New internal/cfg package: on-demand per-function CFGs from the tree-sitter AST
for Go, Python, JavaScript, TypeScript, Java, Rust, and Ruby — basic blocks
with per-statement def/use sets, labeled edges (branches, loops, labeled
break/continue, switch/match fallthrough, try/except/finally), and a bitset
GEN/KILL reaching-definitions fixpoint producing statement-granular def-to-use
chains, with a Mermaid renderer.
Exposed as the get_cfg MCP tool and analyze kind=def_use. internal/dataflow
gained a CFG-backed refiner on flow_between and taint_paths: same-function
value_flow hops are confirmed or pruned based on whether the def reaches the
use, and pruned paths sink in the ranking.
Andrey Kumanyaev
3dee4780d5