npx.cmd' : 'npx', ['-y', 'gitnexus', ...args], {
+    encoding: 'utf-8',
+    timeout: timeout + 5000,
+    cwd,
+    stdio: ['pipe', 'pipe', 'pipe'],
+  });
 }
 
 /**
@@ -147,7 +165,9 @@ function handlePreToolUse(input) {
     if (!child.error && child.status === 0) {
       result = child.stderr || '';
     }
-  } catch { /* graceful failure */ }
+  } catch {
+    /* graceful failure */
+  }
 
   if (result && result.trim()) {
     sendHookResponse('PreToolUse', result.trim());
@@ -158,9 +178,11 @@ function handlePreToolUse(input) {
  * Emit a PostToolUse hook response with additional context for the agent.
  */
 function sendHookResponse(hookEventName, message) {
-  console.log(JSON.stringify({
-    hookSpecificOutput: { hookEventName, additionalContext: message }
-  }));
+  console.log(
+    JSON.stringify({
+      hookSpecificOutput: { hookEventName, additionalContext: message },
+    }),
+  );
 }
 
 /**
@@ -192,10 +214,15 @@ function handlePostToolUse(input) {
   let currentHead = '';
   try {
     const headResult = spawnSync('git', ['rev-parse', 'HEAD'], {
-      encoding: 'utf-8', timeout: 3000, cwd, stdio: ['pipe', 'pipe', 'pipe'],
+      encoding: 'utf-8',
+      timeout: 3000,
+      cwd,
+      stdio: ['pipe', 'pipe', 'pipe'],
     });
     currentHead = (headResult.stdout || '').trim();
-  } catch { return; }
+  } catch {
+    return;
+  }
 
   if (!currentHead) return;
 
@@ -204,16 +231,19 @@ function handlePostToolUse(input) {
   try {
     const meta = JSON.parse(fs.readFileSync(path.join(gitNexusDir, 'meta.json'), 'utf-8'));
     lastCommit = meta.lastCommit || '';
-    hadEmbeddings = (meta.stats && meta.stats.embeddings > 0);
-  } catch { /* no meta — treat as stale */ }
+    hadEmbeddings = meta.stats && meta.stats.embeddings > 0;
+  } catch {
+    /* no meta — treat as stale */
+  }
 
   // If HEAD matches last indexed commit, no reindex needed
   if (currentHead && currentHead === lastCommit) return;
 
   const analyzeCmd = `npx gitnexus analyze${hadEmbeddings ? ' --embeddings' : ''}`;
-  sendHookResponse('PostToolUse',
+  sendHookResponse(
+    'PostToolUse',
     `GitNexus index is stale (last indexed: ${lastCommit ? lastCommit.slice(0, 7) : 'never'}). ` +
-    `Run \`${analyzeCmd}\` to update the knowledge graph.`
+      `Run \`${analyzeCmd}\` to update the knowledge graph.`,
   );
 }
 

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gitnexus",
-  "version": "1.4.10",
+  "version": "1.5.0",
   "description": "Graph-powered code intelligence for AI agents. Index any codebase, query via MCP or CLI.",
   "author": "Abhigyan Patwari",
   "license": "PolyForm-Noncommercial-1.0.0",
@@ -39,6 +39,7 @@
   ],
   "scripts": {
     "build": "tsc",
+    "serve": "tsx src/cli/index.ts serve",
     "dev": "tsx watch src/cli/index.ts",
     "test": "vitest run",
     "test:unit": "vitest run test/unit",
@@ -49,6 +50,7 @@
     "prepack": "npm run build && chmod +x dist/cli/index.js"
   },
   "dependencies": {
+    "gitnexus-shared": "file:../gitnexus-shared",
     "@huggingface/transformers": "^3.0.0",
     "@ladybugdb/core": "^0.15.2",
     "@modelcontextprotocol/sdk": "^1.0.0",
@@ -91,7 +93,6 @@
     "@types/node": "^20.0.0",
     "@types/uuid": "^10.0.0",
     "@vitest/coverage-v8": "^4.0.18",
-    "husky": "^9.1.7",
     "tsx": "^4.0.0",
     "typescript": "^5.4.5",
     "vitest": "^4.0.18"

package/dist/core/ingestion/utils/language-detection.d.ts

@@ -1,9 +0,0 @@
-/**
- * Language Detection — maps file paths to SupportedLanguages enum values.
- */
-import { SupportedLanguages } from '../../../config/supported-languages.js';
-/**
- * Map file extension to SupportedLanguage enum.
- * Returns null if the file extension is not recognized.
- */
-export declare const getLanguageFromFilename: (filename: string) => SupportedLanguages | null;

package/dist/core/ingestion/utils/language-detection.js

@@ -1,70 +0,0 @@
-/**
- * Language Detection — maps file paths to SupportedLanguages enum values.
- */
-import { SupportedLanguages } from '../../../config/supported-languages.js';
-/** Ruby extensionless filenames recognised as Ruby source */
-const RUBY_EXTENSIONLESS_FILES = new Set(['Rakefile', 'Gemfile', 'Guardfile', 'Vagrantfile', 'Brewfile']);
-/**
- * Map file extension to SupportedLanguage enum.
- * Returns null if the file extension is not recognized.
- */
-export const getLanguageFromFilename = (filename) => {
-    // TypeScript (including TSX)
-    if (filename.endsWith('.tsx'))
-        return SupportedLanguages.TypeScript;
-    if (filename.endsWith('.ts'))
-        return SupportedLanguages.TypeScript;
-    // JavaScript (including JSX)
-    if (filename.endsWith('.jsx'))
-        return SupportedLanguages.JavaScript;
-    if (filename.endsWith('.js'))
-        return SupportedLanguages.JavaScript;
-    // Python
-    if (filename.endsWith('.py'))
-        return SupportedLanguages.Python;
-    // Java
-    if (filename.endsWith('.java'))
-        return SupportedLanguages.Java;
-    // C source files
-    if (filename.endsWith('.c'))
-        return SupportedLanguages.C;
-    // C++ (all common extensions, including .h)
-    // .h is parsed as C++ because tree-sitter-cpp is a strict superset of C, so pure-C
-    // headers parse correctly, and C++ headers (classes, templates) are handled properly.
-    if (filename.endsWith('.cpp') || filename.endsWith('.cc') || filename.endsWith('.cxx') ||
-        filename.endsWith('.h') || filename.endsWith('.hpp') || filename.endsWith('.hxx') || filename.endsWith('.hh'))
-        return SupportedLanguages.CPlusPlus;
-    // C#
-    if (filename.endsWith('.cs'))
-        return SupportedLanguages.CSharp;
-    // Go
-    if (filename.endsWith('.go'))
-        return SupportedLanguages.Go;
-    // Rust
-    if (filename.endsWith('.rs'))
-        return SupportedLanguages.Rust;
-    // Kotlin
-    if (filename.endsWith('.kt') || filename.endsWith('.kts'))
-        return SupportedLanguages.Kotlin;
-    // PHP (all common extensions)
-    if (filename.endsWith('.php') || filename.endsWith('.phtml') ||
-        filename.endsWith('.php3') || filename.endsWith('.php4') ||
-        filename.endsWith('.php5') || filename.endsWith('.php8')) {
-        return SupportedLanguages.PHP;
-    }
-    // Ruby (extensions)
-    if (filename.endsWith('.rb') || filename.endsWith('.rake') || filename.endsWith('.gemspec')) {
-        return SupportedLanguages.Ruby;
-    }
-    // Ruby (extensionless files)
-    const basename = filename.split('/').pop() || filename;
-    if (RUBY_EXTENSIONLESS_FILES.has(basename)) {
-        return SupportedLanguages.Ruby;
-    }
-    // Swift (extensions)
-    if (filename.endsWith('.swift'))
-        return SupportedLanguages.Swift;
-    if (filename.endsWith('.dart'))
-        return SupportedLanguages.Dart;
-    return null;
-};