Repository navigation

map: build-time input-flow (attack-surface) map command - #116

Merged

patchstackdave merged 6 commits into

mainfrom

feature/input-flow-map

Aug 13, 2026

Merged

map: build-time input-flow (attack-surface) map command#116
patchstackdave merged 6 commits into
mainfrom
feature/input-flow-map

Commits on Aug 13, 2026
- map: build-time input-flow (attack-surface) map command
  
  patchstackdave
  and
  claude
  committed
  6bb9673
- map: tag each sink with the npm package behind it; recognize server actions
  
  patchstackdave
  and
  claude
  committed
  0ad6335
- map: harden the extractor — binding-gated sinks, richer input tracing, honesty markers
  
  patchstackdave
  and
  claude
  committed
  390d66f
- map: prove input→sink flows, stop over-claiming, widen + bound the walk
  
  patchstackdave
  and
  claude
  committed
  aa5e89b
- docs: disclose the `map` capability and scope the "no source code" claim
  
  patchstackdave
  and
  claude
  committed
  c7ad87a
- map: derive the URL path of file-based route handlers
  
  patchstackdave
  and
  claude
  committed
  303bad1