fix: resolve CI failures — mypy, ruff, bandit, schema-sync

- Fix store.conn → store._conn in context.py (mypy)
- Remove unused full_build/incremental_update imports in cli.py (ruff F401)
- Sort imports in graph.py, main.py, tools/__init__.py (ruff I001)
- Fix E402 module-level import order in graph.py
- Add nosec B105 to _TOKEN_EFFICIENCY_PREAMBLE (bandit false positive)
- Bump VS Code extension SUPPORTED_SCHEMA_VERSION 5 → 6 (schema-sync)

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: tirth8205

code-review-graph-vscode/src/backend/sqlite.ts

@@ -208,7 +208,7 @@ export class SqliteReader {
         if (row) {
           const version = parseInt(row.value, 10);
           // Must match LATEST_VERSION in code_review_graph/migrations.py
-          const SUPPORTED_SCHEMA_VERSION = 5;
+          const SUPPORTED_SCHEMA_VERSION = 6;
           if (!isNaN(version) && version > SUPPORTED_SCHEMA_VERSION) {
             return `Database was created with a newer version (schema v${version}). Update the extension.`;
           }

code_review_graph/cli.py

@@ -429,9 +429,7 @@ def main() -> None:
     from .incremental import (
         find_project_root,
         find_repo_root,
-        full_build,
         get_db_path,
-        incremental_update,
         watch,
     )
 

code_review_graph/graph.py

@@ -8,22 +8,21 @@
 from __future__ import annotations
 
 import json
+import logging
 import sqlite3
 import threading
 import time
 from dataclasses import dataclass
 from pathlib import Path
 from typing import Any, Optional
 
-import logging
-
 import networkx as nx
 
 from .constants import BFS_ENGINE, MAX_IMPACT_DEPTH, MAX_IMPACT_NODES
 from .migrations import get_schema_version, run_migrations
+from .parser import EdgeInfo, NodeInfo
 
 logger = logging.getLogger(__name__)
-from .parser import EdgeInfo, NodeInfo
 
 # ---------------------------------------------------------------------------
 # Schema

code_review_graph/main.py

@@ -21,8 +21,6 @@
     apply_refactor_func,
     build_or_update_graph,
     cross_repo_search_func,
-    get_minimal_context,
-    run_postprocess,
     detect_changes_func,
     embed_graph,
     find_large_functions,
@@ -33,6 +31,7 @@
     get_docs_section,
     get_flow,
     get_impact_radius,
+    get_minimal_context,
     get_review_context,
     get_wiki_page_func,
     list_communities_func,
@@ -41,6 +40,7 @@
     list_repos_func,
     query_graph,
     refactor_func,
+    run_postprocess,
     semantic_search_nodes,
 )
 

code_review_graph/prompts.py

@@ -12,7 +12,8 @@
 
 from __future__ import annotations
 
-_TOKEN_EFFICIENCY_PREAMBLE = """\
+_TOKEN_EFFICIENCY_PREAMBLE = (  # nosec B105 — prompt template, not a password
+    """\
 ## Rules for Token-Efficient Graph Usage
 1. ALWAYS call `get_minimal_context` first with a task description.
 2. Use `detail_level="minimal"` on all tool calls unless the minimal output \
@@ -25,6 +26,7 @@
 6. When reviewing changes: detect_changes(detail_level="minimal") → only \
 expand on high-risk items.
 """
+)
 
 
 def review_changes_prompt(base: str = "HEAD~1") -> list[dict]:

code_review_graph/tools/__init__.py

@@ -46,16 +46,16 @@
 # -- build ------------------------------------------------------------------
 from .build import build_or_update_graph, run_postprocess
 
-# -- context ----------------------------------------------------------------
-from .context import get_minimal_context
-
 # -- community_tools --------------------------------------------------------
 from .community_tools import (
     get_architecture_overview_func,
     get_community_func,
     list_communities_func,
 )
 
+# -- context ----------------------------------------------------------------
+from .context import get_minimal_context
+
 # -- docs -------------------------------------------------------------------
 from .docs import embed_graph, generate_wiki_func, get_docs_section, get_wiki_page_func
 

code_review_graph/tools/context.py

@@ -91,21 +91,21 @@ def get_minimal_context(
         # 3. Top 3 communities
         communities: list[str] = []
         try:
-            rows = store.conn.execute(
+            rows = store._conn.execute(
                 "SELECT name FROM communities ORDER BY size DESC LIMIT 3"
             ).fetchall()
             communities = [r[0] for r in rows]
-        except Exception:
+        except Exception:  # nosec B110 — table may not exist yet
             pass
 
         # 4. Top 3 critical flows
         flows: list[str] = []
         try:
-            rows = store.conn.execute(
+            rows = store._conn.execute(
                 "SELECT name FROM flows ORDER BY criticality DESC LIMIT 3"
             ).fetchall()
             flows = [r[0] for r in rows]
-        except Exception:
+        except Exception:  # nosec B110 — table may not exist yet
             pass
 
         # 5. Suggest next tools based on task keywords