Function _load_credentials

src/codegraphcontext/cli/main.py:297–530

Loads configuration and credentials from various sources into environment variables. Uses per-variable precedence - each variable is loaded from the highest priority source. Priority order (highest to lowest): 1. Runtime environment variables (shell/CI) 2. Local `.codegraphconte

(cli_context_flag: Optional[str] = None)

# ============================================================================

def _load_credentials(cli_context_flag: Optional[str] = None):
    """
    Loads configuration and credentials from various sources into environment variables.
    Uses per-variable precedence - each variable is loaded from the highest priority source.
    Priority order (highest to lowest):
    1. Runtime environment variables (shell/CI)
    2. Local `.codegraphcontext/.env` and `.env` in the current project directory (per-repo mode only)
    3. Global `~/.codegraphcontext/.env` (user defaults, including `cgc config set`)
    4. Local `mcp.json` env vars (project defaults)

    Duplicate loading is skipped when the local file resolves to the same path as the global file.
    Arbitrary parent directory `.env` files are not loaded—ensuring isolation.
    """
    from dotenv import dotenv_values
    from codegraphcontext.cli.config_manager import (
        ensure_config_dir,
        codegraphcontext_dotenv_at_cwd,
        normalize_config_path,
    )
    
    # Ensure config directory exists (lazy initialization)
    ensure_config_dir()
    
    # Snapshot runtime environment BEFORE merging config files.
    # These values must remain highest priority.
    runtime_env = dict(os.environ)

    # Collect all config sources in precedence order (lowest to highest)
    config_sources = []
    config_source_names = []
    key_source_map = {}
    key_defined_in = {}

    def _append_source(source_name: str, source_values: dict):
        if not source_values:
            return
        config_sources.append(source_values)
        config_source_names.append(source_name)
        for k, v in source_values.items():
            if v is None:
                continue
            key_source_map[k] = source_name
            key_defined_in.setdefault(k, []).append(source_name)

    # 4. Local mcp.json (lowest priority - project defaults)
    mcp_file_path = Path.cwd() / "mcp.json"
    if mcp_file_path.exists():
        try:
            with open(mcp_file_path, "r", encoding="utf-8", errors="replace") as f:
                mcp_config = json.load(f)
            server_env = mcp_config.get("mcpServers", {}).get("CodeGraphContext", {}).get("env", {})
            if isinstance(server_env, dict):
                normalized_env = {}
                for env_key, env_value in server_env.items():
                    if env_value is not None and "PATH" in env_key:
                        normalized_env[env_key] = normalize_config_path(str(env_value), absolute=True)
                    else:
                        normalized_env[env_key] = env_value