sourcecode 1.33.20__tar.gz → 1.33.21__tar.gz

{sourcecode-1.33.20 → sourcecode-1.33.21}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 1.33.20
+Version: 1.33.21
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 License-File: LICENSE
 Keywords: agents,ai,codebase,context,developer-tools,llm
@@ -39,7 +39,7 @@ Description-Content-Type: text/markdown
 
 **Persistent structural context and ultra-fast repeated analysis for AI coding agents.**
 
-![Version](https://img.shields.io/badge/version-1.33.20-blue)
+![Version](https://img.shields.io/badge/version-1.33.21-blue)
 ![Python](https://img.shields.io/badge/python-3.10%2B-green)
 
 ---

{sourcecode-1.33.20 → sourcecode-1.33.21}/README.md

@@ -2,7 +2,7 @@
 
 **Persistent structural context and ultra-fast repeated analysis for AI coding agents.**
 
-![Version](https://img.shields.io/badge/version-1.33.20-blue)
+![Version](https://img.shields.io/badge/version-1.33.21-blue)
 ![Python](https://img.shields.io/badge/python-3.10%2B-green)
 
 ---

{sourcecode-1.33.20 → sourcecode-1.33.21}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sourcecode"
-version = "1.33.20"
+version = "1.33.21"
 description = "Persistent structural context and ultra-fast repeated analysis for AI coding agents"
 readme = "README.md"
 requires-python = ">=3.9"

{sourcecode-1.33.20 → sourcecode-1.33.21}/src/sourcecode/__init__.py

@@ -1,3 +1,3 @@
 """sourcecode — Deterministic codebase context maps for AI coding agents."""
 
-__version__ = "1.33.20"
+__version__ = "1.33.21"

{sourcecode-1.33.20 → sourcecode-1.33.21}/src/sourcecode/cli.py

@@ -2566,6 +2566,42 @@ def prepare_context_cmd(
     from dataclasses import asdict
     import time as _time
 
+    # Task-level cache: keyed on (task, git_head, symptom) so warm calls complete in <1s.
+    # Skip for diff-dependent tasks (delta, review-pr), fast mode, and llm_prompt
+    # (those embed per-call content that must not be served from cache).
+    import subprocess as _pctx_sub
+    import hashlib as _pctx_hash
+    from sourcecode import cache as _pctx_cache
+    _pctx_git_sha = ""
+    _pctx_cache_key = ""
+    _pctx_cacheable = task not in ("delta", "review-pr") and not fast and not llm_prompt
+    if _pctx_cacheable:
+        try:
+            _sha_r2 = _pctx_sub.run(
+                ["git", "-C", str(target), "rev-parse", "--short", "HEAD"],
+                capture_output=True, text=True, timeout=3,
+            )
+            _pctx_git_sha = _sha_r2.stdout.strip()
+        except Exception:
+            pass
+        if _pctx_git_sha:
+            _sym_h = _pctx_hash.sha256((symptom or "").encode()).hexdigest()[:8]
+            _pctx_cache_key = f"pctx-{task}-{_pctx_git_sha}-{_sym_h}-{format or 'json'}"
+            _cached_pctx = _pctx_cache.read(target, _pctx_cache_key)
+            if _cached_pctx is not None:
+                if output_path is not None:
+                    output_path.write_text(_cached_pctx, encoding="utf-8")
+                else:
+                    sys.stdout.buffer.write(_cached_pctx.encode("utf-8"))
+                    if not _cached_pctx.endswith("\n"):
+                        sys.stdout.buffer.write(b"\n")
+                    sys.stdout.buffer.flush()
+                if copy:
+                    _c = _cached_pctx.strip()
+                    if _c not in ("{}", "[]", "null"):
+                        _copy_to_clipboard(_cached_pctx)
+                return
+
     builder = TaskContextBuilder(target)
     _progress = Progress()
     _phase = f"analyzing ({task})"
@@ -2950,6 +2986,12 @@ def prepare_context_cmd(
     else:
         _pc_content = json.dumps(out, indent=2, ensure_ascii=False)
 
+    if _pctx_cacheable and _pctx_cache_key and format != "github-comment":
+        try:
+            _pctx_cache.write(target, _pctx_cache_key, _pc_content)
+        except Exception:
+            pass
+
     if output_path is not None:
         output_path.write_text(_pc_content, encoding="utf-8")
     else:
@@ -3179,6 +3221,16 @@ def repo_ir_cmd(
                 err=True,
             )
     else:
+        _ir_size = len(output.encode("utf-8"))
+        if _ir_size > 400_000:
+            _ir_tokens = _ir_size // 4
+            sys.stderr.write(
+                f"WARNING: Output is ~{_ir_tokens // 1000}K tokens. This exceeds the context window of "
+                "most LLMs (GPT-4o: 128K, Claude Sonnet: 200K). "
+                "Use --compact or --agent for LLM-consumable context. "
+                "Use --output FILE to save for local search tools.\n"
+            )
+            sys.stderr.flush()
         try:
             sys.stdout.buffer.write(output.encode("utf-8"))
             sys.stdout.buffer.write(b"\n")
@@ -3948,12 +4000,29 @@ def cold_start_cmd(
 
     Returns instantly from persisted RIS — zero re-analysis cost.
     status: cold_start_ready | cold_start_stale | no_ris
+
+    \b
+    Note: Produces large output (~100K–200K tokens for medium repos).
+    Designed for bootstrap snapshots, not direct LLM injection.
+    Use --compact or --agent instead for LLM-consumable context.
+    Use --output FILE to save for local search tools.
     """
     import json as _json
     from sourcecode.ris import get_cold_start_context as _gcs
     target = Path(path).resolve()
     result = _gcs(target)
-    typer.echo(_json.dumps(result, indent=2, ensure_ascii=False))
+    _out = _json.dumps(result, indent=2, ensure_ascii=False)
+    _size = len(_out.encode("utf-8"))
+    if _size > 400_000:
+        _tokens = _size // 4
+        sys.stderr.write(
+            f"WARNING: Output is ~{_tokens // 1000}K tokens. This exceeds the context window of "
+            "most LLMs (GPT-4o: 128K, Claude Sonnet: 200K). "
+            "Use --compact or --agent for LLM-consumable context. "
+            "Use --output FILE to save for local search tools.\n"
+        )
+        sys.stderr.flush()
+    typer.echo(_out)
 
 
 # ── analyze (legacy alias) ────────────────────────────────────────────────────

{sourcecode-1.33.20 → sourcecode-1.33.21}/src/sourcecode/mcp/server.py

@@ -28,6 +28,41 @@ from sourcecode.error_schema import (
 )
 from sourcecode.mcp.runner import CommandError, run_command
 
+# Patch FastMCP's Tool.run to intercept pydantic.ValidationError and return
+# structured JSON instead of the raw "Error executing tool X: 1 validation
+# error..." plain-text string that FastMCP produces by default.
+try:
+    import pydantic as _pydantic
+    from mcp.server.fastmcp.tools.base import Tool as _FastMCPTool
+
+    _orig_tool_run = _FastMCPTool.run
+
+    async def _patched_tool_run(self, arguments, context=None, convert_result=False):  # type: ignore[override]
+        try:
+            return await _orig_tool_run(self, arguments, context=context, convert_result=convert_result)
+        except Exception as _exc:
+            _cause = getattr(_exc, "__cause__", None)
+            if isinstance(_cause, _pydantic.ValidationError):
+                _errors = _cause.errors()
+                _missing = [str(e.get("loc", ("?",))[0]) for e in _errors if e.get("type") == "missing"]
+                _msg = f"Missing required field: {_missing[0]}" if _missing else "Argument validation failed"
+                _payload = {
+                    "success": False,
+                    "data": None,
+                    "error": build_error_object(
+                        INVALID_INPUT_CODE,
+                        _msg,
+                        hint="Pass the supported arguments using the documented tool schema.",
+                        expected=f"{self.name} arguments with required field '{_missing[0]}'" if _missing else f"{self.name} arguments",
+                    ),
+                }
+                return _payload
+            raise
+
+    _FastMCPTool.run = _patched_tool_run  # type: ignore[method-assign]
+except Exception:
+    pass  # never break server startup over a patch failure
+
 # FIX-P0-5: MCP server version must match CLI version exactly.
 # FastMCP does not accept version= in __init__; inject it on the underlying
 # low-level Server so the MCP initialize handshake reports the correct version.

{sourcecode-1.33.20 → sourcecode-1.33.21}/src/sourcecode/repository_ir.py

@@ -2399,6 +2399,8 @@ def _route_security_from_sym(
             m = _re2.search(r'(?:nombreRecurso\s*=\s*)?["\']([^"\']+)["\']', raw)
             if m:
                 return {"policy": "custom_permission", "required_permission": m.group(1)}
+            # Value is a constant reference or empty — still flag the annotation
+            return {"policy": "custom_annotation", "annotation": "@M3FiltroSeguridad", "resource": raw.strip() or None}
         return None
 
     # Method-level first, then class-level fallback
@@ -2569,6 +2571,11 @@ def _build_route_surface(
             for child_fqn, parent_simple in extends_map.items()
         }
 
+        # Build lookup for security_annotations from phase-2 routes
+        _parent_sec_by_sym: dict[str, object] = {
+            r["symbol"]: r.get("security_annotations") for r in routes
+        }
+
         for cls_simple, data in class_info.items():
             if data["own_endpoints"]:
                 continue
@@ -2602,6 +2609,7 @@ def _build_route_surface(
                                     "method": verb,
                                     "stable_id": stable_id,
                                     "inheritance_depth": depth,
+                                    "security_annotations": _parent_sec_by_sym.get(declaring_sym),
                                 })
                     break
                 chain = simple_extends.get(chain)