map: build-time input-flow (attack-surface) map command - #116

Merged

patchstackdave merged 6 commits into

mainfrom

feature/input-flow-map

Aug 13, 2026

Commits on Aug 13, 2026

map: build-time input-flow (attack-surface) map command

patchstackdave
and
claude
committed
6bb9673
map: tag each sink with the npm package behind it; recognize server actions

patchstackdave
and
claude
committed
0ad6335
map: harden the extractor — binding-gated sinks, richer input tracing, honesty markers

patchstackdave
and
claude
committed
390d66f
map: prove input→sink flows, stop over-claiming, widen + bound the walk

patchstackdave
and
claude
committed
aa5e89b
docs: disclose the `map` capability and scope the "no source code" claim

patchstackdave
and
claude
committed
c7ad87a
map: derive the URL path of file-based route handlers

patchstackdave
and
claude
committed
303bad1