enforce-cpg

A Code Property Graph (CPG) MCP server for DayZ Enforce Script and BI config (config.cpp/config.bin, e.g. cfgVehicles, cfgWeapons).

It parses Enforce Script (.c) source and config documents across a vanilla/base layer and any number of mod layers, builds a graph of declarations, inheritance, overrides, and calls, and exposes that graph over the Model Context Protocol so an AI coding assistant (e.g. Claude Code) can answer real DayZ-modding questions: "what overrides Speak on Animal?", "who calls this method?", "what's the effective attachments[] on Plot after every mod's layered +=/=?", "what breaks if I change this field?" — across a real, multi-mod, load-order-dependent codebase, without ever crashing on a bad file, a corrupt PBO, or an unresolved reference.

Config ingestion. Both loose config.cpp (text) and config.bin (BI's rapified binary form) are discovered — as standalone files under a source root, or embedded inside any *.pbo, in either combination — and folded into the same graph as script declarations. A corrupt PBO, an unsupported/malformed rapified config.bin, or a syntactically broken config.cpp is recorded as a diagnostic and skipped; it never aborts the rest of the index run (see doctor below).

Install

pip install enforce-cpg        # or: uvx enforce-cpg --version

No compiler needed — the Enforce grammar ships as prebuilt wheels (tree-sitter-enforce).

Or, from a local checkout:

uv sync
uv run enforce-cpg --version

Configure

Point enforce-cpg at your vanilla scripts and mod source trees with an enforce-cpg.toml file (see enforce-cpg.example.toml):

[project]
name = "my-server"
db_path = ".enforce-cpg/index.db"

# ORDERED: earlier = loaded first = base precedence. This IS your -mod= order.
[[sources]]
name = "vanilla"
kind = "core"
path = "/path/to/vanilla_scripts"

[[sources]]
name = "MyMod"
kind = "mod"
path = "/path/to/MyMod/Scripts"

Load-order warning: the order of [[sources]] in this file is the override precedence used to resolve Animal.Speak-style method stacks — it must mirror your server's real -mod= load order. A source listed earlier is treated as the base that later sources override; get this wrong and resolve_method / get_inheritance will report the wrong override winner.

Build (or rebuild) the index:

uv run enforce-cpg index --config enforce-cpg.toml --full

Optional: pulling PBOs from a live game host over SFTP

pip install enforce-cpg[remote] (or uv sync --extra remote) pulls in paramiko and unlocks a kind = "sftp" source, e.g.:

[[sources]]
name = "live-server"
kind = "sftp"
path = "/mpmissions"
host = "game.example.com"
port = 22
username = "svc"
# either password or key_filename:
password = "..."
# key_filename = "/path/to/key"

enforce_cpg.remote gives sequential, single-retry list_pbos/fetch_pbo helpers built specifically for a live DayZ server's SFTP endpoint (never fanned out — a game server's SFTP side channel does not tolerate concurrent requests).

Honest gap: as of this release, kind="sftp" is not yet wired into indexing — discover/discover_configs never consult a source's kind, so a configured sftp source currently contributes 0 files and 0 configs. doctor warns about this explicitly for any sftp source in your config, so it never fails silently. Actually pulling PBOs from the source over SFTP and indexing them still requires wiring enforce_cpg.remote into discovery — not done yet.

Tools

Once registered with an MCP client, enforce-cpg exposes 14 tools:

The CLI (enforce-cpg <subcommand>) covers only part of this surface — index/reindex, find-symbol, overview (get_overview), audit (audit_overrides only — script overrides, not audit_configs), mod-surface --source <name>, doctor, and ingest <path> --name <n> --kind core|mod. find_references, find_callers, resolve_method, get_inheritance, impact_of_change, resolve_config, and audit_configs — including both of this project's config-analysis tools — have no CLI command and are reachable only through an MCP client (e.g. Claude Code) or by importing enforce_cpg.query directly in Python.

Every tool degrades honestly instead of crashing: an unresolved symbol or a missing argument returns {"results": [], "note": "..."} rather than an exception, so a single bad query never takes down the server.

Register with Claude Code

claude mcp add enforce-cpg -- uvx --from enforce-cpg enforce-cpg-mcp

The server reads its config from the ENFORCE_CPG_CONFIG environment variable (defaults to enforce-cpg.toml in the working directory), so set that to your project's config path when registering.

License

enforce-cpg is licensed under the Attribution Assurance License (AAL), an OSI-approved open-source license. The full license text is in LICENSE; the required attribution notice is in NOTICE.

Attribution notice (must be displayed per the AAL's attribution clause):

enforce-cpg — © 2026 tommyz4 — https://github.com/tommyz4/enforce-cpg