git-graphable 0.5.0__tar.gz → 0.6.0__tar.gz

{git_graphable-0.5.0 → git_graphable-0.6.0}/.github/workflows/ci.yml

@@ -34,8 +34,21 @@ jobs:
       - name: Run checks
         run: just check
 
+      - name: Generate Coverage Badge
+        run: |
+          if [ -f "htmlcov/index.html" ]; then
+            COVERAGE=$(grep -oP 'pc_cov">\d+%' htmlcov/index.html | head -1 | grep -oP '\d+')
+            echo "{\"schemaVersion\": 1, \"label\": \"coverage\", \"message\": \"$COVERAGE%\", \"color\": \"brightgreen\"}" > coverage.json
+          fi
+
       - name: Git Graph Reports
         uses: ./
         with:
           production_branch: 'main'
           output_dir: 'git-graph-reports'
+
+      - name: Copy Coverage to Reports
+        run: |
+          if [ -f "coverage.json" ]; then
+            cp coverage.json git-graph-reports/
+          fi

git_graphable-0.6.0/.github/workflows/pages.yml

@@ -0,0 +1,65 @@
+name: Deploy Demos to Pages
+
+on:
+  push:
+    branches: [ main ]
+  workflow_dispatch:
+
+permissions:
+  contents: read
+  pages: write
+  id-token: write
+
+jobs:
+  deploy:
+    environment:
+      name: github-pages
+      url: ${{ steps.deployment.outputs.page_url }}
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+
+      - name: Setup uv
+        uses: astral-sh/setup-uv@v5
+        with:
+          enable-cache: true
+
+      - name: Install dependencies
+        run: uv sync --all-extras
+
+      - name: Install just
+        uses: extractions/setup-just@v3
+
+      - name: Generate Demos
+        run: uv run python examples/publish_demos.py
+
+      - name: Generate Coverage Badge
+        run: |
+          just coverage
+          if [ -f "htmlcov/index.html" ]; then
+            COVERAGE=$(grep -oP 'pc_cov">\d+%' htmlcov/index.html | head -1 | grep -oP '\d+')
+            echo "{\"schemaVersion\": 1, \"label\": \"coverage\", \"message\": \"$COVERAGE%\", \"color\": \"brightgreen\"}" > demo-site/coverage.json
+          fi
+
+      - name: Generate Hygiene Badge
+        run: |
+          uv run git-graphable analyze . --bare --hygiene-output hygiene.json --output -
+          SCORE=$(grep -oP '"score": \d+' hygiene.json | grep -oP '\d+')
+          GRADE=$(grep -oP '"grade": "[^"]+"' hygiene.json | cut -d'"' -f4)
+          COLOR=$(grep -oP '"color": "[^"]+"' hygiene.json | cut -d'"' -f4)
+          echo "{\"schemaVersion\": 1, \"label\": \"hygiene\", \"message\": \"$SCORE% ($GRADE)\", \"color\": \"$COLOR\"}" > demo-site/hygiene_badge.json
+
+      - name: Setup Pages
+        uses: actions/configure-pages@v4
+
+      - name: Upload artifact
+        uses: actions/upload-pages-artifact@v3
+        with:
+          path: 'demo-site'
+
+      - name: Deploy to GitHub Pages
+        id: deployment
+        uses: actions/deploy-pages@v4

{git_graphable-0.5.0 → git_graphable-0.6.0}/.gitignore

@@ -39,6 +39,7 @@ pip-delete-this-directory.txt
 # Unit test / coverage reports
 htmlcov/
 htmlrep/
+report_output/
 .pytest_worker_jsons/
 .tox/
 .nox/
@@ -134,3 +135,4 @@ cython_debug/
 demo-site/
 examples/repos/
 examples/assets/
+graph.html

{git_graphable-0.5.0 → git_graphable-0.6.0}/CHANGELOG.md

@@ -2,6 +2,43 @@
 
 All notable changes to this project will be documented in this file.
 
+## [0.6.0] - 2026-03-06
+
+### Added
+- **Native GitLab Support**: Added support for GitLab Merge Requests and Issues using the `glab` CLI.
+- **Pull Request Provider Abstraction**: Introduced a new `PullRequestProvider` interface, decoupling PR status logic from GitHub.
+    - Added `GitHubPullRequestProvider` (default) using the `gh` CLI.
+    - Added `ScriptPullRequestProvider` for custom script-based PR status lookups.
+- **Configuration Trust Mechanism**: Introduced a security layer for local repository configurations.
+    - Added `--trust` CLI flag to explicitly trust automatically loaded `.git-graphable.toml` or `pyproject.toml` files.
+    - Users are now warned when executing custom scripts from untrusted configurations.
+- **Dynamic Project Badges**:
+    - Added automated generation of Shields.io-compatible JSON badges for **Git Hygiene** and **Code Coverage**.
+    - Updated `README.md` to display live status from GitHub Pages.
+    - Added `--hygiene-output <path>` to CLI for machine-readable (JSON) hygiene summaries.
+- **Improved Automatic Visualization**:
+    - Restored the behavior of automatically opening a graph if no output path is provided.
+    - Changed default automatic visualization export format from SVG to **PNG** for broader compatibility.
+- **Modular Architecture Refactor**: Substantially reorganized the codebase into specialized sub-packages for better maintainability:
+    - `src/git_graphable/prs/`: Modular PR providers.
+    - `src/git_graphable/issues/`: Modular issue tracker engines.
+    - `src/git_graphable/highlights/`: Specialized highlighting logic (visual, hygiene, external).
+    - `src/git_graphable/styling/`: Specialized styling logic per visualization engine.
+- **Enhanced Issue Scripting**: `ScriptIssueEngine` now supports robust JSON output from scripts (with legacy CSV fallback).
+- **Project Governance**: Added official **MIT License** to the repository.
+- **Reorganized Test Suite**: Refactored tests into a modular structure mirroring the source code, including a global `conftest.py` for shared fixtures.
+
+### Fixed
+- **Comprehensive Security Hardening**: 
+    - Protected against argument injection in `git clone`, `glab`, `gh`, and `git rev-list` commands using the `--` separator.
+    - Resolved potential path traversal and SSRF risks in Jira issue lookups by properly URL-encoding IDs.
+    - Corrected argument passing logic for `git log` limits.
+- **Mermaid Parser Reliability**: Fixed parsing errors in Mermaid graphs by substituting sensitive characters (brackets and parentheses) with visually similar full-width Unicode characters.
+- **CI Stability**: Fixed CI failures in GitHub Pages deployment by preventing automatic visualization triggers during badge generation.
+- **Naming Collisions**: Resolved pytest module collision issues by adding `__init__.py` files to test directories.
+- **Code Maintenance**: Updated `.gitignore` to prevent tracking of build artifacts and coverage data.
+
+
 ## [0.5.0] - 2026-03-06
 
 ### Added

git_graphable-0.6.0/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 Richard West
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

{git_graphable-0.5.0 → git_graphable-0.6.0}/PKG-INFO

@@ -1,12 +1,14 @@
 Metadata-Version: 2.4
 Name: git-graphable
-Version: 0.5.0
+Version: 0.6.0
 Summary: A powerful Git history visualizer and hygiene linter with CI gating.
 Project-URL: Homepage, https://github.com/TheTrueSCU/git-graphable
 Project-URL: Issues, https://github.com/TheTrueSCU/git-graphable/issues
 Project-URL: Repository, https://github.com/TheTrueSCU/git-graphable
 Author-email: Richard West <dopplereffect.us@gmail.com>
-Keywords: analysis,automation,ci,cytoscape,d2,git,git-flow,github,github-actions,graph,html,hygiene,interactive,lint,mermaid,topology,visualization
+License-Expression: MIT
+License-File: LICENSE
+Keywords: analysis,automation,badges,ci,cytoscape,d2,devops,git,git-flow,github,github-actions,gitlab,graph,html,hygiene,interactive,jira,lint,mermaid,metrics,topology,visualization
 Requires-Python: >=3.13
 Requires-Dist: graphable>=0.6.0
 Provides-Extra: cli
@@ -16,6 +18,12 @@ Description-Content-Type: text/markdown
 
 # Git Graphable
 
+[![CI](https://github.com/TheTrueSCU/git-graphable/actions/workflows/ci.yml/badge.svg)](https://github.com/TheTrueSCU/git-graphable/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Coverage](https://img.shields.io/endpoint?url=https://thetruescu.github.io/git-graphable/coverage.json)](https://thetruescu.github.io/git-graphable/)
+[![Hygiene](https://img.shields.io/endpoint?url=https://thetruescu.github.io/git-graphable/hygiene_badge.json)](https://thetruescu.github.io/git-graphable/)
+
+
 A powerful Python tool to convert Git commit history into beautiful, interactive flowcharts using the `graphable` library. Supporting Mermaid, D2, Graphviz, and HTML.
 
 ## Git Plugin Support
@@ -31,18 +39,13 @@ Check out the tool in action with our **[Live Interactive Demos](https://thetrue
 ## Features
 
 - **Multi-Engine Support**: Export to Mermaid (.mmd), D2 (.d2), Graphviz (.dot), or HTML (.html).
-- **Automatic Visualization**: Generates and opens an image (SVG/PNG) automatically if no output is specified.
+- **Automatic Visualization**: Generates and opens an image (PNG) automatically if no output is specified.
 - **Advanced Highlighting**: Visualize author patterns, topological distance, and specific merge paths.
-- **GitHub Integration**: Highlight commits based on pull request status (Merged, Open, Closed, Draft) using the `gh` CLI.
+- **VCS Integration**: Highlight commits based on pull request/merge request status using `gh` (GitHub) or `glab` (GitLab) CLIs.
 - **Hygiene Analysis**: Automatically detect WIP commits, direct pushes to protected branches, squashed PRs, back-merges, and contributor silos.
-- **Issue Tracker Integration**: Connect to Jira, GitHub Issues, or custom scripts to highlight status desyncs.
-- **Release & Assignment Validation**: Verify that "Released" tickets are actually tagged in Git and that commit authors match ticket assignees.
-- **Health Scoring**: Get a numeric "Hygiene Score" (0-100%) with a color-coded grade and detailed breakdown of workflow anti-patterns.
-- **Visual Customization**: Fully customize colors, widths, and line styles for nodes and edges. See [STYLING.md](STYLING.md).
-- **Configurable Penalties**: Fully customize the scoring logic by adjusting penalties and caps for each metric.
-- **CI Gating**: Use the `--check` flag to return a non-zero exit code if the hygiene score falls below a threshold (configurable via `--min-score`).
-- **Flexible Input**: Works with local repository paths or remote Git URLs.
-- **Dual CLI**: Modern Rich/Typer interface with a robust argparse fallback for bare environments.
+- **Issue Tracker Integration**: Connect to Jira, GitHub Issues, GitLab Issues, or custom scripts to highlight status desyncs.
+- **Security First**: Configuration trust mechanism ensures custom scripts only run from trusted sources (use `--trust` to authorize local configs).
+- **Dynamic Badges**: Host live Shields.io badges for Git Hygiene and Code Coverage on GitHub Pages.
 
 ## Installation
 
@@ -86,7 +89,7 @@ jobs:
           fetch-depth: 0 # Required to see full history
 
       - name: Generate Git Graph Reports
-        uses: TheTrueSCU/git-graphable@v0.5.0
+        uses: TheTrueSCU/git-graphable@v0.6.0
         with:
           production_branch: 'main'
           output_dir: 'reports'
@@ -125,7 +128,7 @@ Git Graphable provides several ways to highlight commits and relationships. Mult
 | Option | Target | Effect | Conflicts With |
 | :--- | :--- | :--- | :--- |
 | `--highlight-authors` | **Fill** | Unique color per author | PR Status, Distance, Stale |
-| `--highlight-pr-status` | **Fill/Stroke**| Color by PR state (Merged=Purple, Open=Green) | Authors, Distance, Stale |
+| `--highlight-pr-status` | **Fill/Stroke**| Color by PR/MR state (Merged=Purple, Open=Green) | Authors, Distance, Stale |
 | `--highlight-distance-from` | **Fill** | Blue gradient fading by distance | Authors, PR Status, Stale |
 | `--highlight-stale` | **Fill** | Gradient white to red by age | Authors, PR Status, Distance |
 | `--highlight-path` | **Edge** | Thick Orange edge connecting nodes | None |

{git_graphable-0.5.0 → git_graphable-0.6.0}/README.md

@@ -1,5 +1,11 @@
 # Git Graphable
 
+[![CI](https://github.com/TheTrueSCU/git-graphable/actions/workflows/ci.yml/badge.svg)](https://github.com/TheTrueSCU/git-graphable/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT)
+[![Coverage](https://img.shields.io/endpoint?url=https://thetruescu.github.io/git-graphable/coverage.json)](https://thetruescu.github.io/git-graphable/)
+[![Hygiene](https://img.shields.io/endpoint?url=https://thetruescu.github.io/git-graphable/hygiene_badge.json)](https://thetruescu.github.io/git-graphable/)
+
+
 A powerful Python tool to convert Git commit history into beautiful, interactive flowcharts using the `graphable` library. Supporting Mermaid, D2, Graphviz, and HTML.
 
 ## Git Plugin Support
@@ -15,18 +21,13 @@ Check out the tool in action with our **[Live Interactive Demos](https://thetrue
 ## Features
 
 - **Multi-Engine Support**: Export to Mermaid (.mmd), D2 (.d2), Graphviz (.dot), or HTML (.html).
-- **Automatic Visualization**: Generates and opens an image (SVG/PNG) automatically if no output is specified.
+- **Automatic Visualization**: Generates and opens an image (PNG) automatically if no output is specified.
 - **Advanced Highlighting**: Visualize author patterns, topological distance, and specific merge paths.
-- **GitHub Integration**: Highlight commits based on pull request status (Merged, Open, Closed, Draft) using the `gh` CLI.
+- **VCS Integration**: Highlight commits based on pull request/merge request status using `gh` (GitHub) or `glab` (GitLab) CLIs.
 - **Hygiene Analysis**: Automatically detect WIP commits, direct pushes to protected branches, squashed PRs, back-merges, and contributor silos.
-- **Issue Tracker Integration**: Connect to Jira, GitHub Issues, or custom scripts to highlight status desyncs.
-- **Release & Assignment Validation**: Verify that "Released" tickets are actually tagged in Git and that commit authors match ticket assignees.
-- **Health Scoring**: Get a numeric "Hygiene Score" (0-100%) with a color-coded grade and detailed breakdown of workflow anti-patterns.
-- **Visual Customization**: Fully customize colors, widths, and line styles for nodes and edges. See [STYLING.md](STYLING.md).
-- **Configurable Penalties**: Fully customize the scoring logic by adjusting penalties and caps for each metric.
-- **CI Gating**: Use the `--check` flag to return a non-zero exit code if the hygiene score falls below a threshold (configurable via `--min-score`).
-- **Flexible Input**: Works with local repository paths or remote Git URLs.
-- **Dual CLI**: Modern Rich/Typer interface with a robust argparse fallback for bare environments.
+- **Issue Tracker Integration**: Connect to Jira, GitHub Issues, GitLab Issues, or custom scripts to highlight status desyncs.
+- **Security First**: Configuration trust mechanism ensures custom scripts only run from trusted sources (use `--trust` to authorize local configs).
+- **Dynamic Badges**: Host live Shields.io badges for Git Hygiene and Code Coverage on GitHub Pages.
 
 ## Installation
 
@@ -70,7 +71,7 @@ jobs:
           fetch-depth: 0 # Required to see full history
 
       - name: Generate Git Graph Reports
-        uses: TheTrueSCU/git-graphable@v0.5.0
+        uses: TheTrueSCU/git-graphable@v0.6.0
         with:
           production_branch: 'main'
           output_dir: 'reports'
@@ -109,7 +110,7 @@ Git Graphable provides several ways to highlight commits and relationships. Mult
 | Option | Target | Effect | Conflicts With |
 | :--- | :--- | :--- | :--- |
 | `--highlight-authors` | **Fill** | Unique color per author | PR Status, Distance, Stale |
-| `--highlight-pr-status` | **Fill/Stroke**| Color by PR state (Merged=Purple, Open=Green) | Authors, Distance, Stale |
+| `--highlight-pr-status` | **Fill/Stroke**| Color by PR/MR state (Merged=Purple, Open=Green) | Authors, Distance, Stale |
 | `--highlight-distance-from` | **Fill** | Blue gradient fading by distance | Authors, PR Status, Stale |
 | `--highlight-stale` | **Fill** | Gradient white to red by age | Authors, PR Status, Distance |
 | `--highlight-path` | **Edge** | Thick Orange edge connecting nodes | None |

{git_graphable-0.5.0 → git_graphable-0.6.0}/USAGE.md

@@ -50,7 +50,9 @@ Analyze git history and generate a graph. This is the default command; if no com
 * `--highlight-long-running`: Highlight long-running branches
 * `--long-running-days INTEGER`: Threshold in days for long-running branches
 * `--long-running-base TEXT`: Base branch for long-running analysis
-* `--highlight-pr-status`: Highlight commits based on GitHub PR status
+* `--highlight-pr-status`: Highlight commits based on PR status (GitHub or GitLab)
+* `--pr-provider [github|gitlab|script]`: Provider to fetch PR statuses (default: github)
+* `--pr-script TEXT`: Path to a script that returns PR data in JSON format
 * `--highlight-wip`: Highlight WIP/TODO commits
 * `--wip-keyword TEXT`: Additional keyword to trigger WIP highlighting
 * `--highlight-direct-pushes`: Highlight non-merge commits on protected branches
@@ -61,7 +63,7 @@ Analyze git history and generate a graph. This is the default command; if no com
 * `--silo-author-count INTEGER`: Author count threshold for silo detection
 * `--highlight-issue-inconsistencies`: Highlight mismatches between Git and Issue Tracker
 * `--issue-pattern TEXT`: Regex pattern to extract issue IDs
-* `--issue-engine [github|jira|script]`: Engine to fetch issue statuses
+* `--issue-engine [github|gitlab|jira|script]`: Engine to fetch issue statuses
 * `--jira-url TEXT`: Base URL for Jira instance
 * `--issue-script TEXT`: Shell command template for script engine
 * `--highlight-release-inconsistencies`: Highlight issues marked Released but not tagged
@@ -74,6 +76,8 @@ Analyze git history and generate a graph. This is the default command; if no com
 * `--check`: Exit with non-zero if hygiene score is below threshold
 * `--min-score INTEGER`: Minimum hygiene score required for --check
 * `--bare`: Force bare mode (no rich output)
+* `--hygiene-output TEXT`: Path to save hygiene summary as JSON.
+* `--trust`: Trust configuration files (.git-graphable.toml, pyproject.toml) found in the repository. Required to execute custom scripts from these sources.
 * `--help`: Show this message and exit.
 
 ---

{git_graphable-0.5.0 → git_graphable-0.6.0}/action.yml

@@ -52,15 +52,26 @@ runs:
       shell: bash
       run: mkdir -p ${{ inputs.output_dir }}
 
-    - name: Generate Simplified Graph (Mermaid)
+    - name: Generate Simplified Graph (Mermaid) and Hygiene Stats
       shell: bash
       run: |
-        ARGS="--production-branch ${{ inputs.production_branch }} --simplify --engine mermaid -o ${{ inputs.output_dir }}/summary.mmd"
+        ARGS="--production-branch ${{ inputs.production_branch }} --simplify --engine mermaid -o ${{ inputs.output_dir }}/summary.mmd --hygiene-output ${{ inputs.output_dir }}/hygiene.json"
         if [ -n "${{ inputs.issue_engine }}" ]; then ARGS="$ARGS --issue-engine ${{ inputs.issue_engine }}"; fi
         uv tool run git-graphable --bare ${{ inputs.path }} $ARGS
       env:
         GITHUB_TOKEN: ${{ inputs.github_token }}
 
+    - name: Generate Hygiene Badge Data
+      shell: bash
+      run: |
+        if [ -f "${{ inputs.output_dir }}/hygiene.json" ]; then
+          SCORE=$(grep -oP '"score": \d+' ${{ inputs.output_dir }}/hygiene.json | grep -oP '\d+')
+          GRADE=$(grep -oP '"grade": "[^"]+"' ${{ inputs.output_dir }}/hygiene.json | cut -d'"' -f4)
+          COLOR=$(grep -oP '"color": "[^"]+"' ${{ inputs.output_dir }}/hygiene.json | cut -d'"' -f4)
+          # Shields.io JSON endpoint format
+          echo "{\"schemaVersion\": 1, \"label\": \"hygiene\", \"message\": \"$SCORE% ($GRADE)\", \"color\": \"$COLOR\"}" > ${{ inputs.output_dir }}/hygiene_badge.json
+        fi
+
     - name: Generate Full Interactive Graph (HTML)
       shell: bash
       run: |

{git_graphable-0.5.0 → git_graphable-0.6.0}/pyproject.toml

@@ -9,26 +9,32 @@ description = "A powerful Git history visualizer and hygiene linter with CI gati
 keywords = [
     "analysis",
     "automation",
+    "badges",
     "ci",
     "cytoscape",
     "d2",
+    "devops",
     "git",
     "git-flow",
     "github",
     "github-actions",
+    "gitlab",
     "graph",
     "html",
     "hygiene",
     "interactive",
+    "jira",
     "lint",
     "mermaid",
+    "metrics",
     "topology",
     "visualization",
 ]
+license = "MIT"
 name = "git-graphable"
 readme = "README.md"
 requires-python = ">=3.13"
-version = "0.5.0"
+version = "0.6.0"
 
 [project.optional-dependencies]
 cli = [

{git_graphable-0.5.0 → git_graphable-0.6.0}/src/git_graphable/bare_cli.py

@@ -38,7 +38,7 @@ def run_bare_cli():
             default="mermaid",
             help="Visualization engine (mermaid, graphviz, d2, html)",
         )
-        p.add_argument("-o", "--output", default="-", help="Output file path")
+        p.add_argument("-o", "--output", default=None, help="Output file path")
         p.add_argument(
             "--image",
             action="store_true",
@@ -156,6 +156,15 @@ def run_bare_cli():
             help="Exit with non-zero if hygiene score is below threshold",
         )
         p.add_argument("--min-score", type=int, help="Minimum score for --check")
+        p.add_argument(
+            "--hygiene-output",
+            help="Path to save hygiene summary as JSON",
+        )
+        p.add_argument(
+            "--trust",
+            action="store_true",
+            help="Trust configuration files found in the repository",
+        )
         p.add_argument(
             "--penalty",
             action="append",
@@ -287,8 +296,11 @@ def run_bare_cli():
         else {},
         "theme": parse_style_overrides(args.style) if args.style else {},
         "min_hygiene_score": args.min_score,
+        "hygiene_output": args.hygiene_output,
+        "trust": args.trust,
     }
 
+
     try:
         results = convert_command(
             args.path,
@@ -303,7 +315,14 @@ def run_bare_cli():
             print(results["content"])
 
         if results.get("summary"):
+            import json
+
             hygiene = results["summary"].get("Hygiene Score", {})
+
+            if args.hygiene_output:
+                with open(args.hygiene_output, "w") as f:
+                    json.dump(hygiene, f, indent=2)
+
             print("\n--- Git Hygiene Summary ---")
             print(
                 f"Overall Score: {hygiene.get('score', 0)}% ({hygiene.get('grade', 'F')})"

{git_graphable-0.5.0 → git_graphable-0.6.0}/src/git_graphable/commands.py

@@ -11,7 +11,7 @@ from .styler import export_graph
 def get_extension(engine: Engine, as_image: bool) -> str:
     """Get file extension for the given engine and export type."""
     if as_image:
-        return ".svg"  # Default to SVG for images
+        return ".png"  # Default to PNG for images
 
     extensions = {
         Engine.MERMAID: ".mmd",
@@ -83,7 +83,9 @@ def load_config(
     # 4. pyproject.toml in the repo
 
     # Try to find a config file if not explicitly provided
+    is_trusted = True
     if not config_path:
+        is_trusted = False
         possible_paths = [
             os.path.join(path, ".git-graphable.toml"),
             os.path.join(path, "pyproject.toml"),
@@ -96,6 +98,7 @@ def load_config(
     base_config = GitLogConfig()
     if config_path and os.path.exists(config_path):
         base_config = GitLogConfig.from_toml(config_path)
+        base_config.trusted = is_trusted
 
     return base_config.merge(cli_overrides)
 
@@ -108,7 +111,7 @@ def ensure_local_repo(path: str) -> tuple[str, Optional[tempfile.TemporaryDirect
         try:
             # Clone bare repo for speed and less disk space
             subprocess.run(
-                ["git", "clone", "--bare", path, temp_dir.name],
+                ["git", "clone", "--bare", "--", path, temp_dir.name],
                 check=True,
                 capture_output=True,
             )

{git_graphable-0.5.0 → git_graphable-0.6.0}/src/git_graphable/core.py

@@ -193,6 +193,8 @@ class GitLogConfig:
     longevity_threshold_days: int = (
         14  # Max diff between Issue created and first commit
     )
+    trusted: bool = True  # True if explicitly provided via CLI or from a trusted source
+    trust: bool = False  # CLI override to force trust
     hygiene_weights: HygieneWeights = field(default_factory=HygieneWeights)
     theme: ThemeConfig = field(default_factory=ThemeConfig)
 
@@ -297,6 +299,9 @@ class GitLogConfig:
                 else:
                     setattr(new_config, key, value)
 
+        if new_config.trust:
+            new_config.trusted = True
+
         return new_config
 
 

git_graphable-0.6.0/src/git_graphable/github.py

@@ -0,0 +1,25 @@
+"""
+Backward compatibility shim for github-related PR logic.
+"""
+
+from typing import Dict, List
+
+from .prs.base import PullRequestInfo
+from .prs.github import GitHubPullRequestProvider
+
+
+def get_repo_prs(repo_path: str) -> List[PullRequestInfo]:
+    """Backward compatible helper."""
+    return GitHubPullRequestProvider().get_repo_prs(repo_path)
+
+
+def map_prs_to_commits(prs: List[PullRequestInfo]) -> Dict[str, PullRequestInfo]:
+    """Backward compatible helper."""
+    # We use an instance here to access the base method
+    from .prs.base import PullRequestProvider
+
+    class Shim(PullRequestProvider):
+        def get_repo_prs(self, repo_path: str):
+            return []
+
+    return Shim().map_prs_to_commits(prs)

git_graphable-0.6.0/src/git_graphable/highlighter.py

@@ -0,0 +1,7 @@
+"""
+Main entry point for applying highlights to Git commits.
+"""
+
+from .highlights.core import apply_highlights
+
+__all__ = ["apply_highlights"]

git_graphable-0.6.0/src/git_graphable/highlights/core.py

@@ -0,0 +1,59 @@
+"""
+Core highlights application logic.
+"""
+
+from typing import Optional
+
+from graphable import Graph
+
+from ..core import Engine, GitCommit, GitLogConfig
+from .external import (
+    _apply_issue_highlights,
+    _apply_pr_highlights,
+    _apply_release_highlights,
+    _apply_squash_highlights,
+)
+from .hygiene import (
+    _apply_back_merge_highlights,
+    _apply_direct_push_highlights,
+    _apply_divergence_highlights,
+    _apply_long_running_highlights,
+    _apply_orphan_highlights,
+    _apply_silo_highlights,
+    _apply_stale_highlights,
+    _apply_wip_highlights,
+)
+from .visual import (
+    _apply_author_highlights,
+    _apply_critical_highlights,
+    _apply_distance_highlights,
+    _apply_path_highlights,
+)
+
+
+def apply_highlights(
+    graph: Graph[GitCommit], config: GitLogConfig, repo_path: Optional[str] = None
+):
+    """Apply highlighting tags based on configuration."""
+    is_html = config.engine == Engine.HTML
+
+    # We now always apply hygiene tags so the summary/score is stable.
+    # The 'force=True' ensures tags are added to nodes.
+    # The CLI flags now only control the VISUAL highlighting (color: tags).
+
+    _apply_pr_highlights(graph, config, repo_path, force=True)
+    _apply_author_highlights(graph, config, force=is_html)
+    _apply_critical_highlights(graph, config, force=True)
+    _apply_distance_highlights(graph, config, force=is_html)
+    _apply_path_highlights(graph, config)
+    _apply_divergence_highlights(graph, config, force=True)
+    _apply_orphan_highlights(graph, config, force=True)
+    _apply_stale_highlights(graph, config, force=True)
+    _apply_long_running_highlights(graph, config, force=True)
+    _apply_wip_highlights(graph, config, force=True)
+    _apply_direct_push_highlights(graph, config, force=True)
+    _apply_squash_highlights(graph, config, repo_path, force=True)
+    _apply_back_merge_highlights(graph, config, force=True)
+    _apply_silo_highlights(graph, config, force=True)
+    _apply_issue_highlights(graph, config, repo_path, force=True)
+    _apply_release_highlights(graph, config, repo_path, force=True)