@driftless-sh/cli 0.1.44 → 0.1.46

package/dist/index.js

@@ -213426,6 +213426,65 @@ var require_nestjs_extractor = __commonJS({
         }
         return null;
       }
+      function argText(arg) {
+        if (typescript_1.default.isStringLiteralLike(arg))
+          return [arg.text];
+        if (typescript_1.default.isIdentifier(arg))
+          return [arg.text];
+        if (typescript_1.default.isObjectLiteralExpression(arg)) {
+          const out = [];
+          for (const prop of arg.properties) {
+            if (typescript_1.default.isPropertyAssignment(prop) && typescript_1.default.isIdentifier(prop.name) && prop.name.text === "path" && typescript_1.default.isStringLiteralLike(prop.initializer)) {
+              out.push(prop.initializer.text);
+            }
+          }
+          return out;
+        }
+        return [];
+      }
+      function decoratorArgsOf(decs) {
+        const map = {};
+        for (const d of decs || []) {
+          const name = getDecoratorName(d);
+          if (!name)
+            continue;
+          const args = [];
+          if (typescript_1.default.isCallExpression(d.expression)) {
+            for (const a of d.expression.arguments)
+              args.push(...argText(a));
+          }
+          if (!(name in map))
+            map[name] = args;
+        }
+        return map;
+      }
+      function moduleMetaOf(decs) {
+        for (const d of decs || []) {
+          if (getDecoratorName(d) !== "Module")
+            continue;
+          if (!typescript_1.default.isCallExpression(d.expression) || d.expression.arguments.length === 0)
+            return { imports: [], providers: [], controllers: [] };
+          const obj = d.expression.arguments[0];
+          const meta = { imports: [], providers: [], controllers: [] };
+          if (typescript_1.default.isObjectLiteralExpression(obj)) {
+            for (const prop of obj.properties) {
+              if (!typescript_1.default.isPropertyAssignment(prop) || !typescript_1.default.isIdentifier(prop.name))
+                continue;
+              const key = prop.name.text;
+              if (key !== "imports" && key !== "providers" && key !== "controllers")
+                continue;
+              if (!typescript_1.default.isArrayLiteralExpression(prop.initializer))
+                continue;
+              for (const el of prop.initializer.elements) {
+                if (typescript_1.default.isIdentifier(el))
+                  meta[key].push(el.text);
+              }
+            }
+          }
+          return meta;
+        }
+        return void 0;
+      }
       function extractTypeNode(node) {
         if (!node)
           return "unknown";
@@ -213505,6 +213564,7 @@ var require_nestjs_extractor = __commonJS({
               name: member.name.text,
               line: sourceFile.getLineAndCharacterOfPosition(member.getStart(sourceFile)).line + 1,
               decorators,
+              decoratorArgs: decoratorArgsOf(typescript_1.default.getDecorators(member)),
               params,
               returnType
             });
@@ -213554,10 +213614,13 @@ var require_nestjs_extractor = __commonJS({
               }
             }
           }
+          const classDecs = typescript_1.default.getDecorators(node);
           facts.classes.push({
             name: className,
             line: sourceFile.getLineAndCharacterOfPosition(node.getStart(sourceFile)).line + 1,
             decorators,
+            decoratorArgs: decoratorArgsOf(classDecs),
+            moduleMeta: moduleMetaOf(classDecs),
             implements: implementsList,
             constructorParams: extractConstructorParams(node),
             methods: extractMethods(node),
@@ -213594,58 +213657,16 @@ var require_nestjs_extractor = __commonJS({
       visit(sourceFile);
       return facts;
     }
-    function buildSymbolIndex(allFacts) {
-      const index = /* @__PURE__ */ new Map();
-      for (const facts of allFacts) {
-        for (const cls of facts.classes) {
-          index.set(cls.name, { filePath: facts.filePath, kind: "class", decorators: cls.decorators, implements: cls.implements });
-        }
-        for (const fn of facts.functions) {
-          index.set(fn.name, { filePath: facts.filePath, kind: "function", decorators: fn.decorators, implements: [] });
-        }
-        for (const iface of facts.interfaces) {
-          index.set(iface.name, { filePath: facts.filePath, kind: "interface", decorators: [], implements: [] });
-        }
+    function indexFileSymbols(facts, index) {
+      for (const cls of facts.classes) {
+        index.set(cls.name, { filePath: facts.filePath, kind: "class", decorators: cls.decorators, implements: cls.implements });
       }
-      return index;
-    }
-    function buildReferenceIndex(allFacts, symbolIndex) {
-      const index = /* @__PURE__ */ new Map();
-      for (const facts of allFacts) {
-        const importedNames = /* @__PURE__ */ new Map();
-        for (const imp of facts.imports) {
-          importedNames.set(imp.localName, imp.importedName);
-        }
-        for (const cls of facts.classes) {
-          for (const param of cls.constructorParams) {
-            const resolvedType = normalizeTypeName(param.type);
-            if (symbolIndex.has(resolvedType) && !isPrimitive(resolvedType)) {
-              const entries = index.get(resolvedType) || [];
-              entries.push({ filePath: facts.filePath, context: "constructor-param", ownerSymbol: cls.name });
-              index.set(resolvedType, entries);
-            }
-          }
-          for (const method of cls.methods) {
-            for (const param of method.params) {
-              const resolvedType = normalizeTypeName(param.type);
-              if (symbolIndex.has(resolvedType) && !isPrimitive(resolvedType)) {
-                const entries = index.get(resolvedType) || [];
-                entries.push({ filePath: facts.filePath, context: "method-param", ownerSymbol: `${cls.name}.${method.name}` });
-                index.set(resolvedType, entries);
-              }
-            }
-          }
-        }
-        for (const imp of facts.imports) {
-          const targetName = imp.importedName !== "default" ? imp.importedName : imp.localName;
-          if (symbolIndex.has(targetName)) {
-            const entries = index.get(targetName) || [];
-            entries.push({ filePath: facts.filePath, context: "import" });
-            index.set(targetName, entries);
-          }
-        }
+      for (const fn of facts.functions) {
+        index.set(fn.name, { filePath: facts.filePath, kind: "function", decorators: fn.decorators, implements: [] });
+      }
+      for (const iface of facts.interfaces) {
+        index.set(iface.name, { filePath: facts.filePath, kind: "interface", decorators: [], implements: [] });
       }
-      return index;
     }
     function normalizeTypeName(typeText) {
       return typeText.replace(/^typeof\s+/, "").replace(/^import\(".*"\)\./, "").replace(/<.*>$/, "").replace(/\[\]$/, "").split("|")[0].trim();
@@ -213653,15 +213674,6 @@ var require_nestjs_extractor = __commonJS({
     function isPrimitive(typeName) {
       return ["string", "number", "boolean", "object", "unknown", "any", "void", "Promise", "Date", "Array", "Record", "Partial", "Required", "Pick", "Omit", "Readonly"].includes(typeName);
     }
-    function extractModuleFromPath(filePath) {
-      const segments = filePath.split("/");
-      const srcIndex = segments.indexOf("src");
-      if (srcIndex >= 0 && srcIndex + 1 < segments.length) {
-        const next = segments[srcIndex + 1];
-        return next.replace(/\.module\.ts$/, "").replace(/\.ts$/, "");
-      }
-      return "root";
-    }
     function isInSourceDir(filePath) {
       if (filePath.includes("node_modules") || filePath.includes("/dist/"))
         return false;
@@ -213767,74 +213779,27 @@ var require_nestjs_extractor = __commonJS({
       }
       return false;
     }
-    function extractControllerPath(decorators, facts, clsName) {
-      const fullPath = node_path_1.default.join(process.cwd(), facts.filePath);
-      try {
-        const content = node_fs_1.default.readFileSync(fullPath, "utf8");
-        const match = content.match(/@Controller\s*\(\s*['"]([^'"]+)['"]\s*\)/);
-        if (match)
-          return match[1];
-      } catch {
-      }
-      return "";
+    function joinRoute(base, sub) {
+      const parts = [base, sub].map((s) => (s || "").trim().replace(/^\/+|\/+$/g, "")).filter(Boolean);
+      const joined = parts.join("/").replace(/\/{2,}/g, "/");
+      return "/" + joined;
+    }
+    function extractControllerPath(cls) {
+      return cls.decoratorArgs["Controller"]?.[0] ?? "";
     }
-    function extractEndpointPath(methodDecorators, facts, clsPath, methodName) {
+    function extractEndpointPath(method, clsPath) {
       const results = [];
-      const fullPath = node_path_1.default.join(process.cwd(), facts.filePath);
-      try {
-        const content = node_fs_1.default.readFileSync(fullPath, "utf8");
-        const lines = content.split("\n");
-        for (let i = 0; i < lines.length; i++) {
-          const line = lines[i];
-          if (line.includes(methodName) && (line.includes("(") || line.includes(":"))) {
-            for (let j = i - 1; j >= Math.max(0, i - 10); j--) {
-              const decoratorLine = lines[j].trim();
-              for (const [decoratorName, httpMethod] of Object.entries(HTTP_METHODS)) {
-                const match = decoratorLine.match(new RegExp(`@${decoratorName}\\s*\\(\\s*['"]([^'"]+)['"]\\s*\\)`));
-                if (match) {
-                  results.push({ method: httpMethod, path: clsPath + match[1] });
-                } else if (decoratorLine.match(new RegExp(`@${decoratorName}\\s*\\(\\s*\\)`)) || decoratorLine.match(new RegExp(`@${decoratorName}$`))) {
-                  results.push({ method: httpMethod, path: clsPath || "/" });
-                }
-              }
-            }
-            break;
-          }
-        }
-      } catch {
-        for (const dec of methodDecorators) {
-          const httpMethod = HTTP_METHODS[dec];
-          if (httpMethod) {
-            results.push({ method: httpMethod, path: clsPath || "/" });
-          }
-        }
+      for (const dec of method.decorators) {
+        const httpMethod = HTTP_METHODS[dec];
+        if (!httpMethod)
+          continue;
+        const sub = method.decoratorArgs[dec]?.[0] ?? "";
+        results.push({ method: httpMethod, path: joinRoute(clsPath, sub) });
       }
-      return results.length > 0 ? results : methodDecorators.map((d) => HTTP_METHODS[d]).filter(Boolean).map((m) => ({ method: m, path: clsPath || "/" }));
+      return results;
     }
-    function extractGuardsFromMethod(facts, methodName) {
-      const guards = [];
-      const fullPath = node_path_1.default.join(process.cwd(), facts.filePath);
-      try {
-        const content = node_fs_1.default.readFileSync(fullPath, "utf8");
-        const lines = content.split("\n");
-        for (let i = 0; i < lines.length; i++) {
-          const line = lines[i];
-          if (line.includes(methodName) && (line.includes("(") || line.includes(":"))) {
-            for (let j = i - 1; j >= Math.max(0, i - 10); j--) {
-              const decoratorLine = lines[j].trim();
-              const useGuardsMatch = decoratorLine.match(/@UseGuards\s*\((.+)\)/);
-              if (useGuardsMatch) {
-                const guardNames = useGuardsMatch[1].match(/[A-Z]\w*Guard/g);
-                if (guardNames)
-                  guards.push(...guardNames);
-              }
-            }
-            break;
-          }
-        }
-      } catch {
-      }
-      return guards;
+    function extractGuardsFromMethod(method) {
+      return (method.decoratorArgs["UseGuards"] ?? []).filter((g) => /^[A-Z]\w*$/.test(g));
     }
     function extractEndpointParams(method) {
       const params = [];
@@ -213871,35 +213836,48 @@ var require_nestjs_extractor = __commonJS({
         };
       });
     }
+    function stamp(c, confidence) {
+      c.metadata.evidence = { file: c.file_path, line: c.line_number };
+      c.metadata.confidence = confidence;
+      for (const r of c.relations)
+        if (r.confidence === void 0)
+          r.confidence = 1;
+      return c;
+    }
     function extractNestJS(rootPath) {
       const components = [];
-      const files = discoverFiles(rootPath);
+      const files = discoverFiles(rootPath).filter((f) => isInSourceDir(node_path_1.default.relative(rootPath, f))).sort();
       if (files.length === 0)
         return components;
-      const allFacts = [];
+      const symbolIndex = /* @__PURE__ */ new Map();
+      const moduleByDir = /* @__PURE__ */ new Map();
       for (const file of files) {
-        const relative = node_path_1.default.relative(rootPath, file);
-        if (!isInSourceDir(relative))
-          continue;
         const facts = parseFile(file, rootPath);
-        if (facts)
-          allFacts.push(facts);
+        if (!facts)
+          continue;
+        indexFileSymbols(facts, symbolIndex);
+        for (const cls of facts.classes) {
+          if (cls.decorators.includes("Module")) {
+            moduleByDir.set(node_path_1.default.dirname(facts.filePath), cls.name);
+          }
+        }
       }
-      const symbolIndex = buildSymbolIndex(allFacts);
-      const referenceIndex = buildReferenceIndex(allFacts, symbolIndex);
       const guardNames = /* @__PURE__ */ new Set();
-      for (const facts of allFacts) {
+      for (const file of files) {
+        const facts = parseFile(file, rootPath);
+        if (!facts)
+          continue;
         for (const cls of facts.classes) {
           const { decorators, name: className, line, constructorParams, methods, properties, implements: implementsList } = cls;
           if (decorators.includes("Controller")) {
             const controllerName = className || "UnknownController";
-            const controllerPath = extractControllerPath(decorators, facts, controllerName);
-            const moduleName = findModuleName(facts.filePath, allFacts);
+            const controllerPath = extractControllerPath(cls);
+            const moduleName = moduleByDir.get(node_path_1.default.dirname(facts.filePath)) ?? null;
             for (const method of methods) {
-              const endpointDecorators = extractEndpointPath(method.decorators, facts, controllerPath, method.name);
+              const endpointDecorators = extractEndpointPath(method, controllerPath);
               if (endpointDecorators.length === 0)
                 continue;
-              const methodGuards = extractGuardsFromMethod(facts, method.name);
+              const methodGuards = extractGuardsFromMethod(method);
               methodGuards.forEach((g) => guardNames.add(g));
               const { params, bodyDto, return_type } = extractEndpointParams(method);
               const paramInfos = params.filter((p) => p.source === "param");
@@ -213919,7 +213897,7 @@ var require_nestjs_extractor = __commonJS({
               }
               for (const { method: httpMethod, path: p } of endpointDecorators) {
                 const fullPath = p.replace(/\/\//g, "/") || "/";
-                components.push({
+                components.push(stamp({
                   type: "endpoint",
                   name: `${controllerName}.${method.name}`,
                   file_path: facts.filePath,
@@ -213935,7 +213913,7 @@ var require_nestjs_extractor = __commonJS({
                     return_type: return_type || void 0
                   },
                   relations: relationGuards
-                });
+                }, 1));
               }
             }
             const controllerRelations = [];
@@ -213950,7 +213928,7 @@ var require_nestjs_extractor = __commonJS({
                 });
               }
             }
-            components.push({
+            components.push(stamp({
               type: "controller",
               name: controllerName,
               file_path: facts.filePath,
@@ -213960,7 +213938,7 @@ var require_nestjs_extractor = __commonJS({
                 module_name: moduleName || void 0
               },
               relations: dedupeRelations(controllerRelations)
-            });
+            }, 1));
           }
           if (decorators.includes("Injectable")) {
             const serviceRelations = [];
@@ -213975,28 +213953,28 @@ var require_nestjs_extractor = __commonJS({
                 });
               }
             }
-            components.push({
+            components.push(stamp({
               type: "service",
               name: className || "UnknownService",
               file_path: facts.filePath,
               line_number: line,
               metadata: {},
               relations: dedupeRelations(serviceRelations)
-            });
+            }, 1));
           }
           if (decorators.includes("Module")) {
-            components.push({
+            components.push(stamp({
               type: "module",
               name: className || "UnknownModule",
               file_path: facts.filePath,
               line_number: line,
               metadata: {},
-              relations: extractModuleRelations(facts, cls, symbolIndex)
-            });
+              relations: extractModuleRelations(cls, symbolIndex)
+            }, 1));
           }
           if (className.endsWith("Guard") && !decorators.includes("Controller")) {
             guardNames.add(className);
-            components.push({
+            components.push(stamp({
               type: "guard",
               name: className,
               file_path: facts.filePath,
@@ -214005,11 +213983,12 @@ var require_nestjs_extractor = __commonJS({
                 implements_can_activate: implementsList.includes("CanActivate") ? true : void 0
               },
               relations: []
-            });
+            }, 0.7));
           }
           if (isDTOClass(className, decorators, properties)) {
             const dtoFields = extractDTOFields(properties);
-            components.push({
+            const dtoConfidence = dtoFields.some((f) => f.validations.length > 0) ? 0.9 : 0.6;
+            components.push(stamp({
               type: "dto",
               name: className,
               file_path: facts.filePath,
@@ -214018,7 +213997,7 @@ var require_nestjs_extractor = __commonJS({
                 dto_fields: dtoFields.length > 0 ? dtoFields : void 0
               },
               relations: []
-            });
+            }, dtoConfidence));
           }
         }
       }
@@ -214035,94 +214014,28 @@ var require_nestjs_extractor = __commonJS({
           }
         }
       }
-      enrichWithReferenceIndex(components, referenceIndex);
       return components;
     }
-    function extractModuleRelations(facts, cls, symbolIndex) {
+    function extractModuleRelations(cls, symbolIndex) {
+      const meta = cls.moduleMeta;
+      if (!meta)
+        return [];
       const relations = [];
-      const fullPath = node_path_1.default.join(process.cwd(), facts.filePath);
-      try {
-        const content = node_fs_1.default.readFileSync(fullPath, "utf8");
-        const importsMatch = content.match(/imports\s*:\s*\[([\s\S]*?)\]/);
-        if (importsMatch) {
-          const names = importsMatch[1].match(/[A-Z]\w*/g) || [];
-          for (const name of names) {
-            const entry = symbolIndex.get(name);
-            relations.push({
-              type: "module_imports",
-              target_name: name,
-              target_file: entry?.filePath || ""
-            });
-          }
-        }
-        const providersMatch = content.match(/providers\s*:\s*\[([\s\S]*?)\]/);
-        if (providersMatch) {
-          const names = providersMatch[1].match(/[A-Z]\w*/g) || [];
-          for (const name of names) {
-            const entry = symbolIndex.get(name);
-            relations.push({
-              type: "declares_provider",
-              target_name: name,
-              target_file: entry?.filePath || ""
-            });
-          }
-        }
-        const controllersMatch = content.match(/controllers\s*:\s*\[([\s\S]*?)\]/);
-        if (controllersMatch) {
-          const names = controllersMatch[1].match(/[A-Z]\w*/g) || [];
-          for (const name of names) {
-            const entry = symbolIndex.get(name);
-            relations.push({
-              type: "declares_provider",
-              target_name: name,
-              target_file: entry?.filePath || ""
-            });
-          }
-        }
-      } catch {
-      }
-      return dedupeRelations(relations);
-    }
-    function findModuleName(filePath, allFacts) {
-      const dir = node_path_1.default.dirname(filePath);
-      for (const facts of allFacts) {
-        const factsDir = node_path_1.default.dirname(facts.filePath);
-        if (factsDir === dir) {
-          for (const cls of facts.classes) {
-            if (cls.decorators.includes("Module")) {
-              return cls.name;
-            }
-          }
-        }
+      for (const name of meta.imports) {
+        relations.push({
+          type: "module_imports",
+          target_name: name,
+          target_file: symbolIndex.get(name)?.filePath || ""
+        });
       }
-      return null;
-    }
-    function enrichWithReferenceIndex(components, referenceIndex) {
-      for (const comp of components) {
-        if (comp.type !== "service" && comp.type !== "controller" && comp.type !== "guard" && comp.type !== "dto")
-          continue;
-        const refs = referenceIndex.get(comp.name) || [];
-        const usedByModules = /* @__PURE__ */ new Set();
-        for (const ref of refs) {
-          if (!isInSourceDir(ref.filePath))
-            continue;
-          if (ref.filePath === comp.file_path)
-            continue;
-          const refModule = extractModuleFromPath(ref.filePath);
-          if (refModule && refModule !== "root") {
-            usedByModules.add(refModule);
-          }
-        }
-        if (usedByModules.size > 0) {
-          for (const mod of usedByModules) {
-            comp.relations.push({
-              type: "depends_on",
-              target_name: mod,
-              target_file: `src/${mod}/`
-            });
-          }
-        }
+      for (const name of [...meta.providers, ...meta.controllers]) {
+        relations.push({
+          type: "declares_provider",
+          target_name: name,
+          target_file: symbolIndex.get(name)?.filePath || ""
+        });
       }
+      return dedupeRelations(relations);
     }
     function dedupeRelations(relations) {
       const seen = /* @__PURE__ */ new Set();
@@ -214538,6 +214451,11 @@ var AGENTS_BLOCK = `
 Before touching files:
   driftless context load --files "<files you're about to edit>"
 
+Understand the code graph before changing it (deterministic, no LLM):
+  driftless graph file <path>            # entrypoints, upstream, downstream, contracts
+  driftless graph impact --files "a,b"   # blast radius \u2014 what this change can break
+  Add --json for machine-readable output, --depth N (1-6) to widen traversal.
+
 Before pushing:
   driftless scan --diff
 
@@ -214642,7 +214560,7 @@ async function installSkillCommand() {
 // src/commands/init.ts
 function getVersion() {
   try {
-    return "0.1.44";
+    return "0.1.46";
   } catch {
     return "0.0.0";
   }
@@ -215062,8 +214980,23 @@ async function initCommand(args) {
     step("uploading baseline", "failed (continuing)");
   }
   if (components.length > 0) {
+    const CHUNK_THRESHOLD = 2e3;
+    const CHUNK_SIZE = 1e3;
     try {
-      await api.post(`/workspaces/${workspaceSlug}/repos/${repo.id}/components`, { components });
+      if (components.length <= CHUNK_THRESHOLD) {
+        await api.post(`/workspaces/${workspaceSlug}/repos/${repo.id}/components`, {
+          schema_version: 2,
+          components
+        });
+      } else {
+        for (let i = 0; i < components.length; i += CHUNK_SIZE) {
+          await api.post(`/workspaces/${workspaceSlug}/repos/${repo.id}/components`, {
+            schema_version: 2,
+            replace: i === 0,
+            components: components.slice(i, i + CHUNK_SIZE)
+          });
+        }
+      }
       step("uploading components", `${components.length} components \xB7 ${relationCount} relations \u2713`);
     } catch {
       step("uploading components", "failed (continuing)");
@@ -216634,8 +216567,109 @@ function pad2(s, n) {
   return s + " ".repeat(n - s.length);
 }
 
+// src/commands/graph.ts
+init_api_client();
+function emitJSON4(data) {
+  console.log(JSON.stringify(data, null, 2));
+}
+async function graphCommand(args) {
+  if (!isGitRepo()) {
+    console.error("Error: not a git repository.");
+    process.exit(1);
+  }
+  const sub = args[0];
+  const isJSON = args.includes("--json");
+  const depthIdx = args.indexOf("--depth");
+  const depth = depthIdx !== -1 && args[depthIdx + 1] ? `&depth=${encodeURIComponent(args[depthIdx + 1])}` : "";
+  if (sub !== "file" && sub !== "impact") {
+    console.error('Usage:\n  driftless graph file <path> [--depth N] [--json]\n  driftless graph impact --files "a,b" [--depth N] [--json]');
+    process.exit(1);
+  }
+  const resolution = await resolveRepo();
+  if (!resolution.ok) {
+    if (resolution.reason === "not_linked") {
+      console.error(notLinkedMessage(resolution.remote, resolution.workspaceSlug));
+    } else {
+      console.error("Error: could not resolve workspace. Run `driftless doctor`.");
+    }
+    process.exit(1);
+  }
+  const { workspaceSlug, repoId } = resolution;
+  const base = `/workspaces/${workspaceSlug}/repos/${repoId}/graph`;
+  try {
+    if (sub === "file") {
+      const path = args[1];
+      if (!path || path.startsWith("--")) {
+        console.error("Usage: driftless graph file <path>");
+        process.exit(1);
+      }
+      const g2 = await api.get(`${base}/file?path=${encodeURIComponent(path)}${depth}`);
+      if (isJSON) {
+        emitJSON4(g2);
+        process.exit(0);
+      }
+      if (!g2.found) {
+        console.log(`No scanned components for ${path}. Run \`driftless init\` (or --src for monorepos).`);
+        process.exit(0);
+      }
+      const header = g2.file && g2.file !== g2.query_path ? `\u258C ${path}  \u2192  ${g2.file}` : `\u258C ${path}`;
+      console.log(`${header}
+`);
+      if (g2.entrypoints.length) {
+        console.log("entrypoints (routes that reach this):");
+        for (const e of g2.entrypoints) {
+          const guards = e.guards && e.guards.length ? `  [${e.guards.join(", ")}]` : "";
+          console.log(`  ${e.method ?? "?"} ${e.path ?? "?"}  \u2192 ${e.handler}${guards}`);
+        }
+        console.log("");
+      }
+      console.log(`upstream   (${g2.upstream.length}): ${g2.upstream.slice(0, 12).join(", ")}${g2.upstream.length > 12 ? " \u2026" : ""}`);
+      console.log(`downstream (${g2.downstream.length}): ${g2.downstream.slice(0, 12).join(", ")}${g2.downstream.length > 12 ? " \u2026" : ""}`);
+      if (g2.contracts.length) console.log(`contracts  (${g2.contracts.length}): ${g2.contracts.join(", ")}`);
+      process.exit(0);
+    }
+    const filesIdx = args.indexOf("--files");
+    const filesCsv = filesIdx !== -1 ? args[filesIdx + 1] : "";
+    if (!filesCsv) {
+      console.error('Usage: driftless graph impact --files "a,b"');
+      process.exit(1);
+    }
+    const dirIdx = args.indexOf("--direction");
+    const dir = dirIdx !== -1 && args[dirIdx + 1] ? `&direction=${encodeURIComponent(args[dirIdx + 1])}` : "";
+    const g = await api.get(`${base}/impact?files=${encodeURIComponent(filesCsv)}${depth}${dir}`);
+    if (isJSON) {
+      emitJSON4(g);
+      process.exit(0);
+    }
+    if (!g.found) {
+      console.log("No scanned components for those files. Run `driftless init`.");
+      process.exit(0);
+    }
+    const consumers = g.impacted_consumers ?? [];
+    const eps = g.impacted_entrypoints ?? [];
+    console.log(`Blast radius of ${g.files.length} file(s) \u2014 what can BREAK if you change them:
+`);
+    console.log(`  ${consumers.length} consumer component(s) across ${g.impacted_files.length} file(s)`);
+    if (eps.length) {
+      console.log(`  ${eps.length} reachable endpoint(s):`);
+      for (const e of eps.slice(0, 15)) console.log(`    ${e.method ?? "?"} ${e.path ?? "?"}  \u2192 ${e.handler}`);
+      if (eps.length > 15) console.log(`    \u2026 and ${eps.length - 15} more`);
+    }
+    console.log("");
+    for (const f of g.impacted_files.slice(0, 25)) console.log(`  ${f}`);
+    if (g.impacted_files.length > 25) console.log(`  \u2026 and ${g.impacted_files.length - 25} more`);
+    if ((g.depends_on ?? []).length) console.log(`
+(depends_on: ${g.depends_on.length} downstream \u2014 use --direction both for detail)`);
+    process.exit(0);
+  } catch (e) {
+    console.error(`graph failed: ${formatError(e)}`);
+    console.error("Run `driftless doctor` to diagnose.");
+    process.exit(1);
+  }
+}
+
 // src/index.ts
-var VERSION = "0.1.44";
+var VERSION = "0.1.46";
 var HELP_TEXT = `Driftless CLI v${VERSION} \u2014 Living repo context for humans and coding agents
 
 Install:  npm install -g @driftless-sh/cli
@@ -216664,6 +216698,7 @@ Commands:
   context           Live repo context (topics, search, anchors)
   install-skill     Install AGENTS.md into current repo
   doctor            Check environment health (auth, API, git, workspace, repo, baseline)
+  graph             Deterministic code graph: graph file <path> \xB7 graph impact --files "a,b"
 
 Context subcommands:
   list [flags]                  List context topics
@@ -216835,6 +216870,22 @@ Exits 1 if any check fails.
 
 Example:
   driftless doctor
+`,
+    graph: `driftless graph <subcommand>
+
+Deterministic code graph from the scanned components (no LLM).
+
+Subcommands:
+  file <path>            Entrypoints, upstream, downstream, contracts for a file
+  impact --files "a,b"   Blast radius: components/files a change can break
+
+Flags:
+  --depth N    Traversal depth (1-6, default 3)
+  --json       Machine-readable output (agents/CI)
+
+Examples:
+  driftless graph file src/roulette/roulette.service.ts
+  driftless graph impact --files "src/auth/auth.guard.ts" --json
 `
   };
   if (help[cmd]) {
@@ -216896,6 +216947,13 @@ async function main() {
         await doctorCommand(args.slice(1));
       }
       break;
+    case "graph":
+      if (args[1] === "--help") {
+        showCommandHelp("graph");
+      } else {
+        await graphCommand(args.slice(1));
+      }
+      break;
     case "help":
       if (args[1]) {
         showCommandHelp(args[1]);