gitnexus 1.6.10-rc.50 → 1.6.10-rc.52

package/README.md

@@ -332,6 +332,9 @@ GitNexus ships with skill files that teach AI agents how to use the tools effect
 - **Refactoring** — Plan safe refactors using dependency mapping
 - **Guide** — GitNexus tool/resource/schema reference for the agent
 - **CLI** — Run analyze/status/clean/wiki commands on request
+- **PDG Query** — Statement-level control/data dependence queries (`--pdg` index)
+- **Taint Analysis** — Source→sink data-flow findings (`--pdg` index)
+- **Plan / Work / Review / LFG** — The engineering family: implementation-ready plans, gated plan execution, graph-backed change review with taint + expert lenses, and the end-to-end pipeline
 
 Installed automatically by both `gitnexus analyze` (per-repo) and `gitnexus setup` (global). Run `gitnexus analyze --skills` to additionally generate each detected functional area as a direct project skill under `.claude/skills/gitnexus-area-<name>/`.
 

package/dist/cli/ai-context.js

@@ -8,6 +8,7 @@
 import fs from 'fs/promises';
 import path from 'path';
 import { fileURLToPath } from 'url';
+import { STANDARD_SKILL_CATALOG } from './standard-skills.js';
 import { logger } from '../core/logger.js';
 // ESM equivalent of __dirname
 const __filename = fileURLToPath(import.meta.url);
@@ -91,12 +92,9 @@ export function generateGitNexusContent(projectName, stats, opts = {}) {
     // are independent of --skip-skills, so they remain when present.
     const standardSkillsRows = skipSkills
         ? ''
-        : `| Understand architecture / "How does X work?" | \`.claude/skills/gitnexus-exploring/SKILL.md\` |
-| Blast radius / "What breaks if I change X?" | \`.claude/skills/gitnexus-impact-analysis/SKILL.md\` |
-| Trace bugs / "Why is X failing?" | \`.claude/skills/gitnexus-debugging/SKILL.md\` |
-| Rename / extract / split / refactor | \`.claude/skills/gitnexus-refactoring/SKILL.md\` |
-| Tools, resources, schema reference | \`.claude/skills/gitnexus-guide/SKILL.md\` |
-| Index, status, clean, wiki CLI commands | \`.claude/skills/gitnexus-cli/SKILL.md\` |`;
+        : STANDARD_SKILL_CATALOG.filter((skill) => skill.distributions.project)
+            .map((skill) => `| ${skill.agentTableTask} | \`.claude/skills/${skill.name}/SKILL.md\` |`)
+            .join('\n');
     const tableBody = [standardSkillsRows, generatedRows].filter(Boolean).join('\n');
     const skillsTable = tableBody
         ? `| Task | Read this skill file |
@@ -260,34 +258,7 @@ async function installSkills(repoPath) {
     const skillsDir = path.join(repoPath, '.claude', 'skills');
     const legacySkillsDir = path.join(skillsDir, 'gitnexus');
     const installedSkills = [];
-    // Skill definitions bundled with the package
-    const skills = [
-        {
-            name: 'gitnexus-exploring',
-            description: 'Use when the user asks how code works, wants to understand architecture, trace execution flows, or explore unfamiliar parts of the codebase. Examples: "How does X work?", "What calls this function?", "Show me the auth flow"',
-        },
-        {
-            name: 'gitnexus-debugging',
-            description: 'Use when the user is debugging a bug, tracing an error, or asking why something fails. Examples: "Why is X failing?", "Where does this error come from?", "Trace this bug"',
-        },
-        {
-            name: 'gitnexus-impact-analysis',
-            description: 'Use when the user wants to know what will break if they change something, or needs safety analysis before editing code. Examples: "Is it safe to change X?", "What depends on this?", "What will break?"',
-        },
-        {
-            name: 'gitnexus-refactoring',
-            description: 'Use when the user wants to rename, extract, split, move, or restructure code safely. Examples: "Rename this function", "Extract this into a module", "Refactor this class", "Move this to a separate file"',
-        },
-        {
-            name: 'gitnexus-guide',
-            description: 'Use when the user asks about GitNexus itself — available tools, how to query the knowledge graph, MCP resources, graph schema, or workflow reference. Examples: "What GitNexus tools are available?", "How do I use GitNexus?"',
-        },
-        {
-            name: 'gitnexus-cli',
-            description: 'Use when the user needs to run GitNexus CLI commands like analyze/index a repo, check status, clean the index, generate a wiki, or list indexed repos. Examples: "Index this repo", "Reanalyze the codebase", "Generate a wiki"',
-        },
-    ];
-    for (const skill of skills) {
+    for (const skill of STANDARD_SKILL_CATALOG.filter((entry) => entry.distributions.project && entry.distributions.npm)) {
         const skillDir = path.join(skillsDir, skill.name);
         const skillPath = path.join(skillDir, 'SKILL.md');
         try {
@@ -303,12 +274,12 @@ async function installSkills(repoPath) {
                 // Fallback: generate minimal skill content
                 skillContent = `---
 name: ${skill.name}
-description: ${skill.description}
+description: ${skill.fallbackDescription}
 ---
 
 # ${skill.name.charAt(0).toUpperCase() + skill.name.slice(1)}
 
-${skill.description}
+${skill.fallbackDescription}
 
 Use GitNexus tools to accomplish this task.
 `;

package/dist/cli/analyze.d.ts

@@ -7,6 +7,7 @@
  * This CLI wrapper handles: heap management, progress bar, SIGINT,
  * skill generation (--skills), summary output, and process.exit().
  */
+import { type AnalyzerRunnerIdentity } from '../storage/repo-manager.js';
 /**
  * RAM-aware re-exec heap cap (MB): `0.75 × effective RAM`, clamped to
  * `>= DEFAULT_HEAP_MB`. Kept BELOW physical RAM on purpose — a cap `>=` RAM makes
@@ -138,4 +139,6 @@ export interface AnalyzeOptions {
  * without booting the full analyze pipeline (#742 review).
  */
 export declare const shouldGenerateCommunitySkillFiles: (options: Pick<AnalyzeOptions, "skills" | "indexOnly"> | undefined, pipelineResult: unknown) => boolean;
-export declare const analyzeCommand: (inputPath?: string, options?: AnalyzeOptions) => Promise<void>;
+export declare const analyzeCommand: (inputPath?: string, options?: AnalyzeOptions, runnerIdentityAtBootstrap?: AnalyzerRunnerIdentity) => Promise<void>;
+/** Commander entrypoint used only by the capture-before-import lazy bootstrap. */
+export declare const analyzeCommandWithRunnerIdentity: (runnerIdentityAtBootstrap: AnalyzerRunnerIdentity, inputPath?: string, options?: AnalyzeOptions) => Promise<void>;

package/dist/cli/analyze.js

@@ -485,7 +485,7 @@ const restoreAnalyzeEnv = (snap) => {
  * without booting the full analyze pipeline (#742 review).
  */
 export const shouldGenerateCommunitySkillFiles = (options, pipelineResult) => Boolean(options?.skills && pipelineResult && !options?.indexOnly);
-export const analyzeCommand = async (inputPath, options) => {
+export const analyzeCommand = async (inputPath, options, runnerIdentityAtBootstrap) => {
     if (await ensureHeap())
         return;
     forceHeapOOMForTestIfEnabled();
@@ -506,7 +506,7 @@ export const analyzeCommand = async (inputPath, options) => {
     // pre-call values.
     const envSnap = snapshotAnalyzeEnv();
     try {
-        await analyzeCommandImpl(inputPath, options);
+        await analyzeCommandImpl(inputPath, options, runnerIdentityAtBootstrap);
     }
     finally {
         restoreAnalyzeEnv(envSnap);
@@ -523,7 +523,9 @@ export const analyzeCommand = async (inputPath, options) => {
         process.exit(typeof process.exitCode === 'number' ? process.exitCode : 1);
     }
 };
-const analyzeCommandImpl = async (inputPath, cliOptions) => {
+/** Commander entrypoint used only by the capture-before-import lazy bootstrap. */
+export const analyzeCommandWithRunnerIdentity = async (runnerIdentityAtBootstrap, inputPath, options) => analyzeCommand(inputPath, options, runnerIdentityAtBootstrap);
+const analyzeCommandImpl = async (inputPath, cliOptions, runnerIdentityAtBootstrap) => {
     console.log('\n  GitNexus Analyzer\n');
     // ── Resolve the target repo root ──────────────────────────────────
     // Resolved FIRST because `.gitnexusrc` is read from the repo root (not the
@@ -988,7 +990,7 @@ const analyzeCommandImpl = async (inputPath, cliOptions) => {
         const skipAll = options.indexOnly;
         const skipAgentsMd = skipAll || options.skipAgentsMd;
         const skipSkills = skipAll || options.skipSkills;
-        const result = await runFullAnalysis(repoPath, {
+        const runOptions = {
             // Pipeline re-index — OR'd with --skills because skill generation
             // needs a fresh pipelineResult. Has no bearing on the registry
             // collision guard (see allowDuplicateName below).
@@ -1035,12 +1037,17 @@ const analyzeCommandImpl = async (inputPath, cliOptions) => {
             // in LadybugDB's ClientContext destructor after --pdg writes (#2264). The
             // CHECKPOINT keeps the index durable; process exit reclaims the handles.
             skipNativeCloseOnExit: true,
-        }, {
+        };
+        const runCallbacks = {
             onProgress: (_phase, percent, message) => {
                 updateBar(percent, message);
             },
             onLog: barLog,
-        });
+        };
+        const bootstrapArgs = runnerIdentityAtBootstrap
+            ? [runnerIdentityAtBootstrap]
+            : [];
+        const result = await runFullAnalysis(repoPath, runOptions, runCallbacks, ...bootstrapArgs);
         if (result.alreadyUpToDate) {
             // Even the fast path must prove the repo is discoverable. A prior
             // run can write meta.json and then fail before registerRepo(); in

package/dist/cli/help-i18n.js

@@ -75,6 +75,7 @@ const OPTION_DESCRIPTION_KEYS = {
     'mcp|--auth-token <token>': 'help.option.mcp.authToken',
     'serve|-p, --port <port>': 'help.option.port',
     'serve|--host <host>': 'help.option.serve.host',
+    'status|--json': 'help.option.status.json',
     'uninstall|-f, --force': 'help.option.uninstall.force',
     'clean|-f, --force': 'help.option.force.confirmation',
     'clean|--all': 'help.option.clean.all',

package/dist/cli/i18n/en.d.ts

@@ -26,6 +26,8 @@ export declare const en: {
     readonly 'status.indexed': "Indexed";
     readonly 'status.indexedCommit': "Indexed commit";
     readonly 'status.currentCommit': "Current commit";
+    readonly 'status.indexRunnerIdentity': "Indexed analyzer runner identity";
+    readonly 'status.currentRunnerIdentity': "Current analyzer runner identity";
     readonly 'status.branch': "Branch";
     readonly 'status.detached': "(detached HEAD)";
     readonly 'status.workspaceIndexLabel': "Workspace index: last analyzed on '{{primary}}' (re-run gitnexus analyze to follow the current branch)";
@@ -231,6 +233,7 @@ export declare const en: {
     readonly 'help.option.group.sync.exactOnly': "Exact match only";
     readonly 'help.option.group.sync.allowStale': "Skip stale index warnings";
     readonly 'help.option.group.sync.verbose': "Show each cross-link detail";
+    readonly 'help.option.status.json': "Emit machine-readable index and analyzer provenance";
     readonly 'help.option.json': "JSON output";
     readonly 'help.option.group.impact.target': "Symbol or file name to analyze";
     readonly 'help.option.group.impact.repo': "Member path from group.yaml (e.g. app/backend), not the indexed repo name";
@@ -244,5 +247,6 @@ export declare const en: {
     readonly 'help.option.group.contracts.type': "Filter by contract type";
     readonly 'help.option.group.contracts.repo': "Filter by repo";
     readonly 'help.option.group.contracts.unmatched': "Show only unmatched contracts";
-    readonly 'help.analyze.environment': "\nEnvironment variables:\n  GITNEXUS_NO_GITIGNORE=1   Skip .gitignore parsing (still reads .gitnexusignore)\n  GITNEXUS_MAX_FILE_SIZE=N  Override large-file skip threshold (KB). Default 512, max 32768.\n  GITNEXUS_WORKER_SUB_BATCH_TIMEOUT_MS=N  Worker idle timeout in milliseconds. Default 30000.\n  GITNEXUS_WAL_CHECKPOINT_THRESHOLD=N  LadybugDB WAL auto-checkpoint threshold in bytes (default 67108864 = 64 MiB; -1 keeps Ladybug stock ~16 MiB).\n  GITNEXUS_WORKER_SUB_BATCH_MAX_BYTES=N  Worker job byte budget. Default 8388608.\n  GITNEXUS_WORKER_POOL_SIZE=N  Parse worker count override. Default cores-1 capped at 16.\n  GITNEXUS_PARSE_CHUNK_CONCURRENCY=N  Concurrent in-flight parse chunks. Default 2.\n  GITNEXUS_WORKER_MAX_RESPAWNS_PER_SLOT=N  Max replacement spawns per slot before drop. Default 3.\n  GITNEXUS_WORKER_MAX_CUMULATIVE_TIMEOUT_MS=N  Total retry wall-time per job. Default 5x sub-batch timeout.\n  GITNEXUS_WORKER_CONSECUTIVE_FAILURE_THRESHOLD=N  Per-slot deaths to trip circuit breaker. Default max(3, poolSize).\n  GITNEXUS_WORKER_SHUTDOWN_DRAIN_MS=N  Max wait at pool shutdown for a retired worker still inside native code (terminated at its next safe point instead of aborting the process). Default 30000.\n  GITNEXUS_CPP_CAPTURE_BUDGET_MS=N  Per-file wall-clock budget for C++ capture extraction; on breach the file keeps partial captures with a warning. Default 20000.\n  GITNEXUS_EMBEDDING_THREADS=N  Limit local ONNX CPU threads for --embeddings.\n  GITNEXUS_SEMANTIC_EXACT_SCAN_LIMIT=N  Max embedding chunks for exact-scan fallback. Default 10000.\n  GITNEXUS_VECTOR_MAX_DISTANCE=N  Max accepted semantic/vector cosine distance (0 < N <= 2; higher values clamp to 2). Default 0.6 for MCP, 0.5 elsewhere.\n\nFlags override the corresponding env vars when both are provided.\n\nTip: `.gitnexusignore` supports `.gitignore`-style negation. Add e.g.\n     `!__tests__/` to index a directory that is auto-filtered by default (#771).";
+    readonly 'help.identityCache.environment': "\nAnalyzer identity cache:\n  GITNEXUS_ANALYZER_IDENTITY_CACHE_DIR=/absolute/protected/dir\n    Operator-trusted persistent cache for warm cross-process status. The directory must pre-exist, be outside the GitNexus package/build roots, and contain no symlink or junction components. Defaults remain fail-closed on platforms without POSIX ownership APIs.";
+    readonly 'help.analyze.environment': "\nEnvironment variables:\n  GITNEXUS_NO_GITIGNORE=1   Skip .gitignore parsing (still reads .gitnexusignore)\n  GITNEXUS_MAX_FILE_SIZE=N  Override large-file skip threshold (KB). Default 512, max 32768.\n  GITNEXUS_ANALYZER_IDENTITY_CACHE_DIR=/absolute/protected/dir  Operator-trusted persistent analyzer identity cache; must pre-exist, be outside package/build roots, and contain no symlink/junction components.\n  GITNEXUS_WORKER_SUB_BATCH_TIMEOUT_MS=N  Worker idle timeout in milliseconds. Default 30000.\n  GITNEXUS_WAL_CHECKPOINT_THRESHOLD=N  LadybugDB WAL auto-checkpoint threshold in bytes (default 67108864 = 64 MiB; -1 keeps Ladybug stock ~16 MiB).\n  GITNEXUS_WORKER_SUB_BATCH_MAX_BYTES=N  Worker job byte budget. Default 8388608.\n  GITNEXUS_WORKER_POOL_SIZE=N  Parse worker count override. Default cores-1 capped at 16.\n  GITNEXUS_PARSE_CHUNK_CONCURRENCY=N  Concurrent in-flight parse chunks. Default 2.\n  GITNEXUS_WORKER_MAX_RESPAWNS_PER_SLOT=N  Max replacement spawns per slot before drop. Default 3.\n  GITNEXUS_WORKER_MAX_CUMULATIVE_TIMEOUT_MS=N  Total retry wall-time per job. Default 5x sub-batch timeout.\n  GITNEXUS_WORKER_CONSECUTIVE_FAILURE_THRESHOLD=N  Per-slot deaths to trip circuit breaker. Default max(3, poolSize).\n  GITNEXUS_WORKER_SHUTDOWN_DRAIN_MS=N  Max wait at pool shutdown for a retired worker still inside native code (terminated at its next safe point instead of aborting the process). Default 30000.\n  GITNEXUS_CPP_CAPTURE_BUDGET_MS=N  Per-file wall-clock budget for C++ capture extraction; on breach the file keeps partial captures with a warning. Default 20000.\n  GITNEXUS_EMBEDDING_THREADS=N  Limit local ONNX CPU threads for --embeddings.\n  GITNEXUS_SEMANTIC_EXACT_SCAN_LIMIT=N  Max embedding chunks for exact-scan fallback. Default 10000.\n  GITNEXUS_VECTOR_MAX_DISTANCE=N  Max accepted semantic/vector cosine distance (0 < N <= 2; higher values clamp to 2). Default 0.6 for MCP, 0.5 elsewhere.\n\nFlags override the corresponding env vars when both are provided.\n\nTip: `.gitnexusignore` supports `.gitignore`-style negation. Add e.g.\n     `!__tests__/` to index a directory that is auto-filtered by default (#771).";
 };

package/dist/cli/i18n/en.js

@@ -26,6 +26,8 @@ export const en = {
     'status.indexed': 'Indexed',
     'status.indexedCommit': 'Indexed commit',
     'status.currentCommit': 'Current commit',
+    'status.indexRunnerIdentity': 'Indexed analyzer runner identity',
+    'status.currentRunnerIdentity': 'Current analyzer runner identity',
     'status.branch': 'Branch',
     'status.detached': '(detached HEAD)',
     'status.workspaceIndexLabel': "Workspace index: last analyzed on '{{primary}}' (re-run gitnexus analyze to follow the current branch)",
@@ -231,6 +233,7 @@ export const en = {
     'help.option.group.sync.exactOnly': 'Exact match only',
     'help.option.group.sync.allowStale': 'Skip stale index warnings',
     'help.option.group.sync.verbose': 'Show each cross-link detail',
+    'help.option.status.json': 'Emit machine-readable index and analyzer provenance',
     'help.option.json': 'JSON output',
     'help.option.group.impact.target': 'Symbol or file name to analyze',
     'help.option.group.impact.repo': 'Member path from group.yaml (e.g. app/backend), not the indexed repo name',
@@ -244,5 +247,6 @@ export const en = {
     'help.option.group.contracts.type': 'Filter by contract type',
     'help.option.group.contracts.repo': 'Filter by repo',
     'help.option.group.contracts.unmatched': 'Show only unmatched contracts',
-    'help.analyze.environment': '\nEnvironment variables:\n  GITNEXUS_NO_GITIGNORE=1   Skip .gitignore parsing (still reads .gitnexusignore)\n  GITNEXUS_MAX_FILE_SIZE=N  Override large-file skip threshold (KB). Default 512, max 32768.\n  GITNEXUS_WORKER_SUB_BATCH_TIMEOUT_MS=N  Worker idle timeout in milliseconds. Default 30000.\n  GITNEXUS_WAL_CHECKPOINT_THRESHOLD=N  LadybugDB WAL auto-checkpoint threshold in bytes (default 67108864 = 64 MiB; -1 keeps Ladybug stock ~16 MiB).\n  GITNEXUS_WORKER_SUB_BATCH_MAX_BYTES=N  Worker job byte budget. Default 8388608.\n  GITNEXUS_WORKER_POOL_SIZE=N  Parse worker count override. Default cores-1 capped at 16.\n  GITNEXUS_PARSE_CHUNK_CONCURRENCY=N  Concurrent in-flight parse chunks. Default 2.\n  GITNEXUS_WORKER_MAX_RESPAWNS_PER_SLOT=N  Max replacement spawns per slot before drop. Default 3.\n  GITNEXUS_WORKER_MAX_CUMULATIVE_TIMEOUT_MS=N  Total retry wall-time per job. Default 5x sub-batch timeout.\n  GITNEXUS_WORKER_CONSECUTIVE_FAILURE_THRESHOLD=N  Per-slot deaths to trip circuit breaker. Default max(3, poolSize).\n  GITNEXUS_WORKER_SHUTDOWN_DRAIN_MS=N  Max wait at pool shutdown for a retired worker still inside native code (terminated at its next safe point instead of aborting the process). Default 30000.\n  GITNEXUS_CPP_CAPTURE_BUDGET_MS=N  Per-file wall-clock budget for C++ capture extraction; on breach the file keeps partial captures with a warning. Default 20000.\n  GITNEXUS_EMBEDDING_THREADS=N  Limit local ONNX CPU threads for --embeddings.\n  GITNEXUS_SEMANTIC_EXACT_SCAN_LIMIT=N  Max embedding chunks for exact-scan fallback. Default 10000.\n  GITNEXUS_VECTOR_MAX_DISTANCE=N  Max accepted semantic/vector cosine distance (0 < N <= 2; higher values clamp to 2). Default 0.6 for MCP, 0.5 elsewhere.\n\nFlags override the corresponding env vars when both are provided.\n\nTip: `.gitnexusignore` supports `.gitignore`-style negation. Add e.g.\n     `!__tests__/` to index a directory that is auto-filtered by default (#771).',
+    'help.identityCache.environment': '\nAnalyzer identity cache:\n  GITNEXUS_ANALYZER_IDENTITY_CACHE_DIR=/absolute/protected/dir\n    Operator-trusted persistent cache for warm cross-process status. The directory must pre-exist, be outside the GitNexus package/build roots, and contain no symlink or junction components. Defaults remain fail-closed on platforms without POSIX ownership APIs.',
+    'help.analyze.environment': '\nEnvironment variables:\n  GITNEXUS_NO_GITIGNORE=1   Skip .gitignore parsing (still reads .gitnexusignore)\n  GITNEXUS_MAX_FILE_SIZE=N  Override large-file skip threshold (KB). Default 512, max 32768.\n  GITNEXUS_ANALYZER_IDENTITY_CACHE_DIR=/absolute/protected/dir  Operator-trusted persistent analyzer identity cache; must pre-exist, be outside package/build roots, and contain no symlink/junction components.\n  GITNEXUS_WORKER_SUB_BATCH_TIMEOUT_MS=N  Worker idle timeout in milliseconds. Default 30000.\n  GITNEXUS_WAL_CHECKPOINT_THRESHOLD=N  LadybugDB WAL auto-checkpoint threshold in bytes (default 67108864 = 64 MiB; -1 keeps Ladybug stock ~16 MiB).\n  GITNEXUS_WORKER_SUB_BATCH_MAX_BYTES=N  Worker job byte budget. Default 8388608.\n  GITNEXUS_WORKER_POOL_SIZE=N  Parse worker count override. Default cores-1 capped at 16.\n  GITNEXUS_PARSE_CHUNK_CONCURRENCY=N  Concurrent in-flight parse chunks. Default 2.\n  GITNEXUS_WORKER_MAX_RESPAWNS_PER_SLOT=N  Max replacement spawns per slot before drop. Default 3.\n  GITNEXUS_WORKER_MAX_CUMULATIVE_TIMEOUT_MS=N  Total retry wall-time per job. Default 5x sub-batch timeout.\n  GITNEXUS_WORKER_CONSECUTIVE_FAILURE_THRESHOLD=N  Per-slot deaths to trip circuit breaker. Default max(3, poolSize).\n  GITNEXUS_WORKER_SHUTDOWN_DRAIN_MS=N  Max wait at pool shutdown for a retired worker still inside native code (terminated at its next safe point instead of aborting the process). Default 30000.\n  GITNEXUS_CPP_CAPTURE_BUDGET_MS=N  Per-file wall-clock budget for C++ capture extraction; on breach the file keeps partial captures with a warning. Default 20000.\n  GITNEXUS_EMBEDDING_THREADS=N  Limit local ONNX CPU threads for --embeddings.\n  GITNEXUS_SEMANTIC_EXACT_SCAN_LIMIT=N  Max embedding chunks for exact-scan fallback. Default 10000.\n  GITNEXUS_VECTOR_MAX_DISTANCE=N  Max accepted semantic/vector cosine distance (0 < N <= 2; higher values clamp to 2). Default 0.6 for MCP, 0.5 elsewhere.\n\nFlags override the corresponding env vars when both are provided.\n\nTip: `.gitnexusignore` supports `.gitignore`-style negation. Add e.g.\n     `!__tests__/` to index a directory that is auto-filtered by default (#771).',
 };

package/dist/cli/i18n/resources.d.ts

@@ -27,6 +27,8 @@ export declare const cliResources: {
         readonly 'status.indexed': "Indexed";
         readonly 'status.indexedCommit': "Indexed commit";
         readonly 'status.currentCommit': "Current commit";
+        readonly 'status.indexRunnerIdentity': "Indexed analyzer runner identity";
+        readonly 'status.currentRunnerIdentity': "Current analyzer runner identity";
         readonly 'status.branch': "Branch";
         readonly 'status.detached': "(detached HEAD)";
         readonly 'status.workspaceIndexLabel': "Workspace index: last analyzed on '{{primary}}' (re-run gitnexus analyze to follow the current branch)";
@@ -232,6 +234,7 @@ export declare const cliResources: {
         readonly 'help.option.group.sync.exactOnly': "Exact match only";
         readonly 'help.option.group.sync.allowStale': "Skip stale index warnings";
         readonly 'help.option.group.sync.verbose': "Show each cross-link detail";
+        readonly 'help.option.status.json': "Emit machine-readable index and analyzer provenance";
         readonly 'help.option.json': "JSON output";
         readonly 'help.option.group.impact.target': "Symbol or file name to analyze";
         readonly 'help.option.group.impact.repo': "Member path from group.yaml (e.g. app/backend), not the indexed repo name";
@@ -245,7 +248,8 @@ export declare const cliResources: {
         readonly 'help.option.group.contracts.type': "Filter by contract type";
         readonly 'help.option.group.contracts.repo': "Filter by repo";
         readonly 'help.option.group.contracts.unmatched': "Show only unmatched contracts";
-        readonly 'help.analyze.environment': "\nEnvironment variables:\n  GITNEXUS_NO_GITIGNORE=1   Skip .gitignore parsing (still reads .gitnexusignore)\n  GITNEXUS_MAX_FILE_SIZE=N  Override large-file skip threshold (KB). Default 512, max 32768.\n  GITNEXUS_WORKER_SUB_BATCH_TIMEOUT_MS=N  Worker idle timeout in milliseconds. Default 30000.\n  GITNEXUS_WAL_CHECKPOINT_THRESHOLD=N  LadybugDB WAL auto-checkpoint threshold in bytes (default 67108864 = 64 MiB; -1 keeps Ladybug stock ~16 MiB).\n  GITNEXUS_WORKER_SUB_BATCH_MAX_BYTES=N  Worker job byte budget. Default 8388608.\n  GITNEXUS_WORKER_POOL_SIZE=N  Parse worker count override. Default cores-1 capped at 16.\n  GITNEXUS_PARSE_CHUNK_CONCURRENCY=N  Concurrent in-flight parse chunks. Default 2.\n  GITNEXUS_WORKER_MAX_RESPAWNS_PER_SLOT=N  Max replacement spawns per slot before drop. Default 3.\n  GITNEXUS_WORKER_MAX_CUMULATIVE_TIMEOUT_MS=N  Total retry wall-time per job. Default 5x sub-batch timeout.\n  GITNEXUS_WORKER_CONSECUTIVE_FAILURE_THRESHOLD=N  Per-slot deaths to trip circuit breaker. Default max(3, poolSize).\n  GITNEXUS_WORKER_SHUTDOWN_DRAIN_MS=N  Max wait at pool shutdown for a retired worker still inside native code (terminated at its next safe point instead of aborting the process). Default 30000.\n  GITNEXUS_CPP_CAPTURE_BUDGET_MS=N  Per-file wall-clock budget for C++ capture extraction; on breach the file keeps partial captures with a warning. Default 20000.\n  GITNEXUS_EMBEDDING_THREADS=N  Limit local ONNX CPU threads for --embeddings.\n  GITNEXUS_SEMANTIC_EXACT_SCAN_LIMIT=N  Max embedding chunks for exact-scan fallback. Default 10000.\n  GITNEXUS_VECTOR_MAX_DISTANCE=N  Max accepted semantic/vector cosine distance (0 < N <= 2; higher values clamp to 2). Default 0.6 for MCP, 0.5 elsewhere.\n\nFlags override the corresponding env vars when both are provided.\n\nTip: `.gitnexusignore` supports `.gitignore`-style negation. Add e.g.\n     `!__tests__/` to index a directory that is auto-filtered by default (#771).";
+        readonly 'help.identityCache.environment': "\nAnalyzer identity cache:\n  GITNEXUS_ANALYZER_IDENTITY_CACHE_DIR=/absolute/protected/dir\n    Operator-trusted persistent cache for warm cross-process status. The directory must pre-exist, be outside the GitNexus package/build roots, and contain no symlink or junction components. Defaults remain fail-closed on platforms without POSIX ownership APIs.";
+        readonly 'help.analyze.environment': "\nEnvironment variables:\n  GITNEXUS_NO_GITIGNORE=1   Skip .gitignore parsing (still reads .gitnexusignore)\n  GITNEXUS_MAX_FILE_SIZE=N  Override large-file skip threshold (KB). Default 512, max 32768.\n  GITNEXUS_ANALYZER_IDENTITY_CACHE_DIR=/absolute/protected/dir  Operator-trusted persistent analyzer identity cache; must pre-exist, be outside package/build roots, and contain no symlink/junction components.\n  GITNEXUS_WORKER_SUB_BATCH_TIMEOUT_MS=N  Worker idle timeout in milliseconds. Default 30000.\n  GITNEXUS_WAL_CHECKPOINT_THRESHOLD=N  LadybugDB WAL auto-checkpoint threshold in bytes (default 67108864 = 64 MiB; -1 keeps Ladybug stock ~16 MiB).\n  GITNEXUS_WORKER_SUB_BATCH_MAX_BYTES=N  Worker job byte budget. Default 8388608.\n  GITNEXUS_WORKER_POOL_SIZE=N  Parse worker count override. Default cores-1 capped at 16.\n  GITNEXUS_PARSE_CHUNK_CONCURRENCY=N  Concurrent in-flight parse chunks. Default 2.\n  GITNEXUS_WORKER_MAX_RESPAWNS_PER_SLOT=N  Max replacement spawns per slot before drop. Default 3.\n  GITNEXUS_WORKER_MAX_CUMULATIVE_TIMEOUT_MS=N  Total retry wall-time per job. Default 5x sub-batch timeout.\n  GITNEXUS_WORKER_CONSECUTIVE_FAILURE_THRESHOLD=N  Per-slot deaths to trip circuit breaker. Default max(3, poolSize).\n  GITNEXUS_WORKER_SHUTDOWN_DRAIN_MS=N  Max wait at pool shutdown for a retired worker still inside native code (terminated at its next safe point instead of aborting the process). Default 30000.\n  GITNEXUS_CPP_CAPTURE_BUDGET_MS=N  Per-file wall-clock budget for C++ capture extraction; on breach the file keeps partial captures with a warning. Default 20000.\n  GITNEXUS_EMBEDDING_THREADS=N  Limit local ONNX CPU threads for --embeddings.\n  GITNEXUS_SEMANTIC_EXACT_SCAN_LIMIT=N  Max embedding chunks for exact-scan fallback. Default 10000.\n  GITNEXUS_VECTOR_MAX_DISTANCE=N  Max accepted semantic/vector cosine distance (0 < N <= 2; higher values clamp to 2). Default 0.6 for MCP, 0.5 elsewhere.\n\nFlags override the corresponding env vars when both are provided.\n\nTip: `.gitnexusignore` supports `.gitignore`-style negation. Add e.g.\n     `!__tests__/` to index a directory that is auto-filtered by default (#771).";
     };
     readonly 'zh-CN': {
         'common.notIndexed': string;
@@ -275,6 +279,8 @@ export declare const cliResources: {
         'status.indexed': string;
         'status.indexedCommit': string;
         'status.currentCommit': string;
+        'status.indexRunnerIdentity': string;
+        'status.currentRunnerIdentity': string;
         'status.branch': string;
         'status.detached': string;
         'status.workspaceIndexLabel': string;
@@ -480,6 +486,7 @@ export declare const cliResources: {
         'help.option.group.sync.exactOnly': string;
         'help.option.group.sync.allowStale': string;
         'help.option.group.sync.verbose': string;
+        'help.option.status.json': string;
         'help.option.json': string;
         'help.option.group.impact.target': string;
         'help.option.group.impact.repo': string;
@@ -493,6 +500,7 @@ export declare const cliResources: {
         'help.option.group.contracts.type': string;
         'help.option.group.contracts.repo': string;
         'help.option.group.contracts.unmatched': string;
+        'help.identityCache.environment': string;
         'help.analyze.environment': string;
     };
 };

package/dist/cli/i18n/zh-CN.d.ts

@@ -26,6 +26,8 @@ export declare const zhCN: {
     'status.indexed': string;
     'status.indexedCommit': string;
     'status.currentCommit': string;
+    'status.indexRunnerIdentity': string;
+    'status.currentRunnerIdentity': string;
     'status.branch': string;
     'status.detached': string;
     'status.workspaceIndexLabel': string;
@@ -231,6 +233,7 @@ export declare const zhCN: {
     'help.option.group.sync.exactOnly': string;
     'help.option.group.sync.allowStale': string;
     'help.option.group.sync.verbose': string;
+    'help.option.status.json': string;
     'help.option.json': string;
     'help.option.group.impact.target': string;
     'help.option.group.impact.repo': string;
@@ -244,5 +247,6 @@ export declare const zhCN: {
     'help.option.group.contracts.type': string;
     'help.option.group.contracts.repo': string;
     'help.option.group.contracts.unmatched': string;
+    'help.identityCache.environment': string;
     'help.analyze.environment': string;
 };

package/dist/cli/i18n/zh-CN.js

@@ -26,6 +26,8 @@ export const zhCN = {
     'status.indexed': '索引时间',
     'status.indexedCommit': '索引提交',
     'status.currentCommit': '当前提交',
+    'status.indexRunnerIdentity': '索引记录的分析器运行身份',
+    'status.currentRunnerIdentity': '当前分析器运行身份',
     'status.branch': '分支',
     'status.detached': '（分离 HEAD）',
     'status.workspaceIndexLabel': "工作区索引：最近在 '{{primary}}' 分支上分析（重新运行 gitnexus analyze 以跟随当前分支）",
@@ -231,6 +233,7 @@ export const zhCN = {
     'help.option.group.sync.exactOnly': '仅精确匹配',
     'help.option.group.sync.allowStale': '跳过过期索引警告',
     'help.option.group.sync.verbose': '显示每条跨仓库链接详情',
+    'help.option.status.json': '输出机器可读的索引和分析器来源信息',
     'help.option.json': 'JSON 输出',
     'help.option.group.impact.target': '要分析的符号或文件名',
     'help.option.group.impact.repo': 'group.yaml 中的成员路径（如 app/backend），不是已索引仓库名称',
@@ -244,5 +247,6 @@ export const zhCN = {
     'help.option.group.contracts.type': '按契约类型过滤',
     'help.option.group.contracts.repo': '按仓库过滤',
     'help.option.group.contracts.unmatched': '仅显示未匹配契约',
-    'help.analyze.environment': '\n环境变量：\n  GITNEXUS_NO_GITIGNORE=1   跳过 .gitignore 解析（仍读取 .gitnexusignore）\n  GITNEXUS_MAX_FILE_SIZE=N  覆盖大文件跳过阈值（KB）。默认 512，最大 32768。\n  GITNEXUS_WORKER_SUB_BATCH_TIMEOUT_MS=N  Worker 空闲超时（毫秒）。默认 30000。\n  GITNEXUS_WAL_CHECKPOINT_THRESHOLD=N  LadybugDB WAL 自动 checkpoint 阈值（字节，默认 67108864 = 64 MiB；-1 保持 Ladybug 默认约 16 MiB）。\n  GITNEXUS_WORKER_SUB_BATCH_MAX_BYTES=N  Worker 作业字节预算。默认 8388608。\n  GITNEXUS_WORKER_POOL_SIZE=N  解析 worker 数量覆盖值。默认 cores-1，最多 16。\n  GITNEXUS_PARSE_CHUNK_CONCURRENCY=N  并发进行中的解析分块数。默认 2。\n  GITNEXUS_WORKER_MAX_RESPAWNS_PER_SLOT=N  每个 slot 丢弃前允许的最大替换进程数。默认 3。\n  GITNEXUS_WORKER_MAX_CUMULATIVE_TIMEOUT_MS=N  每个作业的总重试墙钟时间。默认 5 倍子批次超时。\n  GITNEXUS_WORKER_CONSECUTIVE_FAILURE_THRESHOLD=N  每个 slot 触发熔断的死亡次数。默认 max(3, poolSize)。\n  GITNEXUS_WORKER_SHUTDOWN_DRAIN_MS=N  线程池关闭时等待仍在原生代码中的已退役 worker 的最长时间（到达安全点后再终止，避免进程级 abort）。默认 30000。\n  GITNEXUS_CPP_CAPTURE_BUDGET_MS=N  C++ 捕获提取的每文件墙钟预算；超出后该文件保留部分捕获并输出警告。默认 20000。\n  GITNEXUS_EMBEDDING_THREADS=N  限制 --embeddings 的本地 ONNX CPU 线程数。\n  GITNEXUS_SEMANTIC_EXACT_SCAN_LIMIT=N  exact-scan 回退的最大嵌入分块数。默认 10000。\n  GITNEXUS_VECTOR_MAX_DISTANCE=N  语义/向量搜索接受的最大余弦距离（0 < N <= 2；超出则钳制为 2）。MCP 默认 0.6，其他路径默认 0.5。\n\n当参数和对应环境变量同时提供时，参数优先。\n\n提示：`.gitnexusignore` 支持 `.gitignore` 风格的取反。比如添加\n     `!__tests__/` 可以索引默认自动过滤的目录（#771）。',
+    'help.identityCache.environment': '\n分析器身份缓存：\n  GITNEXUS_ANALYZER_IDENTITY_CACHE_DIR=/absolute/protected/dir\n    由操作员明确信任的持久缓存，用于跨进程快速查询状态。目录必须预先存在、位于 GitNexus 包/构建根目录之外，且路径中不得包含符号链接或 junction。缺少 POSIX 所有权 API 的平台默认保持故障关闭。',
+    'help.analyze.environment': '\n环境变量：\n  GITNEXUS_NO_GITIGNORE=1   跳过 .gitignore 解析（仍读取 .gitnexusignore）\n  GITNEXUS_MAX_FILE_SIZE=N  覆盖大文件跳过阈值（KB）。默认 512，最大 32768。\n  GITNEXUS_ANALYZER_IDENTITY_CACHE_DIR=/absolute/protected/dir  由操作员明确信任的持久分析器身份缓存；目录必须预先存在、位于包/构建根目录之外，且路径中不得包含符号链接或 junction。\n  GITNEXUS_WORKER_SUB_BATCH_TIMEOUT_MS=N  Worker 空闲超时（毫秒）。默认 30000。\n  GITNEXUS_WAL_CHECKPOINT_THRESHOLD=N  LadybugDB WAL 自动 checkpoint 阈值（字节，默认 67108864 = 64 MiB；-1 保持 Ladybug 默认约 16 MiB）。\n  GITNEXUS_WORKER_SUB_BATCH_MAX_BYTES=N  Worker 作业字节预算。默认 8388608。\n  GITNEXUS_WORKER_POOL_SIZE=N  解析 worker 数量覆盖值。默认 cores-1，最多 16。\n  GITNEXUS_PARSE_CHUNK_CONCURRENCY=N  并发进行中的解析分块数。默认 2。\n  GITNEXUS_WORKER_MAX_RESPAWNS_PER_SLOT=N  每个 slot 丢弃前允许的最大替换进程数。默认 3。\n  GITNEXUS_WORKER_MAX_CUMULATIVE_TIMEOUT_MS=N  每个作业的总重试墙钟时间。默认 5 倍子批次超时。\n  GITNEXUS_WORKER_CONSECUTIVE_FAILURE_THRESHOLD=N  每个 slot 触发熔断的死亡次数。默认 max(3, poolSize)。\n  GITNEXUS_WORKER_SHUTDOWN_DRAIN_MS=N  线程池关闭时等待仍在原生代码中的已退役 worker 的最长时间（到达安全点后再终止，避免进程级 abort）。默认 30000。\n  GITNEXUS_CPP_CAPTURE_BUDGET_MS=N  C++ 捕获提取的每文件墙钟预算；超出后该文件保留部分捕获并输出警告。默认 20000。\n  GITNEXUS_EMBEDDING_THREADS=N  限制 --embeddings 的本地 ONNX CPU 线程数。\n  GITNEXUS_SEMANTIC_EXACT_SCAN_LIMIT=N  exact-scan 回退的最大嵌入分块数。默认 10000。\n  GITNEXUS_VECTOR_MAX_DISTANCE=N  语义/向量搜索接受的最大余弦距离（0 < N <= 2；超出则钳制为 2）。MCP 默认 0.6，其他路径默认 0.5。\n\n当参数和对应环境变量同时提供时，参数优先。\n\n提示：`.gitnexusignore` 支持 `.gitignore` 风格的取反。比如添加\n     `!__tests__/` 可以索引默认自动过滤的目录（#771）。',
 };

package/dist/cli/index.js

@@ -3,7 +3,7 @@
 // Removing it from here improves MCP server startup time significantly.
 import { Command } from 'commander';
 import { createRequire } from 'node:module';
-import { createLazyAction, createLbugLazyAction } from './lazy-action.js';
+import { createAnalyzerLbugLazyAction, createLazyAction, createLbugLazyAction, } from './lazy-action.js';
 import { EMBEDDING_DIMS_ERROR, normalizeEmbeddingDims } from './embedding-dims.js';
 import { registerGroupCommands } from './group.js';
 import { localizeCliHelp } from './help-i18n.js';
@@ -119,7 +119,7 @@ program
         process.env.GITNEXUS_EMBEDDING_DIMS = dimsEnvBaseline;
     }
 })
-    .action(createLbugLazyAction(() => import('./analyze.js'), 'analyzeCommand'));
+    .action(createAnalyzerLbugLazyAction(() => import('../core/analyzer-identity.js'), () => import('./analyze.js'), 'analyzeCommandWithRunnerIdentity', import.meta.url));
 program
     .command('index [path...]')
     .description('Register an existing .gitnexus/ folder into the global registry (no re-analysis needed)')
@@ -148,6 +148,8 @@ program
 program
     .command('status')
     .description('Show index status for current repo')
+    .option('--json', 'Emit machine-readable index and analyzer provenance')
+    .addHelpText('after', () => t('help.identityCache.environment'))
     .action(createLazyAction(() => import('./status.js'), 'statusCommand'));
 program
     .command('doctor')

package/dist/cli/lazy-action.d.ts

@@ -5,3 +5,10 @@
  */
 export declare function createLazyAction<TModule extends Record<string, unknown>, TKey extends string & keyof TModule>(loader: () => Promise<TModule>, exportName: TKey): (...args: unknown[]) => Promise<void>;
 export declare function createLbugLazyAction<TModule extends Record<string, unknown>, TKey extends string & keyof TModule>(loader: () => Promise<TModule>, exportName: TKey): (...args: unknown[]) => Promise<void>;
+/**
+ * Analyze-specific lazy action. Unlike the generic LadybugDB wrapper, this
+ * captures the complete analyzer receipt before probing/loading native code or
+ * evaluating the analyzer module graph. The target export receives that start
+ * receipt as its first argument and threads it to runFullAnalysis.
+ */
+export declare function createAnalyzerLbugLazyAction<TModule extends Record<string, unknown>, TKey extends string & keyof TModule>(identityLoader: () => Promise<Pick<typeof import('../core/analyzer-identity.js'), 'captureAnalyzerIdentityBeforeLoad'>>, loader: () => Promise<TModule>, exportName: TKey, analyzerModuleUrl: string): (...args: unknown[]) => Promise<void>;

package/dist/cli/lazy-action.js

@@ -33,3 +33,30 @@ export function createLbugLazyAction(loader, exportName) {
         await action(...args);
     };
 }
+/**
+ * Analyze-specific lazy action. Unlike the generic LadybugDB wrapper, this
+ * captures the complete analyzer receipt before probing/loading native code or
+ * evaluating the analyzer module graph. The target export receives that start
+ * receipt as its first argument and threads it to runFullAnalysis.
+ */
+export function createAnalyzerLbugLazyAction(identityLoader, loader, exportName, analyzerModuleUrl) {
+    return async (...args) => {
+        const identityModule = await identityLoader();
+        const prepared = await identityModule.captureAnalyzerIdentityBeforeLoad(analyzerModuleUrl, async () => {
+            const check = checkLbugNative();
+            if (!check.ok)
+                return { check, module: null };
+            return { check, module: await loader() };
+        });
+        if (!prepared.loaded.check.ok) {
+            process.stderr.write(`\n  ${prepared.loaded.check.message?.replace(/\n/g, '\n  ')}\n\n`);
+            process.exitCode = 1;
+            return;
+        }
+        const action = prepared.loaded.module?.[exportName];
+        if (!isCallable(action)) {
+            throw new Error(`Lazy action export not found: ${exportName}`);
+        }
+        await action(prepared.runnerIdentity, ...args);
+    };
+}

package/dist/cli/setup.d.ts

@@ -37,6 +37,14 @@ interface SetupResult {
  * install paths copy this same list from hooks/claude/ (the canonical source).
  */
 export declare function copyHookHelpers(srcDir: string, destDir: string, label: string, result: SetupResult): Promise<string[]>;
+export declare const RENAMED_SKILL_DIRS: Readonly<Record<string, readonly string[]>>;
+/**
+ * Every legacy directory name superseded by a shipped rename. These no longer
+ * exist in the bundled skills/ source, but a pre-rename install left them
+ * behind in every editor target. Setup only warns about them (it cannot prove
+ * it owns the contents); uninstall's ownership-by-name contract removes them.
+ */
+export declare const LEGACY_SKILL_DIR_NAMES: readonly string[];
 export declare const setupCommand: (options?: {
     codingAgent?: string[] | string;
 }) => Promise<void>;

package/dist/cli/setup.js

@@ -22,8 +22,10 @@ const execFileAsync = promisify(execFile);
 // a config that persists in the user's editor and is invoked on every MCP
 // connect. Pinning to the installed version means subsequent invocations
 // skip the npm-registry metadata roundtrip (and stay reproducible until
-// the user upgrades). Static configs and READMEs intentionally use
-// `gitnexus@latest` since they're quickstart docs, not persisted state.
+// the user upgrades). The plugin skill mcp.json are likewise pinned and
+// re-stamped every release by scripts/sync-plugin-manifests.mjs (#2445),
+// since they too execute `gitnexus@<version>` on connect. Only the READMEs
+// stay on `gitnexus@latest` — they're quickstart docs, not executed state.
 const _require = createRequire(import.meta.url);
 const _pkg = _require('../../package.json');
 if (typeof _pkg.version !== 'string' || !_pkg.version) {
@@ -882,6 +884,16 @@ async function setupCodex(result) {
     }
 }
 // ─── Skill Installation ───────────────────────────────────────────
+export const RENAMED_SKILL_DIRS = {
+    'gitnexus-review': ['gitnexus-pr-review'],
+};
+/**
+ * Every legacy directory name superseded by a shipped rename. These no longer
+ * exist in the bundled skills/ source, but a pre-rename install left them
+ * behind in every editor target. Setup only warns about them (it cannot prove
+ * it owns the contents); uninstall's ownership-by-name contract removes them.
+ */
+export const LEGACY_SKILL_DIR_NAMES = Object.values(RENAMED_SKILL_DIRS).flat();
 /**
  * Install GitNexus skills to a target directory.
  * Each skill is installed as {targetDir}/gitnexus-{skillName}/SKILL.md
@@ -937,15 +949,25 @@ async function installSkillsTo(targetDir) {
             if (source.isDirectory) {
                 const dirSource = path.join(skillsRoot, skillName);
                 await copyDirRecursive(dirSource, skillDir);
-                installed.push(skillName);
             }
             else {
                 const flatSource = path.join(skillsRoot, `${skillName}.md`);
                 const content = await fs.readFile(flatSource, 'utf-8');
                 await fs.mkdir(skillDir, { recursive: true });
                 await fs.writeFile(path.join(skillDir, 'SKILL.md'), content, 'utf-8');
-                installed.push(skillName);
             }
+            // A directory superseded by a shipped rename is warned about, never
+            // deleted: the installer cannot prove it owns the contents (users
+            // customize installed skills or hand-write their own under these
+            // names), so an upgrade must not destroy data.
+            for (const oldName of RENAMED_SKILL_DIRS[skillName] ?? []) {
+                const legacyDir = path.join(targetDir, oldName);
+                if (await dirExists(legacyDir)) {
+                    console.log(`[gitnexus] skill "${oldName}" was renamed to "${skillName}"; ` +
+                        `left ${legacyDir} in place — delete it manually if you have not customized it.`);
+                }
+            }
+            installed.push(skillName);
         }
         catch {
             // Source skill not found — skip

package/dist/cli/standard-skills.d.ts

@@ -0,0 +1,76 @@
+export type StandardSkillDistribution = 'project' | 'npm' | 'claudePlugin' | 'cursor';
+export interface StandardSkillCatalogEntry {
+    readonly name: `gitnexus-${string}`;
+    readonly agentTableTask: string;
+    readonly fallbackDescription: string;
+    readonly distributions: Readonly<Record<StandardSkillDistribution, boolean>>;
+}
+/**
+ * Canonical metadata for the standard skills installed by `gitnexus analyze`.
+ *
+ * Keep distribution intent here so generated agent guidance and drift guards
+ * cannot disagree about which copies should exist. The ordering intentionally
+ * matches the generated AGENTS.md / CLAUDE.md task table.
+ */
+export declare const STANDARD_SKILL_CATALOG: readonly [{
+    readonly name: "gitnexus-exploring";
+    readonly agentTableTask: "Understand architecture / \"How does X work?\"";
+    readonly fallbackDescription: "Use when the user asks how code works, wants to understand architecture, trace execution flows, or explore unfamiliar parts of the codebase. Examples: \"How does X work?\", \"What calls this function?\", \"Show me the auth flow\"";
+    readonly distributions: {
+        readonly project: true;
+        readonly npm: true;
+        readonly claudePlugin: true;
+        readonly cursor: true;
+    };
+}, {
+    readonly name: "gitnexus-impact-analysis";
+    readonly agentTableTask: "Blast radius / \"What breaks if I change X?\"";
+    readonly fallbackDescription: "Use when the user wants to know what will break if they change something, or needs safety analysis before editing code. Examples: \"Is it safe to change X?\", \"What depends on this?\", \"What will break?\"";
+    readonly distributions: {
+        readonly project: true;
+        readonly npm: true;
+        readonly claudePlugin: true;
+        readonly cursor: true;
+    };
+}, {
+    readonly name: "gitnexus-debugging";
+    readonly agentTableTask: "Trace bugs / \"Why is X failing?\"";
+    readonly fallbackDescription: "Use when the user is debugging a bug, tracing an error, or asking why something fails. Examples: \"Why is X failing?\", \"Where does this error come from?\", \"Trace this bug\"";
+    readonly distributions: {
+        readonly project: true;
+        readonly npm: true;
+        readonly claudePlugin: true;
+        readonly cursor: true;
+    };
+}, {
+    readonly name: "gitnexus-refactoring";
+    readonly agentTableTask: "Rename / extract / split / refactor";
+    readonly fallbackDescription: "Use when the user wants to rename, extract, split, move, or restructure code safely. Examples: \"Rename this function\", \"Extract this into a module\", \"Refactor this class\", \"Move this to a separate file\"";
+    readonly distributions: {
+        readonly project: true;
+        readonly npm: true;
+        readonly claudePlugin: true;
+        readonly cursor: true;
+    };
+}, {
+    readonly name: "gitnexus-guide";
+    readonly agentTableTask: "Tools, resources, schema reference";
+    readonly fallbackDescription: "Use when the user asks about GitNexus itself — available tools, how to query the knowledge graph, MCP resources, graph schema, or workflow reference. Examples: \"What GitNexus tools are available?\", \"How do I use GitNexus?\"";
+    readonly distributions: {
+        readonly project: true;
+        readonly npm: true;
+        readonly claudePlugin: true;
+        readonly cursor: false;
+    };
+}, {
+    readonly name: "gitnexus-cli";
+    readonly agentTableTask: "Index, status, clean, wiki CLI commands";
+    readonly fallbackDescription: "Use when the user needs to run GitNexus CLI commands like analyze/index a repo, check status, clean the index, generate a wiki, or list indexed repos. Examples: \"Index this repo\", \"Reanalyze the codebase\", \"Generate a wiki\"";
+    readonly distributions: {
+        readonly project: true;
+        readonly npm: true;
+        readonly claudePlugin: true;
+        readonly cursor: false;
+    };
+}];
+export type StandardSkillName = (typeof STANDARD_SKILL_CATALOG)[number]['name'];