GeezerVison

# Match and rewrite by AST pattern, not text
> structural_search(
    pattern="requests.get($URL)",
    language="python"
  )

3 matches:
  api/client.py:31:12   requests.get(BASE_URL)
  jobs/sync.py:88:8     requests.get(feed_url)
  tools/probe.py:14:4   requests.get("https://health")

> structural_replace(
    pattern="requests.get($URL)",
    rewrite="http_client.get($URL)",
    dry_run=true
  )

--- api/client.py
-    resp = requests.get(BASE_URL)
+    resp = http_client.get(BASE_URL)

// Does anything from the environment reach stdout?
MATCH path = (src:Resource {kind: 'ENV'})
             -[:FLOWS_TO*1..5]->
             (sink:Resource {kind: 'STDOUT'})
RETURN path

// Which callables read secrets from disk?
MATCH (f)-[:READS_FROM]->(r:Resource {kind: 'FILE'})
WHERE r.qualified_name CONTAINS 'credentials'
RETURN f.qualified_name, r.qualified_name

// Security issues and code smells as graph nodes
MATCH (m:Module)-[:HAS_VULNERABILITY]->(s:SecurityIssue)
RETURN m.path, s.name, s.message, s.start_line

// Smells inside a single package
MATCH (m:Module)-[:HAS_SMELL]->(c:CodeSmell)
WHERE m.qualified_name STARTS WITH 'payments.'
RETURN m.qualified_name, c.name, c.snippet

# Semantic Search — find by intent, not by name
> semantic_search("error handling functions")

Found 5 results for "error handling functions":
1. auth.exceptions:handle_auth_error   (score: 0.923)
2. api.middleware:error_handler         (score: 0.891)
3. db.retry:handle_connection_failure   (score: 0.847)
4. payments.stripe:handle_webhook_error (score: 0.812)
5. utils.logging:log_and_reraise        (score: 0.798)

> semantic_search("user authentication and login")

Found 3 results:
1. auth.login:authenticate_user        (score: 0.951)
2. auth.token:verify_jwt_token         (score: 0.887)

{
  "nodes": [
    {
      "node_id": 0,
      "labels": ["Module"],
      "properties": {
        "qualified_name": "auth.login",
        "name": "login",
        "path": "auth/login.py"
      }
    },
    {
      "node_id": 1,
      "labels": ["Function"],
      "properties": {
        "qualified_name": "auth.login:authenticate_user",
        "name": "authenticate_user",
        "decorators": []
      }
    },
    {
      "node_id": 2,
      "labels": ["Class"],
      "properties": {
        "qualified_name": "auth.login:AuthService",
        "name": "AuthService",
        "decorators": []
      }
    }
  ],
  "relationships": [
    {
      "from_id": 0, "to_id": 1,
      "type": "DEFINES",
      "properties": {}
    },
    {
      "from_id": 1, "to_id": 5,
      "type": "CALLS",
      "properties": {}
    }
  ],
  "metadata": {
    "total_nodes": 1247,
    "total_relationships": 3891,
    "exported_at": "2025-01-15T10:30:00+00:00"
  }
}