memgraph-context-graph 0.7.3__tar.gz → 0.7.4__tar.gz

{memgraph_context_graph-0.7.3 → memgraph_context_graph-0.7.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: memgraph-context-graph
-Version: 0.7.3
+Version: 0.7.4
 Summary: Connect agent SDKs to context-graph components (actions-graph, skills-graph, etc.)
 License: MIT
 License-File: LICENSE

{memgraph_context_graph-0.7.3 → memgraph_context_graph-0.7.4}/pyproject.toml

@@ -1,6 +1,6 @@
 [project]
 name = "memgraph-context-graph"
-version = "0.7.3"
+version = "0.7.4"
 description = "Connect agent SDKs to context-graph components (actions-graph, skills-graph, etc.)"
 readme = "README.md"
 license = { text = "MIT" }

{memgraph_context_graph-0.7.3 → memgraph_context_graph-0.7.4}/src/memgraph_context_graph/adapters/codex_memory.py

@@ -126,6 +126,58 @@ class CodexMemory:
         return report
 
 
+def allow_plugin_tools(home: Path, plugin_id: str) -> list[str]:
+    """Let the plugin's MCP tools run without a prompt, unless the user already set a mode for them.
+
+    Codex asks before every MCP tool call, and under ``approval_policy = "never"`` an ask is a refusal, so
+    ``recall`` would fail for exactly the users who turned prompts off. The tools are read-only over the user's
+    own memory (``memory`` writes only ``/memories`` files), which is what ``approve`` is for.
+
+    Raises:
+        MemoryBackendError: the config file isn't valid TOML.
+    """
+    path = _config_path(home)
+    config = _read(path)
+    server = _plugin_server(config, plugin_id, create=True)
+    if "default_tools_approval_mode" in server:
+        return [f"Unchanged {path}"]
+    server["default_tools_approval_mode"] = "approve"
+    return _write(path, config)
+
+
+def disallow_plugin_tools(home: Path, plugin_id: str) -> list[str]:
+    """Drop what :func:`allow_plugin_tools` wrote, leaving the rest of the plugin's table as the user has it."""
+    path = _config_path(home)
+    if not path.exists():
+        return []
+    config = _read(path)
+    server = _plugin_server(config, plugin_id, create=False)
+    if server is None or server.get("default_tools_approval_mode") != "approve":
+        return []
+    del server["default_tools_approval_mode"]
+    plugin = config["plugins"][plugin_id]
+    if not server:
+        del plugin["mcp_servers"][_SERVER]
+    if not plugin["mcp_servers"]:
+        del plugin["mcp_servers"]
+    if not plugin:
+        del config["plugins"][plugin_id]
+    return _write(path, config)
+
+
+def _plugin_server(config: Any, plugin_id: str, *, create: bool) -> Any:
+    import tomlkit
+
+    node = config
+    for key in ("plugins", plugin_id, "mcp_servers", _SERVER):
+        if key not in node:
+            if not create:
+                return None
+            node[key] = tomlkit.table(is_super_table=key != _SERVER)
+        node = node[key]
+    return node
+
+
 def _codex_home(home: Path) -> Path:
     override = os.environ.get("CODEX_HOME")
     return Path(override) if override else home / ".codex"

{memgraph_context_graph-0.7.3 → memgraph_context_graph-0.7.4}/src/memgraph_context_graph/setup/agents.py

@@ -12,6 +12,7 @@ import io
 import json
 import shutil
 import subprocess
+import time
 from dataclasses import dataclass
 from pathlib import Path
 from typing import TYPE_CHECKING, Literal
@@ -90,6 +91,7 @@ def wire_plugin(agent: Agent, log: Callable[[str], None]) -> str:
     """
     binary = _require(agent)
     if plugin_wired(agent):
+        _allow_recall(agent)
         return "plugin already installed"
     if not _marketplace_registered(agent, binary):
         _stream([binary, "plugin", "marketplace", "add", MARKETPLACE_SOURCE, "--sparse", agent.sparse], log)
@@ -97,6 +99,7 @@ def wire_plugin(agent: Agent, log: Callable[[str], None]) -> str:
         _stream([binary, "plugin", "install", PLUGIN_ID, "-y"], log)
     else:
         _stream([binary, "plugin", "add", PLUGIN_ID], log)
+    _allow_recall(agent)
     return "plugin installed"
 
 
@@ -112,12 +115,26 @@ def unwire_plugin(agent: Agent, log: Callable[[str], None]) -> str:
         verb = "uninstall" if agent.runtime == "claude-code" else "remove"
         _stream([binary, "plugin", verb, PLUGIN_ID], log)
         removed.append("plugin")
+    if agent.runtime == "codex":
+        _codex_memory().disallow_plugin_tools(Path.home(), PLUGIN_ID)
     if _marketplace_registered(agent, binary):
         _stream([binary, "plugin", "marketplace", "remove", MARKETPLACE], log)
         removed.append("marketplace")
     return f"removed the {' and '.join(removed)}" if removed else "wasn't installed"
 
 
+def _allow_recall(agent: Agent) -> None:
+    """Codex refuses an MCP tool that needs approval when its policy is ``never``; recall is read-only, so allow it."""
+    if agent.runtime == "codex":
+        _codex_memory().allow_plugin_tools(Path.home(), PLUGIN_ID)
+
+
+def _codex_memory():
+    from memgraph_context_graph.adapters import codex_memory
+
+    return codex_memory
+
+
 def _marketplace_registered(agent: Agent, binary: str) -> bool:
     listing = _json([binary, "plugin", "marketplace", "list", "--json"])
     entries = listing.get("marketplaces", []) if isinstance(listing, dict) else listing or []
@@ -220,11 +237,26 @@ def _require(agent: Agent) -> str:
 
 
 def _json(argv: list[str]):
-    result = subprocess.run(argv, capture_output=True, text=True, check=False)
-    if result.returncode != 0:
+    """What an agent CLI's ``--json`` listing printed, or None when it didn't print one.
+
+    A listing that fails once (the CLI busy updating itself, a notice printed ahead of the JSON) would read as
+    "not installed" and mislabel a wired agent, so it is asked twice and the JSON is taken from where it starts.
+    """
+    for attempt in range(2):
+        if attempt:
+            time.sleep(0.5)
+        result = subprocess.run(argv, capture_output=True, text=True, check=False)
+        if result.returncode == 0 and (found := _json_in(result.stdout)) is not None:
+            return found
+    return None
+
+
+def _json_in(text: str):
+    start = min((i for i in (text.find("["), text.find("{")) if i >= 0), default=-1)
+    if start < 0:
         return None
     try:
-        return json.loads(result.stdout)
+        return json.loads(text[start:])
     except json.JSONDecodeError:
         return None
 

{memgraph_context_graph-0.7.3 → memgraph_context_graph-0.7.4}/src/memgraph_context_graph/setup/tool.py

@@ -15,7 +15,7 @@ if TYPE_CHECKING:
     from collections.abc import Callable
 
 #: Kept in step with the plugins' bootstrap scripts and install.sh, which install the same set first.
-BASE = "memgraph-context-graph[mcp]>=0.7.2"
+BASE = "memgraph-context-graph[mcp]>=0.7.3"
 CONNECTORS = {
     "skills-graph": "skills-graph[memgraph-context-graph]>=0.2.1",
     "actions-graph": "actions-graph[memgraph-context-graph]>=0.5.0",

{memgraph_context_graph-0.7.3 → memgraph_context_graph-0.7.4}/tests/test_setup.py

@@ -9,6 +9,7 @@ from __future__ import annotations
 import contextlib
 import json
 import re
+import subprocess
 
 import pytest
 
@@ -562,3 +563,56 @@ def test_every_line_of_the_welcome_and_the_last_screen_fits_a_narrow_terminal():
 
     for line in (*engine.WELCOME, *engine.next_steps(choices, env)):
         assert len(line) <= 78, line
+
+
+def test_a_listing_that_fails_once_does_not_make_a_wired_agent_look_unwired(monkeypatch):
+    listing = json.dumps([{"id": agents.PLUGIN_ID}])
+    replies = iter(
+        [
+            subprocess.CompletedProcess([], 1, "", "busy"),
+            subprocess.CompletedProcess([], 0, f"Checking for updates...\n{listing}", ""),
+        ]
+    )
+    monkeypatch.setattr(agents.subprocess, "run", lambda *a, **k: next(replies))
+    monkeypatch.setattr(agents.time, "sleep", lambda _: None)
+    monkeypatch.setattr(agents.shutil, "which", lambda name: f"/bin/{name}")
+
+    assert agents.plugin_wired(BY_RUNTIME["claude-code"])
+
+
+def test_codex_wiring_lets_recall_through_a_never_policy_and_unwiring_takes_it_back(fake_agents, setup_home):
+    import tomlkit
+
+    config = setup_home / ".codex" / "config.toml"
+    config.parent.mkdir()
+    config.write_text('approval_policy = "never"\n\n[features]\nhooks = true\n')
+    codex = BY_RUNTIME["codex"]
+
+    agents.wire_plugin(codex, lambda _: None)
+    agents.wire_plugin(codex, lambda _: None)
+
+    parsed = tomlkit.parse(config.read_text()).unwrap()
+    assert parsed["plugins"][agents.PLUGIN_ID]["mcp_servers"]["context-graph"] == {
+        "default_tools_approval_mode": "approve"
+    }
+    assert parsed["approval_policy"] == "never" and parsed["features"] == {"hooks": True}
+
+    agents.unwire_plugin(codex, lambda _: None)
+
+    assert tomlkit.parse(config.read_text()).unwrap() == {"approval_policy": "never", "features": {"hooks": True}}
+
+
+def test_codex_wiring_keeps_an_approval_mode_the_user_chose(fake_agents, setup_home):
+    import tomlkit
+
+    config = setup_home / ".codex" / "config.toml"
+    config.parent.mkdir()
+    config.write_text(
+        f'[plugins."{agents.PLUGIN_ID}".mcp_servers.context-graph]\ndefault_tools_approval_mode = "prompt"\n'
+    )
+
+    agents.wire_plugin(BY_RUNTIME["codex"], lambda _: None)
+    agents.unwire_plugin(BY_RUNTIME["codex"], lambda _: None)
+
+    mode = tomlkit.parse(config.read_text()).unwrap()["plugins"][agents.PLUGIN_ID]["mcp_servers"]["context-graph"]
+    assert mode == {"default_tools_approval_mode": "prompt"}