repotoire 0.1.4__tar.gz → 0.1.7__tar.gz

{repotoire-0.1.4 → repotoire-0.1.7}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: repotoire
-Version: 0.1.4
+Version: 0.1.7
 Classifier: Development Status :: 3 - Alpha
 Classifier: Intended Audience :: Developers
 Classifier: Programming Language :: Python :: 3
@@ -45,9 +45,6 @@ Requires-Dist: python-slugify>=8.0.0
 Requires-Dist: bleach>=6.0.0
 Requires-Dist: slowapi>=0.1.9
 Requires-Dist: uv-secure>=0.15.0
-Requires-Dist: datasets>=2.14.0
-Requires-Dist: sentence-transformers>=2.2.0
-Requires-Dist: accelerate>=0.26.0
 Requires-Dist: ruff>=0.1.0
 Requires-Dist: mypy>=1.7.0
 Requires-Dist: pylint>=3.0.0
@@ -79,6 +76,9 @@ Requires-Dist: tomli>=2.0.0 ; extra == 'dev'
 Requires-Dist: tenacity>=8.2.0 ; extra == 'dev'
 Requires-Dist: lancedb>=0.4.0 ; extra == 'lancedb'
 Requires-Dist: pyarrow>=14.0.0 ; extra == 'lancedb'
+Requires-Dist: datasets>=2.14.0 ; extra == 'local-embeddings'
+Requires-Dist: sentence-transformers>=2.2.0 ; extra == 'local-embeddings'
+Requires-Dist: accelerate>=0.26.0 ; extra == 'local-embeddings'
 Requires-Dist: questionary>=2.0.0 ; extra == 'ml'
 Requires-Dist: scikit-learn>=1.3.0 ; extra == 'ml'
 Requires-Dist: joblib>=1.3.0 ; extra == 'ml'
@@ -138,12 +138,30 @@ This enables detection of complex issues like circular dependencies, architectur
 
 ## Features
 
-### 🔍 Detection Capabilities
-- **Circular Dependencies** - Find import cycles using Tarjan's algorithm
-- **God Classes** - Detect classes with too many responsibilities
-- **Dead Code** - Identify unused functions and classes
-- **Tight Coupling** - Find architectural bottlenecks
-- **Modularity Analysis** - Suggest module boundaries using community detection
+### 🔍 30+ Graph-Powered Detectors
+
+**Architectural Issues**
+- **Circular Dependencies** - Import cycles via Tarjan's SCC algorithm
+- **Hub Dependencies** - Fragile central nodes everything depends on
+- **Layered Architecture Violations** - Cross-layer dependency detection
+- **Change Coupling** - Files that always change together (temporal coupling)
+- **Architectural Bottlenecks** - Single points of failure in call graphs
+
+**Code Smells (Cross-File)**
+- **Dead Code** - Functions/classes nothing in the codebase calls
+- **God Classes** - Classes with too many responsibilities
+- **Feature Envy** - Methods using other classes more than their own
+- **Shotgun Surgery** - Changes requiring edits across many files
+- **Inappropriate Intimacy** - Classes too tightly coupled
+- **Middle Man** - Classes that just delegate everything
+
+**Quality Metrics**
+- **Module Cohesion** - How well modules stick together
+- **Degree Centrality** - Most connected code (complexity hotspots)
+- **Technical Debt Hotspots** - Areas with compounding issues
+- **Package Stability** - Dependency direction analysis
+
+**Plus:** Data clumps, long parameter lists, message chains, lazy classes, refused bequest, async antipatterns, generator misuse, test smells, type hint coverage, and more.
 
 ### 🤖 AI-Powered Insights
 - Semantic concept extraction from code

{repotoire-0.1.4 → repotoire-0.1.7}/README.md

@@ -19,12 +19,30 @@ This enables detection of complex issues like circular dependencies, architectur
 
 ## Features
 
-### 🔍 Detection Capabilities
-- **Circular Dependencies** - Find import cycles using Tarjan's algorithm
-- **God Classes** - Detect classes with too many responsibilities
-- **Dead Code** - Identify unused functions and classes
-- **Tight Coupling** - Find architectural bottlenecks
-- **Modularity Analysis** - Suggest module boundaries using community detection
+### 🔍 30+ Graph-Powered Detectors
+
+**Architectural Issues**
+- **Circular Dependencies** - Import cycles via Tarjan's SCC algorithm
+- **Hub Dependencies** - Fragile central nodes everything depends on
+- **Layered Architecture Violations** - Cross-layer dependency detection
+- **Change Coupling** - Files that always change together (temporal coupling)
+- **Architectural Bottlenecks** - Single points of failure in call graphs
+
+**Code Smells (Cross-File)**
+- **Dead Code** - Functions/classes nothing in the codebase calls
+- **God Classes** - Classes with too many responsibilities
+- **Feature Envy** - Methods using other classes more than their own
+- **Shotgun Surgery** - Changes requiring edits across many files
+- **Inappropriate Intimacy** - Classes too tightly coupled
+- **Middle Man** - Classes that just delegate everything
+
+**Quality Metrics**
+- **Module Cohesion** - How well modules stick together
+- **Degree Centrality** - Most connected code (complexity hotspots)
+- **Technical Debt Hotspots** - Areas with compounding issues
+- **Package Stability** - Dependency direction analysis
+
+**Plus:** Data clumps, long parameter lists, message chains, lazy classes, refused bequest, async antipatterns, generator misuse, test smells, type hint coverage, and more.
 
 ### 🤖 AI-Powered Insights
 - Semantic concept extraction from code

{repotoire-0.1.4 → repotoire-0.1.7}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "maturin"
 
 [project]
 name = "repotoire"
-version = "0.1.4"
+version = "0.1.7"
 description = "Graph-Powered Code Health Platform"
 readme = "README.md"
 requires-python = ">=3.11"
@@ -63,10 +63,6 @@ dependencies = [
     "slowapi>=0.1.9",  # Rate limiting for FastAPI endpoints
     # Security scanning (core feature)
     "uv-secure>=0.15.0",  # Fast uv.lock vulnerability scanning
-    # ML dependencies
-    "datasets>=2.14.0",  # Required for sentence-transformers fine-tuning
-    "sentence-transformers>=2.2.0",  # Local embedding models + contrastive learning
-    "accelerate>=0.26.0",  # Required for PyTorch Trainer
     # Hybrid detector dependencies (core feature)
     "ruff>=0.1.0",  # Fast linting detector (RuffLintDetector)
     "mypy>=1.7.0",  # Type checking detector
@@ -122,7 +118,11 @@ security = [
 ]
 
 local-embeddings = [
-    # sentence-transformers now in core deps
+    # Heavy ML deps for local embedding models (2GB+ with CUDA)
+    # Only needed if NOT using deepinfra/API-based embeddings
+    "datasets>=2.14.0",
+    "sentence-transformers>=2.2.0",
+    "accelerate>=0.26.0",
 ]
 
 observability = [
@@ -165,8 +165,6 @@ anthropic = [
 repotoire = "repotoire.cli:main"
 repotoire-pre-commit = "repotoire.hooks.pre_commit:main"
 repotoire-mcp = "repotoire.mcp.api_server:main"
-repotoire-marketplace-mcp = "repotoire.mcp_marketplace.server:run_server"
-repotoire-marketplace-mcp-http = "repotoire.mcp_marketplace.http_server:run_http_server"
 
 [project.urls]
 Homepage = "https://github.com/yourusername/repotoire"
@@ -243,7 +241,7 @@ dev = [
 
 # Bump My Version configuration for semantic versioning
 [tool.bumpversion]
-current_version = "0.1.4"
+current_version = "0.1.5"
 commit = true
 commit_args = "--no-verify"
 tag = true

{repotoire-0.1.4 → repotoire-0.1.7}/repotoire/__init__.py

@@ -5,7 +5,7 @@ Analyzes codebases using knowledge graphs to detect code smells,
 architectural issues, and technical debt.
 """
 
-__version__ = "0.1.4"
+__version__ = "0.1.5"
 
 from repotoire.pipeline import IngestionPipeline
 from repotoire.graph import FalkorDBClient
@@ -19,3 +19,4 @@ __all__ = [
     "CodebaseHealth",
     "Finding",
 ]
+# Cache bust Wed Feb  4 07:23:32 PM EST 2026

{repotoire-0.1.4 → repotoire-0.1.7}/repotoire/api/shared/auth/__init__.py

@@ -18,6 +18,7 @@ from repotoire.api.shared.auth.clerk import (
     get_optional_user_or_api_key,
     require_org,
     require_org_admin,
+    require_org_api_key,
     require_scope,
 )
 
@@ -49,6 +50,7 @@ __all__ = [
     "get_optional_user_or_api_key",
     "require_org",
     "require_org_admin",
+    "require_org_api_key",
     "require_scope",
     # State store
     "StateTokenStore",

{repotoire-0.1.4 → repotoire-0.1.7}/repotoire/api/shared/auth/clerk.py

@@ -159,6 +159,8 @@ async def get_optional_user(
 def require_org(user: ClerkUser = Depends(get_current_user)) -> ClerkUser:
     """
     Dependency that requires the user to be part of an organization.
+    
+    NOTE: Only supports JWT authentication. For API key support, use require_org_api_key.
 
     Usage:
         @router.get("/org-only")
@@ -292,6 +294,31 @@ async def get_current_user_or_api_key(
     )
 
 
+def require_org_api_key(user: ClerkUser = Depends(get_current_user_or_api_key)) -> ClerkUser:
+    """
+    Dependency that requires the user to be part of an organization.
+    
+    Supports both JWT tokens and API keys. Use this for endpoints that need to
+    support CLI/API key access.
+
+    Usage:
+        @router.get("/org-only")
+        async def org_route(user: ClerkUser = Depends(require_org_api_key)):
+            return {"org_id": user.org_id}
+    """
+    if not user.org_id:
+        raise HTTPException(
+            status_code=status.HTTP_403_FORBIDDEN,
+            detail={
+                "error": "ORG_REQUIRED",
+                "message": "Organization membership required. Your current session is not associated with an organization.",
+                "user_id": user.user_id,
+                "hint": "Please select an organization in the web UI, or use 'repotoire login' to authenticate with an org-scoped API key."
+            },
+        )
+    return user
+
+
 async def get_optional_user_or_api_key(
     request: Request,
     credentials: Optional[HTTPAuthorizationCredentials] = Depends(security),

{repotoire-0.1.4 → repotoire-0.1.7}/repotoire/api/shared/services/__init__.py

@@ -41,7 +41,6 @@ from .github import GitHubAppClient, get_github_client
 from .stripe_service import (
     PRICE_IDS,
     SEAT_PRICE_IDS,
-    StripeConnectService,
     StripeService,
     price_id_to_tier,
 )
@@ -75,10 +74,9 @@ __all__ = [
     "get_plan_limits",
     "has_feature",
     "increment_usage",
-    # Stripe (legacy webhook handling + Connect)
+    # Stripe (legacy webhook handling)
     "PRICE_IDS",
     "SEAT_PRICE_IDS",
-    "StripeConnectService",
     "StripeService",
     "price_id_to_tier",
     # GDPR

repotoire-0.1.7/repotoire/api/shared/services/stripe_service.py

@@ -0,0 +1,251 @@
+"""Stripe service for legacy webhook handling.
+
+This module provides:
+1. Legacy webhook handling for existing subscriptions (migrated to Clerk Billing)
+
+Migration Note (2026-01):
+- NEW subscriptions are managed via Clerk Billing
+- EXISTING subscriptions may still send Stripe webhooks until migrated
+- Use Clerk's <PricingTable /> and <AccountPortal /> for new subscription management
+"""
+
+import logging
+import os
+from typing import Any, Dict
+
+import stripe
+from fastapi import HTTPException
+
+from repotoire.db.models import PlanTier
+
+logger = logging.getLogger(__name__)
+
+# Configure Stripe API key (still needed for webhooks)
+stripe.api_key = os.environ.get("STRIPE_SECRET_KEY", "")
+
+
+class StripeConfigError(Exception):
+    """Raised when Stripe configuration is invalid or missing."""
+
+    pass
+
+
+def validate_stripe_config() -> dict[str, Any]:
+    """Validate Stripe configuration at startup.
+
+    Checks that all required environment variables are set and valid.
+    Should be called during application startup to fail fast on misconfiguration.
+
+    Returns:
+        Dict with configuration status and any warnings
+
+    Raises:
+        StripeConfigError: If critical configuration is missing
+    """
+    errors: list[str] = []
+    warnings: list[str] = []
+
+    # Check API key
+    api_key = os.environ.get("STRIPE_SECRET_KEY", "")
+    if not api_key:
+        errors.append("STRIPE_SECRET_KEY is not set")
+    elif api_key.startswith("sk_live_") and os.environ.get("ENVIRONMENT") == "development":
+        # SECURITY: Live keys in development can result in real charges
+        # This must be a hard error to prevent accidental financial transactions
+        errors.append(
+            "SECURITY ERROR: Using Stripe LIVE key in development environment. "
+            "This could result in real charges. Use a test key (sk_test_*) for development. "
+            "Set ENVIRONMENT=production if this is intentional."
+        )
+    elif api_key.startswith("sk_test_") and os.environ.get("ENVIRONMENT") == "production":
+        errors.append("Using test Stripe key in production environment")
+
+    # Check webhook secret
+    webhook_secret = os.environ.get("STRIPE_WEBHOOK_SECRET", "")
+    if not webhook_secret:
+        warnings.append("STRIPE_WEBHOOK_SECRET not set - webhooks will fail")
+
+    # Check price IDs (optional but recommended)
+    price_vars = [
+        "STRIPE_PRICE_PRO_BASE",
+        "STRIPE_PRICE_PRO_SEAT",
+        "STRIPE_PRICE_ENTERPRISE_BASE",
+        "STRIPE_PRICE_ENTERPRISE_SEAT",
+    ]
+    missing_prices = [v for v in price_vars if not os.environ.get(v)]
+    if missing_prices:
+        warnings.append(f"Missing price IDs: {', '.join(missing_prices)} - tier mapping may fail")
+
+    if errors:
+        error_msg = "Stripe configuration errors:\n" + "\n".join(f"  - {e}" for e in errors)
+        logger.critical(error_msg)
+        raise StripeConfigError(error_msg)
+
+    if warnings:
+        for warning in warnings:
+            logger.warning(f"Stripe config warning: {warning}")
+
+    return {
+        "valid": True,
+        "warnings": warnings,
+        "mode": "live" if api_key.startswith("sk_live_") else "test",
+    }
+
+
+def handle_stripe_error(error: stripe.error.StripeError, context: str) -> HTTPException:
+    """Convert Stripe errors to appropriate HTTP exceptions.
+
+    Maps Stripe error types to HTTP status codes:
+    - CardError: 402 (Payment Required) - card was declined
+    - RateLimitError: 429 (Too Many Requests) - rate limited
+    - InvalidRequestError: 400 (Bad Request) - invalid parameters
+    - AuthenticationError: 401 (Unauthorized) - API key issue
+    - APIConnectionError: 503 (Service Unavailable) - network issue
+    - StripeError: 500 (Internal Server Error) - generic fallback
+
+    Args:
+        error: The Stripe error
+        context: Description of what operation failed
+
+    Returns:
+        HTTPException with appropriate status code and user-friendly message
+    """
+    logger.error(f"Stripe error in {context}: {type(error).__name__}: {error}")
+
+    if isinstance(error, stripe.error.CardError):
+        # Card was declined
+        return HTTPException(
+            status_code=402,
+            detail=error.user_message or "Your card was declined. Please try a different payment method.",
+        )
+    elif isinstance(error, stripe.error.RateLimitError):
+        # Too many requests to Stripe
+        return HTTPException(
+            status_code=429,
+            detail="Too many payment requests. Please wait a moment and try again.",
+        )
+    elif isinstance(error, stripe.error.InvalidRequestError):
+        # Invalid parameters sent to Stripe
+        return HTTPException(
+            status_code=400,
+            detail="Invalid payment request. Please check your details and try again.",
+        )
+    elif isinstance(error, stripe.error.AuthenticationError):
+        # API key issues - log as critical, return generic error
+        logger.critical(f"Stripe authentication failed: {error}")
+        return HTTPException(
+            status_code=500,
+            detail="Payment service configuration error. Please contact support.",
+        )
+    elif isinstance(error, stripe.error.APIConnectionError):
+        # Network issues connecting to Stripe
+        return HTTPException(
+            status_code=503,
+            detail="Payment service temporarily unavailable. Please try again.",
+        )
+    else:
+        # Generic Stripe error
+        return HTTPException(
+            status_code=500,
+            detail="Payment processing failed. Please try again or contact support.",
+        )
+
+
+# ============================================================================
+# Price ID Mapping (for legacy webhook handling)
+# ============================================================================
+
+# Maps Stripe price IDs to plan tiers
+PRICE_IDS: Dict[str, str] = {
+    os.environ.get("STRIPE_PRICE_PRO_BASE", ""): "pro",
+    os.environ.get("STRIPE_PRICE_ENTERPRISE_BASE", ""): "enterprise",
+}
+
+SEAT_PRICE_IDS: Dict[str, str] = {
+    os.environ.get("STRIPE_PRICE_PRO_SEAT", ""): "pro",
+    os.environ.get("STRIPE_PRICE_ENTERPRISE_SEAT", ""): "enterprise",
+}
+
+
+def price_id_to_tier(price_id: str) -> PlanTier:
+    """Convert Stripe price ID to PlanTier enum.
+
+    Args:
+        price_id: Stripe price ID
+
+    Returns:
+        Corresponding PlanTier
+
+    Note:
+        Returns FREE for unknown price IDs (fail-safe)
+    """
+    tier_str = PRICE_IDS.get(price_id) or SEAT_PRICE_IDS.get(price_id)
+    if tier_str == "pro":
+        return PlanTier.PRO
+    elif tier_str == "enterprise":
+        return PlanTier.ENTERPRISE
+    else:
+        logger.warning(f"Unknown price ID: {price_id}, defaulting to FREE")
+        return PlanTier.FREE
+
+
+# ============================================================================
+# Legacy StripeService (for webhook handling)
+# ============================================================================
+
+
+class StripeService:
+    """Legacy Stripe service for webhook handling.
+
+    Note: New subscription management should use Clerk Billing.
+    This class exists only for handling webhooks from existing subscriptions.
+    """
+
+    @staticmethod
+    def construct_webhook_event(
+        payload: bytes,
+        signature: str,
+        webhook_secret: str,
+    ) -> Dict[str, Any]:
+        """Construct and verify a Stripe webhook event.
+
+        Args:
+            payload: Raw request body
+            signature: Stripe-Signature header
+            webhook_secret: Webhook secret for verification
+
+        Returns:
+            Verified Stripe event dict
+
+        Raises:
+            HTTPException: If signature verification fails
+        """
+        try:
+            event = stripe.Webhook.construct_event(
+                payload, signature, webhook_secret
+            )
+            return event
+        except stripe.error.SignatureVerificationError:
+            raise HTTPException(status_code=400, detail="Invalid signature")
+        except Exception as e:
+            logger.error(f"Webhook construction error: {e}")
+            raise HTTPException(status_code=400, detail="Invalid webhook")
+
+    @staticmethod
+    def get_subscription(subscription_id: str) -> Dict[str, Any]:
+        """Get a Stripe subscription by ID.
+
+        Args:
+            subscription_id: Stripe subscription ID
+
+        Returns:
+            Stripe subscription object as dict
+        """
+        try:
+            return stripe.Subscription.retrieve(subscription_id)
+        except stripe.error.StripeError as e:
+            logger.error(f"Error retrieving subscription {subscription_id}: {e}")
+            raise HTTPException(
+                status_code=500,
+                detail="Failed to retrieve subscription. Please try again or contact support."
+            )

{repotoire-0.1.4 → repotoire-0.1.7}/repotoire/api/v1/__init__.py

@@ -22,7 +22,6 @@ from repotoire.api.v1.routes import (
     github,
     graph,
     historical,
-    marketplace,
     monorepo,
     narratives,
     notifications,
@@ -39,8 +38,6 @@ from repotoire.api.v1.routes import (
 )
 from repotoire.api.v1.routes.admin import changelog as admin_changelog
 from repotoire.api.v1.routes.admin import overrides as admin_overrides
-from repotoire.api.v1.routes.admin import reports as admin_reports
-from repotoire.api.v1.routes.admin import reviews as admin_reviews
 from repotoire.api.v1.routes.admin import status as admin_status
 
 # v1-specific OpenAPI tags
@@ -155,11 +152,6 @@ V1_OPENAPI_TAGS = [
         "description": "Public changelog and release notes. View new features, improvements, "
         "bug fixes, and subscribe to updates. No authentication required for public endpoints.",
     },
-    {
-        "name": "marketplace",
-        "description": "Repotoire Marketplace for AI skills, commands, styles, and prompts. "
-        "Browse, install, publish, and manage marketplace assets.",
-    },
     {
         "name": "narratives",
         "description": "AI-powered narrative generation. Executive summaries, metric insights, "
@@ -260,7 +252,6 @@ v1_app.include_router(fixes.router)
 v1_app.include_router(github.router)
 v1_app.include_router(graph.router)
 v1_app.include_router(historical.router)
-v1_app.include_router(marketplace.router)
 v1_app.include_router(monorepo.router)
 v1_app.include_router(narratives.router)
 v1_app.include_router(notifications.router)
@@ -276,9 +267,6 @@ v1_app.include_router(webhooks.router)
 v1_app.include_router(status.router)
 v1_app.include_router(changelog.router)
 v1_app.include_router(admin_overrides.router)
-v1_app.include_router(admin_reports.router)
-v1_app.include_router(admin_reports.admin_router)  # Admin report management endpoints
-v1_app.include_router(admin_reviews.router)
 v1_app.include_router(admin_status.router)
 v1_app.include_router(admin_changelog.router)
 

{repotoire-0.1.4 → repotoire-0.1.7}/repotoire/api/v1/routes/__init__.py

@@ -17,7 +17,6 @@ from repotoire.api.v1.routes import (
     github,
     graph,
     historical,
-    marketplace,
     monorepo,
     narratives,
     notifications,
@@ -50,7 +49,6 @@ __all__ = [
     "github",
     "graph",
     "historical",
-    "marketplace",
     "monorepo",
     "narratives",
     "notifications",

repotoire-0.1.7/repotoire/api/v1/routes/admin/__init__.py

@@ -0,0 +1,5 @@
+"""Admin API routes for Repotoire."""
+
+from repotoire.api.v1.routes.admin import overrides, status
+
+__all__ = ["overrides", "status"]

{repotoire-0.1.4 → repotoire-0.1.7}/repotoire/api/v1/routes/usage.py

@@ -9,7 +9,7 @@ from pydantic import BaseModel, Field
 from sqlalchemy import select
 from sqlalchemy.ext.asyncio import AsyncSession
 
-from repotoire.api.shared.auth import ClerkUser, get_current_user
+from repotoire.api.shared.auth import ClerkUser, get_current_user_or_api_key
 from repotoire.api.shared.services.billing import (
     PLAN_LIMITS,
     get_current_tier,
@@ -39,7 +39,7 @@ class UsageResponse(BaseModel):
 
 @router.get("", response_model=UsageResponse)
 async def get_usage(
-    user: ClerkUser = Depends(get_current_user),
+    user: ClerkUser = Depends(get_current_user_or_api_key),
     db: AsyncSession = Depends(get_db),
 ) -> UsageResponse:
     """Get current usage for the authenticated user's organization.
@@ -152,7 +152,7 @@ class UsageIncrementResponse(BaseModel):
 @router.post("/increment", response_model=UsageIncrementResponse)
 async def increment_usage_counter(
     request: UsageIncrementRequest,
-    user: ClerkUser = Depends(get_current_user),
+    user: ClerkUser = Depends(get_current_user_or_api_key),
     db: AsyncSession = Depends(get_db),
 ) -> UsageIncrementResponse:
     """Increment a usage counter for the organization.