sourcecode 1.31.20__py3-none-any.whl → 1.31.22__py3-none-any.whl

sourcecode/__init__.py

@@ -1,3 +1,3 @@
 """sourcecode — Deterministic codebase context maps for AI coding agents."""
 
-__version__ = "1.31.20"
+__version__ = "1.31.22"

sourcecode/ast_extractor.py

@@ -1131,6 +1131,23 @@ def _detect_role(path: str, contract: FileContract) -> str:
     if any(n.startswith("use") and len(n) > 3 and n[3:4].isupper() for n in export_names):
         return "hook"
 
+    # Angular-specific roles (.ts files): detect by stem suffix before generic checks.
+    # Must run before the "service" path-keyword check to prevent misclassification.
+    if ext == ".ts":
+        _ts_last = Path(path).stem.lower().rsplit(".", 1)[-1]
+        _NG_ROLE_MAP = {
+            "component":   "component",
+            "pipe":        "pipe",
+            "directive":   "directive",
+            "guard":       "guard",
+            "interceptor": "interceptor",
+            "resolver":    "resolver",
+            "module":      "module",
+            "service":     "service",
+        }
+        if _ts_last in _NG_ROLE_MAP:
+            return _NG_ROLE_MAP[_ts_last]
+
     # Route / page
     if any(x in path_lower for x in ["/routes/", "/route.", "/pages/", "/api/", "/handlers/"]):
         return "route"

sourcecode/cli.py

@@ -238,6 +238,21 @@ def _preprocess_argv() -> None:
     _sys.argv = _sys.argv[:1] + modified
 
 
+def _emit_error_json(error: str, message: str, **context: object) -> None:
+    """Write a structured JSON error envelope to stderr.
+
+    Format: {"error": "<code>", "message": "<human text>", ...<context>}
+    All CLI validation and runtime errors must go through this helper so that
+    agents and tools can parse stderr reliably regardless of error type.
+    """
+    import json as _json
+    import sys as _sys
+    payload: dict[str, object] = {"error": error, "message": message}
+    payload.update(context)
+    _sys.stderr.write(_json.dumps(payload, ensure_ascii=False) + "\n")
+    _sys.stderr.flush()
+
+
 def _copy_to_clipboard(content: str) -> bool:
     """Copy text to system clipboard. Returns True on success, False otherwise (never raises)."""
     import subprocess
@@ -751,21 +766,30 @@ def main(
 
     # Validate format choices
     if format not in FORMAT_CHOICES:
-        typer.echo(
-            f"Error: invalid value '{format}' for --format. Valid options: {', '.join(FORMAT_CHOICES)}",
-            err=True,
+        _emit_error_json(
+            "invalid_flag_value",
+            f"Invalid value '{format}' for --format. Valid values: {', '.join(FORMAT_CHOICES)}.",
+            flag="--format",
+            value=format,
+            valid_values=list(FORMAT_CHOICES),
         )
         raise typer.Exit(code=2)  # FIX-P2-7: arg validation → exit 2
     if graph_detail not in GRAPH_DETAIL_CHOICES:
-        typer.echo(
-            f"Error: invalid value '{graph_detail}' for --graph-detail. Valid options: {', '.join(GRAPH_DETAIL_CHOICES)}",
-            err=True,
+        _emit_error_json(
+            "invalid_flag_value",
+            f"Invalid value '{graph_detail}' for --graph-detail. Valid values: {', '.join(GRAPH_DETAIL_CHOICES)}.",
+            flag="--graph-detail",
+            value=graph_detail,
+            valid_values=list(GRAPH_DETAIL_CHOICES),
         )
         raise typer.Exit(code=2)  # FIX-P2-7: arg validation → exit 2
     if docs_depth not in DOCS_DEPTH_CHOICES:
-        typer.echo(
-            f"Error: invalid value '{docs_depth}' for --docs-depth. Valid options: {', '.join(DOCS_DEPTH_CHOICES)}",
-            err=True,
+        _emit_error_json(
+            "invalid_flag_value",
+            f"Invalid value '{docs_depth}' for --docs-depth. Valid values: {', '.join(DOCS_DEPTH_CHOICES)}.",
+            flag="--docs-depth",
+            value=docs_depth,
+            valid_values=list(DOCS_DEPTH_CHOICES),
         )
         raise typer.Exit(code=2)  # FIX-P2-7: arg validation → exit 2
 
@@ -775,10 +799,18 @@ def main(
     _raw_path_input = _detected_path[0]
     target = Path(_raw_path_input).resolve()
     if not target.exists():
-        typer.echo(f"Error: directory '{_raw_path_input}' does not exist.", err=True)
+        _emit_error_json(
+            "directory_not_found",
+            f"Directory '{_raw_path_input}' does not exist.",
+            path=_raw_path_input,
+        )
         raise typer.Exit(code=1)
     if not target.is_dir():
-        typer.echo(f"Error: '{_raw_path_input}' is not a directory.", err=True)
+        _emit_error_json(
+            "not_a_directory",
+            f"Path '{_raw_path_input}' is not a directory.",
+            path=_raw_path_input,
+        )
         raise typer.Exit(code=1)
 
     # Normalize mode aliases
@@ -1201,6 +1233,15 @@ def main(
         workspace_root = target / workspace.path
         if not workspace_root.exists() or not workspace_root.is_dir():
             continue
+        # BUG-2: skip workspaces explicitly excluded via --exclude.
+        # Without this guard, excluded frontend/backend modules still contribute
+        # their stacks and entry_points, causing architecture_summary to describe
+        # stacks that were intentionally filtered out.
+        if _extra_excludes:
+            _ws_norm = workspace.path.replace("\\", "/").strip("/")
+            _ws_parts = frozenset(_ws_norm.split("/"))
+            if _ws_parts & _extra_excludes:
+                continue
         _ws_topology = RepoClassifier().classify(workspace_root)
         workspace_scanner = AdaptiveScanner(workspace_root, topology=_ws_topology, base_depth=depth)
         workspace_tree = filter_sensitive_files(workspace_scanner.scan_tree())
@@ -1776,8 +1817,21 @@ def main(
         if changed_only and _allowed_changed_files:
             # GAP-5: preserve full entry_points for architecture context even in
             # --changed-only mode. Only filter file_paths and code_notes.
+            # ALWAYS-INCLUDE: security-const files must stay in file_paths even when
+            # not in the git diff — they resolve Java constant references used in
+            # @M3FiltroSeguridad annotations (read-only anchors, not diff output).
+            def _is_always_include_ref(p: str) -> bool:
+                name = p.rsplit("/", 1)[-1].rsplit("\\", 1)[-1]
+                if name.endswith("Const.java") or name.endswith("Constants.java"):
+                    return True
+                parts = p.replace("\\", "/").lower().split("/")
+                return any(seg in ("security", "seguridad", "constantes") for seg in parts)
+
             sm = _replace(sm,
-                file_paths=[p for p in sm.file_paths if p in _allowed_changed_files],
+                file_paths=[
+                    p for p in sm.file_paths
+                    if p in _allowed_changed_files or _is_always_include_ref(p)
+                ],
                 code_notes=[n for n in sm.code_notes if n.path in _allowed_changed_files],
             )
         data = compact_view(sm, no_tree=no_tree, full=full)

sourcecode/contract_pipeline.py

@@ -242,7 +242,27 @@ class ContractPipeline:
         ]
 
         if changed_only:
-            src_paths = [p for p in src_paths if p in changed_files]
+            def _is_always_include_ref(p: str) -> bool:
+                """Always include security-const files regardless of diff status.
+
+                These are read-only reference anchors: they resolve Java constant
+                references (e.g. SeguridadRecursosConst.REC_X) used in security
+                annotations.  They do NOT appear in diff output because
+                contract.is_changed is set from ``changed_files`` only (line below).
+                Criteria per bug-spec:
+                  - name ends with Const.java or Constants.java
+                  - any path segment is: security | seguridad | constantes
+                """
+                name = p.rsplit("/", 1)[-1].rsplit("\\", 1)[-1]
+                if name.endswith("Const.java") or name.endswith("Constants.java"):
+                    return True
+                parts = p.replace("\\", "/").lower().split("/")
+                return any(seg in ("security", "seguridad", "constantes") for seg in parts)
+
+            src_paths = [
+                p for p in src_paths
+                if p in changed_files or _is_always_include_ref(p)
+            ]
 
         # Apply max_files cap — bypass when symbol search to ensure defining files are found.
         # A symbol query over a large repo needs all files; result set is small after filtering.

sourcecode/mcp/server.py

@@ -10,10 +10,12 @@ data is the parsed JSON object from the CLI output, not a shell string.
 """
 from __future__ import annotations
 
+import json
 import os
 from typing import Any
 
 from mcp.server.fastmcp import FastMCP
+from mcp.types import CallToolResult, TextContent
 
 from sourcecode import __version__ as _sourcecode_version
 from sourcecode.mcp.runner import run_command
@@ -30,15 +32,35 @@ def _ok(data: Any) -> dict:
     return {"success": True, "data": data, "error": None}
 
 
-def _err(message: str, code: str = "EXECUTION_FAILED") -> dict:
-    return {"success": False, "data": None, "error": {"code": code, "message": message}}
+def _err(message: str, code: str = "EXECUTION_FAILED") -> CallToolResult:
+    """Return an MCP tool-error result with isError=True per MCP spec §tool-result."""
+    payload = {"success": False, "data": None, "error": {"code": code, "message": message}}
+    return CallToolResult(
+        content=[TextContent(type="text", text=json.dumps(payload))],
+        isError=True,
+    )
 
 
-def _execute(args: list[str]) -> dict:
+def _execute(args: list[str]) -> dict | CallToolResult:
     try:
-        return _ok(run_command(args))
+        result = run_command(args)
     except RuntimeError as exc:
         return _err(str(exc))
+    # If CLI output itself signals failure via success:false, propagate as isError=True
+    if isinstance(result, dict) and result.get("success") is False:
+        payload = {
+            "success": False,
+            "data": None,
+            "error": result.get("error") or {
+                "code": "EXECUTION_FAILED",
+                "message": "Command returned success=false",
+            },
+        }
+        return CallToolResult(
+            content=[TextContent(type="text", text=json.dumps(payload))],
+            isError=True,
+        )
+    return _ok(result)
 
 
 @mcp.tool()

sourcecode/prepare_context.py

@@ -589,6 +589,15 @@ _ARTIFACT_CHANGE_EFFECT: dict[str, str] = {
     "documentation":  "documentation file (no runtime impact)",
     "ide_noise":      "IDE/tooling artifact (no application impact)",
     "source":         "application source file (role could not be confirmed from code signals)",
+    # Angular-specific artifact types (detected before Java/Spring heuristics)
+    "ng_component":   "UI presentation layer (Angular @Component)",
+    "ng_pipe":        "data transformation layer (Angular @Pipe)",
+    "ng_directive":   "DOM behavior layer (Angular @Directive)",
+    "ng_guard":       "navigation guard (Angular CanActivate / CanActivateFn)",
+    "ng_interceptor": "HTTP middleware layer (Angular HttpInterceptor)",
+    "ng_resolver":    "data pre-fetch layer (Angular Resolve)",
+    "ng_service":     "Angular injectable service (@Injectable)",
+    "ng_module":      "Angular feature module (@NgModule)",
 }
 
 # Maps frontend symptom keywords → backend terms likely to contain the root cause.
@@ -2710,6 +2719,29 @@ class TaskContextBuilder:
         ):
             return {"artifact_type": "entrypoint", "risk_areas": ["api", "config"], "impact_level": "critical", "is_noise": False, "module": module, "confidence": "high"}
 
+        # Angular-specific artifact detection (.ts files only).
+        # Must run BEFORE the Java/Spring heuristics so that *.component.ts,
+        # *.pipe.ts, etc. are never misclassified as "service" or "security".
+        # Detection is pure-path/stem — no file reads, fully deterministic.
+        if suffix == ".ts":
+            # Stem may be multi-part: "causa-denegacion-form.component" → last part is the Angular type
+            _ts_last = stem_lower.rsplit(".", 1)[-1]  # "component", "pipe", etc.
+            _NG_SUFFIX_MAP = {
+                "component":   ("ng_component",   ["ui"],               "medium"),
+                "pipe":        ("ng_pipe",         ["ui"],               "low"),
+                "directive":   ("ng_directive",    ["ui"],               "medium"),
+                "guard":       ("ng_guard",        ["security", "auth"], "high"),
+                "interceptor": ("ng_interceptor",  ["api"],              "medium"),
+                "resolver":    ("ng_resolver",     ["api"],              "low"),
+                "module":      ("ng_module",       ["config"],           "medium"),
+            }
+            if _ts_last in _NG_SUFFIX_MAP:
+                _ng_atype, _ng_risks, _ng_impact = _NG_SUFFIX_MAP[_ts_last]
+                return {"artifact_type": _ng_atype, "risk_areas": _ng_risks, "impact_level": _ng_impact, "is_noise": False, "module": module, "confidence": "high"}
+            # Angular service: stem ends with ".service" or equals "service"
+            if _ts_last == "service":
+                return {"artifact_type": "ng_service", "risk_areas": ["business_logic"], "impact_level": "medium", "is_noise": False, "module": module, "confidence": "high"}
+
         # Security surface (extended: interceptor, filter, cors, acl)
         _SECURITY_KW = ("security", "auth", "jwt", "token", "permission", "role",
                          "credential", "encrypt", "decrypt", "oauth", "saml", "ldap",
@@ -2724,9 +2756,11 @@ class TaskContextBuilder:
         if suffix in _CODE_EXTS and any(kw in stem_lower for kw in _API_KW):
             return {"artifact_type": "controller", "risk_areas": ["api"], "impact_level": "high", "is_noise": False, "module": module, "confidence": "high"}
 
-        # Business logic / services (extended: facade, usecase, aspect, listener, component)
+        # Business logic / services (extended: facade, usecase, aspect, listener)
+        # NOTE: "component" intentionally removed — Angular *.component.ts files
+        # are caught above by the Angular-specific block before reaching here.
         _SERVICE_KW = ("service", "serviceimpl", "servicefacade", "facade", "usecase",
-                       "interactor", "aspect", "listener", "subscriber", "eventhandler", "component")
+                       "interactor", "aspect", "listener", "subscriber", "eventhandler")
         if suffix in _CODE_EXTS and any(kw in stem_lower for kw in _SERVICE_KW):
             return {"artifact_type": "service", "risk_areas": ["transactions", "business_logic"], "impact_level": "high", "is_noise": False, "module": module, "confidence": "high"}
 

{sourcecode-1.31.20.dist-info → sourcecode-1.31.22.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 1.31.20
+Version: 1.31.22
 Summary: Deterministic codebase context for AI coding agents
 License:                                  Apache License
                                    Version 2.0, January 2004
@@ -225,7 +225,7 @@ Description-Content-Type: text/markdown
 
 **AI-ready change intelligence for Java/Spring enterprise monoliths.**
 
-![Version](https://img.shields.io/badge/version-1.31.20-blue)
+![Version](https://img.shields.io/badge/version-1.31.22-blue)
 ![Python](https://img.shields.io/badge/python-3.10%2B-green)
 
 ---
@@ -263,7 +263,7 @@ pipx install sourcecode
 
 ```bash
 sourcecode version
-# sourcecode 1.31.20
+# sourcecode 1.31.22
 ```
 
 ---

{sourcecode-1.31.20.dist-info → sourcecode-1.31.22.dist-info}/RECORD

@@ -1,18 +1,18 @@
-sourcecode/__init__.py,sha256=SO-Vu2UFaZzh6UldfBANt4sXszun2WaihkKiyt-cYX4,104
+sourcecode/__init__.py,sha256=Wsav7BZkVmw8XZqjz_WUnhLQyGjtZVwjYnyc_N4sraE,104
 sourcecode/adaptive_scanner.py,sha256=XffluXKzJUXrMtjEiAOnSNPZnztdIcts17T9ouHeID0,10521
 sourcecode/architecture_analyzer.py,sha256=4R13Yb02OrPeB4IH3z6V_g7HWhmGcRHbI8CobCVnRrc,39111
 sourcecode/architecture_summary.py,sha256=z34_6v7cSwy98cof2UVciGho7SCrZ93tiqMmq5WNzRQ,20405
-sourcecode/ast_extractor.py,sha256=XgrZg2DcWcUm9r87cRG3KGO7IK2TIL_N-CvhSbUmmh4,49901
+sourcecode/ast_extractor.py,sha256=_btmeOJIe3t-NicF94D5ZAesa2YIJ0_QNExGnbHxGFE,50578
 sourcecode/cache.py,sha256=TiYa3ECjBKtvlfCk7GvQ9v6gZkAITpH3ow9PubA7sUo,22946
 sourcecode/canonical_ir.py,sha256=NZu0XICv__hkQGKzW2LNQLRqb1L28K2p_WQCQKS5Zlk,23141
 sourcecode/classifier.py,sha256=yWeq6agTjkFa3zuNa-gdVIHtjoBoPoVlJnX-b7tdVJs,7851
-sourcecode/cli.py,sha256=Ng9hOoMbpCXvB186etvSqV1q3I4mnndPxr3vMzcZQjc,145199
+sourcecode/cli.py,sha256=qMn-4zD8v03dmkn-AZsf2TSplyhjbq9ZPMAcWl_Lrxg,147576
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
 sourcecode/confidence_analyzer.py,sha256=_jckZSxksV-OU38vbkxfVNBnWCtlCq8Vwfg23x1uspA,19054
 sourcecode/context_scorer.py,sha256=QpChSpsmaAYz91rXA4Ue5xzQmNz_ZboZN09YOHScq1U,14679
 sourcecode/context_summarizer.py,sha256=CiQrfBEzun949bWvmLabWoj2HhPn6Lw62ofqnsy0FlQ,6503
 sourcecode/contract_model.py,sha256=nRxJKPMs1VHwFTa8AVXhGmaLjti3Lr2sjHDpWgv1bfE,3917
-sourcecode/contract_pipeline.py,sha256=w18t_MdbrkIeLcCW-VMQYeb9hlWenAOB-NMiME_Fo-Y,27652
+sourcecode/contract_pipeline.py,sha256=gvTdDniedm_mjq4vaHqnBY2UkQ0s00gtXqzTLILNXHc,28719
 sourcecode/coverage_parser.py,sha256=q0LeZJaX1bnntLu-ImksdBsMlpsVmk_iUfSaB4eaJGo,19702
 sourcecode/dependency_analyzer.py,sha256=Po7GKJnClCkXty0np1B4F1zo_bPeKAtgbehazhXuaBM,56493
 sourcecode/doc_analyzer.py,sha256=05bjTUbDbmnbajD_cgRnACzS8T7xxBKVX4CjkJlhZg8,24411
@@ -26,7 +26,7 @@ sourcecode/metrics_analyzer.py,sha256=m0ENgtqKeBL17kUIK3fmGkgo7UfXBNHxCMj0H_Y5K7
 sourcecode/output_budget.py,sha256=43307mJEyUPU3MI-QEQoVxrcAvNyUzdzF_SAPgisBQE,6603
 sourcecode/path_filters.py,sha256=ROFRQ8eSLBEMiixK9f45-RO7um4VEEcjoD5AA4I427I,3739
 sourcecode/pr_comment_renderer.py,sha256=smHslxiG14lrytCkq5nFrFu-qTHgA-t-LFYfdrfjz2o,14423
-sourcecode/prepare_context.py,sha256=j82rwu3M4qcRzrnBJfXSdhmLuWeAwSHQbHHLXnwz1dc,193567
+sourcecode/prepare_context.py,sha256=_WZqHLqdRD5YftN7ebm2jXd1c-iJpNE8TzVKjK6LUbE,196037
 sourcecode/progress.py,sha256=qn30sWaHOkjTgXsSBmiPkz7Rsbwc5oSlIe6JNEMYp_k,3149
 sourcecode/ranking_engine.py,sha256=ZAucq_YX2KkWUuAZf4P0lhtQ_38vEFnUhuGtSZd1S0E,12970
 sourcecode/redactor.py,sha256=xuGcadGEHaPw4qZXlMDvzMCsr4VOkdp3oBQptHyJk8c,2884
@@ -64,7 +64,7 @@ sourcecode/detectors/terraform.py,sha256=cxORPR_zVLOJpHlh4e9JnFpkQsn_UnqMMom5yG6
 sourcecode/detectors/tooling.py,sha256=8CKbtxwQoABP-WyBRNmdAmHDOvAH57AR1cF4UKuWEdQ,2074
 sourcecode/mcp/__init__.py,sha256=XU4HfRGbdid8wdUA0x_4f7uKZD1z3mv_XUY_WU_T9Mw,179
 sourcecode/mcp/runner.py,sha256=7PnFjKYbgxFeDnqVeSntXHxZX7ZtK3-krDkEuVjI24M,1386
-sourcecode/mcp/server.py,sha256=T7775VLZFGtEh9CxfdKFP8z_7OK9fai9O5DHbyuegEQ,13437
+sourcecode/mcp/server.py,sha256=QL-evpZsqF44xLVWo-b3dKv70Li9ElXk_SvCRB_w7WE,14311
 sourcecode/mcp/onboarding/__init__.py,sha256=sj2PWqEBmMc4zBNkomg89WtL0M6S7A9yb7_wAuSWNP4,66
 sourcecode/mcp/onboarding/applier.py,sha256=yfSMT0NKdZsjavtLkC8yQ7OtkfepOl5IXGByqg6bdEY,1894
 sourcecode/mcp/onboarding/backup.py,sha256=ihqGOR8QTX8HASRSEDyfFyXr5bkXrygPHamv4p9KTmk,1452
@@ -76,8 +76,8 @@ sourcecode/telemetry/consent.py,sha256=wLMvGNJeSSyZoNkQXpoUioY6mMv4Qdvuw7S9jAEWn
 sourcecode/telemetry/events.py,sha256=oEvvulfsv5GIDWG2174gSS6tNB95w38AIYiYeifGKlE,2294
 sourcecode/telemetry/filters.py,sha256=Asa71oRl7q3Wt_FMwuufIZJFzSYdgRNKS8LHCIyFeYE,4805
 sourcecode/telemetry/transport.py,sha256=KJeIPCPWMdmbCP3ySGs2iUlia34U6vWne2dZsUezesw,1560
-sourcecode-1.31.20.dist-info/METADATA,sha256=jAgvJ3ggn8x9HGWRoANJO5pu8_bQ74T1ftvcjAvDosE,31103
-sourcecode-1.31.20.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-1.31.20.dist-info/entry_points.txt,sha256=ex3F9rmbXeyDIoFQHtkEqTsKSaJow8F0LrVu8XfIktQ,57
-sourcecode-1.31.20.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
-sourcecode-1.31.20.dist-info/RECORD,,
+sourcecode-1.31.22.dist-info/METADATA,sha256=zjEDrWUQ-08LOjvIfXTDUgQ4UTPkneyr4CFGZc5yaOo,31103
+sourcecode-1.31.22.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-1.31.22.dist-info/entry_points.txt,sha256=ex3F9rmbXeyDIoFQHtkEqTsKSaJow8F0LrVu8XfIktQ,57
+sourcecode-1.31.22.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
+sourcecode-1.31.22.dist-info/RECORD,,