roam-code 12.12.2__tar.gz → 12.12.4__tar.gz

{roam_code-12.12.2/src/roam_code.egg-info → roam_code-12.12.4}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: roam-code
-Version: 12.12.2
+Version: 12.12.4
 Summary: Instant codebase comprehension for AI coding agents
 Author: CosmoHac
 License-Expression: MIT
@@ -327,7 +327,7 @@ roam health
 
 ## Commands
 
-**Lead with the 5 verbs.** The [5 core commands](#core-commands) cover ~80% of agent workflows: `understand`, `context`, `retrieve`, `preflight`, `critique`. The remaining 150 commands are detail surface for specialised workflows (taint, fleet, cga, oracle, eval, …) — they're called by agents on demand, not memorised. This is intentional design; under the hood the canonical surface is **155 commands organised into 7 categories**, but you don't need to know that to start.
+**Lead with the 5 verbs.** The [5 core commands](#core-commands) cover ~80% of agent workflows: `understand`, `context`, `retrieve`, `preflight`, `critique`. The remaining 150 commands are detail surface for specialised workflows (taint, fleet, cga, oracle, eval, …) — they're called by agents on demand, not memorised. This is intentional design; under the hood the canonical surface is **155 commands organised into 7 categories** (plus 6 aliases for muscle memory: `algo` → `math`, `weather` → `churn`, `digest` / `snapshot` / `trend` → `trends`, `onboard` → `understand`), but you don't need to know that to start.
 
 <details>
 <summary><strong>Full command reference</strong></summary>
@@ -1610,8 +1610,8 @@ roam-code/
 ├── action.yml                         # Reusable GitHub Action
 ├── src/roam/
 │   ├── __init__.py                    # Version (from pyproject.toml)
-│   ├── cli.py                         # Click CLI (152 commands)
-│   ├── mcp_server.py                  # MCP server (118 tools, 10 resources, 5 prompts)
+│   ├── cli.py                         # Click CLI (155 canonical + 6 aliases)
+│   ├── mcp_server.py                  # MCP server (122 tools, 10 resources, 5 prompts)
 │   ├── db/
 │   │   ├── connection.py              # SQLite (WAL, pragmas, batched IN)
 │   │   ├── schema.py                  # Tables, indexes, migrations
@@ -1705,7 +1705,7 @@ Optional: Local semantic ONNX stack (`numpy`, `onnxruntime`, `tokenizers`) via `
 ### Shipped
 
 - [x] MCP v2 agent surface: in-process execution, compound operations, presets, schemas, annotations, and compatibility profiles.
-- [x] Full command and MCP inventory parity in docs: 152 CLI commands and 118 MCP tools.
+- [x] Full command and MCP inventory parity in docs: 155 canonical CLI commands and 122 MCP tools.
 - [x] CI hardening: composite action, changed-only mode, trend-aware gates, sticky PR updater, and SARIF guardrails.
 - [x] Performance foundation: FTS5/BM25 search, O(changed) incremental indexing, DB/index optimizations.
 - [x] Agent governance suite: `vibe-check`, `ai-readiness`, `verify`, `ai-ratio`, `duplicates`, advanced `algo` scoring/SARIF.

{roam_code-12.12.2 → roam_code-12.12.4}/README.md

@@ -269,7 +269,7 @@ roam health
 
 ## Commands
 
-**Lead with the 5 verbs.** The [5 core commands](#core-commands) cover ~80% of agent workflows: `understand`, `context`, `retrieve`, `preflight`, `critique`. The remaining 150 commands are detail surface for specialised workflows (taint, fleet, cga, oracle, eval, …) — they're called by agents on demand, not memorised. This is intentional design; under the hood the canonical surface is **155 commands organised into 7 categories**, but you don't need to know that to start.
+**Lead with the 5 verbs.** The [5 core commands](#core-commands) cover ~80% of agent workflows: `understand`, `context`, `retrieve`, `preflight`, `critique`. The remaining 150 commands are detail surface for specialised workflows (taint, fleet, cga, oracle, eval, …) — they're called by agents on demand, not memorised. This is intentional design; under the hood the canonical surface is **155 commands organised into 7 categories** (plus 6 aliases for muscle memory: `algo` → `math`, `weather` → `churn`, `digest` / `snapshot` / `trend` → `trends`, `onboard` → `understand`), but you don't need to know that to start.
 
 <details>
 <summary><strong>Full command reference</strong></summary>
@@ -1552,8 +1552,8 @@ roam-code/
 ├── action.yml                         # Reusable GitHub Action
 ├── src/roam/
 │   ├── __init__.py                    # Version (from pyproject.toml)
-│   ├── cli.py                         # Click CLI (152 commands)
-│   ├── mcp_server.py                  # MCP server (118 tools, 10 resources, 5 prompts)
+│   ├── cli.py                         # Click CLI (155 canonical + 6 aliases)
+│   ├── mcp_server.py                  # MCP server (122 tools, 10 resources, 5 prompts)
 │   ├── db/
 │   │   ├── connection.py              # SQLite (WAL, pragmas, batched IN)
 │   │   ├── schema.py                  # Tables, indexes, migrations
@@ -1647,7 +1647,7 @@ Optional: Local semantic ONNX stack (`numpy`, `onnxruntime`, `tokenizers`) via `
 ### Shipped
 
 - [x] MCP v2 agent surface: in-process execution, compound operations, presets, schemas, annotations, and compatibility profiles.
-- [x] Full command and MCP inventory parity in docs: 152 CLI commands and 118 MCP tools.
+- [x] Full command and MCP inventory parity in docs: 155 canonical CLI commands and 122 MCP tools.
 - [x] CI hardening: composite action, changed-only mode, trend-aware gates, sticky PR updater, and SARIF guardrails.
 - [x] Performance foundation: FTS5/BM25 search, O(changed) incremental indexing, DB/index optimizations.
 - [x] Agent governance suite: `vibe-check`, `ai-readiness`, `verify`, `ai-ratio`, `duplicates`, advanced `algo` scoring/SARIF.

{roam_code-12.12.2 → roam_code-12.12.4}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "setuptools.build_meta"
 
 [project]
 name = "roam-code"
-version = "12.12.2"
+version = "12.12.4"
 description = "Instant codebase comprehension for AI coding agents"
 readme = "README.md"
 requires-python = ">=3.9"

{roam_code-12.12.2 → roam_code-12.12.4}/src/roam/competitor_site_data.py

@@ -1364,7 +1364,7 @@ MAP_METADATA: dict[str, dict[str, object]] = {
         "peer": True,
         "graph": "PageRank + Tarjan + Louvain + layers",
         "note": "Graph algorithms (PageRank, SCC, Louvain, Fiedler) on tree-sitter ASTs fused with git history in SQLite. 122 MCP tools, 155 CLI commands. 19 Python idiom detectors (v12.7+).",
-        "version_evaluated": "12.12.2",
+        "version_evaluated": "12.12.4",
         "repo_url": "https://github.com/Cranot/roam-code",
     },
     "CKB/CodeMCP": {

{roam_code-12.12.2 → roam_code-12.12.4}/src/roam/mcp-server-card.json

@@ -2,7 +2,7 @@
   "$schema": "https://schemas.modelcontextprotocol.io/server-card/v1",
   "name": "roam-code",
   "display_name": "roam — instant codebase intelligence",
-  "version": "12.12.2",
+  "version": "12.12.4",
   "description": "Architectural sight for AI agents before they edit. Pre-indexes symbols, call graphs, dependencies, architecture layers, and git history into a local SQLite DB. 122 MCP tools, 10 resources, 5 prompts, 27 languages. 100% local, zero API keys.",
   "vendor": {
     "name": "Cranot",
@@ -51,15 +51,15 @@
   },
   "capabilities": {
     "tools": {
-      "total": 120,
+      "total": 122,
       "presets": {
-        "core": 33,
+        "core": 35,
         "review": 50,
         "refactor": 60,
         "debug": 55,
         "architecture": 70,
         "compliance": 14,
-        "full": 120
+        "full": 122
       },
       "tasks_api": {
         "supported": true,

{roam_code-12.12.2 → roam_code-12.12.4}/src/roam/mcp_server.py

@@ -2250,6 +2250,7 @@ def retrieve_context(
     k: int = 0,
     rerank: str = "fast",
     seed_files: str = "",
+    dry_run: bool = False,
     root: str = ".",
     ctx: _Context | None = None,
 ) -> dict:
@@ -2281,6 +2282,15 @@ def retrieve_context(
     seed_files: comma-separated file paths to seed personalised PageRank
         (e.g. ``"src/auth.py,src/session.py"``). Falls back to
         symbol-token inference from *task* when empty.
+    dry_run: return the search plan (candidate ids, scores, locations)
+        without fetching span content. Useful when an agent wants to
+        preview what *would* be retrieved before paying the token cost.
+
+    The response's ``summary.low_confidence`` boolean is True when
+    the top result probably doesn't match the task — branch on this
+    to ask the user for clarification rather than chasing a likely
+    red herring. (v12.12: this was previously only available by
+    parsing the verdict string.)
     """
     if _mcp_session is not None:
         _mcp_session.remember_task_hint(ctx, task)
@@ -2303,6 +2313,8 @@ def retrieve_context(
         path = raw.strip()
         if path:
             args.extend(["--seed-files", path])
+    if dry_run:
+        args.append("--dry-run")
     return _run_roam(args, root)
 
 
@@ -2356,6 +2368,7 @@ def fleet_plan(
 def critique_patch(
     diff_text: str,
     high_callers: int = 10,
+    intent: str = "",
     root: str = ".",
 ) -> dict:
     """Verify a unified diff against the indexed roam graph.
@@ -2371,6 +2384,12 @@ def critique_patch(
     (which produces a vibe score). Critique grounds every finding in a
     DB query.
 
+    The response carries ``bench_hint`` at top level and inside
+    ``summary`` when the diff touches a structurally hot path
+    (retrieve/, graph/, languages/, taint, critique). Branch on this
+    field to suggest the right validation step alongside the standard
+    findings.
+
     Parameters
     ----------
     diff_text:
@@ -2378,6 +2397,11 @@ def critique_patch(
         ``gh pr diff <id>``.
     high_callers:
         Threshold for the blast-radius warning. Default 10.
+    intent:
+        Optional PR title or commit subject. When supplied, the
+        intent-vs-semantic-diff check fires (a rename intent that
+        produces non-rename changes flags as misalignment). Falls
+        back to the latest git commit subject when empty.
     """
     import json as _json
     import subprocess
@@ -2415,6 +2439,8 @@ def critique_patch(
     args = [sys.executable, "-m", "roam", "--json", "critique"]
     if high_callers != 10:
         args += ["--high-callers", str(high_callers)]
+    if intent:
+        args += ["--intent", intent]
     proc = subprocess.run(
         args,
         cwd=root,
@@ -2693,6 +2719,7 @@ def oracle_batch(items: list, root: str = ".") -> dict:
 def taint(
     rules_dir: str = "",
     rule: str = "",
+    rules_pack: str = "",
     ci: bool = False,
     root: str = ".",
 ) -> dict:
@@ -2702,12 +2729,22 @@ def taint(
     the LLM-augmented ``roam_taint_classify``. Returns reach-only
     findings with OpenVEX-shaped status/justification fields ready for
     SBOM/CGA embedding.
+
+    Parameters
+    ----------
+    rules_pack: shorthand for filtering to a single starter pack.
+        Accepts ``sqli``, ``xss``, ``ssrf``, ``path-traversal``,
+        ``command-injection``, ``deserialization``, ``open-redirect``,
+        ``urllib``, ``socketio``, ``fileupload``. Equivalent to
+        passing ``--rules-pack`` on the CLI.
     """
     args = ["taint"]
     if rules_dir:
         args.extend(["--rules-dir", rules_dir])
     if rule:
         args.extend(["--rule", rule])
+    if rules_pack:
+        args.extend(["--rules-pack", rules_pack])
     if ci:
         args.append("--ci")
     return _run_roam(args, root)

{roam_code-12.12.2 → roam_code-12.12.4/src/roam_code.egg-info}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: roam-code
-Version: 12.12.2
+Version: 12.12.4
 Summary: Instant codebase comprehension for AI coding agents
 Author: CosmoHac
 License-Expression: MIT
@@ -327,7 +327,7 @@ roam health
 
 ## Commands
 
-**Lead with the 5 verbs.** The [5 core commands](#core-commands) cover ~80% of agent workflows: `understand`, `context`, `retrieve`, `preflight`, `critique`. The remaining 150 commands are detail surface for specialised workflows (taint, fleet, cga, oracle, eval, …) — they're called by agents on demand, not memorised. This is intentional design; under the hood the canonical surface is **155 commands organised into 7 categories**, but you don't need to know that to start.
+**Lead with the 5 verbs.** The [5 core commands](#core-commands) cover ~80% of agent workflows: `understand`, `context`, `retrieve`, `preflight`, `critique`. The remaining 150 commands are detail surface for specialised workflows (taint, fleet, cga, oracle, eval, …) — they're called by agents on demand, not memorised. This is intentional design; under the hood the canonical surface is **155 commands organised into 7 categories** (plus 6 aliases for muscle memory: `algo` → `math`, `weather` → `churn`, `digest` / `snapshot` / `trend` → `trends`, `onboard` → `understand`), but you don't need to know that to start.
 
 <details>
 <summary><strong>Full command reference</strong></summary>
@@ -1610,8 +1610,8 @@ roam-code/
 ├── action.yml                         # Reusable GitHub Action
 ├── src/roam/
 │   ├── __init__.py                    # Version (from pyproject.toml)
-│   ├── cli.py                         # Click CLI (152 commands)
-│   ├── mcp_server.py                  # MCP server (118 tools, 10 resources, 5 prompts)
+│   ├── cli.py                         # Click CLI (155 canonical + 6 aliases)
+│   ├── mcp_server.py                  # MCP server (122 tools, 10 resources, 5 prompts)
 │   ├── db/
 │   │   ├── connection.py              # SQLite (WAL, pragmas, batched IN)
 │   │   ├── schema.py                  # Tables, indexes, migrations
@@ -1705,7 +1705,7 @@ Optional: Local semantic ONNX stack (`numpy`, `onnxruntime`, `tokenizers`) via `
 ### Shipped
 
 - [x] MCP v2 agent surface: in-process execution, compound operations, presets, schemas, annotations, and compatibility profiles.
-- [x] Full command and MCP inventory parity in docs: 152 CLI commands and 118 MCP tools.
+- [x] Full command and MCP inventory parity in docs: 155 canonical CLI commands and 122 MCP tools.
 - [x] CI hardening: composite action, changed-only mode, trend-aware gates, sticky PR updater, and SARIF guardrails.
 - [x] Performance foundation: FTS5/BM25 search, O(changed) incremental indexing, DB/index optimizations.
 - [x] Agent governance suite: `vibe-check`, `ai-readiness`, `verify`, `ai-ratio`, `duplicates`, advanced `algo` scoring/SARIF.

{roam_code-12.12.2 → roam_code-12.12.4}/tests/test_doc_consistency.py

@@ -204,6 +204,33 @@ class TestVersionConsistency:
             "re-copy after editing either file."
         )
 
+    def test_card_tool_count_matches_live_count(self):
+        """v12.12.4 — the card's ``capabilities.tools.total`` must
+        match the live MCP tool count from ``surface_counts``. The
+        card had been at 120 with 33-tool ``core`` preset for several
+        releases while the live numbers had grown to 122 / 35.
+        """
+        try:
+            from roam.surface_counts import collect_surface_counts
+        except ImportError:
+            pytest.skip("surface_counts unavailable")
+        live = collect_surface_counts()
+        card = json.loads((ROOT / "docs" / "site" / ".well-known" / "mcp-server-card.json").read_text(encoding="utf-8"))
+        live_total = live["mcp"]["registered_tools"]
+        live_core = live["mcp"]["core_tools"]
+        card_total = card["capabilities"]["tools"]["total"]
+        card_core = card["capabilities"]["tools"]["presets"]["core"]
+        card_full = card["capabilities"]["tools"]["presets"]["full"]
+        assert card_total == live_total, (
+            f"card capabilities.tools.total = {card_total} but live MCP tool count = {live_total}"
+        )
+        assert card_core == live_core, (
+            f"card capabilities.tools.presets.core = {card_core} but live core preset count = {live_core}"
+        )
+        assert card_full == live_total, (
+            f"card capabilities.tools.presets.full = {card_full} but live total = {live_total}"
+        )
+
     def test_landscape_json_self_row_version_matches(self):
         """The roam-code row in landscape.json should show the current
         package version (or a recent nearby tag)."""

{roam_code-12.12.2 → roam_code-12.12.4}/tests/test_json_contracts.py

@@ -120,11 +120,14 @@ COMMAND_ARGS = {
 FRAGILE_COMMANDS = {
     "affected-tests",  # needs staged changes or a target with test coverage
     "coverage-gaps",  # needs test file mapping
-    "dead",  # summary envelope misses 'verdict' on the minimal fixture
     "deps",  # symbol resolution against minimal `models`/`service`/`utils`
     "diff",  # needs uncommitted changes
     "pr-risk",  # needs uncommitted changes or PR context
     "report",  # may need specific report config or flags
+    # ``dead`` was xfailed in v11.x because its summary envelope was
+    # missing ``verdict``. v12.x added the verdict field; --runxfail
+    # confirms all four parametrized tests pass on the minimal
+    # fixture. Removed from the fragile set in v12.12.2.
 }