sourcecode 2.5.13__py3-none-any.whl → 2.5.16__py3-none-any.whl

sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "2.5.13"
+__version__ = "2.5.16"

sourcecode/ast_extractor.py

@@ -967,25 +967,26 @@ def _java_contract_from_graph(rel_path: str, graph: "Any") -> FileContract:
     nodes/edges instead of re-parsing source. Method signatures are the graph's
     canonical compact form (`(Type)->Return`); annotations are node-grounded.
     """
-    file_syms = [s for s in graph.symbols() if s.source_file == rel_path]
+    file_syms = graph.symbols_in_file(rel_path)
     type_syms = [s for s in file_syms if s.kind in ("class", "interface", "enum", "annotation")]
     type_fqns = {s.fqn for s in type_syms}
 
     # extends / implements edges out of this file's types (targets are simple
     # names for out-of-repo supertypes, resolved FQNs for in-repo ones — the
-    # same forms the old regex captured for the unresolved case).
+    # same forms the old regex captured for the unresolved case). Only edges
+    # sourced at this file's types matter, so index straight to them instead of
+    # scanning the whole-repo relation set once per file.
     extends_of: dict[str, list[str]] = {}
     implements_of: dict[str, list[str]] = {}
     import_targets: set[str] = set()
-    for r in graph.relations():
-        if r.source not in type_fqns:
-            continue
-        if r.kind == "extends":
-            extends_of.setdefault(r.source, []).append(r.target)
-        elif r.kind == "implements":
-            implements_of.setdefault(r.source, []).append(r.target)
-        elif r.kind == "imports":
-            import_targets.add(r.target)
+    for fqn in type_fqns:
+        for r in graph.relations_from(fqn):
+            if r.kind == "extends":
+                extends_of.setdefault(r.source, []).append(r.target)
+            elif r.kind == "implements":
+                implements_of.setdefault(r.source, []).append(r.target)
+            elif r.kind == "imports":
+                import_targets.add(r.target)
 
     exports: list[ExportRecord] = []
     types: list[TypeDefinition] = []

sourcecode/canonical_ir.py

@@ -398,9 +398,17 @@ def ir_dict_to_canonical(
     # real REST surface. The CIR endpoint list feeds `spring-audit` (endpoints_analyzed),
     # `impact` and `validation`; it must apply the SAME filter so its count reconciles
     # with `endpoints` instead of being silently inflated by those pseudo-routes.
+    # Endpoints declared in a test-fixture / test-utility module are tagged
+    # scope="test_util" on route_surface by build_repo_ir. They are excluded from the
+    # canonical endpoint list for the same reason as the FQN filter above: the CIR
+    # surface feeds impact-chain, pr-impact, review-pr and spring-audit, and test
+    # scaffolding is not production HTTP exposure. route_surface itself keeps them
+    # (raw evidence); only this canonical projection drops them.
     _seen_ids: set[str] = set()
     raw_endpoints: list[CanonicalEndpoint] = []
     for r in route_surface:
+        if r.get("scope") == "test_util":
+            continue
         if _FQN_PATH_RE.search(r.get("path", "") or ""):
             continue
         ep = _route_to_canonical_endpoint(r)

sourcecode/classifier.py

@@ -37,6 +37,26 @@ _WEB_FRAMEWORKS = {"Next.js", "React", "Vue", "Svelte", "Vite", "Flutter", "Phoe
 _CLI_FRAMEWORKS = {"Typer", "Cobra", "Clap"}
 _API_STACKS = {"python", "go", "java", "php", "ruby", "dotnet", "kotlin", "scala"}
 
+# Source-file extensions per stack — single table shared by the confidence
+# enrichment (_count_extension_hits) and the primary-stack evidence tiebreaker
+# (select_primary_stack). Kept in one place so the two never diverge.
+_STACK_EXTENSIONS: dict[str, tuple[str, ...]] = {
+    "python": (".py",),
+    "nodejs": (".js", ".ts", ".tsx"),
+    "go": (".go",),
+    "rust": (".rs",),
+    "java": (".java",),
+    "php": (".php",),
+    "ruby": (".rb",),
+    "dart": (".dart",),
+    "dotnet": (".cs", ".fs"),
+    "elixir": (".ex", ".exs"),
+    "kotlin": (".kt", ".kts"),
+    "scala": (".scala",),
+    "terraform": (".tf",),
+    "cpp": (".c", ".cc", ".cpp", ".cxx", ".hpp", ".h"),
+}
+
 # Center-of-gravity gate for the "api" decision (neo4j field test).
 # The historical rule was pure PRESENCE: any API framework on the classpath →
 # project_type="api". That mislabels a large engine/platform that merely exposes a
@@ -63,6 +83,59 @@ _API_SURFACE_ENTRY_KINDS = frozenset({
 ConfidenceLevel = Literal["high", "medium", "low"]
 
 
+def _primary_ext_hits(stack_name: str, file_paths: Sequence[str]) -> int:
+    exts = _STACK_EXTENSIONS.get(stack_name, ())
+    if not exts:
+        return 0
+    return sum(1 for p in file_paths if p.endswith(exts))
+
+
+def select_primary_stack(
+    stacks: Sequence[StackDetection],
+    project_type: str | None,
+    file_paths: Sequence[str] | None = None,
+) -> list[StackDetection]:
+    """Single authority for which stack is primary.
+
+    Marks exactly ONE stack instance ``primary=True`` (all others ``False``) on the
+    FINAL assembled stack set (root + workspace stacks). Selection order:
+    ``(priority, confidence, manifest, source-file volume)``. The volume component is
+    a pure tiebreaker — it decides only when the prior three tie (e.g. a polyglot repo
+    where a Java and a .NET stack are both manifest-detected API stacks), so a 1-file
+    .NET example never outranks 86 Java files. Being last, it never reorders stacks
+    that already differ on the earlier components.
+
+    This is the ONLY place a primary decision is made. Every consumer must read
+    ``stack.primary`` — none may re-select or invent a ``stacks[0]`` fallback.
+    """
+    stack_list = list(stacks)
+    if not stack_list:
+        return stack_list
+    paths = list(file_paths or [])
+
+    def sort_key(stack: StackDetection) -> tuple[int, int, int, int]:
+        score = {"low": 0, "medium": 1, "high": 2}.get(stack.confidence, 0)
+        manifest_weight = 1 if stack.manifests else 0
+        priority = 0
+        # Backend server-side stacks with manifest evidence outrank frontend stacks
+        # in fullstack projects (e.g. Java+Spring wins over nodejs+Angular).
+        if (project_type in {"fullstack", "api"}
+                and stack.stack in _API_STACKS
+                and stack.manifests):
+            priority = 4
+        elif (project_type in {"webapp", "fullstack"} and stack.stack in {"nodejs", "elixir"}
+              or project_type == "api" and stack.stack in _API_STACKS
+              or project_type == "cli" and any(
+                  framework.name in _CLI_FRAMEWORKS for framework in stack.frameworks
+              )
+              or project_type == "cli" and stack.stack in {"cpp", "dotnet"}):
+            priority = 3
+        return (priority, score, manifest_weight, _primary_ext_hits(stack.stack, paths))
+
+    winner = max(stack_list, key=sort_key)
+    return [replace(s, primary=(s is winner)) for s in stack_list]
+
+
 class TypeClassifier:
     """Clasifica project_type y enriquece stacks con confianza/primary."""
 
@@ -74,15 +147,12 @@ class TypeClassifier:
     ) -> tuple[list[StackDetection], str | None]:
         enriched = [self._enrich_stack(file_tree, stack, entry_points) for stack in stacks]
         project_type = self._classify_project_type(file_tree, enriched, entry_points)
-        primary_stack = self._select_primary_stack(enriched, project_type)
-
-        final_stacks: list[StackDetection] = []
-        primary_assigned = False
-        for stack in enriched:
-            is_primary = stack.stack == primary_stack and not primary_assigned
-            if is_primary:
-                primary_assigned = True
-            final_stacks.append(replace(stack, primary=is_primary))
+        # Delegate to the single primary-stack authority. enrich only ever sees the
+        # ROOT stacks; the authority runs again at model finalization over the full
+        # root+workspace set (that call is the one consumers read).
+        final_stacks = select_primary_stack(
+            enriched, project_type, flatten_file_tree(file_tree)
+        )
         return final_stacks, project_type
 
     def _enrich_stack(
@@ -371,50 +441,8 @@ class TypeClassifier:
                 has_api = True
         return has_web and has_api
 
-    def _select_primary_stack(
-        self, stacks: Sequence[StackDetection], project_type: str | None
-    ) -> str | None:
-        if not stacks:
-            return None
-
-        def sort_key(stack: StackDetection) -> tuple[int, int, int]:
-            score = {"low": 0, "medium": 1, "high": 2}.get(stack.confidence, 0)
-            manifest_weight = 1 if stack.manifests else 0
-            priority = 0
-            # Backend server-side stacks with manifest evidence outrank frontend stacks
-            # in fullstack projects (e.g. Java+Spring wins over nodejs+Angular).
-            if (project_type in {"fullstack", "api"}
-                    and stack.stack in _API_STACKS
-                    and stack.manifests):
-                priority = 4
-            elif (project_type in {"webapp", "fullstack"} and stack.stack in {"nodejs", "elixir"}
-                  or project_type == "api" and stack.stack in _API_STACKS
-                  or project_type == "cli" and any(
-                      framework.name in _CLI_FRAMEWORKS for framework in stack.frameworks
-                  )
-                  or project_type == "cli" and stack.stack in {"cpp", "dotnet"}):
-                priority = 3
-            return (priority, score, manifest_weight)
-
-        return max(stacks, key=sort_key).stack
-
     def _count_extension_hits(self, file_tree: dict[str, Any], stack: str) -> int:
-        extensions = {
-            "python": (".py",),
-            "nodejs": (".js", ".ts", ".tsx"),
-            "go": (".go",),
-            "rust": (".rs",),
-            "java": (".java",),
-            "php": (".php",),
-            "ruby": (".rb",),
-            "dart": (".dart",),
-            "dotnet": (".cs", ".fs"),
-            "elixir": (".ex", ".exs"),
-            "kotlin": (".kt", ".kts"),
-            "scala": (".scala",),
-            "terraform": (".tf",),
-            "cpp": (".c", ".cc", ".cpp", ".cxx", ".hpp", ".h"),
-        }.get(stack, ())
+        extensions = _STACK_EXTENSIONS.get(stack, ())
         return sum(1 for path in flatten_file_tree(file_tree) if path.endswith(extensions))
 
     def _score_to_confidence(self, score: int) -> ConfidenceLevel:

sourcecode/cli.py

@@ -15,6 +15,7 @@ from sourcecode import __version__
 from sourcecode.error_schema import INVALID_INPUT_CODE, build_error_envelope
 from sourcecode.entrypoint_classifier import is_production_entry_point, normalize_entry_point
 from sourcecode.progress import Progress
+from sourcecode import perf
 from sourcecode.caller_metrics import CALLER_METRIC_RECONCILIATION
 from sourcecode.repository_ir import extract_java_endpoints as _extract_java_endpoints
 
@@ -1703,6 +1704,7 @@ def main(
     _progress = Progress()
     _progress.start("scanning files")
 
+    _perf_discovery = perf.start()
     scanner = AdaptiveScanner(target, topology=_topology, base_depth=effective_depth,
                                extra_excludes=_extra_excludes)
     raw_tree = scanner.scan_tree()
@@ -1710,6 +1712,8 @@ def main(
     _progress.update("parsing manifests")
     # 2. Filter .env and *.secret entries from file tree (SEC-02, all levels)
     file_tree = filter_sensitive_files(raw_tree, redactor)
+    perf.stop("discovery", _perf_discovery)
+    _perf_detection = perf.start()
     detector = ProjectDetector(build_default_detectors())
     workspace_analysis = WorkspaceAnalyzer().analyze(target, manifests)
 
@@ -1951,6 +1955,8 @@ def main(
         else None
     )
 
+    perf.stop("detection", _perf_detection)
+    _perf_analysis = perf.start()
     # 3. Build schema
     # Compute analyzer fingerprints: short hashes of each analyzer's key rule
     # constants so that a rule change is always visible in the output, regardless
@@ -1965,6 +1971,13 @@ def main(
         analyzer_fingerprints=_fingerprints,
         traversal_topology=_topology.as_dict(),
     )
+    # Single primary-stack authority over the FINAL assembled set (root + workspace
+    # stacks). enrich marked the root stacks; workspace stacks were appended after,
+    # so re-run the one authority here — idempotent — so every consumer of sm.stacks
+    # reads a coherent primary flag.
+    from sourcecode.classifier import select_primary_stack as _select_primary_stack
+    from sourcecode.tree_utils import flatten_file_tree as _flatten_ft
+    stacks = _select_primary_stack(stacks, project_type, _flatten_ft(file_tree))
     sm = SourceMap(
         metadata=metadata,
         file_tree=file_tree,
@@ -2404,8 +2417,10 @@ def main(
                     err=True,
                 )
 
+    perf.stop("analysis", _perf_analysis)
     # 4. Serialize
     _progress.update("serializing output")
+    _perf_serialize = perf.start()
     if _is_contract_mode and not agent:
         from sourcecode.serializer import contract_view as _contract_view
         _depth = _CONTRACT_DEPTH.get(mode, "minimal")
@@ -2448,6 +2463,9 @@ def main(
             raw_dict = redact_dict(raw_dict)
         content = _serialize_dict(raw_dict, format)
 
+    perf.stop("serialize", _perf_serialize)
+    perf.flush_recorder()
+
     # 5. Telemetry (fire-and-forget, never blocks)
     try:
         from sourcecode import telemetry as _tel

sourcecode/context_graph.py

@@ -408,6 +408,7 @@ class ContextGraph:
         "_cir", "_nodes_by_fqn", "_nodes", "_build_ms",
         "_body_index", "_literal_index", "_guard_index", "_span_index",
         "_class_type_index", "_relations_all", "_symbols_sorted",
+        "_symbols_by_file", "_relations_by_source",
     )
 
     def __init__(self, cir: CanonicalRepositoryIR, *, build_ms: float = 0.0) -> None:
@@ -439,6 +440,12 @@ class ContextGraph:
         # filtered cheaply thereafter.
         self._relations_all: Optional[tuple[Relation, ...]] = None
         self._symbols_sorted: Optional[tuple[Symbol, ...]] = None
+        # Per-key groupings for per-file consumers (`_java_contract_from_graph`
+        # runs once per file). Without these, each file filtered the whole-repo
+        # symbol/relation set — the residual O(files × total) scan that the
+        # memoized projections above did not remove. Built once, O(1) lookup.
+        self._symbols_by_file: Optional[dict[str, list[Symbol]]] = None
+        self._relations_by_source: Optional[dict[str, list[Relation]]] = None
 
     # -- construction -------------------------------------------------------
 
@@ -518,6 +525,34 @@ class ContextGraph:
             and (name_contains is None or name_contains in s.fqn)
         ]
 
+    def symbols_in_file(self, source_file: str) -> list[Symbol]:
+        """All symbols declared in one file, FQN-sorted — the same order and set
+        a no-filter ``symbols()`` scan filtered to this file would produce, but
+        O(1) after a one-time O(total) grouping instead of O(total) per call.
+        """
+        if self._symbols_by_file is None:
+            if self._symbols_sorted is None:
+                self._symbols_sorted = tuple(sorted(self._nodes, key=lambda s: s.fqn))
+            idx: dict[str, list[Symbol]] = {}
+            for s in self._symbols_sorted:
+                idx.setdefault(s.source_file, []).append(s)
+            self._symbols_by_file = idx
+        return self._symbols_by_file.get(source_file, [])
+
+    def relations_from(self, source_fqn: str) -> list[Relation]:
+        """All relations whose source is ``source_fqn``, in the IR's stable edge
+        order. O(1) after a one-time O(edges) grouping — replaces per-file scans
+        of the whole relation set.
+        """
+        if self._relations_by_source is None:
+            if self._relations_all is None:
+                self._relations_all = tuple(_edge_to_relation(e) for e in self._cir.call_graph)
+            idx: dict[str, list[Relation]] = {}
+            for r in self._relations_all:
+                idx.setdefault(r.source, []).append(r)
+            self._relations_by_source = idx
+        return self._relations_by_source.get(source_fqn, [])
+
     def types(self) -> list[Symbol]:
         """All class/interface/enum/annotation symbols, sorted by FQN."""
         return sorted(

sourcecode/detectors/java.py

@@ -67,6 +67,16 @@ _BOOTSTRAP_ANNOTATION_RE = re.compile(
     r'EnableAutoConfiguration|SpringBootConfiguration)\b'
     r'|\bextends\s+SpringBootServletInitializer\b'
 )
+# Comment strippers — a main()/bootstrap annotation inside a javadoc example or a
+# comment is NOT an entry point (e.g. Broadleaf's *AutoConfiguration classes whose
+# javadoc shows `public static void main` and mentions @SpringBootApplication).
+# Detection of bootstrap entries must run on de-commented source.
+_BLOCK_COMMENT_RE = re.compile(r'/\*.*?\*/', re.DOTALL)
+_LINE_COMMENT_RE = re.compile(r'//[^\n]*')
+
+
+def _strip_java_comments(source: str) -> str:
+    return _LINE_COMMENT_RE.sub(' ', _BLOCK_COMMENT_RE.sub(' ', source))
 
 # --- Keycloak / Quarkus SPI ---
 # Matches "implements EventListenerProvider" or "implements Foo, EventListenerProvider, Bar"
@@ -533,12 +543,21 @@ class JavaDetector(AbstractDetector):
         _other_files = [p for p in _non_test if "Controller" not in p]
         scan_candidates = _ctrl_files + _other_files[:max(0, _MAX_JAVA_ENTRY_SCAN - len(_ctrl_files))]
 
+        # Paths already emitted as application entries by the name-gated step-1 scan,
+        # so the annotation scan (which now also recovers main()-bearing files) does
+        # not list the same bootstrap twice.
+        _app_paths = {ep.path for ep in entry_points if ep.kind == "application"}
         annotation_eps: list[EntryPoint] = []
         for rel_path in scan_candidates:
             if len(annotation_eps) >= _MAX_ANNOTATION_ENTRY_POINTS:
                 break
             abs_path = context.root / rel_path
-            annotation_eps.extend(self._scan_java_file_for_entry_points(abs_path, rel_path))
+            for _ep in self._scan_java_file_for_entry_points(abs_path, rel_path):
+                if _ep.kind == "application":
+                    if _ep.path in _app_paths:
+                        continue
+                    _app_paths.add(_ep.path)
+                annotation_eps.append(_ep)
         entry_points.extend(annotation_eps)
 
         # 3. web.xml servlet/filter declarations
@@ -611,6 +630,7 @@ class JavaDetector(AbstractDetector):
             content = abs_path.read_text(encoding="utf-8", errors="replace")
         except OSError:
             return None
+        content = _strip_java_comments(content)
         if _BOOTSTRAP_ANNOTATION_RE.search(content):
             return "bootstrap_annotation"
         if _MAIN_METHOD_RE.search(content):
@@ -678,6 +698,20 @@ class JavaDetector(AbstractDetector):
                 and "ControllerAdvice" not in content
                 and not any(ann in content for ann in _CUSTOM_SECURITY_ANNOTATIONS)
                 and not has_jax_rs and not has_cdi and not has_spi):
+            # Not a controller/security/DI file — but it may still be an application
+            # entry point. The name-gated step-1 scan only reads *Application.java /
+            # *Main.java, so a real main(String[]) in a differently-named class (e.g.
+            # neo4j's Neo4jCommunity.java server bootstrap) would otherwise be invisible,
+            # leaving a client CLI named Main.java as the sole reported bootstrap. Reuse
+            # the content already read here; strip comments first so a main()/annotation
+            # in a javadoc example is never mistaken for a real entry point.
+            _decommented = _strip_java_comments(content)
+            if _BOOTSTRAP_ANNOTATION_RE.search(_decommented):
+                return [EntryPoint(path=rel_path, stack="java", kind="application",
+                                   source="bootstrap_annotation")]
+            if _MAIN_METHOD_RE.search(_decommented):
+                return [EntryPoint(path=rel_path, stack="java", kind="application",
+                                   source="main_method")]
             return []
 
         if _REST_CONTROLLER_RE.search(content):

sourcecode/endpoint_metrics.py

@@ -30,7 +30,10 @@ ENDPOINT_SURFACE_RECONCILIATION: str = (
     "handler after inheritance projection and JAX-RS sub-resource-locator composition. "
     "It is NOT the canonical API surface — it still contains framework dynamic-admin "
     "routes whose path is a Java FQN (e.g. /org.broadleafcommerce...), which the "
-    "`endpoints` command excludes. Endpoint counts differ across commands BY DESIGN "
+    "`endpoints` command excludes, and endpoints from test-fixture / test-utility "
+    "modules (tagged scope=\"test_util\"), which the canonical CIR surface excludes so "
+    "impact-chain / pr-impact / spring-audit do not report test scaffolding as "
+    "production HTTP exposure. Endpoint counts differ across commands BY DESIGN "
     "and are not contradictory; expected ordering for one repo is "
     "repo-ir.route_surface (raw, includes FQN-shaped framework routes) >= "
     "endpoints.total (canonical REST/API surface, FQN-shaped routes filtered out) >= "

sourcecode/path_filters.py

@@ -168,6 +168,37 @@ def is_test_fixture_module_path(path: str) -> bool:
     return False
 
 
+_EXAMPLE_MODULE_TOKENS = frozenset({
+    "example", "examples", "demo", "demos", "sample", "samples", "showcase",
+})
+
+
+def is_example_module_path(path: str) -> bool:
+    """Return True when *path* is inside an example/demo MODULE directory.
+
+    Structural: a directory segment above the source root carries a hyphen/underscore
+    -delimited example/demo token (e.g. ``eureka-examples/src/main/java/...``). Package
+    components below the source root (``io/confluent/examples/...``) are NOT matched —
+    only a module directory is a functional role; a package of the same name is not.
+    """
+    norm = path.replace("\\", "/").lower()
+    # Prepend "/" so a relative path ("src/main/...") matches the same boundary as an
+    # absolute one; without this the head-truncation silently failed and package
+    # components below the source root (e.g. ".../samples/petclinic/...") false-matched.
+    probe = "/" + norm
+    head = norm
+    for root in ("/src/main/", "/src/test/", "/src/"):
+        idx = probe.find(root)
+        if idx >= 0:
+            head = probe[:idx]
+            break
+    for seg in head.split("/"):
+        toks = seg.replace("_", "-").split("-")
+        if any(t in _EXAMPLE_MODULE_TOKENS for t in toks):
+            return True
+    return False
+
+
 def is_vendor_path(path: str) -> bool:
     """Return True when *path* is inside a vendored / third-party directory.
 

sourcecode/perf.py

@@ -0,0 +1,268 @@
+"""Performance instrumentation and baseline schema — see ADR-0006.
+
+Two responsibilities, kept separate:
+
+* An **in-process recorder** that times the frozen phase taxonomy (§3). It is
+  *zero-cost when disabled* (ADR-0006 §5.5): with ``SOURCECODE_PERF`` unset,
+  :func:`span` yields without reading a clock, allocating a span, or writing a
+  dict. A production ``ask`` invocation pays nothing for the harness existing.
+
+* **Pure functions** — percentiles and the ``perf-baseline-v1`` cell builder —
+  that the fleet harness (``scripts/perf_harness.py``) uses to turn a set of raw
+  per-run measurements into one frozen-schema artifact.
+
+The phase taxonomy and the output schema are the frozen contract; this module is
+the replaceable collector.
+"""
+
+from __future__ import annotations
+
+import hashlib
+import json
+import os
+import platform
+import socket
+import sys
+import time
+from contextlib import contextmanager
+from datetime import datetime, timezone
+from typing import Iterator, Mapping, Sequence
+
+# ── Frozen contract constants (ADR-0006) ────────────────────────────────────
+
+SCHEMA_VERSION = "perf-baseline-v1"
+
+#: The frozen phase taxonomy. Order is contractual — see ADR-0006 §3.
+#: These are the pipeline's *measured* contiguous seams, not compiler-shaped
+#: guesses: repo discovery, what-is-this-repo detection+enrichment, model
+#: assembly + semantic/contract extraction, and output rendering.
+PHASES: tuple[str, ...] = ("discovery", "detection", "analysis", "serialize")
+
+#: Env var that arms the in-process recorder.
+ENV_ENABLE = "SOURCECODE_PERF"
+#: Env var naming the JSONL file the recorder appends its phase timings to.
+ENV_LOG = "SOURCECODE_PERF_LOG"
+
+
+# ── In-process recorder (zero-cost when disabled) ───────────────────────────
+
+
+class _Recorder:
+    """Accumulates elapsed milliseconds per named phase for one process."""
+
+    __slots__ = ("_spans",)
+
+    def __init__(self) -> None:
+        self._spans: dict[str, float] = {}
+
+    def add(self, name: str, ms: float) -> None:
+        self._spans[name] = self._spans.get(name, 0.0) + ms
+
+    def as_dict(self) -> dict[str, float]:
+        return dict(self._spans)
+
+    def flush(self, path: str) -> None:
+        """Append the accumulated phase timings as one JSONL record."""
+        with open(path, "a", encoding="utf-8") as fh:
+            fh.write(json.dumps({"phase_ms": self._spans}) + "\n")
+
+
+def _resolve_recorder() -> _Recorder | None:
+    """Return a recorder iff the environment arms it, else ``None``.
+
+    Resolved once and cached. Kept out of :func:`span`'s hot path so the
+    disabled case is a single ``is None`` check.
+    """
+    if _resolve_recorder._cached is not _UNSET:  # type: ignore[attr-defined]
+        return _resolve_recorder._cached  # type: ignore[attr-defined]
+    rec = _Recorder() if os.environ.get(ENV_ENABLE) == "1" else None
+    _resolve_recorder._cached = rec  # type: ignore[attr-defined]
+    return rec
+
+
+_UNSET = object()
+_resolve_recorder._cached = _UNSET  # type: ignore[attr-defined]
+
+
+@contextmanager
+def span(name: str) -> Iterator[None]:
+    """Time a phase region. No-op (and clock-free) when perf is disabled.
+
+    ``name`` should be one of :data:`PHASES`, but any name is accepted so the
+    caller is never coupled to import order; unknown names simply won't map into
+    a baseline cell.
+    """
+    rec = _resolve_recorder()
+    if rec is None:
+        # Zero-cost path: no perf_counter, no object, no dict write.
+        yield
+        return
+    t0 = time.perf_counter()
+    try:
+        yield
+    finally:
+        rec.add(name, (time.perf_counter() - t0) * 1000.0)
+
+
+def start() -> float | None:
+    """Open a phase measurement without indenting the region it spans.
+
+    Pairs with :func:`stop`. Returns a start timestamp, or ``None`` when perf is
+    disabled — in which case no clock is read. Use this instead of :func:`span`
+    to instrument a long, branchy region in place without wrapping it in a
+    ``with`` block (which would force a re-indent of hundreds of lines).
+    """
+    return time.perf_counter() if _resolve_recorder() is not None else None
+
+
+def stop(name: str, t0: float | None) -> None:
+    """Close a :func:`start` measurement, accumulating into phase ``name``.
+
+    A no-op when perf is disabled (``t0 is None``). Because the recorder sums by
+    name, the same phase may be opened and closed at several scattered call
+    sites and the times add up.
+    """
+    if t0 is None:
+        return
+    rec = _resolve_recorder()
+    if rec is not None:
+        rec.add(name, (time.perf_counter() - t0) * 1000.0)
+
+
+def flush_recorder() -> None:
+    """Write accumulated phase timings to ``$SOURCECODE_PERF_LOG`` if armed."""
+    rec = _resolve_recorder()
+    path = os.environ.get(ENV_LOG)
+    if rec is not None and path:
+        rec.flush(path)
+
+
+def _reset_for_tests() -> None:
+    """Clear the cached recorder so tests can re-resolve after mutating env."""
+    _resolve_recorder._cached = _UNSET  # type: ignore[attr-defined]
+
+
+# ── Pure statistics ─────────────────────────────────────────────────────────
+
+
+def percentile(values: Sequence[float], q: float) -> float:
+    """Linear-interpolated percentile, ``q`` in ``[0, 100]``.
+
+    ``percentile(v, 50)`` is the median. Used for both p50 (central tendency —
+    never the mean, ADR-0006 §4) and p95 (tail).
+    """
+    if not values:
+        raise ValueError("percentile of empty sequence")
+    if not 0.0 <= q <= 100.0:
+        raise ValueError(f"q out of range: {q}")
+    s = sorted(values)
+    if len(s) == 1:
+        return float(s[0])
+    rank = (q / 100.0) * (len(s) - 1)
+    lo = int(rank)
+    hi = min(lo + 1, len(s) - 1)
+    frac = rank - lo
+    return float(s[lo] + (s[hi] - s[lo]) * frac)
+
+
+def p50(values: Sequence[float]) -> float:
+    return percentile(values, 50.0)
+
+
+def p95(values: Sequence[float]) -> float:
+    return percentile(values, 95.0)
+
+
+def _stat_block(values: Sequence[float], *, tail: bool = True) -> dict[str, float]:
+    block = {"p50": round(p50(values), 3), "p95": round(p95(values), 3)}
+    if not tail:
+        block.pop("p95")
+    return block
+
+
+# ── Environment fingerprint ─────────────────────────────────────────────────
+
+
+def collect_env() -> dict[str, object]:
+    """Capture the fields that make a baseline comparable only to same-host runs.
+
+    ``hostname_hash`` (not the raw hostname) groups same-machine runs without
+    leaking the machine name. Cross-host absolute numbers are recorded, never
+    diffed (ADR-0006 §5.4).
+    """
+    try:
+        host = socket.gethostname()
+    except OSError:
+        host = "unknown"
+    return {
+        "python": platform.python_version(),
+        "os": sys.platform,
+        "cpu": platform.processor() or platform.machine() or "unknown",
+        "cores": os.cpu_count() or 0,
+        "hostname_hash": hashlib.sha256(host.encode("utf-8")).hexdigest()[:8],
+    }
+
+
+# ── perf-baseline-v1 cell builder ───────────────────────────────────────────
+
+
+def build_baseline_cell(
+    *,
+    tool_version: str,
+    command: str,
+    repo: Mapping[str, object],
+    mode: str,
+    wall_ms_runs: Sequence[float],
+    rss_bytes_runs: Sequence[float],
+    phase_ms_runs: Sequence[Mapping[str, float]] | None = None,
+    env: Mapping[str, object] | None = None,
+    captured_at: str | None = None,
+) -> dict:
+    """Assemble one frozen-schema ``perf-baseline-v1`` cell from raw runs.
+
+    ``wall_ms_runs`` / ``rss_bytes_runs`` hold one value per run. ``phase_ms_runs``
+    is one ``{phase: ms}`` mapping per run; when absent, phase timings are emitted
+    as ``null`` with an honest ``instrumentation: "absent"`` marker rather than a
+    fabricated zero.
+    """
+    if not wall_ms_runs:
+        raise ValueError("wall_ms_runs must be non-empty")
+
+    phase_ms: dict[str, object] = {}
+    if phase_ms_runs:
+        for ph in PHASES:
+            series = [float(r[ph]) for r in phase_ms_runs if ph in r]
+            phase_ms[ph] = _stat_block(series) if series else None
+        # Un-attributed time must stay visible: total minus the sum of phases,
+        # never hidden inside a phase (ADR-0006 §3).
+        unattributed = []
+        for i, wall in enumerate(wall_ms_runs):
+            if i < len(phase_ms_runs):
+                attributed = sum(float(v) for v in phase_ms_runs[i].values())
+                unattributed.append(wall - attributed)
+        phase_ms["unattributed_p50"] = (
+            round(p50(unattributed), 3) if unattributed else None
+        )
+    else:
+        for ph in PHASES:
+            phase_ms[ph] = None
+        phase_ms["instrumentation"] = "absent"
+
+    return {
+        "schema_version": SCHEMA_VERSION,
+        "tool_version": tool_version,
+        "captured_at": captured_at or datetime.now(timezone.utc).strftime("%Y-%m-%dT%H:%M:%SZ"),
+        "command": command,
+        "repo": dict(repo),
+        "mode": mode,
+        "runs": len(wall_ms_runs),
+        "wall_ms": {
+            "p50": round(p50(wall_ms_runs), 3),
+            "p95": round(p95(wall_ms_runs), 3),
+            "min": round(float(min(wall_ms_runs)), 3),
+            "max": round(float(max(wall_ms_runs)), 3),
+        },
+        "phase_ms": phase_ms,
+        "rss_peak_bytes": _stat_block(rss_bytes_runs) if rss_bytes_runs else None,
+        "env": dict(env) if env is not None else collect_env(),
+    }

sourcecode/repository_ir.py

@@ -25,7 +25,10 @@ from typing import Any, Iterable, Optional
 from sourcecode.caller_metrics import CALLER_METRIC_RECONCILIATION
 from sourcecode.endpoint_metrics import ENDPOINT_SURFACE_RECONCILIATION
 from sourcecode.fqn_utils import normalize_owner_fqn as _normalize_owner_fqn
-from sourcecode.path_filters import is_test_path as _is_test_path
+from sourcecode.path_filters import (
+    is_test_path as _is_test_path,
+    is_test_fixture_module_path as _is_test_fixture_module_path,
+)
 from sourcecode.security_config import (
     CustomSecuritySpec,
     capture_markers as _capture_markers,
@@ -4176,6 +4179,23 @@ def _assemble(
     _route_surface = _build_route_surface(
         sorted_syms, route_diffs, extends_map=_extends_map, custom_security=custom_security
     )
+    # Tag routes that originate in a test-fixture / test-utility module (dummy web
+    # services, JAX-RS @Path fixtures shipped under src/main of a *-test-utils /
+    # testsuite / test-framework module). route_surface stays RAW evidence — nothing
+    # is dropped here; the tag lets the CIR endpoint projection (ir_dict_to_canonical)
+    # exclude them so every CIR consumer (impact-chain, pr-impact, review-pr,
+    # spring-audit) shares one production-endpoint definition with the `endpoints`
+    # command, while repo-ir can still see the full surface. Mirrors the scope tag
+    # applied in extract_java_endpoints.
+    _rs_fqn_file = {
+        s.symbol: (s.source_file or s.declaring_file)
+        for s in sorted_syms
+        if s.type in ("class", "interface")
+    }
+    for _r in _route_surface:
+        _rf = _rs_fqn_file.get(_r.get("effective_class", ""), "")
+        if _rf and _is_test_fixture_module_path(_rf):
+            _r["scope"] = "test_util"
     _analysis_gaps = _compute_analysis_gaps(
         sorted_syms, spring_summary, _route_surface, sorted_rels,
         unparsed_type_files=unparsed_type_files,
@@ -5098,11 +5118,23 @@ def build_repo_ir(
                 _r["security_annotations"] = {"policy": "xml_or_filter_chain"}
 
     # L-6: inject analysis_meta — files_read, lines_read, symbols_analyzed, token_estimate
+    # symbol_kinds is the deterministic per-kind breakdown; classes/methods are the
+    # two rollups the perf harness consumes for cost-per-symbol (ADR-0006). The IR
+    # owns the taxonomy, so the rollup lives here rather than in the harness.
+    _kind_counts: dict[str, int] = {}
+    for _s in all_symbols:
+        _k = _s.symbol_kind or "unknown"
+        _kind_counts[_k] = _kind_counts.get(_k, 0) + 1
+    _TYPE_KINDS = ("class", "interface", "enum", "annotation", "record")
+    _METHOD_KINDS = ("method", "constructor")
     ir["analysis_meta"] = {
         "files_read": _meta_files_read,
         "lines_read": _meta_lines_read,
         "symbols_analyzed": len(all_symbols),
         "token_estimate": _meta_chars_read // 4,  # 4 chars ≈ 1 token (rough approximation)
+        "symbol_kinds": {k: _kind_counts[k] for k in sorted(_kind_counts)},
+        "classes": sum(_kind_counts.get(k, 0) for k in _TYPE_KINDS),
+        "methods": sum(_kind_counts.get(k, 0) for k in _METHOD_KINDS),
     }
     if emit_body_facts:
         # Additive, in-memory only: not a cir_hash input, not serialized by the
@@ -6397,6 +6429,12 @@ def compute_blast_radius(
 
     endpoints_affected: list[dict] = []
     for ep in route_surface:
+        # Test-fixture routes (tagged by build_repo_ir) are not production HTTP
+        # exposure — skip them so the legacy `impact` command shares the single
+        # production-endpoint definition used by the CIR surfaces. Nothing else about
+        # blast-radius selection changes; FQN-admin routes are untouched.
+        if ep.get("scope") == "test_util":
+            continue
         ep_class = ep.get("effective_class") or ep.get("controller") or ep.get("class") or ""
         ep_symbol = ep.get("symbol") or ""
         ep_handler = (

sourcecode/serializer.py

@@ -700,7 +700,11 @@ def _security_surface_from_eps(
 def _bootstrap_structured(eps: list) -> "Optional[dict[str, Any]]":
     """Separate Java entry points into bootstrap / security / controllers groups."""
     from pathlib import Path as _Path
-    bootstrap: list[str] = []
+    from sourcecode.path_filters import (
+        is_example_module_path,
+        is_test_fixture_module_path,
+    )
+    bootstrap_entries: list[tuple[str, str]] = []  # (path, source)
     security: list[str] = []
     controllers: list[dict] = []
     seen_b: set[str] = set()
@@ -720,9 +724,19 @@ def _bootstrap_structured(eps: list) -> "Optional[dict[str, Any]]":
         # filename alone — XSD-generated Application.java model classes must not
         # appear here.
         if kind == "application":
+            # Benchmark/example/tool mains (classified auxiliary/development) are real
+            # entry points but not the app's deployment bootstrap — keep them out.
+            if getattr(ep, "classification", None) in ("auxiliary", "development"):
+                continue
+            # Same for mains that live in an example/demo or test-fixture MODULE. This
+            # filter runs here (not in the detector) because workspace sub-scans prefix
+            # the module name onto the path only after detection — the full path with
+            # the module dir is visible only at this serialization stage.
+            if is_example_module_path(path) or is_test_fixture_module_path(path):
+                continue
             if path not in seen_b:
                 seen_b.add(path)
-                bootstrap.append(path)
+                bootstrap_entries.append((path, getattr(ep, "source", "")))
         elif kind == "filter" or any(k in stem for k in ("Filter", "Security", "Auth", "Jwt", "WebSecurity")):
             if path not in seen_s:
                 seen_s.add(path)
@@ -736,12 +750,31 @@ def _bootstrap_structured(eps: list) -> "Optional[dict[str, Any]]":
                     item["http_path"] = http_path
                 controllers.append(item)
 
+    # Order deployment-annotation entries (@SpringBootApplication/@QuarkusMain/…) ahead
+    # of plain main() classes, so a repo's real bootstrap leads even when many main()
+    # methods exist; then cap for readability while reporting the true total. A
+    # multi-main repo (e.g. neo4j: cypher-shell CLI + Neo4jCommunity server + admin
+    # tools) surfaces its server entry and its multiplicity instead of one arbitrary pick.
+    bootstrap_entries.sort(key=lambda pe: 0 if pe[1] == "bootstrap_annotation" else 1)
+    _bootstrap_total = len(bootstrap_entries)
+    _BOOTSTRAP_CAP = 10
+    bootstrap = [p for p, _src in bootstrap_entries[:_BOOTSTRAP_CAP]]
+
     if not bootstrap and not security:
         return None
 
     result: dict[str, Any] = {}
     if bootstrap:
         result["bootstrap"] = bootstrap
+        if _bootstrap_total > len(bootstrap):
+            result["bootstrap_note"] = (
+                f"{_bootstrap_total} application entry points detected; showing "
+                f"{len(bootstrap)} (deployment-annotated entries first)."
+            )
+        elif _bootstrap_total > 1:
+            result["bootstrap_note"] = (
+                f"{_bootstrap_total} application entry points detected."
+            )
     if security:
         result["security"] = security
     if controllers:

sourcecode/summarizer.py

@@ -362,11 +362,16 @@ class ProjectSummarizer:
 
         parts = [lead]
 
-        # Stack with frameworks — keep brief, skip internal module listings
+        # Stack with frameworks — keep brief, skip internal module listings.
+        # Read the primary flag set by the single authority (classifier.select_primary_stack);
+        # never re-select here — a second selector would let the summary name a different
+        # stack than architecture_summary / stacks[].primary (the polyglot divergence).
         non_tooling_stacks = self._filter_non_tooling_stacks(sm)
         primary = None
         if non_tooling_stacks:
-            primary = self._select_summary_primary_stack(non_tooling_stacks)
+            primary = next(
+                (s for s in non_tooling_stacks if s.primary), non_tooling_stacks[0]
+            )
             frameworks = [fw.name for fw in primary.frameworks[:2]]
             if frameworks:
                 parts.append(f"Stack: {primary.stack.capitalize()} ({', '.join(frameworks)})")
@@ -580,21 +585,6 @@ class ProjectSummarizer:
         ]
         return filtered or sm.stacks
 
-    def _select_summary_primary_stack(self, stacks: list) -> Any:
-        def score(stack: Any) -> tuple[int, int, int, int]:
-            root_manifest_hits = 0
-            if self.root is not None:
-                root_manifest_hits = sum(
-                    1 for manifest in stack.manifests
-                    if (self.root / manifest).is_file()
-                )
-            framework_hits = len(stack.frameworks)
-            primary_hint = 1 if stack.primary else 0
-            confidence = {"low": 0, "medium": 1, "high": 2}.get(stack.confidence, 0)
-            return (root_manifest_hits, framework_hits, primary_hint, confidence)
-
-        return max(stacks, key=score)
-
     def _is_tooling_path(self, path: str | None) -> bool:
         if not path:
             return False

{sourcecode-2.5.13.dist-info → sourcecode-2.5.16.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 2.5.13
+Version: 2.5.16
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 License-File: LICENSE
 Keywords: agents,ai,codebase,context,developer-tools,llm

{sourcecode-2.5.13.dist-info → sourcecode-2.5.16.dist-info}/RECORD

@@ -1,20 +1,20 @@
-sourcecode/__init__.py,sha256=M8eYjrmWCXZgccRJ042BhY9QS6VmNX4SDwD_gMX9cvo,309
+sourcecode/__init__.py,sha256=1AEidIhoB0bOc0Hb9b3t-h8cPmjSPMex9CxZXJhKi98,309
 sourcecode/adaptive_scanner.py,sha256=XffluXKzJUXrMtjEiAOnSNPZnztdIcts17T9ouHeID0,10521
 sourcecode/archetype.py,sha256=d7yoN6Tj4OBj-VgSMPEKg4WF9H8FypnZ5A6AkUh5oIE,34484
 sourcecode/architecture_analyzer.py,sha256=GFc4ek-s1IHWM7pl-0L32WahZ93AmDgrAMcOuBKA5Dk,61463
 sourcecode/architecture_summary.py,sha256=BVVRHd952cjRhjHnR6CPrvKgaa-tdM16l-pBi1yDCPs,32395
-sourcecode/ast_extractor.py,sha256=FEsYTsMCXbJfSYQZRk1k-I-PjUNGnKqO1IxMftsgA5U,51351
+sourcecode/ast_extractor.py,sha256=gBxHVDdmY5o6lcBxawYYA-2CpGbcJ8EEAewGLi5CfQ4,51477
 sourcecode/cache.py,sha256=1V3vsaODAa2UBJAC0xpvxpmRdriCezQx5Q8JCcfgziE,31892
 sourcecode/call_surface.py,sha256=fiqYfHooxN1fX9oQoysq1LS3LoZcobhyUNjAGEZKpwk,4148
 sourcecode/caller_metrics.py,sha256=HG8RCOkpzzsEGdnMRob6byrwjoj5__t0TEsBj4yR7ks,2574
-sourcecode/canonical_ir.py,sha256=5hLAhhSpXNOdZAvPt-J-rXccJE6M3A6gVhmhU0Tym6Y,29269
+sourcecode/canonical_ir.py,sha256=LdP_Ri3rl0M5p-MY0ypVvQwhq1WuUF1FmaHid7zyzEg,29807
 sourcecode/cir_graphs.py,sha256=9G0HHj1kw2325IDyzo2OpX73BNswEckecf4MZUXB4JM,12078
-sourcecode/classifier.py,sha256=rkMapdklDuIv3rXrNEwwL65UldkvTn8VuKa73GPoSDo,18849
-sourcecode/cli.py,sha256=mlMgyRukRoHXYdAYHBN4z06LszwdRo0QLdhs0KYtup8,323804
+sourcecode/classifier.py,sha256=JBzPwSSrDG-tUHAbcKB678HRbjLpD-ohzbzzO62mgpo,20114
+sourcecode/cli.py,sha256=QH7K8Uw19z5o7eXFPvVcC8ZA1KNUHS0bVL_IdOYC2CQ,324702
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
 sourcecode/confidence_analyzer.py,sha256=vnbPI-20FnHdjO6STxHW8fbaxmB4A7y58io63ibFZjc,21586
 sourcecode/context_cache.py,sha256=maws79rLKDwyZ7c9Q2LwlIxqZHRFlaKzErtO3mglWoA,25036
-sourcecode/context_graph.py,sha256=WFtUvfxoE8XtQxtRJLvaF4SJuS00ICjNoTk0sH2_V5U,44454
+sourcecode/context_graph.py,sha256=i2kOX3XiaCqcR20ojbUnqoX-hJbMyLNYc7rl-n15bwE,46426
 sourcecode/context_scorer.py,sha256=QpChSpsmaAYz91rXA4Ue5xzQmNz_ZboZN09YOHScq1U,14679
 sourcecode/context_summarizer.py,sha256=cI2TZMvEhl0BEma12VtPaX6z03ZVBAetVzuK5GaCOvg,6852
 sourcecode/contract_model.py,sha256=nRxJKPMs1VHwFTa8AVXhGmaLjti3Lr2sjHDpWgv1bfE,3917
@@ -24,7 +24,7 @@ sourcecode/dependency_analyzer.py,sha256=fQCaWQ7_BNcVgZv8gweJCwJ1CGlXsz8nw_tqN3a
 sourcecode/doc_analyzer.py,sha256=05bjTUbDbmnbajD_cgRnACzS8T7xxBKVX4CjkJlhZg8,24411
 sourcecode/dynamic_argument_surface.py,sha256=iRzrJhs57UXrGvLhNPiTA-e_sdO6ka-wNqc0wIiegiM,2554
 sourcecode/endpoint_literals.py,sha256=Qf4gTZzvNSFDGDuOvF0YRL9NvaYKKj24klhR5LIOaXc,3263
-sourcecode/endpoint_metrics.py,sha256=wkAonXe34ItHlvlGur3YRFUrcZfg6GdiiwiE4bMa21Y,2590
+sourcecode/endpoint_metrics.py,sha256=sLSLUIgiIyvNdOynaxVgHd9SjRF_DbN3QxevaquykaU,2840
 sourcecode/entrypoint_classifier.py,sha256=jhTYlyqDJH2AtdEcLVaRU3lYRTJuF8DkxVzl4-W3zWE,5322
 sourcecode/env_analyzer.py,sha256=aNTyYgQk5noJDfJU6FmasmESOHfiomyJw5EvZqjy6qc,22213
 sourcecode/error_schema.py,sha256=uwosfNaSujtYm11_732Hu92z5ITV040fQDaIyefSvR4,1683
@@ -45,7 +45,8 @@ sourcecode/metrics_analyzer.py,sha256=m0ENgtqKeBL17kUIK3fmGkgo7UfXBNHxCMj0H_Y5K7
 sourcecode/migrate_check.py,sha256=HJhvHuvXDGTJSRQU9_AMx0L94h2TImC1DCGs3m3RTu0,108199
 sourcecode/openapi_surface.py,sha256=BTt0K-woZbkbWTN77IkqeBm_Okag9owR0848fmot8sk,16207
 sourcecode/output_budget.py,sha256=Js9yUlfQtPhqBl9R6wn_9UHVjjJc3GtLcqyfjf5t50Q,9869
-sourcecode/path_filters.py,sha256=809P9hj_QChNLg8wk4HuKcFUZmnDKNz0sKIMbmt_FNE,9138
+sourcecode/path_filters.py,sha256=qPKO7kRmVp2y9zjLNSuAVCbcpZrIInHE4QulLUlzPFI,10412
+sourcecode/perf.py,sha256=GAcEoouPIlPMCQIcHNToxK6K3WdIR-lj9aFg4prOYJI,9743
 sourcecode/pr_comment_renderer.py,sha256=KmcjMruhR44gjzMDJwjBSkWP9QEvh8xWBLyxzxoRbj0,14542
 sourcecode/pr_impact.py,sha256=dCDVw83EDbyVf6F9ZmEQmsFz8ruVH7d4mpeKQCIZHM0,16805
 sourcecode/prepare_context.py,sha256=-Xu33qCETuqw-OFfT3ukvAtxde7krCjQpn7wR3pbdOg,224290
@@ -56,7 +57,7 @@ sourcecode/redactor.py,sha256=SB4hwIvg8h-hvcqKcDWaZvA-aSyn-at-BIRwa0tUv5E,3227
 sourcecode/relevance_scorer.py,sha256=0AgEt4KrV73nioMqBgjhGjtY7L2C7L7cSyKtj3IKcrw,9408
 sourcecode/rename_refactor.py,sha256=h6dNFlB9aZ_3q6heeHBkgXQeXaT03nvPSsYH6P8qxFg,12965
 sourcecode/repo_classifier.py,sha256=FG1vaWKdWXsWdl-S8hjVMiTqcwgaRXkDyvK4rPcOGtQ,22681
-sourcecode/repository_ir.py,sha256=bNSUKkWQEvFQ2wSZPRdn_9cZfx6TRcPzGtM2EgMm49M,311400
+sourcecode/repository_ir.py,sha256=mLsnKeZkbsEF2Jzl7FOKMtzo4lR9UTyrk2KhbeL4FcE,313566
 sourcecode/ris.py,sha256=Hw8TakTQ6hku-Abf2k8954NwkrH_sP73_8wVH8x5khc,22079
 sourcecode/runtime_classifier.py,sha256=uTAD6BDCiBLUZEDRfqk718kM4RTT_vAbfkcOI2_Xx58,18432
 sourcecode/scanner.py,sha256=WdOQ78mMzjR1NjmKTlbxdgwinnCTfAhxCVLBEFQiFHU,8899
@@ -67,7 +68,7 @@ sourcecode/semantic_analyzer.py,sha256=bpgdC6m0_ftVtRf3rSdwhbhWjnZnGxRXaZVcfe4Bb
 sourcecode/semantic_impact_engine.py,sha256=t09IirGC3JjQDy33JZd1_WKzQVKXkoNl3-XEUr5kjis,20563
 sourcecode/semantic_integration_engine.py,sha256=rxoCuP-uM_Y4-ELeBN0sz1a88e2eI1XTJDgsS57IOLI,15513
 sourcecode/semantic_services.py,sha256=nbUuPv-F01USTt_9CHT8iy_ucCIw3fz4W3Aquea_pd4,10782
-sourcecode/serializer.py,sha256=FmQo7eojA_z3ptLW-Vgze5mrEJ6FabcZqiwbQWWTgFI,130056
+sourcecode/serializer.py,sha256=UCGwxPZw9jS_amhU4om9a4Z6VOGOpttNuPpLuhGnuuU,132052
 sourcecode/spring_event_topology.py,sha256=5_ON_21Le5zbG-1GRc5GLIi5HJfy_QjcXLVPC5WeUGQ,18055
 sourcecode/spring_findings.py,sha256=EX7kLZLN74CFyR9iZPm3CI115BfFKNd4WRPuErNljZM,5729
 sourcecode/spring_impact.py,sha256=MkUI27OCOhkjvBoA4f9X1eDBIY0SmyPuLVCWIfZgOcE,72430
@@ -75,7 +76,7 @@ sourcecode/spring_model.py,sha256=zOAgFmrRbG4a6KLm1TJl55aWMyPNsz3OS3FSczqPG6A,16
 sourcecode/spring_security_audit.py,sha256=Rk-aSohezdc7YDYbSoJquVnwpkDB8ty1BCD-4Hc4R5A,22832
 sourcecode/spring_semantic.py,sha256=jteQ1PkY9ArFJv0embg_jBIdbOxqrk9mQ2Xz8OF_FKA,14214
 sourcecode/spring_tx_analyzer.py,sha256=QMXkxa_hrqDVN3D8WJsd0nT7vfdZCT1E8ZWNoFFbvgU,34692
-sourcecode/summarizer.py,sha256=SWj-y5BJ_Qw89ljLg-KXaLsvU87usOw-raTckPutCk4,26976
+sourcecode/summarizer.py,sha256=sr0-tfecFKCr-fSkPPWbl-t9HC7SY2ZxkjnnXX8DB2A,26621
 sourcecode/tree_utils.py,sha256=8GAkIfQAsvtEudIeW1l4ooH_oRtrWR8cpJQJsEa_Pfw,2093
 sourcecode/type_usage_surface.py,sha256=51IrKRQoIoRnlsiDjHnqpJBn2rc6E59aRhgS0HTzAF0,4428
 sourcecode/validation_inference.py,sha256=UtmYv-d4TEzT1ihGEipAhtXDrwq0XtVtjMpb3i7NsNc,10815
@@ -91,7 +92,7 @@ sourcecode/detectors/elixir.py,sha256=jCpvt5Yi6jvplc80ovRtWh17q-11ZGo9qX7o8b57TJ
 sourcecode/detectors/go.py,sha256=2r66uRQfeTWsqxr4HDhT6vExZErby0t46QXLHVBRv9w,2782
 sourcecode/detectors/heuristic.py,sha256=7cRxrip4yIaggYzZJB6ef8yHKh-gHgiH_pXMFcjlyFU,3723
 sourcecode/detectors/hybrid.py,sha256=IGFRUVsAZ1ooRlFdznCeJAV6vy1yVDx-VyghvLtddXc,9101
-sourcecode/detectors/java.py,sha256=ut8czxGzhFUxRAS5LeG78wev8kJolC7LG8IESDJZTNk,42349
+sourcecode/detectors/java.py,sha256=t6uDee_4pTmkbCQ5aXXqtVfoPLnvVBhnxYYVrv5qrdk,44499
 sourcecode/detectors/jvm_ext.py,sha256=EgHJ5W8EE-ZTN9V607mVzohyKgZE8Mc2jCi-DF8RAZU,2616
 sourcecode/detectors/nodejs.py,sha256=Hg3Gmr7yIMJFiLoDwOTk2wtu00wxIs6kZf-oQujTFUA,13187
 sourcecode/detectors/parsers.py,sha256=ug9K31tyHqinmv0HkIVQVjdTZpBv67FYKAEf52YXOSM,3178
@@ -137,8 +138,8 @@ sourcecode/telemetry/consent.py,sha256=LIAO9ohJZF8OuZwM4u1VWtALlYfTCCKq4wV3Vwc7i
 sourcecode/telemetry/events.py,sha256=LtzYfaX9Ilckj5PTvAcTpDa9mLqDsYPDUiDkRa58piY,2580
 sourcecode/telemetry/filters.py,sha256=NHa5T-6DaZduQPFuC34jOqHWQgSizM-Ygq8aZ4j19ng,5834
 sourcecode/telemetry/transport.py,sha256=4gGHsq0WeY9VywEZXA3vUxykfiYnw9uuqfjAAec7F8o,1681
-sourcecode-2.5.13.dist-info/METADATA,sha256=hAqH0Dxo8V6o4vDdpqalzX3njpQNvHIO8-t5zglFo68,10852
-sourcecode-2.5.13.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-2.5.13.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
-sourcecode-2.5.13.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
-sourcecode-2.5.13.dist-info/RECORD,,
+sourcecode-2.5.16.dist-info/METADATA,sha256=zog1kb8UlXASniP5jKFyloD-2tLZ-sLMt80zRHaDqo0,10852
+sourcecode-2.5.16.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-2.5.16.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
+sourcecode-2.5.16.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
+sourcecode-2.5.16.dist-info/RECORD,,