codingest 0.2.17__tar.gz → 0.2.19__tar.gz

{codingest-0.2.17 → codingest-0.2.19}/Cargo.lock

@@ -302,7 +302,7 @@ dependencies = [
 
 [[package]]
 name = "codingest"
-version = "0.2.17"
+version = "0.2.19"
 dependencies = [
  "aho-corasick",
  "base64 0.22.1",
@@ -338,7 +338,7 @@ dependencies = [
 
 [[package]]
 name = "codingest-cli"
-version = "0.2.17"
+version = "0.2.19"
 dependencies = [
  "anyhow",
  "clap",
@@ -350,7 +350,7 @@ dependencies = [
 
 [[package]]
 name = "codingest-mcp"
-version = "0.2.17"
+version = "0.2.19"
 dependencies = [
  "anyhow",
  "codingest",
@@ -359,7 +359,7 @@ dependencies = [
 
 [[package]]
 name = "codingest-py"
-version = "0.2.17"
+version = "0.2.19"
 dependencies = [
  "codingest",
  "codingest-cli",
@@ -1366,9 +1366,9 @@ dependencies = [
 
 [[package]]
 name = "kglite"
-version = "0.17.1"
+version = "0.17.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a28e49b7ad2d0489043994eedb1f8234e355d5b3a32797cbb43013f32682ea72"
+checksum = "c414d1f4ae2d7d0af3ce088b843fbc3622cac2c29467cc81bc2dc639006136e0"
 dependencies = [
  "bzip2",
  "chrono",
@@ -1402,9 +1402,9 @@ dependencies = [
 
 [[package]]
 name = "kglite-mcp-server"
-version = "0.17.1"
+version = "0.17.3"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cc38e9f116553e64e560edf72c83a17bbc7f2ab947a1f47be39659d6d86890e2"
+checksum = "764efb5d817e481d9c96302c185a71bceba6ed09a79b3c6ad2f131688c7384c9"
 dependencies = [
  "anyhow",
  "bytes",

{codingest-0.2.17 → codingest-0.2.19}/Cargo.toml

@@ -3,7 +3,7 @@ members = ["crates/codingest", "crates/codingest-cli", "crates/codingest-mcp", "
 resolver = "2"
 
 [workspace.package]
-version = "0.2.17"
+version = "0.2.19"
 edition = "2021"
 rust-version = "1.88"
 license = "MIT"
@@ -12,8 +12,21 @@ repository = "https://github.com/kkollsga/codingest"
 [workspace.dependencies]
 base64 = "0.22"
 sha2 = "0.11"
-# kglite engine + MCP server — imported as crates.io libraries. The 0.17.1
-# floor spans four upstream releases: codingest took none of 0.16.23, 0.16.24
+# kglite engine + MCP server — imported as crates.io libraries. The 0.17.3
+# floor spans the 0.17.2 and 0.17.3 query releases. Nothing in codingest's
+# builder source moved for either release; the changes reach users through
+# `codingest query` and the embedded `codingest-mcp` server:
+#   * read `CALL` subqueries gain modern scope clauses plus UNION / INTERSECT /
+#     EXCEPT composition, and Cypher 25 adds FILTER, OFFSET, NODETACH DELETE,
+#     FINISH and INSERT. Procedure calls now execute per incoming row instead
+#     of reviving an empty pipeline. `PassCtx`'s new private fields are a Rust
+#     break for struct-literal callers, but codingest never constructs one.
+#   * typed and undirected relationship counts, correlated EXISTS patterns,
+#     and fused OPTIONAL MATCH / two-MATCH aggregates are faster or corrected.
+#     Those are engine query paths only. The builder's `prepare_kgl_write`,
+#     `write_kgl` and `save_graph` persistence entries are unchanged.
+# The preceding 0.17.1 floor spanned four upstream releases: codingest took
+# none of 0.16.23, 0.16.24
 # or 0.17.0, so all four land here together. Nothing in our source moved for
 # it — the workspace builds, clippys and tests clean against 0.17.1 with zero
 # edits, and every corpus golden is byte-identical across the move. Where they
@@ -486,8 +499,8 @@ sha2 = "0.11"
 # and no disk storage. Neither 0.15.7 nor 0.15.8 changes the `kglite::api` we
 # call, graph output, property encoding, or `.kgl` serialization.
 # Keep both libraries aligned so the graph and server share one engine release.
-kglite = { version = "0.17.1", default-features = false }
-kglite-mcp-server = { version = "0.17.1", default-features = false }
+kglite = { version = "0.17.3", default-features = false }
+kglite-mcp-server = { version = "0.17.3", default-features = false }
 
 # Dependency debuginfo capped at line tables (kglite coordination, 2026-08-31,
 # after unbounded debug trees filled the build-cache disk to zero): a

{codingest-0.2.17 → codingest-0.2.19}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: codingest
-Version: 0.2.17
+Version: 0.2.19
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: Programming Language :: Python :: 3
@@ -12,7 +12,7 @@ Classifier: Programming Language :: Python :: 3.14
 Classifier: Programming Language :: Rust
 Classifier: Topic :: Software Development
 Classifier: Topic :: Software Development :: Libraries
-Requires-Dist: kglite>=0.17.1,<0.18
+Requires-Dist: kglite>=0.17.3,<0.18
 License-File: LICENSE
 Summary: Build fast, queryable code graphs for AI agents, MCP code review, and local or GitHub repository analysis.
 Keywords: ai-agents,mcp,code-review,knowledge-graph,code-analysis,github,tree-sitter,cypher
@@ -192,7 +192,7 @@ codingest skill install        # code-review Agent Skill
 ```
 
 The wheel bundles every grammar plus the `codingest` and `codingest-mcp`
-commands. KGLite ≥0.17.1 is installed automatically as the query/storage
+commands. KGLite ≥0.17.3 is installed automatically as the query/storage
 engine; its MCP server and the transitive `mcp-methods` framework power the
 builder-aware Codingest server. Nothing else needs to be installed.
 
@@ -205,7 +205,7 @@ Python prerequisites.
 ```toml
 [dependencies]
 codingest = "0.2"
-kglite = "0.17.1"
+kglite = "0.17.3"
 ```
 
 ```rust
@@ -277,7 +277,7 @@ diagnostic.
 ## Dependency policy
 
 `kglite` and `kglite-mcp-server` use matching crates.io requirements with a
-0.17.1 minimum and a shared lockfile. This keeps the builder, persistence
+0.17.3 minimum and a shared lockfile. This keeps the builder, persistence
 handoff, and embedded MCP server on one compatible engine patch line.
 
 ## Parity with the (now-removed) in-tree component

{codingest-0.2.17 → codingest-0.2.19}/README.md

@@ -165,7 +165,7 @@ codingest skill install        # code-review Agent Skill
 ```
 
 The wheel bundles every grammar plus the `codingest` and `codingest-mcp`
-commands. KGLite ≥0.17.1 is installed automatically as the query/storage
+commands. KGLite ≥0.17.3 is installed automatically as the query/storage
 engine; its MCP server and the transitive `mcp-methods` framework power the
 builder-aware Codingest server. Nothing else needs to be installed.
 
@@ -178,7 +178,7 @@ Python prerequisites.
 ```toml
 [dependencies]
 codingest = "0.2"
-kglite = "0.17.1"
+kglite = "0.17.3"
 ```
 
 ```rust
@@ -250,7 +250,7 @@ diagnostic.
 ## Dependency policy
 
 `kglite` and `kglite-mcp-server` use matching crates.io requirements with a
-0.17.1 minimum and a shared lockfile. This keeps the builder, persistence
+0.17.3 minimum and a shared lockfile. This keeps the builder, persistence
 handoff, and embedded MCP server on one compatible engine patch line.
 
 ## Parity with the (now-removed) in-tree component

{codingest-0.2.17 → codingest-0.2.19}/crates/codingest/Cargo.toml

@@ -10,7 +10,7 @@ keywords = ["knowledge-graph", "code-analysis", "tree-sitter", "cypher", "kglite
 categories = ["development-tools", "parser-implementations"]
 
 # Requires the kglite 0.15 engine API (`kglite::api::code_entities`); the
-# workspace pins the current engine floor (0.17.1).
+# workspace pins the current engine floor (0.17.3).
 
 [lib]
 name = "codingest"

{codingest-0.2.17 → codingest-0.2.19}/crates/codingest-cli/Cargo.toml

@@ -14,7 +14,7 @@ name = "codingest"
 path = "src/main.rs"
 
 [dependencies]
-codingest = { version = "0.2.17", path = "../codingest" }
+codingest = { version = "0.2.19", path = "../codingest" }
 kglite = { workspace = true }
 anyhow = "1.0.104"
 clap = { version = "4.6.4", features = ["derive"] }

{codingest-0.2.17 → codingest-0.2.19}/crates/codingest-cli/skills/codingest-code-review/SKILL.md

@@ -14,43 +14,60 @@ git diff, source reading, and literal-text search; it does not replace them.
 > `pip install codingest` provides both plus the builder-aware
 > `codingest-mcp` server. Rust-only environments can alternatively use Cargo.
 
-1. Inspect the diff and repository guidance first. Identify changed symbols and
-   the base/head revisions.
-2. Build or refresh the graph without executing repository code:
-
-   ```bash
-   codingest build . --output .kglite/code-review.kgl --format json
-   ```
-
-   For a committed comparison, use one graph spanning both revisions:
-
-   ```bash
-   codingest build . --revs '<base>' '<head>' \
-     --output .kglite/code-review.kgl --format json
-   ```
-
-3. Always discover the actual schema before writing Cypher:
-
-   ```bash
-   kglite describe .kglite/code-review.kgl --connections --cypher
-   ```
-
-4. Query the smallest structural question that can confirm or reject a review
-   hypothesis. Use JSON for agent parsing:
-
-   ```bash
-   kglite query .kglite/code-review.kgl '<cypher>' --format json
-   ```
-
-5. Open every implicated file and verify the behavior at exact lines. Report
-   only findings supported by source evidence. Do not infer runtime behavior
-   from an edge alone.
-
-6. Before reusing an artifact, check freshness:
-
-   ```bash
-   codingest status --output .kglite/code-review.kgl --format json
-   ```
+Inspect the diff and repository guidance first. Identify changed symbols and
+the base/head revisions, then build or refresh the graph without executing
+repository code:
+
+```bash
+codingest build . --output .kglite/code-review.kgl --format json
+```
+
+For a committed comparison, use one graph spanning both revisions:
+
+```bash
+codingest build . --revs '<base>' '<head>' \
+  --output .kglite/code-review.kgl --format json
+```
+
+Before reusing an artifact, check freshness:
+
+```bash
+codingest status --output .kglite/code-review.kgl --format json
+```
+
+## Retrieve only what answers the question
+
+Choose the narrowest route for the uncertainty in front of you; these are
+alternatives, not a compulsory sequence. Reuse tool signatures already known
+in the current session; if a needed tool is not visible, discover that tool
+rather than loading a broad catalog.
+
+- **Known symbol or location:** read it directly. With MCP, use
+  `read_code_source` for a qualified name or `read_source` for a path, applying
+  `start_line`, `end_line`, and `max_chars` when a full body or file is not
+  needed.
+- **Exact structural question:** use `cypher_query`, or `kglite query` at the
+  CLI. Reuse a schema already observed for the same unchanged graph. Otherwise
+  inspect only the needed node or connection shape with `graph_overview` or
+  `kglite describe`; do not retrieve the whole schema by habit.
+- **Broad explanation or unfamiliar subsystem:** use bounded `explore`, starting
+  with a short topic, a few `max_entities`, shallow `max_depth`, and
+  `include_source: false` unless bodies are needed. Narrow to selected symbols
+  before reading source.
+- **Literal text:** use grep/ripgrep for error strings, comments, and config
+  keys, then open only the relevant matches.
+
+Every additional read should resolve a concrete uncertainty needed for the
+answer. Project only useful Cypher properties, return a few relevant candidates,
+and exclude unrelated fixtures, generated code, vendors, or examples when the
+question does not cover them. If output truncates, narrow the query or source
+range instead of repeatedly increasing output. Reuse evidence already seen
+unless its source or active graph changed.
+
+Open implicated code at exact lines before claiming behavior; an edge alone is
+not runtime proof. Stop when the requested conclusions are supported. Expand
+only for a contradiction, missing evidence, or a correctness risk that could
+change the answer.
 
 See [queries.md](references/queries.md) for query patterns,
 [public-repositories.md](references/public-repositories.md) for safe public-repo
@@ -88,7 +105,8 @@ prior question — what is eligible to be a finding at all.
 
 ## Honesty rules
 
-- Never invent labels, properties, or connection types: `describe()` first.
+- Never invent labels, properties, or connection types. Discover an unfamiliar
+  shape before querying it; reuse a known shape while the graph is unchanged.
 - Treat unresolved or missing graph edges as absence of evidence, not proof.
 - Quote paths and revisions passed through the shell.
 - Never build, import, or execute code from a repository merely to review it.

{codingest-0.2.17 → codingest-0.2.19}/crates/codingest-cli/skills/codingest-code-review/references/public-repositories.md

@@ -18,3 +18,13 @@ For an existing cache, fetch only the explicit refs needed. The revision build
 uses `git archive` and never checks out or runs the repository. Do not silently
 switch a user's working checkout. Verify GitHub claims against the resolved
 commit and cite stable source links when reporting findings.
+
+## Keep repository investigations bounded
+
+When using the open-source MCP, activate the requested repository and revision,
+then follow the routing policy in the parent skill. Reuse tool signatures and
+schema shapes already observed for the same active graph. If a tool or shape is
+unknown, discover only that tool or the node/connection types needed for the
+next query; broad tool catalogs and full schemas are not prerequisites. Start
+from the named symbol or subsystem, and exclude fixtures, generated sources,
+vendored trees, and examples unless they bear on the question.

{codingest-0.2.17 → codingest-0.2.19}/crates/codingest-cli/skills/codingest-code-review/references/queries.md

@@ -1,7 +1,9 @@
 # Code-review query patterns
 
-Run `kglite describe <graph> --connections --cypher` first and adapt these
-patterns to the labels and properties it reports.
+Adapt these patterns to the labels and properties already known for the active
+graph. If the needed node or connection shape is unfamiliar, inspect that shape
+with `graph_overview` or `kglite describe <graph> --connections --cypher` before
+querying it.
 
 Find a symbol before asking about its relationships:
 

{codingest-0.2.17 → codingest-0.2.19}/crates/codingest-mcp/Cargo.toml

@@ -14,6 +14,6 @@ name = "codingest-mcp"
 path = "src/main.rs"
 
 [dependencies]
-codingest = { version = "0.2.17", path = "../codingest" }
+codingest = { version = "0.2.19", path = "../codingest" }
 kglite-mcp-server = { workspace = true }
 anyhow = "1.0.104"

{codingest-0.2.17 → codingest-0.2.19}/crates/codingest-py/Cargo.toml

@@ -42,7 +42,7 @@ doctest = false
 pyo3 = { version = "0.29" }
 # The engine-free builder (parsers, call/type/route edges, rev merge, repo
 # clone, manifest reader). Docs pass gated by this crate's `docs` feature.
-codingest = { version = "0.2.17", path = "../codingest", default-features = false }
+codingest = { version = "0.2.19", path = "../codingest", default-features = false }
 # `.kgl` persistence (`kglite::api::io::save_graph`) for the serialize half of
 # the build-then-load handoff, plus the `DirGraph` type the builder returns.
 kglite = { workspace = true }
@@ -53,9 +53,9 @@ tempfile = "3.27.0"
 # through `_run_cli`, so `pip install codingest` also installs the `codingest`
 # command without a second wheel or a duplicated builder build. Mirrors
 # kglite-py's `kglite-cli` bundling.
-codingest-cli = { version = "0.2.17", path = "../codingest-cli" }
+codingest-cli = { version = "0.2.19", path = "../codingest-cli" }
 # Source-building MCP composition. The graph server and generic MCP lifecycle
 # remain owned by its existing kglite-mcp-server -> mcp-methods Rust dependency
 # chain; linking this thin library into the extension gives pip users the same
 # builder-aware server as the standalone `codingest-mcp` binary.
-codingest-mcp = { version = "0.2.17", path = "../codingest-mcp" }
+codingest-mcp = { version = "0.2.19", path = "../codingest-mcp" }

{codingest-0.2.17 → codingest-0.2.19}/crates/codingest-py/src/lib.rs

@@ -74,7 +74,7 @@ fn load_via_kglite(py: Python<'_>, path: &Path) -> PyResult<Py<PyAny>> {
         PyRuntimeError::new_err(format!(
             "codingest.build() returns a kglite.KnowledgeGraph, but importing \
              `kglite` failed ({e}). Install it: `pip install \
-             'kglite>=0.17.1,<0.18'`."
+             'kglite>=0.17.3,<0.18'`."
         ))
     })?;
     let graph = kglite.call_method1("load", (path.to_string_lossy().as_ref(),))?;

{codingest-0.2.17 → codingest-0.2.19}/pyproject.toml

@@ -42,9 +42,9 @@ dynamic = ["version"]
 # minor releases (e.g. the v3->v4 break, which refuses old files outright), so
 # pip must never be free to pair our writer with a reader from a different
 # minor. This range therefore mirrors the Cargo semver range for the pin above
-# (`version = "0.17.1"` == `>=0.17.1,<0.18.0`) exactly — bump both together.
+# (`version = "0.17.3"` == `>=0.17.3,<0.18.0`) exactly — bump both together.
 dependencies = [
-    "kglite>=0.17.1,<0.18",
+    "kglite>=0.17.3,<0.18",
 ]
 
 [project.urls]