Swax

Swax is a tool for building traceability graphs of API endpoint dependencies from OpenAPI / Swagger specifications, using a two-pass LLM analysis. Given a spec repository, it infers which API paths depend on which other paths and persists the result as a deterministic graph.

Status: Alpha. The init, discover, and plan commands are the currently implemented surface.

📖 Documentation: https://qarium.github.io/swax/

• Python 3.10 or newer.
• An LLM provider reachable over HTTP (Anthropic- or OpenAI-compatible API).

python -m venv .venv && source .venv/bin/activate
pip install -e .            # runtime
pip install -e '.[test]'    # + pytest, ruff (contributors)
pip install -e '.[docs]'    # + mkdocs (documentation site)

This installs the swax console script (swax.cli.__main__:main).

Swax reads three environment variables for the LLM transport. Put them in a .env file (loaded via the --env-file option) or export them in your shell — shell values take precedence over the file:

swax --env-file .env init
swax --env-file .env discover
swax --env-file .env plan

--env-file defaults to .env; a missing file is silently ignored.

Interactively prompts for:

1. Repository URL — the git source of the specifications.
2. Path to specs inside the repo — the subdirectory to copy.
3. Local download path — where the specs land in the project.

It writes .swax/config.yml, shallow-clones the repository (depth=1), and copies the specs into the local download path. Failures exit with code 1 and a readable message (Failed to clone <url>: <reason>, Specs not found at <path>).

Rebuilds .swax/traceability.yml from scratch (no prompts; reads .swax/config.yml and the environment). It discovers and parses the local specs, runs a two-pass LLM analysis (an initial dependency-graph pass, then a schema-informed refine pass for the uncertain pairs), deduplicates the edges, and overwrites the traceability graph. Domain failures map to exit code 1 with messages such as Missing env vars: ..., Failed to parse <path>: <reason>, LLM rate limited; retry later, LLM call failed: <reason>, Unsupported LLM protocol: <protocol>, LLM response parse failed: <reason>.

Analyzes spec changes and prints a Markdown Impact Report to stdout (no prompts; reads .swax/config.yml, the environment, and .swax/traceability.yml produced by swax discover). It parses the local baseline specs, shallow-clones the spec repository fresh, classifies the endpoint diff (added / removed / modified), maps the changed endpoints onto the traceability graph to find transitively affected endpoints, and runs a single-turn LLM analysis. With no changes it skips the LLM and prints a LOW-risk "No changes detected" report. The report has Summary, Risk (HIGH / MEDIUM / LOW), Modified Endpoints, Affected Endpoints, Requirements, and Checklist sections. Domain failures map to exit code 1 with messages such as Missing env vars: ..., Failed to parse <path>: <reason>, Failed to clone <url>: <reason>, Specs directory not found at <path>, Traceability graph not found at <path> — run \swax discover` first, LLM rate limited; retry later, LLM call failed: , Unsupported LLM protocol: , LLM response parse failed: `.

.swax/
  config.yml          # written by `swax init`
  traceability.yml    # written by `swax discover`
<download_path>/      # the copied specifications

.swax/config.yml shape:

git:
  url: https://example.com/specs.git
  location: specs
specs:
  type: openapi        # openapi | swagger
  location: downloaded

pytest                       # full suite
ruff check swax tests        # lint
ruff format --check swax tests

BSD-3-Clause.