depwire-cli 0.9.30 → 1.0.1

package/README.md

@@ -39,6 +39,8 @@ This isn't a model problem. It's a context problem. The AI is flying blind.
 
 ![Depwire architecture](./assets/architecture.svg)
 
+Depwire is the context and safety layer for AI-generated code.
+
 Depwire sits between your AI and your codebase. It builds a complete dependency graph using tree-sitter — deterministic, not probabilistic — and serves it to your AI through 17 MCP tools.
 
 Four guarantees:
@@ -59,9 +61,9 @@ npm install -g depwire-cli
 Three commands to understand any codebase:
 
 ```bash
-depwire viz        # open interactive arc diagram in browser
-depwire whatif     # simulate changes before touching code
-depwire security   # scan for vulnerabilities
+depwire whatif     # know what breaks before you change anything
+depwire security   # catch vulnerabilities before AI ships them
+depwire viz        # see your entire architecture instantly
 ```
 
 ---
@@ -103,7 +105,7 @@ Run without `--simulate` to open the browser UI — side-by-side arc diagrams sh
 
 ## Security scanner
 
-AI-generated code ships vulnerabilities. Depwire catches them before they reach production.
+AI will confidently ship vulnerable code. Depwire stops it before production.
 
 ```bash
 depwire security .                        # full repo scan
@@ -292,9 +294,57 @@ The SDK is the stable public API surface. All integrations should import from `d
 
 ## Language support
 
-TypeScript, JavaScript, Python, Go, Rust, C — with cross-language edge detection between all supported languages.
+TypeScript, JavaScript, Python, Go, Rust, C, C#, Java — with cross-language edge detection between all supported languages.
+
+**Java / JVM** — classes, interfaces, enums, records, annotations, inner classes, anonymous classes, lambda expressions, Maven pom.xml and Gradle build file dependency edges, Spring Boot cross-language edges (@GetMapping, @PostMapping, @RequestMapping), JAX-RS / Jakarta EE route detection, Spring WebFlux RouterFunction support.
+
+**C# / .NET** — classes, interfaces, records, structs, enums, delegates, file-scoped namespaces, primary constructors, global usings, .csproj ProjectReference and PackageReference edges, ASP.NET Core cross-language edges (attribute routing + Minimal API).
+
+---
+
+## GitHub Action — PR Impact Analysis
+
+Depwire integrates into your CI/CD pipeline via the [depwire-action](https://github.com/depwire/depwire-action) GitHub Action.
+
+On every pull request it automatically posts a dependency impact report — which symbols changed, what breaks, health score before and after. Code reviewers see the architectural blast radius before merging.
+
+Add to `.github/workflows/depwire.yml`:
+
+```yaml
+name: Depwire PR Impact
+on:
+  pull_request:
+    branches: [main]
+
+permissions:
+  contents: read
+  pull-requests: write
+
+jobs:
+  depwire:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+        with:
+          fetch-depth: 0
+      - uses: actions/setup-node@v4
+        with:
+          node-version: '20'
+      - uses: depwire/depwire-action@v1
+        with:
+          github-token: ${{ secrets.GITHUB_TOKEN }}
+```
+
+Block PRs that hurt your architecture:
+
+```yaml
+- uses: depwire/depwire-action@v1
+  with:
+    github-token: ${{ secrets.GITHUB_TOKEN }}
+    fail-on-score-drop: 5
+```
 
-C# / .NET support coming in v1.1.
+[GitHub Marketplace](https://github.com/marketplace/actions/depwire-pr-impact) — [depwire-action repo](https://github.com/depwire/depwire-action)
 
 ---
 
@@ -312,7 +362,7 @@ C# / .NET support coming in v1.1.
 **Shipped**
 - Arc diagram visualization
 - 17 MCP tools
-- Multi-language support (TypeScript, JavaScript, Python, Go, Rust, C)
+- Multi-language support (TypeScript, JavaScript, Python, Go, Rust, C, C#, Java)
 - Architecture health score
 - Dead code detection
 - Temporal graph
@@ -324,7 +374,6 @@ C# / .NET support coming in v1.1.
 - PR Impact GitHub Action
 
 **Coming next**
-- C# / .NET language support
 - AI-suggested refactors
 - VSCode extension
 - Natural language architecture queries

package/dist/{chunk-FUIZQCYB.js → chunk-5D36PY3Q.js}

@@ -16,7 +16,7 @@ import {
   parseTypeScriptFile,
   scanSecurity,
   searchSymbols
-} from "./chunk-WUSXCZXA.js";
+} from "./chunk-LV32EDYQ.js";
 
 // src/viz/data.ts
 import { basename } from "path";
@@ -122,23 +122,26 @@ function watchProject(projectRoot, callbacks) {
   const watcher = chokidar.watch(projectRoot, watcherOptions);
   console.error("[Watcher] Attaching event listeners...");
   watcher.on("change", (absolutePath) => {
-    const validExtensions = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", ".py", ".go", ".rs", ".c", ".h"];
+    const validExtensions = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", ".py", ".go", ".rs", ".c", ".h", ".cs", ".csx", ".csproj", ".java"];
     if (!validExtensions.some((ext) => absolutePath.endsWith(ext))) return;
+    const fileName = absolutePath.split("/").pop() || "";
+    if (!validExtensions.some((ext) => absolutePath.endsWith(ext)) && !["pom.xml", "build.gradle", "build.gradle.kts"].includes(fileName)) return;
     if (absolutePath.endsWith("_test.go")) return;
     const relativePath = absolutePath.replace(projectRoot + "/", "");
     console.error(`[Watcher] Change event: ${relativePath}`);
     callbacks.onFileChanged(relativePath);
   });
   watcher.on("add", (absolutePath) => {
-    const validExtensions = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", ".py", ".go", ".rs", ".c", ".h"];
-    if (!validExtensions.some((ext) => absolutePath.endsWith(ext))) return;
+    const validExtensions = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", ".py", ".go", ".rs", ".c", ".h", ".cs", ".csx", ".csproj", ".java"];
+    const addFileName = absolutePath.split("/").pop() || "";
+    if (!validExtensions.some((ext) => absolutePath.endsWith(ext)) && !["pom.xml", "build.gradle", "build.gradle.kts"].includes(addFileName)) return;
     if (absolutePath.endsWith("_test.go")) return;
     const relativePath = absolutePath.replace(projectRoot + "/", "");
     console.error(`[Watcher] Add event: ${relativePath}`);
     callbacks.onFileAdded(relativePath);
   });
   watcher.on("unlink", (absolutePath) => {
-    const validExtensions = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", ".py", ".go", ".rs", ".c", ".h"];
+    const validExtensions = [".ts", ".tsx", ".js", ".jsx", ".mjs", ".cjs", ".py", ".go", ".rs", ".c", ".h", ".cs", ".csx", ".csproj", ".java"];
     if (!validExtensions.some((ext) => absolutePath.endsWith(ext))) return;
     if (absolutePath.endsWith("_test.go")) return;
     const relativePath = absolutePath.replace(projectRoot + "/", "");
@@ -156,10 +159,10 @@ function watchProject(projectRoot, callbacks) {
     for (const dir of dirs) {
       const files = watched[dir];
       fileCount += files.filter(
-        (f) => f.endsWith(".ts") || f.endsWith(".tsx") || f.endsWith(".js") || f.endsWith(".jsx") || f.endsWith(".mjs") || f.endsWith(".cjs") || f.endsWith(".py") || f.endsWith(".go") && !f.endsWith("_test.go") || f.endsWith(".rs") || f.endsWith(".c") || f.endsWith(".h")
+        (f) => f.endsWith(".ts") || f.endsWith(".tsx") || f.endsWith(".js") || f.endsWith(".jsx") || f.endsWith(".mjs") || f.endsWith(".cjs") || f.endsWith(".py") || f.endsWith(".go") && !f.endsWith("_test.go") || f.endsWith(".rs") || f.endsWith(".c") || f.endsWith(".h") || f.endsWith(".cs") || f.endsWith(".csx") || f.endsWith(".csproj") || f.endsWith(".java") || f === "pom.xml" || f === "build.gradle" || f === "build.gradle.kts"
       ).length;
     }
-    console.error(`[Watcher] Watching ${fileCount} TypeScript/JavaScript/Python/Go/Rust/C files in ${dirs.length} directories`);
+    console.error(`[Watcher] Watching ${fileCount} TypeScript/JavaScript/Python/Go/Rust/C/C#/Java files in ${dirs.length} directories`);
   });
   return watcher;
 }