CodeGraph Quick Reference

/select 01  → Onboarding         "Where is function X?"
/select 04  → Feature Dev        "Where to add hook?"
/select 05  → Refactoring        "Find dead code"
/select 06  → Performance        "Find slow functions"
/select 15  → Debugging          "Trace execution path"

/select 07  → Test Coverage      "What's untested?"
/select 09  → Code Review        "Review this patch"
/select 12  → Tech Debt          "Quantify debt"
/select 13  → Mass Refactoring   "Find all uses of X"

/select 02  → Security Audit     "Find SQL injection"
/select 08  → Compliance         "Check OWASP Top 10"
/select 14  → Incident           "Trace attack vector"
/select 16  → Entry Points       "List API endpoints"

/select 03  → Documentation      "Document function X"
/select 10  → Cross-Repo Impact  "Impact of changing Y?"
/select 11  → Architecture       "Find layer violations"

> Where is palloc defined?
> Show callers of heap_insert
> What does ExecProcNode call?

> Find SQL injection vulnerabilities
> Trace data flow from user input to query
> Show functions without input validation

> Explain the executor subsystem
> How does memory allocation work?
> Show dependencies of module X

# CLI pattern commands
python -m src.cli patterns scan                        # Scan with all rules
python -m src.cli patterns search "malloc($x)" --lang c  # Ad-hoc search
python -m src.cli patterns list                        # List loaded rules
python -m src.cli patterns stats                       # Pattern statistics
python -m src.cli patterns fix --dry-run               # Autofix preview
python -m src.cli patterns generate "description" --lang c  # LLM rule generation

/review git              # Local changes
/review github 123       # GitHub PR
/review gitlab 456       # GitLab MR
/review file patch.diff  # Patch file
/review diff             # Paste diff interactively

# With options
/review git --format json --inline

python -m src.cli review --base-ref HEAD~3
python -m src.cli review --staged
python -m src.cli review --files src/api/main.py src/auth.py
python -m src.cli review --format sarif --sarif-file out.sarif
python -m src.cli review --no-security

-- Count functions
/query SELECT COUNT(*) FROM nodes_method

-- Find functions by name
/query SELECT name, filename FROM nodes_method
       WHERE name LIKE 'heap%' LIMIT 10

-- Find callers
/query SELECT caller.name FROM edges_call e
       JOIN nodes_method caller ON e.src = caller.id
       WHERE e.dst = (SELECT id FROM nodes_method WHERE name='palloc')
       LIMIT 5

# View all
/config

# Edit LLM settings
/config llm provider gigachat
/config llm temperature 0.7

# Environment variables
export GIGACHAT_AUTH_KEY="..."
export OPENAI_API_KEY="..."

/select 02
> Find vulnerabilities in recent commits
/review git

/select 01
> What is the main architecture?
> Where should I start reading?

/select 08
> Generate OWASP compliance report
python -m src.cli review --base-ref origin/main --format json --output-file audit.json