sourcecode 1.33.8__py3-none-any.whl → 1.33.9__py3-none-any.whl

sourcecode/__init__.py

@@ -1,3 +1,3 @@
 """sourcecode — Deterministic codebase context maps for AI coding agents."""
 
-__version__ = "1.33.8"
+__version__ = "1.33.9"

sourcecode/canonical_ir.py

@@ -445,10 +445,15 @@ def project_endpoint_surface(cir: CanonicalRepositoryIR) -> dict:
             # Backward compat: top-level required_permission for custom annotation
             if ep.security.policy == "custom_permission":
                 entry["required_permission"] = ep.security.required_permission
+        else:
+            entry["security"] = {"policy": "none_detected"}
 
         endpoints.append(entry)
 
-    no_security_signal = sum(1 for e in endpoints if "security" not in e)
+    no_security_signal = sum(
+        1 for e in endpoints
+        if e.get("security", {}).get("policy") == "none_detected"
+    )
     return {
         "endpoints": endpoints,
         "total": len(endpoints),

sourcecode/mcp/server.py

@@ -524,10 +524,10 @@ def get_endpoints(repo_path: str = ".") -> dict:
 
     Maps to: sourcecode endpoints <repo_path>
     Returns: endpoints list with method, path, controller, handler fields;
-             security dict when authorization annotations are present
-             (policy: roles_allowed|permit_all|deny_all|authenticated|...);
+             security dict always present (policy: roles_allowed|permit_all|deny_all|
+             authenticated|...|none_detected); none_detected = no auth annotation found.
              total (int), no_security_signal (int), and security_model (str) fields.
-             no_security_signal counts endpoints with no recognized auth annotation.
+             no_security_signal counts endpoints where security.policy == "none_detected".
              security_model values: "filter_based" (centralized Spring Security config —
              high no_security_signal is expected and does NOT mean endpoints are unprotected),
              "annotation_based" (per-endpoint annotations only), "mixed" (both),

sourcecode/repository_ir.py

@@ -3015,7 +3015,10 @@ def extract_java_endpoints(root: Path) -> "dict[str, Any]":
     # "no_security_signal" = no recognized security annotation at method OR class level.
     # Note: repos may use framework-level security (e.g. Keycloak itself) with no
     # per-endpoint annotations — this count reflects annotation-based coverage only.
-    no_security_signal = sum(1 for e in endpoints if not e.get("security"))
+    no_security_signal = sum(
+        1 for e in endpoints
+        if e.get("security", {}).get("policy") == "none_detected"
+    )
 
     # Detect filter-based security: centralized Spring Security config class.
     # When present, high no_security_signal is expected — security is enforced by
@@ -3034,7 +3037,10 @@ def extract_java_endpoints(root: Path) -> "dict[str, Any]":
             for sym in _class_syms
         )
     )
-    _has_annotation_security = any(e.get("security") for e in endpoints)
+    _has_annotation_security = any(
+        e.get("security", {}).get("policy") != "none_detected"
+        for e in endpoints
+    )
     if _filter_based and _has_annotation_security:
         security_model = "mixed"
     elif _filter_based:

{sourcecode-1.33.8.dist-info → sourcecode-1.33.9.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 1.33.8
+Version: 1.33.9
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 License-File: LICENSE
 Keywords: agents,ai,codebase,context,developer-tools,llm
@@ -39,7 +39,7 @@ Description-Content-Type: text/markdown
 
 **Persistent structural context and ultra-fast repeated analysis for AI coding agents.**
 
-![Version](https://img.shields.io/badge/version-1.33.8-blue)
+![Version](https://img.shields.io/badge/version-1.33.9-blue)
 ![Python](https://img.shields.io/badge/python-3.10%2B-green)
 
 ---

{sourcecode-1.33.8.dist-info → sourcecode-1.33.9.dist-info}/RECORD

@@ -1,10 +1,10 @@
-sourcecode/__init__.py,sha256=SJW4lMtERwmQEJhDAPILv6kOW9drUsER1GikyiTHkbw,103
+sourcecode/__init__.py,sha256=YeVDeT3Zo0JoWo2z6x5w3rWDOH33C_U0jEgkwVhF1I0,103
 sourcecode/adaptive_scanner.py,sha256=XffluXKzJUXrMtjEiAOnSNPZnztdIcts17T9ouHeID0,10521
 sourcecode/architecture_analyzer.py,sha256=qh749a7ykPtGmQI1MR9y6j8TtL_jBdVYFx9YRsLqOMw,44121
 sourcecode/architecture_summary.py,sha256=z34_6v7cSwy98cof2UVciGho7SCrZ93tiqMmq5WNzRQ,20405
 sourcecode/ast_extractor.py,sha256=_btmeOJIe3t-NicF94D5ZAesa2YIJ0_QNExGnbHxGFE,50578
 sourcecode/cache.py,sha256=wAyPrXN5DqiGivnMpeEuun2xHDKfBer2_oBsh6kj_vc,30447
-sourcecode/canonical_ir.py,sha256=_HM3AUmKSdna9u4dCoU6rpgSA6HdF8gzOKZykIUCNGY,23277
+sourcecode/canonical_ir.py,sha256=GD0rMyaHFoBjgeJPa0L4ASG2EDr-BmvV8X0GO62cUQ8,23408
 sourcecode/classifier.py,sha256=2lYoSH3vOTkXZYPU7Go2WIet1-IuNzTWVhc-ULnXtgw,8024
 sourcecode/cli.py,sha256=RWuME0JHzo8j7ltKzFs4an8S55CI63nV-DzuMO22OwQ,184549
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
@@ -35,7 +35,7 @@ sourcecode/ranking_engine.py,sha256=ZAucq_YX2KkWUuAZf4P0lhtQ_38vEFnUhuGtSZd1S0E,
 sourcecode/redactor.py,sha256=SB4hwIvg8h-hvcqKcDWaZvA-aSyn-at-BIRwa0tUv5E,3227
 sourcecode/relevance_scorer.py,sha256=MYF4FFkveAQps9SmTeTlh6ODiBz2F--_hWNeHMLtUHQ,8405
 sourcecode/repo_classifier.py,sha256=FG1vaWKdWXsWdl-S8hjVMiTqcwgaRXkDyvK4rPcOGtQ,22681
-sourcecode/repository_ir.py,sha256=n3QYeCC4VjgVupjTxK3cJ6T6d0xcn-GOTR18tMhT0qg,155993
+sourcecode/repository_ir.py,sha256=gsPOaIqXGVBaTr1bI4xSt2BBUWSQmr5TIK_YN2uwptI,156107
 sourcecode/ris.py,sha256=vkIe_v-jjceeb0Adhn-Kw5eFXE_nIkGHflOnQYPycTk,17411
 sourcecode/runtime_classifier.py,sha256=uTAD6BDCiBLUZEDRfqk718kM4RTT_vAbfkcOI2_Xx58,18432
 sourcecode/scanner.py,sha256=WdOQ78mMzjR1NjmKTlbxdgwinnCTfAhxCVLBEFQiFHU,8899
@@ -70,7 +70,7 @@ sourcecode/mcp/__init__.py,sha256=XU4HfRGbdid8wdUA0x_4f7uKZD1z3mv_XUY_WU_T9Mw,17
 sourcecode/mcp/orchestrator.py,sha256=BMi1D6liJHI3DXiaC8yeBLLP0wXajpCP3-vnRGqrvnw,26850
 sourcecode/mcp/registry.py,sha256=9SdXkwfc89_dkYFNeSbIgO5KDSMoI5sFoIBRX2PLt14,33248
 sourcecode/mcp/runner.py,sha256=Id9L2VEsiIMfIXW8uHANHUY7o4eA_t2I3TFoPWHqY8U,2437
-sourcecode/mcp/server.py,sha256=Slg16vn1Knpzyvl9K7TK_HlgAooc4z8xCLvEPLWMO5Y,43031
+sourcecode/mcp/server.py,sha256=f2PRhZ8ElI3A_44UIB3bpuTHB0VEqgnypkhv_SYTKsM,43066
 sourcecode/mcp/onboarding/__init__.py,sha256=sj2PWqEBmMc4zBNkomg89WtL0M6S7A9yb7_wAuSWNP4,66
 sourcecode/mcp/onboarding/applier.py,sha256=B9CneieWTpaDSDIyW3S5nrlRlBpvfqUcgi93-mm_ApQ,2135
 sourcecode/mcp/onboarding/backup.py,sha256=ihqGOR8QTX8HASRSEDyfFyXr5bkXrygPHamv4p9KTmk,1452
@@ -82,8 +82,8 @@ sourcecode/telemetry/consent.py,sha256=wLMvGNJeSSyZoNkQXpoUioY6mMv4Qdvuw7S9jAEWn
 sourcecode/telemetry/events.py,sha256=oEvvulfsv5GIDWG2174gSS6tNB95w38AIYiYeifGKlE,2294
 sourcecode/telemetry/filters.py,sha256=Asa71oRl7q3Wt_FMwuufIZJFzSYdgRNKS8LHCIyFeYE,4805
 sourcecode/telemetry/transport.py,sha256=KJeIPCPWMdmbCP3ySGs2iUlia34U6vWne2dZsUezesw,1560
-sourcecode-1.33.8.dist-info/METADATA,sha256=ryYYDTR9iiBIsHWNXO0arDn-Rrx0qgnX8uupPlha7Rk,16440
-sourcecode-1.33.8.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-1.33.8.dist-info/entry_points.txt,sha256=ex3F9rmbXeyDIoFQHtkEqTsKSaJow8F0LrVu8XfIktQ,57
-sourcecode-1.33.8.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
-sourcecode-1.33.8.dist-info/RECORD,,
+sourcecode-1.33.9.dist-info/METADATA,sha256=y4HnD_ipqBHlJGQ3VWsfi9RXQqz88mDklYU-uDJDn8c,16440
+sourcecode-1.33.9.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-1.33.9.dist-info/entry_points.txt,sha256=ex3F9rmbXeyDIoFQHtkEqTsKSaJow8F0LrVu8XfIktQ,57
+sourcecode-1.33.9.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
+sourcecode-1.33.9.dist-info/RECORD,,