@securecode-ai/mcp 0.5.5 → 0.5.6

package/dist/project-map/architectureContext.js

@@ -0,0 +1,421 @@
+"use strict";
+/**
+ * Architecture context — the structured output of the architecture scout
+ * subagent and the cached input to later agent-scan runs.
+ *
+ * The architecture scout is triggered by `securecode.map action:architecture`.
+ * It consumes the deterministic project map (endpoints, imports, call graph,
+ * config, deps) plus a bounded set of file reads, and produces this context:
+ *   - project type / frameworks / runtimes / package manager
+ *   - ranked important files (entrypoints, auth, data, config, security controls)
+ *   - trust boundaries (where untrusted input enters)
+ *   - data-flow summaries (source → sink across the architecture)
+ *   - security controls in place (and what's missing)
+ *   - architecture-level risks
+ *   - recommended scan order (which files to scan first)
+ *
+ * Cache lives at `.securecode/architecture-context.json`. Invalidates when:
+ *   - the project map is rebuilt (builtAt changes)
+ *   - the project map schema version changes
+ *   - the requested depth differs (quick/standard/deep produce different ctx)
+ *   - ARCHITECTURE_CONTEXT_VERSION bumps (prompt/logic change)
+ *   - 7-day TTL
+ *
+ * agent-scan auto-loads a cached architecture context (if present and valid)
+ * and passes it into the agent target so the vulnerability investigator starts
+ * with project-wide context instead of having to discover it from scratch.
+ */
+var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    var desc = Object.getOwnPropertyDescriptor(m, k);
+    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
+      desc = { enumerable: true, get: function() { return m[k]; } };
+    }
+    Object.defineProperty(o, k2, desc);
+}) : (function(o, m, k, k2) {
+    if (k2 === undefined) k2 = k;
+    o[k2] = m[k];
+}));
+var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) {
+    Object.defineProperty(o, "default", { enumerable: true, value: v });
+}) : function(o, v) {
+    o["default"] = v;
+});
+var __importStar = (this && this.__importStar) || (function () {
+    var ownKeys = function(o) {
+        ownKeys = Object.getOwnPropertyNames || function (o) {
+            var ar = [];
+            for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k;
+            return ar;
+        };
+        return ownKeys(o);
+    };
+    return function (mod) {
+        if (mod && mod.__esModule) return mod;
+        var result = {};
+        if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]);
+        __setModuleDefault(result, mod);
+        return result;
+    };
+})();
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.ARCHITECTURE_CONTEXT_VERSION = void 0;
+exports.readArchitectureCache = readArchitectureCache;
+exports.getCachedArchitectureContext = getCachedArchitectureContext;
+exports.writeCachedArchitectureContext = writeCachedArchitectureContext;
+exports.clearArchitectureCache = clearArchitectureCache;
+exports.formatArchitectureContextForPrompt = formatArchitectureContextForPrompt;
+exports.formatArchitectureRiskTasksForTarget = formatArchitectureRiskTasksForTarget;
+exports.createInvestigationTasksFromRisks = createInvestigationTasksFromRisks;
+const fs = __importStar(require("fs"));
+const path = __importStar(require("path"));
+const CACHE_DIR = '.securecode';
+const CACHE_FILE = 'architecture-context.json';
+/**
+ * Bump when the architecture scout prompt or logic changes in a way that
+ * would produce a different context for the same project. All cached
+ * entries with an older version are invalidated.
+ */
+exports.ARCHITECTURE_CONTEXT_VERSION = 1;
+/** Cache TTL: 7 days. Older entries are re-derived. */
+const CACHE_TTL_MS = 7 * 24 * 60 * 60 * 1000;
+// ── Path helpers ────────────────────────────────────────────────────────────
+function cachePath(workspaceRoot) {
+    return path.join(workspaceRoot, CACHE_DIR, CACHE_FILE);
+}
+// ── Read / Write ────────────────────────────────────────────────────────────
+/**
+ * Read the architecture cache. Returns null if the file doesn't exist,
+ * is corrupt, or is a forward-incompatible version.
+ */
+function readArchitectureCache(workspaceRoot) {
+    const p = cachePath(workspaceRoot);
+    try {
+        if (!fs.existsSync(p))
+            return null;
+        const raw = fs.readFileSync(p, 'utf8');
+        const data = JSON.parse(raw);
+        if (!data.version || data.version > exports.ARCHITECTURE_CONTEXT_VERSION) {
+            return null;
+        }
+        return data;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Look up a cached architecture context by depth.
+ * Returns null if not found, expired, or stale (project map changed).
+ *
+ * Stale check: the caller passes the CURRENT project map's builtAt + version.
+ * If the cached entry was derived against a different map, it's invalid —
+ * the architecture may have changed.
+ */
+function getCachedArchitectureContext(workspaceRoot, depth, currentMapBuiltAt, currentMapVersion) {
+    const cache = readArchitectureCache(workspaceRoot);
+    if (!cache)
+        return null;
+    const entry = cache.entries[depth];
+    if (!entry)
+        return null;
+    // Version check
+    if (entry.context.version !== exports.ARCHITECTURE_CONTEXT_VERSION)
+        return null;
+    // TTL check
+    if (Date.now() - entry.storedAt > CACHE_TTL_MS)
+        return null;
+    // Project map staleness check — if the map was rebuilt after the context
+    // was derived, the context is stale.
+    if (entry.context.projectMapBuiltAt !== currentMapBuiltAt)
+        return null;
+    if (entry.context.projectMapVersion !== currentMapVersion)
+        return null;
+    return entry.context;
+}
+/**
+ * Write an architecture context to the cache, keyed by depth.
+ */
+function writeCachedArchitectureContext(workspaceRoot, context) {
+    const dir = path.join(workspaceRoot, CACHE_DIR);
+    if (!fs.existsSync(dir)) {
+        fs.mkdirSync(dir, { recursive: true });
+    }
+    let cache;
+    const existing = readArchitectureCache(workspaceRoot);
+    if (existing && existing.version === exports.ARCHITECTURE_CONTEXT_VERSION) {
+        cache = existing;
+    }
+    else {
+        cache = { version: exports.ARCHITECTURE_CONTEXT_VERSION, entries: {} };
+    }
+    // Prune expired entries
+    const now = Date.now();
+    for (const [k, e] of Object.entries(cache.entries)) {
+        if (e && now - e.storedAt > CACHE_TTL_MS) {
+            delete cache.entries[k];
+        }
+    }
+    cache.entries[context.depth] = { context, storedAt: now };
+    // Atomic write
+    const p = cachePath(workspaceRoot);
+    const tmp = p + '.tmp';
+    fs.writeFileSync(tmp, JSON.stringify(cache, null, 2), 'utf8');
+    fs.renameSync(tmp, p);
+}
+/**
+ * Clear the architecture cache for a workspace (e.g., when the user requests
+ * a fresh derivation with --no-cache).
+ */
+function clearArchitectureCache(workspaceRoot) {
+    const p = cachePath(workspaceRoot);
+    try {
+        if (fs.existsSync(p))
+            fs.unlinkSync(p);
+    }
+    catch { /* best effort */ }
+}
+/**
+ * Format an architecture context into a compact string for injection into
+ * the agent-scan target prompt. Returns empty string if context is empty.
+ *
+ * This is what the vulnerability investigator sees at the start of a scan —
+ * a distilled view of the project's architecture so it doesn't have to
+ * re-discover "where is auth?", "what's the data layer?", "what are the
+ * entrypoints?" from scratch.
+ */
+function formatArchitectureContextForPrompt(ctx) {
+    if (!ctx || !ctx.importantFiles || ctx.importantFiles.length === 0)
+        return '';
+    const lines = ['Project architecture (from a prior architecture-scout run — use this as context, verify with tools when relevant):'];
+    lines.push('');
+    lines.push(`Project: ${ctx.project.type}`);
+    if (ctx.project.frameworks.length)
+        lines.push(`Frameworks: ${ctx.project.frameworks.join(', ')}`);
+    if (ctx.project.runtimes.length)
+        lines.push(`Runtimes: ${ctx.project.runtimes.join(', ')}`);
+    if (ctx.project.packageManager)
+        lines.push(`Package manager: ${ctx.project.packageManager}`);
+    if (ctx.summary) {
+        lines.push('');
+        lines.push(`Summary: ${ctx.summary}`);
+    }
+    lines.push('');
+    lines.push(`Important files (${ctx.importantFiles.length}, ranked by security importance):`);
+    for (const f of ctx.importantFiles.slice(0, 30)) {
+        lines.push(`  [${f.importance}] ${f.file} (${f.role}) — ${f.reasons.join('; ')}`);
+    }
+    if (ctx.importantFiles.length > 30) {
+        lines.push(`  ... and ${ctx.importantFiles.length - 30} more (see architecture context)`);
+    }
+    if (ctx.trustBoundaries.length > 0) {
+        lines.push('');
+        lines.push(`Trust boundaries (${ctx.trustBoundaries.length}):`);
+        for (const tb of ctx.trustBoundaries.slice(0, 15)) {
+            lines.push(`  ${tb.entry} — input: ${tb.inputType} — guard: ${tb.guard || 'NONE'}`);
+        }
+    }
+    if (ctx.securityControls.length > 0) {
+        lines.push('');
+        lines.push(`Security controls (${ctx.securityControls.length}):`);
+        for (const sc of ctx.securityControls.slice(0, 15)) {
+            lines.push(`  [${sc.coverage}] ${sc.kind} at ${sc.location}${sc.notes ? ` — ${sc.notes}` : ''}`);
+        }
+    }
+    if (ctx.architectureRisks.length > 0) {
+        lines.push('');
+        lines.push(`Architecture-level risks (${ctx.architectureRisks.length}) — these are NOT vulnerability findings, they are structural concerns to investigate:`);
+        for (const r of ctx.architectureRisks.slice(0, 10)) {
+            lines.push(`  [${r.severity}] ${r.title}: ${r.description} (${r.files.join(', ')})`);
+        }
+    }
+    if (ctx.recommendedScanOrder.length > 0) {
+        lines.push('');
+        lines.push(`Recommended scan order (first ${Math.min(10, ctx.recommendedScanOrder.length)}):`);
+        for (const f of ctx.recommendedScanOrder.slice(0, 10)) {
+            lines.push(`  ${f}`);
+        }
+    }
+    return lines.join('\n');
+}
+/**
+ * Extract architecture risks that are relevant to a specific target file and
+ * format them as explicit investigation tasks the agent must address.
+ *
+ * A risk is relevant if:
+ *   - The target file is listed in the risk's files[]
+ *   - The target file's path is a substring of any file in the risk's files[]
+ *   - The risk has no specific files (project-wide)
+ *
+ * Each task tells the agent:
+ *   - What the risk is
+ *   - Which evidence is needed to resolve it
+ *   - What tool to use
+ *   - That unresolved risks must go in coverageGaps[]
+ */
+function formatArchitectureRiskTasksForTarget(ctx, targetFilePath) {
+    if (!ctx || !ctx.architectureRisks || ctx.architectureRisks.length === 0)
+        return '';
+    const normalizedTarget = targetFilePath.replace(/\\/g, '/').toLowerCase();
+    const relevant = ctx.architectureRisks.filter(r => {
+        if (!r.files || r.files.length === 0)
+            return true;
+        return r.files.some(f => {
+            const nf = f.replace(/\\/g, '/').toLowerCase();
+            return nf === normalizedTarget ||
+                nf.includes(normalizedTarget) ||
+                normalizedTarget.includes(nf);
+        });
+    });
+    if (relevant.length === 0)
+        return '';
+    const lines = [
+        `[Architecture risk investigation tasks — you MUST address these before finishing:`,
+        `  These are structural concerns from the architecture scout that apply to this file.`,
+        `  For each: investigate, collect evidence, and either resolve (prove safe) or`,
+        `  report as a finding (if proven) or coverage gap (if unresolved).]`,
+        '',
+    ];
+    relevant.forEach((r, i) => {
+        lines.push(`  Task ${i + 1}: [${r.severity}] ${r.title}`);
+        lines.push(`    Risk: ${r.description}`);
+        if (r.files.length > 0) {
+            lines.push(`    Files: ${r.files.join(', ')}`);
+        }
+        lines.push(`    Required evidence:`);
+        lines.push(`      - Trace the code path from input to the sensitive operation`);
+        lines.push(`      - Determine whether the control is present, bypassed, or missing`);
+        lines.push(`      - Establish the threat model (is the attacker in scope?)`);
+        lines.push(`      - If you cannot resolve this risk, put it in coverageGaps[]`);
+        lines.push('');
+    });
+    return lines.join('\n');
+}
+/**
+ * Convert architecture risks relevant to a target file into structured
+ * InvestigationTask objects. Each task tracks its own status and must be
+ * resolved before the scan finishes.
+ *
+ * A risk is relevant if:
+ *   - The target file is listed in the risk's files[]
+ *   - The target file's path is a substring of any file in the risk's files[]
+ *   - The risk has no specific files (project-wide)
+ */
+function createInvestigationTasksFromRisks(ctx, targetFilePath) {
+    if (!ctx || !ctx.architectureRisks || ctx.architectureRisks.length === 0)
+        return [];
+    const normalizedTarget = targetFilePath.replace(/\\/g, '/').toLowerCase();
+    const allImportantFiles = (ctx.importantFiles || []).map(f => f.file);
+    const relevant = ctx.architectureRisks.filter(r => {
+        if (!r.files || r.files.length === 0)
+            return true;
+        return r.files.some(f => {
+            const nf = f.replace(/\\/g, '/').toLowerCase();
+            if (nf === normalizedTarget || nf.includes(normalizedTarget) || normalizedTarget.includes(nf)) {
+                return true;
+            }
+            if (allImportantFiles.some(imp => {
+                const impN = imp.replace(/\\/g, '/').toLowerCase();
+                return impN === nf && (impN === normalizedTarget || impN.includes(normalizedTarget) || normalizedTarget.includes(impN));
+            })) {
+                return true;
+            }
+            return false;
+        });
+    });
+    return relevant.map((r, i) => {
+        const id = `arch-risk-${i + 1}-${r.title.toLowerCase().replace(/[^a-z0-9]+/g, '-').slice(0, 40)}`;
+        const riskFiles = r.files.length > 0 ? r.files : [targetFilePath];
+        const relatedFiles = riskFiles.filter(f => f !== targetFilePath);
+        const sourceSymbols = inferSourceSymbols(r);
+        const sinkSymbols = inferSinkSymbols(r);
+        const proofDimensions = inferProofDimensions(r);
+        return {
+            id,
+            targetFiles: riskFiles,
+            claim: r.title,
+            requiredTools: inferRequiredTools(r),
+            requiredEvidence: [
+                'Trace the code path from input to the sensitive operation',
+                'Determine whether the control is present, bypassed, or missing',
+                'Establish the threat model (is the attacker in scope?)',
+            ],
+            status: 'pending',
+            entryFiles: [targetFilePath],
+            relatedFiles,
+            sourceSymbols,
+            sinkSymbols,
+            requiredProofDimensions: proofDimensions,
+        };
+    });
+}
+function inferSourceSymbols(risk) {
+    const text = (risk.title + ' ' + risk.description).toLowerCase();
+    const symbols = [];
+    if (/shell|exec|spawn|child_process|command/i.test(text)) {
+        symbols.push('execFile', 'spawn', 'exec', 'child_process');
+    }
+    if (/auth|token|session|login|credential/i.test(text)) {
+        symbols.push('authenticate', 'authorize', 'verifyToken', 'createSession');
+    }
+    if (/origin|csrf|cors/i.test(text)) {
+        symbols.push('isTrustedAppOrigin', 'shouldRejectUntrustedRequestOrigin');
+    }
+    if (/mcp|gateway|external/i.test(text)) {
+        symbols.push('ExternalMcpGateway', 'connectExternal');
+    }
+    return symbols;
+}
+function inferSinkSymbols(risk) {
+    const text = (risk.title + ' ' + risk.description).toLowerCase();
+    const symbols = [];
+    if (/shell|exec|spawn|child_process|command/i.test(text)) {
+        symbols.push('execFile', 'spawn', 'exec', 'child_process');
+    }
+    if (/file|write|read|unlink|path/i.test(text)) {
+        symbols.push('writeFile', 'readFile', 'unlink', 'mkdir');
+    }
+    if (/sql|query|database/i.test(text)) {
+        symbols.push('query', 'queryRaw', 'execute');
+    }
+    return symbols;
+}
+function inferProofDimensions(risk) {
+    const text = (risk.title + ' ' + risk.description).toLowerCase();
+    const dims = ['source', 'reachability', 'control', 'threat-model'];
+    if (/shell|exec|spawn|child_process|command/i.test(text)) {
+        dims.push('impact');
+        dims.push('verification');
+    }
+    if (/auth|token|session|login|credential|bypass/i.test(text)) {
+        dims.push('impact');
+    }
+    if (/external|mcp|gateway|ssrf/i.test(text)) {
+        dims.push('impact');
+    }
+    return [...new Set(dims)];
+}
+function inferRequiredTools(risk) {
+    const tools = [];
+    const text = (risk.title + ' ' + risk.description).toLowerCase();
+    if (/auth|token|session|login|credential|password|jwt/i.test(text)) {
+        tools.push('search_code', 'check_policy', 'read_config');
+    }
+    if (/flow|taint|cross-file|propagat|input|sink/i.test(text)) {
+        tools.push('trace_flow_cross_file', 'trace_flow');
+    }
+    if (/config|env|secret|key/i.test(text)) {
+        tools.push('read_config');
+    }
+    if (/route|endpoint|handler/i.test(text)) {
+        tools.push('get_endpoints', 'check_policy');
+    }
+    if (/owner|permission|access|rbac|role/i.test(text)) {
+        tools.push('search_code', 'check_policy', 'trace_flow_cross_file');
+    }
+    if (tools.length === 0) {
+        tools.push('read_file', 'search_code', 'trace_flow_cross_file');
+    }
+    return [...new Set(tools)];
+}
+//# sourceMappingURL=architectureContext.js.map

package/dist/project-map/architectureContext.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"architectureContext.js","sourceRoot":"","sources":["../../src/project-map/architectureContext.ts"],"names":[],"mappings":";AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AA+KH,sDAaC;AAUD,oEAwBC;AAKD,wEAgCC;AAMD,wDAKC;AAWD,gFA0DC;AAiBD,oFA0CC;AAYD,8EAkDC;AA1cD,uCAAyB;AACzB,2CAA6B;AAE7B,MAAM,SAAS,GAAG,aAAa,CAAC;AAChC,MAAM,UAAU,GAAG,2BAA2B,CAAC;AAE/C;;;;GAIG;AACU,QAAA,4BAA4B,GAAG,CAAC,CAAC;AAE9C,uDAAuD;AACvD,MAAM,YAAY,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;AAmJ7C,+EAA+E;AAE/E,SAAS,SAAS,CAAC,aAAqB;IACpC,OAAO,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,EAAE,UAAU,CAAC,CAAC;AAC3D,CAAC;AAED,+EAA+E;AAE/E;;;GAGG;AACH,SAAgB,qBAAqB,CAAC,aAAqB;IACvD,MAAM,CAAC,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IACnC,IAAI,CAAC;QACD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,OAAO,IAAI,CAAC;QACnC,MAAM,GAAG,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;QACvC,MAAM,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA0B,CAAC;QACtD,IAAI,CAAC,IAAI,CAAC,OAAO,IAAI,IAAI,CAAC,OAAO,GAAG,oCAA4B,EAAE,CAAC;YAC/D,OAAO,IAAI,CAAC;QAChB,CAAC;QACD,OAAO,IAAI,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACL,OAAO,IAAI,CAAC;IAChB,CAAC;AACL,CAAC;AAED;;;;;;;GAOG;AACH,SAAgB,4BAA4B,CACxC,aAAqB,EACrB,KAAwB,EACxB,iBAAyB,EACzB,iBAAyB;IAEzB,MAAM,KAAK,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACnD,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,MAAM,KAAK,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;IACnC,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAC;IAExB,gBAAgB;IAChB,IAAI,KAAK,CAAC,OAAO,CAAC,OAAO,KAAK,oCAA4B;QAAE,OAAO,IAAI,CAAC;IAExE,YAAY;IACZ,IAAI,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAC,QAAQ,GAAG,YAAY;QAAE,OAAO,IAAI,CAAC;IAE5D,yEAAyE;IACzE,qCAAqC;IACrC,IAAI,KAAK,CAAC,OAAO,CAAC,iBAAiB,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IACvE,IAAI,KAAK,CAAC,OAAO,CAAC,iBAAiB,KAAK,iBAAiB;QAAE,OAAO,IAAI,CAAC;IAEvE,OAAO,KAAK,CAAC,OAAO,CAAC;AACzB,CAAC;AAED;;GAEG;AACH,SAAgB,8BAA8B,CAC1C,aAAqB,EACrB,OAA4B;IAE5B,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,SAAS,CAAC,CAAC;IAChD,IAAI,CAAC,EAAE,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;QACtB,EAAE,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAC3C,CAAC;IAED,IAAI,KAA4B,CAAC;IACjC,MAAM,QAAQ,GAAG,qBAAqB,CAAC,aAAa,CAAC,CAAC;IACtD,IAAI,QAAQ,IAAI,QAAQ,CAAC,OAAO,KAAK,oCAA4B,EAAE,CAAC;QAChE,KAAK,GAAG,QAAQ,CAAC;IACrB,CAAC;SAAM,CAAC;QACJ,KAAK,GAAG,EAAE,OAAO,EAAE,oCAA4B,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IACnE,CAAC;IAED,wBAAwB;IACxB,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACvB,KAAK,MAAM,CAAC,CAAC,EAAE,CAAC,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC;QACjD,IAAI,CAAC,IAAI,GAAG,GAAG,CAAC,CAAC,QAAQ,GAAG,YAAY,EAAE,CAAC;YACvC,OAAO,KAAK,CAAC,OAAO,CAAC,CAAsB,CAAC,CAAC;QACjD,CAAC;IACL,CAAC;IAED,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,KAAK,CAAC,GAAG,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,EAAE,CAAC;IAE1D,eAAe;IACf,MAAM,CAAC,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IACnC,MAAM,GAAG,GAAG,CAAC,GAAG,MAAM,CAAC;IACvB,EAAE,CAAC,aAAa,CAAC,GAAG,EAAE,IAAI,CAAC,SAAS,CAAC,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC;IAC9D,EAAE,CAAC,UAAU,CAAC,GAAG,EAAE,CAAC,CAAC,CAAC;AAC1B,CAAC;AAED;;;GAGG;AACH,SAAgB,sBAAsB,CAAC,aAAqB;IACxD,MAAM,CAAC,GAAG,SAAS,CAAC,aAAa,CAAC,CAAC;IACnC,IAAI,CAAC;QACD,IAAI,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC;YAAE,EAAE,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC;IAC3C,CAAC;IAAC,MAAM,CAAC,CAAC,iBAAiB,CAAC,CAAC;AACjC,CAAC;AAED;;;;;;;;GAQG;AACH,SAAgB,kCAAkC,CAAC,GAAwB;IACvE,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,cAAc,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAE9E,MAAM,KAAK,GAAa,CAAC,oHAAoH,CAAC,CAAC;IAE/I,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,CAAC;IAC3C,IAAI,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,eAAe,GAAG,CAAC,OAAO,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAClG,IAAI,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,MAAM;QAAE,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC5F,IAAI,GAAG,CAAC,OAAO,CAAC,cAAc;QAAE,KAAK,CAAC,IAAI,CAAC,oBAAoB,GAAG,CAAC,OAAO,CAAC,cAAc,EAAE,CAAC,CAAC;IAE7F,IAAI,GAAG,CAAC,OAAO,EAAE,CAAC;QACd,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,YAAY,GAAG,CAAC,OAAO,EAAE,CAAC,CAAC;IAC1C,CAAC;IAED,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACf,KAAK,CAAC,IAAI,CAAC,oBAAoB,GAAG,CAAC,cAAc,CAAC,MAAM,mCAAmC,CAAC,CAAC;IAC7F,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAC9C,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,KAAK,CAAC,CAAC,IAAI,KAAK,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACtF,CAAC;IACD,IAAI,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,aAAa,GAAG,CAAC,cAAc,CAAC,MAAM,GAAG,EAAE,kCAAkC,CAAC,CAAC;IAC9F,CAAC;IAED,IAAI,GAAG,CAAC,eAAe,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,qBAAqB,GAAG,CAAC,eAAe,CAAC,MAAM,IAAI,CAAC,CAAC;QAChE,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,eAAe,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YAChD,KAAK,CAAC,IAAI,CAAC,KAAK,EAAE,CAAC,KAAK,aAAa,EAAE,CAAC,SAAS,aAAa,EAAE,CAAC,KAAK,IAAI,MAAM,EAAE,CAAC,CAAC;QACxF,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,gBAAgB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAClC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,sBAAsB,GAAG,CAAC,gBAAgB,CAAC,MAAM,IAAI,CAAC,CAAC;QAClE,KAAK,MAAM,EAAE,IAAI,GAAG,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,QAAQ,KAAK,EAAE,CAAC,IAAI,OAAO,EAAE,CAAC,QAAQ,GAAG,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QACrG,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,iBAAiB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACnC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,6BAA6B,GAAG,CAAC,iBAAiB,CAAC,MAAM,wFAAwF,CAAC,CAAC;QAC9J,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,iBAAiB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACjD,KAAK,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,KAAK,CAAC,CAAC,WAAW,KAAK,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACzF,CAAC;IACL,CAAC;IAED,IAAI,GAAG,CAAC,oBAAoB,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACf,KAAK,CAAC,IAAI,CAAC,iCAAiC,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,GAAG,CAAC,oBAAoB,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;QAC/F,KAAK,MAAM,CAAC,IAAI,GAAG,CAAC,oBAAoB,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;YACpD,KAAK,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QACzB,CAAC;IACL,CAAC;IAED,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;;;;;;GAcG;AACH,SAAgB,oCAAoC,CAChD,GAAwB,EACxB,cAAsB;IAEtB,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpF,MAAM,gBAAgB,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1E,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QAC9C,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YACpB,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/C,OAAO,EAAE,KAAK,gBAAgB;gBAC1B,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC;gBAC7B,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC;QACtC,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAErC,MAAM,KAAK,GAAa;QACpB,mFAAmF;QACnF,sFAAsF;QACtF,+EAA+E;QAC/E,qEAAqE;QACrE,EAAE;KACL,CAAC;IAEF,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACtB,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,QAAQ,KAAK,CAAC,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC;QACzC,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;YACrB,KAAK,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;QACnD,CAAC;QACD,KAAK,CAAC,IAAI,CAAC,wBAAwB,CAAC,CAAC;QACrC,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QAChF,KAAK,CAAC,IAAI,CAAC,wEAAwE,CAAC,CAAC;QACrF,KAAK,CAAC,IAAI,CAAC,gEAAgE,CAAC,CAAC;QAC7E,KAAK,CAAC,IAAI,CAAC,mEAAmE,CAAC,CAAC;QAChF,KAAK,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IACnB,CAAC,CAAC,CAAC;IAEH,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC5B,CAAC;AAED;;;;;;;;;GASG;AACH,SAAgB,iCAAiC,CAC7C,GAAoC,EACpC,cAAsB;IAEtB,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,iBAAiB,IAAI,GAAG,CAAC,iBAAiB,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAEpF,MAAM,gBAAgB,GAAG,cAAc,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;IAC1E,MAAM,iBAAiB,GAAG,CAAC,GAAG,CAAC,cAAc,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,GAAG,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE;QAC9C,IAAI,CAAC,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,KAAK,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClD,OAAO,CAAC,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE;YACpB,MAAM,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;YAC/C,IAAI,EAAE,KAAK,gBAAgB,IAAI,EAAE,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,EAAE,CAAC,EAAE,CAAC;gBAC5F,OAAO,IAAI,CAAC;YAChB,CAAC;YACD,IAAI,iBAAiB,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE;gBAC7B,MAAM,IAAI,GAAG,GAAG,CAAC,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC,WAAW,EAAE,CAAC;gBACnD,OAAO,IAAI,KAAK,EAAE,IAAI,CAAC,IAAI,KAAK,gBAAgB,IAAI,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,IAAI,gBAAgB,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC;YAC5H,CAAC,CAAC,EAAE,CAAC;gBACD,OAAO,IAAI,CAAC;YAChB,CAAC;YACD,OAAO,KAAK,CAAC;QACjB,CAAC,CAAC,CAAC;IACP,CAAC,CAAC,CAAC;IAEH,OAAO,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE;QACzB,MAAM,EAAE,GAAG,aAAa,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,WAAW,EAAE,CAAC,OAAO,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC,EAAE,CAAC;QAClG,MAAM,SAAS,GAAG,CAAC,CAAC,KAAK,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC;QAClE,MAAM,YAAY,GAAG,SAAS,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,KAAK,cAAc,CAAC,CAAC;QACjE,MAAM,aAAa,GAAG,kBAAkB,CAAC,CAAC,CAAC,CAAC;QAC5C,MAAM,WAAW,GAAG,gBAAgB,CAAC,CAAC,CAAC,CAAC;QACxC,MAAM,eAAe,GAAG,oBAAoB,CAAC,CAAC,CAAC,CAAC;QAChD,OAAO;YACH,EAAE;YACF,WAAW,EAAE,SAAS;YACtB,KAAK,EAAE,CAAC,CAAC,KAAK;YACd,aAAa,EAAE,kBAAkB,CAAC,CAAC,CAAC;YACpC,gBAAgB,EAAE;gBACd,2DAA2D;gBAC3D,gEAAgE;gBAChE,wDAAwD;aAC3D;YACD,MAAM,EAAE,SAAkB;YAC1B,UAAU,EAAE,CAAC,cAAc,CAAC;YAC5B,YAAY;YACZ,aAAa;YACb,WAAW;YACX,uBAAuB,EAAE,eAAe;SAC3C,CAAC;IACN,CAAC,CAAC,CAAC;AACP,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAsB;IAC9C,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,sCAAsC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACpD,OAAO,CAAC,IAAI,CAAC,cAAc,EAAE,WAAW,EAAE,aAAa,EAAE,eAAe,CAAC,CAAC;IAC9E,CAAC;IACD,IAAI,mBAAmB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,oCAAoC,CAAC,CAAC;IAC7E,CAAC;IACD,IAAI,uBAAuB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACrC,OAAO,CAAC,IAAI,CAAC,oBAAoB,EAAE,iBAAiB,CAAC,CAAC;IAC1D,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,gBAAgB,CAAC,IAAsB;IAC5C,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,IAAI,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,OAAO,CAAC,IAAI,CAAC,UAAU,EAAE,OAAO,EAAE,MAAM,EAAE,eAAe,CAAC,CAAC;IAC/D,CAAC;IACD,IAAI,8BAA8B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC5C,OAAO,CAAC,IAAI,CAAC,WAAW,EAAE,UAAU,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,qBAAqB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,OAAO,EAAE,UAAU,EAAE,SAAS,CAAC,CAAC;IACjD,CAAC;IACD,OAAO,OAAO,CAAC;AACnB,CAAC;AAED,SAAS,oBAAoB,CAAC,IAAsB;IAChD,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,MAAM,IAAI,GAAa,CAAC,QAAQ,EAAE,cAAc,EAAE,SAAS,EAAE,cAAc,CAAC,CAAC;IAC7E,IAAI,yCAAyC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvD,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACpB,IAAI,CAAC,IAAI,CAAC,cAAc,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,6CAA6C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC3D,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IACD,IAAI,4BAA4B,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1C,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IACxB,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC;AAC9B,CAAC;AAED,SAAS,kBAAkB,CAAC,IAAsB;IAC9C,MAAM,KAAK,GAAa,EAAE,CAAC;IAC3B,MAAM,IAAI,GAAG,CAAC,IAAI,CAAC,KAAK,GAAG,GAAG,GAAG,IAAI,CAAC,WAAW,CAAC,CAAC,WAAW,EAAE,CAAC;IACjE,IAAI,mDAAmD,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACjE,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,aAAa,CAAC,CAAC;IAC7D,CAAC;IACD,IAAI,4CAA4C,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAC1D,KAAK,CAAC,IAAI,CAAC,uBAAuB,EAAE,YAAY,CAAC,CAAC;IACtD,CAAC;IACD,IAAI,wBAAwB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACtC,KAAK,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;IAC9B,CAAC;IACD,IAAI,yBAAyB,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QACvC,KAAK,CAAC,IAAI,CAAC,eAAe,EAAE,cAAc,CAAC,CAAC;IAChD,CAAC;IACD,IAAI,oCAAoC,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;QAClD,KAAK,CAAC,IAAI,CAAC,aAAa,EAAE,cAAc,EAAE,uBAAuB,CAAC,CAAC;IACvE,CAAC;IACD,IAAI,KAAK,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QACrB,KAAK,CAAC,IAAI,CAAC,WAAW,EAAE,aAAa,EAAE,uBAAuB,CAAC,CAAC;IACpE,CAAC;IACD,OAAO,CAAC,GAAG,IAAI,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC;AAC/B,CAAC"}

package/dist/project-map/blastRadius.d.ts

@@ -0,0 +1,54 @@
+/**
+ * Blast radius computation — given a set of changed files, compute which
+ * other files in the workspace are affected by those changes.
+ *
+ * Uses the Project Map's import graph (forward: what this file imports;
+ * reverse: who imports this file) to traverse the dependency graph to a
+ * depth cap. The result is a set of files that the agent scan should focus
+ * on, plus the changed files themselves.
+ *
+ * Algorithm:
+ *   1. Invert the Project Map's `imports` records once into a reverse map:
+ *      for each file F that imports module M, record F as an importer of M.
+ *   2. BFS from each changed file:
+ *      - Forward edges: files that THIS file imports (if F changes, the
+ *        files F depends on might behave differently — but they're
+ *        dependencies, not dependents. We skip forward edges for blast
+ *        radius because changing a file doesn't affect its dependencies.)
+ *      - Reverse edges: files that import THIS file (if F changes, files
+ *        that depend on F are affected — these are the blast radius.)
+ *   3. Cap depth at `maxDepth` (default 3) to avoid traversing the entire
+ *      workspace for a large change.
+ *   4. Cap total files at `maxFiles` (default 100) to keep the scope
+ *      manageable.
+ *
+ * Security:
+ *   - All file paths come from the Project Map (already workspace-confined)
+ *   - No filesystem access — pure graph computation
+ *   - Output is a list of workspace-relative paths
+ */
+import type { ProjectMap } from './types';
+export interface BlastRadiusOptions {
+    /** Changed files (workspace-relative paths). */
+    changedFiles: string[];
+    /** The project map (from cache or freshly built). */
+    map: ProjectMap;
+    /** Max BFS depth (default 3). */
+    maxDepth?: number;
+    /** Max total files in the result (default 100). */
+    maxFiles?: number;
+}
+export interface BlastRadiusResult {
+    /** All files in the blast radius (changed + affected), workspace-relative. */
+    files: string[];
+    /** Only the changed files that exist in the project map. */
+    changedFiles: string[];
+    /** Files affected by the changes (not the changed files themselves). */
+    affectedFiles: string[];
+    /** BFS depth reached (0 = only changed files, 1 = direct importers, etc.). */
+    depthReached: number;
+    /** Whether the result was truncated by maxFiles. */
+    truncated: boolean;
+}
+export declare function computeBlastRadius(options: BlastRadiusOptions): BlastRadiusResult;
+export declare function formatBlastRadius(result: BlastRadiusResult): string;