code-graph

See everything a change affects before you make it: a local, deterministic dependency graph of routes, calls, tables and config, with file:line evidence for every hop.

For you and your AI agent (CLI + MCP). No LLM in the graph.

Docs · Quick start · CLI · MCP · Changelog

Quick start

pipx install cg-code-graph          # or: uv tool install cg-code-graph
cg index . --db out/graph.db        # prints starter queries for your repo
cg reaches table:orders --db out/graph.db   # any table, connection or config key

Try it on a bundled sample, link a frontend to a backend, or connect an agent over MCP: Quick start guide. Other install options (install.sh, Windows, exact-mode toolchains): Install.

cg reaches table:store_books on the bundled Django sample:

dependents: 18 nodes  (code: 6, entry points: 9, other: 3)
== RUNTIME (reached from http_route / ... / queue_job / listener): 5 functions/methods
    catalog.api.create_book  depth=1 conf=resolved  http_route(1)
        path: function:catalog.api.create_book
          -WRITES_TABLE[resolved @ catalog/api.py:27]-> table:store_books
    catalog.signals.review_saved  depth=3 conf=resolved  listener(1)
        path: function:catalog.signals.review_saved
          -DISPATCHES[exact @ catalog/signals.py:12]-> job:catalog.tasks.recompute_rating
          -HANDLED_BY[exact @ catalog/tasks.py:13]-> function:catalog.tasks.recompute_rating
          -READS_TABLE[resolved @ catalog/tasks.py:14]-> table:store_books

Supported languages

Frameworks and facts	Calls	Docs
Django (+ DRF, django-ninja), FastAPI / Starlette, Flask, Celery	exact (stdlib `ast`)	Python
Nuxt / Vue, NestJS, Next.js, Astro, Express, Fastify, Koa, Hono	exact (TypeScript compiler API)	TS frameworks
Laravel (routes and middleware, queues, broadcasting)	exact (nikic/php-parser; needs PHP 8.2+)	PHP
Flutter	exact (Dart analyzer; needs the Dart SDK)	Platforms
Android, Kotlin Multiplatform	heuristic; exact with scip-java (opt-in)	Kotlin
iOS / SwiftPM	heuristic; exact with the Swift index store (opt-in)	Swift
crates / modules, entry points, FFI, `#[cfg]` / `#if` gates	heuristic; exact with rust-analyzer / scip-clang	Rust, C and C++

Go, Java and others: import a SCIP index with cg index --scip FILE. Run cg doctor to see exact / heuristic per language on your machine.

What you get

reaches, impact, path: every caller, route, job and page that reaches a table, config key or method.
cg affected --base main: the tests and entry points a change reaches (--quiet feeds your test runner).
Frontend ↔ backend: cg link matches client HTTP calls to server routes across repos.
Route guards: cg routes --writes --unguarded lists routes that write with no auth guard.
MCP server (cg-mcp) so agents query the graph instead of grepping.
Visual view (cg serve) and plan checks (cg plan check) for planned changes.

Docs

Install · Quick start · CLI · MCP · Configuration · Architecture · Limitations

Changelog · Contributing · Security · MIT License

More recordings: docs/media.

Metadata

Release files for cg-code-graph 0.16.0

For a detailed explanation of source distributions (sdists) and built distributions (wheels), please see the package formats documentation.

Source distribution (sdist)

Source distribution for cg-code-graph 0.16.0
File	Size	Uploaded
cg_code_graph-0.16.0.tar.gz	1.7 MB	Oct 6, 2026	Details

Built distribution (wheel)

Table of built distributions (wheels) for cg-code-graph 0.16.0
File	Interpreter	ABI	Platform	Reset
cg_code_graph-0.16.0-py3-none-any.whl 1.5 MB Oct 6, 2026	Python 3	none	any	Details

Total release size: 3.1 MB

Release files / cg_code_graph-0.16.0.tar.gz

Download URL	cg_code_graph-0.16.0.tar.gz
Size	1.7 MB
Tags	Source
SHA-256 checksum How to use checksums	`c20627bcbb661fdfd05399e779d1cde7c5b090f8deadd176e571ed6491324187`
BLAKE2b-256 checksum How to use checksums	`cd302c5db62e04ac163ba584f5e1874f63a3669ab2d9aa2264c92258484a547b`
Upload date	Oct 6, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Provenance describes where a file came from. On PyPI, provenance is shared via attestations, which provide a verifiable record of the build or publishing details. View details, limitations and caveats.

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/cyberchronos00/code-graph
Publishing commit: github.com/cyberchronos00/code-graph/tree/ad1f622c86e8ef368122f275e6a631705317ee42

Workflow

Publishing configuration: github.com/cyberchronos00/code-graph/blob/ad1f622c86e8ef368122f275e6a631705317ee42/.github/workflows/publish.yml
Publishing logs: github.com/cyberchronos00/code-graph/actions/runs/37466909363/attempts/1

Artifact

Subject: cg_code_graph-0.16.0.tar.gz
SHA-256 checksum: c20627bcbb661fdfd05399e779d1cde7c5b090f8deadd176e571ed6491324187 Verifying attestations

Release files / cg_code_graph-0.16.0-py3-none-any.whl

Download URL	cg_code_graph-0.16.0-py3-none-any.whl
Size	1.5 MB
Tags	Python 3
SHA-256 checksum How to use checksums	`55287c24c430d3a86656d00d42bf8c8435b0d89cb0cf5373140f432714484118`
BLAKE2b-256 checksum How to use checksums	`b8a13b345bad64c2833d225e3919505e49d5e567a615d0f10c15e2b2aa4a01e1`
Upload date	Oct 6, 2026
Uploaded using Trusted Publishing? What is trusted publishing?	Yes
Uploaded via	`twine/7.0.0 CPython/3.13.14`

Provenance

Identity

Publishing platform: GitHub Actions
Publishing repository: github.com/cyberchronos00/code-graph
Publishing commit: github.com/cyberchronos00/code-graph/tree/ad1f622c86e8ef368122f275e6a631705317ee42

Workflow

Publishing configuration: github.com/cyberchronos00/code-graph/blob/ad1f622c86e8ef368122f275e6a631705317ee42/.github/workflows/publish.yml
Publishing logs: github.com/cyberchronos00/code-graph/actions/runs/37466909363/attempts/1

Artifact

Subject: cg_code_graph-0.16.0-py3-none-any.whl
SHA-256 checksum: 55287c24c430d3a86656d00d42bf8c8435b0d89cb0cf5373140f432714484118 Verifying attestations