sourcecode 1.12.0__tar.gz → 1.16.0__tar.gz

sourcecode-1.16.0/.continue-here.md

@@ -0,0 +1,125 @@
+# Continue Here — atlas-cli v1.14.0 defect patch (saint-server)
+
+**Paused:** 2026-05-13  
+**Repo:** `/Users/user/Downloads/atlas-cli`  
+**Branch:** master
+
+---
+
+## Estado actual
+
+Sesión: patch de 15 defectos contra saint-server (Spring Boot 2.7 / Java 8 / 100 módulos DDD / 467 controllers). **Sin commit** (instrucción explícita: "no hagas commit"). 10 ficheros fuente modificados + 4 ficheros nuevos de test/fixtures.
+
+---
+
+## Defectos corregidos esta sesión
+
+### CRITICAL
+| ID | Fix | Fichero |
+|----|-----|---------|
+| C1 | `_extract_first_useful_paragraph()` rechaza snippets de startup via `_STARTUP_RE` (≥2 hits) | `summarizer.py` |
+| C2 | `_bootstrap_structured()` emite `modules` (todos los DDD modules) en vez de `sample` (5 primeros) | `serializer.py` |
+| C3 | `safe_read_text()` con fallback UTF-8→ISO-8859-1→UTF-8/replace — elimina double-encoding de chars españoles | `tree_utils.py` + 3 consumidores |
+| C4 | `_scan_java_patterns()` escanea Java para `@interface` + `extends`, emite `custom_annotations[]` + `base_classes[]` | `architecture_analyzer.py` + `schema.py` |
+
+### HIGH
+| ID | Fix | Fichero |
+|----|-----|---------|
+| H1 | `_spring_profiles_context()` → `{detected, per_profile_variants, note}` | `serializer.py` |
+| H2 | `_is_dto_mapper()` separa `@Mapper` reales de DtoMapper. Añade `dto_mappers[]`, elimina falsos positivos en `missing_xml` | `serializer.py` |
+| H3 | `_transactional_summary()` emite todas las clases; trunca a 10 con `truncated: true` + `note` | `serializer.py` |
+| H4 | `_TASK_CONTENT_MAP` per-task filter en prepare-context. Fix `review-pr` suspected_areas filtrado a root | `cli.py` + `prepare_context.py` |
+| H5 | Fallback `git log -n 100` cuando scan por fecha retorna 0. Nuevo campo `hotspot_method` | `git_analyzer.py` + `schema.py` |
+
+### MEDIUM
+| ID | Fix | Fichero |
+|----|-----|---------|
+| M1 | `_security_surface_from_eps()` añade campo `schema` descriptor. Mantiene `resource_names` (compat) | `serializer.py` |
+| M2 | `_jndi_datasources()` escanea `application.yml` / `persistence.xml` para JNDI names | `serializer.py` |
+| M3 | `_file_relevance()` scoring: +10 entry points, +8 base classes, +6 security config, +2 utils | `serializer.py` |
+| M4 | `--agent` auto-habilita `architecture = True` | `cli.py` |
+| M5 | Help `--compact` actualizado: "1000–3000 tokens" (era "600–800") | `cli.py` |
+
+### LOW
+| ID | Fix | Fichero |
+|----|-----|---------|
+| L1 | `analysis_gaps` expandido: ADRs missing, OpenAPI missing, profile YAMLs sin comentarios | `confidence_analyzer.py` |
+
+---
+
+## Ficheros modificados
+
+```
+src/sourcecode/architecture_analyzer.py   +147 líneas — C4
+src/sourcecode/cli.py                     +90 líneas  — H4, M4, M5
+src/sourcecode/code_notes_analyzer.py     +5 líneas   — C3
+src/sourcecode/confidence_analyzer.py     +54 líneas  — L1
+src/sourcecode/doc_analyzer.py            +4 líneas   — C3
+src/sourcecode/git_analyzer.py            +29 líneas  — H5
+src/sourcecode/schema.py                  +5 líneas   — C4, H5
+src/sourcecode/serializer.py              +245 líneas — C2, H1-H3, M1-M3
+src/sourcecode/summarizer.py              +26 líneas  — C1, C3
+src/sourcecode/tree_utils.py              +19 líneas  — C3 utility
+src/sourcecode/prepare_context.py         +5 líneas   — H4
+```
+
+### Ficheros nuevos
+```
+tests/test_encoding_regression.py         — 4 tests C3
+tests/test_task_differentiation.py        — 6 tests H4
+tests/fixtures/latin1_sample.java         — fixture UTF-8
+tests/fixtures/latin1_sample_iso.java     — fixture Latin-1
+```
+
+---
+
+## Tests
+
+- **743 passed, 3 skipped** — 0 regresiones
+- Fallos pre-existentes excluidos:
+  - `test_block2_coverage.py::test_java_marked_unsupported` — bug pre-existente en test (`name` vs `symbol`)
+  - `test_dependency_analyzer_node_python.py::test_python_requirements_without_lockfile_keeps_declared_versions` — versión fixture incorrecta
+  - `test_pipeline_integrity.py::TestBenchmarkContamination::test_agent_splits_development_and_auxiliary_eps` — pre-existente
+
+---
+
+## Pendientes para próxima sesión
+
+1. **Smoke test en saint-server real:**
+   ```bash
+   python3 run_cli.py /path/to/saint-server --compact --agent --git-context 2>/dev/null | python3 -c "
+   import json,sys; d=json.load(sys.stdin)
+   print('profiles:', d.get('spring_profiles'))
+   print('arch method:', d.get('architecture',{}).get('method'))
+   print('custom_annotations:', len(d.get('architecture',{}).get('custom_annotations',[])))
+   print('hotspot_method:', d.get('git_context',{}).get('hotspot_method'))
+   "
+   ```
+
+2. **Commit** cuando listo:
+   ```bash
+   git add src/sourcecode/ tests/test_encoding_regression.py tests/test_task_differentiation.py tests/fixtures/latin1_sample*.java
+   git commit -m "fix: 15 saint-server defects — C1-C4 critical, H1-H5 high, M1-M5 medium, L1 low"
+   ```
+
+3. **Pre-existing bugs** (no tocados):
+   - `_OPTIONAL_LABEL_MAP` en `architecture_summary.py` tiene valores en español
+   - `lombok` / `sqlite-jdbc` clasificados `role: runtime` incorrectamente
+   - `test_pipeline_integrity::test_agent_splits_development_and_auxiliary_eps` — `agent_view()` no emite `auxiliary_entry_points`
+
+---
+
+## Para retomar
+
+```bash
+cd /Users/user/Downloads/atlas-cli
+git diff --stat  # verificar 10 ficheros modificados
+python3 -m pytest tests/ \
+  --ignore=tests/test_block2_coverage.py \
+  --ignore=tests/test_dependency_analyzer_node_python.py \
+  --ignore=tests/test_pipeline_integrity.py -q
+# Expected: 743 passed, 3 skipped
+```
+
+---
+*Pausado 2026-05-13 — gsd:pause-work*

{sourcecode-1.12.0 → sourcecode-1.16.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 1.12.0
+Version: 1.16.0
 Summary: Deterministic codebase context for AI coding agents
 License:                                  Apache License
                                    Version 2.0, January 2004
@@ -219,115 +219,206 @@ Description-Content-Type: text/markdown
 
 # sourcecode
 
-**Deterministic codebase context for AI coding agents.**
+**Compressed AI-ready context for Java/Spring enterprise codebases.**
 
-![Version](https://img.shields.io/badge/version-1.0.0-blue)
-![Status](https://img.shields.io/badge/status-MVP-orange)
+![Version](https://img.shields.io/badge/version-1.16.0-blue)
 ![Python](https://img.shields.io/badge/python-3.10%2B-green)
 
 ---
 
 ## What is it?
 
-`sourcecode` analyzes a repository and produces a structured context map (JSON or YAML) designed to be consumed by AI agents or language models. It solves the "stuff the whole repo into the prompt" problem by instead producing a deterministic extract: entry points, dependencies, stacks, inline annotations, environment variables, and git activity. It is an MVP tool under active evolution — the semantic analysis and module graph features work but have known limitations that are explicitly documented below.
+`sourcecode` analyzes a repository and produces structured JSON or YAML designed to be fed directly to AI agents or language models. It solves the "stuff the whole repo into the prompt" problem by extracting a deterministic, high-signal summary: stack detection, entry points, dependencies, git hotspots, inline annotations, and confidence metadata.
+
+Optimized for Java/Spring Boot monorepos. Works on any codebase.
 
 ---
 
 ## Installation
 
-**Prerequisites:** Python 3.10+
+### Homebrew (macOS / Linux)
+
+```bash
+brew tap haroundominique/sourcecode
+brew install sourcecode
+```
+
+### pip / pipx
 
 ```bash
 pip install sourcecode
-# or with pipx for isolation:
+# or with isolation:
 pipx install sourcecode
 ```
 
-Verify installation:
+### Verify
 
 ```bash
 sourcecode version
-# sourcecode 1.0.0
+# sourcecode 1.16.0
 ```
 
 ---
 
 ## Quickstart
 
-The primary command — a high-signal, low-noise summary for Java/Spring codebases:
-
 ```bash
+# High-signal summary (~600-800 tokens) — recommended starting point
 sourcecode --compact
-# ~600-800 tokens: stack, entry points, dependencies, risk flags, confidence.
 
+# Add git hotspots and uncommitted file count
 sourcecode --compact --git-context
-# Adds git hotspots and uncommitted file count.
 
+# Analyze a specific path
+sourcecode /path/to/repo --compact
+
+# Copy result to clipboard
 sourcecode --compact --copy
-# Copies the result to clipboard.
+
+# Structured output for AI agents (identity, entry points, dependencies, confidence)
+sourcecode --agent
+
+# Only process git-modified files (forces compact output)
+sourcecode --changed-only
 ```
 
-Example output for a Spring Boot project:
+Example output for a Spring Boot project (`--compact`):
 
 ```json
 {
   "project_type": "api",
-  "stacks": [{ "stack": "java", "frameworks": ["Spring Boot", "MyBatis"] }],
+  "stacks": [{ "stack": "java", "detection_method": "manifest", "confidence": "high",
+               "primary": true, "frameworks": ["Spring Boot", "MyBatis"] }],
   "entry_points": {
     "bootstrap": ["src/main/java/io/spring/RealWorldApplication.java"],
-    "security": ["src/main/java/io/spring/api/security/WebSecurityConfig.java"],
-    "controllers": { "count": 8, "sample": [...] }
+    "security":  ["src/main/java/io/spring/api/security/WebSecurityConfig.java"],
+    "controllers": { "count": 8, "sample": ["src/main/java/io/spring/api/ArticleApi.java"] }
   },
   "key_dependencies": [
     { "name": "org.mybatis.spring.boot:mybatis-spring-boot-starter",
       "version": "2.2.2", "risk_flags": ["spring-boot-2.x-eol"] }
   ],
   "language_version": "11",
-  "deployment": { "spring_boot_version": "2.6.3" },
+  "deployment": { "spring_boot_version": "2.6.3", "packaging": "jar" },
   "mybatis": { "mapper_interfaces": 4, "xml_files": 4 },
-  "confidence_summary": { "overall": "high" }
+  "confidence_summary": { "overall": "high", "stack": "high", "entry_points": "high" }
 }
 ```
 
-For full structured output with per-file contracts and signals, use `--agent`:
+---
+
+## Flags reference
+
+| Flag | Alias | Default | Description |
+|------|-------|---------|-------------|
+| `--compact` | | off | **Recommended.** ~600-800 token summary: stack, entry points, dependencies, risk flags, confidence, gaps. Optimized for agent context windows. |
+| `--agent` | | off | Structured noise-free JSON for AI agents: identity, entry points, dependencies, confidence, gaps. Auto-enables dependency, env-var, and code-notes analysis. |
+| `--git-context` | `-g` | off | Include git activity: recent commits, change hotspots, and uncommitted changes. |
+| `--changed-only` | | off | Limit output to git-modified files (staged, unstaged, untracked). Forces compact output. |
+| `--depth` | | `4` | File tree traversal depth (1–20). Java/Maven projects auto-adjust to 12. |
+| `--format` | `-f` | `json` | Output format: `json` or `yaml`. |
+| `--output` | `-o` | stdout | Write output to a file instead of stdout. |
+| `--copy` | `-c` | off | Copy output to clipboard after a successful run. No-op when `--output` is set or clipboard is unavailable. |
+| `--no-redact` | | off | Disable automatic secret redaction. Output may contain sensitive values. |
+| `--version` | `-v` | — | Show version and exit. |
+
+---
+
+## `prepare-context` — task-specific context
+
+Generates a focused context bundle for a specific AI coding task. More targeted than `--compact`: each task re-ranks files according to its own signal priorities.
 
 ```bash
-sourcecode --agent
+sourcecode prepare-context TASK [PATH] [OPTIONS]
+```
+
+### Tasks
+
+| Task | What it surfaces | Primary use |
+|------|-----------------|-------------|
+| `explain` | Architecture, entry points, key dependencies | Onboarding an LLM to a new project |
+| `onboard` | Full structural context: entry points, architecture, key files, dependencies | New developer or agent joining the codebase |
+| `fix-bug` | Files ranked by risk (annotations, churn, uncommitted changes), suspected areas | Debugging session |
+| `refactor` | Structural problems, improvement opportunities, high-annotation files | Code quality review |
+| `generate-tests` | Source files without test pairs, coverage gap analysis | Writing missing tests |
+| `review-pr` | Uncommitted/changed files + architectural impact | Pre-merge review |
+| `delta` | Only files changed in a git range (`--since`), affected entry points | Incremental CI context |
+
+### Options
+
+| Option | Description |
+|--------|-------------|
+| `--since REF` | Git ref for `delta` task (e.g. `HEAD~3`, `main`, `v1.2.0`). Required for `delta`; ignored for other tasks. |
+| `--llm-prompt` | Append a ready-to-use LLM prompt to the output. |
+| `--dry-run` | Show what would be analyzed without running it. |
+| `--copy` / `-c` | Copy output to clipboard after a successful run. |
+| `--task-help` | List all tasks with descriptions and exit. |
+
+### Examples
+
+```bash
+# Explain the current repo
+sourcecode prepare-context explain
+
+# Analyze a specific repo path
+sourcecode prepare-context explain /path/to/repo
+
+# Focus on bug-prone files
+sourcecode prepare-context fix-bug
+
+# Incremental context: files changed since branch diverged from main
+sourcecode prepare-context delta . --since main
+
+# Onboard with a ready-to-paste LLM prompt
+sourcecode prepare-context onboard --llm-prompt
+
+# List all tasks
+sourcecode prepare-context --task-help
 ```
 
 ---
 
-## Flags reference
+## Output schema
+
+All outputs include a `confidence_summary` block with `overall`, `stack`, and `entry_points` confidence levels (`high` / `medium` / `low`), plus an `analysis_gaps` list describing what could not be analyzed and why.
+
+### Java/Spring-specific fields
+
+When a Java manifest (`pom.xml` or `build.gradle`) is detected, the output includes additional fields:
 
-### Global options
-
-| Flag | Alias | Type | Default | Description |
-|------|-------|------|---------|-------------|
-| `--compact` | | flag | off | **Recommended.** ~600-800 token summary: stack, entry points, deps, risk flags, confidence. |
-| `--git-context` | `-g` | flag | off | Adds git hotspots (top changed files), branch, uncommitted file count. Use with `--compact`. |
-| `--agent` | | flag | off | Full structured JSON for AI agents. Auto-enables dependency, env-var, and code-notes analysis. |
-| `--changed-only` | | flag | off | Limit output to git-modified files (staged, unstaged, untracked). |
-| `--depth` | | `INT [1–20]` | `4` | File tree traversal depth. Java projects auto-adjust to 12. |
-| `--format` | `-f` | `json\|yaml` | `json` | Output format. JSON preferred in pipelines. |
-| `--output` | `-o` | `PATH` | stdout | Write output to a file instead of stdout. |
-| `--copy` | `-c` | flag | off | Copy output to clipboard after a successful run. |
-| `--no-redact` | | flag | off | Disable automatic secret redaction. Output may contain sensitive values. |
-| `--version` | `-v` | flag | — | Show version and exit. |
+| Field | Description |
+|-------|-------------|
+| `language_version` | Java version from `maven.compiler.source` or equivalent |
+| `deployment.spring_boot_version` | Spring Boot version |
+| `deployment.packaging` | `jar` or `war` |
+| `deployment.app_server_hint` | `weblogic`, `wildfly`, etc. (when detectable) |
+| `security_surface.resource_names` | Values of `@M3FiltroSeguridad(nombreRecurso=...)` annotations across all controllers |
+| `mybatis` | Mapper interface / XML file pairing summary |
+| `transactional_boundaries` | Classes annotated with `@Transactional` |
+| `deployment_risks` | Static risk flags: `spring-boot-2.x-eol`, `legacy-java-runtime`, `legacy-app-server-deployment` |
 
 ---
 
-## Subcommands
+## Telemetry
 
-### `prepare-context TASK [PATH]`
+Anonymous, opt-in telemetry collects: version, OS, commands used, flags, duration, repo size range, and errors. No source code, paths, secrets, or output content is ever collected.
 
-Generates task-specific context for AI agents.
+```bash
+sourcecode telemetry status    # current setting
+sourcecode telemetry enable    # opt in
+sourcecode telemetry disable   # opt out (permanent)
+```
+
+Alternatively, set the environment variable:
+
+```bash
+export SOURCECODE_TELEMETRY=0
+```
 
-| Task | Description | Status |
-|------|-------------|--------|
-| `explain` | Architecture, entry points, key dependencies | ✅ CORE |
-| `fix-bug` | Files prioritized by risk, inline annotations | ✅ CORE |
-| `onboard` | Full context for new agents or developers | ✅ CORE |
-| `delta` | Incremental context: only files changed in git | ✅ CORE |
-| `refactor` | Structural problems, improvement opportunities | 🧪 EXP |
-| `generate-tests` | Files without tests, coverage gap analysis | 🧪 EXP |
-| `review-pr` | Changed files + architectural impact | 🧪 EXP |
+---
+
+## Configuration
+
+```bash
+sourcecode config    # show version, config file path, telemetry status
+```

sourcecode-1.16.0/README.md

@@ -0,0 +1,205 @@
+# sourcecode
+
+**Compressed AI-ready context for Java/Spring enterprise codebases.**
+
+![Version](https://img.shields.io/badge/version-1.16.0-blue)
+![Python](https://img.shields.io/badge/python-3.10%2B-green)
+
+---
+
+## What is it?
+
+`sourcecode` analyzes a repository and produces structured JSON or YAML designed to be fed directly to AI agents or language models. It solves the "stuff the whole repo into the prompt" problem by extracting a deterministic, high-signal summary: stack detection, entry points, dependencies, git hotspots, inline annotations, and confidence metadata.
+
+Optimized for Java/Spring Boot monorepos. Works on any codebase.
+
+---
+
+## Installation
+
+### Homebrew (macOS / Linux)
+
+```bash
+brew tap haroundominique/sourcecode
+brew install sourcecode
+```
+
+### pip / pipx
+
+```bash
+pip install sourcecode
+# or with isolation:
+pipx install sourcecode
+```
+
+### Verify
+
+```bash
+sourcecode version
+# sourcecode 1.16.0
+```
+
+---
+
+## Quickstart
+
+```bash
+# High-signal summary (~600-800 tokens) — recommended starting point
+sourcecode --compact
+
+# Add git hotspots and uncommitted file count
+sourcecode --compact --git-context
+
+# Analyze a specific path
+sourcecode /path/to/repo --compact
+
+# Copy result to clipboard
+sourcecode --compact --copy
+
+# Structured output for AI agents (identity, entry points, dependencies, confidence)
+sourcecode --agent
+
+# Only process git-modified files (forces compact output)
+sourcecode --changed-only
+```
+
+Example output for a Spring Boot project (`--compact`):
+
+```json
+{
+  "project_type": "api",
+  "stacks": [{ "stack": "java", "detection_method": "manifest", "confidence": "high",
+               "primary": true, "frameworks": ["Spring Boot", "MyBatis"] }],
+  "entry_points": {
+    "bootstrap": ["src/main/java/io/spring/RealWorldApplication.java"],
+    "security":  ["src/main/java/io/spring/api/security/WebSecurityConfig.java"],
+    "controllers": { "count": 8, "sample": ["src/main/java/io/spring/api/ArticleApi.java"] }
+  },
+  "key_dependencies": [
+    { "name": "org.mybatis.spring.boot:mybatis-spring-boot-starter",
+      "version": "2.2.2", "risk_flags": ["spring-boot-2.x-eol"] }
+  ],
+  "language_version": "11",
+  "deployment": { "spring_boot_version": "2.6.3", "packaging": "jar" },
+  "mybatis": { "mapper_interfaces": 4, "xml_files": 4 },
+  "confidence_summary": { "overall": "high", "stack": "high", "entry_points": "high" }
+}
+```
+
+---
+
+## Flags reference
+
+| Flag | Alias | Default | Description |
+|------|-------|---------|-------------|
+| `--compact` | | off | **Recommended.** ~600-800 token summary: stack, entry points, dependencies, risk flags, confidence, gaps. Optimized for agent context windows. |
+| `--agent` | | off | Structured noise-free JSON for AI agents: identity, entry points, dependencies, confidence, gaps. Auto-enables dependency, env-var, and code-notes analysis. |
+| `--git-context` | `-g` | off | Include git activity: recent commits, change hotspots, and uncommitted changes. |
+| `--changed-only` | | off | Limit output to git-modified files (staged, unstaged, untracked). Forces compact output. |
+| `--depth` | | `4` | File tree traversal depth (1–20). Java/Maven projects auto-adjust to 12. |
+| `--format` | `-f` | `json` | Output format: `json` or `yaml`. |
+| `--output` | `-o` | stdout | Write output to a file instead of stdout. |
+| `--copy` | `-c` | off | Copy output to clipboard after a successful run. No-op when `--output` is set or clipboard is unavailable. |
+| `--no-redact` | | off | Disable automatic secret redaction. Output may contain sensitive values. |
+| `--version` | `-v` | — | Show version and exit. |
+
+---
+
+## `prepare-context` — task-specific context
+
+Generates a focused context bundle for a specific AI coding task. More targeted than `--compact`: each task re-ranks files according to its own signal priorities.
+
+```bash
+sourcecode prepare-context TASK [PATH] [OPTIONS]
+```
+
+### Tasks
+
+| Task | What it surfaces | Primary use |
+|------|-----------------|-------------|
+| `explain` | Architecture, entry points, key dependencies | Onboarding an LLM to a new project |
+| `onboard` | Full structural context: entry points, architecture, key files, dependencies | New developer or agent joining the codebase |
+| `fix-bug` | Files ranked by risk (annotations, churn, uncommitted changes), suspected areas | Debugging session |
+| `refactor` | Structural problems, improvement opportunities, high-annotation files | Code quality review |
+| `generate-tests` | Source files without test pairs, coverage gap analysis | Writing missing tests |
+| `review-pr` | Uncommitted/changed files + architectural impact | Pre-merge review |
+| `delta` | Only files changed in a git range (`--since`), affected entry points | Incremental CI context |
+
+### Options
+
+| Option | Description |
+|--------|-------------|
+| `--since REF` | Git ref for `delta` task (e.g. `HEAD~3`, `main`, `v1.2.0`). Required for `delta`; ignored for other tasks. |
+| `--llm-prompt` | Append a ready-to-use LLM prompt to the output. |
+| `--dry-run` | Show what would be analyzed without running it. |
+| `--copy` / `-c` | Copy output to clipboard after a successful run. |
+| `--task-help` | List all tasks with descriptions and exit. |
+
+### Examples
+
+```bash
+# Explain the current repo
+sourcecode prepare-context explain
+
+# Analyze a specific repo path
+sourcecode prepare-context explain /path/to/repo
+
+# Focus on bug-prone files
+sourcecode prepare-context fix-bug
+
+# Incremental context: files changed since branch diverged from main
+sourcecode prepare-context delta . --since main
+
+# Onboard with a ready-to-paste LLM prompt
+sourcecode prepare-context onboard --llm-prompt
+
+# List all tasks
+sourcecode prepare-context --task-help
+```
+
+---
+
+## Output schema
+
+All outputs include a `confidence_summary` block with `overall`, `stack`, and `entry_points` confidence levels (`high` / `medium` / `low`), plus an `analysis_gaps` list describing what could not be analyzed and why.
+
+### Java/Spring-specific fields
+
+When a Java manifest (`pom.xml` or `build.gradle`) is detected, the output includes additional fields:
+
+| Field | Description |
+|-------|-------------|
+| `language_version` | Java version from `maven.compiler.source` or equivalent |
+| `deployment.spring_boot_version` | Spring Boot version |
+| `deployment.packaging` | `jar` or `war` |
+| `deployment.app_server_hint` | `weblogic`, `wildfly`, etc. (when detectable) |
+| `security_surface.resource_names` | Values of `@M3FiltroSeguridad(nombreRecurso=...)` annotations across all controllers |
+| `mybatis` | Mapper interface / XML file pairing summary |
+| `transactional_boundaries` | Classes annotated with `@Transactional` |
+| `deployment_risks` | Static risk flags: `spring-boot-2.x-eol`, `legacy-java-runtime`, `legacy-app-server-deployment` |
+
+---
+
+## Telemetry
+
+Anonymous, opt-in telemetry collects: version, OS, commands used, flags, duration, repo size range, and errors. No source code, paths, secrets, or output content is ever collected.
+
+```bash
+sourcecode telemetry status    # current setting
+sourcecode telemetry enable    # opt in
+sourcecode telemetry disable   # opt out (permanent)
+```
+
+Alternatively, set the environment variable:
+
+```bash
+export SOURCECODE_TELEMETRY=0
+```
+
+---
+
+## Configuration
+
+```bash
+sourcecode config    # show version, config file path, telemetry status
+```

{sourcecode-1.12.0 → sourcecode-1.16.0}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sourcecode"
-version = "1.12.0"
+version = "1.16.0"
 description = "Deterministic codebase context for AI coding agents"
 readme = "README.md"
 requires-python = ">=3.9"

{sourcecode-1.12.0 → sourcecode-1.16.0}/src/sourcecode/__init__.py

@@ -1,3 +1,3 @@
 """sourcecode — Deterministic codebase context maps for AI coding agents."""
 
-__version__ = "1.12.0"
+__version__ = "1.16.0"