Open Source · AGPL v3

AI writes the code.
Sentinel protects it.

Transforms TypeScript and JavaScript repos into an interactive blast radius graph with real risk scoring today. AI summaries and PR guardian workflows are planned next, after the graph loop is fully validated.

Prototype graph preview
middlewarelayoutdashboard/pagerepos/pageuseAuthsupabase/clientGraphCanvasButton
Real
GRAPH DATA LOOP
JS/TS
PARSER SUPPORT
8
NODE TYPES DETECTED
Local
DEVELOPER MODE

CAPABILITIES

Built to understand your codebase,
not just read it.

Impact Intelligence

BFS Blast Radius

Instantly computes every file affected by a change using reverse Breadth-First Search — with hop distance and risk scoring at each level.

middlewarelayoutapi_routecomponent

Deep Parsing

Full AST Analysis

Walks every .ts/.tsx file extracting import declarations, dynamic requires, and re-exports. Resolves aliases (@/*) and relative paths precisely.

ImportDeclarationCallExpressionExportAll

Weighted Intelligence

Risk Scorer

Four-component score: volume affected, critical node types, average importance, and proximity. Middleware always forces a HIGH override.

Volume 40%Critical 30%Importance 20%Proximity 10%

PR Guardian Beta

GitHub Action

The action is wired to read real PR changed files, call the blast-radius API, and update one marked PR comment. Validate it on real repos before treating it as production-ready.

openedsynchronizereopened

Type Intelligence

Node Classifier

8 distinct node types detected from file path and AST content — PAGE, LAYOUT, MIDDLEWARE, HOOK, API_ROUTE, COMPONENT, UTIL, SUPABASE_CLIENT.

pagemiddlewarehookcomponent

Coming Soon

AI Summaries

Claude Haiku generates a business-logic summary and a technical implementation summary for every node in your graph. Summarize once, query forever.

Claude Haikutopological ordersemantic search

HOW IT WORKS

Engineered for depth.

01

Walk the repository

walkRepo() globs all .ts/.tsx files, skips node_modules, .next, dist, and filters files under 10 bytes. Returns sorted absolute paths.

02

Parse every file's AST

parseFile() runs @typescript-eslint/typescript-estree on each file. Extracts static imports, dynamic imports, re-exports, and require() calls.

03

Classify every node

classifyNode() applies 8 rules in order (path rules first, content rules second) to assign each file its NodeType. First match wins.

04

Resolve all imports

resolveImport() handles relative paths, bare paths, and @/* aliases. Tries 6 extension variants in order. Returns null for npm packages.

05

Compute importance scores

In-degree per node is counted across all edges. Score = (in-degree / max-in-degree) × 100. Middleware always gets the highest priority.

06

Run reverse BFS

On PR trigger, changed files become the frontier. BFS walks the inverted edge graph, collecting all upstream dependents with hop distances.

NODE TYPES DETECTED

PAGELAYOUTCOMPONENTHOOKAPI_ROUTEMIDDLEWAREUTILSUPABASE_CLIENT

USE CASES

Where it clicks.

Real workflows where Sentinel replaces guesswork with graph-backed clarity.

01

PR Blast Radius

Before any merge, see exactly how many files will be affected, which are high-risk, and what the critical propagation paths are.

02

Onboarding engineers

New hire joins — share the graph. They explore auth, middleware, and data flows on their own, at their own pace.

03

Architecture audits

Surface load-bearing middleware, circular deps, and high-importance nodes. Find structural risk before it becomes a production incident.

04

Security reviews

All high/medium/low risk nodes in one panel. Filter by type, search by file, click to inspect dependencies.

05

Refactoring safely

K-hops shows the neighbourhood. Blast radius shows what breaks. Refactor fast without breaking things.

06

Living documentation

Every node gets an AI-generated business summary and technical summary. Your codebase documents itself automatically.

THE AI AGE PROBLEM

AI writes it.
Sentinel explains it.

Cursor, Claude Code, and Copilot let you ship faster than ever — but speed creates a new problem. Codebases grow faster than anyone can understand them. Developers merge code they didn't fully read. New hires drown in unfamiliar structure.

Sentinel turns that black box into a living, queryable blast-radius map — so your team always knows what will break, and why, before it ever merges.

Without Sentinel

AI agent edits lib/auth.ts — PR merged — authentication breaks in 14 other files no one checked.

With Sentinel

PR opened → Sentinel posts: 🔴 HIGH RISK · 14 affected nodes · middleware impacted. Team reviews before merge.

EARLY ACCESS

Not just for teams.
For anyone who ships code.

GitHub integration, full AI summaries, MCP tooling, and semantic search over your graph — coming soon.

Privacy first: your code never leaves your machine. Cloud sync is always optional.