codegraphcontext 0.5.2__tar.gz → 0.5.4__tar.gz

{codegraphcontext-0.5.2/src/codegraphcontext.egg-info → codegraphcontext-0.5.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codegraphcontext
-Version: 0.5.2
+Version: 0.5.4
 Summary: An MCP server that indexes local code into a graph database to provide context to AI assistants.
 Author-email: Shashank Shekhar Singh <shashankshekharsingh1205@gmail.com>
 License: MIT License
@@ -25,8 +25,8 @@ License: MIT License
         OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
         SOFTWARE.
         
-Project-URL: Homepage, https://github.com/Shashankss1205/CodeGraphContext
-Project-URL: Bug Tracker, https://github.com/Shashankss1205/CodeGraphContext/issues
+Project-URL: Homepage, https://github.com/CodeGraphContext/CodeGraphContext
+Project-URL: Bug Tracker, https://github.com/CodeGraphContext/CodeGraphContext/issues
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
@@ -60,9 +60,9 @@ Requires-Dist: falkordb<1.6,>=1.0
 Requires-Dist: falkordblite<0.10,>=0.7; sys_platform != "win32" and python_version >= "3.12"
 Requires-Dist: requests>=2.28.0
 Requires-Dist: protobuf<3.21,>=3.20
-Requires-Dist: kuzu; sys_platform == "win32" or (sys_platform != "win32" and python_version >= "3.10")
+Requires-Dist: kuzu; python_version < "3.14" or sys_platform == "linux"
 Requires-Dist: ladybug; sys_platform == "win32" or (sys_platform != "win32" and python_version >= "3.10")
-Requires-Dist: mcp>=1.0.0
+Requires-Dist: mcp<2,>=1.0.0
 Requires-Dist: fastapi>=0.100.0
 Requires-Dist: uvicorn>=0.22.0
 Provides-Extra: parsing
@@ -77,7 +77,7 @@ Provides-Extra: falkordb-remote
 Requires-Dist: falkordb<1.6,>=1.0; extra == "falkordb-remote"
 Requires-Dist: redis<6,>=5; extra == "falkordb-remote"
 Provides-Extra: kuzu
-Requires-Dist: kuzu; (sys_platform == "win32" or (sys_platform != "win32" and python_version >= "3.10")) and extra == "kuzu"
+Requires-Dist: kuzu; (python_version < "3.14" or sys_platform == "linux") and extra == "kuzu"
 Provides-Extra: ladybug
 Requires-Dist: ladybug; (sys_platform == "win32" or (sys_platform != "win32" and python_version >= "3.10")) and extra == "ladybug"
 Provides-Extra: neo4j
@@ -107,6 +107,7 @@ Dynamic: license-file
 - 🇺🇦 [Українська](docs/translations/README.uk.md)
 - 🇷🇺 [Русский](docs/translations/README.ru-RU.md)
 - 🇯🇵 [日本語](docs/translations/README.ja.md)
+- 🇮🇳 [தமிழ்](docs/translations/README.ta.md)
 - 🇪🇸 Español (Soon)
 
 🌍 **Help translate CodeGraphContext to your language by raising an issue & PR on [GitHub Issues](https://github.com/CodeGraphContext/CodeGraphContext/issues)!**
@@ -271,6 +272,49 @@ flowchart LR
 -   **Flexible Database Backend:** FalkorDB Lite (Default), KuzuDB, LadybugDB, FalkorDB Remote, Nornic DB, or Neo4j (all platforms via Docker/native).
 
 
+---
+## Architecture Overview
+
+CodeGraphContext transforms source code into a queryable knowledge graph that can be explored through the CLI or AI assistants via MCP.
+
+```mermaid
+flowchart TD
+    A[Code Repository] --> B[Tree-sitter / SCIP Indexing]
+    B --> C[Knowledge Graph]
+    C --> D[Graph Database]
+    D --> E[CLI Toolkit]
+    D --> F[MCP Server]
+    F --> G[AI Assistant]
+```
+
+### Workflow
+
+1. Source code is parsed using Tree-sitter or SCIP indexers.
+2. Relationships between functions, classes, imports, and calls are extracted.
+3. A knowledge graph is generated and stored in a graph database.
+4. Users can query the graph through the CLI or AI assistants using MCP.
+
+## 🏗️ Architecture & Workflow
+
+CodeGraphContext parses your source code and builds a comprehensive knowledge graph. This graph can be queried directly via the CLI toolkit or exposed to AI assistants through the MCP server.
+
+```mermaid
+flowchart TD
+    A[Code Repository] -->|Parsed by| B[Tree-sitter / SCIP Indexing]
+    B -->|Generates| C[Knowledge Graph]
+    C -->|Stored in| D[(Graph Database)]
+    D -->|Queried via| E[CLI Toolkit]
+    D -->|Served by| F[MCP Server]
+    F -->|Provides context to| G[🤖 AI Assistant]
+
+    classDef default fill:#1f2937,stroke:#8b5cf6,stroke-width:2px,color:#fff;
+    classDef db fill:#0f172a,stroke:#3b82f6,stroke-width:2px,color:#fff;
+    classDef ai fill:#312e81,stroke:#a855f7,stroke-width:2px,color:#fff;
+    
+    D:::db
+    G:::ai
+```
+
 ---
 
 ## 🏗️ Architecture & Workflow
@@ -309,10 +353,12 @@ CodeGraphContext provides comprehensive parsing and analysis for the following l
 | 🎨 | **Kotlin** | 🎯 | **Dart** | 🐪 | **Perl** |
 | 🌙 | **Lua** | 🚀 | **Scala** | λ | **Haskell** |
 | 💧 | **Elixir** | 📜 | **Emacs Lisp (elisp)** | 🌐 | **HTML** |
-| 🎨 | **CSS** | ⚛️ | **TSX** | | |
+| 🎨 | **CSS** | ⚛️ | **TSX** | ⛓️ | **Solidity** |
 
 Each language parser extracts functions, classes, methods, parameters, inheritance relationships, function calls, and imports to build a comprehensive code graph.
 
+**Solidity notes:** `.sol` uses Tree-sitter via `tree-sitter-language-pack` (no SCIP). Supports Foundry remappings, modifier invocations, `using Lib for T`, and `emit` / custom-error `revert` as CALLS. See `docs/docs/contributing_languages.md` § Solidity.
+
 ---
 
 ## Database Options

{codegraphcontext-0.5.2 → codegraphcontext-0.5.4}/README.md

@@ -9,6 +9,7 @@
 - 🇺🇦 [Українська](docs/translations/README.uk.md)
 - 🇷🇺 [Русский](docs/translations/README.ru-RU.md)
 - 🇯🇵 [日本語](docs/translations/README.ja.md)
+- 🇮🇳 [தமிழ்](docs/translations/README.ta.md)
 - 🇪🇸 Español (Soon)
 
 🌍 **Help translate CodeGraphContext to your language by raising an issue & PR on [GitHub Issues](https://github.com/CodeGraphContext/CodeGraphContext/issues)!**
@@ -173,6 +174,49 @@ flowchart LR
 -   **Flexible Database Backend:** FalkorDB Lite (Default), KuzuDB, LadybugDB, FalkorDB Remote, Nornic DB, or Neo4j (all platforms via Docker/native).
 
 
+---
+## Architecture Overview
+
+CodeGraphContext transforms source code into a queryable knowledge graph that can be explored through the CLI or AI assistants via MCP.
+
+```mermaid
+flowchart TD
+    A[Code Repository] --> B[Tree-sitter / SCIP Indexing]
+    B --> C[Knowledge Graph]
+    C --> D[Graph Database]
+    D --> E[CLI Toolkit]
+    D --> F[MCP Server]
+    F --> G[AI Assistant]
+```
+
+### Workflow
+
+1. Source code is parsed using Tree-sitter or SCIP indexers.
+2. Relationships between functions, classes, imports, and calls are extracted.
+3. A knowledge graph is generated and stored in a graph database.
+4. Users can query the graph through the CLI or AI assistants using MCP.
+
+## 🏗️ Architecture & Workflow
+
+CodeGraphContext parses your source code and builds a comprehensive knowledge graph. This graph can be queried directly via the CLI toolkit or exposed to AI assistants through the MCP server.
+
+```mermaid
+flowchart TD
+    A[Code Repository] -->|Parsed by| B[Tree-sitter / SCIP Indexing]
+    B -->|Generates| C[Knowledge Graph]
+    C -->|Stored in| D[(Graph Database)]
+    D -->|Queried via| E[CLI Toolkit]
+    D -->|Served by| F[MCP Server]
+    F -->|Provides context to| G[🤖 AI Assistant]
+
+    classDef default fill:#1f2937,stroke:#8b5cf6,stroke-width:2px,color:#fff;
+    classDef db fill:#0f172a,stroke:#3b82f6,stroke-width:2px,color:#fff;
+    classDef ai fill:#312e81,stroke:#a855f7,stroke-width:2px,color:#fff;
+    
+    D:::db
+    G:::ai
+```
+
 ---
 
 ## 🏗️ Architecture & Workflow
@@ -211,10 +255,12 @@ CodeGraphContext provides comprehensive parsing and analysis for the following l
 | 🎨 | **Kotlin** | 🎯 | **Dart** | 🐪 | **Perl** |
 | 🌙 | **Lua** | 🚀 | **Scala** | λ | **Haskell** |
 | 💧 | **Elixir** | 📜 | **Emacs Lisp (elisp)** | 🌐 | **HTML** |
-| 🎨 | **CSS** | ⚛️ | **TSX** | | |
+| 🎨 | **CSS** | ⚛️ | **TSX** | ⛓️ | **Solidity** |
 
 Each language parser extracts functions, classes, methods, parameters, inheritance relationships, function calls, and imports to build a comprehensive code graph.
 
+**Solidity notes:** `.sol` uses Tree-sitter via `tree-sitter-language-pack` (no SCIP). Supports Foundry remappings, modifier invocations, `using Lib for T`, and `emit` / custom-error `revert` as CALLS. See `docs/docs/contributing_languages.md` § Solidity.
+
 ---
 
 ## Database Options

{codegraphcontext-0.5.2 → codegraphcontext-0.5.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "codegraphcontext"
-version = "0.5.2"
+version = "0.5.4"
 description = "An MCP server that indexes local code into a graph database to provide context to AI assistants."
 authors = [{ name = "Shashank Shekhar Singh", email = "shashankshekharsingh1205@gmail.com" }]
 readme = "README.md"
@@ -58,9 +58,28 @@ dependencies = [
     "falkordblite>=0.7,<0.10; sys_platform != 'win32' and python_version >= '3.12'",
     "requests>=2.28.0",
     "protobuf>=3.20,<3.21",
-    "kuzu; sys_platform == 'win32' or (sys_platform != 'win32' and python_version >= '3.10')",
+    # ------------------------------------------------------------------
+    # KùzuDB was archived upstream on 2025-10-10; 0.11.3 is the final
+    # release and its wheel matrix stops at cp313 for macOS and Windows.
+    # Only Linux (manylinux x86_64 / aarch64) got cp314 wheels. Without a
+    # marker, `pip install codegraphcontext` on macOS/Windows + Python 3.14
+    # falls back to the kuzu sdist and tries a full C++/CMake source build,
+    # which fails and takes the whole install down with it.
+    #
+    # Keep kuzu where a wheel actually exists; elsewhere the backend is
+    # simply absent and `database_kuzu` reports its install hint at runtime.
+    # LadybugDB (the maintained Kùzu fork, see issue #852) publishes cp314
+    # wheels for all three platforms and remains the unconditional default.
+    # ------------------------------------------------------------------
+    "kuzu; python_version < '3.14' or sys_platform == 'linux'",
     "ladybug; sys_platform == 'win32' or (sys_platform != 'win32' and python_version >= '3.10')",
-    "mcp>=1.0.0",
+    # Cap below 2.0: the low-level `mcp.server.Server` dropped its `list_tools`
+    # and `call_tool` decorators in 2.0.0, which api/mcp_sse.py registers its
+    # handlers with. With an unbounded pin, CI resolved 2.0.0 on release day and
+    # every job failed at import with
+    # "AttributeError: 'Server' object has no attribute 'list_tools'".
+    # Lift this once mcp_sse.py is ported to the 2.x server API.
+    "mcp>=1.0.0,<2",
     "fastapi>=0.100.0",
     "uvicorn>=0.22.0"
 ]
@@ -85,7 +104,9 @@ falkordb-remote = [
     "redis>=5,<6",
 ]
 kuzu = [
-    "kuzu; sys_platform == 'win32' or (sys_platform != 'win32' and python_version >= '3.10')",
+    # Same wheel-availability marker as the core dependency above: no
+    # cp314 wheels exist for macOS/Windows and the sdist cannot be built.
+    "kuzu; python_version < '3.14' or sys_platform == 'linux'",
 ]
 ladybug = [
     "ladybug; sys_platform == 'win32' or (sys_platform != 'win32' and python_version >= '3.10')",
@@ -112,8 +133,8 @@ datasources = [
 ]
 
 [project.urls]
-"Homepage" = "https://github.com/Shashankss1205/CodeGraphContext"
-"Bug Tracker" = "https://github.com/Shashankss1205/CodeGraphContext/issues"
+"Homepage" = "https://github.com/CodeGraphContext/CodeGraphContext"
+"Bug Tracker" = "https://github.com/CodeGraphContext/CodeGraphContext/issues"
 
 [project.scripts]
 cgc = "codegraphcontext.cli.main:app"

{codegraphcontext-0.5.2 → codegraphcontext-0.5.4}/src/codegraphcontext/api/app.py

@@ -1,12 +1,17 @@
 # src/codegraphcontext/api/app.py
 import os
-from fastapi import FastAPI
+from fastapi import Depends, FastAPI
 from fastapi.responses import HTMLResponse
 from fastapi.middleware.cors import CORSMiddleware
 from .router import router
+from .auth import log_auth_status, require_api_key
 from .mcp_sse import handle_sse, handle_messages
 
 def create_app() -> FastAPI:
+    # Log whether API-key auth is active. Emits a prominent security warning
+    # when the gateway is running unauthenticated (CGC_API_KEY unset).
+    log_auth_status()
+
     app = FastAPI(
         title="CodeGraphContext Gateway",
         description="HTTP API gateway for CodeGraphContext MCP server. Enables integration with ChatGPT Actions, Claude, and web frontends.",
@@ -32,9 +37,23 @@ def create_app() -> FastAPI:
         """Liveness probe for load balancers and k8s."""
         return {"status": "ok"}
 
-    # MCP-over-SSE Endpoints
-    app.add_api_route("/api/v1/mcp/sse", handle_sse, methods=["GET"])
-    app.add_api_route("/api/v1/mcp/messages", handle_messages, methods=["POST"])
+    # MCP-over-SSE Endpoints. These dispatch to the same tools as the REST
+    # router (execute_cypher_query, add_code_to_graph, delete_repository), so
+    # they need the same API-key dependency the router applies — without it,
+    # setting CGC_API_KEY left the SSE transport as an unauthenticated path to
+    # every tool.
+    app.add_api_route(
+        "/api/v1/mcp/sse",
+        handle_sse,
+        methods=["GET"],
+        dependencies=[Depends(require_api_key)],
+    )
+    app.add_api_route(
+        "/api/v1/mcp/messages",
+        handle_messages,
+        methods=["POST"],
+        dependencies=[Depends(require_api_key)],
+    )
 
     @app.get("/", response_class=HTMLResponse)
     async def root():
@@ -61,7 +80,7 @@ def create_app() -> FastAPI:
                     <a href="/docs" class="btn">View API Docs</a>
                     <div class="links">
                         <a href="/openapi.json">OpenAPI Spec</a>
-                        <a href="https://github.com/Shashankss1205/CodeGraphContext" target="_blank">GitHub</a>
+                        <a href="https://github.com/CodeGraphContext/CodeGraphContext" target="_blank">GitHub</a>
                     </div>
                 </div>
             </body>

codegraphcontext-0.5.4/src/codegraphcontext/api/auth.py

@@ -0,0 +1,123 @@
+# src/codegraphcontext/api/auth.py
+"""Optional API-key authentication for the CodeGraphContext HTTP API.
+
+Backward-compatible and opt-in:
+
+* When **no** key is configured, the API behaves exactly as it did before
+  (every endpoint is unauthenticated) but a prominent security warning is
+  logged at startup so operators know the gateway is wide open.
+* When a key **is** configured (via the ``CGC_API_KEY`` environment variable
+  or the standard config mechanism), every protected router endpoint requires
+  it, supplied as either ``Authorization: Bearer <key>`` or ``X-API-Key: <key>``.
+  Missing/incorrect keys receive an HTTP ``401``.
+
+The comparison uses :func:`secrets.compare_digest` to avoid timing side
+channels.
+"""
+
+import logging
+import os
+import secrets
+from typing import Optional
+
+from fastapi import Header, HTTPException
+
+logger = logging.getLogger(__name__)
+
+# Config/env key that holds the API key. Reused as the config_manager key so
+# ``cgc config set CGC_API_KEY <value>`` works as well.
+API_KEY_ENV = "CGC_API_KEY"
+
+
+def get_configured_api_key() -> Optional[str]:
+    """Return the configured API key, or ``None`` when auth is disabled.
+
+    Resolution order (highest priority first):
+
+    1. The ``CGC_API_KEY`` environment variable (read directly so auth works
+       even when no config file is present).
+    2. The value stored via the existing config mechanism
+       (:func:`codegraphcontext.cli.config_manager.get_config_value`).
+
+    Empty / whitespace-only values are treated as "not configured".
+    """
+    env_val = os.getenv(API_KEY_ENV)
+    if env_val and env_val.strip():
+        return env_val.strip()
+
+    # Fall back to the existing config mechanism (global/local .env, defaults).
+    try:
+        from codegraphcontext.cli.config_manager import get_config_value
+
+        cfg_val = get_config_value(API_KEY_ENV)
+        if cfg_val and cfg_val.strip():
+            return cfg_val.strip()
+    except Exception:  # pragma: no cover - config lookup is best-effort here
+        pass
+
+    return None
+
+
+def _extract_provided_key(
+    authorization: Optional[str], x_api_key: Optional[str]
+) -> Optional[str]:
+    """Pull the caller-supplied key from the Authorization or X-API-Key header."""
+    if authorization:
+        value = authorization.strip()
+        if value.lower().startswith("bearer "):
+            return value[len("bearer ") :].strip()
+        # Accept a bare token in the Authorization header as a convenience.
+        return value or None
+    if x_api_key and x_api_key.strip():
+        return x_api_key.strip()
+    return None
+
+
+def _keys_match(provided: str, configured: str) -> bool:
+    """Constant-time comparison that never raises on non-ASCII input."""
+    try:
+        return secrets.compare_digest(
+            provided.encode("utf-8"), configured.encode("utf-8")
+        )
+    except (TypeError, AttributeError):
+        return False
+
+
+async def require_api_key(
+    authorization: Optional[str] = Header(default=None),
+    x_api_key: Optional[str] = Header(default=None, alias="X-API-Key"),
+) -> None:
+    """FastAPI dependency that enforces the API key when one is configured.
+
+    No-op (backward compatible) when no key is set; otherwise requires a valid
+    key via ``Authorization: Bearer <key>`` or ``X-API-Key: <key>``, returning
+    HTTP ``401`` on a missing or incorrect key.
+    """
+    configured = get_configured_api_key()
+    if not configured:
+        # Auth disabled -> preserve the pre-existing unauthenticated behavior.
+        return
+
+    provided = _extract_provided_key(authorization, x_api_key)
+    if not provided or not _keys_match(provided, configured):
+        raise HTTPException(
+            status_code=401,
+            detail="Invalid or missing API key",
+            headers={"WWW-Authenticate": "Bearer"},
+        )
+
+
+def log_auth_status() -> None:
+    """Log the authentication status at app startup.
+
+    Emits a prominent WARNING when the API is unauthenticated so the insecure
+    default is impossible to miss in logs.
+    """
+    if get_configured_api_key():
+        logger.info("API key authentication is ENABLED (CGC_API_KEY is set).")
+    else:
+        logger.warning(
+            "⚠️  CodeGraphContext API is running WITHOUT authentication. "
+            "Anyone who can reach this server can index code, run Cypher queries "
+            "and call tools. Set CGC_API_KEY to require a key."
+        )

{codegraphcontext-0.5.2 → codegraphcontext-0.5.4}/src/codegraphcontext/api/mcp_sse.py

@@ -48,11 +48,41 @@ async def handle_call_tool(name: str, arguments: dict | None) -> list[TextConten
 # Create the SSE transport.
 sse = SseServerTransport("/api/v1/mcp/messages")
 
+
+class _AlreadySentResponse(Response):
+    """Placeholder for a response the MCP transport wrote itself.
+
+    Both handlers below hand the raw ASGI ``send`` to the SDK, which emits the
+    complete response. FastAPI still does ``await endpoint(request)`` followed
+    by ``await response(...)``, so returning ``None`` raises ``TypeError:
+    'NoneType' object is not callable`` and returning a real ``Response`` starts
+    a second response on a finished ASGI cycle. This satisfies FastAPI while
+    putting nothing on the wire.
+    """
+
+    async def __call__(self, scope, receive, send) -> None:
+        return
+
+
+class _SendTracker:
+    """ASGI ``send`` wrapper that records whether a response was started."""
+
+    def __init__(self, send):
+        self._send = send
+        self.response_started = False
+
+    async def __call__(self, message) -> None:
+        if message.get("type") == "http.response.start":
+            self.response_started = True
+        await self._send(message)
+
+
 async def handle_sse(request: Request):
     """Entry point for the SSE connection."""
     logger.info("SSE client connected")
+    sender = _SendTracker(request._send)
     try:
-        async with sse.connect_sse(request.scope, request.receive, request._send) as (read_stream, write_stream):
+        async with sse.connect_sse(request.scope, request.receive, sender) as (read_stream, write_stream):
             await mcp_server.run(
                 read_stream,
                 write_stream,
@@ -70,6 +100,10 @@ async def handle_sse(request: Request):
         logger.debug("SSE connection closed: %s", type(exc).__name__)
     finally:
         logger.info("SSE client disconnected — handler exited, resources freed")
+    if sender.response_started:
+        return _AlreadySentResponse()
+    # connect_sse bailed out before writing anything (e.g. rejected origin).
+    return Response(status_code=500, content="SSE connection could not be established")
 
 
 async def handle_messages(request: Request):
@@ -99,7 +133,20 @@ async def handle_messages(request: Request):
             media_type="application/json"
         )
 
+    # `handle_post_message` builds its own Request and awaits `.body()` again.
+    # Starlette caches a body on the Request instance, not in the scope, so
+    # handing it the raw `receive` would make it wait for a body that has
+    # already been drained above — the POST hangs until the client gives up and
+    # the message never reaches the session. Replay the buffered bytes instead.
+    async def replay_receive() -> dict:
+        return {"type": "http.request", "body": raw_body, "more_body": False}
+
+    sender = _SendTracker(request._send)
     try:
-        await sse.handle_post_message(request.scope, request.receive, request._send)
+        await sse.handle_post_message(request.scope, replay_receive, sender)
     except Exception as exc:
         logger.debug("Message handler closed: %s", type(exc).__name__)
+
+    if sender.response_started:
+        return _AlreadySentResponse()
+    return Response(status_code=202, content="Accepted")

{codegraphcontext-0.5.2 → codegraphcontext-0.5.4}/src/codegraphcontext/api/router.py

@@ -5,17 +5,21 @@ from typing import Dict, Any, List
 from pathlib import Path
 
 from .schemas import (
-    IndexRequest, 
-    QueryRequest, 
-    SearchRequest, 
-    ToolCallRequest, 
+    IndexRequest,
+    QueryRequest,
+    SearchRequest,
+    ToolCallRequest,
     ApiResponse
 )
+from .auth import require_api_key
 from codegraphcontext.server import MCPServer
 
 import socket
 
-router = APIRouter()
+# Optional API-key auth is enforced on every route below via require_api_key.
+# It is a no-op (backward compatible) unless CGC_API_KEY is configured, in
+# which case each request must supply the key. See codegraphcontext.api.auth.
+router = APIRouter(dependencies=[Depends(require_api_key)])
 
 # Global server instance (initialized on startup)
 _server_instance: MCPServer = None