sourcecode 1.35.22__tar.gz → 1.35.23__tar.gz

{sourcecode-1.35.22 → sourcecode-1.35.23}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 1.35.22
+Version: 1.35.23
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 License-File: LICENSE
 Keywords: agents,ai,codebase,context,developer-tools,llm
@@ -40,7 +40,7 @@ Description-Content-Type: text/markdown
 
 **Persistent structural context and ultra-fast repeated analysis for AI coding agents.**
 
-![Version](https://img.shields.io/badge/version-1.35.20-blue)
+![Version](https://img.shields.io/badge/version-1.35.23-blue)
 ![Python](https://img.shields.io/badge/python-3.10%2B-green)
 
 ---
@@ -114,7 +114,7 @@ pipx install sourcecode
 
 ```bash
 sourcecode version
-# sourcecode 1.35.20
+# sourcecode 1.35.23
 ```
 
 ---

{sourcecode-1.35.22 → sourcecode-1.35.23}/README.md

@@ -2,7 +2,7 @@
 
 **Persistent structural context and ultra-fast repeated analysis for AI coding agents.**
 
-![Version](https://img.shields.io/badge/version-1.35.20-blue)
+![Version](https://img.shields.io/badge/version-1.35.23-blue)
 ![Python](https://img.shields.io/badge/python-3.10%2B-green)
 
 ---
@@ -76,7 +76,7 @@ pipx install sourcecode
 
 ```bash
 sourcecode version
-# sourcecode 1.35.20
+# sourcecode 1.35.23
 ```
 
 ---

{sourcecode-1.35.22 → sourcecode-1.35.23}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sourcecode"
-version = "1.35.22"
+version = "1.35.23"
 description = "Persistent structural context and ultra-fast repeated analysis for AI coding agents"
 readme = "README.md"
 requires-python = ">=3.9"

{sourcecode-1.35.22 → sourcecode-1.35.23}/src/sourcecode/__init__.py

@@ -1,3 +1,3 @@
 """sourcecode — Deterministic codebase context maps for AI coding agents."""
 
-__version__ = "1.35.22"
+__version__ = "1.35.23"

{sourcecode-1.35.22 → sourcecode-1.35.23}/src/sourcecode/canonical_ir.py

@@ -244,11 +244,11 @@ def _route_to_canonical_endpoint(route: dict) -> CanonicalEndpoint:
     security_dict = route.get("security_annotations")
     security: Optional[CanonicalSecurity] = None
     if security_dict:
-        # Determine source_scope from inheritance_depth:
-        # depth=0 → annotation on method or class (method takes precedence)
-        # depth>0 → inherited from parent class
         depth = route.get("inheritance_depth") or 0
-        scope = "inherited" if depth > 0 else "method"
+        if depth > 0:
+            scope = "inherited"
+        else:
+            scope = security_dict.get("_scope", "method")
         security = CanonicalSecurity.from_policy_dict(security_dict, source_scope=scope)
 
     endpoint_id = CanonicalEndpoint.make_id(method, path, controller_class, handler_symbol)

{sourcecode-1.35.22 → sourcecode-1.35.23}/src/sourcecode/migrate_check.py

@@ -422,7 +422,7 @@ def run_migrate_check(
 
 def _detect_spring_boot_2(root: Path) -> bool:
     """Return True if any pom.xml or build.gradle declares spring-boot 2.x."""
-    _SB2 = re.compile(r"spring.boot[^\"'\n]*[\"']?2\.\d+", re.IGNORECASE)
+    _SB2 = re.compile(r"spring[-.]boot[^\"'\n]*[\"']?2\.\d+", re.IGNORECASE)
     for name in ("pom.xml", "build.gradle", "build.gradle.kts"):
         candidate = root / name
         try:

{sourcecode-1.35.22 → sourcecode-1.35.23}/src/sourcecode/prepare_context.py

@@ -1034,6 +1034,12 @@ class TaskContextBuilder:
                 if g
             ]
 
+            _ris_key_deps = compact.get("key_dependencies") or []
+            # Fall through to full analysis if deps expected but RIS has none.
+            # RIS may have been built before dependency analysis was run on this repo.
+            if spec.enable_dependencies and not _ris_key_deps:
+                return None
+
             return TaskOutput(
                 task=task_name,
                 goal=spec.goal,
@@ -1043,7 +1049,7 @@ class TaskContextBuilder:
                 suspected_areas=[],
                 improvement_opportunities=[],
                 test_gaps=[],
-                key_dependencies=compact.get("key_dependencies") or [],
+                key_dependencies=_ris_key_deps,
                 code_notes_summary=None,
                 limitations=[],
                 confidence=compact.get("confidence") or compact.get("confidence_summary") or "high",
@@ -1303,7 +1309,20 @@ class TaskContextBuilder:
             from dataclasses import asdict
             from sourcecode.dependency_analyzer import DependencyAnalyzer
 
-            dep_records, dep_summary = DependencyAnalyzer().analyze(self.root)
+            _dep_analyzer = DependencyAnalyzer()
+            dep_records, dep_summary = _dep_analyzer.analyze(self.root)
+            # For multi-module repos (Maven/Gradle), root pom.xml is a parent POM
+            # with few deps. Per-workspace analysis finds the actual module deps.
+            if workspace_analysis.workspaces:
+                for _ws in workspace_analysis.workspaces:
+                    _ws_root = self.root / _ws.path
+                    if _ws_root.exists() and _ws_root.is_dir():
+                        try:
+                            _ws_deps, _ws_summary = _dep_analyzer.analyze(_ws_root)
+                            dep_records = dep_records + _ws_deps
+                            dep_summary.limitations.extend(_ws_summary.limitations)
+                        except Exception:
+                            pass
             primary_eco = stacks[0].stack if stacks else ""
             _direct_raw = [
                 d for d in dep_records

{sourcecode-1.35.22 → sourcecode-1.35.23}/src/sourcecode/repository_ir.py

@@ -2543,6 +2543,7 @@ def _route_security_from_sym(
     for candidate in filter(None, [method_sym, class_sym]):
         result = _extract_from(candidate)
         if result is not None:
+            result["_scope"] = "class" if candidate is class_sym else "method"
             return result
     return None