@vohongtho.infotech/code-intel 0.6.0 → 0.7.0

package/dist/index.js

@@ -1,7 +1,7 @@
 import { createRequire } from 'module';
 import { fileURLToPath } from 'url';
-import path27 from 'path';
-import fs19, { existsSync } from 'fs';
+import path29 from 'path';
+import fs23, { existsSync } from 'fs';
 import { Parser, Language, Query } from 'web-tree-sitter';
 import { NodeSDK } from '@opentelemetry/sdk-node';
 import { getNodeAutoInstrumentations } from '@opentelemetry/auto-instrumentations-node';
@@ -126,11 +126,11 @@ var init_shared = __esm({
   }
 });
 function findBundledWasmDir() {
-  const fileDir = path27.dirname(fileURLToPath(import.meta.url));
+  const fileDir = path29.dirname(fileURLToPath(import.meta.url));
   const candidates = [
-    path27.join(fileDir, "wasm"),
+    path29.join(fileDir, "wasm"),
     // dist/index.js → dist/wasm/
-    path27.join(fileDir, "../wasm")
+    path29.join(fileDir, "../wasm")
     // dist/cli/main.js → dist/wasm/
   ];
   for (const candidate of candidates) {
@@ -171,7 +171,7 @@ function wasmPath(lang) {
   }
   const bundled = BUNDLED_WASM_MAP[lang];
   if (bundled) {
-    const bundledPath = path27.join(_bundledWasmDir, bundled);
+    const bundledPath = path29.join(_bundledWasmDir, bundled);
     if (existsSync(bundledPath)) return bundledPath;
   }
   return null;
@@ -184,14 +184,14 @@ async function initParser() {
 }
 async function getLanguage(lang) {
   if (languageCache.has(lang)) return languageCache.get(lang);
-  const path28 = wasmPath(lang);
-  if (!path28) {
+  const path30 = wasmPath(lang);
+  if (!path30) {
     languageCache.set(lang, null);
     return null;
   }
   try {
     await initParser();
-    const language = await Language.load(path28);
+    const language = await Language.load(path30);
     languageCache.set(lang, language);
     return language;
   } catch {
@@ -1162,7 +1162,7 @@ var init_logger = __esm({
         };
       }
       /** Global log directory: ~/.code-intel/logs */
-      static LOG_DIR = path27.join(os12.homedir(), ".code-intel", "logs");
+      static LOG_DIR = path29.join(os12.homedir(), ".code-intel", "logs");
       static getLogger() {
         if (!_Logger.instance) {
           const isProduction = process.env.NODE_ENV === "production";
@@ -1171,12 +1171,12 @@ var init_logger = __esm({
           transports.push(new winston.transports.Console());
           if (!isProduction) {
             try {
-              if (!fs19.existsSync(_Logger.LOG_DIR)) {
-                fs19.mkdirSync(_Logger.LOG_DIR, { recursive: true });
+              if (!fs23.existsSync(_Logger.LOG_DIR)) {
+                fs23.mkdirSync(_Logger.LOG_DIR, { recursive: true });
               }
               transports.push(
                 new DailyRotateFile({
-                  filename: path27.join(_Logger.LOG_DIR, "%DATE%-code-intel.log"),
+                  filename: path29.join(_Logger.LOG_DIR, "%DATE%-code-intel.log"),
                   datePattern: "YYYY-MM-DD",
                   maxSize: "20m",
                   maxFiles: "14d"
@@ -1961,7 +1961,7 @@ var init_parse_phase = __esm({
           const batch = filePaths.slice(i, i + CONCURRENCY);
           await Promise.all(batch.map(async (filePath) => {
             try {
-              const source = await fs19.promises.readFile(filePath, "utf-8");
+              const source = await fs23.promises.readFile(filePath, "utf-8");
               context2.fileCache.set(filePath, source);
             } catch {
             }
@@ -1974,14 +1974,14 @@ var init_parse_phase = __esm({
           const lang = detectLanguage(filePath);
           if (!lang) {
             if (context2.verbose) {
-              const relativePath2 = path27.relative(context2.workspaceRoot, filePath);
+              const relativePath2 = path29.relative(context2.workspaceRoot, filePath);
               logger_default.info(`  [parse] skipped (no parser): ${relativePath2}`);
             }
             continue;
           }
           const source = context2.fileCache.get(filePath);
           if (!source) continue;
-          const relativePath = path27.relative(context2.workspaceRoot, filePath);
+          const relativePath = path29.relative(context2.workspaceRoot, filePath);
           const fileNodeId = generateNodeId("file", relativePath, relativePath);
           const fileNode = context2.graph.getNode(fileNodeId);
           if (fileNode) {
@@ -2221,11 +2221,11 @@ var init_resolve_phase = __esm({
         let heritageEdges = 0;
         const fileIndex = /* @__PURE__ */ new Map();
         for (const fp of filePaths) {
-          const rel = path27.relative(workspaceRoot, fp);
+          const rel = path29.relative(workspaceRoot, fp);
           fileIndex.set(rel, fp);
           const noExt = rel.replace(/\.\w+$/, "");
           if (!fileIndex.has(noExt)) fileIndex.set(noExt, fp);
-          const base = path27.basename(rel, path27.extname(rel));
+          const base = path29.basename(rel, path29.extname(rel));
           if (!fileIndex.has(base)) fileIndex.set(base, fp);
         }
         const symbolIndex = /* @__PURE__ */ new Map();
@@ -2256,7 +2256,7 @@ var init_resolve_phase = __esm({
         for (const filePath of filePaths) {
           const lang = detectLanguage(filePath);
           if (!lang) continue;
-          const relativePath = path27.relative(workspaceRoot, filePath);
+          const relativePath = path29.relative(workspaceRoot, filePath);
           const fileNodeId = generateNodeId("file", relativePath, relativePath);
           const source = fileCache.get(filePath);
           if (!source) continue;
@@ -2269,13 +2269,13 @@ var init_resolve_phase = __esm({
             let resolvedRelPath = null;
             if (cleaned.startsWith(".")) {
               const cleanedNoJs = cleaned.replace(/\.(js|jsx)$/, "");
-              const fromDir = path27.dirname(relativePath);
+              const fromDir = path29.dirname(relativePath);
               for (const ext of ["", ".ts", ".tsx", ".js", ".jsx", ".py", ".java", ".go", "/index.ts", "/index.js"]) {
-                const candidate = path27.join(fromDir, cleanedNoJs + ext);
-                const normalized = path27.normalize(candidate);
+                const candidate = path29.join(fromDir, cleanedNoJs + ext);
+                const normalized = path29.normalize(candidate);
                 if (fileIndex.has(normalized)) {
                   const absPath = fileIndex.get(normalized);
-                  resolvedRelPath = path27.relative(workspaceRoot, absPath);
+                  resolvedRelPath = path29.relative(workspaceRoot, absPath);
                   break;
                 }
               }
@@ -2589,27 +2589,27 @@ __export(group_registry_exports, {
   saveSyncResult: () => saveSyncResult
 });
 function groupFile(name) {
-  return path27.join(GROUPS_DIR, `${name}.json`);
+  return path29.join(GROUPS_DIR, `${name}.json`);
 }
 function loadGroup(name) {
   try {
-    return JSON.parse(fs19.readFileSync(groupFile(name), "utf-8"));
+    return JSON.parse(fs23.readFileSync(groupFile(name), "utf-8"));
   } catch {
     return null;
   }
 }
 function saveGroup(group) {
-  fs19.mkdirSync(GROUPS_DIR, { recursive: true });
-  fs19.writeFileSync(groupFile(group.name), JSON.stringify(group, null, 2) + "\n");
+  fs23.mkdirSync(GROUPS_DIR, { recursive: true });
+  fs23.writeFileSync(groupFile(group.name), JSON.stringify(group, null, 2) + "\n");
 }
 function listGroups() {
   const groups = [];
   try {
-    for (const file of fs19.readdirSync(GROUPS_DIR)) {
+    for (const file of fs23.readdirSync(GROUPS_DIR)) {
       if (!file.endsWith(".json") || file.endsWith(".sync.json")) continue;
       try {
         const g = JSON.parse(
-          fs19.readFileSync(path27.join(GROUPS_DIR, file), "utf-8")
+          fs23.readFileSync(path29.join(GROUPS_DIR, file), "utf-8")
         );
         groups.push(g);
       } catch {
@@ -2621,16 +2621,16 @@ function listGroups() {
 }
 function deleteGroup(name) {
   try {
-    fs19.unlinkSync(groupFile(name));
+    fs23.unlinkSync(groupFile(name));
   } catch {
   }
   try {
-    fs19.unlinkSync(path27.join(GROUPS_DIR, `${name}.sync.json`));
+    fs23.unlinkSync(path29.join(GROUPS_DIR, `${name}.sync.json`));
   } catch {
   }
 }
 function groupExists(name) {
-  return fs19.existsSync(groupFile(name));
+  return fs23.existsSync(groupFile(name));
 }
 function addMember(groupName, member) {
   const group = loadGroup(groupName);
@@ -2656,16 +2656,16 @@ function removeMember(groupName, groupPath) {
   return group;
 }
 function saveSyncResult(result) {
-  fs19.mkdirSync(GROUPS_DIR, { recursive: true });
-  fs19.writeFileSync(
-    path27.join(GROUPS_DIR, `${result.groupName}.sync.json`),
+  fs23.mkdirSync(GROUPS_DIR, { recursive: true });
+  fs23.writeFileSync(
+    path29.join(GROUPS_DIR, `${result.groupName}.sync.json`),
     JSON.stringify(result, null, 2) + "\n"
   );
 }
 function loadSyncResult(groupName) {
   try {
     return JSON.parse(
-      fs19.readFileSync(path27.join(GROUPS_DIR, `${groupName}.sync.json`), "utf-8")
+      fs23.readFileSync(path29.join(GROUPS_DIR, `${groupName}.sync.json`), "utf-8")
     );
   } catch {
     return null;
@@ -2674,7 +2674,7 @@ function loadSyncResult(groupName) {
 var GROUPS_DIR;
 var init_group_registry = __esm({
   "src/multi-repo/group-registry.ts"() {
-    GROUPS_DIR = path27.join(os12.homedir(), ".code-intel", "groups");
+    GROUPS_DIR = path29.join(os12.homedir(), ".code-intel", "groups");
   }
 });
 
@@ -3735,10 +3735,10 @@ var init_codes = __esm({
   }
 });
 function secureMkdir(dir) {
-  fs19.mkdirSync(dir, { recursive: true, mode: SECURE_DIR_MODE });
+  fs23.mkdirSync(dir, { recursive: true, mode: SECURE_DIR_MODE });
   if (process.platform !== "win32") {
     try {
-      fs19.chmodSync(dir, SECURE_DIR_MODE);
+      fs23.chmodSync(dir, SECURE_DIR_MODE);
     } catch {
     }
   }
@@ -3746,17 +3746,17 @@ function secureMkdir(dir) {
 function secureChmodFile(file) {
   if (process.platform === "win32") return;
   try {
-    fs19.chmodSync(file, SECURE_FILE_MODE);
+    fs23.chmodSync(file, SECURE_FILE_MODE);
   } catch {
   }
 }
 function tightenDbFiles(dir) {
   if (process.platform === "win32") return;
-  if (!fs19.existsSync(dir)) return;
-  for (const name of fs19.readdirSync(dir)) {
+  if (!fs23.existsSync(dir)) return;
+  for (const name of fs23.readdirSync(dir)) {
     if (name.endsWith(".db") || name.endsWith(".db-wal") || name.endsWith(".db-shm")) {
       try {
-        fs19.chmodSync(path27.join(dir, name), SECURE_FILE_MODE);
+        fs23.chmodSync(path29.join(dir, name), SECURE_FILE_MODE);
       } catch {
       }
     }
@@ -3770,7 +3770,7 @@ var init_fs_secure = __esm({
   }
 });
 function getUsersDBPath() {
-  return process.env["CODE_INTEL_USERS_DB_PATH"] ?? path27.join(os12.homedir(), ".code-intel", "users.db");
+  return process.env["CODE_INTEL_USERS_DB_PATH"] ?? path29.join(os12.homedir(), ".code-intel", "users.db");
 }
 function getOrCreateUsersDB() {
   if (!_usersDB) {
@@ -3786,7 +3786,7 @@ var init_users_db = __esm({
     UsersDB = class {
       db;
       constructor(dbPath) {
-        const dir = path27.dirname(dbPath);
+        const dir = path29.dirname(dbPath);
         secureMkdir(dir);
         this.db = new Database3(dbPath);
         this.db.pragma("journal_mode = WAL");
@@ -4063,7 +4063,7 @@ function getScryptN() {
   return Number.isInteger(v) && v >= 1024 ? v : 1 << 14;
 }
 function getSecretsPath() {
-  return process.env["CODE_INTEL_SECRETS_PATH"] ?? path27.join(os12.homedir(), ".code-intel", ".secrets");
+  return process.env["CODE_INTEL_SECRETS_PATH"] ?? path29.join(os12.homedir(), ".code-intel", ".secrets");
 }
 function getMasterPassword() {
   const fromEnv = process.env["CODE_INTEL_SECRET_KEY"];
@@ -4094,8 +4094,8 @@ function decryptSecrets(encrypted) {
   return JSON.parse(plaintext.toString("utf8"));
 }
 function loadSecrets(secretsPath = getSecretsPath()) {
-  if (!fs19.existsSync(secretsPath)) return {};
-  const blob = fs19.readFileSync(secretsPath);
+  if (!fs23.existsSync(secretsPath)) return {};
+  const blob = fs23.readFileSync(secretsPath);
   return decryptSecrets(blob);
 }
 function getSecret(key, secretsPath = getSecretsPath()) {
@@ -4214,6 +4214,9 @@ function requireAuth(req, res, next) {
   }
   next();
 }
+function meetsRole(userRole, required) {
+  return (ROLE_RANK[userRole] ?? 0) >= (ROLE_RANK[required] ?? 0);
+}
 function requireRole(...roles) {
   return (req, res, next) => {
     if (!req.user) {
@@ -4228,7 +4231,8 @@ function requireRole(...roles) {
       });
       return;
     }
-    if (!roles.includes(req.user.role)) {
+    const allowed = roles.some((r) => meetsRole(req.user.role, r));
+    if (!allowed) {
       res.status(403).json({
         error: {
           code: ErrorCodes.FORBIDDEN,
@@ -4337,7 +4341,7 @@ function clearSessionCookie() {
 async function verifyPassword(plain, hash) {
   return bcrypt.compare(plain, hash);
 }
-var sessionStore, SESSION_COOKIE_NAME;
+var sessionStore, SESSION_COOKIE_NAME, ROLE_RANK;
 var init_middleware = __esm({
   "src/auth/middleware.ts"() {
     init_users_db();
@@ -4345,6 +4349,12 @@ var init_middleware = __esm({
     init_secret_store();
     sessionStore = /* @__PURE__ */ new Map();
     SESSION_COOKIE_NAME = "code_intel_session";
+    ROLE_RANK = {
+      viewer: 1,
+      "repo-owner": 2,
+      analyst: 3,
+      admin: 4
+    };
   }
 });
 function verifyWebSocketHandshake(req) {
@@ -4652,7 +4662,7 @@ init_shared();
 init_shared();
 init_typescript();
 function resolveRelative(rawPath, fromFile, workspace) {
-  const fromDir = path27.dirname(fromFile);
+  const fromDir = path29.dirname(fromFile);
   const cleaned = rawPath.replace(/['"]/g, "");
   const extensions = [".ts", ".tsx", ".js", ".jsx", "/index.ts", "/index.js"];
   const resolved = workspace.resolve(fromDir, cleaned);
@@ -4704,7 +4714,7 @@ var pythonModule = {
   resolveImport(rawPath, fromFile, workspace) {
     const cleaned = rawPath.replace(/['"]/g, "");
     const parts = cleaned.split(".");
-    const fromDir = path27.dirname(fromFile);
+    const fromDir = path29.dirname(fromFile);
     const relPath = parts.join("/");
     for (const suffix of ["/__init__.py", ".py"]) {
       const r = workspace.resolve(fromDir, relPath + suffix);
@@ -4783,7 +4793,7 @@ var cModule = {
   inheritanceStrategy: "none",
   resolveImport(rawPath, fromFile, workspace) {
     const cleaned = rawPath.replace(/[<>"']/g, "");
-    const fromDir = path27.dirname(fromFile);
+    const fromDir = path29.dirname(fromFile);
     return workspace.resolve(fromDir, cleaned);
   },
   isExported(_node) {
@@ -4806,7 +4816,7 @@ var cppModule = {
   inheritanceStrategy: "depth-first",
   resolveImport(rawPath, fromFile, workspace) {
     const cleaned = rawPath.replace(/[<>"']/g, "");
-    const fromDir = path27.dirname(fromFile);
+    const fromDir = path29.dirname(fromFile);
     return workspace.resolve(fromDir, cleaned);
   },
   isExported(_node) {
@@ -4968,7 +4978,7 @@ var dartModule = {
       const pkg = cleaned.replace("package:", "");
       return workspace.findByPackage(pkg);
     }
-    const fromDir = path27.dirname(fromFile);
+    const fromDir = path29.dirname(fromFile);
     return workspace.resolve(fromDir, cleaned);
   },
   isExported(node) {
@@ -5323,25 +5333,25 @@ function validateDAG(phases) {
   const visiting = /* @__PURE__ */ new Set();
   const visited = /* @__PURE__ */ new Set();
   const phaseMap = new Map(phases.map((p) => [p.name, p]));
-  function dfs(name, path28) {
+  function dfs(name, path30) {
     if (visiting.has(name)) {
-      const cycleStart = path28.indexOf(name);
-      const cycle = path28.slice(cycleStart).concat(name);
+      const cycleStart = path30.indexOf(name);
+      const cycle = path30.slice(cycleStart).concat(name);
       errors.push({ type: "cycle", message: `Cycle detected: ${cycle.join(" \u2192 ")}` });
       return true;
     }
     if (visited.has(name)) return false;
     visiting.add(name);
-    path28.push(name);
+    path30.push(name);
     const phase = phaseMap.get(name);
     if (phase) {
       for (const dep of phase.dependencies) {
-        if (dfs(dep, path28)) return true;
+        if (dfs(dep, path30)) return true;
       }
     }
     visiting.delete(name);
     visited.add(name);
-    path28.pop();
+    path30.pop();
     return false;
   }
   for (const phase of phases) {
@@ -5554,7 +5564,7 @@ var IGNORED_DIRS = /* @__PURE__ */ new Set([
 ]);
 function loadIgnorePatterns(workspaceRoot) {
   try {
-    const raw = fs19.readFileSync(path27.join(workspaceRoot, ".codeintelignore"), "utf-8");
+    const raw = fs23.readFileSync(path29.join(workspaceRoot, ".codeintelignore"), "utf-8");
     const extras = /* @__PURE__ */ new Set();
     for (const line of raw.split("\n")) {
       const trimmed = line.trim();
@@ -5578,7 +5588,7 @@ var scanPhase = {
     function walk(dir) {
       let entries;
       try {
-        entries = fs19.readdirSync(dir, { withFileTypes: true });
+        entries = fs23.readdirSync(dir, { withFileTypes: true });
       } catch {
         return;
       }
@@ -5587,15 +5597,15 @@ var scanPhase = {
           if (entry.name.startsWith(".")) continue;
           if (IGNORED_DIRS.has(entry.name)) continue;
           if (extraIgnore.has(entry.name)) continue;
-          walk(path27.join(dir, entry.name));
+          walk(path29.join(dir, entry.name));
         } else if (entry.isFile()) {
           const name = entry.name;
           if (IGNORED_FILE_SUFFIXES.some((s) => name.endsWith(s))) continue;
-          const ext = path27.extname(name);
+          const ext = path29.extname(name);
           if (!extensions.has(ext)) continue;
-          const fullPath = path27.join(dir, name);
+          const fullPath = path29.join(dir, name);
           try {
-            const stat = fs19.statSync(fullPath);
+            const stat = fs23.statSync(fullPath);
             if (stat.size > MAX_FILE_SIZE_BYTES) continue;
           } catch {
             continue;
@@ -5622,20 +5632,20 @@ var structurePhase = {
     const dirs = /* @__PURE__ */ new Set();
     let structDone = 0;
     for (const filePath of context2.filePaths) {
-      const relativePath = path27.relative(context2.workspaceRoot, filePath);
+      const relativePath = path29.relative(context2.workspaceRoot, filePath);
       const lang = detectLanguage(filePath);
       context2.graph.addNode({
         id: generateNodeId("file", relativePath, relativePath),
         kind: "file",
-        name: path27.basename(filePath),
+        name: path29.basename(filePath),
         filePath: relativePath,
         metadata: lang ? { language: lang } : void 0
       });
-      let dir = path27.dirname(relativePath);
+      let dir = path29.dirname(relativePath);
       while (dir && dir !== "." && dir !== "") {
         if (dirs.has(dir)) break;
         dirs.add(dir);
-        dir = path27.dirname(dir);
+        dir = path29.dirname(dir);
       }
       structDone++;
       context2.onPhaseProgress?.("structure", structDone, context2.filePaths.length);
@@ -5644,7 +5654,7 @@ var structurePhase = {
       context2.graph.addNode({
         id: generateNodeId("directory", dir, dir),
         kind: "directory",
-        name: path27.basename(dir),
+        name: path29.basename(dir),
         filePath: dir
       });
     }
@@ -5755,22 +5765,22 @@ var flowPhase = {
       const queue = [{ nodeId: ep.id, path: [ep.id] }];
       const visited = /* @__PURE__ */ new Set();
       while (queue.length > 0 && flowCount < maxFlows) {
-        const { nodeId, path: path28 } = queue.shift();
-        if (path28.length > maxDepth) continue;
+        const { nodeId, path: path30 } = queue.shift();
+        if (path30.length > maxDepth) continue;
         const callEdges = [...graph.findEdgesFrom(nodeId)].filter((e) => e.kind === "calls").slice(0, maxBranching);
-        if (callEdges.length === 0 && path28.length >= 3) {
+        if (callEdges.length === 0 && path30.length >= 3) {
           const flowId = generateNodeId("flow", ep.filePath, `flow-${flowCount}`);
           graph.addNode({
             id: flowId,
             kind: "flow",
             name: `${ep.name} flow ${flowCount}`,
             filePath: ep.filePath,
-            metadata: { steps: path28, entryPoint: ep.name }
+            metadata: { steps: path30, entryPoint: ep.name }
           });
-          for (let i = 0; i < path28.length; i++) {
+          for (let i = 0; i < path30.length; i++) {
             graph.addEdge({
-              id: generateEdgeId(path28[i], flowId, `step_of_${i}`),
-              source: path28[i],
+              id: generateEdgeId(path30[i], flowId, `step_of_${i}`),
+              source: path30[i],
               target: flowId,
               kind: "step_of",
               weight: 1,
@@ -5783,7 +5793,7 @@ var flowPhase = {
         for (const edge of callEdges) {
           if (visited.has(edge.target)) continue;
           visited.add(edge.target);
-          queue.push({ nodeId: edge.target, path: [...path28, edge.target] });
+          queue.push({ nodeId: edge.target, path: [...path30, edge.target] });
         }
       }
     }
@@ -5801,7 +5811,7 @@ var LLMGovernanceLogger = class {
   }
   /** Path to the JSONL log file. */
   getLogPath() {
-    return process.env["CODE_INTEL_GOVERNANCE_LOG_PATH"] ?? path27.join(os12.homedir(), ".code-intel", "llm-governance.jsonl");
+    return process.env["CODE_INTEL_GOVERNANCE_LOG_PATH"] ?? path29.join(os12.homedir(), ".code-intel", "llm-governance.jsonl");
   }
   /**
    * Append an entry to the governance log.
@@ -5817,8 +5827,8 @@ var LLMGovernanceLogger = class {
         ...entry
       };
       const logPath = this.getLogPath();
-      fs19.mkdirSync(path27.dirname(logPath), { recursive: true });
-      fs19.appendFileSync(logPath, JSON.stringify(full) + "\n", "utf-8");
+      fs23.mkdirSync(path29.dirname(logPath), { recursive: true });
+      fs23.appendFileSync(logPath, JSON.stringify(full) + "\n", "utf-8");
     } catch {
     }
   }
@@ -5828,7 +5838,7 @@ var LLMGovernanceLogger = class {
    */
   readLog(limit = 100) {
     try {
-      const raw = fs19.readFileSync(this.getLogPath(), "utf-8");
+      const raw = fs23.readFileSync(this.getLogPath(), "utf-8");
       const lines = raw.split("\n").filter((l) => l.trim().length > 0).slice(-limit);
       return lines.map((l) => JSON.parse(l));
     } catch {
@@ -5972,17 +5982,17 @@ function traceFlow(entryId, graph, maxDepth = 10, maxBranching = 4) {
     const queue = [{ nodeId: entryId, path: [entryId] }];
     const visited = /* @__PURE__ */ new Set();
     while (queue.length > 0 && flows.length < maxFlows) {
-      const { nodeId, path: path28 } = queue.shift();
-      if (path28.length > maxDepth) continue;
+      const { nodeId, path: path30 } = queue.shift();
+      if (path30.length > maxDepth) continue;
       const callEdges = [...graph.findEdgesFrom(nodeId)].filter((e) => e.kind === "calls").slice(0, maxBranching);
-      if (callEdges.length === 0 && path28.length >= 3) {
-        flows.push({ entryPointId: entryId, steps: [...path28] });
+      if (callEdges.length === 0 && path30.length >= 3) {
+        flows.push({ entryPointId: entryId, steps: [...path30] });
         continue;
       }
       for (const edge of callEdges) {
         if (visited.has(edge.target)) continue;
         visited.add(edge.target);
-        queue.push({ nodeId: edge.target, path: [...path28, edge.target] });
+        queue.push({ nodeId: edge.target, path: [...path30, edge.target] });
       }
     }
   }
@@ -6216,7 +6226,7 @@ init_embedder();
 async function hybridSearch(graph, query, limit, options = {}) {
   const { vectorDbPath, bm25Limit = 50, vectorLimit = 50 } = options;
   const bm25Promise = Promise.resolve(textSearch(graph, query, bm25Limit));
-  const hasVectorDb = Boolean(vectorDbPath && fs19.existsSync(vectorDbPath));
+  const hasVectorDb = Boolean(vectorDbPath && fs23.existsSync(vectorDbPath));
   if (!hasVectorDb) {
     const bm25Results2 = await bm25Promise;
     return {
@@ -6273,7 +6283,7 @@ var DbManager = class {
     this.dbPath = dbPath;
   }
   async init() {
-    fs19.mkdirSync(path27.dirname(this.dbPath), { recursive: true });
+    fs23.mkdirSync(path29.dirname(this.dbPath), { recursive: true });
     this.db = new Database(this.dbPath);
     await this.db.init();
     this.conn = new Connection(this.db);
@@ -6363,7 +6373,7 @@ function getCreateEdgeTableDDL() {
 )`];
 }
 function writeNodeCSVs(graph, outputDir) {
-  fs19.mkdirSync(outputDir, { recursive: true });
+  fs23.mkdirSync(outputDir, { recursive: true });
   const header = "id,name,file_path,start_line,end_line,exported,content,metadata\n";
   const tableBuffers = /* @__PURE__ */ new Map();
   const tableFilePaths = /* @__PURE__ */ new Map();
@@ -6371,7 +6381,7 @@ function writeNodeCSVs(graph, outputDir) {
     const table = NODE_TABLE_MAP[node.kind];
     if (!tableBuffers.has(table)) {
       tableBuffers.set(table, [header]);
-      tableFilePaths.set(table, path27.join(outputDir, `${table}.csv`));
+      tableFilePaths.set(table, path29.join(outputDir, `${table}.csv`));
     }
     tableBuffers.get(table).push(
       csvRow([
@@ -6391,12 +6401,12 @@ function writeNodeCSVs(graph, outputDir) {
     );
   }
   for (const [table, lines] of tableBuffers) {
-    fs19.writeFileSync(tableFilePaths.get(table), lines.join(""), "utf-8");
+    fs23.writeFileSync(tableFilePaths.get(table), lines.join(""), "utf-8");
   }
   return tableFilePaths;
 }
 function writeEdgeCSV(graph, outputDir) {
-  fs19.mkdirSync(outputDir, { recursive: true });
+  fs23.mkdirSync(outputDir, { recursive: true });
   const header = "from_id,to_id,kind,weight,label\n";
   const groups = /* @__PURE__ */ new Map();
   for (const edge of graph.allEdges()) {
@@ -6407,7 +6417,7 @@ function writeEdgeCSV(graph, outputDir) {
     const toTable = NODE_TABLE_MAP[targetNode.kind];
     const key = `${fromTable}->${toTable}`;
     if (!groups.has(key)) {
-      const filePath = path27.join(outputDir, `edges_${fromTable}_${toTable}.csv`);
+      const filePath = path29.join(outputDir, `edges_${fromTable}_${toTable}.csv`);
       groups.set(key, { lines: [header], from: fromTable, to: toTable, filePath });
     }
     groups.get(key).lines.push(
@@ -6422,7 +6432,7 @@ function writeEdgeCSV(graph, outputDir) {
   }
   const result = [];
   for (const group of groups.values()) {
-    fs19.writeFileSync(group.filePath, group.lines.join(""), "utf-8");
+    fs23.writeFileSync(group.filePath, group.lines.join(""), "utf-8");
     result.push({ fromTable: group.from, toTable: group.to, filePath: group.filePath });
   }
   return result;
@@ -6450,7 +6460,7 @@ async function loadGraphToDB(graph, dbManager) {
     } catch {
     }
   }
-  const tmpDir = fs19.mkdtempSync(path27.join(os12.tmpdir(), "code-intel-csv-"));
+  const tmpDir = fs23.mkdtempSync(path29.join(os12.tmpdir(), "code-intel-csv-"));
   try {
     const nodeTableFiles = writeNodeCSVs(graph, tmpDir);
     const edgeGroups = writeEdgeCSV(graph, tmpDir);
@@ -6469,8 +6479,8 @@ async function loadGraphToDB(graph, dbManager) {
     }
     let nodeCount = 0;
     for (const [table, csvPath] of nodeTableFiles) {
-      if (!fs19.existsSync(csvPath)) continue;
-      const stat = fs19.statSync(csvPath);
+      if (!fs23.existsSync(csvPath)) continue;
+      const stat = fs23.statSync(csvPath);
       if (stat.size < 50) continue;
       try {
         await dbManager.execute(
@@ -6483,8 +6493,8 @@ async function loadGraphToDB(graph, dbManager) {
     }
     let edgeCount = 0;
     for (const group of edgeGroups) {
-      if (!fs19.existsSync(group.filePath)) continue;
-      const stat = fs19.statSync(group.filePath);
+      if (!fs23.existsSync(group.filePath)) continue;
+      const stat = fs23.statSync(group.filePath);
       if (stat.size < 50) continue;
       try {
         await dbManager.execute(
@@ -6498,7 +6508,7 @@ async function loadGraphToDB(graph, dbManager) {
     return { nodeCount, edgeCount };
   } finally {
     try {
-      fs19.rmSync(tmpDir, { recursive: true, force: true });
+      fs23.rmSync(tmpDir, { recursive: true, force: true });
     } catch {
     }
   }
@@ -6550,19 +6560,19 @@ function buildNodeProps(node) {
 function escCypher(s) {
   return s.replace(/\\/g, "\\\\").replace(/'/g, "\\'").replace(/\n/g, "\\n").replace(/\r/g, "");
 }
-var GLOBAL_DIR = path27.join(os12.homedir(), ".code-intel");
-var REPOS_FILE = path27.join(GLOBAL_DIR, "repos.json");
+var GLOBAL_DIR = path29.join(os12.homedir(), ".code-intel");
+var REPOS_FILE = path29.join(GLOBAL_DIR, "repos.json");
 function loadRegistry() {
   try {
-    const data = fs19.readFileSync(REPOS_FILE, "utf-8");
+    const data = fs23.readFileSync(REPOS_FILE, "utf-8");
     return JSON.parse(data);
   } catch {
     return [];
   }
 }
 function saveRegistry(entries) {
-  fs19.mkdirSync(GLOBAL_DIR, { recursive: true });
-  fs19.writeFileSync(REPOS_FILE, JSON.stringify(entries, null, 2));
+  fs23.mkdirSync(GLOBAL_DIR, { recursive: true });
+  fs23.writeFileSync(REPOS_FILE, JSON.stringify(entries, null, 2));
 }
 function upsertRepo(entry) {
   const entries = loadRegistry();
@@ -6579,23 +6589,23 @@ function removeRepo(repoPath) {
   saveRegistry(entries);
 }
 function saveMetadata(repoDir, metadata) {
-  const metaDir = path27.join(repoDir, ".code-intel");
-  fs19.mkdirSync(metaDir, { recursive: true });
-  fs19.writeFileSync(path27.join(metaDir, "meta.json"), JSON.stringify(metadata, null, 2));
+  const metaDir = path29.join(repoDir, ".code-intel");
+  fs23.mkdirSync(metaDir, { recursive: true });
+  fs23.writeFileSync(path29.join(metaDir, "meta.json"), JSON.stringify(metadata, null, 2));
 }
 function loadMetadata(repoDir) {
   try {
-    const data = fs19.readFileSync(path27.join(repoDir, ".code-intel", "meta.json"), "utf-8");
+    const data = fs23.readFileSync(path29.join(repoDir, ".code-intel", "meta.json"), "utf-8");
     return JSON.parse(data);
   } catch {
     return null;
   }
 }
 function getDbPath(repoDir) {
-  return path27.join(repoDir, ".code-intel", "graph.db");
+  return path29.join(repoDir, ".code-intel", "graph.db");
 }
 function getVectorDbPath(repoDir) {
-  return path27.join(repoDir, ".code-intel", "vector.db");
+  return path29.join(repoDir, ".code-intel", "vector.db");
 }
 
 // src/mcp-server/server.ts
@@ -6673,6 +6683,205 @@ async function loadGraphFromDB(graph, db) {
 
 // src/multi-repo/group-sync.ts
 init_logger();
+function scanForFiles(root, matcher, maxDepth = 2) {
+  const results = [];
+  function walk(dir, depth) {
+    if (depth > maxDepth) return;
+    let entries;
+    try {
+      entries = fs23.readdirSync(dir, { withFileTypes: true });
+    } catch {
+      return;
+    }
+    for (const entry of entries) {
+      const full = path29.join(dir, entry.name);
+      if (entry.isDirectory() && !entry.name.startsWith(".") && entry.name !== "node_modules") {
+        walk(full, depth + 1);
+      } else if (entry.isFile() && matcher(entry.name)) {
+        results.push(full);
+      }
+    }
+  }
+  walk(root, 0);
+  return results;
+}
+
+// src/multi-repo/schema-parsers/openapi-parser.ts
+var OPENAPI_FILENAMES = /* @__PURE__ */ new Set([
+  "openapi.yaml",
+  "openapi.json",
+  "openapi.yml",
+  "swagger.yaml",
+  "swagger.json",
+  "swagger.yml"
+]);
+var HTTP_METHODS = ["get", "post", "put", "patch", "delete", "head", "options"];
+function tryParseFile(filePath) {
+  const ext = path29.extname(filePath).toLowerCase();
+  const content = fs23.readFileSync(filePath, "utf-8");
+  if (ext === ".json") {
+    try {
+      return JSON.parse(content);
+    } catch {
+      return null;
+    }
+  }
+  return null;
+}
+async function parseOpenAPIContracts(repoRoot) {
+  const files = scanForFiles(repoRoot, (name) => OPENAPI_FILENAMES.has(name));
+  const contracts = [];
+  for (const filePath of files) {
+    const spec = tryParseFile(filePath);
+    if (!spec) continue;
+    const paths = spec["paths"];
+    if (!paths || typeof paths !== "object") continue;
+    for (const [pathStr, pathItem] of Object.entries(paths)) {
+      if (!pathItem || typeof pathItem !== "object") continue;
+      const ops = pathItem;
+      for (const method of HTTP_METHODS) {
+        if (!(method in ops)) continue;
+        const operation = ops[method];
+        if (!operation) continue;
+        const requestBody = operation["requestBody"];
+        const requestSchema = requestBody?.["content"] ? requestBody["content"]["application/json"]?.["schema"] : void 0;
+        const responses = operation["responses"];
+        const ok200 = responses?.["200"];
+        const responseSchema = ok200?.["content"] ? ok200["content"]["application/json"]?.["schema"] : void 0;
+        contracts.push({
+          name: `${method.toUpperCase()} ${pathStr}`,
+          kind: "route",
+          method: method.toUpperCase(),
+          path: pathStr,
+          ...requestSchema ? { requestSchema } : {},
+          ...responseSchema ? { responseSchema } : {},
+          filePath
+        });
+      }
+    }
+  }
+  return contracts;
+}
+function extractFieldNames(block) {
+  return block.split("\n").map((line) => line.trim()).filter((line) => line && !line.startsWith("#")).map((line) => {
+    const m = line.match(/^(\w+)\s*[(:]/);
+    return m ? m[1] : null;
+  }).filter((f) => f !== null);
+}
+async function parseGraphQLContracts(repoRoot) {
+  const files = scanForFiles(repoRoot, (name) => name.endsWith(".graphql") || name.endsWith(".gql"));
+  const contracts = [];
+  for (const filePath of files) {
+    const content = fs23.readFileSync(filePath, "utf-8");
+    const typeRegex = /type\s+(\w+)\s*\{([^}]+)\}/g;
+    let match;
+    while ((match = typeRegex.exec(content)) !== null) {
+      const typeName = match[1];
+      const body = match[2];
+      const fields = extractFieldNames(body);
+      const lcName = typeName.toLowerCase();
+      if (lcName === "query") {
+        for (const field of fields) {
+          contracts.push({ name: `query.${field}`, kind: "graphql", operation: "query", fields, filePath });
+        }
+      } else if (lcName === "mutation") {
+        for (const field of fields) {
+          contracts.push({ name: `mutation.${field}`, kind: "graphql", operation: "mutation", fields, filePath });
+        }
+      } else if (lcName === "subscription") {
+        for (const field of fields) {
+          contracts.push({ name: `subscription.${field}`, kind: "graphql", operation: "subscription", fields, filePath });
+        }
+      } else {
+        contracts.push({ name: `type.${typeName}`, kind: "graphql", operation: "type", fields, filePath });
+      }
+    }
+  }
+  return contracts;
+}
+async function parseProtoContracts(repoRoot) {
+  const files = scanForFiles(repoRoot, (name) => name.endsWith(".proto"));
+  const contracts = [];
+  for (const filePath of files) {
+    const content = fs23.readFileSync(filePath, "utf-8");
+    const serviceRegex = /service\s+(\w+)\s*\{([^}]+)\}/g;
+    let serviceMatch;
+    while ((serviceMatch = serviceRegex.exec(content)) !== null) {
+      const serviceName = serviceMatch[1];
+      const body = serviceMatch[2];
+      const rpcRegex = /rpc\s+(\w+)\s*\((\w+)\)\s*returns\s*\((\w+)\)/g;
+      let rpcMatch;
+      while ((rpcMatch = rpcRegex.exec(body)) !== null) {
+        const rpcName = rpcMatch[1];
+        const inputType = rpcMatch[2];
+        const outputType = rpcMatch[3];
+        contracts.push({
+          name: `${serviceName}.${rpcName}`,
+          kind: "grpc",
+          serviceName,
+          rpcName,
+          inputType,
+          outputType,
+          filePath
+        });
+      }
+    }
+  }
+  return contracts;
+}
+
+// src/multi-repo/type-similarity.ts
+function normalizeType(t) {
+  return t.toLowerCase().replace(/[\[\]?<>\s]/g, "").trim();
+}
+function paramTypeSimilarity(paramsA, paramsB) {
+  if (paramsA.length === 0 && paramsB.length === 0) return 1;
+  if (paramsA.length === 0 || paramsB.length === 0) return 0;
+  const setA = new Set(paramsA.map((p) => normalizeType(p.type ?? "")).filter(Boolean));
+  const setB = new Set(paramsB.map((p) => normalizeType(p.type ?? "")).filter(Boolean));
+  if (setA.size === 0 && setB.size === 0) return 1;
+  if (setA.size === 0 || setB.size === 0) return 0;
+  const intersection = [...setA].filter((x) => setB.has(x)).length;
+  const union = (/* @__PURE__ */ new Set([...setA, ...setB])).size;
+  return intersection / union;
+}
+function returnTypeSimilarity(typeA, typeB) {
+  if (!typeA || !typeB) return 0.5;
+  const a = normalizeType(typeA);
+  const b = normalizeType(typeB);
+  if (a === b) return 1;
+  const compatible = [
+    ["string", "str"],
+    ["number", "int"],
+    ["number", "float"],
+    ["number", "double"],
+    ["boolean", "bool"],
+    ["void", "unit"],
+    ["void", "none"]
+  ];
+  for (const [x, y] of compatible) {
+    if (a === x && b === y || a === y && b === x) return 0.8;
+  }
+  return 0;
+}
+function paramCountSimilarity(countA, countB) {
+  const maxCount = Math.max(countA, countB, 1);
+  return 1 - Math.abs(countA - countB) / maxCount;
+}
+function computeContractSimilarity(a, b, nameSim) {
+  const paramsA = a.parameters ?? [];
+  const paramsB = b.parameters ?? [];
+  const ptSim = paramTypeSimilarity(paramsA, paramsB);
+  const rtSim = returnTypeSimilarity(a.returnType, b.returnType);
+  const pcSim = paramCountSimilarity(paramsA.length, paramsB.length);
+  let score = 0.4 * nameSim + 0.3 * ptSim + 0.2 * rtSim + 0.1 * pcSim;
+  if (ptSim > 0.8) {
+    score = Math.min(1, score * 1.2);
+  }
+  return score;
+}
+
+// src/multi-repo/group-sync.ts
 function extractContracts(graph, repoName, repoPath) {
   const contracts = [];
   for (const node of graph.allNodes()) {
@@ -6685,7 +6894,10 @@ function extractContracts(graph, repoName, repoPath) {
         nodeId: node.id,
         nodeKind: node.kind,
         filePath: node.filePath,
-        signature: node.content?.split("\n")[0]?.trim()
+        signature: node.content?.split("\n")[0]?.trim(),
+        parameters: node.metadata?.parameters ?? node.metadata?.params,
+        returnType: node.metadata?.returnType,
+        exported: node.exported
       });
     }
     if (node.kind === "route") {
@@ -6747,13 +6959,15 @@ function matchContracts(allContracts) {
         const consumer = consumerByName.get(provider.name);
         if (consumer) {
           const sameKind = provider.kind === consumer.kind;
+          const typedScore = computeContractSimilarity(provider, consumer, 1);
+          const confidence = sameKind ? Math.max(typedScore, 0.9) : Math.max(typedScore, 0.6);
           links.push({
             providerRepo: provider.repoName,
             providerContract: provider.name,
             consumerRepo: consumer.repoName,
             consumerContract: consumer.name,
             matchKind: provider.kind === "route" ? "route-match" : "name-match",
-            confidence: sameKind ? 0.9 : 0.6
+            confidence: Math.min(1, confidence)
           });
         } else {
           const providerLC = provider.name.toLowerCase();
@@ -6794,8 +7008,8 @@ async function syncGroup(group) {
       logger_default.warn(`  \u26A0 Registry entry "${member.registryName}" not found \u2014 skipping ${member.groupPath}`);
       continue;
     }
-    const dbPath = path27.join(regEntry.path, ".code-intel", "graph.db");
-    if (!fs19.existsSync(dbPath)) {
+    const dbPath = path29.join(regEntry.path, ".code-intel", "graph.db");
+    if (!fs23.existsSync(dbPath)) {
       logger_default.warn(`  \u26A0 No index at ${dbPath} \u2014 run \`code-intel analyze ${regEntry.path}\` first`);
       continue;
     }
@@ -6811,6 +7025,44 @@ async function syncGroup(group) {
       continue;
     }
     const contracts = extractContracts(graph, member.registryName, regEntry.path);
+    const [openapiContracts, graphqlContracts, protoContracts] = await Promise.all([
+      parseOpenAPIContracts(regEntry.path).catch(() => []),
+      parseGraphQLContracts(regEntry.path).catch(() => []),
+      parseProtoContracts(regEntry.path).catch(() => [])
+    ]);
+    for (const c of openapiContracts) {
+      contracts.push({
+        repoName: member.registryName,
+        repoPath: regEntry.path,
+        kind: "route",
+        name: c.name,
+        nodeId: `openapi:${c.method}:${c.path}`,
+        nodeKind: "route",
+        filePath: c.filePath
+      });
+    }
+    for (const c of graphqlContracts) {
+      contracts.push({
+        repoName: member.registryName,
+        repoPath: regEntry.path,
+        kind: "graphql",
+        name: c.name,
+        nodeId: `graphql:${c.name}`,
+        nodeKind: "graphql",
+        filePath: c.filePath
+      });
+    }
+    for (const c of protoContracts) {
+      contracts.push({
+        repoName: member.registryName,
+        repoPath: regEntry.path,
+        kind: "grpc",
+        name: c.name,
+        nodeId: `grpc:${c.serviceName}:${c.rpcName}`,
+        nodeKind: "grpc",
+        filePath: c.filePath
+      });
+    }
     logger_default.info(`  \u2713 ${member.registryName} (${member.groupPath}): ${contracts.length} contracts`);
     allContracts.push(...contracts);
   }
@@ -6830,8 +7082,8 @@ async function queryGroup(group, query, limit = 20) {
   for (const member of group.members) {
     const regEntry = registry.find((r) => r.name === member.registryName);
     if (!regEntry) continue;
-    const dbPath = path27.join(regEntry.path, ".code-intel", "graph.db");
-    if (!fs19.existsSync(dbPath)) continue;
+    const dbPath = path29.join(regEntry.path, ".code-intel", "graph.db");
+    if (!fs23.existsSync(dbPath)) continue;
     const graph = createKnowledgeGraph();
     const db = new DbManager(dbPath);
     try {
@@ -7331,22 +7583,22 @@ function suggestTests(graph, symbolName) {
   const callPaths = [];
   const pathQueue = [{ id: targetId, path: [symbolName], depth: 0 }];
   while (pathQueue.length > 0 && callPaths.length < 5) {
-    const { id, path: path28, depth } = pathQueue.shift();
+    const { id, path: path30, depth } = pathQueue.shift();
     let hasCallers = false;
     for (const edge of graph.findEdgesTo(id)) {
       if (edge.kind !== "calls") continue;
       const callerNode = graph.getNode(edge.source);
       if (!callerNode) continue;
       hasCallers = true;
-      const newPath = [callerNode.name, ...path28];
+      const newPath = [callerNode.name, ...path30];
       if (depth + 1 >= 3 || callPaths.length >= 5) {
         if (callPaths.length < 5) callPaths.push(newPath);
         continue;
       }
       pathQueue.push({ id: edge.source, path: newPath, depth: depth + 1 });
     }
-    if (!hasCallers && path28.length > 1) {
-      callPaths.push(path28);
+    if (!hasCallers && path30.length > 1) {
+      callPaths.push(path30);
     }
   }
   if (callPaths.length === 0) {
@@ -8244,7 +8496,7 @@ async function dispatchTool(name, a, graph, repoName, workspaceRoot) {
       for (const { filePath: changedFile, changedLines } of changedFiles) {
         for (const node of graph.allNodes()) {
           if (!node.filePath) continue;
-          const normNode = node.filePath.replace(repoRoot + "/", "").replace(repoRoot + path27.sep, "");
+          const normNode = node.filePath.replace(repoRoot + "/", "").replace(repoRoot + path29.sep, "");
           const normChanged = changedFile.replace(/^a\/|^b\//, "");
           if (!normNode.endsWith(normChanged) && !normChanged.endsWith(normNode)) continue;
           if (node.startLine !== void 0 && node.endLine !== void 0) {
@@ -8610,7 +8862,7 @@ var STUCK_THRESHOLD_MINUTES = 30;
 var JobsDB = class {
   db;
   constructor(dbPath) {
-    fs19.mkdirSync(path27.dirname(dbPath), { recursive: true });
+    fs23.mkdirSync(path29.dirname(dbPath), { recursive: true });
     this.db = new Database3(dbPath);
     this.db.pragma("journal_mode = WAL");
     this.db.pragma("foreign_keys = ON");
@@ -8752,7 +9004,7 @@ var JobsDB = class {
   }
 };
 function getJobsDBPath() {
-  return path27.join(os12.homedir(), ".code-intel", "jobs.db");
+  return path29.join(os12.homedir(), ".code-intel", "jobs.db");
 }
 var _jobsDB = null;
 function getOrCreateJobsDB() {
@@ -8844,7 +9096,7 @@ var BACKUP_VERSION = "1.0";
 var ALGORITHM = "aes-256-gcm";
 var IV_LENGTH = 16;
 function getBackupDir() {
-  return path27.join(os12.homedir(), ".code-intel", "backups");
+  return path29.join(os12.homedir(), ".code-intel", "backups");
 }
 function getBackupKey() {
   const keyHex = process.env["CODE_INTEL_BACKUP_KEY"];
@@ -8875,30 +9127,30 @@ var BackupService = class {
   constructor(backupDir) {
     this.backupDir = backupDir ?? getBackupDir();
     this.key = getBackupKey();
-    fs19.mkdirSync(this.backupDir, { recursive: true });
+    fs23.mkdirSync(this.backupDir, { recursive: true });
   }
   /**
    * Create a backup for a repository.
    * Returns the backup entry.
    */
   createBackup(repoPath) {
-    const codeIntelDir = path27.join(repoPath, ".code-intel");
+    const codeIntelDir = path29.join(repoPath, ".code-intel");
     const id = v4();
     const createdAt = (/* @__PURE__ */ new Date()).toISOString();
     const filesToBackup = [];
     const candidates = ["graph.db", "vector.db", "meta.json"];
     for (const f of candidates) {
-      const fp = path27.join(codeIntelDir, f);
-      if (fs19.existsSync(fp)) {
+      const fp = path29.join(codeIntelDir, f);
+      if (fs23.existsSync(fp)) {
         filesToBackup.push({ name: f, localPath: fp });
       }
     }
-    const registryPath = path27.join(os12.homedir(), ".code-intel", "registry.json");
-    if (fs19.existsSync(registryPath)) {
+    const registryPath = path29.join(os12.homedir(), ".code-intel", "registry.json");
+    if (fs23.existsSync(registryPath)) {
       filesToBackup.push({ name: "registry.json", localPath: registryPath });
     }
-    const usersDbPath = path27.join(os12.homedir(), ".code-intel", "users.db");
-    if (fs19.existsSync(usersDbPath)) {
+    const usersDbPath = path29.join(os12.homedir(), ".code-intel", "users.db");
+    if (fs23.existsSync(usersDbPath)) {
       filesToBackup.push({ name: "users.db", localPath: usersDbPath });
     }
     if (filesToBackup.length === 0) {
@@ -8909,7 +9161,7 @@ var BackupService = class {
       createdAt,
       version: BACKUP_VERSION,
       files: filesToBackup.map((f) => {
-        const data = fs19.readFileSync(f.localPath);
+        const data = fs23.readFileSync(f.localPath);
         return {
           name: f.name,
           sha256: crypto5.createHash("sha256").update(data).digest("hex"),
@@ -8923,7 +9175,7 @@ var BackupService = class {
     manifestLenBuf.writeUInt32BE(manifestBuf.length, 0);
     parts.push(manifestLenBuf, manifestBuf);
     for (const f of filesToBackup) {
-      const data = fs19.readFileSync(f.localPath);
+      const data = fs23.readFileSync(f.localPath);
       const nameBuf = Buffer.from(f.name, "utf-8");
       const nameLenBuf = Buffer.alloc(2);
       nameLenBuf.writeUInt16BE(nameBuf.length, 0);
@@ -8934,8 +9186,8 @@ var BackupService = class {
     const plaintext = Buffer.concat(parts);
     const encrypted = encryptBuffer(plaintext, this.key);
     const backupFileName = `backup-${id}.cib`;
-    const backupPath = path27.join(this.backupDir, backupFileName);
-    fs19.writeFileSync(backupPath, encrypted);
+    const backupPath = path29.join(this.backupDir, backupFileName);
+    fs23.writeFileSync(backupPath, encrypted);
     const entry = {
       id,
       createdAt,
@@ -8962,9 +9214,9 @@ var BackupService = class {
   async uploadToS3(entry) {
     const cfg = getS3Config();
     if (!cfg) throw new Error("S3 not configured. Set CODE_INTEL_BACKUP_S3_BUCKET, CODE_INTEL_BACKUP_S3_ACCESS_KEY_ID, CODE_INTEL_BACKUP_S3_SECRET_ACCESS_KEY.");
-    const fileName = path27.basename(entry.path);
+    const fileName = path29.basename(entry.path);
     const s3Key = `${cfg.prefix}${fileName}`;
-    const body = fs19.readFileSync(entry.path);
+    const body = fs23.readFileSync(entry.path);
     const result = await s3Request({ method: "PUT", cfg, key: s3Key, body });
     if (result.statusCode < 200 || result.statusCode >= 300) {
       throw new Error(`S3 upload failed (HTTP ${result.statusCode}): ${result.body.slice(0, 200)}`);
@@ -8981,8 +9233,8 @@ var BackupService = class {
     if (result.statusCode < 200 || result.statusCode >= 300) {
       throw new Error(`S3 download failed (HTTP ${result.statusCode}): ${result.body.slice(0, 200)}`);
     }
-    fs19.mkdirSync(path27.dirname(destPath), { recursive: true });
-    fs19.writeFileSync(destPath, Buffer.from(result.body, "binary"));
+    fs23.mkdirSync(path29.dirname(destPath), { recursive: true });
+    fs23.writeFileSync(destPath, Buffer.from(result.body, "binary"));
   }
   /**
    * List backup objects in S3 with the configured prefix.
@@ -9028,10 +9280,10 @@ var BackupService = class {
     if (!entry) {
       throw new Error(`Backup "${backupId}" not found.`);
     }
-    if (!fs19.existsSync(entry.path)) {
+    if (!fs23.existsSync(entry.path)) {
       throw new Error(`Backup file not found at: ${entry.path}`);
     }
-    const encrypted = fs19.readFileSync(entry.path);
+    const encrypted = fs23.readFileSync(entry.path);
     let plaintext;
     try {
       plaintext = decryptBuffer(encrypted, this.key);
@@ -9045,8 +9297,8 @@ var BackupService = class {
     offset += manifestLen;
     const manifest = JSON.parse(manifestStr);
     const restoreBase = targetRepoPath ?? entry.repoPath;
-    const codeIntelDir = path27.join(restoreBase, ".code-intel");
-    fs19.mkdirSync(codeIntelDir, { recursive: true });
+    const codeIntelDir = path29.join(restoreBase, ".code-intel");
+    fs23.mkdirSync(codeIntelDir, { recursive: true });
     for (const fileEntry of manifest.files) {
       const nameLen = plaintext.readUInt16BE(offset);
       offset += 2;
@@ -9063,18 +9315,18 @@ var BackupService = class {
       }
       let destPath;
       if (name === "registry.json" || name === "users.db") {
-        destPath = path27.join(os12.homedir(), ".code-intel", name);
+        destPath = path29.join(os12.homedir(), ".code-intel", name);
       } else {
-        destPath = path27.join(codeIntelDir, name);
+        destPath = path29.join(codeIntelDir, name);
       }
-      fs19.writeFileSync(destPath, data);
+      fs23.writeFileSync(destPath, data);
     }
   }
   /**
    * Apply retention policy: keep N daily, M weekly, L monthly backups.
    */
   applyRetention(options = { daily: 7, weekly: 4, monthly: 12 }) {
-    const entries = this._loadIndex().filter((e) => fs19.existsSync(e.path)).sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());
+    const entries = this._loadIndex().filter((e) => fs23.existsSync(e.path)).sort((a, b) => new Date(b.createdAt).getTime() - new Date(a.createdAt).getTime());
     const keep = /* @__PURE__ */ new Set();
     const now = /* @__PURE__ */ new Date();
     const dailyCutoff = new Date(now);
@@ -9104,7 +9356,7 @@ var BackupService = class {
     for (const e of entries) {
       if (!keep.has(e.id)) {
         try {
-          fs19.unlinkSync(e.path);
+          fs23.unlinkSync(e.path);
           deleted++;
         } catch {
         }
@@ -9116,17 +9368,17 @@ var BackupService = class {
   }
   // ── Index helpers ──────────────────────────────────────────────────────────
   _indexPath() {
-    return path27.join(this.backupDir, "index.json");
+    return path29.join(this.backupDir, "index.json");
   }
   _loadIndex() {
     try {
-      return JSON.parse(fs19.readFileSync(this._indexPath(), "utf-8"));
+      return JSON.parse(fs23.readFileSync(this._indexPath(), "utf-8"));
     } catch {
       return [];
     }
   }
   _saveIndex(entries) {
-    fs19.writeFileSync(this._indexPath(), JSON.stringify(entries, null, 2));
+    fs23.writeFileSync(this._indexPath(), JSON.stringify(entries, null, 2));
   }
   _appendIndex(entry) {
     const entries = this._loadIndex();
@@ -9785,6 +10037,30 @@ var openApiSpec = {
         }
       }
     },
+    "/groups/{name}/topology": {
+      get: {
+        tags: ["Groups"],
+        summary: "Get the topology of repos and cross-repo contract edges for a group",
+        parameters: [{ name: "name", in: "path", required: true, schema: { type: "string" } }],
+        responses: {
+          "200": {
+            description: "Repos and cross-repo edges",
+            content: {
+              "application/json": {
+                schema: {
+                  type: "object",
+                  properties: {
+                    repos: { type: "array", items: { type: "object", properties: { name: { type: "string" }, groupPath: { type: "string" }, nodeCount: { type: "integer" }, edgeCount: { type: "integer" } } } },
+                    edges: { type: "array", items: { type: "object", properties: { source: { type: "string" }, target: { type: "string" }, contractName: { type: "string" }, confidence: { type: "number" }, kind: { type: "string" } } } }
+                  }
+                }
+              }
+            }
+          },
+          "404": { description: "Group not found", content: { "application/json": { schema: { "$ref": "#/components/schemas/ErrorResponse" } } } }
+        }
+      }
+    },
     "/query": {
       post: {
         tags: ["GQL"],
@@ -9895,11 +10171,11 @@ var openApiSpec = {
 };
 
 // src/http/app.ts
-var __dirname$1 = path27.dirname(fileURLToPath(import.meta.url));
+var __dirname$1 = path29.dirname(fileURLToPath(import.meta.url));
 var WEB_DIST = (() => {
-  const bundled = path27.resolve(__dirname$1, "..", "web");
-  if (fs19.existsSync(bundled)) return bundled;
-  return path27.resolve(__dirname$1, "..", "..", "..", "web", "dist");
+  const bundled = path29.resolve(__dirname$1, "..", "web");
+  if (fs23.existsSync(bundled)) return bundled;
+  return path29.resolve(__dirname$1, "..", "..", "..", "web", "dist");
 })();
 function getAllowedOrigins() {
   const env = process.env["CODE_INTEL_CORS_ORIGINS"];
@@ -10430,8 +10706,8 @@ function createApp(graph, repoName, workspaceRoot, watcherState) {
     const registry = loadRegistry();
     const entry = registry.find((r) => r.name === requestedRepo || r.path === requestedRepo);
     if (!entry) return null;
-    const dbPath = path27.join(entry.path, ".code-intel", "graph.db");
-    if (!fs19.existsSync(dbPath)) return null;
+    const dbPath = path29.join(entry.path, ".code-intel", "graph.db");
+    if (!fs23.existsSync(dbPath)) return null;
     const repoGraph = createKnowledgeGraph();
     const db = new DbManager(dbPath);
     try {
@@ -10518,7 +10794,7 @@ function createApp(graph, repoName, workspaceRoot, watcherState) {
       return;
     }
     try {
-      const content = fs19.readFileSync(file_path, "utf-8");
+      const content = fs23.readFileSync(file_path, "utf-8");
       res.json({ content });
     } catch {
       res.status(404).json({ error: { code: ErrorCodes.NOT_FOUND, message: "File not found" } });
@@ -10776,8 +11052,8 @@ function createApp(graph, repoName, workspaceRoot, watcherState) {
     for (const member of group.members) {
       const regEntry = registry.find((r) => r.name === member.registryName);
       if (!regEntry) continue;
-      const dbPath = path27.join(regEntry.path, ".code-intel", "graph.db");
-      if (!fs19.existsSync(dbPath)) continue;
+      const dbPath = path29.join(regEntry.path, ".code-intel", "graph.db");
+      if (!fs23.existsSync(dbPath)) continue;
       const db = new DbManager(dbPath);
       try {
         await db.init();
@@ -10789,6 +11065,45 @@ function createApp(graph, repoName, workspaceRoot, watcherState) {
     }
     res.json({ nodes: [...mergedGraph.allNodes()], edges: [...mergedGraph.allEdges()] });
   });
+  app.get("/api/v1/groups/:name/topology", requireAuth, requireRole("viewer"), async (req, res) => {
+    const groupName = req.params["name"];
+    const group = loadGroup(groupName);
+    if (!group) {
+      res.status(404).json({ error: { code: ErrorCodes.NOT_FOUND, message: "Group not found" } });
+      return;
+    }
+    const syncResult = loadSyncResult(groupName);
+    const registry = loadRegistry();
+    const repos = await Promise.all(group.members.map(async (member) => {
+      const regEntry = registry.find((r) => r.name === member.registryName);
+      let nodeCount = 0;
+      let edgeCount = 0;
+      if (regEntry) {
+        const dbPath = path29.join(regEntry.path, ".code-intel", "graph.db");
+        if (fs23.existsSync(dbPath)) {
+          try {
+            const db = new DbManager(dbPath);
+            await db.init();
+            const g = createKnowledgeGraph();
+            await loadGraphFromDB(g, db);
+            db.close();
+            nodeCount = g.size.nodes;
+            edgeCount = g.size.edges;
+          } catch {
+          }
+        }
+      }
+      return { name: member.registryName, groupPath: member.groupPath, nodeCount, edgeCount };
+    }));
+    const edges = syncResult ? syncResult.links.map((link) => ({
+      source: link.providerRepo,
+      target: link.consumerRepo,
+      contractName: link.providerContract,
+      confidence: link.confidence,
+      kind: "contract"
+    })) : [];
+    res.json({ repos, edges });
+  });
   app.get("/api/v1/source", requireAuth, requireRole("viewer"), (req, res) => {
     const { file, startLine: startLineStr, endLine: endLineStr } = req.query;
     if (!file) {
@@ -10814,14 +11129,14 @@ function createApp(graph, repoName, workspaceRoot, watcherState) {
       });
       return;
     }
-    let rawResolved = path27.normalize(file);
-    if (!path27.isAbsolute(rawResolved) && workspaceRoot) {
-      rawResolved = path27.join(workspaceRoot, rawResolved);
+    let rawResolved = path29.normalize(file);
+    if (!path29.isAbsolute(rawResolved) && workspaceRoot) {
+      rawResolved = path29.join(workspaceRoot, rawResolved);
     }
-    const resolvedFile = path27.resolve(rawResolved);
+    const resolvedFile = path29.resolve(rawResolved);
     function isInsideDir(fileAbs, dir) {
-      const rel = path27.relative(path27.resolve(dir), fileAbs);
-      return !rel.startsWith("..") && !path27.isAbsolute(rel);
+      const rel = path29.relative(path29.resolve(dir), fileAbs);
+      return !rel.startsWith("..") && !path29.isAbsolute(rel);
     }
     if (workspaceRoot) {
       if (!isInsideDir(resolvedFile, workspaceRoot)) {
@@ -10858,7 +11173,7 @@ function createApp(graph, repoName, workspaceRoot, watcherState) {
     }
     let fileContent;
     try {
-      fileContent = fs19.readFileSync(resolvedFile, "utf-8");
+      fileContent = fs23.readFileSync(resolvedFile, "utf-8");
     } catch {
       res.status(404).json({
         error: {
@@ -10889,7 +11204,7 @@ function createApp(graph, repoName, workspaceRoot, watcherState) {
     const contextStart = Math.max(1, startLine - 20);
     const contextEnd = Math.min(lines.length, endLine + 20);
     const content = lines.slice(contextStart - 1, contextEnd).join("\n");
-    const ext = path27.extname(resolvedFile).toLowerCase();
+    const ext = path29.extname(resolvedFile).toLowerCase();
     const languageMap = {
       ".ts": "typescript",
       ".tsx": "typescript",
@@ -11024,10 +11339,10 @@ function createApp(graph, repoName, workspaceRoot, watcherState) {
       res.status(500).json({ error: { code: ErrorCodes.INTERNAL_ERROR, message: err instanceof Error ? err.message : String(err), requestId: req.requestId, timestamp: (/* @__PURE__ */ new Date()).toISOString() } });
     }
   });
-  if (fs19.existsSync(WEB_DIST)) {
+  if (fs23.existsSync(WEB_DIST)) {
     app.use(express.static(WEB_DIST));
     app.get("/{*path}", (_req, res) => {
-      res.sendFile(path27.join(WEB_DIST, "index.html"));
+      res.sendFile(path29.join(WEB_DIST, "index.html"));
     });
   }
   app.use("/admin", requireRole("admin"));