code-searchability

Overview

This codebase uses ast-grep for structural code search and pattern matching. ast-grep provides semantic search beyond simple text matching, understanding TypeScript/JavaScript syntax.

See sgconfig.yml and rules/ for complete configuration.

Quick Reference

Common Search Commands

# Search for specific patterns
ast-grep --pattern 'async function $NAME' src/
sg -p 'const $VAR = fetch($$$)' src/

# Filter by specific rules
ast-grep scan --filter "sql-injection-risk"
sg scan --filter "unstructured-log"

# Scan all rules in project
ast-grep scan
sg scan

# Search in specific files
ast-grep --pattern 'throw Errors.$METHOD($$$)' src/api/

Search by Feature

Feature	Command	Location
SQL Injection	sg scan --filter "sql-injection-risk"	All TS files
CORS Missing	sg scan --filter "missing-cors-headers"	All TS files
Unstructured Logs	sg scan --filter "unstructured-log"	All TS files
Hardcoded URLs	sg scan --filter "hardcoded-url"	All files
WORKER_URL Dupe	sg scan --filter "worker-url-definition"	Dashboard files

Installation

Install ast-grep globally:

# Using cargo (recommended)
cargo install ast-grep

# Using npm
npm install -g @ast-grep/cli

# Using brew (macOS)
brew install ast-grep

Verify installation:

sg --version

Usage Patterns

1. Finding API Endpoints

# Find all endpoint handlers
ast-grep --pattern 'async function $NAME(request: Request, env: Env, requestId: string)' src/

# Find specific endpoint
sg -p 'async function getEvents' src/api/

# Find endpoints without requestId
sg scan --filter "missing-request-id"

Example Output:

src/api/routes.ts:45:1
async function getEvents(request: Request, env: Env, requestId: string): Promise<Response> {
  // Implementation
}

2. Finding MCP Handlers

# Find all MCP tool handlers  
ast-grep --pattern 'export async function $NAME(params: $PARAMS, env: Env): Promise<MCPToolResult>' src/mcp/

# Find specific handler
sg -p 'export async function getSteamMoves' src/

# Find handlers returning MCPToolResult
sg -p 'Promise<MCPToolResult>' src/