sourcecode 3.2.0__py3-none-any.whl → 3.2.1__py3-none-any.whl

sourcecode/test_sources.py

@@ -0,0 +1,178 @@
+"""test_sources.py — one answer to "is this file a test, and does this repo have any".
+
+Four surfaces answered this independently: `signals.has_tests` by substring
+(`"/test" in path`), the `analysis_gaps` testing check by a second substring rule,
+`metrics_analyzer.is_test_file` by ecosystem naming patterns, and the review-pr
+coverage risk by a third. On a repository whose *production* code lives in a
+package called `test` — `com.example.saint.test.PruebaCreaBD` — the substring
+rules reported "2 test files" and `has_tests: true` for a repository containing
+**no tests at all**, and the same document's `analysis_gaps` said otherwise.
+
+The fact this module owns:
+
+    Which files are test sources, which roots hold them, and whether the
+    repository has any.
+
+Two signals decide it, in this order:
+
+1. **A test source root.** `src/test/java`, `src/it/…`, `src/androidTest/…`,
+   `src/testFixtures/…`, or a repository-level `test/`, `tests/`, `spec/`,
+   `__tests__/` directory. A build tool that separates test sources says so with
+   a directory, and that statement outranks any name.
+2. **A naming convention**, per ecosystem — `FooTest.java`, `test_foo.py`,
+   `foo.spec.ts`, `foo_test.go`.
+
+What is deliberately *not* a signal: a package or directory named `test` that
+sits **inside a main source root**. `src/main/java/com/ex/test/Helper.java` is
+production code, and calling it a test inflates coverage in the one direction a
+reader must never be misled about.
+
+VAI: only published, tool-neutral conventions appear here — Maven/Gradle source
+layout and the standard test naming patterns of each ecosystem.
+"""
+from __future__ import annotations
+
+import re
+from dataclasses import dataclass, field
+from pathlib import PurePosixPath
+
+# Directory layouts that *declare* a test source set. Matched as path prefixes
+# after normalization, so `module-a/src/test/java/...` counts too.
+_TEST_ROOT_SEGMENTS: tuple[tuple[str, ...], ...] = (
+    ("src", "test"),
+    ("src", "it"),
+    ("src", "integration-test"),
+    ("src", "integrationTest"),
+    ("src", "androidTest"),
+    ("src", "testFixtures"),
+)
+
+# Repository-level test directories, for ecosystems with no src/main split.
+_TEST_DIR_NAMES: frozenset[str] = frozenset(
+    {"test", "tests", "spec", "specs", "__tests__"}
+)
+
+# A directory named `test` under one of these is production code, not a test.
+_MAIN_ROOT_SEGMENTS: tuple[tuple[str, ...], ...] = (
+    ("src", "main"),
+)
+
+# Naming conventions, per ecosystem. Anchored to avoid `testdata/`, `_tested.py`.
+_TEST_NAME_PATTERNS: tuple[re.Pattern[str], ...] = tuple(
+    re.compile(p) for p in (
+        r"(?:^|/)test_[^/]*\.py$",
+        r"[^/]*_test\.py$",
+        r"[^/]*_test\.go$",
+        r"[^/]*\.(spec|test)\.(js|jsx|ts|tsx|mjs|cjs)$",
+        r"[^/]*(Test|Tests|Spec|IT)\.(java|kt|scala)$",
+        r"[^/]*_test\.rb$",
+        r"[^/]*_spec\.rb$",
+        r"[^/]*_test\.dart$",
+        r"[^/]*(Test|test)\.(c|cpp|cc|h|hpp)$",
+        r"[^/]*Test\.php$",
+    )
+)
+
+
+def _norm(path: str) -> str:
+    return path.replace("\\", "/").lstrip("./")
+
+
+def _parts(path: str) -> list[str]:
+    return [p for p in _norm(path).split("/") if p]
+
+
+def _under_main_root(parts: list[str]) -> bool:
+    for i in range(len(parts) - 1):
+        if tuple(parts[i:i + 2]) in _MAIN_ROOT_SEGMENTS:
+            return True
+    return False
+
+
+def declared_test_root(path: str) -> "str | None":
+    """The declared test source root containing ``path``, if any."""
+    parts = _parts(path)
+    for i in range(len(parts) - 1):
+        if tuple(parts[i:i + 2]) in _TEST_ROOT_SEGMENTS:
+            return "/".join(parts[:i + 2])
+    if _under_main_root(parts):
+        # A `test` package inside a main source root is production code.
+        return None
+    for i, part in enumerate(parts[:-1]):
+        if part in _TEST_DIR_NAMES:
+            return "/".join(parts[:i + 1])
+    return None
+
+
+def is_test_path(path: str) -> bool:
+    """Whether ``path`` is a test source.
+
+    The single derivation of this fact. A file under a declared test source root
+    is a test whatever it is named; a file named by convention is a test wherever
+    it sits; a `test` package inside a main source root is neither.
+    """
+    if declared_test_root(path) is not None:
+        return True
+    normalized = _norm(path)
+    return any(p.search(normalized) for p in _TEST_NAME_PATTERNS)
+
+
+@dataclass(frozen=True)
+class SourceTestFacts:
+    """What a repository's file list says about its tests."""
+
+    test_files: tuple[str, ...] = ()
+    roots: tuple[str, ...] = ()
+    basis: str = ""
+    extensions: tuple[str, ...] = field(default=())
+
+    @property
+    def count(self) -> int:
+        return len(self.test_files)
+
+    @property
+    def has_tests(self) -> bool:
+        return bool(self.test_files)
+
+    def to_dict(self) -> dict:
+        return {
+            "test_file_count": self.count,
+            "test_source_roots": list(self.roots),
+            "has_tests": self.has_tests,
+            "basis": self.basis,
+        }
+
+
+def analyze_test_sources(
+    file_paths: "list[str] | tuple[str, ...]",
+    *,
+    extensions: "tuple[str, ...] | None" = None,
+) -> SourceTestFacts:
+    """Test sources in ``file_paths``, optionally restricted to ``extensions``.
+
+    ``extensions`` scopes the question to one language (``(".java",)`` for the
+    backend coverage gap) without changing the rule that answers it.
+    """
+    paths = [
+        p for p in file_paths
+        if not extensions or _norm(p).endswith(extensions)
+    ]
+    tests = tuple(sorted(p for p in paths if is_test_path(p)))
+    roots = tuple(sorted({r for p in tests if (r := declared_test_root(p))}))
+    if tests:
+        basis = (
+            f"{len(tests)} file(s) under a declared test source root "
+            f"or matching a test naming convention"
+            + (f"; roots: {', '.join(roots)}" if roots else "")
+        )
+    else:
+        basis = (
+            "no declared test source root (src/test, src/it, tests/) and no file "
+            "matching a test naming convention"
+        )
+    return SourceTestFacts(
+        test_files=tests,
+        roots=roots,
+        basis=basis,
+        extensions=tuple(extensions or ()),
+    )

{sourcecode-3.2.0.dist-info → sourcecode-3.2.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 3.2.0
+Version: 3.2.1
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 License-File: LICENSE
 Keywords: agents,ai,codebase,context,developer-tools,llm
@@ -73,6 +73,15 @@ Cache keyed on content hashes — invalidated only when source changes. On repea
 
 At 0.3s per call, ASK Engine becomes **constant infrastructure** inside agent loops — call it before every edit, every PR review, every test run, without batching or caching manually.
 
+**What a warm actually covers.** `ask cache warm` runs the compact analysis: it rebuilds the
+shared structural layers (L1/L2 + the Repository Intelligence Snapshot) and the **compact
+view**. Pass `--agent` to warm the agent view as well. Deeper projections are separate view
+keys and are *not* covered by either — `--full`, `--env-map` and a raised `--depth` recompute
+on first use, as do most `prepare-context` tasks. Measured on a 3,342-file Spring monolith:
+`cache warm` 103s → `--compact --git-context` 1s (hit), but `--agent --full --env-map
+--depth 20` still 171s (miss). Budget the deep run explicitly in CI, or warm exactly the view
+your pipeline consumes. Full model: [USER_GUIDE.md#caching](docs/USER_GUIDE.md#caching).
+
 ---
 
 ## Install
@@ -95,27 +104,55 @@ ask version                    # ask 2.5.1
 
 ## Quickstart
 
+**Start with these four.** In three independent field evaluations they carried most of the
+measured value, and `posture --diff` is the one no evaluator found an equivalent for —
+commercial or open source.
+
 ```bash
-# High-signal structural summary — warm cache ~0.3s, cold 2–10s
-ask --compact
+# What does each profile set ACTUALLY wire — and what changes between them?
+# Resolves conditional beans and the filter chain, then diffs effective endpoint access.
+ask posture /path/to/repo --diff dev:prod
 
-# Blast radius: what breaks if this class changes?
-ask impact OrderService /path/to/repo
+# Every REST endpoint with its effective path (context-path + servlet path resolved),
+# its inferred security policy and a confidence per endpoint.
+ask endpoints /path/to/repo
+
+# Spring semantic audit: transactional anomalies (private @Transactional = silent
+# CGLIB no-op), security surface, request-body validation.
+ask spring-audit /path/to/repo
 
-# Spring Boot 2→3 migration readiness (bounded decision summary)
+# Spring Boot 2→3 readiness: located blockers, per-dimension score, effort estimate.
 ask migrate-check /path/to/repo --compact
+```
 
-# Spring semantic audit: TX anomalies + security surface
-ask spring-audit /path/to/repo
+Then the everyday loop:
+
+```bash
+# High-signal structural summary — warm cache ~0.3s, cold 2–10s
+ask --compact
+
+# Blast radius: what breaks if this class changes?  (target the INTERFACE, not the Impl)
+ask impact OrderService /path/to/repo
 
 # Onboard to an unfamiliar codebase
 ask onboard /path/to/repo
 
 # PR review: risk, test gaps, changed modules
 ask review-pr /path/to/repo --since main
+
+# CI gate on NEW violations only, instead of on pre-existing debt
+ask verify /path/to/repo --capture-baseline   # accept today's debt, once
+ask verify /path/to/repo                      # then: only new violations block
 ```
 
-Full command reference: **[docs/USER_GUIDE.md](docs/USER_GUIDE.md)**.
+> **Adopting a gate on a real codebase.** A repository that starts declaring contracts already
+> violates them somewhere; `ask verify` is **baseline-relative by default** (`--fail-on new`)
+> so the gate survives contact with reality instead of being switched off on day one.
+> `ask baseline capture|diff|trend` is a different thing: versioned architectural metrics over
+> time, for trend reporting rather than blocking.
+
+Full command reference: **[docs/USER_GUIDE.md](docs/USER_GUIDE.md)** · posture in depth:
+**[docs/posture.md](docs/posture.md)**.
 
 ---
 
@@ -148,6 +185,15 @@ Deterministic Spring semantics: transactional anomalies (e.g. `@Transactional` o
 `ask spring-audit` · `ask validation`
 → [reference](docs/USER_GUIDE.md#core-commands)
 
+### 5b · Runtime Posture *(experimental — and the most differentiated thing here)*
+What a profile set **actually wires**: which conditional beans register, which do not, and which conditions could not be decided at all — then the effective endpoint access that follows from the filter chain. `--diff` answers the question nobody else answers in one command: *what changes between `dev` and `prod`, across every endpoint at once.*
+`ask posture` · `ask posture --diff dev:prod` · `ask posture --property k=v`
+→ [posture.md](docs/posture.md)
+
+Unresolved is a first-class outcome: a condition the resolver cannot decide is reported as a
+hole with the condition named, never folded into active or inactive. **A posture answer that
+guesses is a confident security falsehood — the worst failure mode this tool has.**
+
 ### 6 · Developer Workflows
 The everyday loop: diff-based PR review, symptom-driven bug triage, and delta context for continuous agent runs.
 `ask review-pr` · `ask fix-bug` · `ask prepare-context`
@@ -159,6 +205,36 @@ The everyday loop: diff-based PR review, symptom-driven bug triage, and delta co
 
 ---
 
+## Every command, in one table
+
+*`ask --help` shows a short header; this is the full surface. If you only read one row, read
+`posture`.*
+
+| Command | Answers | Note |
+|---|---|---|
+| `posture` | which beans a profile set wires, and how effective endpoint access differs between two sets | **experimental**, most differentiated |
+| `endpoints` | every REST endpoint, effective path, security policy, confidence | Spring MVC + JAX-RS (~65 % recall on JAX-RS sub-resource locators) |
+| `spring-audit` | transactional anomalies + security surface + validation gaps | `--ci`, `-f github-comment` |
+| `migrate-check` | Boot 2→3 readiness: located blockers, per-dimension score, effort | `--blast-radius` orders the re-test plan |
+| `impact` / `impact-chain` | blast radius of a change, to the endpoints it reaches | target the **interface**, not the `Impl` |
+| `pr-impact` | the same, scoped to a PR diff | gating command: `--fail-on`, exit codes |
+| `verify` | does the repo satisfy its declared contracts, **relative to a baseline** | `.ask/contracts.yml`; exit 0/1/2 |
+| `verify-edit` | did the working-tree edits change runtime behaviour | semantic diff gate for the edit loop |
+| `--compact` / `--agent` | bounded structural context for an agent | `--compact` is the token-cheap one |
+| `onboard` / `explain` / `cold-start` | orientation in an unfamiliar repo; per-class summary; bootstrap snapshot | |
+| `export` / `repo-ir` / `schema` | tool-agnostic views (C4, module graph, integrations); symbol-level IR; published JSON Schemas | |
+| `modernize` | coupling hubs, cycles, dead zones, refactor candidates | |
+| `review-pr` / `fix-bug` / `prepare-context` | diff review, symptom triage, task-shaped context | |
+| `plan` / `compare` / `delta` / `contract-diff` | what to review for a change; candidates by measured cost; outcome of a change; public-contract break | no verdicts, measured cost only |
+| `validation` | request-body validation coverage and gaps | |
+| `baseline capture\|diff\|trend` | versioned architectural metrics over time | trend reporting, not gating |
+| `retrieve` | typed knowledge queries over the model | **experimental** |
+| `archetype` | evidence-based architectural archetype | **experimental** |
+| `rename-class` / `chunk-file` | word-boundary Java rename; split a large file for an agent | |
+| `cache status\|warm\|clear` · `auth` · `telemetry` · `mcp` · `config` · `version` | housekeeping | |
+
+---
+
 ## What it does — and doesn't
 
 **ASK Engine reduces exploration cost.** It accelerates context acquisition and computes
@@ -182,6 +258,13 @@ Honest limits worth knowing before you rely on it:
 > **🎉 Early-adoption: Pro is currently unlocked for everyone.** Every install runs with
 > full Pro entitlements — no size gate, no key. The tiers below describe the model the
 > paywall will return to later.
+>
+> **What that means concretely.** `ask auth status` reports `"status": "unauthenticated"`
+> together with `"pro": true`, `"pro_reason": "early-adoption unlock"` — that combination is
+> expected, not a bug: you are unauthenticated *and* unlocked. When the unlock ends, gating
+> returns **by repo size and automation, never by command**: `posture`, `endpoints`,
+> `spring-audit` and `migrate-check` stay in the base tier at full output. Nothing you can run
+> today becomes a paid-only command tomorrow.
 
 **Gating is by repo size and automation — never by command.** Every command runs at full
 power on Free for small and mid-size repos; you upgrade when the work gets bigger or automated.
@@ -209,7 +292,13 @@ ask telemetry disable   # anonymous telemetry is on by default (opt-out)
 
 Telemetry collects version, OS, commands, flags, duration, repo-size range, and errors —
 **no source code, paths, secrets, or output**. Disable any time with
-`export SOURCECODE_TELEMETRY=0` (or `DO_NOT_TRACK=1`).
+`export SOURCECODE_TELEMETRY=0` (or `DO_NOT_TRACK=1`). It defaults to **off in CI**.
+
+> **Auditing someone else's code — regulated, client-owned or public-sector?** Turn it off
+> *before* the first run, not after: `SOURCECODE_TELEMETRY=0 ask …`, or `ask telemetry disable`
+> once (remembered). The default is opt-out today; **moving it to opt-in is on the roadmap**
+> (`docs/DEFECT-LEDGER.md` P-1) precisely because a default you must remember to disable is the
+> wrong default for third-party code.
 
 **Custom security annotations.** Teach `endpoints`, `spring-audit`, and `explain` about
 project-specific authorization annotations via an optional `sourcecode.config.json` at the
@@ -241,3 +330,4 @@ Matching endpoints report `policy: "custom"` and drop out of the `no_security_si
 | [MANUAL-USUARIO.md](docs/MANUAL-USUARIO.md) | Guía de usuario en español |
 | [PRODUCT_IDENTITY.md](docs/PRODUCT_IDENTITY.md) | `ask` (command) vs `sourcecode` (package/alias) |
 | [privacy.md](docs/privacy.md) | Telemetry and data-handling policy |
+| [DEFECT-LEDGER.md](docs/DEFECT-LEDGER.md) | Every defect found in the field, its class, and which release closed it — published on purpose |

{sourcecode-3.2.0.dist-info → sourcecode-3.2.1.dist-info}/RECORD

@@ -1,4 +1,4 @@
-sourcecode/__init__.py,sha256=4hwV87XY8dgmsv4RaWkZzBMSpB_T8EQ4A9_-xB5CzmI,308
+sourcecode/__init__.py,sha256=6x6sVPhgem27mPs9kjwcPvWQE6fXXRuvsi6L96JWOFM,308
 sourcecode/adaptive_scanner.py,sha256=yJBKjNpkY6bpueYJ2YnRezen3sYZDecEt7WaaNWdqug,9466
 sourcecode/archetype.py,sha256=qWMCyL2UzSGXJhCIZj38JjS7wI15EE3eILsWiaoCZXQ,35779
 sourcecode/architectural_baseline.py,sha256=7QzJri4pbL3nzAn9gNutZW6mZR8HHD6H2C2H1EEwYPE,17904
@@ -10,14 +10,14 @@ sourcecode/cache.py,sha256=hv5GTk-RktbediFMgNUMcd4R7NuEg5BOaAzj5ZEoD18,33739
 sourcecode/call_surface.py,sha256=fiqYfHooxN1fX9oQoysq1LS3LoZcobhyUNjAGEZKpwk,4148
 sourcecode/caller_metrics.py,sha256=7xJDoar5RHOgDTvaZhML1V5JERJDFc4DA-y_WPKfJCw,3842
 sourcecode/canonical_ir.py,sha256=LdP_Ri3rl0M5p-MY0ypVvQwhq1WuUF1FmaHid7zyzEg,29807
-sourcecode/chain_rules.py,sha256=1kLHv1t7g5rMmycIYSpm3az8SjCr01Xw7LtyV2tNhSA,10666
+sourcecode/chain_rules.py,sha256=Bi6UHfgd-GxWswmnHRcPz5jdbAuqka3Zkz_P-MTvqhw,12767
 sourcecode/change_plan.py,sha256=MNgNyu4zrLGvBBaXPwyCh-T2ZGaUQX3Hm4W87uuhZ3w,7750
 sourcecode/cir_graphs.py,sha256=9G0HHj1kw2325IDyzo2OpX73BNswEckecf4MZUXB4JM,12078
 sourcecode/classifier.py,sha256=JBzPwSSrDG-tUHAbcKB678HRbjLpD-ohzbzzO62mgpo,20114
-sourcecode/cli.py,sha256=F7HXBOhTrzLppk81GDazz6sIvowkZomei1MCRXaTutc,400663
+sourcecode/cli.py,sha256=zkgwPCE88xAX5lZaBtNvN-pGYDvU_FzUkOGCuehioIY,403029
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
 sourcecode/compare.py,sha256=jdePg0dNCxFpysiTGMsROL5XABLjy_zVUgVeySvdb0o,7514
-sourcecode/confidence_analyzer.py,sha256=vnbPI-20FnHdjO6STxHW8fbaxmB4A7y58io63ibFZjc,21586
+sourcecode/confidence_analyzer.py,sha256=_nvtwO6RM3k0JMuH5m7DsBxOD0PdxGFS4Bb1fTQ536E,21946
 sourcecode/constraint_diff.py,sha256=hWIO5vsxvHjsgQx23K3r_JMy1W6wQ2Ca4DqB9R_iMnY,5831
 sourcecode/context_cache.py,sha256=WwN07VUylo8sRyWIgK7qp1D6uK4ZrR4EkPnyENFKwyU,27101
 sourcecode/context_graph.py,sha256=i2kOX3XiaCqcR20ojbUnqoX-hJbMyLNYc7rl-n15bwE,46426
@@ -28,7 +28,7 @@ sourcecode/contract_model.py,sha256=nRxJKPMs1VHwFTa8AVXhGmaLjti3Lr2sjHDpWgv1bfE,
 sourcecode/contract_pipeline.py,sha256=4XE-xhab7ysdExXyUOBl2hAH4MABo7moKnT9V4XcEwQ,30243
 sourcecode/coverage_parser.py,sha256=X9scuUWxacahYTrTBGea2Ku-sf-WCVcnc9OEB35_3IU,19340
 sourcecode/dependency_analyzer.py,sha256=fQCaWQ7_BNcVgZv8gweJCwJ1CGlXsz8nw_tqN3aHJNE,63952
-sourcecode/deployment_prefix.py,sha256=liaruxpoL-8mfHHZhACZrSe5L2K7Vn9Jwu4k3cZ8oXI,8637
+sourcecode/deployment_prefix.py,sha256=g0_4bE_m9svjhnapRpOp8BJkj6Ul94Ij_iVezygMZ0I,11956
 sourcecode/doc_analyzer.py,sha256=05bjTUbDbmnbajD_cgRnACzS8T7xxBKVX4CjkJlhZg8,24411
 sourcecode/dynamic_argument_surface.py,sha256=iRzrJhs57UXrGvLhNPiTA-e_sdO6ka-wNqc0wIiegiM,2554
 sourcecode/endpoint_literals.py,sha256=Qf4gTZzvNSFDGDuOvF0YRL9NvaYKKj24klhR5LIOaXc,3263
@@ -52,7 +52,7 @@ sourcecode/integration_coordinates.py,sha256=7vGFxN4tCn_KTisYFJuixa8XkyHBoasEFB3
 sourcecode/jdk_exports.py,sha256=fCrlwNAXUT9gge_joq6kMnY3zJxYB2pxqy-0w3o3MJI,874
 sourcecode/license.py,sha256=keFuwNxdAtvK2Ds91Wl79GMYxuxWYnN5Wbw1qBpaoUI,24896
 sourcecode/mcp_nudge.py,sha256=lKemOqK_wny2u7Ymcr2Idi5Kx8pXY02jCi-_nJYLGMg,2992
-sourcecode/metrics_analyzer.py,sha256=m0ENgtqKeBL17kUIK3fmGkgo7UfXBNHxCMj0H_Y5K7c,22750
+sourcecode/metrics_analyzer.py,sha256=gLoRWKygF18jLgwsqmGXSWopw-f5iO1VbM7Jjdif6ag,22809
 sourcecode/migrate_check.py,sha256=TJvaShbglENOr8ikvCodnlXQy54TtT05N2ZVe02b3lc,110421
 sourcecode/migration_blast.py,sha256=5qUsUi4n0cwBKltdJYyvyfhBkGENAYjB-d_7LZtnVks,9282
 sourcecode/openapi_surface.py,sha256=BTt0K-woZbkbWTN77IkqeBm_Okag9owR0848fmot8sk,16207
@@ -60,15 +60,16 @@ sourcecode/output_budget.py,sha256=Js9yUlfQtPhqBl9R6wn_9UHVjjJc3GtLcqyfjf5t50Q,9
 sourcecode/parse_cache.py,sha256=IIsWhtMYpBLNyRCDVoiVpUZa62QIk1Q1sZBDNG4G4V0,6668
 sourcecode/path_filters.py,sha256=qPKO7kRmVp2y9zjLNSuAVCbcpZrIInHE4QulLUlzPFI,10412
 sourcecode/perf.py,sha256=GAcEoouPIlPMCQIcHNToxK6K3WdIR-lj9aFg4prOYJI,9743
-sourcecode/posture.py,sha256=bWOIcq702NAwwZDRzhTxwYNz0ULdEqb9VvYf1C2yvV0,33206
+sourcecode/posture.py,sha256=9xM0iZWAPfA5qBP06xxjbwAQq3WzXEYLHftdjwXjsL0,36483
 sourcecode/pr_comment_renderer.py,sha256=KmcjMruhR44gjzMDJwjBSkWP9QEvh8xWBLyxzxoRbj0,14542
 sourcecode/pr_impact.py,sha256=eaFgcPMDsjaF8VZvcitFWCPCabMTi-khtGdxpK0wXTQ,22461
-sourcecode/prepare_context.py,sha256=-pZdQG4g7v47zQLozsIfMW3YYbA3t5GC--iQOmJAK6Y,229897
+sourcecode/prepare_context.py,sha256=cof5MFCPpbg4YWEghQWbMk3h6Egr7Ntiy2A4dAfkrgc,231349
 sourcecode/progress.py,sha256=qn30sWaHOkjTgXsSBmiPkz7Rsbwc5oSlIe6JNEMYp_k,3149
 sourcecode/ranking_engine.py,sha256=ZAucq_YX2KkWUuAZf4P0lhtQ_38vEFnUhuGtSZd1S0E,12970
 sourcecode/readiness_timeline.py,sha256=T5NKLuRHS83lPslE2kMs_RSVENd8jZJ11N1c9gpkpH8,7244
 sourcecode/reconciliation.py,sha256=GU-1PTcVr8zcbtC7BASfpHcZndP9AdboXPNQiBc0fzo,34251
 sourcecode/redactor.py,sha256=SB4hwIvg8h-hvcqKcDWaZvA-aSyn-at-BIRwa0tUv5E,3227
+sourcecode/reference_facts.py,sha256=Ns495c6eTmq2SrqPkcUrJUJru4_wj_yRWm4YDeJwves,13440
 sourcecode/relevance_scorer.py,sha256=0AgEt4KrV73nioMqBgjhGjtY7L2C7L7cSyKtj3IKcrw,9408
 sourcecode/rename_refactor.py,sha256=h6dNFlB9aZ_3q6heeHBkgXQeXaT03nvPSsYH6P8qxFg,12965
 sourcecode/repo_classifier.py,sha256=FG1vaWKdWXsWdl-S8hjVMiTqcwgaRXkDyvK4rPcOGtQ,22681
@@ -83,17 +84,18 @@ sourcecode/semantic_analyzer.py,sha256=bpgdC6m0_ftVtRf3rSdwhbhWjnZnGxRXaZVcfe4Bb
 sourcecode/semantic_impact_engine.py,sha256=t09IirGC3JjQDy33JZd1_WKzQVKXkoNl3-XEUr5kjis,20563
 sourcecode/semantic_integration_engine.py,sha256=7a0WqAInOv39f0Yr_94TYo_JP_8QpeI9KGaknpzAyQU,18899
 sourcecode/semantic_services.py,sha256=nbUuPv-F01USTt_9CHT8iy_ucCIw3fz4W3Aquea_pd4,10782
-sourcecode/serializer.py,sha256=BAGL2J3G3bHvJS60OcxekPvTJg8x6b1LzeLKFbGaots,131497
+sourcecode/serializer.py,sha256=-axoHfVW3H2oE27fDWLxUqohypFVQljLnoOPHBaaq9w,133246
 sourcecode/spring_event_topology.py,sha256=5_ON_21Le5zbG-1GRc5GLIi5HJfy_QjcXLVPC5WeUGQ,18055
 sourcecode/spring_findings.py,sha256=ICcR2qEZgYzWypZzsoaEmVeMYZ0YkuZ8AvTwA-rcVOs,7604
 sourcecode/spring_impact.py,sha256=Cm2KZplpQHjdjUC8jPX1SNnLHxOdM3HsUBNFGwgTP18,80145
 sourcecode/spring_model.py,sha256=zOAgFmrRbG4a6KLm1TJl55aWMyPNsz3OS3FSczqPG6A,16594
-sourcecode/spring_profiles.py,sha256=YPgBH3RuML-mtid7YwUMfA9sfSXPZwknYL7UvRMoYbE,7946
+sourcecode/spring_profiles.py,sha256=A6lYmqPFrp9GqDgaI0aFJILLwW4KDKg5WKZHEGUmRfg,11458
 sourcecode/spring_properties.py,sha256=bQSOVrtj7YENsCjMQTTlVh-Gm_K0n0DdWzjPRUP38C4,8394
 sourcecode/spring_security_audit.py,sha256=FteXv5GH-iE07GLEqPpoX7sVXf_dxRns8zxh9_m6By0,23015
 sourcecode/spring_semantic.py,sha256=UrmLg_4gmBVmMqvSnUMgSReVEERVGv3X7LYDBEs6k_o,16598
 sourcecode/spring_tx_analyzer.py,sha256=lp0h5Pzzd3fPxHAAagMmG8PqR1-v2uVpFIG1o7tCWQs,41148
 sourcecode/summarizer.py,sha256=sr0-tfecFKCr-fSkPPWbl-t9HC7SY2ZxkjnnXX8DB2A,26621
+sourcecode/test_sources.py,sha256=2O7LXF-M-CQ0DwEF3B7BfWE6IWmHJngSOES5aRz6WR4,6205
 sourcecode/token_estimate.py,sha256=ZP3C54aQLExuf32Yvrjok2TAS2oSSyNVRA_HjhsD6Eg,7165
 sourcecode/tree_utils.py,sha256=8GAkIfQAsvtEudIeW1l4ooH_oRtrWR8cpJQJsEa_Pfw,2093
 sourcecode/type_usage_surface.py,sha256=51IrKRQoIoRnlsiDjHnqpJBn2rc6E59aRhgS0HTzAF0,4428
@@ -125,11 +127,13 @@ sourcecode/detectors/rust.py,sha256=Tij1vz8BFZ332GEvVkL6vyMli2OMHJfHyDAppWfe66c,
 sourcecode/detectors/systems.py,sha256=nYaKbGDFu0EOXFcd_1doWFT3tTUdkbxc2DjHUF5TcqQ,1627
 sourcecode/detectors/terraform.py,sha256=cxORPR_zVLOJpHlh4e9JnFpkQsn_UnqMMom5yG65hZ4,1693
 sourcecode/detectors/tooling.py,sha256=8CKbtxwQoABP-WyBRNmdAmHDOvAH57AR1cF4UKuWEdQ,2074
+sourcecode/facts/__init__.py,sha256=JpMjDb7BSaM1a9UQU91YYKr2HJ5tOOuNRCIeQwN8_2o,2341
+sourcecode/facts/registry.json,sha256=9cfOX_OFMZSExOYcMDVxtGj_AG8nJGC9pqTfKOakoFA,9711
 sourcecode/mcp/__init__.py,sha256=XU4HfRGbdid8wdUA0x_4f7uKZD1z3mv_XUY_WU_T9Mw,179
 sourcecode/mcp/orchestrator.py,sha256=diVoQgn24QmgPL3Ev8Sp6hsvh02OqY3MktHXOzrlodo,36525
-sourcecode/mcp/registry.py,sha256=1qIcwtl01AGjEM3yMOwYgr_Ck3y-LZeRvh8i70Nhl_w,68258
+sourcecode/mcp/registry.py,sha256=ZaezKqEbRtPto8aBHpP9XsnSkQ-u4fMtDxhwkgl-iuc,68418
 sourcecode/mcp/runner.py,sha256=RGimCwhLyHxjCvH7q72y12HWEnATXZLC-NBWhkzlu0I,2852
-sourcecode/mcp/server.py,sha256=GH7bgJRVVkBJf-orj_Zmn_mEqMENG76-KNREJS7E5FY,65354
+sourcecode/mcp/server.py,sha256=aYCiQj7NiiDpr3rvZAwPeMvNPJf02X4MFxgB-pMkFGg,65514
 sourcecode/mcp/onboarding/__init__.py,sha256=sj2PWqEBmMc4zBNkomg89WtL0M6S7A9yb7_wAuSWNP4,66
 sourcecode/mcp/onboarding/applier.py,sha256=Sx9vHTaXr_M1Bs4uMjO7qa_a2_p4J9oz93oJsKQ7ds4,3298
 sourcecode/mcp/onboarding/backup.py,sha256=ihqGOR8QTX8HASRSEDyfFyXr5bkXrygPHamv4p9KTmk,1452
@@ -160,8 +164,8 @@ sourcecode/telemetry/consent.py,sha256=GuhCiA_x2n3LwGBkZnvyIwtFcf5Zwa8O0DdLqkATI
 sourcecode/telemetry/events.py,sha256=4_yeO58U-Cwc1Qb27VB0_EjhmroY0k91n3_VGxeALB8,2776
 sourcecode/telemetry/filters.py,sha256=RzxauTz8HliO4BllQnXEXc7zTeqdCZi5MgqGEDuW7OQ,6570
 sourcecode/telemetry/transport.py,sha256=4gGHsq0WeY9VywEZXA3vUxykfiYnw9uuqfjAAec7F8o,1681
-sourcecode-3.2.0.dist-info/METADATA,sha256=O9_rjaiou-XB3P9QZsqnkmS1OAKcBCiEsxJOjjN2D9A,11286
-sourcecode-3.2.0.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-3.2.0.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
-sourcecode-3.2.0.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
-sourcecode-3.2.0.dist-info/RECORD,,
+sourcecode-3.2.1.dist-info/METADATA,sha256=fbRYK-M6OyhP2q9iWNDm-g0gHclD80KBOE5LWKfYboE,17855
+sourcecode-3.2.1.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-3.2.1.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
+sourcecode-3.2.1.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
+sourcecode-3.2.1.dist-info/RECORD,,