gitnexus 1.6.10-rc.21 → 1.6.10-rc.211

package/dist/cli/i18n/resources.d.ts

@@ -27,6 +27,8 @@ export declare const cliResources: {
         readonly 'status.indexed': "Indexed";
         readonly 'status.indexedCommit': "Indexed commit";
         readonly 'status.currentCommit': "Current commit";
+        readonly 'status.indexRunnerIdentity': "Indexed analyzer runner identity";
+        readonly 'status.currentRunnerIdentity': "Current analyzer runner identity";
         readonly 'status.branch': "Branch";
         readonly 'status.detached': "(detached HEAD)";
         readonly 'status.workspaceIndexLabel': "Workspace index: last analyzed on '{{primary}}' (re-run gitnexus analyze to follow the current branch)";
@@ -53,10 +55,13 @@ export declare const cliResources: {
         readonly 'tool.usage.query': "Usage: gitnexus query [search_query]  or  gitnexus query --query <text>";
         readonly 'tool.usage.context': "Usage: gitnexus context <symbol_name> [--uid <uid>] [--file <path>]";
         readonly 'tool.usage.impact': "Usage: gitnexus impact <symbol_name> [--uid <uid>] [--file <path>] [--kind <kind>] [--direction upstream|downstream]";
-        readonly 'tool.usage.trace': "Usage: gitnexus trace <from> <to> [--from-uid <uid>] [--to-uid <uid>] [--depth <n>]";
+        readonly 'tool.usage.trace': "Usage: gitnexus trace <from> <to> [-f|--file <path>] [--from-file <path>] [--to-file <path>] [--from-uid <uid>] [--to-uid <uid>] [--depth <n>]";
         readonly 'tool.usage.cypher': "Usage: gitnexus cypher <cypher_query>";
         readonly 'tool.warn.unknownKind': "--kind '{{kind}}' is not a known symbol kind (e.g. Function, Class, Method); it will not narrow the result.";
         readonly 'tool.detectChanges.noChanges': "No changes detected.";
+        readonly 'tool.detectChanges.partial': "PARTIAL RESULT: a graph query failed, so changed symbols may be missing. Do not read this as a clean pre-commit check.";
+        readonly 'tool.detectChanges.truncated': "LISTING CAPPED: the changed-symbol list was capped, so it does not name every changed symbol. The counts and risk level still cover all of them.";
+        readonly 'tool.detectChanges.truncatedDegraded': "LISTING CAPPED: the changed-symbol list was capped. The run also degraded, so the counts are a lower bound, not a total.";
         readonly 'tool.detectChanges.changesSummary': "Changes: {{files}} files, {{symbols}} symbols";
         readonly 'tool.detectChanges.affectedProcesses': "Affected processes: {{count}}";
         readonly 'tool.detectChanges.riskLevel': "Risk level: {{risk}}";
@@ -152,7 +157,8 @@ export declare const cliResources: {
         readonly 'help.option.analyze.skills': "Generate repo-specific skill files from detected communities (no-op when --index-only is also set).";
         readonly 'help.option.analyze.skipAgentsMd': "Skip updating the gitnexus section in AGENTS.md and CLAUDE.md";
         readonly 'help.option.analyze.noStats': "Omit volatile file/symbol counts from AGENTS.md and CLAUDE.md";
-        readonly 'help.option.analyze.skipSkills': "Skip installing standard GitNexus skill files under .claude/skills/gitnexus/. Does not suppress community skills from --skills (those use .claude/skills/generated/). Use --index-only to skip all AI-context file injection.";
+        readonly 'help.option.analyze.selfCommit': "Auto-commit AGENTS.md/CLAUDE.md changes after analyze (opt-in, off by default). Scoped to only those two files (never `git add -A`); no-ops if neither exists, neither changed, or the repo has no git identity configured.";
+        readonly 'help.option.analyze.skipSkills': "Skip installing standard GitNexus skill files directly under .claude/skills/ and .agents/skills/. Does not suppress community skills from --skills (those use .claude/skills/gitnexus-area-*). Use --index-only to skip all AI-context file injection.";
         readonly 'help.option.analyze.indexOnly': "Pure index mode: skip all file injection (AGENTS.md, CLAUDE.md, skills)";
         readonly 'help.option.skipGit': "Treat the provided path/cwd as the index root and skip parent git-root discovery";
         readonly 'help.option.analyze.name': "Register this repo under a custom name in ~/.gitnexus/registry.json (disambiguates repos whose paths share a basename, e.g. two different .../app folders)";
@@ -179,16 +185,17 @@ export declare const cliResources: {
         readonly 'help.option.clean.branch': "Delete only the named branch index (not the workspace index)";
         readonly 'help.option.clean.lbugSidecars': "Clean parked LadybugDB recovery sidecars (missing-shadow WAL quarantines and dirty-recovery parks)";
         readonly 'help.option.wiki.force': "Force full regeneration even if up to date";
-        readonly 'help.option.wiki.provider': "LLM provider: openai, openrouter, azure, custom, cursor, claude, codex, or opencode (default: openai)";
-        readonly 'help.option.wiki.model': "LLM model or Azure deployment name (default: minimax/minimax-m2.5)";
+        readonly 'help.option.wiki.provider': "LLM provider: minimax, openai, openrouter, azure, custom, cursor, claude, codex, or opencode (default: minimax)";
+        readonly 'help.option.wiki.model': "LLM model or deployment name (default: MiniMax-M3)";
         readonly 'help.option.wiki.baseUrl': "LLM API base URL. Azure v1: https://{resource}.openai.azure.com/openai/v1";
         readonly 'help.option.wiki.apiKey': "LLM API key or Azure api-key (saved to ~/.gitnexus/config.json)";
         readonly 'help.option.wiki.apiVersion': "Azure api-version query param, e.g. 2024-10-21 (legacy Azure API only)";
-        readonly 'help.option.wiki.reasoningModel': "Mark deployment as reasoning model (o1/o3/o4-mini) — strips temperature, uses max_completion_tokens";
-        readonly 'help.option.wiki.noReasoningModel': "Disable reasoning model mode (overrides saved config)";
+        readonly 'help.option.wiki.reasoningModel': "Enable reasoning mode; MiniMax-M3 uses adaptive thinking";
+        readonly 'help.option.wiki.noReasoningModel': "Disable reasoning mode; MiniMax-M3 disables thinking";
         readonly 'help.option.wiki.concurrency': "Parallel LLM calls (default: 3)";
         readonly 'help.option.wiki.timeout': "LLM request timeout in seconds (default: disabled)";
         readonly 'help.option.wiki.retries': "Max LLM retry attempts per request (default: 3)";
+        readonly 'help.option.wiki.allowInsecureConnection': "Allow exact host(s) for http:// LLM base URLs (comma-separated; HTTPS is preferred)";
         readonly 'help.option.wiki.gist': "Publish wiki as a public GitHub Gist after generation";
         readonly 'help.option.wiki.review': "Stop after grouping to review module structure before generating pages";
         readonly 'help.option.wiki.lang': "Output language for generated documentation (e.g. english, chinese, spanish, japanese)";
@@ -222,7 +229,7 @@ export declare const cliResources: {
         readonly 'help.option.detectChanges.limit': "Max changed symbols to return";
         readonly 'help.option.cypher.limit': "Max result rows to return";
         readonly 'help.option.check.cycles': "Detect circular imports and fail when any are found";
-        readonly 'help.option.evalServer.host': "Bind address (default: 127.0.0.1, use 0.0.0.0 to expose to all interfaces)";
+        readonly 'help.option.evalServer.host': "Bind address or resolvable hostname (default: 127.0.0.1; non-loopback requires GITNEXUS_AUTH_TOKEN; hostnames resolve to IPv4)";
         readonly 'help.option.evalServer.idleTimeout': "Auto-shutdown after N seconds idle (0 = disabled)";
         readonly 'help.option.embeddings.install.cuda': "Also download the CUDA GPU binaries (runs onnxruntime-node's NuGet postinstall; set GLOBAL_AGENT_HTTPS_PROXY behind a proxy)";
         readonly 'help.option.embeddings.install.force': "Install into the runtime prefix even when the stack already resolves";
@@ -231,6 +238,7 @@ export declare const cliResources: {
         readonly 'help.option.group.sync.exactOnly': "Exact match only";
         readonly 'help.option.group.sync.allowStale': "Skip stale index warnings";
         readonly 'help.option.group.sync.verbose': "Show each cross-link detail";
+        readonly 'help.option.status.json': "Emit machine-readable index and analyzer provenance";
         readonly 'help.option.json': "JSON output";
         readonly 'help.option.group.impact.target': "Symbol or file name to analyze";
         readonly 'help.option.group.impact.repo': "Member path from group.yaml (e.g. app/backend), not the indexed repo name";
@@ -244,7 +252,8 @@ export declare const cliResources: {
         readonly 'help.option.group.contracts.type': "Filter by contract type";
         readonly 'help.option.group.contracts.repo': "Filter by repo";
         readonly 'help.option.group.contracts.unmatched': "Show only unmatched contracts";
-        readonly 'help.analyze.environment': "\nEnvironment variables:\n  GITNEXUS_NO_GITIGNORE=1   Skip .gitignore parsing (still reads .gitnexusignore)\n  GITNEXUS_MAX_FILE_SIZE=N  Override large-file skip threshold (KB). Default 512, max 32768.\n  GITNEXUS_WORKER_SUB_BATCH_TIMEOUT_MS=N  Worker idle timeout in milliseconds. Default 30000.\n  GITNEXUS_WAL_CHECKPOINT_THRESHOLD=N  LadybugDB WAL auto-checkpoint threshold in bytes (default 67108864 = 64 MiB; -1 keeps Ladybug stock ~16 MiB).\n  GITNEXUS_WORKER_SUB_BATCH_MAX_BYTES=N  Worker job byte budget. Default 8388608.\n  GITNEXUS_WORKER_POOL_SIZE=N  Parse worker count override. Default cores-1 capped at 16.\n  GITNEXUS_PARSE_CHUNK_CONCURRENCY=N  Concurrent in-flight parse chunks. Default 2.\n  GITNEXUS_WORKER_MAX_RESPAWNS_PER_SLOT=N  Max replacement spawns per slot before drop. Default 3.\n  GITNEXUS_WORKER_MAX_CUMULATIVE_TIMEOUT_MS=N  Total retry wall-time per job. Default 5x sub-batch timeout.\n  GITNEXUS_WORKER_CONSECUTIVE_FAILURE_THRESHOLD=N  Per-slot deaths to trip circuit breaker. Default max(3, poolSize).\n  GITNEXUS_WORKER_SHUTDOWN_DRAIN_MS=N  Max wait at pool shutdown for a retired worker still inside native code (terminated at its next safe point instead of aborting the process). Default 30000.\n  GITNEXUS_CPP_CAPTURE_BUDGET_MS=N  Per-file wall-clock budget for C++ capture extraction; on breach the file keeps partial captures with a warning. Default 20000.\n  GITNEXUS_EMBEDDING_THREADS=N  Limit local ONNX CPU threads for --embeddings.\n  GITNEXUS_SEMANTIC_EXACT_SCAN_LIMIT=N  Max embedding chunks for exact-scan fallback. Default 10000.\n  GITNEXUS_VECTOR_MAX_DISTANCE=N  Max accepted semantic/vector cosine distance (0 < N <= 2; higher values clamp to 2). Default 0.6 for MCP, 0.5 elsewhere.\n\nFlags override the corresponding env vars when both are provided.\n\nTip: `.gitnexusignore` supports `.gitignore`-style negation. Add e.g.\n     `!__tests__/` to index a directory that is auto-filtered by default (#771).";
+        readonly 'help.identityCache.environment': "\nAnalyzer identity cache:\n  GITNEXUS_ANALYZER_IDENTITY_CACHE_DIR=/absolute/protected/dir\n    Operator-trusted persistent cache for warm cross-process status. The directory must pre-exist, be outside the GitNexus package/build roots, and contain no symlink or junction components. Defaults remain fail-closed on platforms without POSIX ownership APIs.";
+        readonly 'help.analyze.environment': "\nEnvironment variables:\n  GITNEXUS_NO_GITIGNORE=1   Skip .gitignore parsing (still reads .gitnexusignore)\n  GITNEXUS_MAX_FILE_SIZE=N  Override large-file skip threshold (KB). Default 512, max 32768.\n  GITNEXUS_ANALYZER_IDENTITY_CACHE_DIR=/absolute/protected/dir  Operator-trusted persistent analyzer identity cache; must pre-exist, be outside package/build roots, and contain no symlink/junction components.\n  GITNEXUS_WORKER_SUB_BATCH_TIMEOUT_MS=N  Worker idle timeout in milliseconds. Default 30000.\n  GITNEXUS_WAL_CHECKPOINT_THRESHOLD=N  LadybugDB WAL auto-checkpoint threshold in bytes (default 67108864 = 64 MiB; -1 keeps Ladybug stock ~16 MiB).\n  GITNEXUS_WORKER_SUB_BATCH_MAX_BYTES=N  Worker job byte budget. Default 8388608.\n  GITNEXUS_WORKER_POOL_SIZE=N  Parse worker count override. Default cores-1 capped at 16.\n  GITNEXUS_PARSE_CHUNK_CONCURRENCY=N  Concurrent in-flight parse chunks. Default 2.\n  GITNEXUS_WORKER_MAX_RESPAWNS_PER_SLOT=N  Max replacement spawns per slot before drop. Default 3.\n  GITNEXUS_WORKER_MAX_CUMULATIVE_TIMEOUT_MS=N  Total retry wall-time per job. Default 5x sub-batch timeout.\n  GITNEXUS_WORKER_CONSECUTIVE_FAILURE_THRESHOLD=N  Per-slot deaths to trip circuit breaker. Default max(3, poolSize).\n  GITNEXUS_WORKER_SHUTDOWN_DRAIN_MS=N  Max wait at pool shutdown for a retired worker still inside native code (terminated at its next safe point instead of aborting the process). Default 30000.\n  GITNEXUS_CPP_CAPTURE_BUDGET_MS=N  Per-file wall-clock budget for C++ capture extraction; on breach the file keeps partial captures with a warning. Default 20000.\n  GITNEXUS_EMBEDDING_THREADS=N  Limit local ONNX CPU threads for --embeddings.\n  GITNEXUS_SEMANTIC_EXACT_SCAN_LIMIT=N  Max embedding chunks for exact-scan fallback. Default 10000.\n  GITNEXUS_VECTOR_MAX_DISTANCE=N  Max accepted semantic/vector cosine distance (0 < N <= 2; higher values clamp to 2). Default 0.6 for MCP, 0.5 elsewhere.\n\nFlags override the corresponding env vars when both are provided.\n\nTip: `.gitnexusignore` supports `.gitignore`-style negation. Add e.g.\n     `!__tests__/` to index a directory that is auto-filtered by default (#771).";
     };
     readonly 'zh-CN': {
         'common.notIndexed': string;
@@ -274,6 +283,8 @@ export declare const cliResources: {
         'status.indexed': string;
         'status.indexedCommit': string;
         'status.currentCommit': string;
+        'status.indexRunnerIdentity': string;
+        'status.currentRunnerIdentity': string;
         'status.branch': string;
         'status.detached': string;
         'status.workspaceIndexLabel': string;
@@ -304,6 +315,9 @@ export declare const cliResources: {
         'tool.usage.cypher': string;
         'tool.warn.unknownKind': string;
         'tool.detectChanges.noChanges': string;
+        'tool.detectChanges.partial': string;
+        'tool.detectChanges.truncated': string;
+        'tool.detectChanges.truncatedDegraded': string;
         'tool.detectChanges.changesSummary': string;
         'tool.detectChanges.affectedProcesses': string;
         'tool.detectChanges.riskLevel': string;
@@ -399,6 +413,7 @@ export declare const cliResources: {
         'help.option.analyze.skills': string;
         'help.option.analyze.skipAgentsMd': string;
         'help.option.analyze.noStats': string;
+        'help.option.analyze.selfCommit': string;
         'help.option.analyze.skipSkills': string;
         'help.option.analyze.indexOnly': string;
         'help.option.skipGit': string;
@@ -436,6 +451,7 @@ export declare const cliResources: {
         'help.option.wiki.concurrency': string;
         'help.option.wiki.timeout': string;
         'help.option.wiki.retries': string;
+        'help.option.wiki.allowInsecureConnection': string;
         'help.option.wiki.gist': string;
         'help.option.wiki.review': string;
         'help.option.wiki.lang': string;
@@ -478,6 +494,7 @@ export declare const cliResources: {
         'help.option.group.sync.exactOnly': string;
         'help.option.group.sync.allowStale': string;
         'help.option.group.sync.verbose': string;
+        'help.option.status.json': string;
         'help.option.json': string;
         'help.option.group.impact.target': string;
         'help.option.group.impact.repo': string;
@@ -491,6 +508,7 @@ export declare const cliResources: {
         'help.option.group.contracts.type': string;
         'help.option.group.contracts.repo': string;
         'help.option.group.contracts.unmatched': string;
+        'help.identityCache.environment': string;
         'help.analyze.environment': string;
     };
 };

package/dist/cli/i18n/zh-CN.d.ts

@@ -26,6 +26,8 @@ export declare const zhCN: {
     'status.indexed': string;
     'status.indexedCommit': string;
     'status.currentCommit': string;
+    'status.indexRunnerIdentity': string;
+    'status.currentRunnerIdentity': string;
     'status.branch': string;
     'status.detached': string;
     'status.workspaceIndexLabel': string;
@@ -56,6 +58,9 @@ export declare const zhCN: {
     'tool.usage.cypher': string;
     'tool.warn.unknownKind': string;
     'tool.detectChanges.noChanges': string;
+    'tool.detectChanges.partial': string;
+    'tool.detectChanges.truncated': string;
+    'tool.detectChanges.truncatedDegraded': string;
     'tool.detectChanges.changesSummary': string;
     'tool.detectChanges.affectedProcesses': string;
     'tool.detectChanges.riskLevel': string;
@@ -151,6 +156,7 @@ export declare const zhCN: {
     'help.option.analyze.skills': string;
     'help.option.analyze.skipAgentsMd': string;
     'help.option.analyze.noStats': string;
+    'help.option.analyze.selfCommit': string;
     'help.option.analyze.skipSkills': string;
     'help.option.analyze.indexOnly': string;
     'help.option.skipGit': string;
@@ -188,6 +194,7 @@ export declare const zhCN: {
     'help.option.wiki.concurrency': string;
     'help.option.wiki.timeout': string;
     'help.option.wiki.retries': string;
+    'help.option.wiki.allowInsecureConnection': string;
     'help.option.wiki.gist': string;
     'help.option.wiki.review': string;
     'help.option.wiki.lang': string;
@@ -230,6 +237,7 @@ export declare const zhCN: {
     'help.option.group.sync.exactOnly': string;
     'help.option.group.sync.allowStale': string;
     'help.option.group.sync.verbose': string;
+    'help.option.status.json': string;
     'help.option.json': string;
     'help.option.group.impact.target': string;
     'help.option.group.impact.repo': string;
@@ -243,5 +251,6 @@ export declare const zhCN: {
     'help.option.group.contracts.type': string;
     'help.option.group.contracts.repo': string;
     'help.option.group.contracts.unmatched': string;
+    'help.identityCache.environment': string;
     'help.analyze.environment': string;
 };

package/dist/cli/i18n/zh-CN.js

@@ -26,6 +26,8 @@ export const zhCN = {
     'status.indexed': '索引时间',
     'status.indexedCommit': '索引提交',
     'status.currentCommit': '当前提交',
+    'status.indexRunnerIdentity': '索引记录的分析器运行身份',
+    'status.currentRunnerIdentity': '当前分析器运行身份',
     'status.branch': '分支',
     'status.detached': '（分离 HEAD）',
     'status.workspaceIndexLabel': "工作区索引：最近在 '{{primary}}' 分支上分析（重新运行 gitnexus analyze 以跟随当前分支）",
@@ -52,10 +54,13 @@ export const zhCN = {
     'tool.usage.query': '用法：gitnexus query [搜索词]  或  gitnexus query --query <文本>',
     'tool.usage.context': '用法：gitnexus context <符号名> [--uid <uid>] [--file <路径>]',
     'tool.usage.impact': '用法：gitnexus impact <符号名> [--uid <uid>] [--file <路径>] [--kind <类型>] [--direction upstream|downstream]',
-    'tool.usage.trace': '用法：gitnexus trace <起点> <终点> [--from-uid <uid>] [--to-uid <uid>] [--depth <n>]',
+    'tool.usage.trace': '用法：gitnexus trace <起点> <终点> [-f|--file <路径>] [--from-file <路径>] [--to-file <路径>] [--from-uid <uid>] [--to-uid <uid>] [--depth <n>]',
     'tool.usage.cypher': '用法：gitnexus cypher <Cypher 查询>',
     'tool.warn.unknownKind': "--kind '{{kind}}' 不是已知的符号类型（如 Function、Class、Method），不会用于缩小结果范围。",
     'tool.detectChanges.noChanges': '未检测到变更。',
+    'tool.detectChanges.partial': '结果不完整：图查询失败，可能遗漏已变更符号。请勿将其视为通过的提交前检查。',
+    'tool.detectChanges.truncated': '列表已截断：已变更符号列表被截断，未列出全部变更符号。计数与风险等级仍涵盖全部符号。',
+    'tool.detectChanges.truncatedDegraded': '列表已截断：已变更符号列表被截断。本次运行同时不完整，因此计数为下限而非总数。',
     'tool.detectChanges.changesSummary': '变更：{{files}} 个文件，{{symbols}} 个符号',
     'tool.detectChanges.affectedProcesses': '受影响流程：{{count}}',
     'tool.detectChanges.riskLevel': '风险等级：{{risk}}',
@@ -151,7 +156,8 @@ export const zhCN = {
     'help.option.analyze.skills': '根据检测到的社区生成仓库专属 skill 文件（同时设置 --index-only 时无效）。',
     'help.option.analyze.skipAgentsMd': '跳过更新 AGENTS.md 和 CLAUDE.md 中的 gitnexus 区块',
     'help.option.analyze.noStats': '从 AGENTS.md 和 CLAUDE.md 中省略易变的文件/符号计数',
-    'help.option.analyze.skipSkills': '跳过安装 .claude/skills/gitnexus/ 下的标准 GitNexus skill 文件。不抑制 --skills 生成的社区 skill（位于 .claude/skills/generated/）。使用 --index-only 可跳过所有 AI 上下文文件注入。',
+    'help.option.analyze.selfCommit': '在 analyze 后自动提交 AGENTS.md/CLAUDE.md 的变更（默认关闭，需显式开启）。仅限这两个文件（绝不使用 `git add -A`）；若两者均不存在、均未变更，或仓库未配置 git 身份，则不执行任何操作。',
+    'help.option.analyze.skipSkills': '跳过直接安装在 .claude/skills/ 和 .agents/skills/ 下的标准 GitNexus skill 文件。不抑制 --skills 生成的社区 skill（位于 .claude/skills/gitnexus-area-*）。使用 --index-only 可跳过所有 AI 上下文文件注入。',
     'help.option.analyze.indexOnly': '纯索引模式：跳过所有文件注入（AGENTS.md、CLAUDE.md、skills）',
     'help.option.skipGit': '将提供的路径/cwd 视为索引根目录，并跳过向上查找 git 根目录',
     'help.option.analyze.name': '在 ~/.gitnexus/registry.json 中使用自定义名称注册该仓库（用于区分路径 basename 相同的仓库，例如两个不同的 .../app 目录）',
@@ -178,16 +184,17 @@ export const zhCN = {
     'help.option.clean.branch': '仅删除指定分支的索引（不影响工作区索引）',
     'help.option.clean.lbugSidecars': '清理已暂存的 LadybugDB 恢复 sidecar（missing-shadow WAL 隔离文件与 dirty-recovery 暂存文件）',
     'help.option.wiki.force': '即使已是最新也强制完整重新生成',
-    'help.option.wiki.provider': 'LLM 提供商：openai、openrouter、azure、custom、cursor、claude、codex 或 opencode（默认：openai）',
-    'help.option.wiki.model': 'LLM 模型或 Azure deployment 名称（默认：minimax/minimax-m2.5）',
+    'help.option.wiki.provider': 'LLM 提供商：minimax、openai、openrouter、azure、custom、cursor、claude、codex 或 opencode（默认：minimax）',
+    'help.option.wiki.model': 'LLM 模型或 deployment 名称（默认：MiniMax-M3）',
     'help.option.wiki.baseUrl': 'LLM API base URL。Azure v1：https://{resource}.openai.azure.com/openai/v1',
     'help.option.wiki.apiKey': 'LLM API key 或 Azure api-key（保存到 ~/.gitnexus/config.json）',
     'help.option.wiki.apiVersion': 'Azure api-version 查询参数，例如 2024-10-21（仅旧版 Azure API）',
-    'help.option.wiki.reasoningModel': '标记 deployment 为 reasoning model（o1/o3/o4-mini）— 去除 temperature，使用 max_completion_tokens',
-    'help.option.wiki.noReasoningModel': '禁用 reasoning model 模式（覆盖已保存配置）',
+    'help.option.wiki.reasoningModel': '启用 reasoning 模式；MiniMax-M3 使用自适应 thinking',
+    'help.option.wiki.noReasoningModel': '禁用 reasoning 模式；MiniMax-M3 关闭 thinking',
     'help.option.wiki.concurrency': '并行 LLM 调用数（默认：3）',
     'help.option.wiki.timeout': 'LLM 请求超时时间（秒，默认：禁用）',
     'help.option.wiki.retries': '每个请求的最大 LLM 重试次数（默认：3）',
+    'help.option.wiki.allowInsecureConnection': '允许 http:// LLM base URL 使用的精确主机（逗号分隔；推荐使用 HTTPS）',
     'help.option.wiki.gist': '生成后发布 Wiki 为公开 GitHub Gist',
     'help.option.wiki.review': '分组后停止，以便在生成页面前审查模块结构',
     'help.option.wiki.lang': '生成文档的输出语言（如 english、chinese、spanish、japanese）',
@@ -221,7 +228,7 @@ export const zhCN = {
     'help.option.detectChanges.limit': '最多返回的已变更符号数',
     'help.option.cypher.limit': '最多返回的结果行数',
     'help.option.check.cycles': '检测循环导入，并在发现循环时失败',
-    'help.option.evalServer.host': '绑定地址（默认：127.0.0.1；用 0.0.0.0 暴露到所有网卡）',
+    'help.option.evalServer.host': '绑定地址或可解析的主机名（默认：127.0.0.1；非回环绑定需要 GITNEXUS_AUTH_TOKEN；主机名解析为 IPv4）',
     'help.option.evalServer.idleTimeout': '空闲 N 秒后自动关闭（0 = 禁用）',
     'help.option.embeddings.install.cuda': '同时下载 CUDA GPU 二进制文件（运行 onnxruntime-node 的 NuGet postinstall；代理后请设置 GLOBAL_AGENT_HTTPS_PROXY）',
     'help.option.embeddings.install.force': '即使嵌入组件已可解析，也强制安装到运行时目录',
@@ -230,6 +237,7 @@ export const zhCN = {
     'help.option.group.sync.exactOnly': '仅精确匹配',
     'help.option.group.sync.allowStale': '跳过过期索引警告',
     'help.option.group.sync.verbose': '显示每条跨仓库链接详情',
+    'help.option.status.json': '输出机器可读的索引和分析器来源信息',
     'help.option.json': 'JSON 输出',
     'help.option.group.impact.target': '要分析的符号或文件名',
     'help.option.group.impact.repo': 'group.yaml 中的成员路径（如 app/backend），不是已索引仓库名称',
@@ -243,5 +251,6 @@ export const zhCN = {
     'help.option.group.contracts.type': '按契约类型过滤',
     'help.option.group.contracts.repo': '按仓库过滤',
     'help.option.group.contracts.unmatched': '仅显示未匹配契约',
-    'help.analyze.environment': '\n环境变量：\n  GITNEXUS_NO_GITIGNORE=1   跳过 .gitignore 解析（仍读取 .gitnexusignore）\n  GITNEXUS_MAX_FILE_SIZE=N  覆盖大文件跳过阈值（KB）。默认 512，最大 32768。\n  GITNEXUS_WORKER_SUB_BATCH_TIMEOUT_MS=N  Worker 空闲超时（毫秒）。默认 30000。\n  GITNEXUS_WAL_CHECKPOINT_THRESHOLD=N  LadybugDB WAL 自动 checkpoint 阈值（字节，默认 67108864 = 64 MiB；-1 保持 Ladybug 默认约 16 MiB）。\n  GITNEXUS_WORKER_SUB_BATCH_MAX_BYTES=N  Worker 作业字节预算。默认 8388608。\n  GITNEXUS_WORKER_POOL_SIZE=N  解析 worker 数量覆盖值。默认 cores-1，最多 16。\n  GITNEXUS_PARSE_CHUNK_CONCURRENCY=N  并发进行中的解析分块数。默认 2。\n  GITNEXUS_WORKER_MAX_RESPAWNS_PER_SLOT=N  每个 slot 丢弃前允许的最大替换进程数。默认 3。\n  GITNEXUS_WORKER_MAX_CUMULATIVE_TIMEOUT_MS=N  每个作业的总重试墙钟时间。默认 5 倍子批次超时。\n  GITNEXUS_WORKER_CONSECUTIVE_FAILURE_THRESHOLD=N  每个 slot 触发熔断的死亡次数。默认 max(3, poolSize)。\n  GITNEXUS_WORKER_SHUTDOWN_DRAIN_MS=N  线程池关闭时等待仍在原生代码中的已退役 worker 的最长时间（到达安全点后再终止，避免进程级 abort）。默认 30000。\n  GITNEXUS_CPP_CAPTURE_BUDGET_MS=N  C++ 捕获提取的每文件墙钟预算；超出后该文件保留部分捕获并输出警告。默认 20000。\n  GITNEXUS_EMBEDDING_THREADS=N  限制 --embeddings 的本地 ONNX CPU 线程数。\n  GITNEXUS_SEMANTIC_EXACT_SCAN_LIMIT=N  exact-scan 回退的最大嵌入分块数。默认 10000。\n  GITNEXUS_VECTOR_MAX_DISTANCE=N  语义/向量搜索接受的最大余弦距离（0 < N <= 2；超出则钳制为 2）。MCP 默认 0.6，其他路径默认 0.5。\n\n当参数和对应环境变量同时提供时，参数优先。\n\n提示：`.gitnexusignore` 支持 `.gitignore` 风格的取反。比如添加\n     `!__tests__/` 可以索引默认自动过滤的目录（#771）。',
+    'help.identityCache.environment': '\n分析器身份缓存：\n  GITNEXUS_ANALYZER_IDENTITY_CACHE_DIR=/absolute/protected/dir\n    由操作员明确信任的持久缓存，用于跨进程快速查询状态。目录必须预先存在、位于 GitNexus 包/构建根目录之外，且路径中不得包含符号链接或 junction。缺少 POSIX 所有权 API 的平台默认保持故障关闭。',
+    'help.analyze.environment': '\n环境变量：\n  GITNEXUS_NO_GITIGNORE=1   跳过 .gitignore 解析（仍读取 .gitnexusignore）\n  GITNEXUS_MAX_FILE_SIZE=N  覆盖大文件跳过阈值（KB）。默认 512，最大 32768。\n  GITNEXUS_ANALYZER_IDENTITY_CACHE_DIR=/absolute/protected/dir  由操作员明确信任的持久分析器身份缓存；目录必须预先存在、位于包/构建根目录之外，且路径中不得包含符号链接或 junction。\n  GITNEXUS_WORKER_SUB_BATCH_TIMEOUT_MS=N  Worker 空闲超时（毫秒）。默认 30000。\n  GITNEXUS_WAL_CHECKPOINT_THRESHOLD=N  LadybugDB WAL 自动 checkpoint 阈值（字节，默认 67108864 = 64 MiB；-1 保持 Ladybug 默认约 16 MiB）。\n  GITNEXUS_WORKER_SUB_BATCH_MAX_BYTES=N  Worker 作业字节预算。默认 8388608。\n  GITNEXUS_WORKER_POOL_SIZE=N  解析 worker 数量覆盖值。默认 cores-1，最多 16。\n  GITNEXUS_PARSE_CHUNK_CONCURRENCY=N  并发进行中的解析分块数。默认 2。\n  GITNEXUS_WORKER_MAX_RESPAWNS_PER_SLOT=N  每个 slot 丢弃前允许的最大替换进程数。默认 3。\n  GITNEXUS_WORKER_MAX_CUMULATIVE_TIMEOUT_MS=N  每个作业的总重试墙钟时间。默认 5 倍子批次超时。\n  GITNEXUS_WORKER_CONSECUTIVE_FAILURE_THRESHOLD=N  每个 slot 触发熔断的死亡次数。默认 max(3, poolSize)。\n  GITNEXUS_WORKER_SHUTDOWN_DRAIN_MS=N  线程池关闭时等待仍在原生代码中的已退役 worker 的最长时间（到达安全点后再终止，避免进程级 abort）。默认 30000。\n  GITNEXUS_CPP_CAPTURE_BUDGET_MS=N  C++ 捕获提取的每文件墙钟预算；超出后该文件保留部分捕获并输出警告。默认 20000。\n  GITNEXUS_EMBEDDING_THREADS=N  限制 --embeddings 的本地 ONNX CPU 线程数。\n  GITNEXUS_SEMANTIC_EXACT_SCAN_LIMIT=N  exact-scan 回退的最大嵌入分块数。默认 10000。\n  GITNEXUS_VECTOR_MAX_DISTANCE=N  语义/向量搜索接受的最大余弦距离（0 < N <= 2；超出则钳制为 2）。MCP 默认 0.6，其他路径默认 0.5。\n\n当参数和对应环境变量同时提供时，参数优先。\n\n提示：`.gitnexusignore` 支持 `.gitignore` 风格的取反。比如添加\n     `!__tests__/` 可以索引默认自动过滤的目录（#771）。',
 };

package/dist/cli/index.js

@@ -3,7 +3,7 @@
 // Removing it from here improves MCP server startup time significantly.
 import { Command } from 'commander';
 import { createRequire } from 'node:module';
-import { createLazyAction, createLbugLazyAction } from './lazy-action.js';
+import { createAnalyzerLbugLazyAction, createLazyAction, createLbugLazyAction, } from './lazy-action.js';
 import { EMBEDDING_DIMS_ERROR, normalizeEmbeddingDims } from './embedding-dims.js';
 import { registerGroupCommands } from './group.js';
 import { localizeCliHelp } from './help-i18n.js';
@@ -53,8 +53,11 @@ program
     'Without this flag, analyze always updates the workspace index, which follows the ' +
     'checked-out working tree. Distinct from --default-branch (cosmetic base_ref).')
     .option('--no-stats', 'Omit volatile file/symbol counts from AGENTS.md and CLAUDE.md')
-    .option('--skip-skills', 'Skip installing standard GitNexus skill files under .claude/skills/gitnexus/. ' +
-    'Does not suppress community skills from --skills (those use .claude/skills/generated/). ' +
+    .option('--self-commit', 'Auto-commit AGENTS.md/CLAUDE.md changes after analyze (opt-in, off by default). ' +
+    'Scoped to only those two files (never `git add -A`); no-ops if neither exists, ' +
+    'neither changed, or the repo has no git identity configured.')
+    .option('--skip-skills', 'Skip installing standard GitNexus skill files directly under .claude/skills/ and .agents/skills/. ' +
+    'Does not suppress community skills from --skills (those use .claude/skills/gitnexus-area-*). ' +
     'Use --index-only to skip all AI-context file injection.')
     .option('--index-only', 'Pure index mode: skip all file injection (AGENTS.md, CLAUDE.md, skills)')
     .option('--skip-git', 'Treat the provided path/cwd as the index root and skip parent git-root discovery')
@@ -119,7 +122,7 @@ program
         process.env.GITNEXUS_EMBEDDING_DIMS = dimsEnvBaseline;
     }
 })
-    .action(createLbugLazyAction(() => import('./analyze.js'), 'analyzeCommand'));
+    .action(createAnalyzerLbugLazyAction(() => import('../core/analyzer-identity.js'), () => import('./analyze.js'), 'analyzeCommandWithRunnerIdentity', import.meta.url));
 program
     .command('index [path...]')
     .description('Register an existing .gitnexus/ folder into the global registry (no re-analysis needed)')
@@ -148,6 +151,8 @@ program
 program
     .command('status')
     .description('Show index status for current repo')
+    .option('--json', 'Emit machine-readable index and analyzer provenance')
+    .addHelpText('after', () => t('help.identityCache.environment'))
     .action(createLazyAction(() => import('./status.js'), 'statusCommand'));
 program
     .command('doctor')
@@ -182,16 +187,17 @@ program
     .command('wiki [path]')
     .description('Generate repository wiki from knowledge graph')
     .option('-f, --force', 'Force full regeneration even if up to date')
-    .option('--provider <provider>', 'LLM provider: openai, openrouter, azure, custom, cursor, claude, codex, or opencode (default: openai)')
-    .option('--model <model>', 'LLM model or Azure deployment name (default: minimax/minimax-m2.5)')
+    .option('--provider <provider>', 'LLM provider: minimax, openai, openrouter, azure, custom, cursor, claude, codex, or opencode (default: minimax)')
+    .option('--model <model>', 'LLM model or deployment name (default: MiniMax-M3)')
     .option('--base-url <url>', 'LLM API base URL. Azure v1: https://{resource}.openai.azure.com/openai/v1')
     .option('--api-key <key>', 'LLM API key or Azure api-key (saved to ~/.gitnexus/config.json)')
     .option('--api-version <version>', 'Azure api-version query param, e.g. 2024-10-21 (legacy Azure API only)')
-    .option('--reasoning-model', 'Mark deployment as reasoning model (o1/o3/o4-mini) — strips temperature, uses max_completion_tokens')
-    .option('--no-reasoning-model', 'Disable reasoning model mode (overrides saved config)')
+    .option('--reasoning-model', 'Enable reasoning mode; MiniMax-M3 uses adaptive thinking')
+    .option('--no-reasoning-model', 'Disable reasoning mode; MiniMax-M3 disables thinking')
     .option('--concurrency <n>', 'Parallel LLM calls (default: 3)', '3')
     .option('--timeout <seconds>', 'LLM request timeout in seconds (default: disabled)')
     .option('--retries <n>', 'Max LLM retry attempts per request (default: 3)')
+    .option('--allow-insecure-connection <host>', 'Allow exact host(s) for http:// LLM base URLs (comma-separated; HTTPS is preferred)')
     .option('--gist', 'Publish wiki as a public GitHub Gist after generation')
     .option('-v, --verbose', 'Enable verbose output (show LLM commands and responses)')
     .option('--review', 'Stop after grouping to review module structure before generating pages')
@@ -254,6 +260,7 @@ program
     .command('trace <from> <to>')
     .description('Find the shortest directed path between two symbols (call + class-member edges)')
     .option('--from-uid <uid>', 'Source symbol UID (zero-ambiguity)')
+    .option('-f, --file <path>', 'Source file path hint (alias for --from-file)')
     .option('--from-file <path>', 'Source file path hint')
     .option('--to-uid <uid>', 'Target symbol UID (zero-ambiguity)')
     .option('--to-file <path>', 'Target file path hint')
@@ -292,7 +299,7 @@ program
     .command('eval-server')
     .description('Start lightweight HTTP server for fast tool calls during evaluation')
     .option('-p, --port <port>', 'Port number', '4848')
-    .option('--host <host>', 'Bind address (default: 127.0.0.1, use 0.0.0.0 to expose to all interfaces)')
+    .option('--host <host>', 'Bind address or resolvable hostname (default: 127.0.0.1; non-loopback requires GITNEXUS_AUTH_TOKEN; hostnames resolve to IPv4)')
     .option('--idle-timeout <seconds>', 'Auto-shutdown after N seconds idle (0 = disabled)', '0')
     .action(createLbugLazyAction(() => import('./eval-server.js'), 'evalServerCommand'));
 registerGroupCommands(program);

package/dist/cli/lazy-action.d.ts

@@ -5,3 +5,10 @@
  */
 export declare function createLazyAction<TModule extends Record<string, unknown>, TKey extends string & keyof TModule>(loader: () => Promise<TModule>, exportName: TKey): (...args: unknown[]) => Promise<void>;
 export declare function createLbugLazyAction<TModule extends Record<string, unknown>, TKey extends string & keyof TModule>(loader: () => Promise<TModule>, exportName: TKey): (...args: unknown[]) => Promise<void>;
+/**
+ * Analyze-specific lazy action. Unlike the generic LadybugDB wrapper, this
+ * captures the complete analyzer receipt before probing/loading native code or
+ * evaluating the analyzer module graph. The target export receives that start
+ * receipt as its first argument and threads it to runFullAnalysis.
+ */
+export declare function createAnalyzerLbugLazyAction<TModule extends Record<string, unknown>, TKey extends string & keyof TModule>(identityLoader: () => Promise<Pick<typeof import('../core/analyzer-identity.js'), 'captureAnalyzerIdentityBeforeLoad'>>, loader: () => Promise<TModule>, exportName: TKey, analyzerModuleUrl: string): (...args: unknown[]) => Promise<void>;

package/dist/cli/lazy-action.js

@@ -33,3 +33,30 @@ export function createLbugLazyAction(loader, exportName) {
         await action(...args);
     };
 }
+/**
+ * Analyze-specific lazy action. Unlike the generic LadybugDB wrapper, this
+ * captures the complete analyzer receipt before probing/loading native code or
+ * evaluating the analyzer module graph. The target export receives that start
+ * receipt as its first argument and threads it to runFullAnalysis.
+ */
+export function createAnalyzerLbugLazyAction(identityLoader, loader, exportName, analyzerModuleUrl) {
+    return async (...args) => {
+        const identityModule = await identityLoader();
+        const prepared = await identityModule.captureAnalyzerIdentityBeforeLoad(analyzerModuleUrl, async () => {
+            const check = checkLbugNative();
+            if (!check.ok)
+                return { check, module: null };
+            return { check, module: await loader() };
+        });
+        if (!prepared.loaded.check.ok) {
+            process.stderr.write(`\n  ${prepared.loaded.check.message?.replace(/\n/g, '\n  ')}\n\n`);
+            process.exitCode = 1;
+            return;
+        }
+        const action = prepared.loaded.module?.[exportName];
+        if (!isCallable(action)) {
+            throw new Error(`Lazy action export not found: ${exportName}`);
+        }
+        await action(prepared.runnerIdentity, ...args);
+    };
+}

package/dist/cli/mcp.js

@@ -44,10 +44,11 @@ export const mcpCommand = async (options) => {
     // stdout at module init, but transitive deps (pino, pino-pretty, the
     // worker-thread transport) could in theory, and the import-closure
     // regression test enforces the leaf invariant.
-    const [{ startMCPServer }, { LocalBackend }, { logger }] = await Promise.all([
+    const [{ startMCPServer }, { LocalBackend }, { logger }, { createMcpRepositoryPolicy }] = await Promise.all([
         import('../mcp/server.js'),
         import('../mcp/local/local-backend.js'),
         import('../core/logger.js'),
+        import('../mcp/repository-policy.js'),
     ]);
     // Missing-optional-grammar warnings are intentionally NOT emitted here.
     // `gitnexus analyze` already warns at index time, filtered by the repo's
@@ -59,7 +60,8 @@ export const mcpCommand = async (options) => {
     // so repos indexed after the server starts are discovered automatically.
     const backend = new LocalBackend();
     await backend.init();
-    const repos = await backend.listRepos();
+    const repositoryPolicy = await createMcpRepositoryPolicy(backend);
+    const repos = await repositoryPolicy.scopeBackend(backend).listRepos();
     if (repos.length === 0) {
         // Operator-actionable but the server still starts and serves; warn-level,
         // not error. Tools will discover newly-analyzed repos via lazy refresh.
@@ -85,6 +87,7 @@ export const mcpCommand = async (options) => {
                 port,
                 host: options.host ?? '127.0.0.1',
                 authToken: resolveAuthToken(options.authToken, process.env),
+                repositoryPolicy,
             });
         }
         catch (err) {
@@ -94,5 +97,5 @@ export const mcpCommand = async (options) => {
         return;
     }
     // Start MCP server (serves all repos, discovers new ones lazily)
-    await startMCPServer(backend);
+    await startMCPServer(backend, repositoryPolicy);
 };

package/dist/cli/resolve-invocation.d.ts

@@ -1,7 +1,7 @@
 /**
  * npm 11.x npx-install-crash nudge for the `analyze` command (#1939).
  *
- * The gitnexus/pnpm/npx selection itself lives in the canonical hook helper
+ * The gitnexus/pnpm/bun/npx selection itself lives in the canonical hook helper
  * (hooks/claude/resolve-analyze-cmd.cjs) — self-contained CJS because the copied
  * hook runtime cannot import from the package. We reuse it here via createRequire
  * instead of re-implementing it, so there is one source of truth for the
@@ -15,7 +15,11 @@ export { NPX_REF };
 export declare function getNpmMajorVersion(): number | null;
 /**
  * One-line stderr nudge when an npm 11+ user is on the npx install path (#1939).
- * Skipped when a global `gitnexus` or `pnpm` is already preferred, so it never
- * nags users who are not exposed to the npx/arborist crash.
+ * Skipped when a global `gitnexus`, `pnpm` or `bunx` is already preferred, so it
+ * never nags users who are not exposed to the npx/arborist crash. "Preferred"
+ * means usable, not merely on PATH: a `bunx` shim that no longer runs fails the
+ * cjs liveness probe, resolves back to `npx`, and so still gets warned here —
+ * without that, a broken bunx would suppress the warning AND emit a command that
+ * cannot run.
  */
 export declare function warnIfNpm11NpxRisk(): void;

package/dist/cli/resolve-invocation.js

@@ -1,7 +1,7 @@
 /**
  * npm 11.x npx-install-crash nudge for the `analyze` command (#1939).
  *
- * The gitnexus/pnpm/npx selection itself lives in the canonical hook helper
+ * The gitnexus/pnpm/bun/npx selection itself lives in the canonical hook helper
  * (hooks/claude/resolve-analyze-cmd.cjs) — self-contained CJS because the copied
  * hook runtime cannot import from the package. We reuse it here via createRequire
  * instead of re-implementing it, so there is one source of truth for the
@@ -53,8 +53,12 @@ export function getNpmMajorVersion() {
 }
 /**
  * One-line stderr nudge when an npm 11+ user is on the npx install path (#1939).
- * Skipped when a global `gitnexus` or `pnpm` is already preferred, so it never
- * nags users who are not exposed to the npx/arborist crash.
+ * Skipped when a global `gitnexus`, `pnpm` or `bunx` is already preferred, so it
+ * never nags users who are not exposed to the npx/arborist crash. "Preferred"
+ * means usable, not merely on PATH: a `bunx` shim that no longer runs fails the
+ * cjs liveness probe, resolves back to `npx`, and so still gets warned here —
+ * without that, a broken bunx would suppress the warning AND emit a command that
+ * cannot run.
  */
 export function warnIfNpm11NpxRisk() {
     if (resolveInvocationMode() !== 'npx')

package/dist/cli/setup.d.ts

@@ -37,6 +37,14 @@ interface SetupResult {
  * install paths copy this same list from hooks/claude/ (the canonical source).
  */
 export declare function copyHookHelpers(srcDir: string, destDir: string, label: string, result: SetupResult): Promise<string[]>;
+export declare const RENAMED_SKILL_DIRS: Readonly<Record<string, readonly string[]>>;
+/**
+ * Every legacy directory name superseded by a shipped rename. These no longer
+ * exist in the bundled skills/ source, but a pre-rename install left them
+ * behind in every editor target. Setup only warns about them (it cannot prove
+ * it owns the contents); uninstall's ownership-by-name contract removes them.
+ */
+export declare const LEGACY_SKILL_DIR_NAMES: readonly string[];
 export declare const setupCommand: (options?: {
     codingAgent?: string[] | string;
 }) => Promise<void>;

package/dist/cli/setup.js

@@ -22,8 +22,10 @@ const execFileAsync = promisify(execFile);
 // a config that persists in the user's editor and is invoked on every MCP
 // connect. Pinning to the installed version means subsequent invocations
 // skip the npm-registry metadata roundtrip (and stay reproducible until
-// the user upgrades). Static configs and READMEs intentionally use
-// `gitnexus@latest` since they're quickstart docs, not persisted state.
+// the user upgrades). The plugin skill mcp.json are likewise pinned and
+// re-stamped every release by scripts/sync-plugin-manifests.mjs (#2445),
+// since they too execute `gitnexus@<version>` on connect. Only the READMEs
+// stay on `gitnexus@latest` — they're quickstart docs, not executed state.
 const _require = createRequire(import.meta.url);
 const _pkg = _require('../../package.json');
 if (typeof _pkg.version !== 'string' || !_pkg.version) {
@@ -695,14 +697,15 @@ async function setupOpenCode(result) {
         result.skipped.push('OpenCode (not installed)');
         return;
     }
-    const { file: configPath, keyPath } = mcpTarget('opencode');
+    const target = mcpTarget('opencode');
     try {
-        const ok = await mergeJsoncFile(configPath, keyPath, getOpenCodeMcpEntry());
+        const configPath = await resolveMcpConfigFile(target);
+        const ok = await mergeJsoncFile(configPath, target.keyPath, getOpenCodeMcpEntry());
         if (ok) {
             result.configured.push('OpenCode');
         }
         else {
-            result.errors.push('OpenCode: opencode.json is corrupt — skipping to preserve existing content');
+            result.errors.push(`OpenCode: ${path.basename(configPath)} is corrupt — skipping to preserve existing content`);
         }
     }
     catch (err) {
@@ -882,6 +885,16 @@ async function setupCodex(result) {
     }
 }
 // ─── Skill Installation ───────────────────────────────────────────
+export const RENAMED_SKILL_DIRS = {
+    'gitnexus-review': ['gitnexus-pr-review'],
+};
+/**
+ * Every legacy directory name superseded by a shipped rename. These no longer
+ * exist in the bundled skills/ source, but a pre-rename install left them
+ * behind in every editor target. Setup only warns about them (it cannot prove
+ * it owns the contents); uninstall's ownership-by-name contract removes them.
+ */
+export const LEGACY_SKILL_DIR_NAMES = Object.values(RENAMED_SKILL_DIRS).flat();
 /**
  * Install GitNexus skills to a target directory.
  * Each skill is installed as {targetDir}/gitnexus-{skillName}/SKILL.md
@@ -937,15 +950,25 @@ async function installSkillsTo(targetDir) {
             if (source.isDirectory) {
                 const dirSource = path.join(skillsRoot, skillName);
                 await copyDirRecursive(dirSource, skillDir);
-                installed.push(skillName);
             }
             else {
                 const flatSource = path.join(skillsRoot, `${skillName}.md`);
                 const content = await fs.readFile(flatSource, 'utf-8');
                 await fs.mkdir(skillDir, { recursive: true });
                 await fs.writeFile(path.join(skillDir, 'SKILL.md'), content, 'utf-8');
-                installed.push(skillName);
             }
+            // A directory superseded by a shipped rename is warned about, never
+            // deleted: the installer cannot prove it owns the contents (users
+            // customize installed skills or hand-write their own under these
+            // names), so an upgrade must not destroy data.
+            for (const oldName of RENAMED_SKILL_DIRS[skillName] ?? []) {
+                const legacyDir = path.join(targetDir, oldName);
+                if (await dirExists(legacyDir)) {
+                    console.log(`[gitnexus] skill "${oldName}" was renamed to "${skillName}"; ` +
+                        `left ${legacyDir} in place — delete it manually if you have not customized it.`);
+                }
+            }
+            installed.push(skillName);
         }
         catch {
             // Source skill not found — skip

package/dist/cli/skill-gen.d.ts

@@ -7,12 +7,7 @@
  * cross-community connections.
  */
 import { PipelineResult } from '../types/pipeline.js';
-export interface GeneratedSkillInfo {
-    name: string;
-    label: string;
-    symbolCount: number;
-    fileCount: number;
-}
+import type { GeneratedSkillInfo } from './generated-skill.js';
 /**
  * @brief Generate repo-specific skill files from detected communities
  * @param {string} repoPath - Absolute path to the repository root