sourcecode 1.33.8__tar.gz → 1.33.9__tar.gz

{sourcecode-1.33.8 → sourcecode-1.33.9}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 1.33.8
+Version: 1.33.9
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 License-File: LICENSE
 Keywords: agents,ai,codebase,context,developer-tools,llm
@@ -39,7 +39,7 @@ Description-Content-Type: text/markdown
 
 **Persistent structural context and ultra-fast repeated analysis for AI coding agents.**
 
-![Version](https://img.shields.io/badge/version-1.33.8-blue)
+![Version](https://img.shields.io/badge/version-1.33.9-blue)
 ![Python](https://img.shields.io/badge/python-3.10%2B-green)
 
 ---

{sourcecode-1.33.8 → sourcecode-1.33.9}/README.md

@@ -2,7 +2,7 @@
 
 **Persistent structural context and ultra-fast repeated analysis for AI coding agents.**
 
-![Version](https://img.shields.io/badge/version-1.33.8-blue)
+![Version](https://img.shields.io/badge/version-1.33.9-blue)
 ![Python](https://img.shields.io/badge/python-3.10%2B-green)
 
 ---

{sourcecode-1.33.8 → sourcecode-1.33.9}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sourcecode"
-version = "1.33.8"
+version = "1.33.9"
 description = "Persistent structural context and ultra-fast repeated analysis for AI coding agents"
 readme = "README.md"
 requires-python = ">=3.9"

{sourcecode-1.33.8 → sourcecode-1.33.9}/src/sourcecode/__init__.py

@@ -1,3 +1,3 @@
 """sourcecode — Deterministic codebase context maps for AI coding agents."""
 
-__version__ = "1.33.8"
+__version__ = "1.33.9"

{sourcecode-1.33.8 → sourcecode-1.33.9}/src/sourcecode/canonical_ir.py

@@ -445,10 +445,15 @@ def project_endpoint_surface(cir: CanonicalRepositoryIR) -> dict:
             # Backward compat: top-level required_permission for custom annotation
             if ep.security.policy == "custom_permission":
                 entry["required_permission"] = ep.security.required_permission
+        else:
+            entry["security"] = {"policy": "none_detected"}
 
         endpoints.append(entry)
 
-    no_security_signal = sum(1 for e in endpoints if "security" not in e)
+    no_security_signal = sum(
+        1 for e in endpoints
+        if e.get("security", {}).get("policy") == "none_detected"
+    )
     return {
         "endpoints": endpoints,
         "total": len(endpoints),

{sourcecode-1.33.8 → sourcecode-1.33.9}/src/sourcecode/mcp/server.py

@@ -524,10 +524,10 @@ def get_endpoints(repo_path: str = ".") -> dict:
 
     Maps to: sourcecode endpoints <repo_path>
     Returns: endpoints list with method, path, controller, handler fields;
-             security dict when authorization annotations are present
-             (policy: roles_allowed|permit_all|deny_all|authenticated|...);
+             security dict always present (policy: roles_allowed|permit_all|deny_all|
+             authenticated|...|none_detected); none_detected = no auth annotation found.
              total (int), no_security_signal (int), and security_model (str) fields.
-             no_security_signal counts endpoints with no recognized auth annotation.
+             no_security_signal counts endpoints where security.policy == "none_detected".
              security_model values: "filter_based" (centralized Spring Security config —
              high no_security_signal is expected and does NOT mean endpoints are unprotected),
              "annotation_based" (per-endpoint annotations only), "mixed" (both),

{sourcecode-1.33.8 → sourcecode-1.33.9}/src/sourcecode/repository_ir.py

@@ -3015,7 +3015,10 @@ def extract_java_endpoints(root: Path) -> "dict[str, Any]":
     # "no_security_signal" = no recognized security annotation at method OR class level.
     # Note: repos may use framework-level security (e.g. Keycloak itself) with no
     # per-endpoint annotations — this count reflects annotation-based coverage only.
-    no_security_signal = sum(1 for e in endpoints if not e.get("security"))
+    no_security_signal = sum(
+        1 for e in endpoints
+        if e.get("security", {}).get("policy") == "none_detected"
+    )
 
     # Detect filter-based security: centralized Spring Security config class.
     # When present, high no_security_signal is expected — security is enforced by
@@ -3034,7 +3037,10 @@ def extract_java_endpoints(root: Path) -> "dict[str, Any]":
             for sym in _class_syms
         )
     )
-    _has_annotation_security = any(e.get("security") for e in endpoints)
+    _has_annotation_security = any(
+        e.get("security", {}).get("policy") != "none_detected"
+        for e in endpoints
+    )
     if _filter_based and _has_annotation_security:
         security_model = "mixed"
     elif _filter_based: