code-graph-rag 0.5.0__tar.gz → 0.6.0__tar.gz

{code_graph_rag-0.5.0/code_graph_rag.egg-info → code_graph_rag-0.6.0}/PKG-INFO

@@ -1,17 +1,20 @@
 Metadata-Version: 2.4
 Name: code-graph-rag
-Version: 0.5.0
+Version: 0.6.0
 Summary: The ultimate RAG for your monorepo. Query, understand, and edit multi-language codebases with the power of AI and knowledge graphs
 License-Expression: MIT
 Keywords: rag,retrieval-augmented-generation,knowledge-graph,code-analysis,tree-sitter,mcp,mcp-server,llm,graph-database,semantic-search,codebase,memgraph,developer-tools,monorepo
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
-Classifier: Operating System :: OS Independent
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX :: Linux
 Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Classifier: Topic :: Software Development :: Code Generators
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: Implementation :: CPython
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
@@ -25,7 +28,6 @@ Requires-Dist: pydantic-ai-slim[anthropic,google,openai]>=2.0.0
 Requires-Dist: pydantic-settings>=2.12.0
 Requires-Dist: python-dotenv>=1.2.1
 Requires-Dist: tiktoken>=0.12.0
-Requires-Dist: tomli-w>=1.2.0
 Requires-Dist: tree-sitter-python>=0.25.0
 Requires-Dist: tree-sitter==0.26.0
 Requires-Dist: watchdog>=6.0.0
@@ -35,13 +37,13 @@ Requires-Dist: prompt-toolkit>=3.0.52
 Requires-Dist: diff-match-patch>=20241021
 Requires-Dist: click>=8.3.3
 Requires-Dist: protobuf>=6.33.5
-Requires-Dist: defusedxml>=0.7.1
-Requires-Dist: huggingface-hub[hf-xet]>=1.7.2
+Requires-Dist: pyyaml>=6.0
 Requires-Dist: pathspec>=1.0.4
 Requires-Dist: pygments>=2.20.0
+Requires-Dist: httpx>=0.28.1
 Requires-Dist: certifi>=2026.10.23
 Requires-Dist: regex>=2024.11.6
-Requires-Dist: cgr-graph-rs<0.2,>=0.1.5; platform_python_implementation == "CPython" and ((sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) or sys_platform == "darwin" or (sys_platform == "win32" and platform_machine == "AMD64"))
+Requires-Dist: cgr-graph-rs<0.2,>=0.1.6
 Provides-Extra: test
 Requires-Dist: jedi>=0.19; extra == "test"
 Requires-Dist: pytest>=8.4.1; extra == "test"
@@ -84,6 +86,7 @@ Requires-Dist: grpcio>=1.84.1; extra == "semantic"
 Requires-Dist: sqlite-vec>=0.1.9; ((sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) or sys_platform == "darwin" or (sys_platform == "win32" and platform_machine == "AMD64")) and extra == "semantic"
 Requires-Dist: torch>=2.6.0; extra == "semantic"
 Requires-Dist: transformers>=5.0.0; extra == "semantic"
+Requires-Dist: huggingface-hub[hf-xet]>=1.7.2; extra == "semantic"
 Provides-Extra: milvus
 Requires-Dist: pymilvus[milvus-lite]>=3.0.0; extra == "milvus"
 Requires-Dist: grpcio>=1.84.1; extra == "milvus"
@@ -189,10 +192,10 @@ The knowledge graph is an embedded SQLite file (`~/.cgr/graph.sqlite`), so there
 is no database server to run. Memgraph and Neo4j remain available as opt-in
 backends; see [Graph Backends](https://docs.code-graph-rag.com/architecture/embedded-graph/).
 
-The wheel is pure Python (`py3-none-any`), so it installs on any platform with
-Python 3.12 or newer. On Linux (x86_64, aarch64), macOS and Windows x64 it also
-pulls in `cgr-graph-rs`, a native extension that speeds up the embedded graph;
-elsewhere the same engine runs in pure Python.
+The wheel is pure Python (`py3-none-any`), and it requires `cgr-graph-rs`, the
+native extension that does the work behind it, which ships for CPython 3.12 or
+newer on Linux (x86_64, aarch64), macOS and Windows x64. cgr does not run
+without it, so it installs on those platforms only.
 
 Some distributions ship an older interpreter (Debian Bookworm, and so Raspberry
 Pi OS Bookworm, ships 3.11), which also explains the failed piwheels Bookworm

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/PYPI_README.md

@@ -91,10 +91,10 @@ The knowledge graph is an embedded SQLite file (`~/.cgr/graph.sqlite`), so there
 is no database server to run. Memgraph and Neo4j remain available as opt-in
 backends; see [Graph Backends](https://docs.code-graph-rag.com/architecture/embedded-graph/).
 
-The wheel is pure Python (`py3-none-any`), so it installs on any platform with
-Python 3.12 or newer. On Linux (x86_64, aarch64), macOS and Windows x64 it also
-pulls in `cgr-graph-rs`, a native extension that speeds up the embedded graph;
-elsewhere the same engine runs in pure Python.
+The wheel is pure Python (`py3-none-any`), and it requires `cgr-graph-rs`, the
+native extension that does the work behind it, which ships for CPython 3.12 or
+newer on Linux (x86_64, aarch64), macOS and Windows x64. cgr does not run
+without it, so it installs on those platforms only.
 
 Some distributions ship an older interpreter (Debian Bookworm, and so Raspberry
 Pi OS Bookworm, ships 3.11), which also explains the failed piwheels Bookworm

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/README.md

@@ -61,9 +61,10 @@ Code-Graph-RAG parses a multi-language codebase with Tree-sitter, sharpened by c
 ## Latest News 🔥
 
 <!-- SECTION:latest_news -->
-- **Rust Upgrade**: Updated Rust to version 1.99.1-slim-trixie.
-- **Signature Functionality**: Added support for reading and writing JavaScript headers for change signatures, including the ability to change the signature of JavaScript functions or methods.
-- **macOS Compatibility**: The build now leaves macOS-14 support.
+- **Continuous Integration Improvements**: Enhanced release cadence tracking and ensured accurate green status for deferred releases.
+- **Code Quality & Clarity**: Resolved several code style and correctness issues including foreach loop variable typing and Python method receiver handling.
+- **Build Process Refinement**: Reduced the default install package count and improved makefile functionality for host/port watching.
+- **Feature Control**: Prevented the use of `--no-endpoint-roots` when endpoint data is absent.
 <!-- /SECTION:latest_news -->
 
 See [NEWS.md](NEWS.md) for the full history.
@@ -144,7 +145,7 @@ To upgrade an existing install, run `uv tool upgrade code-graph-rag` (with pipx,
 You also need Python 3.12+ and `ripgrep`. The graph lives in an embedded SQLite file by default, so there is no database server to run: no Docker and no `cmake`. Memgraph and Neo4j remain available as opt-in backends ([Graph Backends](docs/architecture/embedded-graph.md)). Full prerequisites, source installs, and environment setup are in the [Installation](docs/getting-started/installation.md) guide.
 
 > [!NOTE]
-> The wheel is pure Python (`py3-none-any`), so it installs on any platform with Python 3.12 or newer. Older system interpreters (Debian Bookworm ships 3.11) need the interpreter pinned explicitly; see [Installation](docs/getting-started/installation.md#older-system-interpreters) for the commands.
+> cgr requires its native extension, `cgr-graph-rs`, which ships for CPython 3.12 or newer on Linux (x86_64, aarch64), macOS and Windows x64, so it installs on those platforms only. Older system interpreters (Debian Bookworm ships 3.11) need the interpreter pinned explicitly; see [Installation](docs/getting-started/installation.md#older-system-interpreters) for the commands.
 
 ## Quick Start
 

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0/code_graph_rag.egg-info}/PKG-INFO

@@ -1,17 +1,20 @@
 Metadata-Version: 2.4
 Name: code-graph-rag
-Version: 0.5.0
+Version: 0.6.0
 Summary: The ultimate RAG for your monorepo. Query, understand, and edit multi-language codebases with the power of AI and knowledge graphs
 License-Expression: MIT
 Keywords: rag,retrieval-augmented-generation,knowledge-graph,code-analysis,tree-sitter,mcp,mcp-server,llm,graph-database,semantic-search,codebase,memgraph,developer-tools,monorepo
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
-Classifier: Operating System :: OS Independent
+Classifier: Operating System :: MacOS
+Classifier: Operating System :: Microsoft :: Windows
+Classifier: Operating System :: POSIX :: Linux
 Classifier: Topic :: Scientific/Engineering :: Artificial Intelligence
 Classifier: Topic :: Software Development :: Code Generators
 Classifier: Topic :: Software Development :: Libraries :: Python Modules
 Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: Implementation :: CPython
 Classifier: Programming Language :: Python :: 3.12
 Classifier: Programming Language :: Python :: 3.13
 Classifier: Programming Language :: Python :: 3.14
@@ -25,7 +28,6 @@ Requires-Dist: pydantic-ai-slim[anthropic,google,openai]>=2.0.0
 Requires-Dist: pydantic-settings>=2.12.0
 Requires-Dist: python-dotenv>=1.2.1
 Requires-Dist: tiktoken>=0.12.0
-Requires-Dist: tomli-w>=1.2.0
 Requires-Dist: tree-sitter-python>=0.25.0
 Requires-Dist: tree-sitter==0.26.0
 Requires-Dist: watchdog>=6.0.0
@@ -35,13 +37,13 @@ Requires-Dist: prompt-toolkit>=3.0.52
 Requires-Dist: diff-match-patch>=20241021
 Requires-Dist: click>=8.3.3
 Requires-Dist: protobuf>=6.33.5
-Requires-Dist: defusedxml>=0.7.1
-Requires-Dist: huggingface-hub[hf-xet]>=1.7.2
+Requires-Dist: pyyaml>=6.0
 Requires-Dist: pathspec>=1.0.4
 Requires-Dist: pygments>=2.20.0
+Requires-Dist: httpx>=0.28.1
 Requires-Dist: certifi>=2026.10.23
 Requires-Dist: regex>=2024.11.6
-Requires-Dist: cgr-graph-rs<0.2,>=0.1.5; platform_python_implementation == "CPython" and ((sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) or sys_platform == "darwin" or (sys_platform == "win32" and platform_machine == "AMD64"))
+Requires-Dist: cgr-graph-rs<0.2,>=0.1.6
 Provides-Extra: test
 Requires-Dist: jedi>=0.19; extra == "test"
 Requires-Dist: pytest>=8.4.1; extra == "test"
@@ -84,6 +86,7 @@ Requires-Dist: grpcio>=1.84.1; extra == "semantic"
 Requires-Dist: sqlite-vec>=0.1.9; ((sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) or sys_platform == "darwin" or (sys_platform == "win32" and platform_machine == "AMD64")) and extra == "semantic"
 Requires-Dist: torch>=2.6.0; extra == "semantic"
 Requires-Dist: transformers>=5.0.0; extra == "semantic"
+Requires-Dist: huggingface-hub[hf-xet]>=1.7.2; extra == "semantic"
 Provides-Extra: milvus
 Requires-Dist: pymilvus[milvus-lite]>=3.0.0; extra == "milvus"
 Requires-Dist: grpcio>=1.84.1; extra == "milvus"
@@ -189,10 +192,10 @@ The knowledge graph is an embedded SQLite file (`~/.cgr/graph.sqlite`), so there
 is no database server to run. Memgraph and Neo4j remain available as opt-in
 backends; see [Graph Backends](https://docs.code-graph-rag.com/architecture/embedded-graph/).
 
-The wheel is pure Python (`py3-none-any`), so it installs on any platform with
-Python 3.12 or newer. On Linux (x86_64, aarch64), macOS and Windows x64 it also
-pulls in `cgr-graph-rs`, a native extension that speeds up the embedded graph;
-elsewhere the same engine runs in pure Python.
+The wheel is pure Python (`py3-none-any`), and it requires `cgr-graph-rs`, the
+native extension that does the work behind it, which ships for CPython 3.12 or
+newer on Linux (x86_64, aarch64), macOS and Windows x64. cgr does not run
+without it, so it installs on those platforms only.
 
 Some distributions ship an older interpreter (Debian Bookworm, and so Raspberry
 Pi OS Bookworm, ships 3.11), which also explains the failed piwheels Bookworm

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/code_graph_rag.egg-info/SOURCES.txt

@@ -458,10 +458,12 @@ codebase_rag/utils/path_utils.py
 codebase_rag/utils/process_owner.py
 codebase_rag/utils/qn_markers.py
 codebase_rag/utils/rich_markdown.py
+codebase_rag/utils/safe_xml.py
 codebase_rag/utils/source_encoding.py
 codebase_rag/utils/source_extraction.py
 codebase_rag/utils/terminal_console.py
 codebase_rag/utils/token_utils.py
+codebase_rag/utils/toml_writer.py
 codebase_rag/workspaces/__init__.py
 codebase_rag/workspaces/cli.py
 codebase_rag/workspaces/constants.py

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/code_graph_rag.egg-info/requires.txt

@@ -5,7 +5,6 @@ pydantic-ai-slim[anthropic,google,openai]>=2.0.0
 pydantic-settings>=2.12.0
 python-dotenv>=1.2.1
 tiktoken>=0.12.0
-tomli-w>=1.2.0
 tree-sitter-python>=0.25.0
 tree-sitter==0.26.0
 watchdog>=6.0.0
@@ -15,15 +14,13 @@ prompt-toolkit>=3.0.52
 diff-match-patch>=20241021
 click>=8.3.3
 protobuf>=6.33.5
-defusedxml>=0.7.1
-huggingface-hub[hf-xet]>=1.7.2
+pyyaml>=6.0
 pathspec>=1.0.4
 pygments>=2.20.0
+httpx>=0.28.1
 certifi>=2026.10.23
 regex>=2024.11.6
-
-[:platform_python_implementation == "CPython" and ((sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) or sys_platform == "darwin" or (sys_platform == "win32" and platform_machine == "AMD64"))]
-cgr-graph-rs<0.2,>=0.1.5
+cgr-graph-rs<0.2,>=0.1.6
 
 [ast-grep]
 ast-grep-py>=0.51.0
@@ -50,6 +47,7 @@ qdrant-client>=1.9.0
 grpcio>=1.84.1
 torch>=2.6.0
 transformers>=5.0.0
+huggingface-hub[hf-xet]>=1.7.2
 
 [semantic:(sys_platform == "linux" and (platform_machine == "x86_64" or platform_machine == "aarch64")) or sys_platform == "darwin" or (sys_platform == "win32" and platform_machine == "AMD64")]
 sqlite-vec>=0.1.9

code_graph_rag-0.6.0/codebase_rag/__init__.py

@@ -0,0 +1,8 @@
+"""Code Graph RAG: build a queryable graph of a codebase and reason over it."""
+
+from . import tree_sitter_point as _tree_sitter_point  # noqa: F401
+from .embedded_graph.extension import require_rust_extension as _require_rust_extension
+
+# The Rust extension does the work behind this package's interface, and
+# there is no pure-Python stand-in: without it, nothing here runs.
+_require_rust_extension()

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/codebase_rag/cli.py

@@ -3217,6 +3217,19 @@ def _notice_single_project_endpoint_roots(show_progress: bool) -> None:
         typer.echo(cs.CLI_DEADCODE_SINGLE_PROJECT_ENDPOINTS, err=True)
 
 
+def _refuse_without_endpoint_data(
+    error: ex.EndpointDataMissingError, show_progress: bool
+) -> NoReturn:
+    """No verdict, rather than one that reads as nothing unreachable. A
+    machine format owns stdout, so the refusal goes to stderr there, as the
+    single-project notice does."""
+    if show_progress:
+        app_context.console.print(style(str(error), cs.Color.RED))
+    else:
+        typer.echo(str(error), err=True)
+    raise typer.Exit(1)
+
+
 @app.command(
     name=ch.CLICommandName.DEAD_CODE,
     help=ch.DESC_DEAD_CODE,
@@ -3291,26 +3304,33 @@ def dead_code(
     choice = ProjectChoice(None)
     rows: list[ResultRow] = []
     structural_tier_symbols = 0
+    endpoint_gap: ex.EndpointDataMissingError | None = None
     try:
         with connect_memgraph(batch_size=1) as ingestor:
             projects = ingestor.list_projects()
             choice = choose_project(chosen, repo_path, projects, ingestor)
             if (resolved := choice.name) is not None:
                 logger.info(ls.DEADCODE_SCANNING.format(project_name=resolved))
-                rows, structural_tier_symbols = collect_dead_code_with_coverage(
-                    ingestor,
-                    resolved,
-                    _dead_code_config(
-                        include_tests,
-                        include_classes,
-                        entry_point,
-                        decorator_root,
-                        min_resolution,
-                        endpoint_roots,
-                        public_roots,
-                    ),
-                )
-                if not endpoint_roots and len(projects) <= 1:
+                try:
+                    rows, structural_tier_symbols = collect_dead_code_with_coverage(
+                        ingestor,
+                        resolved,
+                        _dead_code_config(
+                            include_tests,
+                            include_classes,
+                            entry_point,
+                            decorator_root,
+                            min_resolution,
+                            endpoint_roots,
+                            public_roots,
+                        ),
+                    )
+                except ex.EndpointDataMissingError as e:
+                    # Held until the connection closes: a finding about the
+                    # project, which the service layer would log on exit as a
+                    # failed session with a traceback (issue #2896).
+                    endpoint_gap = e
+                if not endpoint_roots and len(projects) <= 1 and not endpoint_gap:
                     _notice_single_project_endpoint_roots(show_progress)
     except GraphUnavailableError:
         raise
@@ -3321,6 +3341,8 @@ def dead_code(
         logger.exception(ls.DEADCODE_ERROR.format(error=e))
         raise typer.Exit(1) from e
 
+    if endpoint_gap is not None:
+        _refuse_without_endpoint_data(endpoint_gap, show_progress)
     resolved = _require_project(choice)
 
     candidates = [

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/codebase_rag/cli_help.py

@@ -677,7 +677,8 @@ HELP_DEADCODE_ENDPOINT_ROOTS = (
     "(RESOLVES_TO into it, or a direct READS_FROM/WRITES_TO for RPC and "
     "dispatch resources), so an endpoint nobody calls is reported. A handler "
     "registered by a call (Go HandleFunc, Express app.get) stays live "
-    "through that call."
+    "through that call. Endpoints are recorded only by the io capture group: "
+    "index the project with --capture io first, or the command refuses."
 )
 HELP_DEADCODE_MIN_RESOLUTION = (
     "Ignore call edges below this confidence when deciding liveness: "

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/codebase_rag/constants/ast_csharp.py

@@ -170,6 +170,47 @@ TS_CSHARP_PARAMETER_LIST = "parameter_list"
 # variable_declaration; a property_declaration exposes `type` and `name` directly.
 TS_CSHARP_VARIABLE_DECLARATION = "variable_declaration"
 TS_CSHARP_FOREACH_STATEMENT = "foreach_statement"
+# The declarations a field belongs to.
+CSHARP_TYPE_DECLARATION_NODES = frozenset(
+    {
+        TS_CSHARP_CLASS_DECLARATION,
+        TS_CSHARP_STRUCT_DECLARATION,
+        TS_CSHARP_RECORD_DECLARATION,
+        TS_CSHARP_INTERFACE_DECLARATION,
+    }
+)
+# Generic collections whose one type argument is the element a `foreach`
+# binds (issue #2938); any other generic (`Dictionary<K, V>`) is not read.
+CSHARP_ENUMERABLE_GENERICS = frozenset(
+    {
+        "IEnumerable",
+        "IAsyncEnumerable",
+        "ICollection",
+        "IList",
+        "IReadOnlyCollection",
+        "IReadOnlyList",
+        "ISet",
+        "IReadOnlySet",
+        "List",
+        "HashSet",
+        "SortedSet",
+        "LinkedList",
+        "Queue",
+        "Stack",
+        "Collection",
+        "ReadOnlyCollection",
+        "ObservableCollection",
+        "ImmutableArray",
+        "ImmutableList",
+        "ImmutableHashSet",
+        "IImmutableList",
+        "IImmutableSet",
+        "ConcurrentBag",
+        "ConcurrentQueue",
+        "ConcurrentStack",
+        "BlockingCollection",
+    }
+)
 TS_CSHARP_VARIABLE_DECLARATOR = "variable_declarator"
 TS_CSHARP_IMPLICIT_TYPE = "implicit_type"
 TS_CSHARP_FIELD_DECLARATION = "field_declaration"
@@ -221,6 +262,9 @@ TS_CSHARP_STATIC = "static"
 TS_CSHARP_GLOBAL = "global"
 # A `params T[]` tail parameter is an array type in the method signature.
 CSHARP_ARRAY_SUFFIX = "[]"
+# An array type's rank specifier: `T[]`, `T[,]`.
+CSHARP_ARRAY_RANK_OPEN = "["
+CSHARP_ARRAY_RANK_CLOSE = "]"
 
 # The name node inside a using directive: a dotted `qualified_name` or a bare
 # `identifier` (both the imported path and, in the alias form, the alias).
@@ -370,6 +414,12 @@ TS_CSHARP_DECLARATION_PATTERN = "declaration_pattern"
 TS_CSHARP_CATCH_DECLARATION = "catch_declaration"
 TS_CSHARP_FROM_CLAUSE = "from_clause"
 TS_CSHARP_LET_CLAUSE = "let_clause"
+# `o is Other[] { Length: 1 } items`, `join z in zs ...`, `... into g`, and a
+# lambda written with `delegate`.
+TS_CSHARP_RECURSIVE_PATTERN = "recursive_pattern"
+TS_CSHARP_JOIN_CLAUSE = "join_clause"
+TS_CSHARP_JOIN_INTO_CLAUSE = "join_into_clause"
+TS_CSHARP_ANONYMOUS_METHOD_EXPRESSION = "anonymous_method_expression"
 TS_CSHARP_EVENT_FIELD_DECLARATION = "event_field_declaration"
 # A top-level statement (C# 9); its locals are in scope across the file.
 TS_CSHARP_GLOBAL_STATEMENT = "global_statement"

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/codebase_rag/constants/ast_python.py

@@ -69,6 +69,13 @@ TS_PY_LIST_SPLAT = "list_splat"
 TS_PY_DICTIONARY_SPLAT = "dictionary_splat"
 TS_PY_DEFAULT_PARAMETER = "default_parameter"
 TS_PY_LIST_SPLAT_PATTERN = "list_splat_pattern"
+# `from __future__ import annotations` (PEP 563) keeps every annotation in
+# its module as a string that never runs.
+TS_PY_FUTURE_IMPORT_STATEMENT = "future_import_statement"
+PY_FUTURE_ANNOTATIONS = "annotations"
+# The literal sequence values an unpacking assignment pairs its targets with
+# by position (`a, b = x, y`, `(a, b) = (x, y)`, `[a, b] = [x, y]`).
+PY_UNPACKING_VALUE_TYPES = frozenset({"expression_list", "tuple", "list"})
 TS_PY_DICTIONARY_SPLAT_PATTERN = "dictionary_splat_pattern"
 TS_PY_POSITIONAL_SEPARATOR = "positional_separator"
 TS_PY_KEYWORD_SEPARATOR = "keyword_separator"

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/codebase_rag/constants/build.py

@@ -88,7 +88,6 @@ PYINSTALLER_PACKAGES: list["PyInstallerPackage"] = [
     PyInstallerPackage(name="rich", collect_all=True),
     PyInstallerPackage(name="typer", collect_all=True),
     PyInstallerPackage(name="loguru", collect_all=True),
-    PyInstallerPackage(name="tomli_w", collect_all=True),
     PyInstallerPackage(name="protobuf", collect_all=True),
     PyInstallerPackage(name="genai_prices", collect_all=True),
     # The embedded graph's Rust half, loaded by name (embedded_graph/

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/codebase_rag/constants/core.py

@@ -130,6 +130,11 @@ CONTENT_EVENT_TYPES = frozenset(
     {EventType.MODIFIED, EventType.CREATED, EventType.DELETED}
 )
 
+# The events that can change an ignore rule's input. A read cannot, and
+# re-reading the rules reads those very files: a watcher that followed reads
+# re-read `.gitignore` forever after one `git status` (issue #3583).
+RULE_INPUT_EVENT_TYPES = CONTENT_EVENT_TYPES | {EventType.MOVED, EventType.CLOSED}
+
 
 WATCHER_SLEEP_INTERVAL = 1
 LOG_LEVEL_INFO = "INFO"

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/codebase_rag/constants/embedded_graph.py

@@ -490,6 +490,12 @@ EG_RUST_SCOPE_FACTS = "scope_facts"
 EG_RUST_INTERFACE_FINGERPRINT = "interface_fingerprint"
 EG_RUST_CALLABLE_PARAMETER_INDICES = "callable_parameter_indices"
 EG_RUST_LOCAL_ALIASES = "local_aliases"
+# The file formats it reads and writes (utils/safe_xml.py,
+# utils/toml_writer.py), and what reading XML raises.
+EG_RUST_XML_FIND_ALL = "xml_find_all"
+EG_RUST_XML_SYNTAX_ERROR = "XmlSyntaxError"
+EG_RUST_XML_ENTITY_ERROR = "XmlEntityError"
+EG_RUST_TOML_DUMPS = "toml_dumps"
 
 
 class TreeBridgeCheck(StrEnum):

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/codebase_rag/dead_code.py

@@ -15,6 +15,7 @@ from fnmatch import fnmatch
 
 from . import constants as cs
 from . import cypher_queries as cq
+from . import exceptions as ex
 from .path_filters import matches_test_path
 from .types_defs import (
     DeadCodeConfig,
@@ -1465,6 +1466,25 @@ def _endpoint_links(
     return links
 
 
+def _route_handler_count(nodes: dict[_NodeId, PropertyDict]) -> int:
+    """Definitions carrying a route decorator: the handlers the io group
+    would link to an endpoint."""
+    from .parsers.endpoints import parse_route_decorator
+
+    count = 0
+    for props in nodes.values():
+        # The io group writes no endpoint for a route in a test file (#910),
+        # so one there is no sign the group was left out.
+        if matches_test_path(str(props.get(cs.KEY_PATH) or "")):
+            continue
+        decorators = props.get(cs.KEY_DECORATORS)
+        if isinstance(decorators, list) and any(
+            parse_route_decorator(str(d)) for d in decorators
+        ):
+            count += 1
+    return count
+
+
 def collect_dead_code(
     ingestor: GraphQueryClient, project_name: str, config: DeadCodeConfig
 ) -> list[ResultRow]:
@@ -1503,6 +1523,11 @@ def collect_dead_code_with_coverage(
     endpoint_links = (
         None if config.endpoint_roots else _endpoint_links(ingestor, params)
     )
+    # No endpoint at all is what a project indexed without the io group
+    # holds; the route decorator would then root every handler as if the
+    # switch were on (issue #2896).
+    if endpoint_links == {} and (handlers := _route_handler_count(nodes)):
+        raise ex.EndpointDataMissingError(project_name, handlers)
     dead = dead_code_from_graph(nodes, rels, prefix, config, endpoint_links)
     rows = [row for row in node_rows if _row_qn(row) in dead]
     rows.sort(key=_row_qn)

code_graph_rag-0.6.0/codebase_rag/embedded_graph/extension.py

@@ -0,0 +1,32 @@
+"""The Rust extension (`rust/cgr_graph_rs`), imported in one place.
+
+cgr does not run without it: importing `codebase_rag` fails when it is
+missing. `require_rust_extension` is for code with no Python implementation
+at all; `rust_extension` still serves the engine parts that keep one for the
+inputs their Rust half declines.
+"""
+
+from __future__ import annotations
+
+from functools import cache
+from importlib import import_module
+from types import ModuleType
+
+from .. import exceptions as ex
+from ..constants.embedded_graph import EG_RUST_MODULE
+
+
+@cache
+def rust_extension() -> ModuleType | None:
+    try:
+        return import_module(EG_RUST_MODULE)
+    except ImportError:
+        return None
+
+
+def require_rust_extension() -> ModuleType:
+    """The extension, or ImportError saying how to get it."""
+    try:
+        return import_module(EG_RUST_MODULE)
+    except ImportError as error:
+        raise ImportError(ex.RUST_EXTENSION_MISSING.format(error=error)) from error

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/codebase_rag/exceptions.py

@@ -40,6 +40,14 @@ SEMANTIC_EXTRA = "Semantic search requires 'semantic' extra: uv sync --extra sem
 # Input errors
 JSON_TOO_DEEP = "JSON nesting exceeds the decoder's recursion limit"
 
+# The Rust extension (rust/cgr_graph_rs), which cgr does not run without
+RUST_EXTENSION_MISSING = (
+    "code-graph-rag needs its Rust extension, cgr-graph-rs, and cannot import "
+    "it ({error}). It ships as wheels for CPython 3.12+ on Linux (x86_64, "
+    "aarch64), macOS and Windows x64; reinstall code-graph-rag there, or, in a "
+    "checkout, run `uv sync` with a Rust toolchain on PATH to build it."
+)
+
 # OpenAI-compatible embedding errors
 OPENAI_EMBEDDING_HTTP_ERROR = (
     "OpenAI-compatible embedding request failed with status {status}: {body}"
@@ -213,6 +221,16 @@ INGESTOR_NOT_QUERYABLE = "{kind} has no graph to read."
 ACCESS_DENIED = "Access denied: Cannot access files outside the project root."
 
 
+DEADCODE_ENDPOINT_DATA_MISSING = (
+    "--no-endpoint-roots needs endpoint data: project '{project}' has "
+    "{handlers} route-decorated handler(s) but no recorded endpoint, so it was "
+    "indexed without the io capture group and each handler would stay live by "
+    "its decorator. Re-index it with --capture io (cgr start --repo-path <repo> "
+    "--update-graph --project-name {project} --capture io), or drop "
+    "--no-endpoint-roots."
+)
+
+
 # Tree bridge (used with raise NotBorrowed, which the caller catches and runs
 # the Python twin)
 NO_DESCENDANT = "no node at descendant index {index}"
@@ -277,6 +295,24 @@ class RepoPathError(ValueError):
     """
 
 
+class EndpointDataMissingError(Exception):
+    """Endpoint roots are off, but the project holds no endpoint to decide by.
+
+    Only the `io` capture group writes `EXPOSES`; without it every
+    route-decorated handler stays live by its decorator, so the scan would
+    read as a clean result on handlers it never judged (issue #2896).
+    """
+
+    def __init__(self, project_name: str, handlers: int) -> None:
+        self.project_name = project_name
+        self.handlers = handlers
+        super().__init__(
+            DEADCODE_ENDPOINT_DATA_MISSING.format(
+                project=project_name, handlers=handlers
+            )
+        )
+
+
 # Sync lock (issue #2441)
 SYNC_IN_PROGRESS = (
     "Another sync of {repo} is running ({holder}). Two syncs of one checkout at "

{code_graph_rag-0.5.0 → code_graph_rag-0.6.0}/codebase_rag/parsers/call_processor.py

@@ -7209,11 +7209,17 @@ class CallProcessor:
             # An untyped C# MEMBER call retains the generic fallback. A
             # bare call has already exhausted C#'s legitimate scopes
             # (local function, enclosing type, and static import), so a
-            # miss is external rather than a name-wide guess (#2005).
+            # miss is external rather than a name-wide guess (#2005). It
+            # reads the method's types as this call sees them, as the C#
+            # resolver did: a pattern, out or lambda variable named like a
+            # field never takes the field's type (bot review on PR #2990).
+            engine = self._resolver.type_inference.csharp_type_inference
             callee_info = ctx.resolve_func(
                 call_name,
                 ctx.module_qn,
-                call_var_types,
+                None
+                if call_var_types is None
+                else engine.site_types(call_node, call_var_types),
                 ctx.class_context,
                 ctx.caller_qn,
                 ctx.language,
@@ -9013,6 +9019,21 @@ class CallProcessor:
         ):
             self._emit_conditional_rhs_refs(value, scope)
             return
+        if (
+            value.type in _INLINE_FUNC_VALUE_TYPES
+            and node.type == cs.TS_VARIABLE_DECLARATOR
+            and js_ts_utils.arrow_binding_name(value) is not None
+            and not js_ts_utils.name_is_body_scoped(value)
+        ):
+            # `const foo = () => {}` is foo's own definition, not a use of
+            # it: referencing it from the scope rooted every arrow const and
+            # dead-code never reported one (issue #2857). Its uses reference
+            # it by name like any function's. That holds only when it is
+            # registered as foo: `const run = function worker() {}` registers
+            # worker and `const b = (() => {}).bind(x)` an anonymous function,
+            # which calls to run or b never resolve to, so those keep the
+            # reference.
+            return
         if (
             value.type in _ASSIGNMENT_RHS_REF_TYPES
             or value.type in _INLINE_FUNC_VALUE_TYPES