kirograph 0.17.0 → 0.20.0

package/dist/bin/commands/communities.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/bin/commands/communities.ts"],
+  "sourcesContent": ["import { Command } from 'commander';\nimport * as path from 'path';\nimport { dim, reset, violet, bold, green, renderTable } from '../ui';\n\nexport function register(program: Command): void {\n  program\n    .command('communities [projectPath]')\n    .description('Detect code communities (clusters of related symbols)')\n    .option('--resolution <n>', 'Resolution parameter (higher = more communities)', '1.0')\n    .option('--limit <n>', 'Max communities to show', '15')\n    .option('--json', 'Output as JSON')\n    .action(async (projectPath: string | undefined, opts: { resolution: string; limit: string; json?: boolean }) => {\n      const KiroGraph = (await Promise.resolve().then(() => require('../../index.js'))).default;\n      const target = path.resolve(projectPath ?? process.cwd());\n      const cg = await KiroGraph.open(target);\n      const { detectCommunities } = await Promise.resolve().then(() => require('../../graph/communities.js'));\n      const db = cg.getDatabase();\n\n      const result = detectCommunities(db, {\n        resolution: parseFloat(opts.resolution),\n      });\n\n      if (opts.json) {\n        console.log(JSON.stringify(result, null, 2));\n        cg.close();\n        return;\n      }\n\n      if (result.communities.length === 0) {\n        console.log('\\n  No communities detected. The graph may be too small or have no edges.\\n');\n        cg.close();\n        return;\n      }\n\n      const limit = Math.min(parseInt(opts.limit), result.communities.length);\n\n      console.log(`\\n  ${bold}Communities${reset} (${result.communities.length} detected, modularity: ${result.modularity.toFixed(3)})`);\n      console.log(`  ${dim}${result.totalNodes} nodes, ${result.totalEdges} edges${reset}\\n`);\n\n      for (const c of result.communities.slice(0, limit)) {\n        console.log(`  ${green}${c.label}${reset} \u2014 ${c.memberCount} symbols`);\n        console.log(`  ${dim}dir: ${c.dominantDirectory} | lang: ${c.dominantLanguage} | cross-edges: ${c.interCommunityEdges}${reset}`);\n        for (const m of c.members.slice(0, 5)) {\n          console.log(`    ${dim}${m.kind}${reset} ${violet}${m.name}${reset} ${dim}\u2014 ${m.filePath}${reset}`);\n        }\n        if (c.memberCount > 5) console.log(`    ${dim}\u2026and ${c.memberCount - 5} more${reset}`);\n        console.log();\n      }\n\n      cg.close();\n    });\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,WAAsB;AACtB,gBAA6D;AAEtD,SAAS,SAAS,SAAwB;AAC/C,UACG,QAAQ,2BAA2B,EACnC,YAAY,uDAAuD,EACnE,OAAO,oBAAoB,oDAAoD,KAAK,EACpF,OAAO,eAAe,2BAA2B,IAAI,EACrD,OAAO,UAAU,gBAAgB,EACjC,OAAO,OAAO,aAAiC,SAAgE;AAC9G,UAAM,aAAa,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,gBAAgB,CAAC,GAAG;AAClF,UAAM,SAAS,KAAK,QAAQ,eAAe,QAAQ,IAAI,CAAC;AACxD,UAAM,KAAK,MAAM,UAAU,KAAK,MAAM;AACtC,UAAM,EAAE,kBAAkB,IAAI,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,4BAA4B,CAAC;AACtG,UAAM,KAAK,GAAG,YAAY;AAE1B,UAAM,SAAS,kBAAkB,IAAI;AAAA,MACnC,YAAY,WAAW,KAAK,UAAU;AAAA,IACxC,CAAC;AAED,QAAI,KAAK,MAAM;AACb,cAAQ,IAAI,KAAK,UAAU,QAAQ,MAAM,CAAC,CAAC;AAC3C,SAAG,MAAM;AACT;AAAA,IACF;AAEA,QAAI,OAAO,YAAY,WAAW,GAAG;AACnC,cAAQ,IAAI,6EAA6E;AACzF,SAAG,MAAM;AACT;AAAA,IACF;AAEA,UAAM,QAAQ,KAAK,IAAI,SAAS,KAAK,KAAK,GAAG,OAAO,YAAY,MAAM;AAEtE,YAAQ,IAAI;AAAA,IAAO,cAAI,cAAc,eAAK,KAAK,OAAO,YAAY,MAAM,0BAA0B,OAAO,WAAW,QAAQ,CAAC,CAAC,GAAG;AACjI,YAAQ,IAAI,KAAK,aAAG,GAAG,OAAO,UAAU,WAAW,OAAO,UAAU,SAAS,eAAK;AAAA,CAAI;AAEtF,eAAW,KAAK,OAAO,YAAY,MAAM,GAAG,KAAK,GAAG;AAClD,cAAQ,IAAI,KAAK,eAAK,GAAG,EAAE,KAAK,GAAG,eAAK,WAAM,EAAE,WAAW,UAAU;AACrE,cAAQ,IAAI,KAAK,aAAG,QAAQ,EAAE,iBAAiB,YAAY,EAAE,gBAAgB,mBAAmB,EAAE,mBAAmB,GAAG,eAAK,EAAE;AAC/H,iBAAW,KAAK,EAAE,QAAQ,MAAM,GAAG,CAAC,GAAG;AACrC,gBAAQ,IAAI,OAAO,aAAG,GAAG,EAAE,IAAI,GAAG,eAAK,IAAI,gBAAM,GAAG,EAAE,IAAI,GAAG,eAAK,IAAI,aAAG,UAAK,EAAE,QAAQ,GAAG,eAAK,EAAE;AAAA,MACpG;AACA,UAAI,EAAE,cAAc,EAAG,SAAQ,IAAI,OAAO,aAAG,aAAQ,EAAE,cAAc,CAAC,QAAQ,eAAK,EAAE;AACrF,cAAQ,IAAI;AAAA,IACd;AAEA,OAAG,MAAM;AAAA,EACX,CAAC;AACL;",
+  "names": []
+}

package/dist/bin/commands/compression.d.ts

@@ -0,0 +1,7 @@
+/**
+ * kg compression [off|normal|aggressive|ultra]   — set compression level for this project
+ * kg compression                                 — show current level
+ */
+import { Command } from 'commander';
+export declare function register(program: Command): void;
+//# sourceMappingURL=compression.d.ts.map

package/dist/bin/commands/compression.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compression.d.ts","sourceRoot":"","sources":["../../../src/bin/commands/compression.ts"],"names":[],"mappings":"AAAA;;;GAGG;AAIH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAepC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAwE/C"}

package/dist/bin/commands/context.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/bin/commands/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmD/C"}
+{"version":3,"file":"context.d.ts","sourceRoot":"","sources":["../../../src/bin/commands/context.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA+D/C"}

package/dist/bin/commands/data.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function register(program: Command): void;
+//# sourceMappingURL=data.d.ts.map

package/dist/bin/commands/data.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"data.d.ts","sourceRoot":"","sources":["../../../src/bin/commands/data.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIpC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA8rB/C"}

package/dist/bin/commands/dead-code.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function register(program: Command): void;
+//# sourceMappingURL=dead-code.d.ts.map

package/dist/bin/commands/dead-code.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dead-code.d.ts","sourceRoot":"","sources":["../../../src/bin/commands/dead-code.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAGpC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA2C/C"}

package/dist/bin/commands/dep-confusion.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function register(program: Command): void;
+//# sourceMappingURL=dep-confusion.d.ts.map

package/dist/bin/commands/dep-confusion.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"dep-confusion.d.ts","sourceRoot":"","sources":["../../../src/bin/commands/dep-confusion.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAiBpC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAwE/C"}

package/dist/bin/commands/dep-confusion.js

@@ -0,0 +1,119 @@
+"use strict";
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var dep_confusion_exports = {};
+__export(dep_confusion_exports, {
+  register: () => register
+});
+module.exports = __toCommonJS(dep_confusion_exports);
+var path = __toESM(require("path"));
+var import_config = require("../../config");
+var import_ui = require("../ui");
+const red = "\x1B[31m";
+const yellow = "\x1B[33m";
+function riskColor(level) {
+  switch (level) {
+    case "critical":
+      return red;
+    case "high":
+      return yellow;
+    case "medium":
+      return "\x1B[33m";
+    default:
+      return import_ui.dim;
+  }
+}
+function register(program) {
+  program.command("dep-confusion [projectPath]").description("Detect dependency confusion: internal packages exposed in public registries, and typosquatting candidates").option("--format <fmt>", "Output format: table | json (default: table)", "table").action(async (projectPath, opts) => {
+    const target = path.resolve(projectPath ?? process.cwd());
+    const config = await (0, import_config.loadConfig)(target);
+    if (!config.enableSecurity) {
+      console.error(`
+  ${yellow}\u26A0 Security analysis is disabled.${import_ui.reset}`);
+      console.error(`  ${import_ui.dim}Enable it in .kirograph/config.json:${import_ui.reset} ${import_ui.violet}${import_ui.bold}"enableSecurity": true${import_ui.reset}`);
+      console.error(`  ${import_ui.dim}Then re-run:${import_ui.reset} ${import_ui.violet}${import_ui.bold}kirograph index${import_ui.reset}
+`);
+      process.exit(1);
+    }
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    if (!KiroGraph.isInitialized(target)) {
+      console.error("  \u2716 KiroGraph not initialized. Run: kirograph init");
+      process.exit(1);
+    }
+    const cg = await KiroGraph.open(target);
+    const db = cg.getDatabase();
+    db.applySecuritySchema();
+    if (opts.format !== "json") {
+      console.error(`  ${import_ui.dim}Checking for dependency confusion risks...${import_ui.reset}`);
+    }
+    const { DepConfusionChecker } = await Promise.resolve().then(() => require("../../security/dep-confusion.js"));
+    const checker = new DepConfusionChecker(db);
+    const findings = await checker.check();
+    if (opts.format === "json") {
+      console.log(JSON.stringify(findings, null, 2));
+      cg.close();
+      return;
+    }
+    if (findings.length === 0) {
+      console.log(`
+  ${import_ui.green}\u2713${import_ui.reset} No dependency confusion risks detected.
+`);
+      cg.close();
+      return;
+    }
+    console.log(`
+  ${import_ui.violet}${import_ui.bold}Dependency Confusion Findings${import_ui.reset}
+`);
+    for (const f of findings) {
+      const color = riskColor(f.riskLevel);
+      console.log(`  ${import_ui.violet}${import_ui.bold}${f.packageName}${import_ui.reset} ${import_ui.dim}(${f.ecosystem})${import_ui.reset}`);
+      console.log(`    Risk: ${color}${import_ui.bold}${f.riskLevel.toUpperCase()}${import_ui.reset}   Source: ${import_ui.dim}${f.internalSource}${import_ui.reset}`);
+      if (f.publicExists) {
+        const ver = f.publicVersion ? ` v${f.publicVersion}` : "";
+        console.log(`    Public package exists:${ver}`);
+      }
+      console.log(`    ${import_ui.dim}${f.explanation}${import_ui.reset}`);
+      console.log();
+    }
+    const critical = findings.filter((f) => f.riskLevel === "critical").length;
+    const high = findings.filter((f) => f.riskLevel === "high").length;
+    const medium = findings.filter((f) => f.riskLevel === "medium").length;
+    const parts = [];
+    if (critical > 0) parts.push(`${red}${import_ui.bold}${critical} critical${import_ui.reset}`);
+    if (high > 0) parts.push(`${yellow}${import_ui.bold}${high} high${import_ui.reset}`);
+    if (medium > 0) parts.push(`${import_ui.dim}${medium} medium${import_ui.reset}`);
+    console.log(`  ${import_ui.bold}${findings.length}${import_ui.reset} finding(s): ${parts.join(", ")}
+`);
+    cg.close();
+  });
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  register
+});
+//# sourceMappingURL=dep-confusion.js.map

package/dist/bin/commands/dep-confusion.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../src/bin/commands/dep-confusion.ts"],
+  "sourcesContent": ["import { Command } from 'commander';\nimport * as path from 'path';\nimport { loadConfig } from '../../config';\nimport { dim, reset, violet, bold, green } from '../ui';\n\nconst red    = '\\x1b[31m';\nconst yellow = '\\x1b[33m';\n\nfunction riskColor(level: string): string {\n  switch (level) {\n    case 'critical': return red;\n    case 'high':     return yellow;\n    case 'medium':   return '\\x1b[33m';\n    default:         return dim;\n  }\n}\n\nexport function register(program: Command): void {\n  program\n    .command('dep-confusion [projectPath]')\n    .description('Detect dependency confusion: internal packages exposed in public registries, and typosquatting candidates')\n    .option('--format <fmt>', 'Output format: table | json (default: table)', 'table')\n    .action(async (projectPath: string | undefined, opts: { format: string }) => {\n      const target = path.resolve(projectPath ?? process.cwd());\n      const config = await loadConfig(target);\n\n      if (!config.enableSecurity) {\n        console.error(`\\n  ${yellow}\u26A0 Security analysis is disabled.${reset}`);\n        console.error(`  ${dim}Enable it in .kirograph/config.json:${reset} ${violet}${bold}\"enableSecurity\": true${reset}`);\n        console.error(`  ${dim}Then re-run:${reset} ${violet}${bold}kirograph index${reset}\\n`);\n        process.exit(1);\n      }\n\n      const KiroGraph = (await Promise.resolve().then(() => require('../../index.js'))).default;\n      if (!KiroGraph.isInitialized(target)) {\n        console.error('  \u2716 KiroGraph not initialized. Run: kirograph init');\n        process.exit(1);\n      }\n\n      const cg = await KiroGraph.open(target);\n      const db = cg.getDatabase();\n      db.applySecuritySchema();\n\n      if (opts.format !== 'json') {\n        console.error(`  ${dim}Checking for dependency confusion risks...${reset}`);\n      }\n\n      const { DepConfusionChecker } = await Promise.resolve().then(() => require('../../security/dep-confusion.js'));\n      const checker = new DepConfusionChecker(db);\n      const findings = await checker.check();\n\n      if (opts.format === 'json') {\n        console.log(JSON.stringify(findings, null, 2));\n        cg.close();\n        return;\n      }\n\n      if (findings.length === 0) {\n        console.log(`\\n  ${green}\u2713${reset} No dependency confusion risks detected.\\n`);\n        cg.close();\n        return;\n      }\n\n      console.log(`\\n  ${violet}${bold}Dependency Confusion Findings${reset}\\n`);\n\n      for (const f of findings) {\n        const color = riskColor(f.riskLevel);\n        console.log(`  ${violet}${bold}${f.packageName}${reset} ${dim}(${f.ecosystem})${reset}`);\n        console.log(`    Risk: ${color}${bold}${f.riskLevel.toUpperCase()}${reset}   Source: ${dim}${f.internalSource}${reset}`);\n        if (f.publicExists) {\n          const ver = f.publicVersion ? ` v${f.publicVersion}` : '';\n          console.log(`    Public package exists:${ver}`);\n        }\n        console.log(`    ${dim}${f.explanation}${reset}`);\n        console.log();\n      }\n\n      const critical = findings.filter(f => f.riskLevel === 'critical').length;\n      const high     = findings.filter(f => f.riskLevel === 'high').length;\n      const medium   = findings.filter(f => f.riskLevel === 'medium').length;\n\n      const parts: string[] = [];\n      if (critical > 0) parts.push(`${red}${bold}${critical} critical${reset}`);\n      if (high > 0)     parts.push(`${yellow}${bold}${high} high${reset}`);\n      if (medium > 0)   parts.push(`${dim}${medium} medium${reset}`);\n      console.log(`  ${bold}${findings.length}${reset} finding(s): ${parts.join(', ')}\\n`);\n\n      cg.close();\n    });\n}\n"],
+  "mappings": ";;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA;AAAA;AAAA;AAAA;AAAA;AACA,WAAsB;AACtB,oBAA2B;AAC3B,gBAAgD;AAEhD,MAAM,MAAS;AACf,MAAM,SAAS;AAEf,SAAS,UAAU,OAAuB;AACxC,UAAQ,OAAO;AAAA,IACb,KAAK;AAAY,aAAO;AAAA,IACxB,KAAK;AAAY,aAAO;AAAA,IACxB,KAAK;AAAY,aAAO;AAAA,IACxB;AAAiB,aAAO;AAAA,EAC1B;AACF;AAEO,SAAS,SAAS,SAAwB;AAC/C,UACG,QAAQ,6BAA6B,EACrC,YAAY,2GAA2G,EACvH,OAAO,kBAAkB,gDAAgD,OAAO,EAChF,OAAO,OAAO,aAAiC,SAA6B;AAC3E,UAAM,SAAS,KAAK,QAAQ,eAAe,QAAQ,IAAI,CAAC;AACxD,UAAM,SAAS,UAAM,0BAAW,MAAM;AAEtC,QAAI,CAAC,OAAO,gBAAgB;AAC1B,cAAQ,MAAM;AAAA,IAAO,MAAM,wCAAmC,eAAK,EAAE;AACrE,cAAQ,MAAM,KAAK,aAAG,uCAAuC,eAAK,IAAI,gBAAM,GAAG,cAAI,yBAAyB,eAAK,EAAE;AACnH,cAAQ,MAAM,KAAK,aAAG,eAAe,eAAK,IAAI,gBAAM,GAAG,cAAI,kBAAkB,eAAK;AAAA,CAAI;AACtF,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,aAAa,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,gBAAgB,CAAC,GAAG;AAClF,QAAI,CAAC,UAAU,cAAc,MAAM,GAAG;AACpC,cAAQ,MAAM,yDAAoD;AAClE,cAAQ,KAAK,CAAC;AAAA,IAChB;AAEA,UAAM,KAAK,MAAM,UAAU,KAAK,MAAM;AACtC,UAAM,KAAK,GAAG,YAAY;AAC1B,OAAG,oBAAoB;AAEvB,QAAI,KAAK,WAAW,QAAQ;AAC1B,cAAQ,MAAM,KAAK,aAAG,6CAA6C,eAAK,EAAE;AAAA,IAC5E;AAEA,UAAM,EAAE,oBAAoB,IAAI,MAAM,QAAQ,QAAQ,EAAE,KAAK,MAAM,QAAQ,iCAAiC,CAAC;AAC7G,UAAM,UAAU,IAAI,oBAAoB,EAAE;AAC1C,UAAM,WAAW,MAAM,QAAQ,MAAM;AAErC,QAAI,KAAK,WAAW,QAAQ;AAC1B,cAAQ,IAAI,KAAK,UAAU,UAAU,MAAM,CAAC,CAAC;AAC7C,SAAG,MAAM;AACT;AAAA,IACF;AAEA,QAAI,SAAS,WAAW,GAAG;AACzB,cAAQ,IAAI;AAAA,IAAO,eAAK,SAAI,eAAK;AAAA,CAA4C;AAC7E,SAAG,MAAM;AACT;AAAA,IACF;AAEA,YAAQ,IAAI;AAAA,IAAO,gBAAM,GAAG,cAAI,gCAAgC,eAAK;AAAA,CAAI;AAEzE,eAAW,KAAK,UAAU;AACxB,YAAM,QAAQ,UAAU,EAAE,SAAS;AACnC,cAAQ,IAAI,KAAK,gBAAM,GAAG,cAAI,GAAG,EAAE,WAAW,GAAG,eAAK,IAAI,aAAG,IAAI,EAAE,SAAS,IAAI,eAAK,EAAE;AACvF,cAAQ,IAAI,aAAa,KAAK,GAAG,cAAI,GAAG,EAAE,UAAU,YAAY,CAAC,GAAG,eAAK,cAAc,aAAG,GAAG,EAAE,cAAc,GAAG,eAAK,EAAE;AACvH,UAAI,EAAE,cAAc;AAClB,cAAM,MAAM,EAAE,gBAAgB,KAAK,EAAE,aAAa,KAAK;AACvD,gBAAQ,IAAI,6BAA6B,GAAG,EAAE;AAAA,MAChD;AACA,cAAQ,IAAI,OAAO,aAAG,GAAG,EAAE,WAAW,GAAG,eAAK,EAAE;AAChD,cAAQ,IAAI;AAAA,IACd;AAEA,UAAM,WAAW,SAAS,OAAO,OAAK,EAAE,cAAc,UAAU,EAAE;AAClE,UAAM,OAAW,SAAS,OAAO,OAAK,EAAE,cAAc,MAAM,EAAE;AAC9D,UAAM,SAAW,SAAS,OAAO,OAAK,EAAE,cAAc,QAAQ,EAAE;AAEhE,UAAM,QAAkB,CAAC;AACzB,QAAI,WAAW,EAAG,OAAM,KAAK,GAAG,GAAG,GAAG,cAAI,GAAG,QAAQ,YAAY,eAAK,EAAE;AACxE,QAAI,OAAO,EAAO,OAAM,KAAK,GAAG,MAAM,GAAG,cAAI,GAAG,IAAI,QAAQ,eAAK,EAAE;AACnE,QAAI,SAAS,EAAK,OAAM,KAAK,GAAG,aAAG,GAAG,MAAM,UAAU,eAAK,EAAE;AAC7D,YAAQ,IAAI,KAAK,cAAI,GAAG,SAAS,MAAM,GAAG,eAAK,gBAAgB,MAAM,KAAK,IAAI,CAAC;AAAA,CAAI;AAEnF,OAAG,MAAM;AAAA,EACX,CAAC;AACL;",
+  "names": []
+}

package/dist/bin/commands/docs.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function register(program: Command): void;
+//# sourceMappingURL=docs.d.ts.map

package/dist/bin/commands/docs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"docs.d.ts","sourceRoot":"","sources":["../../../src/bin/commands/docs.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAoBpC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA4W/C"}

package/dist/bin/commands/exec.d.ts

@@ -0,0 +1,11 @@
+/**
+ * kirograph exec <command...> — Run a shell command with token-optimized output
+ *
+ * Examples:
+ *   kirograph exec git status
+ *   kirograph exec --level aggressive npm test
+ *   kirograph exec -l ultra ls -la src/
+ */
+import { Command } from 'commander';
+export declare function register(program: Command): void;
+//# sourceMappingURL=exec.d.ts.map

package/dist/bin/commands/exec.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"exec.d.ts","sourceRoot":"","sources":["../../../src/bin/commands/exec.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAOpC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAmG/C"}

package/dist/bin/commands/export.d.ts

@@ -0,0 +1,3 @@
+import { Command } from 'commander';
+export declare function register(program: Command): void;
+//# sourceMappingURL=export.d.ts.map

package/dist/bin/commands/export.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"export.d.ts","sourceRoot":"","sources":["../../../src/bin/commands/export.ts"],"names":[],"mappings":"AAGA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA0wFpC,wBAAgB,QAAQ,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CAyL/C"}

package/dist/bin/commands/export.js

@@ -45,6 +45,43 @@ async function generateExport(projectPath, opts) {
   const cg = await KiroGraph.open(target);
   const nodes = cg.getAllNodes();
   const edges = cg.getAllEdges();
+  let securityOverlay;
+  try {
+    const db = cg.getDatabase();
+    db.applySecuritySchema();
+    const depRows = db.getRawDb().all(
+      `SELECT d.node_id, r.verdict
+       FROM sec_dependencies d
+       LEFT JOIN edges e ON e.source = d.node_id AND e.kind = 'has_vulnerability'
+       LEFT JOIN sec_reachability r ON r.vulnerability_node_id = e.target
+       ORDER BY
+         CASE r.verdict
+           WHEN 'affected'            THEN 0
+           WHEN 'under_investigation' THEN 1
+           WHEN 'not_affected'        THEN 2
+           ELSE 3
+         END`
+    );
+    const depVerdicts = /* @__PURE__ */ new Map();
+    for (const row of depRows) {
+      if (!depVerdicts.has(row.node_id)) {
+        const status = row.verdict === "affected" ? "affected" : row.verdict === "under_investigation" ? "under_investigation" : row.verdict === "not_affected" ? "not_affected" : "none";
+        depVerdicts.set(row.node_id, status);
+      }
+    }
+    const vulnRows = db.getRawDb().all(
+      `SELECT node_id, verdict FROM sec_reachability`
+    );
+    const vulnVerdicts = /* @__PURE__ */ new Map();
+    for (const row of vulnRows) {
+      const status = row.verdict === "affected" ? "affected" : row.verdict === "under_investigation" ? "under_investigation" : row.verdict === "not_affected" ? "not_affected" : "none";
+      vulnVerdicts.set(row.node_id, status);
+    }
+    if (depVerdicts.size > 0 || vulnVerdicts.size > 0) {
+      securityOverlay = { depVerdicts, vulnVerdicts };
+    }
+  } catch {
+  }
   cg.close();
   const projectName = path.basename(target);
   let logoBase64;
@@ -69,7 +106,7 @@ async function generateExport(projectPath, opts) {
   }
   const outDir = opts.output ? path.resolve(opts.output) : path.join(target, ".kirograph", "export");
   fs.mkdirSync(outDir, { recursive: true });
-  const { html, css, js } = buildFiles(nodes, edges, projectName, opts.includeContains, logoBase64, fileModified);
+  const { html, css, js } = buildFiles(nodes, edges, projectName, opts.includeContains, logoBase64, fileModified, securityOverlay);
   fs.writeFileSync(path.join(outDir, "index.html"), html, "utf8");
   fs.writeFileSync(path.join(outDir, "app.css"), css, "utf8");
   fs.writeFileSync(path.join(outDir, "app.js"), js, "utf8");
@@ -137,7 +174,18 @@ function lighten(hex) {
 function escHtml(s) {
   return s.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
-function buildFiles(nodes, edges, projectName, includeContains, logoBase64, fileModified) {
+const SEC_DEP_COLOR = {
+  affected: "#ef4444",
+  under_investigation: "#f59e0b",
+  not_affected: "#22c55e",
+  none: "#64748b"
+};
+const SEC_VULN_COLOR = {
+  affected: "#dc2626",
+  under_investigation: "#d97706",
+  not_affected: "#16a34a"
+};
+function buildFiles(nodes, edges, projectName, includeContains, logoBase64, fileModified, securityOverlay) {
   const filteredEdges = includeContains ? edges : edges.filter((e) => e.kind !== "contains");
   const degree = /* @__PURE__ */ new Map();
   for (const e of filteredEdges) {
@@ -149,14 +197,28 @@ function buildFiles(nodes, edges, projectName, includeContains, logoBase64, file
     const fp = n.filePath ?? "";
     const parts = fp.split("/").filter(Boolean);
     const dir = parts.length >= 2 ? parts.slice(0, 2).join("/") : parts[0] ?? "";
+    let securityStatus = "none";
+    let baseColor = KIND_COLOR[n.kind] ?? "#424242";
+    if (securityOverlay) {
+      if (n.kind === "dependency") {
+        securityStatus = securityOverlay.depVerdicts.get(n.id) ?? "none";
+        baseColor = SEC_DEP_COLOR[securityStatus];
+      } else if (n.kind === "vulnerability") {
+        const verdict = securityOverlay.vulnVerdicts.get(n.id);
+        if (verdict) {
+          securityStatus = verdict;
+          baseColor = SEC_VULN_COLOR[verdict] ?? baseColor;
+        }
+      }
+    }
     return {
       id: n.id,
       label: n.name,
       color: {
-        background: KIND_COLOR[n.kind] ?? "#424242",
-        border: lighten(KIND_COLOR[n.kind] ?? "#424242"),
+        background: baseColor,
+        border: lighten(baseColor),
         highlight: { background: "#e040fb", border: "#ea80fc" },
-        hover: { background: lighten(KIND_COLOR[n.kind] ?? "#424242"), border: "#ea80fc" }
+        hover: { background: lighten(baseColor), border: "#ea80fc" }
       },
       size: Math.max(8, Math.min(40, 8 + (degree.get(n.id) ?? 0) * 1.5)),
       font: { size: 11, color: "#e0e0e0", face: "monospace" },
@@ -170,7 +232,8 @@ function buildFiles(nodes, edges, projectName, includeContains, logoBase64, file
       degree: degree.get(n.id) ?? 0,
       borderWidth: n.isExported ? 2 : 1,
       borderWidthSelected: 3,
-      lastModified: fileModified ? fileModified[fp] ?? 0 : 0
+      lastModified: fileModified ? fileModified[fp] ?? 0 : 0,
+      securityStatus
     };
   });
   const visEdges = filteredEdges.map((e, i) => ({
@@ -188,6 +251,7 @@ function buildFiles(nodes, edges, projectName, includeContains, logoBase64, file
   }));
   const allNodeKinds = [...new Set(nodes.map((n) => n.kind))].sort();
   const allEdgeKinds = [...new Set(filteredEdges.map((e) => e.kind))].sort();
+  const hasSecurityNodes = visNodes.some((n) => n.kind === "dependency" || n.kind === "vulnerability");
   const logoTag = logoBase64 ? `<img src="data:image/png;base64,${logoBase64}" alt="KiroGraph">` : `<h1>\u2B21 KiroGraph</h1>`;
   const loaderLogoTag = logoBase64 ? `<img src="data:image/png;base64,${logoBase64}" alt="KiroGraph">` : `<div style="color:#c792ea;font-size:18px;font-weight:600;letter-spacing:.05em">\u2B21 KiroGraph</div>`;
   const nodeLegend = allNodeKinds.map((k) => `<div class="legend-item" data-nkind="${k}">
@@ -254,7 +318,8 @@ function buildFiles(nodes, edges, projectName, includeContains, logoBase64, file
       <button class="fbtn" id="btn-focus"   title="Focus on node and neighbors">\u25CE <span class="fbtn-label">Focus</span></button>
       <button class="fbtn" id="btn-path"    title="Find path between two nodes">\u27F6 <span class="fbtn-label">Path</span></button>
       <button class="fbtn" id="btn-cluster" title="Cluster by directory">\u2B21 <span class="fbtn-label">Cluster</span></button>
-      <button class="fbtn" id="btn-heat"    title="Heat map by file recency">\u{1F321} <span class="fbtn-label">Heat</span></button>
+      <button class="fbtn" id="btn-heat"    title="Heat map by file recency">\u{1F321} <span class="fbtn-label">Heat</span></button>${hasSecurityNodes ? `
+      <button class="fbtn" id="btn-security" title="Security overlay \u2014 highlight dependency/vulnerability nodes">\u{1F512} <span class="fbtn-label">Security</span></button>` : ""}
       <button class="fbtn" id="btn-charts"  title="Analytics charts">\u{1F4CA} <span class="fbtn-label">Charts</span></button>
     </div>
 
@@ -269,7 +334,20 @@ function buildFiles(nodes, edges, projectName, includeContains, logoBase64, file
         <div class="heat-stop" data-tip="Modified more than 6 months ago"><span class="heat-stop-dot" style="background:#2980b9"></span>Older</div>
       </div>
       <div id="heat-tip"></div>
-    </div>
+    </div>${hasSecurityNodes ? `
+
+    <div id="security-legend">
+      <div class="security-legend-title">\u{1F512} Security status</div>
+      <div class="security-stops">
+        <div class="security-stop"><span class="security-stop-dot" style="background:#ef4444"></span>Affected</div>
+        <div class="security-stop"><span class="security-stop-dot" style="background:#f59e0b"></span>Under investigation</div>
+        <div class="security-stop"><span class="security-stop-dot" style="background:#22c55e"></span>Not affected</div>
+        <div class="security-stop"><span class="security-stop-dot" style="background:#64748b"></span>No vuln data</div>
+        <div class="security-stop"><span class="security-stop-dot" style="background:#dc2626;border:2px solid #fff"></span>Vuln: affected</div>
+        <div class="security-stop"><span class="security-stop-dot" style="background:#d97706;border:2px solid #fff"></span>Vuln: investigating</div>
+        <div class="security-stop"><span class="security-stop-dot" style="background:#16a34a;border:2px solid #fff"></span>Vuln: not affected</div>
+      </div>
+    </div>` : ""}
   </div>
   </div><!-- /float-sidebar -->
 
@@ -415,7 +493,7 @@ function buildFiles(nodes, edges, projectName, includeContains, logoBase64, file
 </body>
 </html>`;
   const css = buildCss();
-  const js = buildJs(visNodes, visEdges, KIND_COLOR, EDGE_COLOR);
+  const js = buildJs(visNodes, visEdges, KIND_COLOR, EDGE_COLOR, hasSecurityNodes);
   return { html, css, js };
 }
 function buildCss() {
@@ -941,9 +1019,47 @@ input[type=range] {
   min-height: 14px;
   font-style: italic;
 }
+
+/* \u2500\u2500 Security legend (inside sidebar) \u2500\u2500 */
+#security-legend {
+  display: none;
+  background: rgba(8, 8, 18, 0.97);
+  border: 1px solid #3a3a5e;
+  border-radius: 12px;
+  padding: 12px 14px;
+  box-shadow: 0 4px 24px rgba(0,0,0,.75);
+  width: 200px;
+}
+.security-legend-title {
+  font-size: 11px;
+  font-weight: 600;
+  color: #9da8cc;
+  margin-bottom: 10px;
+}
+.security-stops {
+  display: flex;
+  flex-direction: column;
+  gap: 5px;
+}
+.security-stop {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  font-size: 11px;
+  color: #7a86aa;
+  cursor: default;
+  padding: 2px 4px;
+  border-radius: 4px;
+}
+.security-stop-dot {
+  width: 9px; height: 9px;
+  border-radius: 50%;
+  flex-shrink: 0;
+  box-sizing: border-box;
+}
 `;
 }
-function buildJs(visNodes, visEdges, kindColors, edgeColors) {
+function buildJs(visNodes, visEdges, kindColors, edgeColors, hasSecurityNodes) {
   return `// \u2500\u2500 Data \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 const NODES_DATA  = ${JSON.stringify(visNodes)};
 const EDGES_DATA  = ${JSON.stringify(visEdges)};
@@ -1551,6 +1667,7 @@ document.getElementById('btn-cluster').addEventListener('click', () => {
       document.getElementById('heat-legend').style.display = 'none';
       nodesDS.update(NODES_DATA.map(n => ({ id: n.id, color: originalColors[n.id] })));
     }
+    ${hasSecurityNodes ? `if (securityActive) { exitSecurityOverlay(); }` : ""}
     if (focusActive) exitFocus();
     if (pathMode) exitPath(true);
     network.unselectAll();
@@ -1769,6 +1886,55 @@ document.querySelectorAll('.heat-stop').forEach(function(el) {
   el.addEventListener('mouseleave', function() { if (tip) tip.textContent = ''; });
 });
 
+${hasSecurityNodes ? `// \u2500\u2500 Security overlay \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
+let securityActive = false;
+
+// Colours embedded from build-time palette
+const SEC_DEP_COLORS = { affected: '#ef4444', under_investigation: '#f59e0b', not_affected: '#22c55e', none: '#64748b' };
+const SEC_VULN_COLORS = { affected: '#dc2626', under_investigation: '#d97706', not_affected: '#16a34a' };
+
+function enterSecurityOverlay() {
+  securityActive = true;
+  document.getElementById('btn-security').classList.add('active');
+  document.getElementById('security-legend').style.display = 'block';
+
+  const DIM = { background: '#111118', border: '#1a1a2a', highlight: { background: '#111118', border: '#1a1a2a' }, hover: { background: '#111118', border: '#1a1a2a' } };
+  const secNodeIds = new Set(
+    NODES_DATA
+      .filter(n => n.kind === 'dependency' || n.kind === 'vulnerability')
+      .map(n => n.id)
+  );
+
+  // Dim edges that don't connect to any security node
+  const secEdgeIds = new Set(
+    EDGES_DATA
+      .filter(e => secNodeIds.has(e.from) || secNodeIds.has(e.to))
+      .map(e => e.id)
+  );
+
+  nodesDS.update(NODES_DATA.map(n => ({
+    id: n.id,
+    color: secNodeIds.has(n.id) ? originalColors[n.id] : DIM,
+  })));
+  edgesDS.update(EDGES_DATA.map(e => ({
+    id: e.id,
+    color: secEdgeIds.has(e.id) ? originalEdgeColors[e.id] : { color: '#111118', opacity: 0.08 },
+  })));
+}
+
+function exitSecurityOverlay() {
+  securityActive = false;
+  document.getElementById('btn-security').classList.remove('active');
+  document.getElementById('security-legend').style.display = 'none';
+  nodesDS.update(NODES_DATA.map(n => ({ id: n.id, color: originalColors[n.id] })));
+  edgesDS.update(EDGES_DATA.map(e => ({ id: e.id, color: originalEdgeColors[e.id] })));
+}
+
+document.getElementById('btn-security').addEventListener('click', () => {
+  if (securityActive) { exitSecurityOverlay(); } else { enterSecurityOverlay(); }
+});
+` : "// Security overlay: no security nodes in this graph"}
+
 // \u2500\u2500 Keyboard shortcuts \u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500\u2500
 document.addEventListener('keydown', e => {
   if (e.key === 'Escape') {
@@ -1821,6 +1987,9 @@ function resetToEmpty() {
     document.getElementById('heat-legend').style.display = 'none';
   }
 
+  // Reset security overlay
+  ${hasSecurityNodes ? `if (securityActive) { exitSecurityOverlay(); }` : ""}
+
   // Reset context menu
   document.getElementById('ctx-menu').style.display = 'none';
   ctxNodeId = null;
@@ -2612,6 +2781,131 @@ function register(program) {
 `);
     openBrowser(indexPath);
   });
+  exportCmd.command("graphml [projectPath]").description("Export graph as GraphML (for Gephi, yEd)").option("-o, --output <file>", "Output file path").action(async (projectPath, opts) => {
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    const target = path.resolve(projectPath ?? process.cwd());
+    const cg = await KiroGraph.open(target);
+    const nodes = cg.getAllNodes();
+    const edges = cg.getAllEdges();
+    cg.close();
+    const outPath = opts.output ?? path.join(target, ".kirograph", "export", "graph.graphml");
+    fs.mkdirSync(path.dirname(outPath), { recursive: true });
+    const lines = [
+      '<?xml version="1.0" encoding="UTF-8"?>',
+      '<graphml xmlns="http://graphml.graphstruct.org/graphml">',
+      '  <key id="kind" for="node" attr.name="kind" attr.type="string"/>',
+      '  <key id="name" for="node" attr.name="name" attr.type="string"/>',
+      '  <key id="file" for="node" attr.name="file" attr.type="string"/>',
+      '  <key id="line" for="node" attr.name="line" attr.type="int"/>',
+      '  <key id="edgeKind" for="edge" attr.name="kind" attr.type="string"/>',
+      '  <graph id="G" edgedefault="directed">'
+    ];
+    for (const n of nodes) {
+      lines.push(`    <node id="${escHtml(n.id)}">`);
+      lines.push(`      <data key="kind">${escHtml(n.kind)}</data>`);
+      lines.push(`      <data key="name">${escHtml(n.name)}</data>`);
+      lines.push(`      <data key="file">${escHtml(n.filePath)}</data>`);
+      lines.push(`      <data key="line">${n.startLine}</data>`);
+      lines.push(`    </node>`);
+    }
+    for (const e of edges) {
+      lines.push(`    <edge source="${escHtml(e.source)}" target="${escHtml(e.target)}">`);
+      lines.push(`      <data key="edgeKind">${escHtml(e.kind)}</data>`);
+      lines.push(`    </edge>`);
+    }
+    lines.push("  </graph>", "</graphml>");
+    fs.writeFileSync(outPath, lines.join("\n"), "utf8");
+    console.log(`
+  ${import_ui.green}GraphML exported${import_ui.reset}: ${outPath}`);
+    console.log(`  ${import_ui.dim}${nodes.length} nodes, ${edges.length} edges${import_ui.reset}
+`);
+  });
+  exportCmd.command("cypher [projectPath]").description("Export graph as Neo4j Cypher statements").option("-o, --output <file>", "Output file path").action(async (projectPath, opts) => {
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    const target = path.resolve(projectPath ?? process.cwd());
+    const cg = await KiroGraph.open(target);
+    const nodes = cg.getAllNodes();
+    const edges = cg.getAllEdges();
+    cg.close();
+    const outPath = opts.output ?? path.join(target, ".kirograph", "export", "graph.cypher");
+    fs.mkdirSync(path.dirname(outPath), { recursive: true });
+    const lines = ["// Generated by KiroGraph", "// Import with: cat graph.cypher | cypher-shell", ""];
+    for (const n of nodes) {
+      const label = n.kind.charAt(0).toUpperCase() + n.kind.slice(1);
+      const props = `{id: "${n.id.replace(/"/g, '\\"')}", name: "${n.name.replace(/"/g, '\\"')}", file: "${n.filePath.replace(/"/g, '\\"')}", line: ${n.startLine}}`;
+      lines.push(`CREATE (:${label} ${props});`);
+    }
+    lines.push("");
+    for (const e of edges) {
+      const relType = e.kind.toUpperCase();
+      lines.push(`MATCH (a {id: "${e.source.replace(/"/g, '\\"')}"}), (b {id: "${e.target.replace(/"/g, '\\"')}"}) CREATE (a)-[:${relType}]->(b);`);
+    }
+    fs.writeFileSync(outPath, lines.join("\n"), "utf8");
+    console.log(`
+  ${import_ui.green}Neo4j Cypher exported${import_ui.reset}: ${outPath}`);
+    console.log(`  ${import_ui.dim}${nodes.length} nodes, ${edges.length} edges${import_ui.reset}
+`);
+  });
+  exportCmd.command("obsidian [projectPath]").description("Export graph as an Obsidian vault with wikilinks").option("-o, --output <dir>", "Output directory path").action(async (projectPath, opts) => {
+    const KiroGraph = (await Promise.resolve().then(() => require("../../index.js"))).default;
+    const target = path.resolve(projectPath ?? process.cwd());
+    const cg = await KiroGraph.open(target);
+    const nodes = cg.getAllNodes();
+    const edges = cg.getAllEdges();
+    cg.close();
+    const outDir = opts.output ?? path.join(target, ".kirograph", "export", "obsidian");
+    fs.mkdirSync(outDir, { recursive: true });
+    const callersMap = /* @__PURE__ */ new Map();
+    const calleesMap = /* @__PURE__ */ new Map();
+    const nodeById = new Map(nodes.map((n) => [n.id, n]));
+    for (const e of edges) {
+      if (e.kind === "calls") {
+        const targetNode = nodeById.get(e.target);
+        const sourceNode = nodeById.get(e.source);
+        if (targetNode) {
+          if (!calleesMap.has(e.source)) calleesMap.set(e.source, []);
+          calleesMap.get(e.source).push(targetNode.name);
+        }
+        if (sourceNode) {
+          if (!callersMap.has(e.target)) callersMap.set(e.target, []);
+          callersMap.get(e.target).push(sourceNode.name);
+        }
+      }
+    }
+    let fileCount = 0;
+    for (const n of nodes) {
+      if (n.kind === "variable" || n.kind === "parameter") continue;
+      const callers = callersMap.get(n.id) ?? [];
+      const callees = calleesMap.get(n.id) ?? [];
+      const lines = [
+        `# ${n.name}`,
+        "",
+        `- **Kind**: ${n.kind}`,
+        `- **File**: \`${n.filePath}:${n.startLine}\``
+      ];
+      if (n.signature) lines.push(`- **Signature**: \`${n.signature}\``);
+      if (n.isExported) lines.push(`- **Exported**: yes`);
+      if (callees.length > 0) {
+        lines.push("", "## Calls", "");
+        for (const c of [...new Set(callees)].slice(0, 20)) {
+          lines.push(`- [[${c}]]`);
+        }
+      }
+      if (callers.length > 0) {
+        lines.push("", "## Called by", "");
+        for (const c of [...new Set(callers)].slice(0, 20)) {
+          lines.push(`- [[${c}]]`);
+        }
+      }
+      const safeName = n.name.replace(/[<>:"/\\|?*]/g, "_");
+      fs.writeFileSync(path.join(outDir, `${safeName}.md`), lines.join("\n"), "utf8");
+      fileCount++;
+    }
+    console.log(`
+  ${import_ui.green}Obsidian vault exported${import_ui.reset}: ${outDir}`);
+    console.log(`  ${import_ui.dim}${fileCount} markdown files with wikilinks${import_ui.reset}
+`);
+  });
 }
 // Annotate the CommonJS export names for ESM import in node:
 0 && (module.exports = {