sourcecode 1.31.14__tar.gz → 1.31.16__tar.gz

sourcecode-1.31.16/.continue-here.md

@@ -0,0 +1,108 @@
+# Continue Here — atlas-cli sesión 19
+
+**Paused:** 2026-05-24
+**Repo:** `/Users/user/Documents/workspace/atlas-cli`
+**Branch:** master
+**Working tree:** 4 archivos modificados + 3 nuevos (sin commitear)
+
+---
+
+## Objetivo de esta sesión
+
+Auditoría adversarial real de `sourcecode` contra repos enterprise Java (Keycloak + BroadleafCommerce). Validar credibilidad, encontrar bugs reales, actualizar documentación.
+
+---
+
+## Trabajo completado esta sesión
+
+### Sesión 18 (pendiente de commit)
+
+**P1 — compute_blast_radius** (`repository_ir.py`):
+- Campos nuevos: `mappers_affected`, `security_surface_affected`, `cross_module_impact`, `confidence_score/level`, `explanation`, `candidates`
+- Risk formula: mapper ×1.5, security ×2.0, module ×1.0
+- Mapper filter: class-level only (no `#`)
+
+**P1 — CLI top-level workflows** (`cli.py`):
+- `sourcecode onboard`, `review-pr`, `fix-bug`, `modernize` como comandos top-level
+- `ctx.invoke()` → `prepare_context_cmd`. `_SUBCOMMANDS` actualizado. Tier labels en `--help`.
+
+**P1 — Benchmarks** (`tests/test_enterprise_benchmarks.py`):
+- +72 tests (46→118). Fixture `mybatis_heavy_repo`. **1466 passed, 3 skipped.**
+
+### Sesión 19 (nueva, pendiente de commit)
+
+**Auditoría real adversarial** → `AUDIT_REAL_REPOS.md`:
+- Keycloak (6363 clases) + BroadleafCommerce (2970 clases)
+- 7 bugs encontrados (2 P1, 5 P2)
+- Performance medido, recall medido, architecture accuracy verificada
+
+**README reescrito** basado en evidencia real:
+- Token counts honestos (2000-4000), benchmark table real, limitaciones documentadas, `@M3FiltroSeguridad` eliminado
+
+---
+
+## Bugs encontrados (auditoría)
+
+| # | Sev | Bug | Fix location |
+|---|---|---|---|
+| BUG-01 | **P1** | `impact <Impl>`: métodos propios como "direct callers" → risk=HIGH falso | `repository_ir.py` `compute_blast_radius` — filtrar `contained_in` |
+| BUG-02 | **P1** | BFS collapse: `KeycloakSession --depth 4` = 91s | `compute_blast_radius` — hub-class guard: `if callers>500 and depth>1: depth=1` |
+| BUG-03 | P2 | Test stem: `RedirectUtils` ≠ `RedirectUtilsTest` → false positive | `prepare_context.py:1315` — `.removesuffix("Test").removesuffix("IT")` |
+| BUG-04 | P2 | `bounded_contexts: ["keycloak","keycloak","keycloak"]` duplicados | serialización architecture — `list(dict.fromkeys(...))` |
+| BUG-05 | P2 | `modernize` recomienda "Start with hotspot_candidates" cuando lista vacía | `cli.py` modernize_cmd — recommendation condicional |
+| BUG-06 | P2 | `--format` rechazado por subcommands (`endpoints`, `repo-ir`, etc.) | documentar como main-only o añadir a subcommands |
+| BUG-07 | P2 | `--compact` overall=`high` cuando architecture=`low`; `--agent` dice `medium` | alinear lógica de downgrade |
+
+---
+
+## Estado archivos sin commitear
+
+```
+M  src/sourcecode/cli.py               (+354)
+M  src/sourcecode/repository_ir.py     (+257)
+M  tests/test_enterprise_benchmarks.py (+759)
+M  README.md                           (reescrito)
+?? AUDIT_REAL_REPOS.md
+?? docs/PRODUCT_TIERS.md
+```
+
+Tests: **1466 passed, 3 skipped** ✅
+
+---
+
+## Primera acción al retomar
+
+```bash
+cd /Users/user/Documents/workspace/atlas-cli
+
+# 1. Verificar tests
+python3 -m pytest tests/ -q 2>&1 | tail -3
+
+# 2. Commitear sesiones 18+19
+git add src/sourcecode/cli.py \
+        src/sourcecode/repository_ir.py \
+        tests/test_enterprise_benchmarks.py \
+        README.md \
+        docs/PRODUCT_TIERS.md \
+        AUDIT_REAL_REPOS.md
+git commit
+# Mensaje preparado:
+# feat(impact,workflows,benchmarks): monetizable change-impact layer + enterprise workflows
+# (ver mensaje completo en sesión 19)
+
+# 3. Fijar BUG-01 (P1) — mayor ROI de credibilidad
+#    repository_ir.py: compute_blast_radius
+#    Filtrar: direct_callers = [c for c in callers if not c.startswith(f"{target}#")]
+```
+
+## Próximas acciones por ROI
+
+1. **BUG-01** — fix impl self-callers (30 min) → credibilidad inmediata
+2. **BUG-02** — hub-class BFS guard (20 min) → performance fix crítico
+3. **BUG-03** — test stem matching (15 min) → false positive en PR review
+4. **BUG-04 + BUG-05** — dedup + modernize recommendation (15 min) → cosmético pero visible
+5. **Impact caching** (1-2h) → 12s → <1s en uso repetido
+
+---
+
+*Pausado 2026-05-24 — gsd:pause-work (sesión 19)*

sourcecode-1.31.16/.sourcecode-cache/snapshot-88dc388-07db8d0b.json

@@ -0,0 +1,122 @@
+{
+  "metadata": {
+    "schema_version": "1.0",
+    "generated_at": "2026-05-24T18:49:36.513369+00:00",
+    "sourcecode_version": "1.31.15",
+    "analyzed_path": "/Users/user/Documents/workspace/atlas-cli",
+    "analyzer_fingerprints": {
+      "heuristic": "aa9738f3",
+      "nodejs": "1841650f",
+      "confidence": "99424c20",
+      "architecture": "1e4e935c"
+    },
+    "traversal_topology": {
+      "workspace_type": "single-package",
+      "source_roots": [
+        {
+          "path": "src",
+          "reason": "top_level_source",
+          "priority": 0.95
+        }
+      ],
+      "low_signal_roots": [
+        ".agents",
+        ".claude",
+        ".codex",
+        ".github",
+        ".idea",
+        ".planning",
+        ".sourcecode-cache",
+        "docs"
+      ],
+      "generated_roots": [
+        ".git",
+        ".mypy_cache",
+        ".pytest_cache",
+        ".ruff_cache",
+        ".venv",
+        "dist"
+      ],
+      "package_manager": "python",
+      "confidence": 0.8,
+      "scan_budget": {
+        "base_depth": 6,
+        "source_depth": 8,
+        "low_signal_depth": 2
+      }
+    }
+  },
+  "project_type": "cli",
+  "project_summary": "CLI: Deterministic codebase context for AI coding agents. Stack: Python (Typer).",
+  "architecture_summary": "Python cli tool using Typer.\nLayered Architecture with orchestration, processing, data layers.\nAnalyzes repository tree and detects stack, entry points, and project type.\nProduces a JSON/YAML-serializable SourceMap with secret redaction.\nOpcionalmente añade dependencias, grafo de módulos, docs y docstrings, métricas de calidad y semántica y call graph.",
+  "stacks": [
+    {
+      "stack": "python",
+      "detection_method": "manifest",
+      "confidence": "high",
+      "frameworks": [
+        {
+          "name": "Typer",
+          "source": "manifest",
+          "confidence": "high",
+          "detected_via": [
+            "manifest:manifest",
+            "import typer (src/sourcecode/cli.py)"
+          ],
+          "version": null
+        }
+      ],
+      "package_manager": "pip",
+      "manifests": [
+        "pyproject.toml"
+      ],
+      "primary": true,
+      "root": ".",
+      "workspace": null,
+      "signals": [
+        "manifest:pyproject.toml",
+        "framework:Typer",
+        "package_manager:pip",
+        "entry:src/sourcecode/cli.py",
+        "entry:run_cli.py",
+        "extensions:160"
+      ],
+      "produced_by": "python",
+      "language_version": null,
+      "packaging": null,
+      "app_server_hint": null,
+      "spring_profiles": [],
+      "transactional_classes": []
+    }
+  ],
+  "entry_points": [
+    {
+      "path": "src/sourcecode/cli.py",
+      "stack": "python",
+      "kind": "cli",
+      "source": "pyproject.toml",
+      "confidence": "high",
+      "reason": "console_script",
+      "evidence": "declared in [project.scripts]",
+      "entrypoint_type": "production",
+      "classification": "production",
+      "runtime_relevance": "medium",
+      "produced_by": "python"
+    }
+  ],
+  "auxiliary_entry_points": [
+    {
+      "path": "run_cli.py",
+      "stack": "python",
+      "kind": "script",
+      "source": "code_signal",
+      "confidence": "low",
+      "reason": "main_guard",
+      "evidence": "if __name__ == '__main__' guard detected",
+      "entrypoint_type": "production",
+      "classification": "production",
+      "runtime_relevance": "low",
+      "produced_by": "python"
+    }
+  ]
+}