@ogygie/mcp 0.9.0 → 0.10.1

package/dist/mcp.js

@@ -618,6 +618,7 @@ var ListSpecsInput = { repo: RepoIdSchema, status: SpecStatusSchema.optional() }
 var ReadSpecInput = { repo: RepoIdSchema, id: SpecIdSchema };
 var ReadDecisionsInput = { repo: RepoIdSchema, decision: DecisionIdSchema.optional() };
 var ReadGovernanceInput = { repo: RepoIdSchema, file: GovernanceFileSchema };
+var ImpactInput = { repo: RepoIdSchema, feature: FeatureNameSchema2 };
 var ReadFeatureInput = {
   repo: RepoIdSchema,
   feature: FeatureNameSchema2,
@@ -805,46 +806,365 @@ function extractDecisionSection(decisionsMarkdown, decisionId) {
   return start === -1 ? null : trimTrailingBlanks(lines.slice(start));
 }
 
+// ../ogygie-core/src/impact.ts
+import { z as z6 } from "zod";
+
 // ../ogygie-core/src/manifest-owners.ts
 var ADVANCEMENT = ["skeleton", "in-progress", "delivered"];
 function specIdOf(specPath) {
   return (specPath.split("/").pop() ?? specPath).replace(/\.spec\.md$/, "");
 }
-function findSpecOwner(manifest, specId) {
-  const feature = manifest.features.find((candidate) => candidate.name === specId);
-  if (feature !== void 0) {
+function declaredEntries(manifest) {
+  const entries = [];
+  for (const feature of manifest.features) {
     const owningApp = feature.app === void 0 ? manifest.apps.find((app) => app.type === "api") : manifest.apps.find((app) => app.name === feature.app);
-    return {
+    entries.push({
       kind: "feature",
       name: feature.name,
       status: feature.status,
-      folder: owningApp === void 0 ? null : `${owningApp.path}/${feature.folder}`
-    };
+      folder: owningApp === void 0 ? null : `${owningApp.path}/${feature.folder}`,
+      specId: feature.name,
+      appType: owningApp?.type ?? null
+    });
   }
-  const productPackage = (manifest.packages ?? []).find(
-    (candidate) => candidate.name === specId
-  );
-  if (productPackage !== void 0) {
-    return {
+  for (const productPackage of manifest.packages ?? []) {
+    entries.push({
       kind: "package",
       name: productPackage.name,
       status: productPackage.status,
-      folder: productPackage.path
-    };
+      folder: productPackage.path,
+      specId: productPackage.name,
+      appType: null
+    });
   }
-  const frameworkPackages = (manifest.framework?.packages ?? []).filter(
-    (candidate) => candidate.spec !== null && specIdOf(candidate.spec) === specId
-  );
-  const leastAdvanced = frameworkPackages.slice().sort((a, b) => ADVANCEMENT.indexOf(a.status) - ADVANCEMENT.indexOf(b.status))[0];
-  if (leastAdvanced !== void 0) {
-    return {
+  for (const frameworkPackage of manifest.framework?.packages ?? []) {
+    entries.push({
       kind: "framework-package",
-      name: leastAdvanced.name,
-      status: leastAdvanced.status,
-      folder: leastAdvanced.path
-    };
+      name: frameworkPackage.name,
+      status: frameworkPackage.status,
+      folder: frameworkPackage.path,
+      // A published npm name is not a spec id: the link is DECLARED.
+      specId: frameworkPackage.spec === null ? null : specIdOf(frameworkPackage.spec),
+      appType: null
+    });
+  }
+  return entries;
+}
+function findSpecOwner(manifest, specId) {
+  const owning = declaredEntries(manifest).filter((entry) => entry.specId === specId);
+  if (owning.length === 0) return void 0;
+  const byPriority = owning.slice().sort((left, right) => {
+    if (left.kind !== right.kind) {
+      const order = ["feature", "package", "framework-package"];
+      return order.indexOf(left.kind) - order.indexOf(right.kind);
+    }
+    return ADVANCEMENT.indexOf(left.status) - ADVANCEMENT.indexOf(right.status);
+  });
+  const owner = byPriority[0];
+  if (owner === void 0) return void 0;
+  return { kind: owner.kind, name: owner.name, status: owner.status, folder: owner.folder };
+}
+
+// ../ogygie-core/src/module-purity.ts
+var IMPORT_STATEMENT = /\bimport\b(?![.(])([\s\S]*?)from\s*["']([^"']+)["']|\bimport\s+["']([^"']+)["']/g;
+var DYNAMIC_LOAD = /\b(?:import\s*\(|require\s*\()\s*["']([^"']+)["']/g;
+var REEXPORT_STATEMENT = /\bexport\s+(type\s+)?(\*(?:\s+as\s+[A-Za-z_$][\w$]*)?|\{[^}]*\})\s*from\s*["']([^"']+)["']/g;
+function parseModuleImports(source) {
+  const code = stripComments(source);
+  const imports = [];
+  for (const match of code.matchAll(IMPORT_STATEMENT)) {
+    const [statement, clause, fromSpecifier, bareSpecifier] = match;
+    const specifier = fromSpecifier ?? bareSpecifier;
+    if (specifier === void 0) continue;
+    imports.push({
+      specifier,
+      typeOnly: clause !== void 0 && isTypeOnlyClause(clause),
+      statement: normalizeWhitespace(statement)
+    });
+  }
+  for (const match of code.matchAll(REEXPORT_STATEMENT)) {
+    const [statement, typeKeyword, clause, specifier] = match;
+    if (specifier === void 0 || clause === void 0) continue;
+    imports.push({
+      specifier,
+      typeOnly: typeKeyword !== void 0 || isTypeOnlyClause(clause),
+      statement: normalizeWhitespace(statement)
+    });
+  }
+  for (const match of code.matchAll(DYNAMIC_LOAD)) {
+    const [statement, specifier] = match;
+    if (specifier === void 0) continue;
+    imports.push({
+      specifier,
+      typeOnly: false,
+      statement: normalizeWhitespace(statement)
+    });
+  }
+  return imports;
+}
+function isTypeOnlyClause(clause) {
+  const trimmed = clause.trim();
+  if (trimmed.startsWith("type ")) return true;
+  const named = /^\{([\s\S]*)\}$/.exec(trimmed);
+  if (named === null || named[1] === void 0) return false;
+  const bindings = named[1].split(",").map((binding) => binding.trim()).filter((binding) => binding.length > 0);
+  return bindings.length > 0 && bindings.every((binding) => binding.startsWith("type "));
+}
+function stripComments(source) {
+  return source.replace(/\/\*[\s\S]*?\*\//g, "").replace(/^\s*\/\/.*$/gm, "");
+}
+function normalizeWhitespace(statement) {
+  return statement.replace(/\s+/g, " ").trim();
+}
+
+// ../ogygie-core/src/shared-tables.ts
+function dbTableNameOf(declaration) {
+  return typeof declaration === "string" ? declaration : declaration.name;
+}
+function dbTableNamesOf(feature) {
+  return feature.dbTables.map(dbTableNameOf);
+}
+
+// ../ogygie-core/src/impact.ts
+var MapEntryKindSchema = z6.enum(["feature", "package", "framework-package"]);
+var ImpactScopeSchema = z6.object({
+  scannedFolders: z6.array(z6.string()),
+  coveredKinds: z6.array(MapEntryKindSchema),
+  outOfReach: z6.array(z6.string())
+});
+var ImpactReportSchema = z6.object({
+  target: z6.object({
+    name: z6.string(),
+    kind: MapEntryKindSchema,
+    folder: z6.string()
+  }),
+  dependents: z6.array(
+    z6.object({
+      name: z6.string(),
+      kind: MapEntryKindSchema,
+      importedSymbols: z6.array(z6.string()),
+      viaIndexOnly: z6.boolean()
+    })
+  ),
+  routes: z6.array(
+    z6.object({ method: z6.string(), path: z6.string(), description: z6.string() })
+  ),
+  ownedTables: z6.array(z6.string()),
+  tableReadersOutsideOwner: z6.array(
+    z6.object({ table: z6.string(), feature: z6.string(), file: z6.string() })
+  ),
+  findings: z6.array(OgygieErrorSchema),
+  testCommand: z6.string(),
+  scope: ImpactScopeSchema
+});
+var SOURCE_EXTENSIONS = [".ts", ".tsx"];
+function isSource(path) {
+  return SOURCE_EXTENSIONS.some((extension) => path.endsWith(extension));
+}
+function isTest(path) {
+  return /\.test\.tsx?$/.test(path);
+}
+function symbolsOfImportClause(clause) {
+  const symbols = [];
+  const braces = /\{([^}]*)\}/.exec(clause);
+  if (braces?.[1] !== void 0) {
+    for (const rawEntry of braces[1].split(",")) {
+      const name = rawEntry.trim().replace(/^type\s+/, "").split(/\s+as\s+/)[0]?.trim();
+      if (name !== void 0 && name !== "") symbols.push(name);
+    }
+  }
+  const outsideBraces = clause.replace(/\{[^}]*\}/, "").replace(/^type\s+/, "").trim();
+  if (/\*\s*as\s+/.test(outsideBraces)) symbols.push("*");
+  else if (outsideBraces.replace(/,/g, "").trim() !== "") symbols.push("default");
+  return symbols;
+}
+function specifiersMatching(target, source) {
+  const folder = target.folder;
+  if (folder === null) return false;
+  const directory = folder.split("/").pop() ?? folder;
+  if (new RegExp(`(^|/)\\.\\./${directory}/`).test(source)) return true;
+  if (source.startsWith(`../${directory}/`) || source === `../${directory}`) return true;
+  if (source === target.name || source.startsWith(`${target.name}/`)) return true;
+  const segments = source.split("/");
+  return segments.includes(directory) && !source.startsWith(".");
+}
+function piercesTheIndex(specifier) {
+  if (!specifier.startsWith(".")) return false;
+  return !/(^|\/)index(\.js)?$/.test(specifier);
+}
+async function analyzeImpact(deps, targetName) {
+  const entries = declaredEntries(deps.manifest);
+  const target = entries.find((entry) => entry.name === targetName);
+  if (target === void 0) {
+    return throwOgygieError({
+      code: "IMPACT_UNKNOWN_FEATURE",
+      message: `"${targetName}" is unknown to the manifest.`,
+      file: "ogygie.manifest.json",
+      cause: `no entry of the map is named "${targetName}"`,
+      suggestedFix: `Pick one of: ${entries.map((entry) => entry.name).join(", ") || "<the map declares nothing>"}.`
+    });
   }
-  return void 0;
+  return buildReport(deps, entries, target);
+}
+async function buildReport(deps, entries, target) {
+  const findings = [];
+  const scannedFolders = [];
+  const outOfReach = [];
+  if (target.folder === null) {
+    outOfReach.push(
+      `the target "${target.name}" has no folder the map can resolve \u2014 its app is not declared`
+    );
+  }
+  const dependents = /* @__PURE__ */ new Map();
+  const tableReadersOutsideOwner = [];
+  const ownedTables = target.kind === "feature" ? tablesOf(deps.manifest, target.name) : [];
+  for (const entry of entries) {
+    if (entry.name === target.name) continue;
+    if (entry.folder === null) {
+      outOfReach.push(
+        `"${entry.name}" (${entry.kind}) \u2014 the map declares no resolvable folder for it`
+      );
+      continue;
+    }
+    const files = (await deps.adapter.listDirectory(entry.folder)).filter(
+      (file) => isSource(file.path)
+    );
+    if (files.length > 0) scannedFolders.push(entry.folder);
+    for (const file of files) {
+      const filePath = `${entry.folder}/${file.path}`;
+      const content = await deps.adapter.readFile(filePath);
+      for (const imported of parseModuleImports(content)) {
+        if (!specifiersMatching(target, imported.specifier)) continue;
+        const accumulator = dependents.get(entry.name) ?? {
+          kind: entry.kind,
+          importedSymbols: /* @__PURE__ */ new Set(),
+          viaIndexOnly: true
+        };
+        for (const symbol of symbolsOfImportClause(clauseOf(imported.statement))) {
+          accumulator.importedSymbols.add(symbol);
+        }
+        if (piercesTheIndex(imported.specifier)) {
+          accumulator.viaIndexOnly = false;
+          findings.push(
+            ogygieError({
+              code: "FEATURE_BOUNDARY_VIOLATION",
+              message: `"${entry.name}" imports an internal file of "${target.name}" instead of its index.ts.`,
+              file: filePath,
+              cause: `import from "${imported.specifier}" bypasses the public index of ${target.name}`,
+              suggestedFix: `Export the needed symbols from the index of ${target.name} and import them from there.`
+            })
+          );
+        }
+        dependents.set(entry.name, accumulator);
+      }
+      if (isTest(file.path)) continue;
+      if (entry.appType === "front" || entry.appType === "gateway") continue;
+      for (const table of ownedTables) {
+        if (!content.includes(`"${table}"`)) continue;
+        tableReadersOutsideOwner.push({ table, feature: entry.name, file: filePath });
+        findings.push(
+          ogygieError({
+            code: "TABLE_REFERENCED_OUTSIDE_OWNER",
+            message: `Table "${table}" is owned by "${target.name}" but referenced by production code of "${entry.name}".`,
+            file: filePath,
+            cause: `"${table}" found in a non-test file outside its owner`,
+            suggestedFix: `Go through the public contracts of ${target.name} instead of touching the table \u2014 one table, one owner.`
+          })
+        );
+      }
+    }
+  }
+  findings.push(...manifestDependencyFindings(deps.manifest, target, dependents));
+  const feature = deps.manifest.features.find((candidate) => candidate.name === target.name);
+  const report = {
+    target: { name: target.name, kind: target.kind, folder: target.folder ?? "" },
+    dependents: [...dependents.entries()].map(([name, accumulator]) => ({
+      name,
+      kind: accumulator.kind,
+      importedSymbols: [...accumulator.importedSymbols].sort(),
+      viaIndexOnly: accumulator.viaIndexOnly
+    })).sort((left, right) => left.name < right.name ? -1 : 1),
+    routes: (feature?.routes ?? []).map((route) => ({
+      method: route.method,
+      path: route.path,
+      description: route.description
+    })),
+    ownedTables,
+    tableReadersOutsideOwner,
+    findings,
+    testCommand: testCommandFor(target, [...dependents.keys()], entries),
+    scope: {
+      scannedFolders: scannedFolders.sort(),
+      coveredKinds: [...new Set(entries.map((entry) => entry.kind))],
+      outOfReach: [...outOfReach, ...outOfReachOf(target, entries)]
+    }
+  };
+  return ImpactReportSchema.parse(report);
+}
+function clauseOf(statement) {
+  const match = /\bimport\b([\s\S]*?)\bfrom\b/.exec(statement);
+  return match?.[1] ?? "";
+}
+function tablesOf(manifest, featureName) {
+  const feature = manifest.features.find((candidate) => candidate.name === featureName);
+  return feature === void 0 ? [] : dbTableNamesOf(feature);
+}
+function outOfReachOf(target, entries) {
+  const limits = [
+    "code that no manifest entry declares \u2014 the map is the only chart",
+    "anything outside this repo: no network, no npm registry"
+  ];
+  const spared = entries.filter(
+    (entry) => entry.appType === "front" || entry.appType === "gateway"
+  );
+  if (spared.length > 0 && target.kind === "feature") {
+    limits.push(
+      `table ownership was NOT checked in ${spared.length} front/gateway entr${spared.length === 1 ? "y" : "ies"} \u2014 that code holds no database client, so a table name there is a query key or a route`
+    );
+  }
+  if (target.kind === "framework-package" || target.kind === "package") {
+    limits.unshift(
+      `consumers of "${target.name}" OUTSIDE this repo \u2014 it is a package, and a published package is imported by projects this analysis cannot see`
+    );
+  }
+  return limits;
+}
+function manifestDependencyFindings(manifest, target, dependents) {
+  const findings = [];
+  const declared = manifest.features.filter(
+    (feature) => feature.dependsOn.includes(target.name)
+  );
+  for (const feature of declared) {
+    if (!dependents.has(feature.name)) {
+      findings.push(
+        ogygieError({
+          code: "MANIFEST_DEPENDENCY_STALE",
+          message: `Feature "${feature.name}" declares dependsOn "${target.name}" but never imports it.`,
+          file: `ogygie.manifest.json#features.${feature.name}`,
+          cause: `dependsOn contains "${target.name}", no import of it found in its code`,
+          suggestedFix: "Remove the stale dependsOn entry, or make the dependency real through the entry's index.ts."
+        })
+      );
+    }
+  }
+  for (const [name, accumulator] of dependents) {
+    if (accumulator.kind !== "feature") continue;
+    if (declared.some((feature) => feature.name === name)) continue;
+    findings.push(
+      ogygieError({
+        code: "MANIFEST_DEPENDENCY_UNDECLARED",
+        message: `Feature "${name}" imports "${target.name}" but does not declare it in dependsOn.`,
+        file: `ogygie.manifest.json#features.${name}`,
+        cause: `imports of "${target.name}" found in its code, absent from its dependsOn`,
+        suggestedFix: `Add "${target.name}" to the dependsOn of "${name}" \u2014 the manifest must never lie by omission.`
+      })
+    );
+  }
+  return findings;
+}
+function testCommandFor(target, dependentNames, entries) {
+  const folders = [target, ...entries.filter((entry) => dependentNames.includes(entry.name))].map((entry) => entry.folder).filter((folder) => folder !== null);
+  return ["pnpm test --", ...[...new Set(folders)].sort()].join(" ");
 }
 
 // src/tools.ts
@@ -1007,6 +1327,11 @@ async function readGovernance(repo, input) {
     provenance: await provenanceOf(repo, input.file)
   };
 }
+async function impact(repo, input) {
+  const manifest = await readManifest(repo);
+  const report = await analyzeImpact({ manifest, adapter: repo.adapter }, input.feature);
+  return { ...report, provenance: await provenanceOf(repo, "ogygie.manifest.json") };
+}
 async function readFeature(repo, input) {
   const manifest = await readManifest(repo);
   const owner = findSpecOwner(manifest, input.feature);
@@ -1121,6 +1446,12 @@ function createOgygieMcpServer(deps) {
     ReadGovernanceInput,
     async (input) => readGovernance(repoOf(deps.repos, input.repo), input)
   );
+  register(
+    "ogygie_impact",
+    "Blast radius of a change to a feature or package: who depends on it, which symbols they import, tables owned, tests to re-run \u2014 plus what the analysis could NOT see.",
+    ImpactInput,
+    async (input) => impact(repoOf(deps.repos, input.repo), input)
+  );
   register(
     "ogygie_read_feature",
     "Lists the files of a feature declared in the manifest, or reads one of them with `file`. The folder comes from the map: a feature the manifest does not declare does not exist.",
@@ -1169,11 +1500,18 @@ function refuse(response, status, error) {
   response.writeHead(status, { "content-type": "application/json" });
   response.end(JSON.stringify(error));
 }
-function isAuthorized(authorization, expected) {
-  if (authorization === void 0) return false;
-  const [scheme, value] = authorization.split(" ");
-  if (scheme?.toLowerCase() !== "bearer" || value === void 0) return false;
-  return tokenMatches(expected, value);
+var SECRET_PATH_PREFIX = "/mcp-";
+function isAuthorized(authorization, expected, requestPath) {
+  if (authorization !== void 0) {
+    const [scheme, value] = authorization.split(" ");
+    if (scheme?.toLowerCase() === "bearer" && value !== void 0) {
+      if (tokenMatches(expected, value)) return true;
+    }
+  }
+  if (requestPath === void 0) return false;
+  const [pathOnly] = requestPath.split("?");
+  if (pathOnly === void 0 || !pathOnly.startsWith(SECRET_PATH_PREFIX)) return false;
+  return tokenMatches(expected, pathOnly.slice(SECRET_PATH_PREFIX.length));
 }
 async function startHttpTransport(createServerInstance, options) {
   const token = assertUsableToken(options.token);
@@ -1188,7 +1526,7 @@ async function startHttpTransport(createServerInstance, options) {
     await transport.handleRequest(request, response, body);
   };
   const httpServer = createServer((request, response) => {
-    if (!isAuthorized(request.headers.authorization, token)) {
+    if (!isAuthorized(request.headers.authorization, token, request.url)) {
       refuse(
         response,
         401,

package/dist/server.js

@@ -613,6 +613,7 @@ var ListSpecsInput = { repo: RepoIdSchema, status: SpecStatusSchema.optional() }
 var ReadSpecInput = { repo: RepoIdSchema, id: SpecIdSchema };
 var ReadDecisionsInput = { repo: RepoIdSchema, decision: DecisionIdSchema.optional() };
 var ReadGovernanceInput = { repo: RepoIdSchema, file: GovernanceFileSchema };
+var ImpactInput = { repo: RepoIdSchema, feature: FeatureNameSchema2 };
 var ReadFeatureInput = {
   repo: RepoIdSchema,
   feature: FeatureNameSchema2,
@@ -800,46 +801,365 @@ function extractDecisionSection(decisionsMarkdown, decisionId) {
   return start === -1 ? null : trimTrailingBlanks(lines.slice(start));
 }
 
+// ../ogygie-core/src/impact.ts
+import { z as z6 } from "zod";
+
 // ../ogygie-core/src/manifest-owners.ts
 var ADVANCEMENT = ["skeleton", "in-progress", "delivered"];
 function specIdOf(specPath) {
   return (specPath.split("/").pop() ?? specPath).replace(/\.spec\.md$/, "");
 }
-function findSpecOwner(manifest, specId) {
-  const feature = manifest.features.find((candidate) => candidate.name === specId);
-  if (feature !== void 0) {
+function declaredEntries(manifest) {
+  const entries = [];
+  for (const feature of manifest.features) {
     const owningApp = feature.app === void 0 ? manifest.apps.find((app) => app.type === "api") : manifest.apps.find((app) => app.name === feature.app);
-    return {
+    entries.push({
       kind: "feature",
       name: feature.name,
       status: feature.status,
-      folder: owningApp === void 0 ? null : `${owningApp.path}/${feature.folder}`
-    };
+      folder: owningApp === void 0 ? null : `${owningApp.path}/${feature.folder}`,
+      specId: feature.name,
+      appType: owningApp?.type ?? null
+    });
   }
-  const productPackage = (manifest.packages ?? []).find(
-    (candidate) => candidate.name === specId
-  );
-  if (productPackage !== void 0) {
-    return {
+  for (const productPackage of manifest.packages ?? []) {
+    entries.push({
       kind: "package",
       name: productPackage.name,
       status: productPackage.status,
-      folder: productPackage.path
-    };
+      folder: productPackage.path,
+      specId: productPackage.name,
+      appType: null
+    });
   }
-  const frameworkPackages = (manifest.framework?.packages ?? []).filter(
-    (candidate) => candidate.spec !== null && specIdOf(candidate.spec) === specId
-  );
-  const leastAdvanced = frameworkPackages.slice().sort((a, b) => ADVANCEMENT.indexOf(a.status) - ADVANCEMENT.indexOf(b.status))[0];
-  if (leastAdvanced !== void 0) {
-    return {
+  for (const frameworkPackage of manifest.framework?.packages ?? []) {
+    entries.push({
       kind: "framework-package",
-      name: leastAdvanced.name,
-      status: leastAdvanced.status,
-      folder: leastAdvanced.path
-    };
+      name: frameworkPackage.name,
+      status: frameworkPackage.status,
+      folder: frameworkPackage.path,
+      // A published npm name is not a spec id: the link is DECLARED.
+      specId: frameworkPackage.spec === null ? null : specIdOf(frameworkPackage.spec),
+      appType: null
+    });
+  }
+  return entries;
+}
+function findSpecOwner(manifest, specId) {
+  const owning = declaredEntries(manifest).filter((entry) => entry.specId === specId);
+  if (owning.length === 0) return void 0;
+  const byPriority = owning.slice().sort((left, right) => {
+    if (left.kind !== right.kind) {
+      const order = ["feature", "package", "framework-package"];
+      return order.indexOf(left.kind) - order.indexOf(right.kind);
+    }
+    return ADVANCEMENT.indexOf(left.status) - ADVANCEMENT.indexOf(right.status);
+  });
+  const owner = byPriority[0];
+  if (owner === void 0) return void 0;
+  return { kind: owner.kind, name: owner.name, status: owner.status, folder: owner.folder };
+}
+
+// ../ogygie-core/src/module-purity.ts
+var IMPORT_STATEMENT = /\bimport\b(?![.(])([\s\S]*?)from\s*["']([^"']+)["']|\bimport\s+["']([^"']+)["']/g;
+var DYNAMIC_LOAD = /\b(?:import\s*\(|require\s*\()\s*["']([^"']+)["']/g;
+var REEXPORT_STATEMENT = /\bexport\s+(type\s+)?(\*(?:\s+as\s+[A-Za-z_$][\w$]*)?|\{[^}]*\})\s*from\s*["']([^"']+)["']/g;
+function parseModuleImports(source) {
+  const code = stripComments(source);
+  const imports = [];
+  for (const match of code.matchAll(IMPORT_STATEMENT)) {
+    const [statement, clause, fromSpecifier, bareSpecifier] = match;
+    const specifier = fromSpecifier ?? bareSpecifier;
+    if (specifier === void 0) continue;
+    imports.push({
+      specifier,
+      typeOnly: clause !== void 0 && isTypeOnlyClause(clause),
+      statement: normalizeWhitespace(statement)
+    });
+  }
+  for (const match of code.matchAll(REEXPORT_STATEMENT)) {
+    const [statement, typeKeyword, clause, specifier] = match;
+    if (specifier === void 0 || clause === void 0) continue;
+    imports.push({
+      specifier,
+      typeOnly: typeKeyword !== void 0 || isTypeOnlyClause(clause),
+      statement: normalizeWhitespace(statement)
+    });
+  }
+  for (const match of code.matchAll(DYNAMIC_LOAD)) {
+    const [statement, specifier] = match;
+    if (specifier === void 0) continue;
+    imports.push({
+      specifier,
+      typeOnly: false,
+      statement: normalizeWhitespace(statement)
+    });
+  }
+  return imports;
+}
+function isTypeOnlyClause(clause) {
+  const trimmed = clause.trim();
+  if (trimmed.startsWith("type ")) return true;
+  const named = /^\{([\s\S]*)\}$/.exec(trimmed);
+  if (named === null || named[1] === void 0) return false;
+  const bindings = named[1].split(",").map((binding) => binding.trim()).filter((binding) => binding.length > 0);
+  return bindings.length > 0 && bindings.every((binding) => binding.startsWith("type "));
+}
+function stripComments(source) {
+  return source.replace(/\/\*[\s\S]*?\*\//g, "").replace(/^\s*\/\/.*$/gm, "");
+}
+function normalizeWhitespace(statement) {
+  return statement.replace(/\s+/g, " ").trim();
+}
+
+// ../ogygie-core/src/shared-tables.ts
+function dbTableNameOf(declaration) {
+  return typeof declaration === "string" ? declaration : declaration.name;
+}
+function dbTableNamesOf(feature) {
+  return feature.dbTables.map(dbTableNameOf);
+}
+
+// ../ogygie-core/src/impact.ts
+var MapEntryKindSchema = z6.enum(["feature", "package", "framework-package"]);
+var ImpactScopeSchema = z6.object({
+  scannedFolders: z6.array(z6.string()),
+  coveredKinds: z6.array(MapEntryKindSchema),
+  outOfReach: z6.array(z6.string())
+});
+var ImpactReportSchema = z6.object({
+  target: z6.object({
+    name: z6.string(),
+    kind: MapEntryKindSchema,
+    folder: z6.string()
+  }),
+  dependents: z6.array(
+    z6.object({
+      name: z6.string(),
+      kind: MapEntryKindSchema,
+      importedSymbols: z6.array(z6.string()),
+      viaIndexOnly: z6.boolean()
+    })
+  ),
+  routes: z6.array(
+    z6.object({ method: z6.string(), path: z6.string(), description: z6.string() })
+  ),
+  ownedTables: z6.array(z6.string()),
+  tableReadersOutsideOwner: z6.array(
+    z6.object({ table: z6.string(), feature: z6.string(), file: z6.string() })
+  ),
+  findings: z6.array(OgygieErrorSchema),
+  testCommand: z6.string(),
+  scope: ImpactScopeSchema
+});
+var SOURCE_EXTENSIONS = [".ts", ".tsx"];
+function isSource(path) {
+  return SOURCE_EXTENSIONS.some((extension) => path.endsWith(extension));
+}
+function isTest(path) {
+  return /\.test\.tsx?$/.test(path);
+}
+function symbolsOfImportClause(clause) {
+  const symbols = [];
+  const braces = /\{([^}]*)\}/.exec(clause);
+  if (braces?.[1] !== void 0) {
+    for (const rawEntry of braces[1].split(",")) {
+      const name = rawEntry.trim().replace(/^type\s+/, "").split(/\s+as\s+/)[0]?.trim();
+      if (name !== void 0 && name !== "") symbols.push(name);
+    }
+  }
+  const outsideBraces = clause.replace(/\{[^}]*\}/, "").replace(/^type\s+/, "").trim();
+  if (/\*\s*as\s+/.test(outsideBraces)) symbols.push("*");
+  else if (outsideBraces.replace(/,/g, "").trim() !== "") symbols.push("default");
+  return symbols;
+}
+function specifiersMatching(target, source) {
+  const folder = target.folder;
+  if (folder === null) return false;
+  const directory = folder.split("/").pop() ?? folder;
+  if (new RegExp(`(^|/)\\.\\./${directory}/`).test(source)) return true;
+  if (source.startsWith(`../${directory}/`) || source === `../${directory}`) return true;
+  if (source === target.name || source.startsWith(`${target.name}/`)) return true;
+  const segments = source.split("/");
+  return segments.includes(directory) && !source.startsWith(".");
+}
+function piercesTheIndex(specifier) {
+  if (!specifier.startsWith(".")) return false;
+  return !/(^|\/)index(\.js)?$/.test(specifier);
+}
+async function analyzeImpact(deps, targetName) {
+  const entries = declaredEntries(deps.manifest);
+  const target = entries.find((entry) => entry.name === targetName);
+  if (target === void 0) {
+    return throwOgygieError({
+      code: "IMPACT_UNKNOWN_FEATURE",
+      message: `"${targetName}" is unknown to the manifest.`,
+      file: "ogygie.manifest.json",
+      cause: `no entry of the map is named "${targetName}"`,
+      suggestedFix: `Pick one of: ${entries.map((entry) => entry.name).join(", ") || "<the map declares nothing>"}.`
+    });
   }
-  return void 0;
+  return buildReport(deps, entries, target);
+}
+async function buildReport(deps, entries, target) {
+  const findings = [];
+  const scannedFolders = [];
+  const outOfReach = [];
+  if (target.folder === null) {
+    outOfReach.push(
+      `the target "${target.name}" has no folder the map can resolve \u2014 its app is not declared`
+    );
+  }
+  const dependents = /* @__PURE__ */ new Map();
+  const tableReadersOutsideOwner = [];
+  const ownedTables = target.kind === "feature" ? tablesOf(deps.manifest, target.name) : [];
+  for (const entry of entries) {
+    if (entry.name === target.name) continue;
+    if (entry.folder === null) {
+      outOfReach.push(
+        `"${entry.name}" (${entry.kind}) \u2014 the map declares no resolvable folder for it`
+      );
+      continue;
+    }
+    const files = (await deps.adapter.listDirectory(entry.folder)).filter(
+      (file) => isSource(file.path)
+    );
+    if (files.length > 0) scannedFolders.push(entry.folder);
+    for (const file of files) {
+      const filePath = `${entry.folder}/${file.path}`;
+      const content = await deps.adapter.readFile(filePath);
+      for (const imported of parseModuleImports(content)) {
+        if (!specifiersMatching(target, imported.specifier)) continue;
+        const accumulator = dependents.get(entry.name) ?? {
+          kind: entry.kind,
+          importedSymbols: /* @__PURE__ */ new Set(),
+          viaIndexOnly: true
+        };
+        for (const symbol of symbolsOfImportClause(clauseOf(imported.statement))) {
+          accumulator.importedSymbols.add(symbol);
+        }
+        if (piercesTheIndex(imported.specifier)) {
+          accumulator.viaIndexOnly = false;
+          findings.push(
+            ogygieError({
+              code: "FEATURE_BOUNDARY_VIOLATION",
+              message: `"${entry.name}" imports an internal file of "${target.name}" instead of its index.ts.`,
+              file: filePath,
+              cause: `import from "${imported.specifier}" bypasses the public index of ${target.name}`,
+              suggestedFix: `Export the needed symbols from the index of ${target.name} and import them from there.`
+            })
+          );
+        }
+        dependents.set(entry.name, accumulator);
+      }
+      if (isTest(file.path)) continue;
+      if (entry.appType === "front" || entry.appType === "gateway") continue;
+      for (const table of ownedTables) {
+        if (!content.includes(`"${table}"`)) continue;
+        tableReadersOutsideOwner.push({ table, feature: entry.name, file: filePath });
+        findings.push(
+          ogygieError({
+            code: "TABLE_REFERENCED_OUTSIDE_OWNER",
+            message: `Table "${table}" is owned by "${target.name}" but referenced by production code of "${entry.name}".`,
+            file: filePath,
+            cause: `"${table}" found in a non-test file outside its owner`,
+            suggestedFix: `Go through the public contracts of ${target.name} instead of touching the table \u2014 one table, one owner.`
+          })
+        );
+      }
+    }
+  }
+  findings.push(...manifestDependencyFindings(deps.manifest, target, dependents));
+  const feature = deps.manifest.features.find((candidate) => candidate.name === target.name);
+  const report = {
+    target: { name: target.name, kind: target.kind, folder: target.folder ?? "" },
+    dependents: [...dependents.entries()].map(([name, accumulator]) => ({
+      name,
+      kind: accumulator.kind,
+      importedSymbols: [...accumulator.importedSymbols].sort(),
+      viaIndexOnly: accumulator.viaIndexOnly
+    })).sort((left, right) => left.name < right.name ? -1 : 1),
+    routes: (feature?.routes ?? []).map((route) => ({
+      method: route.method,
+      path: route.path,
+      description: route.description
+    })),
+    ownedTables,
+    tableReadersOutsideOwner,
+    findings,
+    testCommand: testCommandFor(target, [...dependents.keys()], entries),
+    scope: {
+      scannedFolders: scannedFolders.sort(),
+      coveredKinds: [...new Set(entries.map((entry) => entry.kind))],
+      outOfReach: [...outOfReach, ...outOfReachOf(target, entries)]
+    }
+  };
+  return ImpactReportSchema.parse(report);
+}
+function clauseOf(statement) {
+  const match = /\bimport\b([\s\S]*?)\bfrom\b/.exec(statement);
+  return match?.[1] ?? "";
+}
+function tablesOf(manifest, featureName) {
+  const feature = manifest.features.find((candidate) => candidate.name === featureName);
+  return feature === void 0 ? [] : dbTableNamesOf(feature);
+}
+function outOfReachOf(target, entries) {
+  const limits = [
+    "code that no manifest entry declares \u2014 the map is the only chart",
+    "anything outside this repo: no network, no npm registry"
+  ];
+  const spared = entries.filter(
+    (entry) => entry.appType === "front" || entry.appType === "gateway"
+  );
+  if (spared.length > 0 && target.kind === "feature") {
+    limits.push(
+      `table ownership was NOT checked in ${spared.length} front/gateway entr${spared.length === 1 ? "y" : "ies"} \u2014 that code holds no database client, so a table name there is a query key or a route`
+    );
+  }
+  if (target.kind === "framework-package" || target.kind === "package") {
+    limits.unshift(
+      `consumers of "${target.name}" OUTSIDE this repo \u2014 it is a package, and a published package is imported by projects this analysis cannot see`
+    );
+  }
+  return limits;
+}
+function manifestDependencyFindings(manifest, target, dependents) {
+  const findings = [];
+  const declared = manifest.features.filter(
+    (feature) => feature.dependsOn.includes(target.name)
+  );
+  for (const feature of declared) {
+    if (!dependents.has(feature.name)) {
+      findings.push(
+        ogygieError({
+          code: "MANIFEST_DEPENDENCY_STALE",
+          message: `Feature "${feature.name}" declares dependsOn "${target.name}" but never imports it.`,
+          file: `ogygie.manifest.json#features.${feature.name}`,
+          cause: `dependsOn contains "${target.name}", no import of it found in its code`,
+          suggestedFix: "Remove the stale dependsOn entry, or make the dependency real through the entry's index.ts."
+        })
+      );
+    }
+  }
+  for (const [name, accumulator] of dependents) {
+    if (accumulator.kind !== "feature") continue;
+    if (declared.some((feature) => feature.name === name)) continue;
+    findings.push(
+      ogygieError({
+        code: "MANIFEST_DEPENDENCY_UNDECLARED",
+        message: `Feature "${name}" imports "${target.name}" but does not declare it in dependsOn.`,
+        file: `ogygie.manifest.json#features.${name}`,
+        cause: `imports of "${target.name}" found in its code, absent from its dependsOn`,
+        suggestedFix: `Add "${target.name}" to the dependsOn of "${name}" \u2014 the manifest must never lie by omission.`
+      })
+    );
+  }
+  return findings;
+}
+function testCommandFor(target, dependentNames, entries) {
+  const folders = [target, ...entries.filter((entry) => dependentNames.includes(entry.name))].map((entry) => entry.folder).filter((folder) => folder !== null);
+  return ["pnpm test --", ...[...new Set(folders)].sort()].join(" ");
 }
 
 // src/tools.ts
@@ -1002,6 +1322,11 @@ async function readGovernance(repo, input) {
     provenance: await provenanceOf(repo, input.file)
   };
 }
+async function impact(repo, input) {
+  const manifest = await readManifest(repo);
+  const report = await analyzeImpact({ manifest, adapter: repo.adapter }, input.feature);
+  return { ...report, provenance: await provenanceOf(repo, "ogygie.manifest.json") };
+}
 async function readFeature(repo, input) {
   const manifest = await readManifest(repo);
   const owner = findSpecOwner(manifest, input.feature);
@@ -1116,6 +1441,12 @@ function createOgygieMcpServer(deps) {
     ReadGovernanceInput,
     async (input) => readGovernance(repoOf(deps.repos, input.repo), input)
   );
+  register(
+    "ogygie_impact",
+    "Blast radius of a change to a feature or package: who depends on it, which symbols they import, tables owned, tests to re-run \u2014 plus what the analysis could NOT see.",
+    ImpactInput,
+    async (input) => impact(repoOf(deps.repos, input.repo), input)
+  );
   register(
     "ogygie_read_feature",
     "Lists the files of a feature declared in the manifest, or reads one of them with `file`. The folder comes from the map: a feature the manifest does not declare does not exist.",
@@ -1164,11 +1495,18 @@ function refuse(response, status, error) {
   response.writeHead(status, { "content-type": "application/json" });
   response.end(JSON.stringify(error));
 }
-function isAuthorized(authorization, expected) {
-  if (authorization === void 0) return false;
-  const [scheme, value] = authorization.split(" ");
-  if (scheme?.toLowerCase() !== "bearer" || value === void 0) return false;
-  return tokenMatches(expected, value);
+var SECRET_PATH_PREFIX = "/mcp-";
+function isAuthorized(authorization, expected, requestPath) {
+  if (authorization !== void 0) {
+    const [scheme, value] = authorization.split(" ");
+    if (scheme?.toLowerCase() === "bearer" && value !== void 0) {
+      if (tokenMatches(expected, value)) return true;
+    }
+  }
+  if (requestPath === void 0) return false;
+  const [pathOnly] = requestPath.split("?");
+  if (pathOnly === void 0 || !pathOnly.startsWith(SECRET_PATH_PREFIX)) return false;
+  return tokenMatches(expected, pathOnly.slice(SECRET_PATH_PREFIX.length));
 }
 async function startHttpTransport(createServerInstance, options) {
   const token = assertUsableToken(options.token);
@@ -1183,7 +1521,7 @@ async function startHttpTransport(createServerInstance, options) {
     await transport.handleRequest(request, response, body);
   };
   const httpServer = createServer((request, response) => {
-    if (!isAuthorized(request.headers.authorization, token)) {
+    if (!isAuthorized(request.headers.authorization, token, request.url)) {
       refuse(
         response,
         401,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ogygie/mcp",
-  "version": "0.9.0",
+  "version": "0.10.1",
   "description": "Ogygie MCP server: read-only access to the governance files and features of any Ogygie repo, the manifest as index. Ships built; runnable standalone or through `ogygie mcp`.",
   "license": "MIT",
   "type": "module",
@@ -18,20 +18,20 @@
   "exports": {
     "./server": "./dist/server.js"
   },
-  "scripts": {
-    "typecheck": "tsc -p tsconfig.json",
-    "build": "tsx scripts/build.ts"
-  },
   "dependencies": {
     "@modelcontextprotocol/sdk": "^1.30.0",
     "zod": "^4.0.0"
   },
   "devDependencies": {
-    "@ogygie/core": "workspace:*",
     "@types/node": "^24.0.0",
     "esbuild": "^0.28.0",
     "tsx": "^4.20.0",
     "typescript": "^5.8.0",
-    "vitest": "^3.2.0"
+    "vitest": "^3.2.0",
+    "@ogygie/core": "0.10.1"
+  },
+  "scripts": {
+    "typecheck": "tsc -p tsconfig.json",
+    "build": "tsx scripts/build.ts"
   }
-}
+}