sigmap 8.12.0 → 8.13.0

package/AGENTS.md

@@ -33,22 +33,16 @@ Always run `sigmap ask` (or `sigmap --query`) before searching for files relevan
 src/extractors/python_ast.py ← ast
 ```
 
-## changes (last 5 commits — 0 seconds ago)
+## changes (last 5 commits — 1 second ago)
 ```
 src/format/terse.js                           +splitAnchor  +encodeTerseSig  +encodeTerseSigs  +_tokens
+src/graph/blast-radius.js                     +tierFor  +_normRel  +_bfs  +methodBlastRadius
+src/mcp/handlers.js                           +that  +getMethodImpact  ~queryContext  ~squeezeOutput
+src/mcp/server.js                             ~dispatch
+src/mcp/tools.js                              +it
+src/review/pr-evidence.js                     ~buildPrEvidence  ~formatPrEvidenceMarkdown
+src/review/review-pr.js                       ~isSource  ~reviewPr
 src/wiki/generate.js                          +_rel  +_pct  +_identity  +_modules
-src/conventions/extract.js                    ~classifyNaming  ~scoreConvention
-src/conventions/fix.js                        ~buildFixList
-src/extractors/javascript.js                  ~extract  ~extractClassMembers  ~extractBlock  ~buildReturnHints
-src/extractors/typescript.js                  ~extract  ~extractInterfaceMembers  ~extractClassMembers  ~extractBlock
-src/graph/builder.js                          +probeJs  +resolveJsPath  +stripJsonc  +loadAliasMap
-src/graph/impact.js                           ~formatImpact
-src/health/scorer.js                          +gradeFor  +composeHealth  +score  ~score
-src/judge/judge-engine.js                     +extracts  +claimGrounding  ~groundedness  ~judge
-src/plan/planner.js                           +createPlan  ~createPlan
-src/review/pr-evidence.js                     ~formatPrEvidenceMarkdown
-src/review/review-pr.js                       ~reviewPr
-src/util/truncate.js                          +members  +capWithNotice  +block  +capMembersWithNotice
 ```
 
 ## packages
@@ -195,13 +189,70 @@ function _tokens(sigs)  :62-64
 function measureTerse(sigsList) → { beforeTokens: number, a  :72-84
 ```
 
+### src/graph/blast-radius.js
+```
+module.exports = { methodBlastRadius, tierFor, DIRECT_WEIGHT, TRANSITIVE_WEIGHT }  :132-132
+function tierFor(score)  :25-31
+function _normRel(p)  :33-35
+function _bfs(seedIds, reverse, maxDepth)  :38-60
+function methodBlastRadius(changedFiles, cwd, opts = {}) → { * available: boolean, *  :78-130
+```
+
+### src/mcp/handlers.js
+```
+module.exports = { readContext, searchSignatures, getMap, createCheckpoint, getRouting, explainFile, listModules, queryContext, getMethodImpact, getImpact, getLines, readMemory, getCalleeSignatures, notifyFileCreated, notifySymbolAdded, notifyFileDeleted, getDiffContext, getArchitectureOverview, verifySuggestion, squeezeOutput }  :966-966
+function _readContextFiles(cwd)  :10-17
+function readContext(args, cwd)  :36-66
+function searchSignatures(args, cwd)  :74-100
+function getMap(args, cwd)  :108-131
+function createCheckpoint(args, cwd)  :143-215
+function getRouting(args, cwd)  :224-261
+function explainFile(args, cwd)  :269-356
+function listModules(args, cwd)  :364-403
+function queryContext(args, cwd)  :411-429
+function getMethodImpact(args, cwd)  :437-451
+function getImpact(args, cwd)  :459-471
+function getLines(args, cwd)  :480-528
+function readMemory(args, cwd)  :536-571
+function getCalleeSignatures(args, cwd)  :580-625
+function _pkgVersion(cwd)  :632-635
+function notifyFileCreated(args, cwd)  :639-661
+function notifySymbolAdded(args, cwd)  :664-684
+function notifyFileDeleted(args, cwd)  :687-701
+function _changedFiles(cwd, args)  :707-719
+function getDiffContext(args, cwd)  :728-799
+function getArchitectureOverview(args, cwd)  :808-876
+function verifySuggestion(args, cwd)  :886-921
+function squeezeOutput(args, cwd)  :931-964
+```
+
 ### src/mcp/server.js
 ```
-module.exports = { start }  :140-140
+module.exports = { start }  :141-141
 function respond(id, result)  :28-30
 function respondError(id, code, message)  :32-36
-function dispatch(msg, cwd)  :41-107
-function start(cwd)  :112-138
+function dispatch(msg, cwd)  :41-108
+function start(cwd)  :113-139
+```
+
+### src/mcp/tools.js
+```
+module.exports = { TOOLS }  :392-392
+```
+
+### src/review/pr-evidence.js
+```
+module.exports = { buildPrEvidence, formatPrEvidenceMarkdown }  :157-157
+function buildPrEvidence(changedFiles, cwd, opts = {}) → { scope:string, files:obj  :31-84
+function formatPrEvidenceMarkdown(evidence, opts = {})  :89-155
+```
+
+### src/review/review-pr.js
+```
+module.exports = { reviewPr, SECURITY_PATTERNS, GOD_NODE_THRESHOLD, SCOPE_DIR_THRESHOLD }  :150-150
+function isTestFile(p)  :32-34
+function isSource(p)  :35-37
+function reviewPr(changedFiles, cwd, opts = {}) → { findings: object[], bla  :48-148
 ```
 
 ### src/wiki/generate.js
@@ -1099,33 +1150,6 @@ function shouldSkipFile(rel)  :18-21
 function analyze(files, cwd)  :23-125
 ```
 
-### src/mcp/handlers.js
-```
-module.exports = { readContext, searchSignatures, getMap, createCheckpoint, getRouting, explainFile, listModules, queryContext, getImpact, getLines, readMemory, getCalleeSignatures, notifyFileCreated, notifySymbolAdded, notifyFileDeleted, getDiffContext, getArchitectureOverview, verifySuggestion, squeezeOutput }  :944-944
-function _readContextFiles(cwd)  :10-17
-function readContext(args, cwd)  :36-66
-function searchSignatures(args, cwd)  :74-100
-function getMap(args, cwd)  :108-131
-function createCheckpoint(args, cwd)  :143-215
-function getRouting(args, cwd)  :224-261
-function explainFile(args, cwd)  :269-356
-function listModules(args, cwd)  :364-403
-function queryContext(args, cwd)  :411-429
-function getImpact(args, cwd)  :437-449
-function getLines(args, cwd)  :458-506
-function readMemory(args, cwd)  :514-549
-function getCalleeSignatures(args, cwd)  :558-603
-function _pkgVersion(cwd)  :610-613
-function notifyFileCreated(args, cwd)  :617-639
-function notifySymbolAdded(args, cwd)  :642-662
-function notifyFileDeleted(args, cwd)  :665-679
-function _changedFiles(cwd, args)  :685-697
-function getDiffContext(args, cwd)  :706-777
-function getArchitectureOverview(args, cwd)  :786-854
-function verifySuggestion(args, cwd)  :864-899
-function squeezeOutput(args, cwd)  :909-942
-```
-
 ### src/mcp/install.js
 ```
 module.exports = { CLIENTS, listClients, installClient, resolveTarget }  :142-142
@@ -1138,11 +1162,6 @@ function _installYaml(filePath, scriptPath)  :99-117
 function installClient(client, opts = {}) → client, label, path, stat  :124-140
 ```
 
-### src/mcp/tools.js
-```
-module.exports = { TOOLS }  :363-363
-```
-
 ### src/nudge.js
 ```
 module.exports = { checkStarNudge, readUsage, usagePath, showStarNudge, RUN_THRESHOLD, SUCCESS_THRESHOLD }  :92-92
@@ -1200,21 +1219,6 @@ module.exports = { tokenize, STOP_WORDS }  :54-54
 function tokenize(text, opts) → string[]  :31-52
 ```
 
-### src/review/pr-evidence.js
-```
-module.exports = { buildPrEvidence, formatPrEvidenceMarkdown }  :140-140
-function buildPrEvidence(changedFiles, cwd, opts = {}) → { scope:string, files:obj  :31-77
-function formatPrEvidenceMarkdown(evidence, opts = {})  :82-138
-```
-
-### src/review/review-pr.js
-```
-module.exports = { reviewPr, SECURITY_PATTERNS, GOD_NODE_THRESHOLD, SCOPE_DIR_THRESHOLD }  :128-128
-function isTestFile(p)  :32-34
-function isSource(p)  :35-37
-function reviewPr(changedFiles, cwd, opts = {}) → { findings: object[], bla  :48-126
-```
-
 ### src/routing/classifier.js
 ```
 module.exports = { classify, classifyAll }  :102-102

package/CHANGELOG.md

@@ -10,6 +10,15 @@ Format: [Semantic Versioning](https://semver.org/)
 
 ---
 
+## [8.13.0] — 2026-07-11
+
+Minor release — **method-level blast-radius scoring** (GR2, the biggest Phase-2 lever in the master plan §7.4). The D4 call-graph finally has consumers: review findings, the PR Evidence report, and a 20th MCP tool now answer *which functions break*, not just which files.
+
+### Added
+- **Method-level blast-radius scoring (#468, PR #469):** new `src/graph/blast-radius.js` — for each changed file, reverse-BFS the method call-graph and score the change with a documented deterministic formula (`min(100, direct×4 + transitive×1)`; tiers none/low/medium/high/critical). Wired into three consumers: `review-pr` gains a `methodBlast` result field and a `method-blast` finding on high/critical tiers; the **PR Evidence** report gains a per-file `Method blast radius: N function(s) impacted (score X/100, tier)` line with top caller ids; and the new **`get_method_impact`** MCP tool (`symbol`, `direction: callers|callees`, `depth`) exposes per-symbol blast radius to agents — **19 → 20 MCP tools**. Graceful degradation when no call graph resolves; byte-stable output for a fixed tree.
+
+---
+
 ## [8.12.0] — 2026-07-11
 
 Minor release — **`sigmap wiki`** (D9, the final unstarted in-boundary item from the master plan §3.5 backlog). With this, every in-boundary initiative D1–D9 has shipped.

package/README.md

@@ -122,7 +122,7 @@ Ask → Rank → Context → Validate → Judge → Learn
 
 <!--SM:benchmarkBlock-->
 ```
-Benchmark : sigmap-v8.12-main (21 repositories, including R language)
+Benchmark : sigmap-v8.13-main (21 repositories, including R language)
 Date      : 2026-07-11
 
 Hit@5          : 87.8%   (baseline 13.6%  — 6.5× lift)
@@ -222,7 +222,7 @@ Use SigMap with open-source tools and fully self-hosted setups:
 | **JetBrains** | [Marketplace](https://plugins.jetbrains.com/plugin/31109-sigmap--ai-context-engine/) | [github.com/manojmallick/sigmap-jetbrains](https://github.com/manojmallick/sigmap-jetbrains) | IntelliJ IDEA, WebStorm, PyCharm, GoLand — tool window + actions |
 | **Neovim** | lazy.nvim / packer / vim-plug | [github.com/manojmallick/sigmap.nvim](https://github.com/manojmallick/sigmap.nvim) | `:SigMap`, `:SigMapQuery` float window, statusline widget |
 
-**MCP server** — 19 on-demand tools for Claude Code and Cursor:
+**MCP server** — 20 on-demand tools for Claude Code and Cursor:
 
 ```bash
 sigmap --mcp
@@ -267,7 +267,7 @@ SigMap treats coding agents as **consumers, not competitors**: it hands them a d
 
 | Agent | One-time setup | How it consumes SigMap |
 |---|---|---|
-| **Claude Code** | `sigmap mcp install claude` | 19 MCP tools (`search_signatures`, `get_lines`, `get_diff_context`, `squeeze_output`…) |
+| **Claude Code** | `sigmap mcp install claude` | 20 MCP tools (`search_signatures`, `get_lines`, `get_diff_context`, `squeeze_output`…) |
 | **Cursor** | `sigmap mcp install cursor` | MCP tools, plus the `cursor` adapter writes `.cursorrules` |
 | **Cline** | `sigmap mcp install cursor` | Reads `.cursorrules`; same MCP server |
 | **Continue** | `sigmap mcp install vscode` | MCP tools inside the Continue extension |

package/gen-context.js

@@ -10304,6 +10304,142 @@ __factories["./src/format/verify-report"] = function(module, exports) {
   
 };
 
+// ── ./src/graph/blast-radius ──
+__factories["./src/graph/blast-radius"] = function(module, exports) {
+  
+  /**
+   * Method-level blast-radius scoring (GR2).
+   *
+   * Consumes the D4 call-graph (src/graph/call-graph.js): for each changed file,
+   * resolve the functions it defines, BFS the reverse call edges, and score how
+   * much of the codebase transitively calls into the change. The score is a
+   * documented deterministic formula — no heuristics that vary run to run — so
+   * review-pr findings and PR Evidence lines are byte-stable for a fixed tree.
+   *
+   * Score: min(100, direct×4 + transitive×1). Tiers:
+   *   0 → none · 1–9 → low · 10–29 → medium · 30–59 → high · 60+ → critical
+   */
+
+  const path = require('path');
+  const { buildCallGraph } = __require('./src/graph/call-graph');
+
+  const DIRECT_WEIGHT = 4;
+  const TRANSITIVE_WEIGHT = 1;
+  const IMPACTED_FUNCTIONS_CAP = 12;
+
+  const TEST_FILE_RE = /\.(test|spec)\.[jt]sx?$|(^|\/)test_|_test\.(py|go)$|(^|\/)(tests?|__tests__|spec)\//;
+
+  function tierFor(score) {
+    if (score >= 60) return 'critical';
+    if (score >= 30) return 'high';
+    if (score >= 10) return 'medium';
+    if (score >= 1) return 'low';
+    return 'none';
+  }
+
+  function _normRel(p) {
+    return String(p).replace(/\\/g, '/');
+  }
+
+  // BFS the reverse edges from a set of symbol ids; returns direct/transitive id sets.
+  function _bfs(seedIds, reverse, maxDepth) {
+    const direct = new Set();
+    const transitive = new Set();
+    const visited = new Set(seedIds);
+    let frontier = [];
+    for (const s of seedIds) {
+      for (const nb of (reverse.get(s) || [])) {
+        if (!visited.has(nb)) { direct.add(nb); visited.add(nb); frontier.push(nb); }
+      }
+    }
+    let depth = 1;
+    while (frontier.length && (maxDepth === 0 || depth < maxDepth)) {
+      const next = [];
+      for (const node of frontier) {
+        for (const nb of (reverse.get(node) || [])) {
+          if (!visited.has(nb)) { transitive.add(nb); visited.add(nb); next.push(nb); }
+        }
+      }
+      frontier = next;
+      depth++;
+    }
+    return { direct, transitive };
+  }
+
+  /**
+   * Score the method-level blast radius of a changed-file list.
+   *
+   * @param {string[]} changedFiles repo-relative paths
+   * @param {string} cwd
+   * @param {object} [opts]
+   * @param {object} [opts.graph]  injected call graph (tests); else built from cwd
+   * @param {number} [opts.depth=0] BFS depth limit (0 = unlimited)
+   * @returns {{
+   *   available: boolean,
+   *   files: Array<{ file:string, symbols:number, directCallers:number,
+   *                  transitiveCallers:number, testCallers:number,
+   *                  impactedFunctions:string[], score:number, tier:string }>,
+   *   aggregate: { score:number, tier:string, impactedFunctions:number }
+   * }}
+   */
+  function methodBlastRadius(changedFiles, cwd, opts = {}) {
+    const empty = { available: false, files: [], aggregate: { score: 0, tier: 'none', impactedFunctions: 0 } };
+    let graph;
+    try {
+      graph = opts.graph || buildCallGraph(cwd, opts);
+    } catch (_) {
+      return empty;
+    }
+    if (!graph || !graph.defs || graph.defs.size === 0) return empty;
+
+    // Group defined symbol ids by their (normalized) defining file.
+    const idsByFile = new Map();
+    for (const [id, def] of graph.defs.entries()) {
+      const rel = _normRel(def.file);
+      if (!idsByFile.has(rel)) idsByFile.set(rel, []);
+      idsByFile.get(rel).push(id);
+    }
+
+    const depth = Number.isFinite(opts.depth) ? opts.depth : 0;
+    const files = [];
+    const allImpacted = new Set();
+
+    for (const changed of (changedFiles || []).map(_normRel).sort()) {
+      const ids = idsByFile.get(changed);
+      if (!ids || !ids.length) continue;
+      const { direct, transitive } = _bfs(ids, graph.reverse, depth);
+      const impacted = [...direct, ...transitive].sort();
+      for (const id of impacted) allImpacted.add(id);
+      const testCallers = impacted.filter((id) => {
+        const def = graph.defs.get(id);
+        return def && TEST_FILE_RE.test(_normRel(def.file));
+      }).length;
+      const score = Math.min(100, direct.size * DIRECT_WEIGHT + transitive.size * TRANSITIVE_WEIGHT);
+      files.push({
+        file: changed,
+        symbols: ids.length,
+        directCallers: direct.size,
+        transitiveCallers: transitive.size,
+        testCallers,
+        impactedFunctions: impacted.slice(0, IMPACTED_FUNCTIONS_CAP),
+        score,
+        tier: tierFor(score),
+      });
+    }
+
+    if (!files.length) return empty;
+    const maxScore = files.reduce((m, f) => Math.max(m, f.score), 0);
+    return {
+      available: true,
+      files,
+      aggregate: { score: maxScore, tier: tierFor(maxScore), impactedFunctions: allImpacted.size },
+    };
+  }
+
+  module.exports = { methodBlastRadius, tierFor, DIRECT_WEIGHT, TRANSITIVE_WEIGHT };
+  
+};
+
 // ── ./src/graph/builder ──
 __factories["./src/graph/builder"] = function(module, exports) {
   
@@ -13359,6 +13495,28 @@ __factories["./src/mcp/handlers"] = function(module, exports) {
     }
   }
 
+  /**
+   * get_method_impact({ symbol, direction?, depth? }) → string
+   *
+   * Method-level blast radius (GR2): every function that transitively calls
+   * `symbol` (direction 'callers', default), or everything it calls ('callees').
+   */
+  function getMethodImpact(args, cwd) {
+    if (!args || !args.symbol) return 'Missing required argument: symbol';
+
+    try {
+      const { methodImpact, methodCallees, formatCallGraph } = __require('./src/graph/call-graph');
+      const kind = args.direction === 'callees' ? 'callees' : 'callers';
+      const depth = Math.max(0, parseInt(args.depth, 10) || 0);
+      const result = kind === 'callees'
+        ? methodCallees(args.symbol, cwd, { depth })
+        : methodImpact(args.symbol, cwd, { depth });
+      return formatCallGraph(result, kind);
+    } catch (err) {
+      return `_get_method_impact failed: ${err.message}_`;
+    }
+  }
+
   /**
    * get_impact({ file, depth? }) → string
    *
@@ -13872,7 +14030,7 @@ __factories["./src/mcp/handlers"] = function(module, exports) {
     return header + sq.squeezed;
   }
 
-  module.exports = { readContext, searchSignatures, getMap, createCheckpoint, getRouting, explainFile, listModules, queryContext, getImpact, getLines, readMemory, getCalleeSignatures, notifyFileCreated, notifySymbolAdded, notifyFileDeleted, getDiffContext, getArchitectureOverview, verifySuggestion, squeezeOutput };
+  module.exports = { readContext, searchSignatures, getMap, createCheckpoint, getRouting, explainFile, listModules, queryContext, getMethodImpact, getImpact, getLines, readMemory, getCalleeSignatures, notifyFileCreated, notifySymbolAdded, notifyFileDeleted, getDiffContext, getArchitectureOverview, verifySuggestion, squeezeOutput };
   
 };
 
@@ -14039,11 +14197,11 @@ __factories["./src/mcp/server"] = function(module, exports) {
 
   const readline = require('readline');
   const { TOOLS } = __require('./src/mcp/tools');
-  const { readContext, searchSignatures, getMap, createCheckpoint, getRouting, explainFile, listModules, queryContext, getImpact, getLines, readMemory, getCalleeSignatures, notifyFileCreated, notifySymbolAdded, notifyFileDeleted, getDiffContext, getArchitectureOverview, verifySuggestion, squeezeOutput } = __require('./src/mcp/handlers');
+  const { readContext, searchSignatures, getMap, createCheckpoint, getRouting, explainFile, listModules, queryContext, getMethodImpact, getImpact, getLines, readMemory, getCalleeSignatures, notifyFileCreated, notifySymbolAdded, notifyFileDeleted, getDiffContext, getArchitectureOverview, verifySuggestion, squeezeOutput } = __require('./src/mcp/handlers');
 
   const SERVER_INFO = {
     name: 'sigmap',
-    version: '8.12.0',
+    version: '8.13.0',
     description: 'SigMap MCP server — code signatures on demand',
   };
 
@@ -14099,6 +14257,7 @@ __factories["./src/mcp/server"] = function(module, exports) {
         else if (name === 'explain_file') text = explainFile(args, cwd);
         else if (name === 'list_modules') text = listModules(args, cwd);
         else if (name === 'query_context') text = queryContext(args, cwd);
+        else if (name === 'get_method_impact') text = getMethodImpact(args, cwd);
         else if (name === 'get_impact') text = getImpact(args, cwd);
         else if (name === 'get_lines') text = getLines(args, cwd);
         else if (name === 'read_memory') text = readMemory(args, cwd);
@@ -14170,12 +14329,12 @@ __factories["./src/mcp/server"] = function(module, exports) {
 __factories["./src/mcp/tools"] = function(module, exports) {
   
   /**
-   * MCP tool definitions for SigMap (19 tools).
+   * MCP tool definitions for SigMap (20 tools).
    * read_context, search_signatures, get_map, create_checkpoint, get_routing,
-   * explain_file, list_modules, query_context, get_impact, get_lines, read_memory,
-   * get_callee_signatures, sigmap_notify_file_created, sigmap_notify_symbol_added,
-   * sigmap_notify_file_deleted, get_diff_context, get_architecture_overview,
-   * verify_suggestion, squeeze_output.
+   * explain_file, list_modules, query_context, get_method_impact, get_impact,
+   * get_lines, read_memory, get_callee_signatures, sigmap_notify_file_created,
+   * sigmap_notify_symbol_added, sigmap_notify_file_deleted, get_diff_context,
+   * get_architecture_overview, verify_suggestion, squeeze_output.
    */
 
   const TOOLS = [
@@ -14317,6 +14476,35 @@ __factories["./src/mcp/tools"] = function(module, exports) {
         required: ['query'],
       },
     },
+    {
+      name: 'get_method_impact',
+      description:
+        'Method-level blast radius for a symbol: every FUNCTION that (transitively) calls it — ' +
+        'or, with direction "callees", every repo function it calls. Finer-grained than the ' +
+        'file-level get_impact: tells an agent which functions break, not just which files. ' +
+        'JS/TS + Python call-graph; deterministic, no LLM.',
+      inputSchema: {
+        type: 'object',
+        properties: {
+          symbol: {
+            type: 'string',
+            description:
+              'Function/method name (e.g. "validateToken") or a full "file#name" id ' +
+              '(e.g. "src/auth/session.js#validateToken") to disambiguate.',
+          },
+          direction: {
+            type: 'string',
+            enum: ['callers', 'callees'],
+            description: '"callers" (default) = blast radius; "callees" = what the symbol calls.',
+          },
+          depth: {
+            type: 'number',
+            description: 'BFS depth limit (default 0 = unlimited).',
+          },
+        },
+        required: ['symbol'],
+      },
+    },
     {
       name: 'get_impact',
       description:
@@ -15723,6 +15911,12 @@ __factories["./src/review/pr-evidence"] = function(module, exports) {
       impactByFile = new Map(analyzeImpact(srcPaths, cwd, { depth }).map((r) => [r.file, r.impact]));
     } catch (_) { /* graph optional */ }
 
+    // GR2: method-level blast radius per changed file (reviewPr already computed
+    // it when the call graph resolved — reuse, don't rebuild the graph).
+    const methodBlastByFile = new Map(
+      (review.methodBlast && review.methodBlast.files || []).map((m) => [m.file, m])
+    );
+
     const fileReports = files.map((f) => {
       const deleted = f.status === 'D';
       let signatures = [];
@@ -15731,6 +15925,7 @@ __factories["./src/review/pr-evidence"] = function(module, exports) {
       }
       const impact = impactByFile.get(f.path) || null;
       return {
+        methodBlast: methodBlastByFile.get(f.path.replace(/\\/g, '/')) || null,
         path: f.path,
         status: f.status,
         riskLabel: riskLabelFor(f.path),
@@ -15773,6 +15968,7 @@ __factories["./src/review/pr-evidence"] = function(module, exports) {
         else if (f.type === 'security-file') L.push(`- ⚠️ **sensitive path touched** (path heuristic, not a content scan) — \`${f.file}\``);
         else if (f.type === 'secret-detected') L.push(`- 🔑 **secret detected** (${f.secret}) — \`${f.file}\``);
         else if (f.type === 'god-node') L.push(`- ⚠️ **god node** — \`${f.file}\` → ${f.count} dependents (high blast radius)`);
+        else if (f.type === 'method-blast') L.push(`- ⚠️ **method blast radius ${f.tier}** — \`${f.file}\` → ${f.functions} function(s) transitively call into this change (score ${f.score}/100)`);
         else if (f.type === 'scope-drift') L.push(`- ⚠️ **scope drift** — ${f.count} top-level dirs touched (${f.dirs.join(', ')})`);
       }
       L.push('');
@@ -15794,6 +15990,15 @@ __factories["./src/review/pr-evidence"] = function(module, exports) {
       } else {
         L.push('**Blast radius:** _(not in dependency graph — new or leaf file)_');
       }
+      if (f.methodBlast && (f.methodBlast.directCallers + f.methodBlast.transitiveCallers) > 0) {
+        const mb = f.methodBlast;
+        const total = mb.directCallers + mb.transitiveCallers;
+        L.push(
+          `**Method blast radius:** ${total} function(s) impacted (score ${mb.score}/100, ${mb.tier}) — ` +
+          mb.impactedFunctions.slice(0, 6).map((id) => '`' + id + '`').join(', ') +
+          (total > 6 ? ` +${total - 6} more` : '')
+        );
+      }
       if (f.relatedTests.length) L.push(`Related tests: ${f.relatedTests.slice(0, 8).map((t) => '`' + t + '`').join(', ')}`);
 
       if (f.signatures.length) {
@@ -15860,7 +16065,7 @@ __factories["./src/review/review-pr"] = function(module, exports) {
    * @param {object} [opts]
    * @param {number} [opts.godNodeThreshold=15]
    * @param {number} [opts.scopeThreshold=5]
-   * @returns {{ findings: object[], blast: object[], summary: object }}
+   * @returns {{ findings: object[], blast: object[], methodBlast: object|null, summary: object }}
    */
   function reviewPr(changedFiles, cwd, opts = {}) {
     const godThreshold = opts.godNodeThreshold != null ? opts.godNodeThreshold : GOD_NODE_THRESHOLD;
@@ -15921,6 +16126,27 @@ __factories["./src/review/review-pr"] = function(module, exports) {
       blast.sort((a, b) => b.totalImpact - a.totalImpact);
     }
 
+    // 3b. Method-level blast radius (GR2) — how many FUNCTIONS transitively call
+    // into the change, scored deterministically. Graph optional, like 3.
+    let methodBlast = null;
+    if (srcChanged.length) {
+      try {
+        const { methodBlastRadius } = __require('./src/graph/blast-radius');
+        const mb = methodBlastRadius(srcChanged, cwd, opts.methodBlastOpts || {});
+        if (mb.available) {
+          methodBlast = mb;
+          for (const f of mb.files) {
+            if (f.tier === 'high' || f.tier === 'critical') {
+              findings.push({
+                type: 'method-blast', file: f.file, severity: 'warn',
+                functions: f.directCallers + f.transitiveCallers, score: f.score, tier: f.tier,
+              });
+            }
+          }
+        }
+      } catch (_) { /* call graph optional */ }
+    }
+
     // 4. Scope drift: distinct top-level directories touched.
     const dirs = [...new Set(paths.map((p) => (p.includes('/') ? p.split('/')[0] : '.')))];
     if (dirs.length > scopeThreshold) {
@@ -15931,6 +16157,7 @@ __factories["./src/review/review-pr"] = function(module, exports) {
     return {
       findings,
       blast,
+      methodBlast,
       summary: {
         filesChanged: files.length,
         sourceChanged: srcChanged.length,
@@ -18987,7 +19214,7 @@ function __tryGit(args, opts = {}) {
   catch (_) { return ''; }
 }
 
-const VERSION = '8.12.0';
+const VERSION = '8.13.0';
 const MARKER = '\n\n## Auto-generated signatures\n<!-- Updated by gen-context.js -->\n';
 
 function requireSourceOrBundled(key) {

package/llms-full.txt

@@ -11,13 +11,13 @@ ranking keeps the relevant context in scope (cutting tokens ~97% as a side
 effect), with no LLM calls, embeddings, or vector database. Works with Claude,
 Cursor, GitHub Copilot, Aider, Windsurf, local LLMs, and MCP.
 
-# Version: 8.12.0 | Benchmark: sigmap-v8.12-main (2026-07-11)
+# Version: 8.13.0 | Benchmark: sigmap-v8.13-main (2026-07-11)
 # Source: auto-generated from package.json, version.json, benchmarks/latest.json, src/mcp/tools.js, src/config/defaults.js
 # Regenerate: npm run generate:llms   |   Validate: npm run validate:llms
 
 ---
 
-## Core metrics (benchmark: sigmap-v8.12-main, 2026-07-11)
+## Core metrics (benchmark: sigmap-v8.13-main, 2026-07-11)
 
 | Metric | Without SigMap | With SigMap |
 |--------|----------------|-------------|
@@ -26,7 +26,7 @@ Cursor, GitHub Copilot, Aider, Windsurf, local LLMs, and MCP.
 | Task success proxy | 10% | 67.8% |
 | Prompts per task | 2.84 | 1.44 (49.2% fewer) |
 | Supported languages | — | 33 |
-| MCP tools | — | 19 |
+| MCP tools | — | 20 |
 | npm runtime dependencies | — | 0 |
 
 ---
@@ -136,7 +136,7 @@ sigmap --version                         Show version
 
 ---
 
-## MCP server — 19 tools
+## MCP server — 20 tools
 
 Start with `sigmap --mcp` (stdio JSON-RPC). Configure once:
 
@@ -208,6 +208,14 @@ Rank and return the most relevant files for a specific task or question. Uses ke
 Input:  { query: string, topK?: number }
 ```
 
+### get_method_impact
+
+Method-level blast radius for a symbol: every FUNCTION that (transitively) calls it — or, with direction "callees", every repo function it calls. Finer-grained than the file-level get_impact: tells an agent which functions break, not just which files. JS/TS + Python call-graph; deterministic, no LLM.
+
+```
+Input:  { symbol: string, direction?: string, depth?: number }
+```
+
 ### get_impact
 
 Show every file that is impacted when a given file changes — direct importers, transitive importers, affected tests, and affected routes/controllers. Gives agents instant blast-radius awareness before making a change. Handles circular dependencies safely (no infinite loops).

package/llms.txt

@@ -11,7 +11,7 @@ ranking keeps the relevant context in scope (cutting tokens ~97% as a side
 effect), with no LLM calls, embeddings, or vector database. Works with Claude,
 Cursor, GitHub Copilot, Aider, Windsurf, local LLMs, and MCP.
 
-# Version: 8.12.0 | Benchmark: sigmap-v8.12-main (2026-07-11)
+# Version: 8.13.0 | Benchmark: sigmap-v8.13-main (2026-07-11)
 # Source: auto-generated from package.json, version.json, benchmarks/latest.json, src/mcp/tools.js, src/config/defaults.js
 # Regenerate: npm run generate:llms   |   Validate: npm run validate:llms
 
@@ -23,13 +23,13 @@ Cursor, GitHub Copilot, Aider, Windsurf, local LLMs, and MCP.
 - No blast-radius awareness before editing a hub file — `--impact` shows every file a change touches.
 - Pasted stack traces, CI logs, and JSON bloat the prompt — `squeeze` minimizes them and enriches the top frame from the symbol index.
 
-## Core metrics (benchmark: sigmap-v8.12-main, 2026-07-11)
+## Core metrics (benchmark: sigmap-v8.13-main, 2026-07-11)
 
 - hit@5 retrieval: 87.8% vs 13.6% random baseline (6.5× lift)
 - Token reduction: 97.0% average across benchmark repos
 - Task success: 67.8% vs 10% without SigMap
 - Prompts per task: 1.44 vs 2.84 baseline (49.2% fewer)
-- Languages: 33 supported · MCP tools: 19
+- Languages: 33 supported · MCP tools: 20
 - Dependencies: zero npm runtime dependencies · fully offline
 
 ## Quick start

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap",
-  "version": "8.12.0",
+  "version": "8.13.0",
   "description": "The deterministic, verifiable grounding layer for AI code work — a zero-dependency signature-and-evidence map that grounds Claude, Cursor, Copilot, Aider, Windsurf, local LLMs & MCP agents against your real code (repo + installed libraries) so they stop hallucinating files, imports & APIs. Runs offline via npx; byte-stable output; ~97% token reduction as proof.",
   "main": "packages/core/index.js",
   "exports": {

package/packages/cli/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap-cli",
-  "version": "8.12.0",
+  "version": "8.13.0",
   "description": "SigMap CLI wrapper — thin adapter for programmatic CLI invocation",
   "main": "index.js",
   "keywords": [

package/packages/core/package.json

@@ -1,6 +1,6 @@
 {
   "name": "sigmap-core",
-  "version": "8.12.0",
+  "version": "8.13.0",
   "description": "SigMap core library — zero-dependency code signature extraction, retrieval, and security scanning",
   "main": "index.js",
   "keywords": [

package/src/graph/blast-radius.js

@@ -0,0 +1,132 @@
+'use strict';
+
+/**
+ * Method-level blast-radius scoring (GR2).
+ *
+ * Consumes the D4 call-graph (src/graph/call-graph.js): for each changed file,
+ * resolve the functions it defines, BFS the reverse call edges, and score how
+ * much of the codebase transitively calls into the change. The score is a
+ * documented deterministic formula — no heuristics that vary run to run — so
+ * review-pr findings and PR Evidence lines are byte-stable for a fixed tree.
+ *
+ * Score: min(100, direct×4 + transitive×1). Tiers:
+ *   0 → none · 1–9 → low · 10–29 → medium · 30–59 → high · 60+ → critical
+ */
+
+const path = require('path');
+const { buildCallGraph } = require('./call-graph');
+
+const DIRECT_WEIGHT = 4;
+const TRANSITIVE_WEIGHT = 1;
+const IMPACTED_FUNCTIONS_CAP = 12;
+
+const TEST_FILE_RE = /\.(test|spec)\.[jt]sx?$|(^|\/)test_|_test\.(py|go)$|(^|\/)(tests?|__tests__|spec)\//;
+
+function tierFor(score) {
+  if (score >= 60) return 'critical';
+  if (score >= 30) return 'high';
+  if (score >= 10) return 'medium';
+  if (score >= 1) return 'low';
+  return 'none';
+}
+
+function _normRel(p) {
+  return String(p).replace(/\\/g, '/');
+}
+
+// BFS the reverse edges from a set of symbol ids; returns direct/transitive id sets.
+function _bfs(seedIds, reverse, maxDepth) {
+  const direct = new Set();
+  const transitive = new Set();
+  const visited = new Set(seedIds);
+  let frontier = [];
+  for (const s of seedIds) {
+    for (const nb of (reverse.get(s) || [])) {
+      if (!visited.has(nb)) { direct.add(nb); visited.add(nb); frontier.push(nb); }
+    }
+  }
+  let depth = 1;
+  while (frontier.length && (maxDepth === 0 || depth < maxDepth)) {
+    const next = [];
+    for (const node of frontier) {
+      for (const nb of (reverse.get(node) || [])) {
+        if (!visited.has(nb)) { transitive.add(nb); visited.add(nb); next.push(nb); }
+      }
+    }
+    frontier = next;
+    depth++;
+  }
+  return { direct, transitive };
+}
+
+/**
+ * Score the method-level blast radius of a changed-file list.
+ *
+ * @param {string[]} changedFiles repo-relative paths
+ * @param {string} cwd
+ * @param {object} [opts]
+ * @param {object} [opts.graph]  injected call graph (tests); else built from cwd
+ * @param {number} [opts.depth=0] BFS depth limit (0 = unlimited)
+ * @returns {{
+ *   available: boolean,
+ *   files: Array<{ file:string, symbols:number, directCallers:number,
+ *                  transitiveCallers:number, testCallers:number,
+ *                  impactedFunctions:string[], score:number, tier:string }>,
+ *   aggregate: { score:number, tier:string, impactedFunctions:number }
+ * }}
+ */
+function methodBlastRadius(changedFiles, cwd, opts = {}) {
+  const empty = { available: false, files: [], aggregate: { score: 0, tier: 'none', impactedFunctions: 0 } };
+  let graph;
+  try {
+    graph = opts.graph || buildCallGraph(cwd, opts);
+  } catch (_) {
+    return empty;
+  }
+  if (!graph || !graph.defs || graph.defs.size === 0) return empty;
+
+  // Group defined symbol ids by their (normalized) defining file.
+  const idsByFile = new Map();
+  for (const [id, def] of graph.defs.entries()) {
+    const rel = _normRel(def.file);
+    if (!idsByFile.has(rel)) idsByFile.set(rel, []);
+    idsByFile.get(rel).push(id);
+  }
+
+  const depth = Number.isFinite(opts.depth) ? opts.depth : 0;
+  const files = [];
+  const allImpacted = new Set();
+
+  for (const changed of (changedFiles || []).map(_normRel).sort()) {
+    const ids = idsByFile.get(changed);
+    if (!ids || !ids.length) continue;
+    const { direct, transitive } = _bfs(ids, graph.reverse, depth);
+    const impacted = [...direct, ...transitive].sort();
+    for (const id of impacted) allImpacted.add(id);
+    const testCallers = impacted.filter((id) => {
+      const def = graph.defs.get(id);
+      return def && TEST_FILE_RE.test(_normRel(def.file));
+    }).length;
+    const score = Math.min(100, direct.size * DIRECT_WEIGHT + transitive.size * TRANSITIVE_WEIGHT);
+    files.push({
+      file: changed,
+      symbols: ids.length,
+      directCallers: direct.size,
+      transitiveCallers: transitive.size,
+      testCallers,
+      impactedFunctions: impacted.slice(0, IMPACTED_FUNCTIONS_CAP),
+      score,
+      tier: tierFor(score),
+    });
+  }
+
+  if (!files.length) return empty;
+  const maxScore = files.reduce((m, f) => Math.max(m, f.score), 0);
+  return {
+    available: true,
+    files,
+    aggregate: { score: maxScore, tier: tierFor(maxScore), impactedFunctions: allImpacted.size },
+  };
+}
+
+module.exports = { methodBlastRadius, tierFor, DIRECT_WEIGHT, TRANSITIVE_WEIGHT };

package/src/mcp/handlers.js

@@ -428,6 +428,28 @@ function queryContext(args, cwd) {
   }
 }
 
+/**
+ * get_method_impact({ symbol, direction?, depth? }) → string
+ *
+ * Method-level blast radius (GR2): every function that transitively calls
+ * `symbol` (direction 'callers', default), or everything it calls ('callees').
+ */
+function getMethodImpact(args, cwd) {
+  if (!args || !args.symbol) return 'Missing required argument: symbol';
+
+  try {
+    const { methodImpact, methodCallees, formatCallGraph } = require('../graph/call-graph');
+    const kind = args.direction === 'callees' ? 'callees' : 'callers';
+    const depth = Math.max(0, parseInt(args.depth, 10) || 0);
+    const result = kind === 'callees'
+      ? methodCallees(args.symbol, cwd, { depth })
+      : methodImpact(args.symbol, cwd, { depth });
+    return formatCallGraph(result, kind);
+  } catch (err) {
+    return `_get_method_impact failed: ${err.message}_`;
+  }
+}
+
 /**
  * get_impact({ file, depth? }) → string
  *
@@ -941,4 +963,4 @@ function squeezeOutput(args, cwd) {
   return header + sq.squeezed;
 }
 
-module.exports = { readContext, searchSignatures, getMap, createCheckpoint, getRouting, explainFile, listModules, queryContext, getImpact, getLines, readMemory, getCalleeSignatures, notifyFileCreated, notifySymbolAdded, notifyFileDeleted, getDiffContext, getArchitectureOverview, verifySuggestion, squeezeOutput };
+module.exports = { readContext, searchSignatures, getMap, createCheckpoint, getRouting, explainFile, listModules, queryContext, getMethodImpact, getImpact, getLines, readMemory, getCalleeSignatures, notifyFileCreated, notifySymbolAdded, notifyFileDeleted, getDiffContext, getArchitectureOverview, verifySuggestion, squeezeOutput };

package/src/mcp/server.js

@@ -14,11 +14,11 @@
 
 const readline = require('readline');
 const { TOOLS } = require('./tools');
-const { readContext, searchSignatures, getMap, createCheckpoint, getRouting, explainFile, listModules, queryContext, getImpact, getLines, readMemory, getCalleeSignatures, notifyFileCreated, notifySymbolAdded, notifyFileDeleted, getDiffContext, getArchitectureOverview, verifySuggestion, squeezeOutput } = require('./handlers');
+const { readContext, searchSignatures, getMap, createCheckpoint, getRouting, explainFile, listModules, queryContext, getMethodImpact, getImpact, getLines, readMemory, getCalleeSignatures, notifyFileCreated, notifySymbolAdded, notifyFileDeleted, getDiffContext, getArchitectureOverview, verifySuggestion, squeezeOutput } = require('./handlers');
 
 const SERVER_INFO = {
   name: 'sigmap',
-  version: '8.12.0',
+  version: '8.13.0',
   description: 'SigMap MCP server — code signatures on demand',
 };
 
@@ -74,6 +74,7 @@ function dispatch(msg, cwd) {
       else if (name === 'explain_file') text = explainFile(args, cwd);
       else if (name === 'list_modules') text = listModules(args, cwd);
       else if (name === 'query_context') text = queryContext(args, cwd);
+      else if (name === 'get_method_impact') text = getMethodImpact(args, cwd);
       else if (name === 'get_impact') text = getImpact(args, cwd);
       else if (name === 'get_lines') text = getLines(args, cwd);
       else if (name === 'read_memory') text = readMemory(args, cwd);

package/src/mcp/tools.js

@@ -1,12 +1,12 @@
 'use strict';
 
 /**
- * MCP tool definitions for SigMap (19 tools).
+ * MCP tool definitions for SigMap (20 tools).
  * read_context, search_signatures, get_map, create_checkpoint, get_routing,
- * explain_file, list_modules, query_context, get_impact, get_lines, read_memory,
- * get_callee_signatures, sigmap_notify_file_created, sigmap_notify_symbol_added,
- * sigmap_notify_file_deleted, get_diff_context, get_architecture_overview,
- * verify_suggestion, squeeze_output.
+ * explain_file, list_modules, query_context, get_method_impact, get_impact,
+ * get_lines, read_memory, get_callee_signatures, sigmap_notify_file_created,
+ * sigmap_notify_symbol_added, sigmap_notify_file_deleted, get_diff_context,
+ * get_architecture_overview, verify_suggestion, squeeze_output.
  */
 
 const TOOLS = [
@@ -148,6 +148,35 @@ const TOOLS = [
       required: ['query'],
     },
   },
+  {
+    name: 'get_method_impact',
+    description:
+      'Method-level blast radius for a symbol: every FUNCTION that (transitively) calls it — ' +
+      'or, with direction "callees", every repo function it calls. Finer-grained than the ' +
+      'file-level get_impact: tells an agent which functions break, not just which files. ' +
+      'JS/TS + Python call-graph; deterministic, no LLM.',
+    inputSchema: {
+      type: 'object',
+      properties: {
+        symbol: {
+          type: 'string',
+          description:
+            'Function/method name (e.g. "validateToken") or a full "file#name" id ' +
+            '(e.g. "src/auth/session.js#validateToken") to disambiguate.',
+        },
+        direction: {
+          type: 'string',
+          enum: ['callers', 'callees'],
+          description: '"callers" (default) = blast radius; "callees" = what the symbol calls.',
+        },
+        depth: {
+          type: 'number',
+          description: 'BFS depth limit (default 0 = unlimited).',
+        },
+      },
+      required: ['symbol'],
+    },
+  },
   {
     name: 'get_impact',
     description:

package/src/review/pr-evidence.js

@@ -50,6 +50,12 @@ function buildPrEvidence(changedFiles, cwd, opts = {}) {
     impactByFile = new Map(analyzeImpact(srcPaths, cwd, { depth }).map((r) => [r.file, r.impact]));
   } catch (_) { /* graph optional */ }
 
+  // GR2: method-level blast radius per changed file (reviewPr already computed
+  // it when the call graph resolved — reuse, don't rebuild the graph).
+  const methodBlastByFile = new Map(
+    (review.methodBlast && review.methodBlast.files || []).map((m) => [m.file, m])
+  );
+
   const fileReports = files.map((f) => {
     const deleted = f.status === 'D';
     let signatures = [];
@@ -58,6 +64,7 @@ function buildPrEvidence(changedFiles, cwd, opts = {}) {
     }
     const impact = impactByFile.get(f.path) || null;
     return {
+      methodBlast: methodBlastByFile.get(f.path.replace(/\\/g, '/')) || null,
       path: f.path,
       status: f.status,
       riskLabel: riskLabelFor(f.path),
@@ -100,6 +107,7 @@ function formatPrEvidenceMarkdown(evidence, opts = {}) {
       else if (f.type === 'security-file') L.push(`- ⚠️ **sensitive path touched** (path heuristic, not a content scan) — \`${f.file}\``);
       else if (f.type === 'secret-detected') L.push(`- 🔑 **secret detected** (${f.secret}) — \`${f.file}\``);
       else if (f.type === 'god-node') L.push(`- ⚠️ **god node** — \`${f.file}\` → ${f.count} dependents (high blast radius)`);
+      else if (f.type === 'method-blast') L.push(`- ⚠️ **method blast radius ${f.tier}** — \`${f.file}\` → ${f.functions} function(s) transitively call into this change (score ${f.score}/100)`);
       else if (f.type === 'scope-drift') L.push(`- ⚠️ **scope drift** — ${f.count} top-level dirs touched (${f.dirs.join(', ')})`);
     }
     L.push('');
@@ -121,6 +129,15 @@ function formatPrEvidenceMarkdown(evidence, opts = {}) {
     } else {
       L.push('**Blast radius:** _(not in dependency graph — new or leaf file)_');
     }
+    if (f.methodBlast && (f.methodBlast.directCallers + f.methodBlast.transitiveCallers) > 0) {
+      const mb = f.methodBlast;
+      const total = mb.directCallers + mb.transitiveCallers;
+      L.push(
+        `**Method blast radius:** ${total} function(s) impacted (score ${mb.score}/100, ${mb.tier}) — ` +
+        mb.impactedFunctions.slice(0, 6).map((id) => '`' + id + '`').join(', ') +
+        (total > 6 ? ` +${total - 6} more` : '')
+      );
+    }
     if (f.relatedTests.length) L.push(`Related tests: ${f.relatedTests.slice(0, 8).map((t) => '`' + t + '`').join(', ')}`);
 
     if (f.signatures.length) {

package/src/review/review-pr.js

@@ -43,7 +43,7 @@ function isSource(p) {
  * @param {object} [opts]
  * @param {number} [opts.godNodeThreshold=15]
  * @param {number} [opts.scopeThreshold=5]
- * @returns {{ findings: object[], blast: object[], summary: object }}
+ * @returns {{ findings: object[], blast: object[], methodBlast: object|null, summary: object }}
  */
 function reviewPr(changedFiles, cwd, opts = {}) {
   const godThreshold = opts.godNodeThreshold != null ? opts.godNodeThreshold : GOD_NODE_THRESHOLD;
@@ -104,6 +104,27 @@ function reviewPr(changedFiles, cwd, opts = {}) {
     blast.sort((a, b) => b.totalImpact - a.totalImpact);
   }
 
+  // 3b. Method-level blast radius (GR2) — how many FUNCTIONS transitively call
+  // into the change, scored deterministically. Graph optional, like 3.
+  let methodBlast = null;
+  if (srcChanged.length) {
+    try {
+      const { methodBlastRadius } = require('../graph/blast-radius');
+      const mb = methodBlastRadius(srcChanged, cwd, opts.methodBlastOpts || {});
+      if (mb.available) {
+        methodBlast = mb;
+        for (const f of mb.files) {
+          if (f.tier === 'high' || f.tier === 'critical') {
+            findings.push({
+              type: 'method-blast', file: f.file, severity: 'warn',
+              functions: f.directCallers + f.transitiveCallers, score: f.score, tier: f.tier,
+            });
+          }
+        }
+      }
+    } catch (_) { /* call graph optional */ }
+  }
+
   // 4. Scope drift: distinct top-level directories touched.
   const dirs = [...new Set(paths.map((p) => (p.includes('/') ? p.split('/')[0] : '.')))];
   if (dirs.length > scopeThreshold) {
@@ -114,6 +135,7 @@ function reviewPr(changedFiles, cwd, opts = {}) {
   return {
     findings,
     blast,
+    methodBlast,
     summary: {
       filesChanged: files.length,
       sourceChanged: srcChanged.length,