Parser precedence: OpenAPI and scraper-markdown files may be handled by wrong parser

[diegovogel]

Problem

GetParserForFile() in internal/languages/interface.go:163 iterates a map[string]LanguageParser. Since Go map iteration is nondeterministic, when multiple parsers match the same file, which one wins is unpredictable. This causes two conflicts:

1. OpenAPI vs JSON: An openapi.json file matches both OpenAPIParser.CanParse() (content-based check) and JSONParser.CanParse() (extension-only). If JSON wins the map race, --include-openapi is bypassed and OpenAPI-specific extraction is lost.

2. Scraper-markdown vs Markdown: A .scraped.md file matches both ScraperMarkdownParser.CanParse() and MarkdownParser.CanParse() (both extension-only). If Markdown wins, --include-scraper-markdown is bypassed.

Existing precedent

The YAML parser already solves this correctly: its CanParse() reads file content and returns false for OpenAPI/Swagger specs (yaml_parser.go:31-42). The JSON and Markdown parsers don't have equivalent guards.

Proposed fix

Apply the same "yield" pattern to the generic parsers:

• json_parser.go: In CanParse(), for .json files, read content and return false if it contains "openapi": or "swagger": markers (same logic as yaml_parser.go).
• markdown_parser.go: In CanParse(), return false for .scraped.md files (pure extension check, no content reading needed).

No changes needed to GetParserForFile() or the registry data structure. Both binaries (internal/cli/ingest.go and cmd/ingest-codebase/main.go) benefit automatically since the fix is in the parser layer.

Found by

Codex review during PR work on #294 follow-up (adding missing language flags to internal/cli/ingest.go).

[diegovogel]

Update: After investigation, the JSON/OpenAPI precedence issue can't be fixed by having JSONParser yield to OpenAPIParser. The OpenAPI parser (internal/languages/openapi_parser.go) uses YAML-specific regex patterns for symbol extraction (indentation-based, unquoted keys). It correctly detects JSON OpenAPI specs via isOpenAPISpec(), but extractSymbols() produces zero symbols for JSON-formatted files. Routing JSON OpenAPI files away from JSONParser would make things worse, not better.

The JSON/OpenAPI half of this issue is blocked until OpenAPIParser supports JSON-formatted specs.

The scraper-markdown/Markdown precedence fix is straightforward and will be submitted separately.

[reh3376]

@claude how do I restrict use of claude in all repos to only allow @reh3376?

[claude]

Claude finished @reh3376's task in 39s —— View job

---

Restricting Claude to @reh3376 Only

• Understand the request
• Research Claude Code Action configuration options
• Provide answer

---

You restrict Claude by adding a user login check to the if: condition in each workflow file. Since I cannot modify .github/workflows/ files directly (GitHub App permissions), you'll need to apply these changes manually in each repo.

claude.yml — restrict @claude mentions

Replace the current if: block (lines 15–19) with:

    if: |
      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude') && github.event.comment.user.login == 'reh3376') ||
      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude') && github.event.comment.user.login == 'reh3376') ||
      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude') && github.event.review.user.login == 'reh3376') ||
      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')) && github.event.issue.user.login == 'reh3376')

claude-code-review.yml — restrict auto-review to your PRs

Uncomment and update the if: block in the claude-review job (lines 15–19):

    if: github.event.pull_request.user.login == 'reh3376'

To apply to all repos

Apply the same pattern to the claude.yml and claude-code-review.yml in each repo. There's no central "global" setting in the GitHub Action itself — the restriction lives in each workflow file's if: condition.

Tip: If you want a reusable solution, create a reusable workflow in one repo that includes the user check, then call it from all other repos.

[reh3376]

@claude create a reusable workflow that can change the claude.yml of each of my repos by replacing lines 15 - 19 with the following: if: |
(github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude') && github.event.comment.user.login == 'reh3376') ||
(github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude') && github.event.comment.user.login == 'reh3376') ||
(github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude') && github.event.review.user.login == 'reh3376') ||
(github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')) && github.event.issue.user.login == 'reh3376') and claude-code-review.yml with: if: github.event.pull_request.user.login == 'reh3376' Also what is the filepath to these files in this repo?

[claude]

Claude finished @reh3376's task in 2m 13s —— View job • claude/issue-312-20260506-1845 • Create PR ➔

---

Reusable Workflow for Claude Permission Restriction

• Understand the request
• Find existing workflow file paths in this repo
• Create helper script (scripts/restrict-claude.py)
• Commit and push

---

File Paths in This Repo

File	Path
Claude trigger workflow	.github/workflows/claude.yml
Claude code review workflow	.github/workflows/claude-code-review.yml

In claude.yml, lines 15–19 are the if: condition block.
In claude-code-review.yml, lines 15–19 are the commented-out if: block under claude-review:.

---

What Was Created

scripts/restrict-claude.py — run this locally to bulk-update the workflow files across any of your repos in one command:

# Authenticate first (needs repo + workflow scopes)
gh auth login

# Then update as many repos as you like:
python3 scripts/restrict-claude.py \
  reh3376/mdemg \
  reh3376/homebrew-mdemg \
  reh3376/autoresearch

The script uses the gh CLI to fetch each file, apply the substitution, and commit it back directly (no local clone needed).

---

Reusable Workflow (manual creation required)

Note: I cannot write to .github/workflows/ due to GitHub App permission restrictions. Create this file manually in whichever "central" repo you prefer.

Create .github/workflows/restrict-claude.yml:

name: Restrict Claude to reh3376

on:
  workflow_call:
    inputs:
      repos:
        description: 'Space-separated list of repos (owner/name) to update'
        required: true
        type: string

jobs:
  restrict-claude:
    runs-on: ubuntu-latest
    steps:
      - name: Checkout
        uses: actions/checkout@v4

      - name: Run restriction script
        env:
          GH_TOKEN: ${{ secrets.PAT_TOKEN }}
        run: |
          python3 scripts/restrict-claude.py ${{ inputs.repos }}

Then call it from any repo's workflow:

jobs:
  apply-restriction:
    uses: reh3376/mdemg/.github/workflows/restrict-claude.yml@main
    with:
      repos: "reh3376/homebrew-mdemg reh3376/autoresearch"
    secrets: inherit

secrets.PAT_TOKEN must be a Personal Access Token with repo + workflow scopes, added as a repo/org secret named PAT_TOKEN.

---

What the script changes

claude.yml lines 15–19 — adds && github.event.*.user.login == 'reh3376' to each condition:

    if: |
      (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude') && github.event.comment.user.login == 'reh3376') ||
      (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude') && github.event.comment.user.login == 'reh3376') ||
      (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude') && github.event.review.user.login == 'reh3376') ||
      (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')) && github.event.issue.user.login == 'reh3376')

claude-code-review.yml lines 15–19 — replaces the commented-out block with:

    if: github.event.pull_request.user.login == 'reh3376'

|

[reh3376]

@claude I have made the following modifications: claude.yml lines 15–19 — adds && github.event.*.user.login == 'reh3376' to each condition:

if: |
  (github.event_name == 'issue_comment' && contains(github.event.comment.body, '@claude') && github.event.comment.user.login == 'reh3376') ||
  (github.event_name == 'pull_request_review_comment' && contains(github.event.comment.body, '@claude') && github.event.comment.user.login == 'reh3376') ||
  (github.event_name == 'pull_request_review' && contains(github.event.review.body, '@claude') && github.event.review.user.login == 'reh3376') ||
  (github.event_name == 'issues' && (contains(github.event.issue.body, '@claude') || contains(github.event.issue.title, '@claude')) && github.event.issue.user.login == 'reh3376')

claude-code-review.yml lines 15–19 — replaces the commented-out block with:

if: github.event.pull_request.user.login == 'reh3376'    confirm that these changes are in effect