sourcecode 1.35.17__py3-none-any.whl → 1.35.19__py3-none-any.whl

sourcecode/__init__.py

@@ -1,3 +1,3 @@
 """sourcecode — Deterministic codebase context maps for AI coding agents."""
 
-__version__ = "1.35.17"
+__version__ = "1.35.19"

sourcecode/cli.py

@@ -167,6 +167,11 @@ Cold scan: 2–10s depending on repo size. Warm cache: 0.3–0.6s.
   sourcecode --compact --git-context    include git hotspots and uncommitted files
   sourcecode --agent                    full structured JSON for AI agents
 
+[bold]Auth commands:[/bold]
+  auth login                   [dim]# authenticate via browser (device code)[/dim]
+  auth status                  [dim]# show current plan and auth state[/dim]
+  auth logout                  [dim]# remove local credentials[/dim]
+
 [bold]Cache commands:[/bold]
   cache status                 [dim]# cache size, hit keys, last-warmed timestamp[/dim]
   cache warm                   [dim]# pre-build cache ahead of an agent session[/dim]
@@ -221,8 +226,8 @@ _SUBCOMMANDS: frozenset[str] = frozenset(
         "repo-ir", "mcp", "endpoints", "impact",
         # Enterprise workflow commands
         "onboard", "modernize", "fix-bug", "review-pr",
-        # License
-        "activate",
+        # License / auth
+        "activate", "auth",
         # Cache observability
         "cache",
         # RIS bootstrap
@@ -235,6 +240,8 @@ _SUBCOMMANDS: frozenset[str] = frozenset(
         "pr-impact",
         # Class architectural summary
         "explain",
+        # Spring Boot 2→3 migration readiness
+        "migrate-check",
     }
 )
 
@@ -512,6 +519,9 @@ app.add_typer(mcp_app, name="mcp")
 cache_app = typer.Typer(help="Cache inspection and management.", rich_markup_mode="rich")
 app.add_typer(cache_app, name="cache")
 
+auth_app = typer.Typer(help="Authentication: login, status, logout.", rich_markup_mode="rich")
+app.add_typer(auth_app, name="auth")
+
 
 def _maybe_ask_consent() -> None:
     """Show first-run consent prompt once, on interactive TTYs only."""
@@ -3890,6 +3900,116 @@ def spring_audit_cmd(
                 typer.echo("✓ copied to clipboard", err=True)
 
 
+# ── Spring Boot Migration Check ───────────────────────────────────────────────
+
+
+@app.command("migrate-check")
+def migrate_check_cmd(
+    path: Path = typer.Argument(
+        Path("."),
+        help="Repository path to scan (default: current directory)",
+    ),
+    output_path: Optional[Path] = typer.Option(
+        None, "--output", "-o",
+        help="Write output to a file instead of stdout.",
+    ),
+    format: str = typer.Option(
+        "json",
+        "--format",
+        "-f",
+        help="Output format: json (default) or text.",
+        show_default=True,
+    ),
+    copy: bool = typer.Option(
+        False,
+        "--copy",
+        "-c",
+        help="Copy output to system clipboard after a successful run.",
+    ),
+    min_severity: str = typer.Option(
+        "low",
+        "--min-severity",
+        help="Minimum severity to include: critical, high, medium, or low (default).",
+        show_default=True,
+    ),
+) -> None:
+    """Spring Boot 2→3 migration readiness: detect javax→jakarta namespace blockers.
+
+    \b
+    Detects:
+      MIG-001  javax.persistence import (CRITICAL — JPA will not compile)
+      MIG-002  javax.servlet import (HIGH — Servlet API changed)
+      MIG-003  javax.validation import (HIGH — Bean Validation changed)
+      MIG-004  javax.transaction import (HIGH — TX API changed)
+      MIG-005  extends WebSecurityConfigurerAdapter (HIGH — removed in Spring 6)
+      MIG-006  javax.annotation import (MEDIUM)
+      MIG-007  javax.inject import (MEDIUM)
+      MIG-008  javax.ws.rs import (MEDIUM — JAX-RS changed)
+
+    \b
+    Examples:
+      sourcecode migrate-check .
+      sourcecode migrate-check /path/to/repo --format text
+      sourcecode migrate-check . --min-severity high
+      sourcecode migrate-check . --output migration.json
+    """
+    from sourcecode.repository_ir import find_java_files
+    from sourcecode.migrate_check import run_migrate_check
+
+    target = path.resolve()
+    if not target.exists() or not target.is_dir():
+        _emit_error_json(
+            INVALID_INPUT_CODE,
+            f"'{target}' is not a valid directory.",
+            path=str(target),
+            hint="Pass an existing repository directory.",
+            expected="A directory path.",
+        )
+        raise typer.Exit(code=1)
+
+    if format not in ("json", "text"):
+        _emit_error_json(
+            INVALID_INPUT_CODE,
+            f"Invalid format '{format}'.",
+            hint="format must be one of: json, text.",
+            expected="json | text",
+        )
+        raise typer.Exit(code=1)
+
+    if min_severity not in ("critical", "high", "medium", "low"):
+        _emit_error_json(
+            INVALID_INPUT_CODE,
+            f"Invalid min-severity '{min_severity}'.",
+            hint="min-severity must be one of: critical, high, medium, low.",
+            expected="critical | high | medium | low",
+        )
+        raise typer.Exit(code=1)
+
+    file_list = find_java_files(target)
+    report = run_migrate_check(file_list, target, min_severity=min_severity)
+
+    if format == "text":
+        output = report.to_text(min_severity=min_severity)
+    else:
+        output = _serialize_dict(report.to_dict(), "json")
+
+    if output_path is not None:
+        output_path.write_text(output, encoding="utf-8")
+        total = report.summary.get("total_findings", 0)
+        typer.echo(
+            f"Migration check written to {output_path} "
+            f"(score: {report.readiness_score}/100, {total} findings)",
+            err=True,
+        )
+    else:
+        sys.stdout.buffer.write(output.encode("utf-8"))
+        sys.stdout.buffer.write(b"\n")
+        sys.stdout.buffer.flush()
+        if copy:
+            if _copy_to_clipboard(output):
+                typer.echo("✓ copied to clipboard", err=True)
+
+
 # ── Spring Impact Chain ───────────────────────────────────────────────────────
 
 
@@ -4799,6 +4919,73 @@ def activate_cmd(
     _activate(license_key)
 
 
+# ---------------------------------------------------------------------------
+# Auth commands (device-flow login / status / logout)
+# ---------------------------------------------------------------------------
+
+@auth_app.command("login")
+def auth_login_cmd() -> None:
+    """Authenticate via browser (device code flow).
+
+    \b
+    The CLI shows a URL. Open it in your browser, log in with your account,
+    and the CLI completes authentication automatically.
+    Credentials are stored in ~/.sourcecode/license.json (30-min cache; Supabase is source of truth).
+
+    \b
+    Examples:
+      sourcecode auth login
+    """
+    from sourcecode.license import auth_login as _auth_login
+    _auth_login()
+
+
+@auth_app.command("status")
+def auth_status_cmd() -> None:
+    """Show current authentication and plan status."""
+    import json as _json
+    try:
+        from sourcecode.license import _license_data as _ld, is_pro as _ip
+    except Exception:
+        _ld = None
+        _ip = False
+
+    if not _ld:
+        out: dict = {"status": "unauthenticated", "pro": False}
+        sys.stdout.write(_json.dumps(out, ensure_ascii=False) + "\n")
+        sys.stdout.flush()
+        return
+
+    out = {
+        "status": "authenticated",
+        "auth_method": _ld.get("auth_method", "license_key"),
+        "email": _ld.get("email", ""),
+        "plan": _ld.get("plan", "unknown"),
+        "plan_status": _ld.get("status", "unknown"),
+        "pro": _ip,
+        "validated_at": _ld.get("validated_at") or _ld.get("activated_at") or "",
+    }
+    sys.stdout.write(_json.dumps(out, indent=2, ensure_ascii=False) + "\n")
+    sys.stdout.flush()
+
+
+@auth_app.command("logout")
+def auth_logout_cmd() -> None:
+    """Remove local credentials (does not cancel your subscription)."""
+    import json as _json
+    _lf = Path.home() / ".sourcecode" / "license.json"
+    if _lf.exists():
+        try:
+            _lf.unlink()
+            out: dict = {"status": "logged_out", "message": "Local credentials removed."}
+        except Exception as _exc:
+            out = {"status": "error", "message": str(_exc)}
+    else:
+        out = {"status": "logged_out", "message": "No local credentials found."}
+    sys.stdout.write(_json.dumps(out, ensure_ascii=False) + "\n")
+    sys.stdout.flush()
+
+
 @app.command("version")
 def version_cmd() -> None:
     """Show version and exit.

sourcecode/license.py

@@ -42,8 +42,17 @@ if _SUPABASE_URL != _DEFAULT_SUPABASE_URL:
 _LICENSE_DIR: Path = Path.home() / ".sourcecode"
 _LICENSE_FILE: Path = _LICENSE_DIR / "license.json"
 _DELTA_RUNS_FILE: Path = _LICENSE_DIR / "delta_runs.json"
-_CACHE_TTL_SECONDS: int = 86400  # 24 hours
+_CACHE_TTL_SECONDS: int = 1800  # 30 minutes default; CI env overrides to 24h (see _get_cache_ttl)
+_CACHE_TTL_CI_SECONDS: int = 86400  # 24 hours — CI containers must not re-validate mid-run
+
+
+def _get_cache_ttl() -> int:
+    """Return TTL in seconds. CI containers get 24h to avoid mid-run network calls."""
+    return _CACHE_TTL_CI_SECONDS if os.environ.get("SOURCECODE_CI") else _CACHE_TTL_SECONDS
 _DELTA_FREE_LIMIT: int = 30
+_DEVICE_POLL_INTERVAL_S: float = 2.5
+_DEVICE_POLL_TIMEOUT_S: float = 300.0  # 5-minute window for user to complete browser auth
+_AUTH_BASE_URL: str = "https://sourcecode.dev"
 _LICENSE_KEY_RE = re.compile(r"^[A-Za-z0-9_\-]{1,200}$")
 
 # ---------------------------------------------------------------------------
@@ -213,6 +222,78 @@ def _call_get_license(license_key: str) -> Optional[dict]:
         return None  # Network error — caller decides what to do
 
 
+def _generate_device_code() -> str:
+    """Generate a human-readable device code: XXXX-XXXX-XXXX."""
+    import uuid
+    raw = uuid.uuid4().hex.upper()
+    return f"{raw[:4]}-{raw[4:8]}-{raw[8:12]}"
+
+
+def _call_device_check(device_code: str) -> Optional[dict]:
+    """Poll /device-check edge function. Returns dict or None on network error.
+
+    Expected responses:
+      {"status": "pending"}
+      {"status": "complete", "device_token": "...", "email": "...", "plan": "pro", ...}
+      {"status": "error", "message": "..."}
+    """
+    import urllib.error
+    import urllib.request
+
+    if not _SUPABASE_ANON_KEY:
+        return None
+
+    url = f"{_SUPABASE_URL}/functions/v1/device-check"
+    body = json.dumps({"device_code": device_code}).encode("utf-8")
+    req = urllib.request.Request(url, data=body, method="POST")
+    req.add_header("apikey", _SUPABASE_ANON_KEY)
+    req.add_header("Authorization", f"Bearer {_SUPABASE_ANON_KEY}")
+    req.add_header("Content-Type", "application/json")
+    req.add_header("Accept", "application/json")
+    try:
+        with urllib.request.urlopen(req, timeout=8) as resp:
+            return json.loads(resp.read().decode("utf-8"))
+    except urllib.error.HTTPError as exc:
+        try:
+            return json.loads(exc.read().decode("utf-8", errors="replace"))
+        except Exception:
+            return {"status": "error", "message": f"HTTP {exc.code}"}
+    except Exception:
+        return None
+
+
+def _call_get_user_plan(device_token: str) -> Optional[dict]:
+    """Fetch current plan/status for an authenticated device token.
+
+    Expected response:
+      {"valid": true, "plan": "pro", "status": "active", "features": [...], "email": "..."}
+      {"valid": false, "error": "token_revoked"}
+    """
+    import urllib.error
+    import urllib.request
+
+    if not _SUPABASE_ANON_KEY:
+        return None
+
+    url = f"{_SUPABASE_URL}/functions/v1/get-user-plan"
+    body = json.dumps({"device_token": device_token}).encode("utf-8")
+    req = urllib.request.Request(url, data=body, method="POST")
+    req.add_header("apikey", _SUPABASE_ANON_KEY)
+    req.add_header("Authorization", f"Bearer {_SUPABASE_ANON_KEY}")
+    req.add_header("Content-Type", "application/json")
+    req.add_header("Accept", "application/json")
+    try:
+        with urllib.request.urlopen(req, timeout=8) as resp:
+            return json.loads(resp.read().decode("utf-8"))
+    except urllib.error.HTTPError as exc:
+        try:
+            return json.loads(exc.read().decode("utf-8", errors="replace"))
+        except Exception:
+            return {"valid": False, "error": f"HTTP {exc.code}"}
+    except Exception:
+        return None
+
+
 def _maybe_revalidate() -> None:
     """Re-validate cached license if stale. Mutates globals; never raises."""
     global _license_data, is_pro
@@ -220,18 +301,55 @@ def _maybe_revalidate() -> None:
     if not _license_data:
         return
 
-    validated_at_str = _license_data.get("validated_at") or _license_data.get("activated_at")
+    validated_at_str = (
+        _license_data.get("validated_at")
+        or _license_data.get("activated_at")
+        or _license_data.get("authenticated_at")
+    )
     if validated_at_str:
         try:
             validated_at = datetime.fromisoformat(validated_at_str)
             if validated_at.tzinfo is None:
                 validated_at = validated_at.replace(tzinfo=timezone.utc)
             age = (datetime.now(timezone.utc) - validated_at).total_seconds()
-            if age < _CACHE_TTL_SECONDS:
+            if age < _get_cache_ttl():
                 return
         except Exception:
             pass
 
+    auth_method = _license_data.get("auth_method")
+
+    if auth_method == "device_flow":
+        device_token = _license_data.get("device_token")
+        if not device_token:
+            return
+        result = _call_get_user_plan(device_token)
+        if result is None:
+            return  # Network error — keep cached (offline-first)
+        if not result.get("valid", True):
+            _license_data = None
+            is_pro = False
+            try:
+                if _LICENSE_FILE.exists():
+                    _LICENSE_FILE.unlink()
+            except Exception:
+                pass
+            return
+        _license_data["plan"] = result.get("plan", "free")
+        _license_data["status"] = result.get("status", "active")
+        _license_data["features"] = result.get("features", [])
+        _license_data["validated_at"] = datetime.now(timezone.utc).isoformat()
+        is_pro = (
+            _license_data.get("plan") == "pro"
+            and _license_data.get("status", "active") != "inactive"
+        )
+        try:
+            _write_license_file(_license_data)
+        except Exception:
+            pass
+        return
+
+    # Key-based auth (existing flow / legacy)
     key = _license_data.get("license_key")
     if not key:
         return
@@ -266,6 +384,7 @@ def _init() -> None:
     is_pro = (
         _license_data is not None
         and _license_data.get("plan") == "pro"
+        and _license_data.get("status", "active") != "inactive"
     )
 
 
@@ -354,7 +473,105 @@ def require_pro(feature_name: str) -> None:
 
 
 # ---------------------------------------------------------------------------
-# Activation
+# Device-flow authentication
+# ---------------------------------------------------------------------------
+
+def _finish_device_auth(result: dict) -> None:
+    """Persist device-flow credentials and emit success JSON. Exits on error."""
+    global _license_data, is_pro
+
+    device_token = result.get("device_token") or result.get("access_token") or ""
+    email = result.get("email", "")
+    plan = result.get("plan", "free")
+    plan_status = (
+        result.get("status_detail")
+        or result.get("user_status")
+        or result.get("status", "active")
+    )
+    features = result.get("features") or []
+
+    if not device_token:
+        sys.stderr.write("\n")
+        _fail("auth_error", "Authentication completed but no session token received. Contact support.")
+
+    _LICENSE_DIR.mkdir(parents=True, exist_ok=True)
+    now = datetime.now(timezone.utc).isoformat()
+    data: dict = {
+        "auth_method": "device_flow",
+        "device_token": device_token,
+        "email": email,
+        "plan": plan,
+        "status": plan_status,
+        "features": features,
+        "authenticated_at": now,
+        "validated_at": now,
+    }
+    _write_license_file(data)
+    _license_data = data
+    is_pro = plan == "pro" and plan_status != "inactive"
+
+    sys.stderr.write(f"\n  Authenticated as {email}.  Plan: {plan}\n\n")
+    sys.stderr.flush()
+
+    output: dict = {"status": "authenticated", "email": email, "plan": plan, "pro": is_pro}
+    if not is_pro:
+        output["upgrade_hint"] = "https://sourcecode.dev/pricing"
+    else:
+        output["features"] = features
+    sys.stdout.write(json.dumps(output, ensure_ascii=False) + "\n")
+    sys.stdout.flush()
+
+
+def auth_login() -> None:
+    """Device code authentication flow.
+
+    Shows a browser URL; polls the backend every 2.5 s until the user
+    completes authentication or the 5-minute window expires.
+    Writes credentials to ~/.sourcecode/license.json on success.
+    Exits 0 on success, 1 on any failure.
+    """
+    import time
+
+    device_code = _generate_device_code()
+    activate_url = f"{_AUTH_BASE_URL}/activate?code={device_code}"
+
+    sys.stderr.write(f"\n  Open this URL to authenticate:\n  {activate_url}\n\n  Waiting")
+    sys.stderr.flush()
+
+    deadline = time.monotonic() + _DEVICE_POLL_TIMEOUT_S
+    _tick = 0
+
+    while time.monotonic() < deadline:
+        time.sleep(_DEVICE_POLL_INTERVAL_S)
+        _tick += 1
+        if _tick % 4 == 0:
+            sys.stderr.write(".")
+            sys.stderr.flush()
+
+        result = _call_device_check(device_code)
+        if result is None:
+            continue  # network blip — keep polling
+
+        status = result.get("status")
+        if status == "pending":
+            continue
+
+        if status == "complete":
+            _finish_device_auth(result)
+            return
+
+        if status == "error" or result.get("error"):
+            sys.stderr.write("\n")
+            _fail("auth_error", result.get("message") or result.get("error") or "Authentication failed.")
+
+        # Unknown status — keep polling
+
+    sys.stderr.write("\n")
+    _fail("auth_timeout", "Authentication timed out after 5 minutes. Please try again.")
+
+
+# ---------------------------------------------------------------------------
+# Activation (key-based — legacy / direct key entry)
 # ---------------------------------------------------------------------------
 
 def activate_license(license_key: str) -> None:

sourcecode/migrate_check.py

@@ -0,0 +1,434 @@
+"""migrate_check.py — Spring Boot 2→3 (javax→jakarta) migration readiness checker.
+
+Scans Java source files for import namespaces and class patterns that must be
+updated when migrating from Spring Boot 2.x (javax.*) to Spring Boot 3.x (jakarta.*).
+
+Entry point: run_migrate_check(file_paths, root) → MigrationReport
+"""
+from __future__ import annotations
+
+import hashlib
+import re
+from dataclasses import dataclass, field
+from datetime import datetime, timezone
+from pathlib import Path
+from typing import Optional
+
+
+# ---------------------------------------------------------------------------
+# Rule catalogue
+# ---------------------------------------------------------------------------
+
+@dataclass(frozen=True)
+class _Rule:
+    id: str
+    severity: str
+    title: str
+    explanation: str
+    fix_hint: str
+    import_pattern: Optional[re.Pattern] = None   # matches the import statement
+    extends_pattern: Optional[re.Pattern] = None  # matches an extends clause
+
+
+_IMPORT_RULES: list[_Rule] = [
+    _Rule(
+        id="MIG-001",
+        severity="critical",
+        title="javax.persistence import — JPA namespace not migrated to jakarta",
+        explanation=(
+            "Spring Boot 3 uses Jakarta EE 9 which moved JPA to the jakarta.persistence "
+            "namespace. Files importing javax.persistence will not compile after migration."
+        ),
+        fix_hint="Replace 'javax.persistence' with 'jakarta.persistence' across all affected files.",
+        import_pattern=re.compile(r"^[ \t]*import\s+(javax\.persistence[^;]+);", re.MULTILINE),
+    ),
+    _Rule(
+        id="MIG-002",
+        severity="high",
+        title="javax.servlet import — Servlet API not migrated to jakarta",
+        explanation=(
+            "Spring Boot 3 bundles Jakarta Servlet 6.0. Filters, HttpServletRequest, and "
+            "HttpServletResponse referencing javax.servlet will break after migration."
+        ),
+        fix_hint="Replace 'javax.servlet' with 'jakarta.servlet' and update the servlet-api dependency.",
+        import_pattern=re.compile(r"^[ \t]*import\s+(javax\.servlet[^;]+);", re.MULTILINE),
+    ),
+    _Rule(
+        id="MIG-003",
+        severity="high",
+        title="javax.validation import — Bean Validation not migrated to jakarta",
+        explanation=(
+            "Spring Boot 3 uses Hibernate Validator 8.x which implements jakarta.validation. "
+            "Constraint annotations (@NotNull, @Valid, etc.) under javax.validation will not be "
+            "picked up by the validator after migration."
+        ),
+        fix_hint="Replace 'javax.validation' with 'jakarta.validation'.",
+        import_pattern=re.compile(r"^[ \t]*import\s+(javax\.validation[^;]+);", re.MULTILINE),
+    ),
+    _Rule(
+        id="MIG-004",
+        severity="high",
+        title="javax.transaction import — TX API not migrated to jakarta",
+        explanation=(
+            "Spring Boot 3 depends on Jakarta Transactions (jakarta.transaction). "
+            "Direct javax.transaction imports (@Transactional from javax or UserTransaction) "
+            "will resolve to the wrong class after migration."
+        ),
+        fix_hint="Replace 'javax.transaction' with 'jakarta.transaction'.",
+        import_pattern=re.compile(r"^[ \t]*import\s+(javax\.transaction[^;]+);", re.MULTILINE),
+    ),
+    _Rule(
+        id="MIG-006",
+        severity="medium",
+        title="javax.annotation import — CDI annotations not migrated to jakarta",
+        explanation=(
+            "jakarta.annotation replaces javax.annotation in Jakarta EE 9+. "
+            "@PostConstruct, @PreDestroy, @Resource are affected."
+        ),
+        fix_hint="Replace 'javax.annotation' with 'jakarta.annotation'.",
+        import_pattern=re.compile(r"^[ \t]*import\s+(javax\.annotation[^;]+);", re.MULTILINE),
+    ),
+    _Rule(
+        id="MIG-007",
+        severity="medium",
+        title="javax.inject import — DI annotations not migrated to jakarta",
+        explanation=(
+            "jakarta.inject replaces javax.inject in Jakarta EE 9+. "
+            "@Inject and @Named from javax.inject are affected."
+        ),
+        fix_hint="Replace 'javax.inject' with 'jakarta.inject'.",
+        import_pattern=re.compile(r"^[ \t]*import\s+(javax\.inject[^;]+);", re.MULTILINE),
+    ),
+    _Rule(
+        id="MIG-008",
+        severity="medium",
+        title="javax.ws.rs import — JAX-RS API not migrated to jakarta",
+        explanation=(
+            "jakarta.ws.rs replaces javax.ws.rs in Jakarta EE 9+. "
+            "JAX-RS resource classes, Response, and client code are affected."
+        ),
+        fix_hint="Replace 'javax.ws.rs' with 'jakarta.ws.rs'.",
+        import_pattern=re.compile(r"^[ \t]*import\s+(javax\.ws\.rs[^;]+);", re.MULTILINE),
+    ),
+]
+
+_EXTENDS_RULES: list[_Rule] = [
+    _Rule(
+        id="MIG-005",
+        severity="high",
+        title="extends WebSecurityConfigurerAdapter — removed in Spring Security 6",
+        explanation=(
+            "WebSecurityConfigurerAdapter was deprecated in Spring Security 5.7 and removed in "
+            "Spring Security 6 (Spring Boot 3). Classes extending it must be replaced with "
+            "SecurityFilterChain @Bean methods in a @Configuration class."
+        ),
+        fix_hint=(
+            "Remove the class extension and expose a SecurityFilterChain @Bean instead. "
+            "See the Spring Security 6 migration guide."
+        ),
+        extends_pattern=re.compile(r"\bextends\s+WebSecurityConfigurerAdapter\b"),
+    ),
+]
+
+_ALL_RULES: list[_Rule] = _IMPORT_RULES + _EXTENDS_RULES
+
+SEVERITY_ORDER: dict[str, int] = {"critical": 0, "high": 1, "medium": 2, "low": 3}
+
+
+# ---------------------------------------------------------------------------
+# Finding
+# ---------------------------------------------------------------------------
+
+@dataclass
+class MigrationFinding:
+    id: str               # deterministic: "{rule_id}-{file_hash[:12]}"
+    rule_id: str          # "MIG-001" .. "MIG-008"
+    severity: str         # "critical" | "high" | "medium" | "low"
+    title: str
+    source_file: str      # relative path
+    first_line: int       # 1-based line number of first match
+    imports_found: list[str] = field(default_factory=list)  # matched import statements
+    explanation: str = ""
+    fix_hint: str = ""
+
+    @staticmethod
+    def make_id(rule_id: str, source_file: str) -> str:
+        h = hashlib.sha256(f"{rule_id}:{source_file}".encode()).hexdigest()[:12]
+        return f"{rule_id}-{h}"
+
+    def to_dict(self) -> dict:
+        d: dict = {
+            "id": self.id,
+            "rule_id": self.rule_id,
+            "severity": self.severity,
+            "title": self.title,
+            "source_file": self.source_file,
+            "first_line": self.first_line,
+            "explanation": self.explanation,
+            "fix_hint": self.fix_hint,
+        }
+        if self.imports_found:
+            d["imports_found"] = self.imports_found
+        return d
+
+
+# ---------------------------------------------------------------------------
+# Report
+# ---------------------------------------------------------------------------
+
+@dataclass
+class MigrationReport:
+    schema_version: str = "1.0"
+    generated_at: str = ""
+    repo_id: str = ""
+    git_head: str = ""
+
+    # Core metrics
+    readiness_score: int = 100         # 0–100; 100 = ready to migrate
+    blocking_count: int = 0            # critical + high finding count
+    estimated_effort_days: float = 0.0
+    spring_boot_2_detected: bool = False
+
+    findings: list[MigrationFinding] = field(default_factory=list)
+    limitations: list[str] = field(default_factory=list)
+    summary: dict = field(default_factory=dict)
+    metadata: dict = field(default_factory=dict)
+
+    def finalize(self) -> "MigrationReport":
+        if not self.generated_at:
+            self.generated_at = datetime.now(timezone.utc).isoformat()
+
+        by_severity: dict[str, int] = {"critical": 0, "high": 0, "medium": 0, "low": 0}
+        by_rule: dict[str, int] = {}
+        affected_files: set[str] = set()
+
+        for f in self.findings:
+            by_severity[f.severity] = by_severity.get(f.severity, 0) + 1
+            by_rule[f.rule_id] = by_rule.get(f.rule_id, 0) + 1
+            affected_files.add(f.source_file)
+
+        self.blocking_count = by_severity["critical"] + by_severity["high"]
+
+        # Score: deduct per affected-file/severity combination (not per finding, to avoid
+        # double-counting a file that imports 10 javax.persistence classes).
+        critical_files: set[str] = set()
+        high_files: set[str] = set()
+        medium_files: set[str] = set()
+        low_files: set[str] = set()
+        for f in self.findings:
+            if f.severity == "critical":
+                critical_files.add(f.source_file)
+            elif f.severity == "high":
+                high_files.add(f.source_file)
+            elif f.severity == "medium":
+                medium_files.add(f.source_file)
+            else:
+                low_files.add(f.source_file)
+
+        deduction = (
+            len(critical_files) * 15
+            + len(high_files) * 8
+            + len(medium_files) * 3
+            + len(low_files) * 1
+        )
+        self.readiness_score = max(0, 100 - deduction)
+
+        # Effort: sum per distinct affected file weighted by severity
+        self.estimated_effort_days = round(
+            len(critical_files) * 0.5
+            + len(high_files) * 0.25
+            + len(medium_files) * 0.1
+            + len(low_files) * 0.05,
+            1,
+        )
+
+        self.summary = {
+            "total_findings": len(self.findings),
+            "affected_files": len(affected_files),
+            "by_severity": by_severity,
+            "by_rule": by_rule,
+        }
+        return self
+
+    def to_dict(self) -> dict:
+        return {
+            "schema_version": self.schema_version,
+            "generated_at": self.generated_at,
+            "repo_id": self.repo_id,
+            "git_head": self.git_head,
+            "readiness_score": self.readiness_score,
+            "blocking_count": self.blocking_count,
+            "estimated_effort_days": self.estimated_effort_days,
+            "spring_boot_2_detected": self.spring_boot_2_detected,
+            "summary": self.summary,
+            "findings": [f.to_dict() for f in self.findings],
+            "limitations": self.limitations,
+            "metadata": self.metadata,
+        }
+
+    def to_text(self, min_severity: str = "low") -> str:
+        min_order = SEVERITY_ORDER.get(min_severity, 3)
+        visible = [f for f in self.findings if SEVERITY_ORDER.get(f.severity, 3) <= min_order]
+
+        lines: list[str] = [
+            f"Migration Readiness: {self.readiness_score}/100",
+            f"Blocking issues: {self.blocking_count}  "
+            f"(critical: {self.summary.get('by_severity', {}).get('critical', 0)}, "
+            f"high: {self.summary.get('by_severity', {}).get('high', 0)})",
+            f"Affected files: {self.summary.get('affected_files', 0)}",
+            f"Estimated effort: {self.estimated_effort_days}d",
+            "",
+        ]
+
+        if not visible:
+            lines.append("No findings at or above selected severity.")
+            return "\n".join(lines)
+
+        for f in sorted(visible, key=lambda x: (SEVERITY_ORDER.get(x.severity, 3), x.source_file)):
+            lines.append(
+                f"{f.rule_id} [{f.severity.upper()}] {f.source_file}:{f.first_line}"
+            )
+            lines.append(f"  {f.title}")
+            lines.append(f"  Fix: {f.fix_hint}")
+            lines.append("")
+
+        return "\n".join(lines)
+
+
+# ---------------------------------------------------------------------------
+# Scanner
+# ---------------------------------------------------------------------------
+
+def _scan_file(
+    source: str,
+    rel_path: str,
+    rules: list[_Rule],
+) -> list[MigrationFinding]:
+    findings: list[MigrationFinding] = []
+
+    for rule in rules:
+        if rule.import_pattern is not None:
+            matches = list(rule.import_pattern.finditer(source))
+            if not matches:
+                continue
+            # Compute 1-based line number of first match
+            first_line = source[: matches[0].start()].count("\n") + 1
+            imports_found = [m.group(1) for m in matches]
+            findings.append(
+                MigrationFinding(
+                    id=MigrationFinding.make_id(rule.id, rel_path),
+                    rule_id=rule.id,
+                    severity=rule.severity,
+                    title=rule.title,
+                    source_file=rel_path,
+                    first_line=first_line,
+                    imports_found=imports_found,
+                    explanation=rule.explanation,
+                    fix_hint=rule.fix_hint,
+                )
+            )
+
+        elif rule.extends_pattern is not None:
+            m = rule.extends_pattern.search(source)
+            if m is None:
+                continue
+            first_line = source[: m.start()].count("\n") + 1
+            findings.append(
+                MigrationFinding(
+                    id=MigrationFinding.make_id(rule.id, rel_path),
+                    rule_id=rule.id,
+                    severity=rule.severity,
+                    title=rule.title,
+                    source_file=rel_path,
+                    first_line=first_line,
+                    explanation=rule.explanation,
+                    fix_hint=rule.fix_hint,
+                )
+            )
+
+    return findings
+
+
+# ---------------------------------------------------------------------------
+# Public entry point
+# ---------------------------------------------------------------------------
+
+def run_migrate_check(
+    file_paths: list[str],
+    root: Path,
+    *,
+    min_severity: str = "low",
+) -> MigrationReport:
+    """Scan Java files for Spring Boot 2→3 migration blockers.
+
+    Args:
+        file_paths:   Relative Java file paths (from find_java_files).
+        root:         Absolute repo root.
+        min_severity: Filter threshold — findings below this severity are excluded
+                      from the report. Choices: critical | high | medium | low.
+
+    Returns:
+        MigrationReport with findings, readiness_score, and effort estimate.
+    """
+    min_order = SEVERITY_ORDER.get(min_severity, 3)
+    all_findings: list[MigrationFinding] = []
+    limitations: list[str] = []
+    read_errors = 0
+
+    for rel_path in file_paths:
+        abs_path = root / rel_path
+        try:
+            source = abs_path.read_text(encoding="utf-8", errors="replace")
+        except OSError:
+            read_errors += 1
+            continue
+
+        file_findings = _scan_file(source, rel_path, _ALL_RULES)
+        # Apply min_severity filter
+        filtered = [f for f in file_findings if SEVERITY_ORDER.get(f.severity, 3) <= min_order]
+        all_findings.extend(filtered)
+
+    if read_errors:
+        limitations.append(f"{read_errors} file(s) could not be read and were skipped.")
+
+    # Detect Spring Boot 2 pom.xml heuristic (best-effort, non-fatal)
+    spring_boot_2 = _detect_spring_boot_2(root)
+
+    report = MigrationReport(
+        spring_boot_2_detected=spring_boot_2,
+        findings=all_findings,
+        limitations=limitations,
+        metadata={
+            "java_files_scanned": len(file_paths),
+            "min_severity": min_severity,
+            "rules_applied": [r.id for r in _ALL_RULES],
+        },
+    )
+
+    # Populate git_head — non-fatal
+    try:
+        import subprocess as _sub
+        _r = _sub.run(
+            ["git", "-C", str(root), "rev-parse", "--short", "HEAD"],
+            capture_output=True, text=True, timeout=3,
+        )
+        if _r.returncode == 0:
+            report.git_head = _r.stdout.strip()
+    except Exception:
+        pass
+
+    return report.finalize()
+
+
+def _detect_spring_boot_2(root: Path) -> bool:
+    """Return True if any pom.xml or build.gradle declares spring-boot 2.x."""
+    _SB2 = re.compile(r"spring.boot[^\"'\n]*[\"']?2\.\d+", re.IGNORECASE)
+    for name in ("pom.xml", "build.gradle", "build.gradle.kts"):
+        candidate = root / name
+        try:
+            text = candidate.read_text(encoding="utf-8", errors="replace")
+            if _SB2.search(text):
+                return True
+        except OSError:
+            pass
+    return False

{sourcecode-1.35.17.dist-info → sourcecode-1.35.19.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 1.35.17
+Version: 1.35.19
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 License-File: LICENSE
 Keywords: agents,ai,codebase,context,developer-tools,llm

{sourcecode-1.35.17.dist-info → sourcecode-1.35.19.dist-info}/RECORD

@@ -1,4 +1,4 @@
-sourcecode/__init__.py,sha256=5WWLHrnlJwQHZyPIM9VKQoB5GUOYgv95o6WN75zBV60,104
+sourcecode/__init__.py,sha256=hzHULzlZzht_1GYLCF6iKVI8a1MFSsEJYu30xrAvGZU,104
 sourcecode/adaptive_scanner.py,sha256=XffluXKzJUXrMtjEiAOnSNPZnztdIcts17T9ouHeID0,10521
 sourcecode/architecture_analyzer.py,sha256=qh749a7ykPtGmQI1MR9y6j8TtL_jBdVYFx9YRsLqOMw,44121
 sourcecode/architecture_summary.py,sha256=z34_6v7cSwy98cof2UVciGho7SCrZ93tiqMmq5WNzRQ,20405
@@ -7,7 +7,7 @@ sourcecode/cache.py,sha256=wAyPrXN5DqiGivnMpeEuun2xHDKfBer2_oBsh6kj_vc,30447
 sourcecode/canonical_ir.py,sha256=uwpwCnJxMh_eiIVg4cOLv7-aZthvmDFcG4azCOycLkw,24281
 sourcecode/cir_graphs.py,sha256=rZi8JV4ZrAa2WSCeyNa4JIEKQ_yZzDZTsrvVz2KfuKA,8919
 sourcecode/classifier.py,sha256=2lYoSH3vOTkXZYPU7Go2WIet1-IuNzTWVhc-ULnXtgw,8024
-sourcecode/cli.py,sha256=eMcUIP_tUpij-4lgrtXIU0bvVOFVbKzILsdFPEdGE0E,226810
+sourcecode/cli.py,sha256=CALwHKAoBv1MmhLE7ZingoarOxXTk3VUCrxF4CDYB20,233442
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
 sourcecode/confidence_analyzer.py,sha256=_jckZSxksV-OU38vbkxfVNBnWCtlCq8Vwfg23x1uspA,19054
 sourcecode/context_scorer.py,sha256=QpChSpsmaAYz91rXA4Ue5xzQmNz_ZboZN09YOHScq1U,14679
@@ -26,9 +26,10 @@ sourcecode/flow_analyzer.py,sha256=dSiuY4w49k29jW_EPXUOND9B5uVbuCA7kjnuHi-pIWA,2
 sourcecode/fqn_utils.py,sha256=XLU7zDkNBXz_RZkIUNfpPmp1nekWtqP-fxV92tDV1vg,2158
 sourcecode/git_analyzer.py,sha256=JStxTQXNjBWi_wLdwhsZs9mT-v50cSJIz4Agzn6Kh9I,13362
 sourcecode/graph_analyzer.py,sha256=DHR8fY69oU_Pi4SYaWboX6EoEFrctQKB9dsjpqwGMzw,62403
-sourcecode/license.py,sha256=1nr-uhgtiMUCMH7Ff-tSD8EDXmUNQsNiRiMcIbdCqUY,14940
+sourcecode/license.py,sha256=3JCV2OeTVttKrOGBguU5uZC0c02Stig-KLB0mP2lNiY,22742
 sourcecode/mcp_nudge.py,sha256=5ELU_ixzh6uA83NXLOZT8h00OhL53okfQdji3jyKOjg,2917
 sourcecode/metrics_analyzer.py,sha256=m0ENgtqKeBL17kUIK3fmGkgo7UfXBNHxCMj0H_Y5K7c,22750
+sourcecode/migrate_check.py,sha256=KQJRuQPrZSDYnIsekEjF-6j6b702Cu-pjojo-teO4wM,16338
 sourcecode/output_budget.py,sha256=Js9yUlfQtPhqBl9R6wn_9UHVjjJc3GtLcqyfjf5t50Q,9869
 sourcecode/path_filters.py,sha256=ROFRQ8eSLBEMiixK9f45-RO7um4VEEcjoD5AA4I427I,3739
 sourcecode/pr_comment_renderer.py,sha256=smHslxiG14lrytCkq5nFrFu-qTHgA-t-LFYfdrfjz2o,14423
@@ -93,8 +94,8 @@ sourcecode/telemetry/consent.py,sha256=wLMvGNJeSSyZoNkQXpoUioY6mMv4Qdvuw7S9jAEWn
 sourcecode/telemetry/events.py,sha256=oEvvulfsv5GIDWG2174gSS6tNB95w38AIYiYeifGKlE,2294
 sourcecode/telemetry/filters.py,sha256=Asa71oRl7q3Wt_FMwuufIZJFzSYdgRNKS8LHCIyFeYE,4805
 sourcecode/telemetry/transport.py,sha256=QSslxIwij8YkRWcVvxykODDrkiN_GAAEu3dUP7KIWeE,1651
-sourcecode-1.35.17.dist-info/METADATA,sha256=yxu3wNqg3zjWzv1AodVb0wv0eQhrmm7dAWzM2LfI_4s,21297
-sourcecode-1.35.17.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-1.35.17.dist-info/entry_points.txt,sha256=ex3F9rmbXeyDIoFQHtkEqTsKSaJow8F0LrVu8XfIktQ,57
-sourcecode-1.35.17.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
-sourcecode-1.35.17.dist-info/RECORD,,
+sourcecode-1.35.19.dist-info/METADATA,sha256=PoK3wFYqg5mUZAk98YbNEx2Gvd7c55DmNlYqORyKox8,21297
+sourcecode-1.35.19.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-1.35.19.dist-info/entry_points.txt,sha256=ex3F9rmbXeyDIoFQHtkEqTsKSaJow8F0LrVu8XfIktQ,57
+sourcecode-1.35.19.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
+sourcecode-1.35.19.dist-info/RECORD,,