sourcecode 1.31.25__tar.gz → 1.31.27__tar.gz

sourcecode-1.31.27/.continue-here.md

@@ -0,0 +1,73 @@
+# Handoff — Sesión 31 (2026-05-26)
+
+## Position
+
+**Project:** sourcecode (atlas-cli)  
+**Activity:** Post-audit bug fixing — AUDIT_v1.31.23.md / P0 blockers  
+**Branch:** master  
+**Last commit:** e0fab96 — fix(mcp,cli): three P0 blockers — exit codes, Windows paths, timeout  
+**Tests:** 1590 passed, 3 skipped ✅
+
+---
+
+## Work Done This Session
+
+### Session 31 (this session)
+**Three P0 blockers fixed:**
+
+**P0-1: Exit codes** (`cli.py`)
+- `--compact --full` now exits 1 (was 2); all controlled errors → exit 1
+- Updated `test_enterprise_benchmarks.py::test_compact_full_conflict_is_error` assertion 2→1
+
+**P0-2: MCP Windows paths** (`mcp/server.py`)
+- `_normalize_repo_path()`: MINGW `/c/Users/...` → `C:/Users/...`, backslash → forward slash
+- Applied to all 13 tools that accept `repo_path`
+- Each tool wrapped in `try/except Exception` → never exposes uncaught exception to stdio transport
+- Forward-slash note added to `mcp status` and `mcp init` output
+
+**P0-3: generate_tests_context timeout** (`mcp/server.py`)
+- Bounded by `SOURCECODE_TESTS_TIMEOUT_MS` env var (default: 15 000 ms)
+- Uses `concurrent.futures.wait([future], timeout=timeout_s)` for wall-clock limit
+- Returns `{truncated: true, truncated_reason: "timeout_15s", files_analyzed: 0, results: []}` on timeout
+- Normal repos complete well within limit (0.8s on atlas-cli itself)
+
+---
+
+## Remaining from AUDIT_v1.31.23.md
+
+### P2 unfixed (section 13, items 6–18)
+| # | Issue | File | Effort |
+|---|---|---|---|
+| P2-06 | `subsystem_summary.member_count` always 0 | cli.py modernize_cmd | Medium |
+| P2-07 | `no_security_signal` → detect filter-based security → `security_model: "filter_based"` | repository_ir.py | Medium |
+| P2-10 | `architecture.confidence` inconsistent between `--compact` and `--agent` | serializer.py | Low |
+| P2-13 | `--no-cache` flag inconsistent across subcommands | cli.py | Medium |
+| P2-14 | URLs in code_notes truncated (missing `https://bugs.` prefix) | code_notes_analyzer.py | Low (needs repro) |
+| P2-16 | `entry_points.controllers.methods` mismatches `endpoints` count | cli.py | Medium |
+| P2-17 | `--compact --help` token claim outdated | cli.py | Trivial |
+| P2-18 | `impact` via file path: resolve to FQN before IR lookup | repository_ir.py | Low |
+
+---
+
+## Key Files Modified (this session)
+
+```
+src/sourcecode/cli.py               — exit code 2→1 for --compact --full; forward-slash notes
+src/sourcecode/mcp/server.py        — _normalize_repo_path, try/except all tools, timeout P0-3
+tests/test_enterprise_benchmarks.py — assertion exit_code 2→1
+```
+
+---
+
+## Next Session
+
+**Recommended start:** Fix `subsystem_summary.member_count` (P2-06).
+
+Root cause: `_detect_subsystems()` in `repository_ir.py` builds subsystems without populating
+`members` list. `modernize_cmd` reads `len(s.get("members") or [])` → always 0.
+
+Then: `--no-cache` flag consistency audit (P2-13).
+
+**Resume command:** `/gsd:resume-work`
+
+**Test baseline:** `python3 -m pytest tests/ → 1590 passed, 3 skipped`

{sourcecode-1.31.25 → sourcecode-1.31.27}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 1.31.25
+Version: 1.31.27
 Summary: Deterministic codebase context for AI coding agents
 License:                                  Apache License
                                    Version 2.0, January 2004
@@ -225,7 +225,7 @@ Description-Content-Type: text/markdown
 
 **AI-ready change intelligence for Java/Spring enterprise monoliths.**
 
-![Version](https://img.shields.io/badge/version-1.31.25-blue)
+![Version](https://img.shields.io/badge/version-1.31.27-blue)
 ![Python](https://img.shields.io/badge/python-3.10%2B-green)
 
 ---
@@ -263,7 +263,7 @@ pipx install sourcecode
 
 ```bash
 sourcecode version
-# sourcecode 1.31.25
+# sourcecode 1.31.27
 ```
 
 ---

{sourcecode-1.31.25 → sourcecode-1.31.27}/README.md

@@ -2,7 +2,7 @@
 
 **AI-ready change intelligence for Java/Spring enterprise monoliths.**
 
-![Version](https://img.shields.io/badge/version-1.31.25-blue)
+![Version](https://img.shields.io/badge/version-1.31.27-blue)
 ![Python](https://img.shields.io/badge/python-3.10%2B-green)
 
 ---
@@ -40,7 +40,7 @@ pipx install sourcecode
 
 ```bash
 sourcecode version
-# sourcecode 1.31.25
+# sourcecode 1.31.27
 ```
 
 ---

{sourcecode-1.31.25 → sourcecode-1.31.27}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sourcecode"
-version = "1.31.25"
+version = "1.31.27"
 description = "Deterministic codebase context for AI coding agents"
 readme = "README.md"
 requires-python = ">=3.9"

{sourcecode-1.31.25 → sourcecode-1.31.27}/src/sourcecode/__init__.py

@@ -1,3 +1,3 @@
 """sourcecode — Deterministic codebase context maps for AI coding agents."""
 
-__version__ = "1.31.25"
+__version__ = "1.31.27"

{sourcecode-1.31.25 → sourcecode-1.31.27}/src/sourcecode/canonical_ir.py

@@ -332,6 +332,7 @@ def ir_dict_to_canonical(
         "spring_events": ir.get("spring_events") or {},
         "score_basis": (ir.get("impact") or {}).get("score_basis", "none"),
         "reverse_graph_size": len(ir.get("reverse_graph") or {}),
+        "security_model": ir.get("security_model", "unknown"),
     }
 
     cir_hash = _compute_cir_hash(
@@ -452,6 +453,7 @@ def project_endpoint_surface(cir: CanonicalRepositoryIR) -> dict:
         "endpoints": endpoints,
         "total": len(endpoints),
         "no_security_signal": no_security_signal,
+        "security_model": cir.metadata.get("security_model", "unknown"),
         # Legacy field alias — same count, kept for backward compat
         "undocumented": no_security_signal,
     }

{sourcecode-1.31.25 → sourcecode-1.31.27}/src/sourcecode/cli.py

@@ -745,7 +745,7 @@ def main(
             "is meant for --agent mode. Use --agent --full for expanded output.",
             err=True,
         )
-        raise typer.Exit(code=2)
+        raise typer.Exit(code=1)
 
     # P0-2 FIX: --full without --compact or --agent has no effect in contract/raw mode.
     # Warn so the user knows the flag is not doing anything.
@@ -1127,10 +1127,14 @@ def main(
 
     # --compact implicitly enables lightweight analysis passes so that
     # dependency_summary, env_summary and code_notes_summary are never null.
+    # architecture=True is also enabled so that architecture.confidence is
+    # consistent with --agent (which auto-enables architecture).  The
+    # ArchitectureAnalyzer is path-based and adds negligible latency.
     if compact:
         dependencies = True
         env_map = True
         code_notes = True
+        architecture = True
 
     dependency_analyzer = DependencyAnalyzer() if dependencies else None
     graph_analyzer = GraphAnalyzer() if graph_modules else None
@@ -3549,6 +3553,7 @@ def mcp_init(
         raise typer.Exit(code=1)
 
     typer.echo("MCP integration active.")
+    typer.echo("  Note:    repo_path debe usar forward slashes: C:/Users/... o /ruta/unix")
     typer.echo("")
 
     # Post-write: validate config and warn if client not running
@@ -3696,6 +3701,7 @@ def mcp_status() -> None:
     typer.echo(sep)
     typer.echo("  Note:    'configured' and 'running' are checked independently.")
     typer.echo("           A running app still needs restart after first-time config.")
+    typer.echo("  Path:    repo_path debe usar forward slashes: C:/Users/... o /ruta/unix")
     typer.echo("  Setup:   sourcecode mcp init")
     typer.echo("  Remove:  sourcecode mcp remove")
 

{sourcecode-1.31.25 → sourcecode-1.31.27}/src/sourcecode/mcp/server.py

@@ -10,8 +10,10 @@ data is the parsed JSON object from the CLI output, not a shell string.
 """
 from __future__ import annotations
 
+import concurrent.futures
 import json
 import os
+import re
 from typing import Any
 
 from mcp.server.fastmcp import FastMCP
@@ -63,6 +65,29 @@ def _execute(args: list[str]) -> dict | CallToolResult:
     return _ok(result)
 
 
+_DEFAULT_TESTS_TIMEOUT_MS = 15_000
+
+# Regex for MINGW paths: /c/some/path → C:/some/path
+_MINGW_PATH_RE = re.compile(r"^/([a-zA-Z])(/.*)?$")
+
+
+def _normalize_repo_path(path: str) -> str:
+    """Normalize repo_path for cross-platform compatibility (P0-2).
+
+    Handles two Windows-specific formats:
+    - MINGW/Git-Bash: /c/Users/... → C:/Users/...
+    - Backslash:       C:\\Users\\... → C:/Users/...
+    Forward-slash paths (C:/Users/... or /unix/path) pass through unchanged.
+    """
+    m = _MINGW_PATH_RE.match(path)
+    if m:
+        drive = m.group(1).upper()
+        rest = m.group(2) or "/"
+        path = f"{drive}:{rest}"
+    path = path.replace("\\", "/")
+    return path
+
+
 @mcp.tool()
 def get_compact_context(repo_path: str = ".", git_context: bool = False) -> dict:
     """Compact human/LLM summary of a repository (~1000-3000 tokens). USE THIS FIRST.
@@ -76,14 +101,22 @@ def get_compact_context(repo_path: str = ".", git_context: bool = False) -> dict
     repo_path: absolute path to the repository (default: current working directory).
     git_context: include git log and branch context in the analysis.
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    if not isinstance(git_context, bool):
-        return _err("git_context must be boolean", "INVALID_ARGUMENT")
-    args = [repo_path, "--compact"]
-    if git_context:
-        args.append("--git-context")
-    return _execute(args)
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        if not isinstance(git_context, bool):
+            return _err("git_context must be boolean", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        args = [repo_path, "--compact"]
+        if git_context:
+            args.append("--git-context")
+        return _execute(args)
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 @mcp.tool()
@@ -99,14 +132,22 @@ def get_agent_context(repo_path: str = ".", git_context: bool = False) -> dict:
     repo_path: absolute path to the repository (default: current working directory).
     git_context: include git log and branch context in the analysis.
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    if not isinstance(git_context, bool):
-        return _err("git_context must be boolean", "INVALID_ARGUMENT")
-    args = [repo_path, "--agent"]
-    if git_context:
-        args.append("--git-context")
-    return _execute(args)
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        if not isinstance(git_context, bool):
+            return _err("git_context must be boolean", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        args = [repo_path, "--agent"]
+        if git_context:
+            args.append("--git-context")
+        return _execute(args)
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 @mcp.tool()
@@ -117,17 +158,28 @@ def get_endpoints(repo_path: str = ".") -> dict:
     Returns: endpoints list with method, path, controller, handler fields;
              security dict when authorization annotations are present
              (policy: roles_allowed|permit_all|deny_all|authenticated|...);
-             total (int) and no_security_signal (int) counts.
-             no_security_signal counts endpoints with no recognized auth annotation —
-             repos using framework-level auth (e.g. Keycloak) may show high counts.
+             total (int), no_security_signal (int), and security_model (str) fields.
+             no_security_signal counts endpoints with no recognized auth annotation.
+             security_model values: "filter_based" (centralized Spring Security config —
+             high no_security_signal is expected and does NOT mean endpoints are unprotected),
+             "annotation_based" (per-endpoint annotations only), "mixed" (both),
+             "unknown" (no security signals detected).
     Supports Spring MVC (@GetMapping etc.) and JAX-RS (@GET/@POST etc.).
     Security annotations detected: @RolesAllowed, @PermitAll, @DenyAll,
     @Authenticated, @PreAuthorize, @Secured, @SecurityRequirement, @M3FiltroSeguridad.
     repo_path: absolute path to the repository (default: current working directory).
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    return _execute(["endpoints", repo_path])
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        return _execute(["endpoints", repo_path])
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 @mcp.tool()
@@ -138,12 +190,20 @@ def get_module_context(repo_path: str = ".", module: str = "") -> dict:
     repo_path: absolute path to the repository root.
     module: subdirectory name relative to repo_path (e.g. 'src/auth', 'api', 'core').
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    if not isinstance(module, str) or not module.strip():
-        return _err("module must be a non-empty string", "INVALID_ARGUMENT")
-    module_path = os.path.join(repo_path, module)
-    return _execute([module_path, "--compact"])
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        if not isinstance(module, str) or not module.strip():
+            return _err("module must be a non-empty string", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        module_path = repo_path.rstrip("/") + "/" + module.strip("/")
+        return _execute([module_path, "--compact"])
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 @mcp.tool()
@@ -154,11 +214,19 @@ def get_delta(repo_path: str = ".", since: str = "HEAD~1") -> dict:
     repo_path: absolute path to the repository (default: current working directory).
     since: git ref to diff against (e.g. HEAD~3, main, origin/main).
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    if not isinstance(since, str) or not since.strip():
-        return _err("since must be a non-empty git ref", "INVALID_ARGUMENT")
-    return _execute(["prepare-context", "delta", repo_path, "--since", since])
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        if not isinstance(since, str) or not since.strip():
+            return _err("since must be a non-empty git ref", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        return _execute(["prepare-context", "delta", repo_path, "--since", since])
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 @mcp.tool()
@@ -175,9 +243,17 @@ def get_ir_summary(repo_path: str = ".") -> dict:
 
     repo_path: absolute path to the Java repository (default: current working directory).
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    return _execute(["repo-ir", repo_path, "--summary-only"])
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        return _execute(["repo-ir", repo_path, "--summary-only"])
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 @mcp.tool()
@@ -190,12 +266,20 @@ def fix_bug_context(repo_path: str = ".", symptom: str = "") -> dict:
     symptom: optional error message or class name to focus the file ranking
              (e.g. "NullPointerException in EstructuraRrHhRestController").
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    args = ["prepare-context", "fix-bug", repo_path]
-    if symptom and isinstance(symptom, str) and symptom.strip():
-        args.extend(["--symptom", symptom.strip()])
-    return _execute(args)
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        args = ["prepare-context", "fix-bug", repo_path]
+        if symptom and isinstance(symptom, str) and symptom.strip():
+            args.extend(["--symptom", symptom.strip()])
+        return _execute(args)
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 @mcp.tool()
@@ -208,12 +292,20 @@ def review_pr_context(repo_path: str = ".", since: str = "") -> dict:
     since: git ref to diff against (e.g. HEAD~3, main, origin/main).
            If omitted, diffs against uncommitted changes or HEAD~1 fallback.
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    args = ["prepare-context", "review-pr", repo_path]
-    if since and isinstance(since, str) and since.strip():
-        args.extend(["--since", since.strip()])
-    return _execute(args)
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        args = ["prepare-context", "review-pr", repo_path]
+        if since and isinstance(since, str) and since.strip():
+            args.extend(["--since", since.strip()])
+        return _execute(args)
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 @mcp.tool()
@@ -223,9 +315,17 @@ def onboard_context(repo_path: str = ".") -> dict:
     Maps to: sourcecode prepare-context onboard <repo_path>
     repo_path: absolute path to the repository (default: current working directory).
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    return _execute(["prepare-context", "onboard", repo_path])
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        return _execute(["prepare-context", "onboard", repo_path])
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 @mcp.tool()
@@ -236,9 +336,17 @@ def explain_context(repo_path: str = ".") -> dict:
     Returns: project summary, architecture, entry points, key dependencies.
     repo_path: absolute path to the repository (default: current working directory).
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    return _execute(["prepare-context", "explain", repo_path])
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        return _execute(["prepare-context", "explain", repo_path])
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 @mcp.tool()
@@ -249,9 +357,17 @@ def refactor_context(repo_path: str = ".") -> dict:
     Returns: structural issues, coupling hotspots, improvement opportunities.
     repo_path: absolute path to the repository (default: current working directory).
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    return _execute(["prepare-context", "refactor", repo_path])
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        return _execute(["prepare-context", "refactor", repo_path])
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 @mcp.tool()
@@ -260,15 +376,45 @@ def generate_tests_context(repo_path: str = ".", include_all: bool = False) -> d
 
     Maps to: sourcecode prepare-context generate-tests <repo_path> [--all]
     Returns: test_gaps list of untested files ranked by risk.
+            On large repos (>2000 classes) analysis is bounded by SOURCECODE_TESTS_TIMEOUT_MS
+            (default: 15000 ms). If timeout elapses, returns truncated=true with partial results.
     repo_path: absolute path to the repository (default: current working directory).
     include_all: return full test_gaps list without truncating to top 20.
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    args = ["prepare-context", "generate-tests", repo_path]
-    if include_all:
-        args.append("--all")
-    return _execute(args)
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        if not isinstance(include_all, bool):
+            return _err("include_all must be boolean", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        args = ["prepare-context", "generate-tests", repo_path]
+        if include_all:
+            args.append("--all")
+
+        # P0-3: timeout guard — large repos can stall the stdio transport indefinitely.
+        timeout_ms = int(os.environ.get("SOURCECODE_TESTS_TIMEOUT_MS", str(_DEFAULT_TESTS_TIMEOUT_MS)))
+        timeout_s = timeout_ms / 1000.0
+
+        executor = concurrent.futures.ThreadPoolExecutor(max_workers=1)
+        future = executor.submit(_execute, args)
+        done, _not_done = concurrent.futures.wait([future], timeout=timeout_s)
+        if _not_done:
+            executor.shutdown(wait=False)
+            return _ok({
+                "truncated": True,
+                "truncated_reason": f"timeout_{timeout_ms // 1000}s" if timeout_ms >= 1000 else f"timeout_{timeout_ms}ms",
+                "files_analyzed": 0,
+                "results": [],
+            })
+        executor.shutdown(wait=False)
+        return future.result()
+
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 @mcp.tool()
@@ -289,14 +435,22 @@ def get_impact_context(repo_path: str = ".", target: str = "", depth: int = 4) -
     repo_path: absolute path to the Java repository (default: current working directory).
     depth: BFS depth for indirect caller traversal (1–8, default: 4).
     """
-    if not isinstance(repo_path, str):
-        return _err("repo_path must be a string", "INVALID_ARGUMENT")
-    if not isinstance(target, str) or not target.strip():
-        return _err("target must be a non-empty class name or FQN", "INVALID_ARGUMENT")
-    if not isinstance(depth, int) or depth < 1 or depth > 8:
-        return _err("depth must be an integer between 1 and 8", "INVALID_ARGUMENT")
-    args = ["impact", target.strip(), repo_path, "--depth", str(depth)]
-    return _execute(args)
+    _raw = repo_path
+    try:
+        if not isinstance(repo_path, str):
+            return _err("repo_path must be a string", "INVALID_ARGUMENT")
+        if not isinstance(target, str) or not target.strip():
+            return _err("target must be a non-empty class name or FQN", "INVALID_ARGUMENT")
+        if not isinstance(depth, int) or depth < 1 or depth > 8:
+            return _err("depth must be an integer between 1 and 8", "INVALID_ARGUMENT")
+        repo_path = _normalize_repo_path(repo_path)
+        args = ["impact", target.strip(), repo_path, "--depth", str(depth)]
+        return _execute(args)
+    except Exception as exc:
+        return _err(
+            f"Internal error: {type(exc).__name__}: {exc} — repo_path recibido: {_raw}",
+            "INTERNAL_ERROR",
+        )
 
 
 _TELEMETRY_ACTIONS = frozenset({"status", "enable", "disable"})