ast-grep

ast-grep matches code by its syntax tree, so a pattern survives reformatting, whitespace, and comments that defeat grep. It is the cheapest way to answer "does this pattern exist where it shouldn't?" with a precise file:line list.

Evidence dimension: structural. Output is a concrete evidence ref per match.

When to use

Use when a finding hypothesis is a structural code pattern: "domain code imports the ORM directly," "routes are declared outside the router module," "this framework type leaks past the boundary," or "a module exports too much surface." ast-grep confirms presence/absence with line-anchored hits. Use it before claiming a boundary is bypassed — a claim about a pattern needs the matched lines.

Commands