code-graph-rag 0.0.421__tar.gz → 0.0.484__tar.gz

{code_graph_rag-0.0.421/code_graph_rag.egg-info → code_graph_rag-0.0.484}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-graph-rag
-Version: 0.0.421
+Version: 0.0.484
 Summary: The ultimate RAG for your monorepo. Query, understand, and edit multi-language codebases with the power of AI and knowledge graphs
 License-Expression: MIT
 Keywords: rag,retrieval-augmented-generation,knowledge-graph,code-analysis,tree-sitter,mcp,mcp-server,llm,graph-database,semantic-search,codebase,memgraph,developer-tools,monorepo
@@ -84,7 +84,7 @@ A graph-based RAG system that parses multi-language codebases with Tree-sitter,
 pip install code-graph-rag
 ```
 
-With all Tree-sitter grammars (Python, JS, TS, Rust, Go, Java, Scala, C++, Lua):
+With all Tree-sitter grammars (Python, JS, TS, Rust, Go, Java, Scala, C, C++, C#, PHP, Lua, Dart):
 
 ```bash
 pip install 'code-graph-rag[treesitter-full]'
@@ -237,7 +237,7 @@ Configure via `.env` or environment variables:
 |----------|---------|-------------|
 | `MEMGRAPH_HOST` | `localhost` | Memgraph hostname |
 | `MEMGRAPH_PORT` | `7687` | Memgraph port |
-| `ORCHESTRATOR_PROVIDER` | | Provider: `google`, `openai`, `ollama` |
+| `ORCHESTRATOR_PROVIDER` | | Provider: `google`, `openai`, `anthropic`, `azure`, `ollama`, `minimax`, `litellm_proxy` |
 | `ORCHESTRATOR_MODEL` | | Model ID (e.g. `gpt-4o`, `gemini-2.5-pro`) |
 | `ORCHESTRATOR_API_KEY` | | API key for the provider (not needed for `ollama`) |
 | `CYPHER_PROVIDER` | | Provider for Cypher generation |

{code_graph_rag-0.0.421 → code_graph_rag-0.0.484}/PYPI_README.md

@@ -8,7 +8,7 @@ A graph-based RAG system that parses multi-language codebases with Tree-sitter,
 pip install code-graph-rag
 ```
 
-With all Tree-sitter grammars (Python, JS, TS, Rust, Go, Java, Scala, C++, Lua):
+With all Tree-sitter grammars (Python, JS, TS, Rust, Go, Java, Scala, C, C++, C#, PHP, Lua, Dart):
 
 ```bash
 pip install 'code-graph-rag[treesitter-full]'
@@ -161,7 +161,7 @@ Configure via `.env` or environment variables:
 |----------|---------|-------------|
 | `MEMGRAPH_HOST` | `localhost` | Memgraph hostname |
 | `MEMGRAPH_PORT` | `7687` | Memgraph port |
-| `ORCHESTRATOR_PROVIDER` | | Provider: `google`, `openai`, `ollama` |
+| `ORCHESTRATOR_PROVIDER` | | Provider: `google`, `openai`, `anthropic`, `azure`, `ollama`, `minimax`, `litellm_proxy` |
 | `ORCHESTRATOR_MODEL` | | Model ID (e.g. `gpt-4o`, `gemini-2.5-pro`) |
 | `ORCHESTRATOR_API_KEY` | | API key for the provider (not needed for `ollama`) |
 | `CYPHER_PROVIDER` | | Provider for Cypher generation |

{code_graph_rag-0.0.421 → code_graph_rag-0.0.484}/README.md

@@ -20,14 +20,15 @@
     <img src="https://img.shields.io/github/forks/vitali87/code-graph-rag?style=social" alt="GitHub forks" />
   </a>
   -->
-  <!-- Codecov, SonarCloud, and OpenSSF Scorecard badges are fed by GitHub-side CI. Uncomment once that CI is confirmed to publish to these services again.
+  <a href="https://github.com/vitali87/code-graph-rag/actions/workflows/ci.yml">
+    <img src="https://img.shields.io/github/actions/workflow/status/vitali87/code-graph-rag/ci.yml?branch=main" alt="CI" />
+  </a>
   <a href="https://codecov.io/gh/vitali87/code-graph-rag">
     <img src="https://codecov.io/gh/vitali87/code-graph-rag/graph/badge.svg" alt="Codecov" />
   </a>
   <a href="https://sonarcloud.io/summary/overall?id=vitali87_code-graph-rag">
     <img src="https://sonarcloud.io/api/project_badges/measure?project=vitali87_code-graph-rag&metric=alert_status" alt="Quality Gate Status" />
   </a>
-  -->
   <!--
   <a href="https://mseep.ai/app/vitali87-code-graph-rag">
     <img src="https://mseep.net/pr/vitali87-code-graph-rag-badge.png" alt="MseeP.ai Security Assessment" height="20" />
@@ -36,14 +37,21 @@
   <a href="https://code-graph-rag.com">
     <img src="https://img.shields.io/badge/Enterprise-Support%20%26%20Services-6366f1" alt="Enterprise Support" />
   </a>
+  <a href="https://pypi.org/project/code-graph-rag/">
+    <img src="https://img.shields.io/pypi/v/code-graph-rag" alt="PyPI Version" />
+  </a>
   <a href="https://pepy.tech/projects/code-graph-rag">
     <img src="https://static.pepy.tech/personalized-badge/code-graph-rag?period=total&units=INTERNATIONAL_SYSTEM&left_color=BLACK&right_color=GREEN&left_text=downloads" alt="PyPI Downloads" />
   </a>
-  <!-- OpenSSF Scorecard only tracks GitHub-hosted repos. Uncomment once the Scorecard workflow is confirmed running on the authoritative GitHub repo.
+  <a href="https://skillsllm.com/security-check/DHsMGRb1Ysys">
+    <img src="https://skillsllm.com/security-check/badge.svg?owner=vitali87&repo=code-graph-rag" alt="SkillsLLM Security Check" />
+  </a>
   <a href="https://scorecard.dev/viewer/?uri=github.com/vitali87/code-graph-rag">
     <img src="https://api.scorecard.dev/projects/github.com/vitali87/code-graph-rag/badge" alt="OpenSSF Scorecard" />
   </a>
-  -->
+  <a href="https://www.bestpractices.dev/projects/13757">
+    <img src="https://www.bestpractices.dev/projects/13757/badge" alt="OpenSSF Best Practices" />
+  </a>
   <!--
   <a href="https://gitcgr.com/vitali87/code-graph-rag">
     <img src="https://gitcgr.com/badge/vitali87/code-graph-rag.svg" alt="gitcgr" />
@@ -98,7 +106,7 @@ See the [Architecture Overview](docs/architecture/overview.md) and [Graph Schema
 
 ## Supported Languages
 
-Python, TypeScript, TSX, JavaScript, Rust, Go, Java, C, C++, C#, PHP, Lua, and Dart are fully supported. Scala is in development. See the [Language Support](docs/architecture/language-support.md) matrix for per-language capabilities.
+Python, TypeScript, TSX, JavaScript, Rust, Go, Java, C, C++, C#, PHP, Lua, and Dart are fully supported. Scala is in development, and Ruby has structural support (modules, functions, classes, and imports) through the pluggable ast-grep tier. See the [Language Support](docs/architecture/language-support.md) matrix for per-language capabilities.
 
 ## Installation
 

{code_graph_rag-0.0.421 → code_graph_rag-0.0.484/code_graph_rag.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: code-graph-rag
-Version: 0.0.421
+Version: 0.0.484
 Summary: The ultimate RAG for your monorepo. Query, understand, and edit multi-language codebases with the power of AI and knowledge graphs
 License-Expression: MIT
 Keywords: rag,retrieval-augmented-generation,knowledge-graph,code-analysis,tree-sitter,mcp,mcp-server,llm,graph-database,semantic-search,codebase,memgraph,developer-tools,monorepo
@@ -84,7 +84,7 @@ A graph-based RAG system that parses multi-language codebases with Tree-sitter,
 pip install code-graph-rag
 ```
 
-With all Tree-sitter grammars (Python, JS, TS, Rust, Go, Java, Scala, C++, Lua):
+With all Tree-sitter grammars (Python, JS, TS, Rust, Go, Java, Scala, C, C++, C#, PHP, Lua, Dart):
 
 ```bash
 pip install 'code-graph-rag[treesitter-full]'
@@ -237,7 +237,7 @@ Configure via `.env` or environment variables:
 |----------|---------|-------------|
 | `MEMGRAPH_HOST` | `localhost` | Memgraph hostname |
 | `MEMGRAPH_PORT` | `7687` | Memgraph port |
-| `ORCHESTRATOR_PROVIDER` | | Provider: `google`, `openai`, `ollama` |
+| `ORCHESTRATOR_PROVIDER` | | Provider: `google`, `openai`, `anthropic`, `azure`, `ollama`, `minimax`, `litellm_proxy` |
 | `ORCHESTRATOR_MODEL` | | Model ID (e.g. `gpt-4o`, `gemini-2.5-pro`) |
 | `ORCHESTRATOR_API_KEY` | | API key for the provider (not needed for `ollama`) |
 | `CYPHER_PROVIDER` | | Provider for Cypher generation |

{code_graph_rag-0.0.421 → code_graph_rag-0.0.484}/code_graph_rag.egg-info/SOURCES.txt

@@ -10,6 +10,7 @@ code_graph_rag.egg-info/entry_points.txt
 code_graph_rag.egg-info/requires.txt
 code_graph_rag.egg-info/top_level.txt
 codebase_rag/__init__.py
+codebase_rag/ast_cache.py
 codebase_rag/capture.py
 codebase_rag/cgr_state.py
 codebase_rag/cli.py
@@ -21,6 +22,7 @@ codebase_rag/decorators.py
 codebase_rag/docker-compose.yaml
 codebase_rag/embedder.py
 codebase_rag/exceptions.py
+codebase_rag/function_registry.py
 codebase_rag/graph_audit.py
 codebase_rag/graph_loader.py
 codebase_rag/graph_updater.py
@@ -30,6 +32,7 @@ codebase_rag/main.py
 codebase_rag/models.py
 codebase_rag/parser_fingerprint.py
 codebase_rag/parser_loader.py
+codebase_rag/path_filters.py
 codebase_rag/prompts.py
 codebase_rag/readme_sections.py
 codebase_rag/schema_builder.py
@@ -40,16 +43,49 @@ codebase_rag/unixcoder.py
 codebase_rag/vector_store.py
 codebase_rag/analyzers/__init__.py
 codebase_rag/analyzers/ast_grep_analyzer.py
+codebase_rag/analyzers/ast_grep_rules/patterns/c.yaml
+codebase_rag/analyzers/ast_grep_rules/patterns/cpp.yaml
+codebase_rag/analyzers/ast_grep_rules/patterns/csharp.yaml
+codebase_rag/analyzers/ast_grep_rules/patterns/dart.yaml
+codebase_rag/analyzers/ast_grep_rules/patterns/go.yaml
+codebase_rag/analyzers/ast_grep_rules/patterns/java.yaml
 codebase_rag/analyzers/ast_grep_rules/patterns/javascript.yaml
+codebase_rag/analyzers/ast_grep_rules/patterns/lua.yaml
+codebase_rag/analyzers/ast_grep_rules/patterns/php.yaml
 codebase_rag/analyzers/ast_grep_rules/patterns/python.yaml
+codebase_rag/analyzers/ast_grep_rules/patterns/ruby.yaml
+codebase_rag/analyzers/ast_grep_rules/patterns/rust.yaml
+codebase_rag/analyzers/ast_grep_rules/patterns/scala.yaml
 codebase_rag/analyzers/ast_grep_rules/patterns/tsx.yaml
 codebase_rag/analyzers/ast_grep_rules/patterns/typescript.yaml
+codebase_rag/analyzers/ast_grep_rules/security/c.yaml
+codebase_rag/analyzers/ast_grep_rules/security/cpp.yaml
+codebase_rag/analyzers/ast_grep_rules/security/csharp.yaml
+codebase_rag/analyzers/ast_grep_rules/security/dart.yaml
+codebase_rag/analyzers/ast_grep_rules/security/go.yaml
+codebase_rag/analyzers/ast_grep_rules/security/java.yaml
 codebase_rag/analyzers/ast_grep_rules/security/javascript.yaml
+codebase_rag/analyzers/ast_grep_rules/security/lua.yaml
+codebase_rag/analyzers/ast_grep_rules/security/php.yaml
 codebase_rag/analyzers/ast_grep_rules/security/python.yaml
+codebase_rag/analyzers/ast_grep_rules/security/ruby.yaml
+codebase_rag/analyzers/ast_grep_rules/security/rust.yaml
+codebase_rag/analyzers/ast_grep_rules/security/scala.yaml
 codebase_rag/analyzers/ast_grep_rules/security/tsx.yaml
 codebase_rag/analyzers/ast_grep_rules/security/typescript.yaml
+codebase_rag/analyzers/ast_grep_rules/smells/c.yaml
+codebase_rag/analyzers/ast_grep_rules/smells/cpp.yaml
+codebase_rag/analyzers/ast_grep_rules/smells/csharp.yaml
+codebase_rag/analyzers/ast_grep_rules/smells/dart.yaml
+codebase_rag/analyzers/ast_grep_rules/smells/go.yaml
+codebase_rag/analyzers/ast_grep_rules/smells/java.yaml
 codebase_rag/analyzers/ast_grep_rules/smells/javascript.yaml
+codebase_rag/analyzers/ast_grep_rules/smells/lua.yaml
+codebase_rag/analyzers/ast_grep_rules/smells/php.yaml
 codebase_rag/analyzers/ast_grep_rules/smells/python.yaml
+codebase_rag/analyzers/ast_grep_rules/smells/ruby.yaml
+codebase_rag/analyzers/ast_grep_rules/smells/rust.yaml
+codebase_rag/analyzers/ast_grep_rules/smells/scala.yaml
 codebase_rag/analyzers/ast_grep_rules/smells/tsx.yaml
 codebase_rag/analyzers/ast_grep_rules/smells/typescript.yaml
 codebase_rag/constants/__init__.py
@@ -90,6 +126,9 @@ codebase_rag/parsers/call_processor.py
 codebase_rag/parsers/call_resolver.py
 codebase_rag/parsers/definition_processor.py
 codebase_rag/parsers/dependency_parser.py
+codebase_rag/parsers/endpoint_prefixes.py
+codebase_rag/parsers/endpoint_routes.py
+codebase_rag/parsers/endpoints.py
 codebase_rag/parsers/export_detection.py
 codebase_rag/parsers/factory.py
 codebase_rag/parsers/function_ingest.py
@@ -185,6 +224,8 @@ codebase_rag/services/filtering.py
 codebase_rag/services/graph_service.py
 codebase_rag/services/llm.py
 codebase_rag/services/protobuf_service.py
+codebase_rag/services/resource_cleanup.py
+codebase_rag/services/usage_cost.py
 codebase_rag/stack/__init__.py
 codebase_rag/stack/cli.py
 codebase_rag/stack/constants.py

code_graph_rag-0.0.484/codebase_rag/__init__.py

@@ -0,0 +1 @@
+"""Code Graph RAG: build a queryable graph of a codebase and reason over it."""

{code_graph_rag-0.0.421 → code_graph_rag-0.0.484}/codebase_rag/analyzers/ast_grep_analyzer.py

@@ -174,8 +174,7 @@ class FindingAnalyzer:
         start_line = node_range.start.line + 1
         end_line = node_range.end.line + 1
         # qn scopes the finding to file+line+column+rule so two matches of one
-        # rule on the same line stay distinct, while re-indexing merges the
-        # same site idempotently.
+        # rule on one line stay distinct, while re-indexing merges the site.
         qualified_name = cs.SEPARATOR_DOT.join(
             [module_qn, str(start_line), str(node_range.start.column), rule.rule_id]
         )

code_graph_rag-0.0.484/codebase_rag/analyzers/ast_grep_rules/patterns/c.yaml

@@ -0,0 +1,31 @@
+# ast-grep design-pattern rules for C (issue #413).
+# Each match becomes a Pattern node linked to the file's Module via
+# IMPLEMENTS_PATTERN. C has no classic OO patterns, so these are heuristic
+# function-name idioms recognised via the declarator identifier.
+ast_grep_id: c
+extensions: [.c, .h]
+rules:
+  - id: constructor_like
+    message: "Constructor idiom: function name starts with create/make/new/alloc"
+    rule:
+      kind: function_definition
+      has:
+        kind: function_declarator
+        stopBy: end
+        has: { field: declarator, kind: identifier, regex: '^(create|make|new|alloc)' }
+  - id: initializer_like
+    message: "Initializer idiom: function name starts with init"
+    rule:
+      kind: function_definition
+      has:
+        kind: function_declarator
+        stopBy: end
+        has: { field: declarator, kind: identifier, regex: '^init' }
+  - id: destructor_like
+    message: "Destructor idiom: function name starts with free/destroy/release"
+    rule:
+      kind: function_definition
+      has:
+        kind: function_declarator
+        stopBy: end
+        has: { field: declarator, kind: identifier, regex: '^(free|destroy|release)' }

code_graph_rag-0.0.484/codebase_rag/analyzers/ast_grep_rules/patterns/cpp.yaml

@@ -0,0 +1,34 @@
+# ast-grep design-pattern rules for C++ (issue #413).
+# Each match becomes a Pattern node linked to the file's Module via
+# IMPLEMENTS_PATTERN. Rules are heuristic and syntactic.
+ast_grep_id: cpp
+extensions: [.cpp, .cc, .cxx, .hpp, .hh]
+rules:
+  - id: singleton
+    message: "Singleton: class exposes a static getInstance accessor"
+    rule:
+      kind: function_definition
+      all:
+        - has: { kind: storage_class_specifier, regex: '^static$', stopBy: end }
+        - has:
+            kind: function_declarator
+            has: { field: declarator, regex: '^getInstance$' }
+            stopBy: end
+  - id: factory_function
+    message: "Factory function: name starts with create/make/build"
+    rule:
+      kind: function_definition
+      has:
+        kind: function_declarator
+        has: { field: declarator, regex: '^(create|make|build)' }
+        stopBy: end
+  - id: abstract_class
+    message: "Abstract class: declares a pure virtual method (= 0)"
+    rule:
+      kind: class_specifier
+      has:
+        kind: field_declaration
+        all:
+          - has: { regex: '^virtual$', stopBy: end }
+          - regex: '=\s*0\s*;'
+        stopBy: end

code_graph_rag-0.0.484/codebase_rag/analyzers/ast_grep_rules/patterns/csharp.yaml

@@ -0,0 +1,46 @@
+# ast-grep design-pattern rules for C# (issue #413).
+# Each match becomes a Pattern node linked to the file's Module via
+# IMPLEMENTS_PATTERN. Rules are heuristic and syntactic.
+ast_grep_id: csharp
+extensions: [.cs]
+rules:
+  - id: singleton
+    message: "Singleton: class exposes a static Instance member"
+    rule:
+      kind: class_declaration
+      has:
+        stopBy: end
+        any:
+          # static property named Instance / _instance
+          - kind: property_declaration
+            all:
+              - has: { kind: modifier, regex: '^static$', stopBy: end }
+              - has: { kind: identifier, regex: '^_?[Ii]nstance$', stopBy: end }
+          # static backing field named Instance / _instance
+          - kind: field_declaration
+            all:
+              - has: { kind: modifier, regex: '^static$', stopBy: end }
+              - has: { kind: identifier, regex: '^_?[Ii]nstance$', stopBy: end }
+  - id: factory_method
+    message: "Factory method: name starts with Create/Make/Build"
+    rule:
+      kind: method_declaration
+      has: { field: name, regex: '^(Create|Make|Build)' }
+  - id: builder
+    message: "Builder: class name ends with Builder"
+    rule:
+      kind: class_declaration
+      has: { field: name, regex: 'Builder$' }
+  - id: abstract_class
+    message: "Abstract base class: declared with the abstract modifier"
+    rule:
+      kind: class_declaration
+      has: { kind: modifier, regex: '^abstract$' }
+  - id: disposable
+    message: "Disposable: class defines a Dispose method"
+    rule:
+      kind: class_declaration
+      has:
+        stopBy: end
+        kind: method_declaration
+        has: { field: name, regex: '^Dispose$' }

code_graph_rag-0.0.484/codebase_rag/analyzers/ast_grep_rules/patterns/dart.yaml

@@ -0,0 +1,28 @@
+# ast-grep design-pattern rules for Dart (issue #413).
+# Each match becomes a Pattern node linked to the file's Module via
+# IMPLEMENTS_PATTERN. Rules are heuristic and syntactic.
+ast_grep_id: dart
+extensions: [.dart]
+rules:
+  - id: factory_constructor
+    message: "Factory: class exposes a factory constructor"
+    rule:
+      kind: factory_constructor_signature
+  - id: singleton
+    message: "Singleton: class holds a static instance field"
+    rule:
+      kind: class_declaration
+      has:
+        kind: static_final_declaration
+        stopBy: end
+        has: { kind: identifier, regex: '(?i)instance' }
+  - id: builder
+    message: "Builder: class name ends in Builder"
+    rule:
+      kind: class_declaration
+      has: { field: name, regex: 'Builder$' }
+  - id: abstract_class
+    message: "Abstract class declares an interface for subclasses"
+    rule:
+      kind: class_declaration
+      regex: '^abstract\s'

code_graph_rag-0.0.484/codebase_rag/analyzers/ast_grep_rules/patterns/go.yaml

@@ -0,0 +1,25 @@
+# ast-grep design-pattern rules for Go (issue #413).
+# Each match becomes a Pattern node linked to the file's Module via
+# IMPLEMENTS_PATTERN. Rules are heuristic and syntactic.
+ast_grep_id: go
+extensions: [.go]
+rules:
+  - id: constructor
+    message: "Constructor: function name starts with New"
+    rule:
+      kind: function_declaration
+      has: { field: name, regex: '^New' }
+  - id: factory_function
+    message: "Factory function: name starts with New/Make/Build/Create"
+    rule:
+      kind: function_declaration
+      has: { field: name, regex: '^(New|Make|Build|Create)' }
+  - id: singleton
+    message: "Singleton: struct embeds sync.Once to guard one-time init"
+    rule:
+      kind: struct_type
+      has: { kind: qualified_type, regex: 'sync\.Once', stopBy: end }
+  - id: interface_declaration
+    message: "Interface: a behavioural contract declared for satisfaction"
+    rule:
+      kind: interface_type

code_graph_rag-0.0.484/codebase_rag/analyzers/ast_grep_rules/patterns/java.yaml

@@ -0,0 +1,37 @@
+# ast-grep design-pattern rules for Java (issue #413).
+# Each match becomes a Pattern node linked to the file's Module via
+# IMPLEMENTS_PATTERN. Rules are heuristic and syntactic.
+ast_grep_id: java
+extensions: [.java]
+rules:
+  - id: singleton
+    message: "Singleton: class exposes a static getInstance accessor"
+    rule:
+      kind: class_declaration
+      has:
+        kind: method_declaration
+        stopBy: end
+        all:
+          - has: { kind: modifiers, has: { regex: '^static$' } }
+          - has: { field: name, regex: '^getInstance$' }
+  - id: factory_method
+    message: "Factory method: name starts with create/make/build/newInstance"
+    rule:
+      kind: method_declaration
+      has: { field: name, regex: '^(create|make|build|newInstance)' }
+  - id: builder
+    message: "Builder: class name ends with Builder"
+    rule:
+      kind: class_declaration
+      has: { field: name, regex: 'Builder$' }
+  - id: fluent_builder
+    message: "Fluent builder: instance method returns this"
+    rule:
+      kind: method_declaration
+      has:
+        kind: block
+        has:
+          kind: return_statement
+          has: { kind: this }
+          stopBy: end
+        stopBy: end

code_graph_rag-0.0.484/codebase_rag/analyzers/ast_grep_rules/patterns/lua.yaml

@@ -0,0 +1,56 @@
+# ast-grep design-pattern rules for Lua (issue #413).
+# Each match becomes a Pattern node linked to the file's Module via
+# IMPLEMENTS_PATTERN. Rules are heuristic and syntactic.
+ast_grep_id: lua
+extensions: [.lua]
+rules:
+  - id: metatable_oop
+    message: "Metatable OOP: setmetatable() wires a table to its class table"
+    rule:
+      kind: function_call
+      has: { kind: identifier, regex: '^setmetatable$' }
+  - id: index_metatable
+    message: "Class table: __index assigned for prototype-style inheritance"
+    rule:
+      kind: assignment_statement
+      has:
+        kind: dot_index_expression
+        has: { field: field, regex: '^__index$' }
+        stopBy: end
+  - id: factory_function
+    # Decide on the function NAME only. The old `stopBy: end` scanned the whole
+    # body, so a function merely calling `results.new(...)` was flagged. Match a
+    # bare name (`function create()`) or the last segment of a dotted name
+    # (`function results.new()`), never an identifier deep in the body.
+    message: "Factory function: name starts with new/create/make"
+    rule:
+      kind: function_declaration
+      has:
+        any:
+          - all:
+              - kind: identifier
+              - regex: '^(new|create|make)'
+          - all:
+              - kind: dot_index_expression
+              - has: { field: field, regex: '^(new|create|make)' }
+          # Colon syntax `function Class:new()` is the idiomatic Lua constructor;
+          # its name is a method_index_expression, not a dot_index_expression.
+          - all:
+              - kind: method_index_expression
+              - has: { field: method, regex: '^(new|create|make)' }
+  - id: module_return
+    # The idiomatic module export is the TOP-LEVEL trailing `return M`, not
+    # every `return x` inside a function; exclude returns nested in a function.
+    message: "Module pattern: chunk returns a single table variable"
+    rule:
+      kind: return_statement
+      all:
+        - has:
+            kind: expression_list
+            has: { kind: identifier, nthChild: 1 }
+        - not:
+            inside:
+              any:
+                - kind: function_declaration
+                - kind: function_definition
+              stopBy: end

code_graph_rag-0.0.484/codebase_rag/analyzers/ast_grep_rules/patterns/php.yaml

@@ -0,0 +1,31 @@
+# ast-grep design-pattern rules for PHP (issue #413).
+# Each match becomes a Pattern node linked to the file's Module via
+# IMPLEMENTS_PATTERN. Rules are heuristic and syntactic.
+ast_grep_id: php
+extensions: [.php]
+rules:
+  - id: singleton
+    message: "Singleton: class exposes a static getInstance accessor"
+    rule:
+      kind: class_declaration
+      has:
+        kind: method_declaration
+        stopBy: end
+        all:
+          - has: { kind: static_modifier }
+          - has: { field: name, regex: '^getInstance$' }
+  - id: factory_function
+    message: "Factory function: name starts with create/make/build"
+    rule:
+      kind: function_definition
+      has: { field: name, regex: '^(create|make|build)' }
+  - id: factory_method
+    message: "Factory method: name starts with create/make/build"
+    rule:
+      kind: method_declaration
+      has: { field: name, regex: '^(create|make|build)' }
+  - id: abstract_class
+    message: "Abstract class: declared with the abstract modifier"
+    rule:
+      kind: class_declaration
+      has: { kind: abstract_modifier }

code_graph_rag-0.0.484/codebase_rag/analyzers/ast_grep_rules/patterns/ruby.yaml

@@ -0,0 +1,29 @@
+# ast-grep design-pattern rules for Ruby (issue #413).
+# Each match becomes a Pattern node linked to the file's Module via
+# IMPLEMENTS_PATTERN. Rules are heuristic and syntactic.
+ast_grep_id: ruby
+extensions: [.rb]
+rules:
+  - id: singleton
+    message: "Singleton: class mixes in the Singleton module"
+    rule:
+      pattern: "include Singleton"
+  - id: factory_method
+    message: "Factory: class method named create/build/make"
+    rule:
+      any:
+        # def self.create ...
+        - kind: singleton_method
+          has: { field: name, regex: '^(create|build|make)' }
+        # class << self; def create ...
+        - kind: method
+          all:
+            - has: { field: name, regex: '^(create|build|make)' }
+            - inside: { kind: singleton_class, stopBy: end }
+  - id: module_mixin
+    message: "Module mixin: behavior shared via include/extend"
+    rule:
+      kind: call
+      has:
+        field: method
+        regex: '^(include|extend|prepend)$'

code_graph_rag-0.0.484/codebase_rag/analyzers/ast_grep_rules/patterns/rust.yaml

@@ -0,0 +1,27 @@
+# ast-grep design-pattern rules for Rust (issue #413).
+# Each match becomes a Pattern node linked to the file's Module via
+# IMPLEMENTS_PATTERN. Rules are heuristic and syntactic.
+ast_grep_id: rust
+extensions: [.rs]
+rules:
+  - id: constructor_new
+    message: "Constructor: associated fn new returning Self"
+    rule:
+      kind: function_item
+      all:
+        - has: { field: name, regex: '^new$' }
+        - has: { field: return_type, regex: '^Self$' }
+  - id: factory_function
+    message: "Factory function: name starts with new/build/create/make"
+    rule:
+      kind: function_item
+      has: { field: name, regex: '^(new|build|create|make)' }
+  - id: trait_impl
+    message: "Trait implementation: impl Trait for Type"
+    rule:
+      kind: impl_item
+      has: { field: trait, regex: '.' }
+  - id: trait_definition
+    message: "Trait definition declares an interface"
+    rule:
+      kind: trait_item

code_graph_rag-0.0.484/codebase_rag/analyzers/ast_grep_rules/patterns/scala.yaml

@@ -0,0 +1,25 @@
+# ast-grep design-pattern rules for Scala (issue #413).
+# Each match becomes a Pattern node linked to the file's Module via
+# IMPLEMENTS_PATTERN. Rules are heuristic and syntactic.
+ast_grep_id: scala
+extensions: [.scala, .sc]
+rules:
+  - id: singleton_object
+    message: "Singleton: object declares a single shared instance"
+    rule:
+      kind: object_definition
+  - id: case_class
+    message: "Case class: immutable value type with generated equality"
+    rule:
+      kind: class_definition
+      regex: '^case\s+class'
+  - id: companion_factory
+    message: "Factory: apply method builds instances of the type"
+    rule:
+      kind: function_definition
+      has: { field: name, regex: '^apply$' }
+  - id: factory_method
+    message: "Factory method: name starts with make/create/build"
+    rule:
+      kind: function_definition
+      has: { field: name, regex: '^(make|create|build)' }

code_graph_rag-0.0.484/codebase_rag/analyzers/ast_grep_rules/security/c.yaml

@@ -0,0 +1,35 @@
+# ast-grep security rules for C (issue #413).
+# Each match becomes a SecurityIssue node linked to the file's Module via
+# HAS_VULNERABILITY. Rules favour recall; treat findings as review prompts.
+ast_grep_id: c
+extensions: [.c, .h]
+rules:
+  - id: dangerous_string_fn
+    message: "Unbounded string function (gets/strcpy/strcat/sprintf) risks buffer overflow"
+    rule:
+      kind: call_expression
+      has: { field: function, regex: '^(gets|strcpy|strcat|sprintf|vsprintf|scanf)$' }
+  - id: command_execution
+    message: "Possible command injection via system/popen/exec* call"
+    rule:
+      kind: call_expression
+      has: { field: function, regex: '^(system|popen|execl|execlp|execle|execv|execvp|execvpe)$' }
+  - id: hardcoded_secret
+    # Security rule: favour recall. Target name matches a credential word and the
+    # value is a non-trivial string literal (>=10 chars) that is not a printf-style
+    # format template. Handles both `char *password = "..."` (pointer_declarator)
+    # and `T token = "..."` (plain identifier) via a stopBy-end identifier probe.
+    message: "Hardcoded secret assigned to a credential-named variable"
+    rule:
+      kind: init_declarator
+      all:
+        - has: { stopBy: end, kind: identifier, regex: '(?i)(password|secret|api_key|token)' }
+        - has:
+            field: value
+            all:
+              - kind: string_literal
+              - regex: '^.{10,}$'
+              - not:
+                  any:
+                    - regex: '\{[^{}]*\}'
+                    - regex: '%[sdrifeEgGxXoc(]'