sourcecode 1.31.15__tar.gz → 1.31.17__tar.gz

sourcecode-1.31.17/.continue-here.md

@@ -0,0 +1,145 @@
+# Continue Here — atlas-cli sesión 20
+
+**Paused:** 2026-05-24
+**Repo:** `/Users/user/Documents/workspace/atlas-cli`
+**Branch:** master
+**Version audited:** sourcecode 1.31.16
+
+---
+
+## Objetivo de esta sesión
+
+Auditoría adversarial REAL y profunda de `sourcecode` v1.31.16 contra repos enterprise Java reales.
+Validar credibilidad post-fixes de sesiones anteriores. Encontrar nuevos bugs. Actualizar docs.
+
+---
+
+## Trabajo completado esta sesión (sin commitear)
+
+### `AUDIT_REAL_REPOS.md` — reescrito (22 secciones, auditoría completa)
+
+Repos auditados:
+- `~/Documents/workspace/keycloak` — 7,885 Java files, 18K+ commits, Quarkus/Jakarta EE
+- `~/Documents/workspace/BroadleafCommerce` — 2,985 Java files, 18K+ commits, Spring Boot
+
+Comandos probados: `--compact`, `--agent`, `--format yaml`, `endpoints`, `impact` (múltiples targets),
+`onboard`, `fix-bug`, `modernize`, `review-pr`, `repo-ir --summary-only`, `repo-ir --max-nodes/edges`,
+`prepare-context` vs aliases, cache cold/warm, error handling, flag consistency.
+
+### `README.md` — actualizado basado en evidencia real
+
+- Benchmarks reales (no inventados): cold/cached times, token sizes medidos
+- `repo-ir` size warning (nueva sección)
+- `impact` best practices expandidas (interface vs impl explicit)
+- `What sourcecode does NOT do` — honesto sobre filter security + impl classes + project_summary
+- `How to use` sección completamente reescrita con patrones correctos
+
+---
+
+## Bugs encontrados esta sesión (v1.31.16)
+
+### P0 — Críticos
+
+| # | Bug | Evidencia |
+|---|-----|-----------|
+| **P0-01** | `impact OrderServiceImpl` → `direct_callers:[], risk:low, confidence:HIGH` — WRONG | `OrderService` interface → 30 callers. Spring DI injects interface, not impl. Tool reports high-confidence garbage. |
+| **P0-02** | `repo-ir --max-nodes 200 --max-edges 500` → 3.85MB / 987K tokens | `reverse_graph` (3MB) not bounded by flags. Only `graph.nodes/edges` bounded. |
+
+### P1 — Altos
+
+| # | Bug | Fix direction |
+|---|-----|---------------|
+| P1-01 | Risk score inconsistente: `OrderServiceImpl`→low vs `OrderDaoImpl`→high (mismo 0 callers, distinta heurística) | Cuando `direct_callers=0` y clase es `@Service`/`@Repository` impl: bajar confidence, añadir gap |
+| P1-02 | `project_summary` = primera línea del README (license/marketing, no arquitectura) | Generar de código: "N-module Spring Boot — M classes, K endpoints, J txn boundaries" |
+| P1-03 | `fix-bug` devuelve 426 archivos para NPE genérico (14% de todo el repo, sin score field) | Cap en 20 archivos cuando symptom tiene baja especificidad. Añadir `score` field. |
+| P1-04 | `indirect_callers:0` para KeycloakSession con 1992 direct callers — BFS para en nivel 1 | BFS muestreado para targets muy grandes, o documentar el comportamiento |
+| P1-05 | fix-bug 23s cold en Keycloak — demasiado lento para CI | Profiling needed |
+
+### P2 — Medios
+
+- `bounded_contexts: ["dto","file"]` Broadleaf, `["keycloak"]` Keycloak — ambos WRONG. Fix: usar Maven module names.
+- `role: unknown` para todos los `high_coupling_nodes` en modernize — nunca clasifica annotation/interface/entity
+- `no_security_signal: 100%` en ambos repos — ambos usan filter-based security; métrica siempre vacía para el patrón enterprise más común
+- JAX-RS sub-resource paths no compuestos con parent `@Path` → paths incompletos
+- `hotspot_candidates: []` siempre — 18K commits ignorados; git churn no usado
+- `--format`/`--no-cache` ausentes en `impact`, `endpoints`, `fix-bug`, `onboard`, `modernize`, `review-pr`
+- Architecture confidence diferente entre `--compact` y `--agent` mismo repo
+- `entry_points.controllers.methods: 21` vs `endpoints` finding 130 — discrepancia inexplicada
+
+---
+
+## Estado actual archivos
+
+```
+M  README.md                    — benchmarks reales, limitaciones honestas
+?? AUDIT_REAL_REPOS.md          — auditoría 22 secciones (NUEVA, reemplaza anterior)
+?? docs/PRODUCT_TIERS.md        — de sesión anterior (sin tocar esta sesión)
+?? .sourcecode-cache/           — cache artifacts (ignorar)
+```
+
+**No hay cambios en código fuente esta sesión** — auditoría pura.
+
+---
+
+## Contexto de versión: qué estaba ya fixeado
+
+Los bugs de sesiones 18-19 (BUG-01 a BUG-07 del `.continue-here.md` anterior)
+fueron fixeados en commit `308f2f0` ("fix(impact,serializer,prepare_context): fix all 7 audit bugs").
+
+Los P0/P1/P2 listados arriba son **nuevos**, encontrados en v1.31.16 post-fix.
+
+---
+
+## Primera acción al retomar
+
+```bash
+cd /Users/user/Documents/workspace/atlas-cli
+
+# 1. Commitear docs de esta sesión
+git add README.md AUDIT_REAL_REPOS.md
+git commit -m "docs(audit,readme): P1.5 adversarial audit v1.31.16 — real benchmarks, P0/P1 bugs, honest limitations"
+
+# 2. Fix P0-01 — mayor ROI de credibilidad
+# En repository_ir.py → compute_blast_radius (o equivalente):
+# Cuando target es @Service/@Repository impl con 0 direct_callers:
+#   a) Detectar interfaces que implementa
+#   b) Run impact en las interfaces, merge resultados
+#   c) O mínimo: emitir warning en 'explanation' con nombre de interface y su caller count
+# Verificar con:
+sourcecode impact OrderServiceImpl ~/Documents/workspace/BroadleafCommerce
+# Esperado: warning o callers via OrderService interface
+
+# 3. Fix P0-02 — reverse_graph unbounded
+# repo-ir: cuando --max-nodes N dado, limitar reverse_graph a N hubs también
+# O añadir flag --max-reverse-hubs N
+# Verificar con:
+sourcecode repo-ir ~/Documents/workspace/BroadleafCommerce --max-nodes 200 --max-edges 500 | wc -c
+# Esperado: <500KB (no 4MB)
+```
+
+## Próximas acciones por ROI
+
+1. **P0-01** — impl → interface caller resolution (1-2h) → core claim becomes defensible
+2. **P0-02** — reverse_graph size control (30min) → LLM safety
+3. **P1-01** — risk score consistency for 0-caller impls (30min) → credibility
+4. **P1-02** — project_summary generation from code (1h) → first impression
+5. **P1-03** — fix-bug file cap + score field (30min) → LLM readiness
+6. **P2 batch** — bounded_contexts, security_model, role detection (2h)
+
+---
+
+## Archivos clave del codebase
+
+```
+src/sourcecode/
+  cli.py              — top-level commands + subcommands
+  repository_ir.py    — impact analysis + graph traversal (fix P0-01 aquí)
+  prepare_context.py  — fix-bug, onboard, review-pr output generation
+  serializer.py       — compact/agent output serialization
+tests/
+  test_enterprise_benchmarks.py
+```
+
+---
+
+*Pausado 2026-05-24 — gsd:pause-work (sesión 20)*

sourcecode-1.31.15/.sourcecode-cache/snapshot-02c714c-07db8d0b.json → sourcecode-1.31.17/.sourcecode-cache/snapshot-88dc388-07db8d0b.json

@@ -1,7 +1,7 @@
 {
   "metadata": {
     "schema_version": "1.0",
-    "generated_at": "2026-05-24T10:59:20.218105+00:00",
+    "generated_at": "2026-05-24T18:49:36.513369+00:00",
     "sourcecode_version": "1.31.15",
     "analyzed_path": "/Users/user/Documents/workspace/atlas-cli",
     "analyzer_fingerprints": {

sourcecode-1.31.15/.sourcecode-cache/snapshot-02c714c-178c65fa.json → sourcecode-1.31.17/.sourcecode-cache/snapshot-88dc388-178c65fa.json

@@ -1,7 +1,7 @@
 {
   "metadata": {
     "schema_version": "1.0",
-    "generated_at": "2026-05-24T10:59:20.121717+00:00",
+    "generated_at": "2026-05-24T18:49:36.411691+00:00",
     "sourcecode_version": "1.31.15",
     "analyzed_path": "/Users/user/Documents/workspace/atlas-cli",
     "analyzer_fingerprints": {
@@ -121,13 +121,13 @@
   ],
   "metrics_summary": {
     "requested": true,
-    "file_count": 184,
+    "file_count": 186,
     "test_file_count": 82,
     "languages": [
       "java",
       "python"
     ],
-    "total_loc": 48115,
+    "total_loc": 49580,
     "coverage_records": [],
     "coverage_sources_found": [],
     "limitations": [],
@@ -345,15 +345,15 @@
       "language": "python",
       "is_test": false,
       "production_target": null,
-      "total_lines": 3140,
-      "code_lines": 2674,
-      "blank_lines": 280,
-      "comment_lines": 186,
+      "total_lines": 3492,
+      "code_lines": 2974,
+      "blank_lines": 319,
+      "comment_lines": 199,
       "loc_availability": "measured",
-      "function_count": 41,
+      "function_count": 45,
       "class_count": 1,
       "symbol_availability": "measured",
-      "cyclomatic_complexity": 13.487804878048781,
+      "cyclomatic_complexity": 13.044444444444444,
       "complexity_availability": "measured",
       "line_rate": null,
       "branch_rate": null,
@@ -1497,15 +1497,15 @@
       "language": "python",
       "is_test": false,
       "production_target": null,
-      "total_lines": 3087,
-      "code_lines": 2396,
-      "blank_lines": 422,
-      "comment_lines": 269,
+      "total_lines": 3298,
+      "code_lines": 2580,
+      "blank_lines": 441,
+      "comment_lines": 277,
       "loc_availability": "measured",
-      "function_count": 63,
+      "function_count": 64,
       "class_count": 4,
       "symbol_availability": "measured",
-      "cyclomatic_complexity": 10.428571428571429,
+      "cyclomatic_complexity": 11.265625,
       "complexity_availability": "measured",
       "line_rate": null,
       "branch_rate": null,
@@ -2630,15 +2630,15 @@
       "language": "python",
       "is_test": true,
       "production_target": null,
-      "total_lines": 967,
-      "code_lines": 764,
-      "blank_lines": 146,
-      "comment_lines": 57,
+      "total_lines": 1726,
+      "code_lines": 1363,
+      "blank_lines": 251,
+      "comment_lines": 112,
       "loc_availability": "measured",
-      "function_count": 53,
-      "class_count": 7,
+      "function_count": 112,
+      "class_count": 13,
       "symbol_availability": "measured",
-      "cyclomatic_complexity": 3.811320754716981,
+      "cyclomatic_complexity": 4.053571428571429,
       "complexity_availability": "measured",
       "line_rate": null,
       "branch_rate": null,
@@ -3728,6 +3728,26 @@
       "coverage_availability": "unavailable",
       "workspace": null
     },
+    {
+      "path": "AUDIT_REAL_REPOS.md",
+      "language": "unknown",
+      "is_test": false,
+      "production_target": null,
+      "total_lines": 619,
+      "code_lines": 386,
+      "blank_lines": 175,
+      "comment_lines": 58,
+      "loc_availability": "measured",
+      "function_count": 0,
+      "class_count": 0,
+      "symbol_availability": "unavailable",
+      "complexity_availability": "unavailable",
+      "line_rate": null,
+      "branch_rate": null,
+      "coverage_source": null,
+      "coverage_availability": "unavailable",
+      "workspace": null
+    },
     {
       "path": "CHANGELOG.md",
       "language": "unknown",
@@ -3793,10 +3813,10 @@
       "language": "unknown",
       "is_test": false,
       "production_target": null,
-      "total_lines": 349,
-      "code_lines": 225,
-      "blank_lines": 84,
-      "comment_lines": 40,
+      "total_lines": 348,
+      "code_lines": 194,
+      "blank_lines": 107,
+      "comment_lines": 47,
       "loc_availability": "measured",
       "function_count": 0,
       "class_count": 0,
@@ -3828,6 +3848,26 @@
       "coverage_availability": "unavailable",
       "workspace": null
     },
+    {
+      "path": "docs/PRODUCT_TIERS.md",
+      "language": "unknown",
+      "is_test": false,
+      "production_target": null,
+      "total_lines": 112,
+      "code_lines": 77,
+      "blank_lines": 28,
+      "comment_lines": 7,
+      "loc_availability": "measured",
+      "function_count": 0,
+      "class_count": 0,
+      "symbol_availability": "unavailable",
+      "complexity_availability": "unavailable",
+      "line_rate": null,
+      "branch_rate": null,
+      "coverage_source": null,
+      "coverage_availability": "unavailable",
+      "workspace": null
+    },
     {
       "path": "docs/privacy.md",
       "language": "unknown",
@@ -3933,10 +3973,10 @@
       "language": "unknown",
       "is_test": false,
       "production_target": null,
-      "total_lines": 180,
-      "code_lines": 111,
-      "blank_lines": 46,
-      "comment_lines": 23,
+      "total_lines": 108,
+      "code_lines": 61,
+      "blank_lines": 30,
+      "comment_lines": 17,
       "loc_availability": "measured",
       "function_count": 0,
       "class_count": 0,

sourcecode-1.31.15/.sourcecode-cache/snapshot-02c714c-530bd9cf.json → sourcecode-1.31.17/.sourcecode-cache/snapshot-88dc388-530bd9cf.json

@@ -60,17 +60,21 @@
         "analyze_cmd(path: Path) -> None",
         "config_cmd() -> None",
         "endpoints_cmd(path: Path, output_path: Optional[Path]) ->...",
-        "impact_cmd(target: str, path: Path, depth: int, output_pa...",
-        "main(ctx: typer.Context, format: str, output: Optional[Pa..."
+        "fix_bug_cmd(ctx: typer.Context, path: Path, symptom: Opti...",
+        "impact_cmd(target: str, path: Path, depth: int, output_pa..."
       ],
       "exports": [
+        "main",
         "main_entry",
         "mcp_init",
         "mcp_remove",
         "mcp_serve",
         "mcp_status",
+        "modernize_cmd",
+        "onboard_cmd",
         "prepare_context_cmd",
         "repo_ir_cmd",
+        "review_pr_cmd",
         "telemetry_disable",
         "telemetry_enable",
         "telemetry_status",

sourcecode-1.31.15/.sourcecode-cache/snapshot-02c714c-56888a2a.json → sourcecode-1.31.17/.sourcecode-cache/snapshot-88dc388-56888a2a.json

@@ -47,16 +47,20 @@ contracts:
   - 'analyze_cmd(path: Path) -> None'
   - config_cmd() -> None
   - 'endpoints_cmd(path: Path, output_path: Optional[Path]) ->...'
+  - 'fix_bug_cmd(ctx: typer.Context, path: Path, symptom: Opti...'
   - 'impact_cmd(target: str, path: Path, depth: int, output_pa...'
-  - 'main(ctx: typer.Context, format: str, output: Optional[Pa...'
   exports:
+  - main
   - main_entry
   - mcp_init
   - mcp_remove
   - mcp_serve
   - mcp_status
+  - modernize_cmd
+  - onboard_cmd
   - prepare_context_cmd
   - repo_ir_cmd
+  - review_pr_cmd
   - telemetry_disable
   - telemetry_enable
   - telemetry_status

sourcecode-1.31.15/.sourcecode-cache/snapshot-02c714c-5ea1c8f1.json → sourcecode-1.31.17/.sourcecode-cache/snapshot-88dc388-5ea1c8f1.json

@@ -1,7 +1,7 @@
 {
   "metadata": {
     "schema_version": "1.0",
-    "generated_at": "2026-05-24T10:59:16.965163+00:00",
+    "generated_at": "2026-05-24T18:49:33.532165+00:00",
     "sourcecode_version": "1.31.15",
     "analyzed_path": "/Users/user/Documents/workspace/atlas-cli",
     "analyzer_fingerprints": {
@@ -120,6 +120,7 @@
     }
   ],
   "file_tree": {
+    "AUDIT_REAL_REPOS.md": null,
     "run_cli.py": null,
     "LICENSE": null,
     "CHANGELOG.md": null,
@@ -253,7 +254,8 @@
     },
     "docs": {
       "schema.md": null,
-      "privacy.md": null
+      "privacy.md": null,
+      "PRODUCT_TIERS.md": null
     },
     ".github": {
       "workflows": {
@@ -351,6 +353,7 @@
     }
   },
   "file_paths": [
+    "AUDIT_REAL_REPOS.md",
     "run_cli.py",
     "LICENSE",
     "CHANGELOG.md",
@@ -476,6 +479,7 @@
     "docs",
     "docs/schema.md",
     "docs/privacy.md",
+    "docs/PRODUCT_TIERS.md",
     ".github",
     ".github/workflows",
     ".github/workflows/build-windows.yml",

sourcecode-1.31.15/.sourcecode-cache/snapshot-02c714c-7b6dd6cc.json → sourcecode-1.31.17/.sourcecode-cache/snapshot-88dc388-7b6dd6cc.json

@@ -60,17 +60,21 @@
         "analyze_cmd(path: Path) -> None",
         "config_cmd() -> None",
         "endpoints_cmd(path: Path, output_path: Optional[Path]) ->...",
-        "impact_cmd(target: str, path: Path, depth: int, output_pa...",
-        "main(ctx: typer.Context, format: str, output: Optional[Pa..."
+        "fix_bug_cmd(ctx: typer.Context, path: Path, symptom: Opti...",
+        "impact_cmd(target: str, path: Path, depth: int, output_pa..."
       ],
       "exports": [
+        "main",
         "main_entry",
         "mcp_init",
         "mcp_remove",
         "mcp_serve",
         "mcp_status",
+        "modernize_cmd",
+        "onboard_cmd",
         "prepare_context_cmd",
         "repo_ir_cmd",
+        "review_pr_cmd",
         "telemetry_disable",
         "telemetry_enable",
         "telemetry_status",

sourcecode-1.31.15/.sourcecode-cache/snapshot-02c714c-8cb41bc4.json → sourcecode-1.31.17/.sourcecode-cache/snapshot-88dc388-8cb41bc4.json

@@ -1,7 +1,7 @@
 {
   "metadata": {
     "schema_version": "1.0",
-    "generated_at": "2026-05-24T10:59:18.689511+00:00",
+    "generated_at": "2026-05-24T18:49:35.059569+00:00",
     "sourcecode_version": "1.31.15",
     "analyzed_path": "/Users/user/Documents/workspace/atlas-cli",
     "analyzer_fingerprints": {

sourcecode-1.31.15/.sourcecode-cache/snapshot-02c714c-c9ab42a3.json → sourcecode-1.31.17/.sourcecode-cache/snapshot-88dc388-c9ab42a3.json

@@ -1,7 +1,7 @@
 {
   "metadata": {
     "schema_version": "1.0",
-    "generated_at": "2026-05-24T10:59:17.503839+00:00",
+    "generated_at": "2026-05-24T18:49:34.076959+00:00",
     "sourcecode_version": "1.31.15",
     "analyzed_path": "/Users/user/Documents/workspace/atlas-cli",
     "analyzer_fingerprints": {
@@ -121,8 +121,8 @@
   ],
   "doc_summary": {
     "requested": true,
-    "total_count": 1206,
-    "symbol_count": 1144,
+    "total_count": 1217,
+    "symbol_count": 1155,
     "languages": [
       "python"
     ],
@@ -1980,6 +1980,83 @@
       "importance": "high",
       "workspace": null
     },
+    {
+      "symbol": "TestBlastRadiusEnhanced",
+      "kind": "class",
+      "language": "python",
+      "path": "tests/test_enterprise_benchmarks.py",
+      "doc_text": "New impact fields: mappers, security surface, cross-module, confidence, explanation.",
+      "signature": null,
+      "source": "docstring",
+      "importance": "high",
+      "workspace": null
+    },
+    {
+      "symbol": "TestTargetResolution",
+      "kind": "class",
+      "language": "python",
+      "path": "tests/test_enterprise_benchmarks.py",
+      "doc_text": "Target resolution: exact, ambiguous, partial, not_found all handled correctly.",
+      "signature": null,
+      "source": "docstring",
+      "importance": "high",
+      "workspace": null
+    },
+    {
+      "symbol": "mybatis_heavy_repo",
+      "kind": "function",
+      "language": "python",
+      "path": "tests/test_enterprise_benchmarks.py",
+      "doc_text": "MyBatis-heavy enterprise repo: 3 mappers, 3 services, 2 controllers, XML mappers.",
+      "signature": "def mybatis_heavy_repo(tmp_path: Path) -> Generator[Path, None, None]",
+      "source": "docstring",
+      "importance": "high",
+      "workspace": null
+    },
+    {
+      "symbol": "TestMyBatisHeavyBlastRadius",
+      "kind": "class",
+      "language": "python",
+      "path": "tests/test_enterprise_benchmarks.py",
+      "doc_text": "Blast radius on MyBatis-heavy repos: persistence paths detected correctly.",
+      "signature": null,
+      "source": "docstring",
+      "importance": "high",
+      "workspace": null
+    },
+    {
+      "symbol": "TestEnterpriseWorkflows",
+      "kind": "class",
+      "language": "python",
+      "path": "tests/test_enterprise_benchmarks.py",
+      "doc_text": "Top-level workflow commands produce bounded, structured output.",
+      "signature": null,
+      "source": "docstring",
+      "importance": "high",
+      "workspace": null
+    },
+    {
+      "symbol": "TestRuntimeBenchmarks",
+      "kind": "class",
+      "language": "python",
+      "path": "tests/test_enterprise_benchmarks.py",
+      "doc_text": "IR build and impact analysis stay within reasonable wall-clock limits.\n\nThese are NOT hard CI gates — they characterise performance degradation.\nThresholds are generous (10s/5s) to avoid false failures on CI machines.",
+      "signature": null,
+      "source": "docstring",
+      "importance": "high",
+      "workspace": null
+    },
+    {
+      "symbol": "TestMultiRepoComparisonMatrix",
+      "kind": "class",
+      "language": "python",
+      "path": "tests/test_enterprise_benchmarks.py",
+      "doc_text": "Cross-repo consistency: all repos must satisfy the same baseline contract.",
+      "signature": null,
+      "source": "docstring",
+      "importance": "high",
+      "workspace": null
+    },
     {
       "symbol": "test_console_script_reports_version",
       "kind": "function",
@@ -9713,6 +9790,50 @@
       "importance": "high",
       "workspace": null
     },
+    {
+      "symbol": "onboard_cmd",
+      "kind": "function",
+      "language": "python",
+      "path": "src/sourcecode/cli.py",
+      "doc_text": "[OSS Core] Onboard an unfamiliar codebase: architecture, entry points, hotspots, risks.\n\n\b\nAnswers: \"What is this repo and where do I start?\"\n\nBuilds full project context optimised for a new developer or agent that\nhas never seen this codebase.  Surfaces architecture summary, subsystems,\nkey entry points, hotspots, and tech-debt signals.\n\n\b\nWorkflow:\n  sourcecode onboard .\n  sourcecode onboard /path/to/repo --llm-prompt\n  sourcecode onboard . --output onboard.json\n\n\b\nRelated workflows:\n  sourcecode impact <target>   — What breaks if I touch this?\n  sourcecode review-pr         — Risk-rank a pending PR\n  sourcecode modernize .       — Where should I refactor first?\n  sourcecode fix-bug           — Where does this symptom live?",
+      "signature": "def onboard_cmd(ctx: typer.Context, path: Path=typer.Argument(Path('.'), help='Repository root to onboard (default: current directory)'), output_path: Optional[Path]=typer.Option(None, '--output', '-o', help='Write output to a file instead of stdout.'), llm_prompt: bool=typer.Option(False, '--llm-prompt', help='Append a ready-to-use LLM prompt to the output.'), copy: bool=typer.Option(False, '--copy', '-c', help='Copy output to clipboard after a successful run.')) -> None",
+      "source": "docstring",
+      "importance": "high",
+      "workspace": null
+    },
+    {
+      "symbol": "review_pr_cmd",
+      "kind": "function",
+      "language": "python",
+      "path": "src/sourcecode/cli.py",
+      "doc_text": "[Pro] PR review: blast radius, risk ranking, execution paths, security/txn impact.\n\n\b\nAnswers: \"What does this PR break and how risky is it?\"\n\nComputes a diff-based change impact report: changed symbols, BFS propagation\nthrough the call graph, affected endpoints, transactional boundaries,\nsecurity surface, and a per-file risk ranking.\n\n\b\nRequires either --since or a git diff to be present.\n\n\b\nWorkflow:\n  sourcecode review-pr --since origin/main\n  sourcecode review-pr . --since main --format github-comment\n  sourcecode review-pr . --since HEAD~3 --output review.json\n\n\b\nRelated workflows:\n  sourcecode impact <target>   — Single-symbol blast radius\n  sourcecode onboard .         — Full architecture onboarding",
+      "signature": "def review_pr_cmd(ctx: typer.Context, path: Path=typer.Argument(Path('.'), help='Repository root (default: current directory)'), since: Optional[str]=typer.Option(None, '--since', help='Git ref baseline for diff (e.g. origin/main, HEAD~3).'), output_path: Optional[Path]=typer.Option(None, '--output', '-o', help='Write output to a file instead of stdout.'), format: Optional[str]=typer.Option(None, '--format', help='Output format: json (default) | github-comment'), copy: bool=typer.Option(False, '--copy', '-c', help='Copy output to clipboard after a successful run.')) -> None",
+      "source": "docstring",
+      "importance": "high",
+      "workspace": null
+    },
+    {
+      "symbol": "fix_bug_cmd",
+      "kind": "function",
+      "language": "python",
+      "path": "src/sourcecode/cli.py",
+      "doc_text": "[Pro] Bug triage: risk-ranked files, suspected areas, related annotations.\n\n\b\nAnswers: \"Where in this codebase should I look to fix this symptom?\"\n\nSurfaces the most likely files/classes related to a bug symptom.\nRanks by risk score, annotation signals (@Transactional, security annotations),\nand structural coupling.  Output is bounded and LLM-ready.\n\n\b\nWorkflow:\n  sourcecode fix-bug --symptom \"NullPointerException in UserService\"\n  sourcecode fix-bug . --symptom \"401 on /api/orders\"\n  sourcecode fix-bug . --output bug-context.json\n\n\b\nRelated workflows:\n  sourcecode impact <target>   — Propagate impact from a specific class\n  sourcecode onboard .         — Full architecture context first",
+      "signature": "def fix_bug_cmd(ctx: typer.Context, path: Path=typer.Argument(Path('.'), help='Repository root (default: current directory)'), symptom: Optional[str]=typer.Option(None, '--symptom', '-s', help='Keyword hint for the bug (boosts matching files and surfaces related annotations).'), output_path: Optional[Path]=typer.Option(None, '--output', '-o', help='Write output to a file instead of stdout.'), copy: bool=typer.Option(False, '--copy', '-c', help='Copy output to clipboard after a successful run.')) -> None",
+      "source": "docstring",
+      "importance": "high",
+      "workspace": null
+    },
+    {
+      "symbol": "modernize_cmd",
+      "kind": "function",
+      "language": "python",
+      "path": "src/sourcecode/cli.py",
+      "doc_text": "[Pro] Modernization planning: coupling, dead zones, risky modules, refactor candidates.\n\n\b\nAnswers: \"Where should I refactor first, and what's safest to touch?\"\n\nAnalyzes the repo for:\n  - High-coupling modules (high in-degree + out-degree nodes)\n  - Dead zones (isolated symbols with no callers)\n  - Risk hotspots (high fan-in + security annotations + transaction boundaries)\n  - Cross-module dependency tangles\n  - Subsystem summary with member counts\n\nOutput is bounded and structured for both human review and LLM planning.\n\n\b\nWorkflow:\n  sourcecode modernize .\n  sourcecode modernize /path/to/repo --output modernize.json\n\n\b\nRelated workflows:\n  sourcecode onboard .         — Architecture overview first\n  sourcecode impact <target>   — Verify impact before touching a hotspot",
+      "signature": "def modernize_cmd(path: Path=typer.Argument(Path('.'), help='Repository root to analyze (default: current directory)'), output_path: Optional[Path]=typer.Option(None, '--output', '-o', help='Write output to a file instead of stdout.'), copy: bool=typer.Option(False, '--copy', '-c', help='Copy output to clipboard after a successful run.')) -> None",
+      "source": "docstring",
+      "importance": "high",
+      "workspace": null
+    },
     {
       "symbol": "version_cmd",
       "kind": "function",