code-graph-rag 0.4.19__tar.gz → 0.6.0__tar.gz

{code_graph_rag-0.4.19/code_graph_rag.egg-info → code_graph_rag-0.6.0}/PKG-INFO

@@ -1,17 +1,20 @@
 Metadata-Version: 2.4
 Name: code-graph-rag
-Version: 0.4.19
+Version: 0.6.0
 Summary: The ultimate RAG for your monorepo. Query, understand, and edit multi-language codebases with the power of AI and knowledge graphs
 License-Expression: MIT
 Keywords: rag,retrieval-augmented-generation,knowledge-graph,code-analysis,tree-sitter,mcp,mcp-server,llm,graph-database,semantic-search,codebase,memgraph,developer-tools,monorepo
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
-Classifier: Operating System :: OS Independent
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX :: Linux
 Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Classifier: Topic :: Software Development :: Code Generators
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: Implementation :: CPython
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
@@ -25,7 +28,6 @@ Requires-Dist: pydantic-ai-slim[anthropic,google,openai]>=2.0.0
 Requires-Dist: pydantic-settings>=2.12.0
 Requires-Dist: python-dotenv>=1.2.1
 Requires-Dist: tiktoken>=0.12.0
-Requires-Dist: tomli-w>=1.2.0
 Requires-Dist: tree-sitter-python>=0.25.0
 Requires-Dist: tree-sitter==0.26.0
 Requires-Dist: watchdog>=6.0.0
@@ -35,13 +37,13 @@ Requires-Dist: prompt-toolkit>=3.0.52
 Requires-Dist: diff-match-patch>=20241021
 Requires-Dist: click>=8.3.3
 Requires-Dist: protobuf>=6.33.5
-Requires-Dist: defusedxml>=0.7.1
-Requires-Dist: huggingface-hub[hf-xet]>=1.7.2
+Requires-Dist: pyyaml>=6.0
 Requires-Dist: pathspec>=1.0.4
 Requires-Dist: pygments>=2.20.0
+Requires-Dist: httpx>=0.28.1
 Requires-Dist: certifi>=2026.10.23
 Requires-Dist: regex>=2024.11.6
-Requires-Dist: cgr-graph-rs<0.2,>=0.1.5; platform_python_implementation == "CPython" and ((sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) or sys_platform == "darwin" or (sys_platform == "win32" and platform_machine == "AMD64"))
+Requires-Dist: cgr-graph-rs<0.2,>=0.1.6
 Provides-Extra: test
 Requires-Dist: jedi>=0.19; extra == "test"
 Requires-Dist: pytest>=8.4.1; extra == "test"
@@ -84,6 +86,7 @@ Requires-Dist: grpcio>=1.84.1; extra == "semantic"
 Requires-Dist: sqlite-vec>=0.1.9; ((sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) or sys_platform == "darwin" or (sys_platform == "win32" and platform_machine == "AMD64")) and extra == "semantic"
 Requires-Dist: torch>=2.6.0; extra == "semantic"
 Requires-Dist: transformers>=5.0.0; extra == "semantic"
+Requires-Dist: huggingface-hub[hf-xet]>=1.7.2; extra == "semantic"
 Provides-Extra: milvus
 Requires-Dist: pymilvus[milvus-lite]>=3.0.0; extra == "milvus"
 Requires-Dist: grpcio>=1.84.1; extra == "milvus"
@@ -189,10 +192,10 @@ The knowledge graph is an embedded SQLite file (`~/.cgr/graph.sqlite`), so there
 is no database server to run. Memgraph and Neo4j remain available as opt-in
 backends; see [Graph Backends](https://docs.code-graph-rag.com/architecture/embedded-graph/).
 
-The wheel is pure Python (`py3-none-any`), so it installs on any platform with
-Python 3.12 or newer. On Linux (x86_64, aarch64), macOS and Windows x64 it also
-pulls in `cgr-graph-rs`, a native extension that speeds up the embedded graph;
-elsewhere the same engine runs in pure Python.
+The wheel is pure Python (`py3-none-any`), and it requires `cgr-graph-rs`, the
+native extension that does the work behind it, which ships for CPython 3.12 or
+newer on Linux (x86_64, aarch64), macOS and Windows x64. cgr does not run
+without it, so it installs on those platforms only.
 
 Some distributions ship an older interpreter (Debian Bookworm, and so Raspberry
 Pi OS Bookworm, ships 3.11), which also explains the failed piwheels Bookworm

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/PYPI_README.md

@@ -91,10 +91,10 @@ The knowledge graph is an embedded SQLite file (`~/.cgr/graph.sqlite`), so there
 is no database server to run. Memgraph and Neo4j remain available as opt-in
 backends; see [Graph Backends](https://docs.code-graph-rag.com/architecture/embedded-graph/).
 
-The wheel is pure Python (`py3-none-any`), so it installs on any platform with
-Python 3.12 or newer. On Linux (x86_64, aarch64), macOS and Windows x64 it also
-pulls in `cgr-graph-rs`, a native extension that speeds up the embedded graph;
-elsewhere the same engine runs in pure Python.
+The wheel is pure Python (`py3-none-any`), and it requires `cgr-graph-rs`, the
+native extension that does the work behind it, which ships for CPython 3.12 or
+newer on Linux (x86_64, aarch64), macOS and Windows x64. cgr does not run
+without it, so it installs on those platforms only.
 
 Some distributions ship an older interpreter (Debian Bookworm, and so Raspberry
 Pi OS Bookworm, ships 3.11), which also explains the failed piwheels Bookworm

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/README.md

@@ -61,10 +61,10 @@ Code-Graph-RAG parses a multi-language codebase with Tree-sitter, sharpened by c
 ## Latest News 🔥
 
 <!-- SECTION:latest_news -->
-- **Quiet Mode Enhancement**: The `--quiet` flag for the CLI now suppresses the scanning line for dead code and duplicates, providing a cleaner output.
-- **Context Budget Fix**: The system now correctly handles cases where a target doesn't fit within the allocated budget, preventing unexpected behaviour.
-- **Code Quality**: Changes have been made to report decorator and modifier changes that affect method calls and to ensure submodule grammars are loaded correctly.
-- **CGR Prune Feature**: A new `cgr prune` functionality has been added to remove projects where the root no longer exists.
+- **Continuous Integration Improvements**: Enhanced release cadence tracking and ensured accurate green status for deferred releases.
+- **Code Quality & Clarity**: Resolved several code style and correctness issues including foreach loop variable typing and Python method receiver handling.
+- **Build Process Refinement**: Reduced the default install package count and improved makefile functionality for host/port watching.
+- **Feature Control**: Prevented the use of `--no-endpoint-roots` when endpoint data is absent.
 <!-- /SECTION:latest_news -->
 
 See [NEWS.md](NEWS.md) for the full history.
@@ -145,7 +145,7 @@ To upgrade an existing install, run `uv tool upgrade code-graph-rag` (with pipx,
 You also need Python 3.12+ and `ripgrep`. The graph lives in an embedded SQLite file by default, so there is no database server to run: no Docker and no `cmake`. Memgraph and Neo4j remain available as opt-in backends ([Graph Backends](docs/architecture/embedded-graph.md)). Full prerequisites, source installs, and environment setup are in the [Installation](docs/getting-started/installation.md) guide.
 
 > [!NOTE]
-> The wheel is pure Python (`py3-none-any`), so it installs on any platform with Python 3.12 or newer. Older system interpreters (Debian Bookworm ships 3.11) need the interpreter pinned explicitly; see [Installation](docs/getting-started/installation.md#older-system-interpreters) for the commands.
+> cgr requires its native extension, `cgr-graph-rs`, which ships for CPython 3.12 or newer on Linux (x86_64, aarch64), macOS and Windows x64, so it installs on those platforms only. Older system interpreters (Debian Bookworm ships 3.11) need the interpreter pinned explicitly; see [Installation](docs/getting-started/installation.md#older-system-interpreters) for the commands.
 
 ## Quick Start
 

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0/code_graph_rag.egg-info}/PKG-INFO

@@ -1,17 +1,20 @@
 Metadata-Version: 2.4
 Name: code-graph-rag
-Version: 0.4.19
+Version: 0.6.0
 Summary: The ultimate RAG for your monorepo. Query, understand, and edit multi-language codebases with the power of AI and knowledge graphs
 License-Expression: MIT
 Keywords: rag,retrieval-augmented-generation,knowledge-graph,code-analysis,tree-sitter,mcp,mcp-server,llm,graph-database,semantic-search,codebase,memgraph,developer-tools,monorepo
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
-Classifier: Operating System :: OS Independent
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX :: Linux
 Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Classifier: Topic :: Software Development :: Code Generators
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: Implementation :: CPython
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
@@ -25,7 +28,6 @@ Requires-Dist: pydantic-ai-slim[anthropic,google,openai]>=2.0.0
 Requires-Dist: pydantic-settings>=2.12.0
 Requires-Dist: python-dotenv>=1.2.1
 Requires-Dist: tiktoken>=0.12.0
-Requires-Dist: tomli-w>=1.2.0
 Requires-Dist: tree-sitter-python>=0.25.0
 Requires-Dist: tree-sitter==0.26.0
 Requires-Dist: watchdog>=6.0.0
@@ -35,13 +37,13 @@ Requires-Dist: prompt-toolkit>=3.0.52
 Requires-Dist: diff-match-patch>=20241021
 Requires-Dist: click>=8.3.3
 Requires-Dist: protobuf>=6.33.5
-Requires-Dist: defusedxml>=0.7.1
-Requires-Dist: huggingface-hub[hf-xet]>=1.7.2
+Requires-Dist: pyyaml>=6.0
 Requires-Dist: pathspec>=1.0.4
 Requires-Dist: pygments>=2.20.0
+Requires-Dist: httpx>=0.28.1
 Requires-Dist: certifi>=2026.10.23
 Requires-Dist: regex>=2024.11.6
-Requires-Dist: cgr-graph-rs<0.2,>=0.1.5; platform_python_implementation == "CPython" and ((sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) or sys_platform == "darwin" or (sys_platform == "win32" and platform_machine == "AMD64"))
+Requires-Dist: cgr-graph-rs<0.2,>=0.1.6
 Provides-Extra: test
 Requires-Dist: jedi>=0.19; extra == "test"
 Requires-Dist: pytest>=8.4.1; extra == "test"
@@ -84,6 +86,7 @@ Requires-Dist: grpcio>=1.84.1; extra == "semantic"
 Requires-Dist: sqlite-vec>=0.1.9; ((sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) or sys_platform == "darwin" or (sys_platform == "win32" and platform_machine == "AMD64")) and extra == "semantic"
 Requires-Dist: torch>=2.6.0; extra == "semantic"
 Requires-Dist: transformers>=5.0.0; extra == "semantic"
+Requires-Dist: huggingface-hub[hf-xet]>=1.7.2; extra == "semantic"
 Provides-Extra: milvus
 Requires-Dist: pymilvus[milvus-lite]>=3.0.0; extra == "milvus"
 Requires-Dist: grpcio>=1.84.1; extra == "milvus"
@@ -189,10 +192,10 @@ The knowledge graph is an embedded SQLite file (`~/.cgr/graph.sqlite`), so there
 is no database server to run. Memgraph and Neo4j remain available as opt-in
 backends; see [Graph Backends](https://docs.code-graph-rag.com/architecture/embedded-graph/).
 
-The wheel is pure Python (`py3-none-any`), so it installs on any platform with
-Python 3.12 or newer. On Linux (x86_64, aarch64), macOS and Windows x64 it also
-pulls in `cgr-graph-rs`, a native extension that speeds up the embedded graph;
-elsewhere the same engine runs in pure Python.
+The wheel is pure Python (`py3-none-any`), and it requires `cgr-graph-rs`, the
+native extension that does the work behind it, which ships for CPython 3.12 or
+newer on Linux (x86_64, aarch64), macOS and Windows x64. cgr does not run
+without it, so it installs on those platforms only.
 
 Some distributions ship an older interpreter (Debian Bookworm, and so Raspberry
 Pi OS Bookworm, ships 3.11), which also explains the failed piwheels Bookworm

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/code_graph_rag.egg-info/SOURCES.txt

@@ -171,6 +171,8 @@ codebase_rag/editing/rename.py
 codebase_rag/editing/signature.py
 codebase_rag/editing/signature_bind.py
 codebase_rag/editing/signature_contract.py
+codebase_rag/editing/signature_js.py
+codebase_rag/editing/signature_js_bind.py
 codebase_rag/editing/signature_spec.py
 codebase_rag/editing/sites.py
 codebase_rag/editing/transaction.py
@@ -456,10 +458,12 @@ codebase_rag/utils/path_utils.py
 codebase_rag/utils/process_owner.py
 codebase_rag/utils/qn_markers.py
 codebase_rag/utils/rich_markdown.py
+codebase_rag/utils/safe_xml.py
 codebase_rag/utils/source_encoding.py
 codebase_rag/utils/source_extraction.py
 codebase_rag/utils/terminal_console.py
 codebase_rag/utils/token_utils.py
+codebase_rag/utils/toml_writer.py
 codebase_rag/workspaces/__init__.py
 codebase_rag/workspaces/cli.py
 codebase_rag/workspaces/constants.py

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/code_graph_rag.egg-info/requires.txt

@@ -5,7 +5,6 @@ pydantic-ai-slim[anthropic,google,openai]>=2.0.0
 pydantic-settings>=2.12.0
 python-dotenv>=1.2.1
 tiktoken>=0.12.0
-tomli-w>=1.2.0
 tree-sitter-python>=0.25.0
 tree-sitter==0.26.0
 watchdog>=6.0.0
@@ -15,15 +14,13 @@ prompt-toolkit>=3.0.52
 diff-match-patch>=20241021
 click>=8.3.3
 protobuf>=6.33.5
-defusedxml>=0.7.1
-huggingface-hub[hf-xet]>=1.7.2
+pyyaml>=6.0
 pathspec>=1.0.4
 pygments>=2.20.0
+httpx>=0.28.1
 certifi>=2026.10.23
 regex>=2024.11.6
-
-[:platform_python_implementation == "CPython" and ((sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) or sys_platform == "darwin" or (sys_platform == "win32" and platform_machine == "AMD64"))]
-cgr-graph-rs<0.2,>=0.1.5
+cgr-graph-rs<0.2,>=0.1.6
 
 [ast-grep]
 ast-grep-py>=0.51.0
@@ -50,6 +47,7 @@ qdrant-client>=1.9.0
 grpcio>=1.84.1
 torch>=2.6.0
 transformers>=5.0.0
+huggingface-hub[hf-xet]>=1.7.2
 
 [semantic:(sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) or sys_platform == "darwin" or (sys_platform == "win32" and platform_machine == "AMD64")]
 sqlite-vec>=0.1.9

code_graph_rag-0.6.0/codebase_rag/__init__.py

@@ -0,0 +1,8 @@
+"""Code Graph RAG: build a queryable graph of a codebase and reason over it."""
+
+from . import tree_sitter_point as _tree_sitter_point  # noqa: F401
+from .embedded_graph.extension import require_rust_extension as _require_rust_extension
+
+# The Rust extension does the work behind this package's interface, and
+# there is no pure-Python stand-in: without it, nothing here runs.
+_require_rust_extension()

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/codebase_rag/cli.py

@@ -3217,6 +3217,19 @@ def _notice_single_project_endpoint_roots(show_progress: bool) -> None:
         typer.echo(cs.CLI_DEADCODE_SINGLE_PROJECT_ENDPOINTS, err=True)
 
 
+def _refuse_without_endpoint_data(
+    error: ex.EndpointDataMissingError, show_progress: bool
+) -> NoReturn:
+    """No verdict, rather than one that reads as nothing unreachable. A
+    machine format owns stdout, so the refusal goes to stderr there, as the
+    single-project notice does."""
+    if show_progress:
+        app_context.console.print(style(str(error), cs.Color.RED))
+    else:
+        typer.echo(str(error), err=True)
+    raise typer.Exit(1)
+
+
 @app.command(
     name=ch.CLICommandName.DEAD_CODE,
     help=ch.DESC_DEAD_CODE,
@@ -3291,26 +3304,33 @@ def dead_code(
     choice = ProjectChoice(None)
     rows: list[ResultRow] = []
     structural_tier_symbols = 0
+    endpoint_gap: ex.EndpointDataMissingError | None = None
     try:
         with connect_memgraph(batch_size=1) as ingestor:
             projects = ingestor.list_projects()
             choice = choose_project(chosen, repo_path, projects, ingestor)
             if (resolved := choice.name) is not None:
                 logger.info(ls.DEADCODE_SCANNING.format(project_name=resolved))
-                rows, structural_tier_symbols = collect_dead_code_with_coverage(
-                    ingestor,
-                    resolved,
-                    _dead_code_config(
-                        include_tests,
-                        include_classes,
-                        entry_point,
-                        decorator_root,
-                        min_resolution,
-                        endpoint_roots,
-                        public_roots,
-                    ),
-                )
-                if not endpoint_roots and len(projects) <= 1:
+                try:
+                    rows, structural_tier_symbols = collect_dead_code_with_coverage(
+                        ingestor,
+                        resolved,
+                        _dead_code_config(
+                            include_tests,
+                            include_classes,
+                            entry_point,
+                            decorator_root,
+                            min_resolution,
+                            endpoint_roots,
+                            public_roots,
+                        ),
+                    )
+                except ex.EndpointDataMissingError as e:
+                    # Held until the connection closes: a finding about the
+                    # project, which the service layer would log on exit as a
+                    # failed session with a traceback (issue #2896).
+                    endpoint_gap = e
+                if not endpoint_roots and len(projects) <= 1 and not endpoint_gap:
                     _notice_single_project_endpoint_roots(show_progress)
     except GraphUnavailableError:
         raise
@@ -3321,6 +3341,8 @@ def dead_code(
         logger.exception(ls.DEADCODE_ERROR.format(error=e))
         raise typer.Exit(1) from e
 
+    if endpoint_gap is not None:
+        _refuse_without_endpoint_data(endpoint_gap, show_progress)
     resolved = _require_project(choice)
 
     candidates = [

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/codebase_rag/cli_help.py

@@ -201,7 +201,8 @@ HELP_RENAME_ALLOW_HEURISTIC = (
 )
 HELP_RENAME_DRY_RUN = "Print the plan and diff without writing anything."
 CMD_CHANGE_SIGNATURE = (
-    "Change a Python definition's parameter list and rewrite every call site "
+    "Change a Python or JavaScript definition's parameter list and rewrite "
+    "every call site "
     "the graph knows; sites the mapping cannot complete are listed, not touched; "
     "refuses on a graph a stopped sync left partial."
 )
@@ -676,7 +677,8 @@ HELP_DEADCODE_ENDPOINT_ROOTS = (
     "(RESOLVES_TO into it, or a direct READS_FROM/WRITES_TO for RPC and "
     "dispatch resources), so an endpoint nobody calls is reported. A handler "
     "registered by a call (Go HandleFunc, Express app.get) stays live "
-    "through that call."
+    "through that call. Endpoints are recorded only by the io capture group: "
+    "index the project with --capture io first, or the command refuses."
 )
 HELP_DEADCODE_MIN_RESOLUTION = (
     "Ignore call edges below this confidence when deciding liveness: "

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/codebase_rag/config.py

@@ -48,8 +48,12 @@ def merge_dotenv(path: Path) -> dict[str, str]:
     # value, and a reference to it in the file reads that value too.
     values = DotEnv(path, encoding=cs.ENCODING_UTF8, override=False).dict()
     refused: dict[str, str] = {}
+    # The file may not set a waiver in any spelling: settings match names
+    # without regard to case, so `cgr_allow_sensitive_reads=true` beside an
+    # exported `CGR_ALLOW_SENSITIVE_READS=false` won (see load_settings).
+    environment_only = {name.upper() for name in cs.ENVIRONMENT_ONLY_SETTINGS}
     for name, value in values.items():
-        if value is None or name in os.environ:
+        if value is None or name in os.environ or name.upper() in environment_only:
             continue
         try:
             os.environ[name] = value
@@ -620,6 +624,14 @@ class AppConfig(BaseSettings):
         False, validation_alias="CGR_ALLOW_SENSITIVE_READS"
     )
 
+    # MCP write_file and surgical_replace_code refuse the same files: an
+    # overwrite destroys the secret, and an edit's refusals ("target not
+    # found", the lines of each match) let the client guess one character
+    # at a time. The CLI agent asks before every write instead.
+    ALLOW_SENSITIVE_WRITES: bool = Field(
+        False, validation_alias="CGR_ALLOW_SENSITIVE_WRITES"
+    )
+
     # A repository's .cgr.md loads only once the user approved its content
     # (issue #3456). True trusts every repository's file without asking:
     # for CI on repositories you control, never for code you did not write.
@@ -780,7 +792,10 @@ def load_settings(
     # when the user exported it: `.env` in the working directory is usually the
     # analysed repository's file, and could approve its own .cgr.md (Codex
     # review on PR #3471). Held at its default, silently, like an unset one.
-    exported = {name.upper() for name in inherited_env}
+    # An empty one counts as unset: settings skip an empty variable
+    # (env_ignore_empty) and read `.env` in its place, so it let the
+    # repository's file decide.
+    exported = {name.upper() for name in inherited_env if os.environ.get(name)}
     waivers = {
         name for name in cs.ENVIRONMENT_ONLY_SETTINGS if name.upper() not in exported
     }

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/codebase_rag/constants/ast_csharp.py

@@ -170,6 +170,47 @@ TS_CSHARP_PARAMETER_LIST = "parameter_list"
 # variable_declaration; a property_declaration exposes `type` and `name` directly.
 TS_CSHARP_VARIABLE_DECLARATION = "variable_declaration"
 TS_CSHARP_FOREACH_STATEMENT = "foreach_statement"
+# The declarations a field belongs to.
+CSHARP_TYPE_DECLARATION_NODES = frozenset(
+    {
+        TS_CSHARP_CLASS_DECLARATION,
+        TS_CSHARP_STRUCT_DECLARATION,
+        TS_CSHARP_RECORD_DECLARATION,
+        TS_CSHARP_INTERFACE_DECLARATION,
+    }
+)
+# Generic collections whose one type argument is the element a `foreach`
+# binds (issue #2938); any other generic (`Dictionary<K, V>`) is not read.
+CSHARP_ENUMERABLE_GENERICS = frozenset(
+    {
+        "IEnumerable",
+        "IAsyncEnumerable",
+        "ICollection",
+        "IList",
+        "IReadOnlyCollection",
+        "IReadOnlyList",
+        "ISet",
+        "IReadOnlySet",
+        "List",
+        "HashSet",
+        "SortedSet",
+        "LinkedList",
+        "Queue",
+        "Stack",
+        "Collection",
+        "ReadOnlyCollection",
+        "ObservableCollection",
+        "ImmutableArray",
+        "ImmutableList",
+        "ImmutableHashSet",
+        "IImmutableList",
+        "IImmutableSet",
+        "ConcurrentBag",
+        "ConcurrentQueue",
+        "ConcurrentStack",
+        "BlockingCollection",
+    }
+)
 TS_CSHARP_VARIABLE_DECLARATOR = "variable_declarator"
 TS_CSHARP_IMPLICIT_TYPE = "implicit_type"
 TS_CSHARP_FIELD_DECLARATION = "field_declaration"
@@ -221,6 +262,9 @@ TS_CSHARP_STATIC = "static"
 TS_CSHARP_GLOBAL = "global"
 # A `params T[]` tail parameter is an array type in the method signature.
 CSHARP_ARRAY_SUFFIX = "[]"
+# An array type's rank specifier: `T[]`, `T[,]`.
+CSHARP_ARRAY_RANK_OPEN = "["
+CSHARP_ARRAY_RANK_CLOSE = "]"
 
 # The name node inside a using directive: a dotted `qualified_name` or a bare
 # `identifier` (both the imported path and, in the alias form, the alias).
@@ -370,6 +414,12 @@ TS_CSHARP_DECLARATION_PATTERN = "declaration_pattern"
 TS_CSHARP_CATCH_DECLARATION = "catch_declaration"
 TS_CSHARP_FROM_CLAUSE = "from_clause"
 TS_CSHARP_LET_CLAUSE = "let_clause"
+# `o is Other[] { Length: 1 } items`, `join z in zs ...`, `... into g`, and a
+# lambda written with `delegate`.
+TS_CSHARP_RECURSIVE_PATTERN = "recursive_pattern"
+TS_CSHARP_JOIN_CLAUSE = "join_clause"
+TS_CSHARP_JOIN_INTO_CLAUSE = "join_into_clause"
+TS_CSHARP_ANONYMOUS_METHOD_EXPRESSION = "anonymous_method_expression"
 TS_CSHARP_EVENT_FIELD_DECLARATION = "event_field_declaration"
 # A top-level statement (C# 9); its locals are in scope across the file.
 TS_CSHARP_GLOBAL_STATEMENT = "global_statement"

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/codebase_rag/constants/ast_js.py

@@ -534,3 +534,24 @@ CAPTURE_MODULE_OBJ = "module_obj"
 CAPTURE_EXPORTS_PROP = "exports_prop"
 CAPTURE_EXPORT_NAME = "export_name"
 CAPTURE_EXPORT_FUNCTION = "export_function"
+
+# Value nodes a call argument can be without running code, and the methods
+# through which a function is called with an explicit receiver, for
+# change_signature (issue #1908).
+TS_JS_NUMBER = "number"
+TS_JS_NULL = "null"
+TS_JS_UNDEFINED = "undefined"
+TS_JS_ACCESSOR_KEYWORDS = frozenset({"get", "set"})
+JS_RECEIVER_METHODS = frozenset({"call", "apply"})
+# `\u0061` and `\u{61}` both spell the identifier `a`, and a parameter name
+# written with escapes is refused; a direct `eval` reads locals named in a
+# string. For change_signature (issue #1908).
+JS_IDENTIFIER_ESCAPE = r"\\u\{([0-9a-fA-F]+)\}|\\u([0-9a-fA-F]{4})"
+JS_ESCAPE_MARK = "\\"
+JS_EVAL_NAME = "eval"
+# The argument passed for a default a call skips: undefined even where the
+# caller has bound the name `undefined` to something else.
+JS_SKIPPED_ARGUMENT = "void 0"
+# A function body opening with either of these, exactly as written, runs in
+# strict mode, and JavaScript then refuses a default among its parameters.
+JS_USE_STRICT_DIRECTIVES = frozenset({"'use strict'", '"use strict"'})

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/codebase_rag/constants/ast_python.py

@@ -69,6 +69,13 @@ TS_PY_LIST_SPLAT = "list_splat"
 TS_PY_DICTIONARY_SPLAT = "dictionary_splat"
 TS_PY_DEFAULT_PARAMETER = "default_parameter"
 TS_PY_LIST_SPLAT_PATTERN = "list_splat_pattern"
+# `from __future__ import annotations` (PEP 563) keeps every annotation in
+# its module as a string that never runs.
+TS_PY_FUTURE_IMPORT_STATEMENT = "future_import_statement"
+PY_FUTURE_ANNOTATIONS = "annotations"
+# The literal sequence values an unpacking assignment pairs its targets with
+# by position (`a, b = x, y`, `(a, b) = (x, y)`, `[a, b] = [x, y]`).
+PY_UNPACKING_VALUE_TYPES = frozenset({"expression_list", "tuple", "list"})
 TS_PY_DICTIONARY_SPLAT_PATTERN = "dictionary_splat_pattern"
 TS_PY_POSITIONAL_SEPARATOR = "positional_separator"
 TS_PY_KEYWORD_SEPARATOR = "keyword_separator"

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/codebase_rag/constants/build.py

@@ -88,7 +88,6 @@ PYINSTALLER_PACKAGES: list["PyInstallerPackage"] = [
     PyInstallerPackage(name="rich", collect_all=True),
     PyInstallerPackage(name="typer", collect_all=True),
     PyInstallerPackage(name="loguru", collect_all=True),
-    PyInstallerPackage(name="tomli_w", collect_all=True),
     PyInstallerPackage(name="protobuf", collect_all=True),
     PyInstallerPackage(name="genai_prices", collect_all=True),
     # The embedded graph's Rust half, loaded by name (embedded_graph/

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/codebase_rag/constants/cli.py

@@ -1074,9 +1074,9 @@ SIGNATURE_CLI_WRONG_ROOT = (
     "Project {project} was not indexed from {root}; "
     "pass the --repo-path it was indexed from"
 )
-SIGNATURE_NOT_PYTHON = (
-    "Cannot change the signature of {qn}: {path} is not Python, and only Python "
-    "definitions are supported for now (issue #{issue})"
+SIGNATURE_UNSUPPORTED_LANGUAGE = (
+    "Cannot change the signature of {qn}: {path} is in a language it does not "
+    "support yet; Python and JavaScript are supported (issue #{issue})"
 )
 SIGNATURE_DEFINITION_UNREADABLE = (
     "Cannot change the signature of {qn}: its file {path} cannot be read "
@@ -1157,7 +1157,7 @@ SIGNATURE_SITE_NO_LOCATION = "site carries no location ({resolution})"
 SIGNATURE_SITE_GUESSED = (
     "site was resolved by {resolution}; pass allow_heuristic to rewrite it"
 )
-SIGNATURE_SITE_NOT_PYTHON = "{path} is not Python"
+SIGNATURE_SITE_OTHER_LANGUAGE = "{path} is not in the definition's language"
 SIGNATURE_SITE_UNREADABLE_FILE = "file cannot be read ({error})"
 SIGNATURE_SITE_NO_CALL = "no call found at the recorded position"
 SIGNATURE_SITE_UNREADABLE = "arguments cannot be read positionally: `{text}`"
@@ -1176,6 +1176,70 @@ SIGNATURE_SITE_EXPLICIT_RECEIVER = (
     "reaches the method through its class and passes the receiver as an "
     "argument (`{text}`); rewrite it by hand"
 )
+SIGNATURE_SITE_REORDERS_EFFECTS = (
+    "its arguments run code, and the new order would run them in another "
+    "order: `{text}`"
+)
+SIGNATURE_JS_HEADER_PROBE = "function _{params} {{}}"
+SIGNATURE_JS_CALL_PROBE = "_({args});"
+SIGNATURE_JS_BAD_LITERAL = (
+    "The value `{literal}` mapped to {name} is not one JavaScript expression; "
+    "written into a call it would not be exactly one argument"
+)
+SIGNATURE_JS_UNSUPPORTED_PARAMS = (
+    "Cannot change the signature of {qn}: `{text}` is not a plain parameter "
+    "(a name, with or without a default), and only those can be remapped"
+)
+SIGNATURE_JS_BAD_PARAM = (
+    "Not one plain parameter: `{text}` (expected `name` or `name = default`)"
+)
+SIGNATURE_JS_INVALID_HEADER = (
+    "The new parameter list of {qn} is not valid JavaScript: `{text}`"
+)
+SIGNATURE_JS_CONSTRUCTOR = (
+    "Cannot change the signature of {qn}: a constructor is called through `new` "
+    "and `super(...)`, which are not listed as its call sites"
+)
+SIGNATURE_JS_ACCESSOR = (
+    "Cannot change the signature of {qn}: a getter or setter is read or "
+    "assigned, never called with arguments"
+)
+SIGNATURE_JS_CALLS_EVAL = (
+    "Cannot add or drop a parameter of {qn}: its body uses `eval`, which can "
+    "read any parameter through a name written in a string"
+)
+SIGNATURE_JS_READS_ARGUMENTS = (
+    "Cannot change the signature of {qn}: its body reads `arguments`, which "
+    "sees every value by position"
+)
+SIGNATURE_JS_RENAME = (
+    "Cannot rename parameter {old} of {qn} to {new}: renaming is not supported "
+    "for JavaScript yet (issue #{issue})"
+)
+SIGNATURE_JS_DROPPED_STILL_READ = (
+    "Cannot drop parameter {name} of {qn}: its body still uses `{name}`, which "
+    "would then reach an outer name or throw ReferenceError; remove that use by "
+    "hand first"
+)
+SIGNATURE_JS_DUPLICATE_PARAM = (
+    "Cannot change the signature of {qn}: it declares parameter {name} more "
+    "than once, and the body sees only the last of them"
+)
+SIGNATURE_JS_REORDERS_DEFAULTS = (
+    "Cannot change the signature of {qn}: the defaults of {first} and {second} "
+    "would run in the other order when a call leaves both out, and one of them "
+    "runs code the other can observe"
+)
+SIGNATURE_JS_DEFAULT_READS_LATER = (
+    "Cannot change the signature of {qn}: the default of {name} reads `{later}`, "
+    "which is not bound yet when that default runs, so a call leaving {name} "
+    "out would throw ReferenceError"
+)
+SIGNATURE_JS_STRICT_DEFAULTS = (
+    "Cannot change the signature of {qn}: its body opens with a 'use strict' "
+    "directive, and JavaScript refuses that directive in a function with a "
+    "default parameter, so the new header would not load"
+)
 SIGNATURE_PLANNED = "{count} site(s) would be rewritten, {skipped} left unmapped"
 SIGNATURE_PARSE_FAILED = "Signature change rolled back: {files} would no longer parse"
 SIGNATURE_CONTRACT_FAILED = (

{code_graph_rag-0.4.19 → code_graph_rag-0.6.0}/codebase_rag/constants/core.py

@@ -130,6 +130,11 @@ CONTENT_EVENT_TYPES = frozenset(
     {EventType.MODIFIED, EventType.CREATED, EventType.DELETED}
 )
 
+# The events that can change an ignore rule's input. A read cannot, and
+# re-reading the rules reads those very files: a watcher that followed reads
+# re-read `.gitignore` forever after one `git status` (issue #3583).
+RULE_INPUT_EVENT_TYPES = CONTENT_EVENT_TYPES | {EventType.MOVED, EventType.CLOSED}
+
 
 WATCHER_SLEEP_INTERVAL = 1
 LOG_LEVEL_INFO = "INFO"
@@ -348,7 +353,11 @@ CGR_INSTRUCTIONS_SEPARATOR = "\n\n---\n\n"
 # Read only from the environment cgr starts with, never from `.env` in the
 # working directory, which usually belongs to the repository being analysed.
 ENVIRONMENT_ONLY_SETTINGS = frozenset(
-    {"CGR_TRUST_PROJECT_INSTRUCTIONS", "CGR_ALLOW_SENSITIVE_READS"}
+    {
+        "CGR_TRUST_PROJECT_INSTRUCTIONS",
+        "CGR_ALLOW_SENSITIVE_READS",
+        "CGR_ALLOW_SENSITIVE_WRITES",
+    }
 )
 # Every file cgr keeps about one checkout. They live in that checkout's
 # directory under CGR_HOME / CGR_STATE_DIRNAME rather than in the working