code-graph

See everything a change affects before you make it: a local, deterministic dependency graph of routes, calls, tables and config, with file:line evidence for every hop.

For you and your AI agent (CLI + MCP). No LLM in the graph.

Docs · Quick start · CLI · MCP · Changelog

Quick start

pipx install cg-code-graph          # or: uv tool install cg-code-graph
cg index . --db out/graph.db        # prints starter queries for your repo
cg reaches table:orders --db out/graph.db   # any table, connection or config key

Try it on a bundled sample, link a frontend to a backend, or connect an agent over MCP: Quick start guide. Other install options (install.sh, Windows, exact-mode toolchains): Install.

cg reaches table:store_books on the bundled Django sample:

dependents: 18 nodes  (code: 6, entry points: 9, other: 3)
== RUNTIME (reached from http_route / ... / queue_job / listener): 5 functions/methods
    catalog.api.create_book  depth=1 conf=resolved  http_route(1)
        path: function:catalog.api.create_book
          -WRITES_TABLE[resolved @ catalog/api.py:27]-> table:store_books
    catalog.signals.review_saved  depth=3 conf=resolved  listener(1)
        path: function:catalog.signals.review_saved
          -DISPATCHES[exact @ catalog/signals.py:12]-> job:catalog.tasks.recompute_rating
          -HANDLED_BY[exact @ catalog/tasks.py:13]-> function:catalog.tasks.recompute_rating
          -READS_TABLE[resolved @ catalog/tasks.py:14]-> table:store_books

Supported languages

Frameworks and facts	Calls	Docs
Django (+ DRF, django-ninja), FastAPI / Starlette, Flask, Celery	exact (stdlib `ast`)	Python
Nuxt / Vue, NestJS, Next.js, Astro, Express, Fastify, Koa, Hono	exact (TypeScript compiler API)	TS frameworks
Laravel (routes and middleware, queues, broadcasting)	exact (nikic/php-parser; needs PHP 8.2+)	PHP
Flutter	exact (Dart analyzer; needs the Dart SDK)	Platforms
Android, Kotlin Multiplatform	heuristic; exact with scip-java (opt-in)	Kotlin
iOS / SwiftPM	heuristic; exact with the Swift index store (opt-in)	Swift
crates / modules, entry points, FFI, `#[cfg]` / `#if` gates	heuristic; exact with rust-analyzer / scip-clang	Rust, C and C++

Go, Java and others: import a SCIP index with cg index --scip FILE. Run cg doctor to see exact / heuristic per language on your machine.

What you get

reaches, impact, path: every caller, route, job and page that reaches a table, config key or method.
cg affected --base main: the tests and entry points a change reaches (--quiet feeds your test runner).
Frontend ↔ backend: cg link matches client HTTP calls to server routes across repos.
Route guards: cg routes --writes --unguarded lists routes that write with no auth guard.
MCP server (cg-mcp) so agents query the graph instead of grepping.
Visual view (cg serve) and plan checks (cg plan check) for planned changes.

Docs

Install · Quick start · CLI · MCP · Configuration · Architecture · Limitations

Changelog · Contributing · Security · MIT License

More recordings: docs/media.

Metadata

Release files for cg-code-graph 0.15.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for cg-code-graph 0.15.0
File	Size	Uploaded
cg_code_graph-0.15.0.tar.gz	1.6 MB	Oct 6, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for cg-code-graph 0.15.0
File	Interpreter	ABI	Platform	Reset
cg_code_graph-0.15.0-py3-none-any.whl 1.4 MB Oct 6, 2026	Python 3	none	any	Details

Total release size: 3.1 MB

Release files / cg_code_graph-0.15.0.tar.gz

Download URL	cg_code_graph-0.15.0.tar.gz
Size	1.6 MB
Tags	Source
SHA-256 checksum How to use checksums	`c9605be0e9e09706579166515374399da13392177d54bf5203afc092677a201d`
BLAKE2b-256 checksum How to use checksums	`fc1eb940956d37a36602aee8388c4f22abd5c2a412c9c3de742863b6829c8be8`
Upload date	Oct 6, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/cyberchronos00/code-graph
Publishing commit: github.com/cyberchronos00/code-graph/tree/21846e42ac36fbe6664224f411968ff14f6bf289

Workflow

Publishing configuration: github.com/cyberchronos00/code-graph/blob/21846e42ac36fbe6664224f411968ff14f6bf289/.github/workflows/publish.yml
Publishing logs: github.com/cyberchronos00/code-graph/actions/runs/37440459353/attempts/1

Artifact

Subject: cg_code_graph-0.15.0.tar.gz
SHA-256 checksum: c9605be0e9e09706579166515374399da13392177d54bf5203afc092677a201d Verifying attestations

Release files / cg_code_graph-0.15.0-py3-none-any.whl

Download URL	cg_code_graph-0.15.0-py3-none-any.whl
Size	1.4 MB
Tags	Python 3
SHA-256 checksum How to use checksums	`e6e51ebf21273efcedde770c242b23e4d08325fa6d19d25eb3620002085cf418`
BLAKE2b-256 checksum How to use checksums	`c2909cad72ee97bc3a14d456b583c5298066edb5b73167f0ecbe2901f58f7a58`
Upload date	Oct 6, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/cyberchronos00/code-graph
Publishing commit: github.com/cyberchronos00/code-graph/tree/21846e42ac36fbe6664224f411968ff14f6bf289

Workflow

Publishing configuration: github.com/cyberchronos00/code-graph/blob/21846e42ac36fbe6664224f411968ff14f6bf289/.github/workflows/publish.yml
Publishing logs: github.com/cyberchronos00/code-graph/actions/runs/37440459353/attempts/1

Artifact

Subject: cg_code_graph-0.15.0-py3-none-any.whl
SHA-256 checksum: e6e51ebf21273efcedde770c242b23e4d08325fa6d19d25eb3620002085cf418 Verifying attestations