pip install -r requirements.txt

cp .env.example .env
# Edit .env with your settings

# Create tables
python -m src.api.cli init-db

# Run migrations
python -m src.api.cli migrate

python -m src.api.cli create-admin --username admin --password your-secure-password

python -m src.api.cli run --host 0.0.0.0 --port 8000

POST /api/v1/auth/token
Content-Type: application/json

{
  "username": "admin",
  "password": "your-password"
}

{
  "access_token": "eyJhbGciOiJIUzI1NiIs...",
  "refresh_token": "eyJhbGciOiJIUzI1NiIs...",
  "token_type": "bearer",
  "expires_in": 1800
}

POST /api/v1/auth/refresh
Content-Type: application/json

{
  "refresh_token": "eyJhbGciOiJIUzI1NiIs..."
}

Authorization: Bearer <access_token>

POST /api/v1/auth/api-keys
Authorization: Bearer <token>
Content-Type: application/json

{
  "name": "my-integration",
  "expires_days": 365,
  "scopes": ["scenarios:read", "query:execute"]
}

{
  "id": "key_abc123",
  "name": "my-integration",
  "key": "rak_xxxxxxxxxxxxxxxxxxxx",
  "prefix": "rak_xxxx",
  "scopes": ["scenarios:read", "query:execute"],
  "expires_at": "2025-12-09T00:00:00Z",
  "created_at": "2024-12-09T00:00:00Z"
}

X-API-Key: rak_xxxxxxxxxxxxxxxxxxxx

GET /api/v1/auth/api-keys
Authorization: Bearer <token>

DELETE /api/v1/auth/api-keys/{key_id}
Authorization: Bearer <token>

GET /api/v1/auth/oauth/{provider}/authorize

GET /api/v1/auth/oauth/{provider}/callback?code=xxx&state=xxx

POST /api/v1/auth/ldap
Content-Type: application/json

{
  "username": "jdoe",
  "password": "ldap-password"
}

{
  "query": "Как работает MVCC?",
  "language": "ru"
}

{
  "answer": "MVCC (Multi-Version Concurrency Control)...",
  "scenario_id": "onboarding",
  "processing_time_ms": 1523.45
}

{
  "enabled": true,
  "rate_limit": "30/minute",
  "max_query_length": 500,
  "allowed_scenarios": ["onboarding"]
}

{
  "query": "Find SQL injection vulnerabilities",
  "session_id": "optional-session-id",
  "scenario_id": "security",
  "language": "en"
}

{
  "answer": "Found 3 potential SQL injection vulnerabilities...",
  "scenario_id": "security",
  "confidence": 0.85,
  "evidence": [
    {
      "type": "code",
      "source": "src/executor.c:123",
      "content": "sprintf(query, \"SELECT * FROM %s\", user_input);",
      "relevance": 0.95
    }
  ],
  "session_id": "sess_abc123",
  "request_id": "req_xyz789",
  "processing_time_ms": 2341.5
}

data: {"type": "start", "session_id": "sess_abc123"}

data: {"type": "chunk", "content": "Found 3 potential "}

data: {"type": "chunk", "content": "SQL injection vulnerabilities..."}

data: {"type": "end", "scenario_id": "security"}

[
  {
    "id": "onboarding",
    "name": "Onboarding",
    "description": "Get started with a codebase - find functions, trace call graphs",
    "category": "Learning",
    "keywords": ["find", "where", "what", "how", "explain"],
    "example_queries": ["Where is the main() function?", "What does exec_simple_query do?"]
  },
  {
    "id": "security",
    "name": "Security Audit",
    "description": "Find security vulnerabilities - SQL injection, buffer overflows",
    "category": "Security",
    "keywords": ["vulnerability", "injection", "unsafe"],
    "example_queries": ["Find SQL injection vulnerabilities"]
  }
  // ... 14 more scenarios
]

{
  "query": "Find buffer overflow vulnerabilities",
  "session_id": "optional-session-id",
  "language": "en"
}

{
  "patch_content": "diff --git a/src/file.c b/src/file.c\n...",
  "task_description": "Fix memory leak in transaction handler",
  "dod_items": ["No memory leaks", "Unit tests pass"],
  "output_format": "json"
}

{
  "recommendation": "REQUEST_CHANGES",
  "confidence": 0.82,
  "findings": [
    {
      "category": "error",
      "severity": "high",
      "location": {"file": "src/file.c", "line_start": 45},
      "message": "Potential memory leak: allocated memory not freed on error path",
      "suggested_fix": "Add free(ptr) before return statement"
    }
  ],
  "dod_status": [
    {"description": "No memory leaks", "satisfied": false, "evidence": "Found 1 potential leak"}
  ],
  "summary": "Found 1 high-severity issue that should be addressed."
}

{
  "owner": "postgres",
  "repo": "postgres",
  "pr_number": 123,
  "github_token": "ghp_xxx"
}

{
  "project_id": "123",
  "mr_iid": 456,
  "gitlab_token": "glpat-xxx",
  "gitlab_url": "https://gitlab.com"
}

{
  "query": "SELECT name, file FROM nodes_method WHERE name LIKE '%transaction%' LIMIT 10",
  "timeout_ms": 30000
}

{
  "results": [
    {"name": "StartTransaction", "file": "xact.c"},
    {"name": "CommitTransaction", "file": "xact.c"}
  ],
  "row_count": 2,
  "execution_time_ms": 45.2
}

{
  "languages": [
    {
      "id": "c",
      "name": "C",
      "extensions": [".c", ".h", ".cpp", ".hpp"],
      "gocpg_lang": "c",
      "gocpg_flag": "C"
    },
    {
      "id": "java",
      "name": "JAVA",
      "extensions": [".java"],
      "gocpg_lang": "java",
      "gocpg_flag": "JAVASRC"
    }
  ]
}

{
  "repo_url": "https://github.com/postgres/postgres",
  "branch": "master",
  "shallow_clone": true,
  "language": null,
  "mode": "full",
  "include_paths": ["src/backend", "src/include"],
  "exclude_paths": ["test", "tests"],
  "create_domain_plugin": true,
  "import_docs": true,
  "gocpg_memory_gb": 16,
  "batch_size": 10000
}

{
  "job_id": "550e8400-e29b-41d4-a716-446655440000",
  "status": "pending",
  "message": "Import started. Use job_id to track progress."
}

{
  "job_id": "550e8400-e29b-41d4-a716-446655440000",
  "project_name": "postgres",
  "status": "in_progress",
  "steps": [
    {"name": "Clone Repository", "status": "completed", "progress": 100},
    {"name": "Detect Language", "status": "completed", "progress": 100},
    {"name": "Create CPG", "status": "in_progress", "progress": 45, "message": "Creating CPG nodes..."},
    {"name": "Export to DuckDB", "status": "pending", "progress": 0},
    {"name": "Validate CPG", "status": "pending", "progress": 0},
    {"name": "Import Documentation", "status": "pending", "progress": 0},
    {"name": "Setup Domain Plugin", "status": "pending", "progress": 0}
  ],
  "current_step": "gocpg_parse",
  "overall_progress": 35,
  "created_at": "2024-12-09T10:00:00Z",
  "updated_at": "2024-12-09T10:05:00Z"
}

{
  "job_id": "550e8400-e29b-41d4-a716-446655440000",
  "status": "cancelled"
}

{
  "step_id": "validate",
  "context": {
    "duckdb_path": "./workspace/project.duckdb"
  }
}

{
  "step": "validate",
  "status": "completed",
  "result": {
    "validation_report": {
      "status": "passed",
      "quality_score": 85,
      "metrics": {...}
    }
  }
}

const ws = new WebSocket('ws://localhost:8000/ws/v1/jobs/550e8400-e29b-41d4-a716-446655440000');

ws.onmessage = (event) => {
  const msg = JSON.parse(event.data);

  switch (msg.type) {
    case 'job.progress':
      console.log(`Progress: ${msg.payload.progress}% - ${msg.payload.message}`);
      break;
    case 'job.completed':
      console.log('Import completed:', msg.payload.result);
      break;
    case 'job.failed':
      console.error('Import failed:', msg.payload.error);
      break;
  }
};

{
  "groups": [
    {
      "id": "550e8400-e29b-41d4-a716-446655440000",
      "name": "PostgreSQL Development",
      "description": "PostgreSQL core development projects",
      "created_at": "2024-12-01T10:00:00Z",
      "updated_at": "2024-12-09T15:30:00Z",
      "project_count": 3
    }
  ],
  "total": 1
}

{
  "name": "PostgreSQL Development",
  "description": "PostgreSQL core development projects"
}

{
  "id": "550e8400-e29b-41d4-a716-446655440000",
  "name": "PostgreSQL Development",
  "description": "PostgreSQL core development projects",
  "created_at": "2024-12-09T10:00:00Z",
  "updated_at": "2024-12-09T10:00:00Z",
  "project_count": 0
}

{
  "name": "Updated Name",
  "description": "Updated description"
}

{
  "users": [
    {
      "id": "user-123",
      "user_id": "user-456",
      "username": "jdoe",
      "role": "editor",
      "created_at": "2024-12-01T10:00:00Z"
    }
  ],
  "total": 1
}

{
  "user_id": "user-456",
  "role": "viewer"
}

{
  "projects": [
    {
      "id": "proj-123",
      "group_id": "group-456",
      "name": "PostgreSQL 17",
      "db_path": "./workspace/postgresql.duckdb",
      "cpg_path": "./workspace/postgresql.cpg",
      "source_path": "./workspace/postgresql",
      "language": "c",
      "domain": "postgresql_v2",
      "description": "PostgreSQL 17.0 source code",
      "is_active": true,
      "metadata": {"version": "17.0"},
      "created_at": "2024-12-01T10:00:00Z",
      "updated_at": "2024-12-09T15:30:00Z"
    }
  ],
  "total": 1
}

{
  "group_id": "group-456",
  "name": "PostgreSQL 17",
  "db_path": "./workspace/postgresql.duckdb",
  "cpg_path": "./workspace/postgresql.cpg",
  "source_path": "./workspace/postgresql",
  "language": "c",
  "domain": "postgresql_v2",
  "description": "PostgreSQL 17.0 source code",
  "metadata": {"version": "17.0"}
}

{
  "name": "Updated Name",
  "domain": "postgresql_v2",
  "description": "Updated description",
  "metadata": {"version": "17.1"}
}

{
  "id": "proj-123",
  "name": "PostgreSQL 17",
  "is_active": true,
  "message": "Project activated successfully"
}

{
  "total_queries": 12345,
  "queries_today": 234,
  "average_response_time_ms": 1523.4,
  "scenarios_usage": {
    "onboarding": 4521,
    "security": 2341
  }
}

{
  "status": "healthy",
  "version": "1.0.0",
  "uptime_seconds": 3600.5,
  "timestamp": "2024-12-09T12:00:00Z",
  "components": {
    "database": {"status": "healthy", "latency_ms": 5.2},
    "llm": {"status": "healthy", "provider": "gigachat"},
    "cpg": {"status": "healthy", "db_path": "data/projects/postgres.duckdb"}
  }
}

{"status": "ok"}

{"status": "ready"}

{
  "version": "1.0.0",
  "name": "CodeGraph API"
}

{
  "target": "validate_input",
  "file": "src/utils.py",
  "type": "function"
}

{
  "found": true,
  "target": {
    "name": "validate_input",
    "type": "function",
    "file": "src/utils.py",
    "line_start": 45,
    "line_end": 58,
    "code": "def validate_input(data):\n    ..."
  }
}

{
  "file": "src/utils.py",
  "target": "validate_input",
  "new_code": "def validate_input(data):\n    return data.strip()",
  "preview": false
}

{
  "success": true,
  "edit_id": "edit_abc123",
  "changes": {
    "file": "src/utils.py",
    "lines_changed": 13,
    "diff": "..."
  }
}

{
  "edit_id": "edit_abc123"
}

{
  "path": "src/api/",
  "categories": ["performance", "security", "readability"]
}

{
  "session_id": "opt_abc123",
  "suggestions": [
    {
      "id": "sug_001",
      "category": "performance",
      "severity": "medium",
      "file": "src/api/handlers.py",
      "line": 45,
      "title": "Replace loop with list comprehension",
      "description": "This loop can be optimized using a list comprehension",
      "current_code": "result = []\nfor x in data:\n    result.append(x*2)",
      "suggested_code": "result = [x*2 for x in data]",
      "impact": "~15% performance improvement"
    }
  ],
  "total": 12
}

{
  "suggestion_id": "sug_001"
}

{
  "suggestion_id": "sug_001",
  "reason": "Not applicable to our use case"
}

{
  "session_id": "opt_abc123"
}

{
  "applied": 5,
  "skipped": 2,
  "changes": [
    {"file": "src/api/handlers.py", "lines_changed": 3}
  ]
}

{
  "document_path": "company_standards.yaml"
}

{
  "success": true,
  "document_name": "Company Coding Standards v2.0",
  "rules_imported": 15,
  "categories": ["naming", "security", "style", "documentation"]
}

{
  "rules": [
    {
      "id": "SEC-001",
      "title": "Use parameterized queries",
      "category": "security",
      "severity": "error",
      "description": "All database queries must use parameterized queries"
    }
  ],
  "total": 15
}

{
  "path": "src/",
  "severity": "error",
  "category": "security"
}

{
  "session_id": "std_abc123",
  "violations": [
    {
      "rule_id": "SEC-001",
      "title": "SQL injection risk",
      "severity": "error",
      "file": "src/api/user_handler.py",
      "line": 67,
      "code": "cursor.execute(\"SELECT * FROM users WHERE id = %s\" % user_id)",
      "suggestion": "Use cursor.execute(query, params) with placeholders",
      "reference": {
        "url": "https://owasp.org/Top10/A03_2021-Injection/",
        "document": "OWASP Top 10 2021"
      }
    }
  ],
  "summary": {
    "total": 23,
    "errors": 5,
    "warnings": 12,
    "info": 6
  }
}

{
  "project_path": ".",
  "include_dev": true
}

{
  "session_id": "deps_abc123",
  "overview": {
    "total_dependencies": 127,
    "direct_dependencies": 23,
    "dev_dependencies": 45,
    "files_analyzed": 3
  },
  "dependencies": [
    {
      "name": "fastapi",
      "version": "0.104.1",
      "type": "direct",
      "license": "MIT"
    }
  ]
}

{
  "session_id": "deps_abc123",
  "severity": ["critical", "high"]
}

{
  "vulnerabilities": [
    {
      "package": "requests",
      "version": "2.28.0",
      "cve": "CVE-2024-12345",
      "severity": "critical",
      "title": "Remote Code Execution in HTTP redirect handling",
      "fixed_in": "2.32.0",
      "cvss_score": 9.8
    }
  ],
  "summary": {
    "critical": 1,
    "high": 2,
    "medium": 3,
    "low": 5
  }
}

{
  "nodes": [
    {"id": "fastapi", "version": "0.104.1", "type": "direct"},
    {"id": "pydantic", "version": "2.5.2", "type": "transitive"}
  ],
  "edges": [
    {"from": "fastapi", "to": "pydantic"}
  ]
}

{
  "session_id": "deps_abc123",
  "format": "cyclonedx",
  "include_vulnerabilities": true
}

{
  "format": "CycloneDX 1.4",
  "output_file": "sbom.json",
  "components": 127,
  "metadata": {
    "generated": "2024-12-09T14:35:21Z",
    "tool": "CodeGraph v1.0"
  }
}

{
  "query": "Optimize the authentication module",
  "orchestrator": "s18",
  "scenarios": ["s02", "s08"],
  "context": {
    "file_paths": ["src/auth/"]
  }
}

{
  "session_id": "comp_abc123",
  "orchestrator": "s18",
  "findings": [
    {
      "id": "find_001",
      "source_scenario": "s02",
      "type": "vulnerability",
      "severity": "high",
      "file": "src/auth/login.py",
      "line": 45,
      "message": "SQL injection vulnerability detected"
    },
    {
      "id": "find_002",
      "source_scenario": "s08",
      "type": "compliance",
      "severity": "medium",
      "file": "src/auth/validator.py",
      "line": 23,
      "message": "Missing input validation"
    }
  ],
  "summary": {
    "total_findings": 12,
    "by_scenario": {"s02": 5, "s08": 7}
  }
}

{
  "session_id": "comp_abc123",
  "finding_id": "find_001",
  "preview": true
}

{
  "success": true,
  "preview": true,
  "changes": {
    "file": "src/auth/login.py",
    "diff": "..."
  }
}

{
  "conflicts": [
    {
      "finding_a": "find_001",
      "finding_b": "find_003",
      "file": "src/auth/login.py",
      "lines": [45, 47],
      "resolution_options": ["keep_a", "keep_b", "merge"]
    }
  ]
}

{
  "orchestrators": ["s18", "s19"],
  "available_scenarios": ["s02", "s08", "s17"],
  "merge_strategies": ["priority", "chronological", "interactive"]
}

{
  "language": "en",
  "output_dir": "./docs/generated",
  "index_in_chromadb": true,
  "sections": ["mvd_doc", "module_overview", "function_doc", "pipeline_doc", "business_logic_doc", "type_doc", "coverage_doc", "diagram_doc"]
}

{
  "request_id": "uuid",
  "generated_at": "2025-01-01T12:00:00",
  "language": "en",
  "sections": [
    {
      "section_type": "mvd_doc",
      "display_name": "Project Overview (MVD)",
      "success": true,
      "content_length": 5432,
      "retrieved_functions_count": 15
    }
  ],
  "combined_document_length": 42000,
  "chromadb_chunks_indexed": 85,
  "output_files": {"markdown": "./docs/generated/documentation_en_20250101_120000.md"},
  "processing_time_ms": 15000.0
}

{
  "language": "en"
}

{
  "section_type": "mvd_doc",
  "content": "## Project Overview\n...",
  "language": "en",
  "processing_time_ms": 2500.0
}

{
  "total_chunks": 85,
  "section_counts": {
    "mvd_doc": 5,
    "module_overview": 20,
    "function_doc": 30,
    "coverage_doc": 8,
    "diagram_doc": 12,
    "type_doc": 10
  },
  "collection_name": "generated_documentation"
}

{
  "query": "buffer management functions",
  "n_results": 10,
  "section_type_filter": "function_doc",
  "language_filter": "en"
}

{
  "query": "buffer management functions",
  "results": [
    {
      "id": "doc_function_doc_3",
      "content": "## BufferAlloc\nAllocates a shared buffer...",
      "section_type": "function_doc",
      "subsystem": "",
      "heading": "BufferAlloc",
      "score": 0.87
    }
  ],
  "total_results": 5
}

{
  "total_nodes": 140000,
  "total_edges": 1200000,
  "methods": 52000,
  "calls": 111000,
  "files": 8500,
  "type_decls": 3200,
  "db_size_mb": 245.7,
  "tables": {
    "nodes_method": 52000,
    "nodes_call": 111000,
    "edges_call": 808000
  }
}

{
  "methods_by_language": [
    {"language": "Python", "count": 12500},
    {"language": "Go", "count": 8200}
  ],
  "calls_by_language": [
    {"language": "Python", "count": 45000},
    {"language": "Go", "count": 31000}
  ],
  "entry_points": {
    "total": 20700,
    "entry_points": 1250,
    "regular": 19450
  },
  "test_coverage": {
    "total_methods": 20700,
    "test_methods": 3100,
    "ratio_percent": 14.97
  },
  "complexity_distribution": {
    "low_1_5": 16800,
    "medium_6_10": 2900,
    "high_11_20": 750,
    "very_high_21_50": 200,
    "critical_50_plus": 50
  },
  "dead_code_candidates": [
    {
      "name": "unused_helper",
      "filename": "src/utils/helpers.py",
      "line": 42
    }
  ],
  "type_origin_by_language": [
    {"language": "Python", "origin": "inferred", "count": 30000},
    {"language": "Python", "origin": "unresolved", "count": 15000},
    {"language": "Go", "origin": "declared", "count": 25000}
  ]
}

{
  "sql": "SELECT COUNT(*) FROM nodes_method",
  "db_path": null
}

{
  "columns": ["count_star()"],
  "rows": [[52000]],
  "row_count": 1
}

[
  {
    "name": "c2cpg",
    "available": true,
    "extensions": [".c", ".h"]
  },
  {
    "name": "gosrc2cpg",
    "available": true,
    "extensions": [".go"]
  }
]

{
  "input_path": ".",
  "verbose": false
}

[
  {
    "branch_name": "main",
    "commit_sha": "abc12345",
    "file_count": 8500,
    "node_count": 140000,
    "is_active": true
  }
]

{
  "branch_name": "feature-branch",
  "db_path": null
}

{
  "status": "ok",
  "branch": "feature-branch"
}

{
  "input_path": ".",
  "db_path": null
}

{
  "status": "ok",
  "pruned_count": 2
}

[
  {
    "hook_name": "pre-commit",
    "installed": true
  },
  {
    "hook_name": "post-commit",
    "installed": false
  }
]

{
  "repo_path": ".",
  "db_path": null,
  "hook_types": null,
  "async_hooks": true,
  "language": null
}

{
  "repo_path": "."
}

{
  "db_path": null
}

[
  {
    "path": "contrib/pgcrypto",
    "commit_sha": "abc123456789",
    "initialized": true,
    "recursive": false
  }
]

{
  "input_path": ".",
  "db_path": null
}

{
  "status": "ok",
  "pruned_count": 1
}

{
  "input_path": "/path/to/source",
  "output_path": null,
  "language": null,
  "debounce_ms": null,
  "extensions": null,
  "webhook_url": null
}

{
  "status": "started",
  "pid": 12345,
  "input_path": "/path/to/source"
}

{
  "status": "stopped",
  "pid": 12345
}

{
  "running": true,
  "pid": 12345,
  "input_path": "/path/to/source",
  "output_path": "data/projects/myproject.duckdb"
}

{
  "pattern": "malloc($SIZE)",
  "language": "c",
  "max_results": 100
}

{
  "pattern": "malloc($SIZE)",
  "language": "c",
  "files_searched": 8500,
  "matches": [
    {
      "file": "src/backend/utils/mmgr/aset.c",
      "line_start": 142,
      "line_end": 142,
      "col_start": 12,
      "col_end": 28,
      "matched_text": "malloc(size)",
      "metavars": {"SIZE": "size"}
    }
  ],
  "count": 1
}

{
  "findings": [
    {
      "id": 1,
      "rule_id": "no-unchecked-malloc",
      "severity": "warning",
      "category": "security",
      "rule_message": "Unchecked return value from malloc",
      "filename": "src/backend/utils/mmgr/aset.c",
      "line_start": 142,
      "line_end": 142,
      "col_start": 12,
      "col_end": 28,
      "matched_text": "malloc(size)",
      "message": "Return value of malloc is not checked for NULL",
      "metavars": {"SIZE": "size"},
      "fix_applied": false,
      "has_cpg": true
    }
  ],
  "count": 1
}

{
  "total_findings": 57,
  "by_severity": {
    "error": 12,
    "warning": 30,
    "info": 15
  },
  "by_category": {
    "security": 20,
    "performance": 15,
    "correctness": 22
  },
  "by_rule": {
    "no-unchecked-malloc": {"message": "Unchecked malloc return", "count": 8},
    "sql-string-concat": {"message": "SQL concatenation detected", "count": 12}
  }
}

{
  "rules": [
    {
      "rule_id": "no-unchecked-malloc",
      "severity": "warning",
      "category": "security",
      "message": "Unchecked return value from malloc",
      "language": "c",
      "has_fix": true
    }
  ],
  "count": 1
}

{
  "description": "Find unchecked malloc calls that could return NULL",
  "language": "c"
}

{
  "yaml_content": "id: unchecked-malloc\nlanguage: c\nseverity: warning\n..."
}

const ws = new WebSocket('ws://localhost:8000/ws/v1/chat?token=<jwt_token>');

ws.onmessage = (event) => {
  const data = JSON.parse(event.data);
  console.log('Received:', data);
};

ws.send(JSON.stringify({
  type: 'query',
  query: 'Find SQL injection vulnerabilities',
  scenario_id: 'security'
}));

X-RateLimit-Limit: 60
X-RateLimit-Remaining: 45
X-RateLimit-Reset: 1702123456

RATE_LIMIT_STORAGE=redis://localhost:6379

# Create database
createdb codegraph

# Set connection string
export DATABASE_URL="postgresql+asyncpg://postgres:password@localhost:5432/codegraph"

# Apply all migrations
python -m src.api.cli migrate

# Migrate to specific revision
python -m src.api.cli migrate --revision abc123

# Run API server
python -m src.api.cli run [--host HOST] [--port PORT] [--workers N] [--reload]

# Initialize database
python -m src.api.cli init-db

# Run migrations
python -m src.api.cli migrate [--revision REV]

# Create admin user
python -m src.api.cli create-admin --username USER --password PASS [--email EMAIL]

curl -X POST http://localhost:8000/api/v1/demo/chat \
  -H "Content-Type: application/json" \
  -d '{"query": "Как работает MVCC?", "language": "ru"}'

curl -X POST http://localhost:8000/api/v1/auth/token \
  -H "Content-Type: application/json" \
  -d '{"username": "admin", "password": "secret"}'

export TOKEN="eyJhbGciOiJIUzI1NiIs..."

curl -X POST http://localhost:8000/api/v1/chat \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"query": "Find SQL injection vulnerabilities", "scenario_id": "security"}'

curl http://localhost:8000/api/v1/scenarios \
  -H "Authorization: Bearer $TOKEN"

curl -X POST http://localhost:8000/api/v1/auth/api-keys \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{"name": "my-integration", "expires_days": 365}'

curl http://localhost:8000/api/v1/scenarios \
  -H "X-API-Key: rak_xxxxxxxxxxxxxxxxxxxx"

curl -X POST http://localhost:8000/api/v1/review/patch \
  -H "Authorization: Bearer $TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "patch_content": "diff --git a/src/file.c ...",
    "task_description": "Fix memory leak",
    "output_format": "json"
  }'

{
  "detail": "Error message here",
  "error_code": "VALIDATION_ERROR",
  "request_id": "req_abc123"
}