gitnexus 1.6.13-rc.14 → 1.6.13-rc.16

package/dist/cli/analyze-config.d.ts

@@ -27,6 +27,8 @@
  * documented precedence). Conflicting *aliases at the same level* (e.g. both
  * `defaultBranch` and `branch`) are rejected.
  */
+import { sanitizeDetectedBranch } from '../core/git-ref.js';
+export { sanitizeDetectedBranch };
 import type { AnalyzeOptions } from './analyze-options.js';
 export declare const GITNEXUS_RC_FILENAME = ".gitnexusrc";
 /** Final fallback when no branch is configured or detectable. */
@@ -45,12 +47,6 @@ export declare class GitNexusRcError extends Error {
  * `core/git-ref.ts`; this wrapper keeps the CLI / `.gitnexusrc` error type.
  */
 export declare function validateBranchName(value: string, source: string): string;
-/**
- * Best-effort validation for an auto-detected branch (from git). Never throws —
- * returns `undefined` for anything unusable so the resolver falls back to the
- * next precedence tier.
- */
-export declare function sanitizeDetectedBranch(value: string | null | undefined): string | undefined;
 /**
  * Locate, read, parse, validate, and normalize `.gitnexusrc` at `repoRoot`.
  *

package/dist/cli/analyze-config.js

@@ -30,7 +30,8 @@
 import fs from 'node:fs';
 import path from 'node:path';
 import { readRepoControlFile } from '../config/repo-control-file.js';
-import { InvalidBranchError, validateBranchName as validateBranchNameCore, } from '../core/git-ref.js';
+import { InvalidBranchError, sanitizeDetectedBranch, validateBranchName as validateBranchNameCore, } from '../core/git-ref.js';
+export { sanitizeDetectedBranch };
 export const GITNEXUS_RC_FILENAME = '.gitnexusrc';
 /** Final fallback when no branch is configured or detectable. */
 export const DEFAULT_BRANCH_FALLBACK = 'main';
@@ -139,21 +140,6 @@ export function validateBranchName(value, source) {
         throw err;
     }
 }
-/**
- * Best-effort validation for an auto-detected branch (from git). Never throws —
- * returns `undefined` for anything unusable so the resolver falls back to the
- * next precedence tier.
- */
-export function sanitizeDetectedBranch(value) {
-    if (!value)
-        return undefined;
-    try {
-        return validateBranchName(value, 'detected branch');
-    }
-    catch {
-        return undefined;
-    }
-}
 const normalizeValue = (kind, value, key) => {
     const source = `${GITNEXUS_RC_FILENAME} "${key}"`;
     switch (kind) {

package/dist/core/git-ref.d.ts

@@ -1,10 +1,10 @@
 /**
  * Git ref-name validation used by both the CLI and the HTTP analyze route.
  *
- * Lives in `core/` so `server/api.ts` does not import `cli/analyze-config`
- * (that import closed a cli → server → cli cycle: `cli/serve.ts` already
- * imports `createServer`). The CLI keeps a thin wrapper that rethrows
- * {@link InvalidBranchError} as `GitNexusRcError`.
+ * Lives in `core/` so `server/api.ts` and `run-analyze.ts` do not import
+ * `cli/analyze-config` (that import closed a cli → server → cli cycle:
+ * `cli/serve.ts` already imports `createServer`). The CLI keeps a thin
+ * wrapper that rethrows {@link InvalidBranchError} as `GitNexusRcError`.
  */
 /**
  * Thrown when a user-supplied branch name fails {@link validateBranchName}.
@@ -20,3 +20,21 @@ export declare class InvalidBranchError extends Error {
  * branches use (`feature/foo-bar`, `release/1.2`, `develop`).
  */
 export declare function validateBranchName(value: string, source: string): string;
+/**
+ * Best-effort validation for an auto-detected branch (from git). Returns the
+ * trimmed name, or `undefined` for anything unusable so callers fall back to
+ * the next precedence tier or leave the index unlabeled. Swallows
+ * {@link InvalidBranchError} only; unexpected errors are rethrown.
+ */
+export declare function sanitizeDetectedBranch(value: string | null | undefined): string | undefined;
+/**
+ * Render a rejected checkout name for `onLog`. Hidden / bidi / control code
+ * points become `\uXXXX` so a git-legal U+202E name cannot reverse the
+ * warning in a terminal. C1 controls (U+0080–U+009F, including NEL U+0085)
+ * and remaining Unicode whitespace (`/\s/` — NBSP, U+2028/U+2029, ideographic
+ * space, etc.) are not all in {@link isHiddenOrControl}; escape them the same
+ * way so the ASCII escape survives `stripControlCharacters` and the warning
+ * stays one line. ASCII `"` is escaped; other characters (including backticks)
+ * stay visible.
+ */
+export declare function formatRejectedBranchForLog(value: string): string;

package/dist/core/git-ref.js

@@ -1,10 +1,10 @@
 /**
  * Git ref-name validation used by both the CLI and the HTTP analyze route.
  *
- * Lives in `core/` so `server/api.ts` does not import `cli/analyze-config`
- * (that import closed a cli → server → cli cycle: `cli/serve.ts` already
- * imports `createServer`). The CLI keeps a thin wrapper that rethrows
- * {@link InvalidBranchError} as `GitNexusRcError`.
+ * Lives in `core/` so `server/api.ts` and `run-analyze.ts` do not import
+ * `cli/analyze-config` (that import closed a cli → server → cli cycle:
+ * `cli/serve.ts` already imports `createServer`). The CLI keeps a thin
+ * wrapper that rethrows {@link InvalidBranchError} as `GitNexusRcError`.
  */
 /** Git refs longer than this are almost certainly a mistake / injection attempt. */
 const BRANCH_MAX_LENGTH = 255;
@@ -112,3 +112,48 @@ export function validateBranchName(value, source) {
     }
     return trimmed;
 }
+/**
+ * Best-effort validation for an auto-detected branch (from git). Returns the
+ * trimmed name, or `undefined` for anything unusable so callers fall back to
+ * the next precedence tier or leave the index unlabeled. Swallows
+ * {@link InvalidBranchError} only; unexpected errors are rethrown.
+ */
+export function sanitizeDetectedBranch(value) {
+    if (!value)
+        return undefined;
+    try {
+        return validateBranchName(value, 'detected branch');
+    }
+    catch (err) {
+        if (err instanceof InvalidBranchError)
+            return undefined;
+        throw err;
+    }
+}
+/**
+ * Render a rejected checkout name for `onLog`. Hidden / bidi / control code
+ * points become `\uXXXX` so a git-legal U+202E name cannot reverse the
+ * warning in a terminal. C1 controls (U+0080–U+009F, including NEL U+0085)
+ * and remaining Unicode whitespace (`/\s/` — NBSP, U+2028/U+2029, ideographic
+ * space, etc.) are not all in {@link isHiddenOrControl}; escape them the same
+ * way so the ASCII escape survives `stripControlCharacters` and the warning
+ * stays one line. ASCII `"` is escaped; other characters (including backticks)
+ * stay visible.
+ */
+export function formatRejectedBranchForLog(value) {
+    const shouldEscapeRejectedBranchChar = (cp, ch) => isHiddenOrControl(cp) || (cp >= 0x80 && cp <= 0x9f) || /\s/.test(ch);
+    let out = '';
+    for (const ch of value) {
+        const cp = ch.codePointAt(0);
+        if (cp !== undefined && shouldEscapeRejectedBranchChar(cp, ch)) {
+            out += `\\u${cp.toString(16).padStart(4, '0')}`;
+            continue;
+        }
+        if (ch === '"') {
+            out += '\\"';
+            continue;
+        }
+        out += ch;
+    }
+    return out;
+}

package/dist/core/run-analyze.js

@@ -61,7 +61,7 @@ import { isGitNexusManagedPath } from '../storage/gitnexus-managed-paths.js';
 import { getMaxFileSizeBytes } from './ingestion/utils/max-file-size.js';
 import { cacheRowCount, discardScopedEmbeddingSpills, disposeEmbeddingSpill, withEmbeddingSpillScope, emptyCachedEmbeddingsSnapshot, EmbeddingSpillReader, materializeCachedEmbeddings, normalizeCachedEmbeddings, snapshotEmbeddingDims, } from './embeddings/embedding-restore-spill.js';
 import { generateAIContextFiles } from '../cli/ai-context.js';
-import { sanitizeDetectedBranch } from '../cli/analyze-config.js';
+import { formatRejectedBranchForLog, sanitizeDetectedBranch } from './git-ref.js';
 import { EMBEDDING_TABLE_NAME, EMBEDDING_DIMS, STALE_HASH_SENTINEL, SCHEMA_FINGERPRINT, schemaFingerprintMismatch, isSchemaFingerprintShaped, embeddingDimsMismatch, } from './lbug/schema.js';
 import { isSpringBeanCandidateSourceFile } from './ingestion/frameworks/spring/bean-catalog.js';
 import { isSpringBeanFactoryDeclaration } from './ingestion/frameworks/spring/bean-factories.js';
@@ -544,9 +544,11 @@ async function resolveWriteTarget(repoPath, options) {
     // validated (#2106 R1): a git ref the branch-name rules forbid becomes `null`
     // → the flat slot, matching that a later `--branch <that-ref>` query would
     // also be rejected. A normal ref round-trips index-time/query-time labels.
-    const checkedOutBranch = repoHasGit
-        ? (sanitizeDetectedBranch(getCurrentBranch(repoPath)) ?? null)
-        : null;
+    // Keep the raw rejected name so `runFullAnalysis` can warn once after the
+    // lock settles. Detached / non-git / empty detect stay `null` here and silent.
+    const rawDetectedBranch = repoHasGit ? getCurrentBranch(repoPath) : null;
+    const checkedOutBranch = sanitizeDetectedBranch(rawDetectedBranch) ?? null;
+    const rejectedDetectedBranch = rawDetectedBranch != null && checkedOutBranch === null ? rawDetectedBranch : null;
     // Analyze indexes the working tree, not an arbitrary ref. An explicit
     // `--branch X` while a DIFFERENT branch Y is checked out would write Y's
     // content into X's slot, corrupting X (#2106). Refuse the mismatch. Detached
@@ -565,6 +567,7 @@ async function resolveWriteTarget(repoPath, options) {
         repoHasGit,
         currentCommit,
         checkedOutBranch,
+        rejectedDetectedBranch,
         branchLabel,
         placement,
         lbugPath,
@@ -655,6 +658,9 @@ export async function runFullAnalysis(repoPath, options, callbacks, runnerIdenti
                     log('Index write target still moving after repeated re-acquire; proceeding on this lock.');
                 }
             }
+            if (writeTarget.rejectedDetectedBranch) {
+                log(`Warning: checkout "${formatRejectedBranchForLog(writeTarget.rejectedDetectedBranch)}" is not a usable index label; continuing.`);
+            }
             return await runFullAnalysisInner(repoPath, options, callbacks, writeTarget, contentRetention, runnerIdentityAtBootstrap);
         }
         finally {

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "gitnexus",
-  "version": "1.6.13-rc.14",
+  "version": "1.6.13-rc.16",
   "description": "Graph-powered code intelligence for AI agents. Index any codebase, query via MCP or CLI.",
   "author": "Abhigyan Patwari",
   "license": "PolyForm-Noncommercial-1.0.0",

package/web/assets/{abnfDiagram-PAR5IXJI-CZ6gSCu8.js → abnfDiagram-PAR5IXJI-BbkO1pGM.js}

@@ -1 +1 @@
-import{t as e}from"./chunk-AQ6EADP3-CZhslHi-.js";import{q as t}from"./chunk-H7VHZCWX-DeYY8PhK.js";import"./chunk-QJSWEUOL-Z1JC3KaI.js";import"./index-CWGAaOYl.js";import{n,r,t as i}from"./chunk-SLDQ463B-ChYDDwtn.js";import{t as a}from"./chunk-JQRUD6KW-Dbva2Z17.js";import{M as o,b as s}from"./chunk-ZUNWM646-DK-0GkFY.js";var c=s().RailroadAbnf.parser.LangiumParser,l=e(e=>{let t=e.alternatives.map(u);return t.length===1?t[0]:{type:`choice`,alternatives:t}},`transformAlternation`),u=e(e=>{let t=e.elements.map(f);return t.length===1?t[0]:{type:`sequence`,elements:t}},`transformConcatenation`),d=e(e=>{if(e.includes(`*`)){let[t,n]=e.split(`*`);return{min:t?parseInt(t,10):0,max:n?parseInt(n,10):1/0}}let t=parseInt(e,10);return{min:t,max:t}},`parseRepeat`),f=e(e=>{let t=p(e.primary);if(!e.repeat)return t;let{min:n,max:r}=d(e.repeat);return n===0&&r===1?{type:`optional`,element:t}:{type:`repetition`,element:t,min:n,max:r}},`transformElement`),p=e(e=>{switch(e.$type){case`AbnfStringLiteral`:return{type:`terminal`,value:e.value};case`AbnfNumVal`:return{type:`terminal`,value:e.value};case`AbnfRuleName`:return{type:`nonterminal`,name:e.name};case`AbnfGroup`:return l(e.element);case`AbnfOptionalGroup`:return{type:`optional`,element:l(e.element)};default:throw Error(`Unsupported ABNF primary node: ${e.$type}`)}},`transformPrimary`),m=e(e=>({name:e.name,definition:l(e.definition)}),`transformRule`),h=e(e=>{a(e,r),e.title&&r.setTitle(e.title),e.rules.map(e=>r.addRule(m(e)))},`populateDb`),g={parser:{parse:e(e=>{r.clear(),t.debug(`[ABNF Parser] Starting Langium parse`);let n=c.parse(e);if(n.lexerErrors.length>0||n.parserErrors.length>0)throw new o(n);let i=n.value;t.debug(`[ABNF Parser] Parsed rules:`,i.rules.length),h(i),t.debug(`[ABNF Parser] Parse complete`)},`parse`),parser:{yy:r}},db:r,renderer:n,styles:i};export{g as diagram};
+import{t as e}from"./chunk-AQ6EADP3-CZhslHi-.js";import{q as t}from"./chunk-H7VHZCWX-DeYY8PhK.js";import"./chunk-QJSWEUOL-Z1JC3KaI.js";import"./index-C7HdBqix.js";import{n,r,t as i}from"./chunk-SLDQ463B-BV20g0Ip.js";import{t as a}from"./chunk-JQRUD6KW-Dbva2Z17.js";import{M as o,b as s}from"./chunk-ZUNWM646-DK-0GkFY.js";var c=s().RailroadAbnf.parser.LangiumParser,l=e(e=>{let t=e.alternatives.map(u);return t.length===1?t[0]:{type:`choice`,alternatives:t}},`transformAlternation`),u=e(e=>{let t=e.elements.map(f);return t.length===1?t[0]:{type:`sequence`,elements:t}},`transformConcatenation`),d=e(e=>{if(e.includes(`*`)){let[t,n]=e.split(`*`);return{min:t?parseInt(t,10):0,max:n?parseInt(n,10):1/0}}let t=parseInt(e,10);return{min:t,max:t}},`parseRepeat`),f=e(e=>{let t=p(e.primary);if(!e.repeat)return t;let{min:n,max:r}=d(e.repeat);return n===0&&r===1?{type:`optional`,element:t}:{type:`repetition`,element:t,min:n,max:r}},`transformElement`),p=e(e=>{switch(e.$type){case`AbnfStringLiteral`:return{type:`terminal`,value:e.value};case`AbnfNumVal`:return{type:`terminal`,value:e.value};case`AbnfRuleName`:return{type:`nonterminal`,name:e.name};case`AbnfGroup`:return l(e.element);case`AbnfOptionalGroup`:return{type:`optional`,element:l(e.element)};default:throw Error(`Unsupported ABNF primary node: ${e.$type}`)}},`transformPrimary`),m=e(e=>({name:e.name,definition:l(e.definition)}),`transformRule`),h=e(e=>{a(e,r),e.title&&r.setTitle(e.title),e.rules.map(e=>r.addRule(m(e)))},`populateDb`),g={parser:{parse:e(e=>{r.clear(),t.debug(`[ABNF Parser] Starting Langium parse`);let n=c.parse(e);if(n.lexerErrors.length>0||n.parserErrors.length>0)throw new o(n);let i=n.value;t.debug(`[ABNF Parser] Parsed rules:`,i.rules.length),h(i),t.debug(`[ABNF Parser] Parse complete`)},`parse`),parser:{yy:r}},db:r,renderer:n,styles:i};export{g as diagram};