fix: read __version__ from package metadata + bump to 0.1.0rc2

codegraph/__init__.py

@@ -1,3 +1,10 @@
 """codegraph — language-agnostic code graph for analysis, PR review, and AI assistants."""
+from importlib.metadata import PackageNotFoundError as _PackageNotFoundError
+from importlib.metadata import version as _version
 
-__version__ = "0.0.1"
+try:
+    __version__ = _version("polycodegraph")
+except _PackageNotFoundError:
+    # Source checkout without install (rare — `pip install -e .` registers
+    # the package and avoids this branch in normal dev setups).
+    __version__ = "0.0.0+local"

pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "polycodegraph"
-version = "0.1.0rc1"
+version = "0.1.0rc2"
 description = "Multi-language code graph builder, analyzer, PR risk reviewer, and MCP server. Supports Python, TypeScript, JavaScript, and Go."
 readme = "README.md"
 license = { text = "MIT" }

tests/test_cli_smoke.py

@@ -18,6 +18,18 @@ def test_version_flag() -> None:
     assert __version__ in result.stdout
 
 
+def test_version_matches_package_metadata() -> None:
+    """Regression: __version__ must auto-sync with pyproject via importlib.metadata.
+
+    Catches the failure mode where someone re-hardcodes the version string and
+    it drifts from the actual published wheel — which is exactly what bit us
+    pre-0.1.0rc2 (codegraph.__version__ was "0.0.1" while the published wheel
+    was "0.1.0rc1").
+    """
+    from importlib.metadata import version as _pkg_version
+    assert __version__ == _pkg_version("polycodegraph")
+
+
 def test_help_lists_subcommands() -> None:
     result = runner.invoke(app, ["--help"])
     assert result.exit_code == 0