nexarch 0.12.27 → 0.12.28

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -75,6 +75,11 @@ function normalizeRepoUrl(raw) {
75
75
  if (u.protocol === "http:" || u.protocol === "https:") {
76
76
  u.hash = "";
77
77
  u.search = "";
78
+ // Strip embedded credentials (https://user:token@host/...) -- a repo
79
+ // remote URL is provenance data displayed/persisted elsewhere in the
80
+ // graph, never a place to carry a secret through.
81
+ u.username = "";
82
+ u.password = "";
78
83
  u.pathname = u.pathname.replace(/\.git$/i, "");
79
84
  return u.toString().replace(/\/$/, "");
80
85
  }
@@ -1426,7 +1431,7 @@ export async function initProject(args) {
1426
1431
  const nowIso = new Date().toISOString();
1427
1432
  const repoRef = repoRefOverride ?? detectedRepo?.rawRef ?? dir;
1428
1433
  const repoPath = repoPathOverride ?? dir;
1429
- const repoUrl = repoUrlOverride ?? detectedRepo?.url ?? null;
1434
+ const repoUrl = (repoUrlOverride ? normalizeRepoUrl(repoUrlOverride) ?? repoUrlOverride : null) ?? detectedRepo?.url ?? null;
1430
1435
  const sourceVcsType = detectedRepo?.vcsType ?? "unknown";
1431
1436
  const sourceProvider = detectedRepo?.provider ?? "unknown";
1432
1437
  if (projectConstruct && isMonorepo && (applicationRefOverride || forceCreateApplication) && !asJson) {
package/package.json CHANGED
@@ -1,6 +1,6 @@
1
1
  {
2
2
  "name": "nexarch",
3
- "version": "0.12.27",
3
+ "version": "0.12.28",
4
4
  "description": "Your architecture workspace for AI delivery.",
5
5
  "keywords": [
6
6
  "nexarch",