feat(neo4j): project analysis.json into a Neo4j property graph

Port the codeanalyzer-typescript v0.4.0 Neo4j feature to Python under the
neo4j feature branch, with the same CLI arg entrypoints.

- codeanalyzer/neo4j: catalog (schema source of truth), project (pure IR ->
  graph rows), cypher snapshot writer, incremental Bolt writer, and the
  output-agnostic rows intermediate. Lazy neo4j-driver import keeps it off the
  default json path.
- CLI: --emit {json,neo4j,schema}, --app-name, --neo4j-uri/-user/-password/
  -database; -i/--input now optional for --emit schema.
- --emit neo4j writes a self-contained graph.cypher, or pushes incrementally to
  a live Neo4j over Bolt; --emit schema emits the version-stamped schema.json
  contract (checked in as schema.neo4j.json).
- Tests: schema-conformance (always runs, anti-drift guard) + opt-in Neo4j
  Testcontainers bolt integration test (RUN_CONTAINER_TESTS=1).
- packaging/install/codeanalyzer-installer.sh: curl|sh installer (uv/pipx/pip).
- release.yml: sync schema.neo4j.json + publish schema.json and installer as
  release assets. README/CHANGELOG updates; schema-uml.drawio. Version 0.2.0.

Author: rahlk

.github/workflows/release.yml

@@ -32,7 +32,24 @@ jobs:
         run: uv sync --all-groups
 
       - name: Install dependencies
-        run: uv pip install -e .
+        run: uv pip install -e ".[neo4j]"
+
+      # Keep the checked-in Neo4j schema contract in lockstep with the code being
+      # released: regenerate schema.neo4j.json from source and commit it back to main.
+      # Releases are cut from main HEAD, so this fast-forwards; best-effort if main moved.
+      - name: Sync Neo4j schema contract (schema.neo4j.json)
+        if: startsWith(github.ref, 'refs/tags/')
+        run: |
+          uv run codeanalyzer --emit schema > schema.neo4j.json
+          if git diff --quiet schema.neo4j.json; then
+            echo "Neo4j schema already current."
+          else
+            git config user.name "github-actions[bot]"
+            git config user.email "github-actions[bot]@users.noreply.github.com"
+            git add schema.neo4j.json
+            git commit -m "docs: sync Neo4j schema contract for ${GITHUB_REF#refs/tags/}"
+            git push origin HEAD:main || echo "::warning::could not push schema sync to main (diverged?)"
+          fi
 
       - name: Run tests
         id: test
@@ -51,6 +68,17 @@ jobs:
       - name: Build package
         run: uv build
 
+      # Platform-independent, version-locked release assets published alongside the
+      # wheels/sdist: the Neo4j schema contract (so a consumer can validate
+      # producer/consumer compatibility without installing the package) and the
+      # cargo-dist-style install script.
+      - name: Stage release assets (Neo4j schema + installer script)
+        run: |
+          mkdir -p release-assets
+          uv run codeanalyzer --emit schema > release-assets/schema.json
+          cp packaging/install/codeanalyzer-installer.sh release-assets/codeanalyzer-installer.sh
+          ls -lh release-assets
+
       - name: Get version from tag
         id: tag_name
         run: |
@@ -77,7 +105,9 @@ jobs:
       - name: Publish release on GitHub
         uses: softprops/action-gh-release@v1
         with:
-          files: dist/*
+          files: |
+            dist/*
+            release-assets/*
           body: |
             ## Release Notes (from CHANGELOG.md)
             

CHANGELOG.md

@@ -5,6 +5,23 @@ All notable changes to this project will be documented in this file.
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
+## [0.2.0] - 2026-06-20
+
+### Added
+- **Neo4j property-graph output** (`--emit neo4j`). The same in-memory analysis (`PyApplication`) is projected to a labeled property graph, mirroring the `codeanalyzer-typescript` backend. Two writers:
+  - **`graph.cypher` snapshot** (default) — a self-contained Cypher script (constraints + indexes, a scoped wipe of the project's prior subgraph, then batched `UNWIND … MERGE`). Load it with `cypher-shell < graph.cypher`. Needs no extra dependencies.
+  - **Live Bolt push** (`--neo4j-uri`) — an **incremental** writer: only modules whose `content_hash` changed are rewritten, and on a full run modules whose source file vanished are pruned. Requires the optional `neo4j` driver (`pip install 'codeanalyzer-python[neo4j]'`).
+- **`--emit schema`** — emit the machine-readable, version-stamped Neo4j schema contract (`schema.json`: node labels, relationships, properties, constraints, indexes). Needs no project; bundled in every release as a GitHub Release asset and checked in as `schema.neo4j.json`. A `schema_version` (`1.0.0`) is stamped onto every graph's `:Application` node.
+- **New CLI options** mirroring the TypeScript analyzer's entrypoints: `--emit {json,neo4j,schema}`, `--app-name`, `--neo4j-uri`, `--neo4j-user`, `--neo4j-password`, `--neo4j-database`. `-i/--input` is now optional (not required for `--emit schema`).
+- **`codeanalyzer.neo4j`** package: `catalog` (the single source-of-truth schema catalog), `project` (pure IR → graph rows), `cypher` (snapshot writer), `bolt` (incremental writer), and `rows` (the output-agnostic intermediate).
+- **Schema conformance test** (`test/test_neo4j_schema.py`, always runs) — asserts the emitter never produces a label/relationship/property the catalog doesn't declare, and that the checked-in `schema.neo4j.json` is regenerated.
+- **Neo4j Testcontainers integration test** (`test/test_neo4j_bolt.py`, opt-in via `RUN_CONTAINER_TESTS=1`) — spins up a real Neo4j and asserts the pushed graph, idempotent re-push, vanished-declaration cleanup, and full-run orphan pruning.
+- **Install script** (`packaging/install/codeanalyzer-installer.sh`) — a `curl … | sh` installer that provisions the CLI via uv / pipx / pip, published as a release asset.
+- **`schema-uml.drawio`** — a clean UML of the `analysis.json` schema (the `PyApplication` containment tree).
+
+### Changed
+- The release workflow now installs the `[neo4j]` extra, syncs `schema.neo4j.json` from source before publishing, and uploads the schema contract (`schema.json`) and installer script as GitHub Release assets.
+
 ## [0.1.15] - 2026-05-15
 
 ### Fixed