sourcecode 3.2.1__py3-none-any.whl → 3.3.0__py3-none-any.whl

sourcecode/telemetry/__init__.py

@@ -1,12 +1,13 @@
-"""sourcecode telemetry — anonymous usage metrics, on by default (opt-out).
+"""sourcecode telemetry — anonymous usage metrics, off until you turn them on (opt-in).
 
 Public API:
     is_enabled()          → bool
     record(event, **kw)   → None  (fire-and-forget)
     session_id()          → str   (ephemeral 8-char hex, new each process)
 
-Telemetry is enabled by default and stays anonymous. It can be disabled at any
-time via `sourcecode telemetry disable`, SOURCECODE_TELEMETRY=0, or DO_NOT_TRACK=1.
+Telemetry is opt-in and stays anonymous: nothing is collected until `ask telemetry
+enable` (or SOURCECODE_TELEMETRY=1). It was opt-out until 3.3.0 — see config.py for
+why the default moved.
 
 Nothing sensitive (code, paths, secrets, output) is ever collected.
 See docs/privacy.md for full details.

sourcecode/telemetry/config.py

@@ -1,11 +1,17 @@
 """Persistent telemetry configuration.
 
-Telemetry is enabled by default (opt-out). It stays anonymous and never
-collects source code, paths, secrets or repository content.
+Telemetry is **off until the user turns it on** (opt-in). It stays anonymous and
+never collects source code, paths, secrets or repository content.
+
+It was opt-out until 3.3.0. Field evaluation #3 was the first audit of regulated
+third-party code — public-sector health data — and there the default is not a
+preference but a procurement blocker: the reviewer had to disable telemetry
+*before the first run*, which the product gave them no way to do. Nothing is
+collected before an explicit choice, so there is nothing to disable in time.
 
 Config file: ~/.config/sourcecode/config.json
-Disable: `sourcecode telemetry disable`, SOURCECODE_TELEMETRY=0, or DO_NOT_TRACK=1
-Env override: SOURCECODE_TELEMETRY=0 (disable) or =1 (enable)
+Enable: `ask telemetry enable` or SOURCECODE_TELEMETRY=1
+Env override: SOURCECODE_TELEMETRY=1 (enable) or =0 (disable); DO_NOT_TRACK=1 disables
 """
 
 from __future__ import annotations
@@ -18,18 +24,6 @@ from typing import Any
 _ENV_VAR = "SOURCECODE_TELEMETRY"
 _CONFIG_FILE = Path.home() / ".config" / "sourcecode" / "config.json"
 
-# CI markers — when no explicit choice has been made, telemetry defaults OFF
-# in CI (no human to see the first-run notice), ON otherwise.
-_CI_VARS = (
-    "CI", "CONTINUOUS_INTEGRATION", "GITHUB_ACTIONS", "CIRCLECI",
-    "TRAVIS", "JENKINS_URL", "BUILDKITE", "GITLAB_CI", "TF_BUILD",
-    "TEAMCITY_VERSION", "DRONE", "SEMAPHORE",
-)
-
-
-def _in_ci() -> bool:
-    return any(os.environ.get(v) for v in _CI_VARS)
-
 
 def _load() -> dict[str, Any]:
     try:
@@ -46,14 +40,29 @@ def _save(data: dict[str, Any]) -> None:
         pass  # config write failure is non-fatal
 
 
+def stored_choice() -> "bool | None":
+    """The explicit choice on record, or None when the user has made none.
+
+    `None` is a state, not a synonym for `False`: "off because nobody has been
+    asked yet" and "off because you turned it off" are different answers, and
+    `telemetry status` prints them differently.
+    """
+    stored = _load().get("telemetry", {}).get("enabled")
+    return None if stored is None else bool(stored)
+
+
 def is_enabled() -> bool:
-    """True unless telemetry has been explicitly disabled.
+    """True only when telemetry has been explicitly turned on.
 
-    Telemetry is enabled by default (opt-out). Precedence, highest first:
+    Telemetry is **opt-in**: no choice on record means off, everywhere, CI or
+    not. Precedence, highest first:
       1. SOURCECODE_TELEMETRY env var (0 = off, 1 = on)
       2. DO_NOT_TRACK env var (any value other than ""/"0" turns it off)
       3. config file 'enabled' flag, if the user has made an explicit choice
-      4. default: True — except in CI, where it defaults to False
+      4. default: False
+
+    There is no CI special case any more, because there is nothing left for it
+    to protect against — the default it used to override is now off.
     """
     env = os.environ.get(_ENV_VAR, "").strip()
     if env == "0":
@@ -63,11 +72,10 @@ def is_enabled() -> bool:
     dnt = os.environ.get("DO_NOT_TRACK", "").strip()
     if dnt not in ("", "0"):
         return False
-    stored = _load().get("telemetry", {}).get("enabled")
+    stored = stored_choice()
     if stored is not None:
-        return bool(stored)
-    # No explicit choice yet: on by default, off under CI.
-    return not _in_ci()
+        return stored
+    return False
 
 
 def has_been_asked() -> bool:

sourcecode/telemetry/consent.py

@@ -1,9 +1,13 @@
 """First-run telemetry notice.
 
-Telemetry is enabled by default (opt-out) and stays anonymous. The notice is
-shown exactly once, only on interactive TTYs, to inform the user that
-telemetry is on and how to turn it off. It does not ask a question — it
-informs and respects the user's right to disable.
+Telemetry is **opt-in**: nothing has been collected when this notice appears, and
+nothing will be until the user runs `ask telemetry enable`. The notice is shown
+exactly once, only on interactive TTYs, and it is an invitation — it states what
+*would* be collected if they said yes, and it never changes the setting.
+
+The invitation is deliberately printed even though the answer is already "no":
+a user who never learns the option exists cannot choose to help, and a silent
+collector is the thing this release removed.
 
 Notice is written to stderr so it doesn't pollute stdout output.
 """
@@ -15,20 +19,20 @@ import sys
 
 _NOTICE = """\
 \033[2m━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-  sourcecode — anonymous telemetry is ON by default
+  ask — anonymous telemetry is OFF
 
-  Anonymous usage metrics help improve sourcecode.
+  Nothing has been collected, and nothing will be unless you
+  turn it on. If you would like to help:
 
-  Collected: tool version, Python version, OS, commands used,
-  flags used, MCP tool names invoked, approximate repo size,
-  execution duration, errors.
+    ask telemetry enable
 
-  Never collected: source code, file paths, file names, secrets,
-  tokens, environment variables, or any repository content.
+  If you do, this is collected: tool version, Python version,
+  OS, commands used, flags used, MCP tool names invoked,
+  approximate repo size, execution duration, errors.
 
-  Disable at any time:
-    ask telemetry disable
-    export SOURCECODE_TELEMETRY=0   (or DO_NOT_TRACK=1)
+  Never collected, on or off: source code, file paths, file
+  names, secrets, tokens, environment variables, or any
+  repository content.
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\033[0m
 """
 
@@ -47,10 +51,10 @@ def _is_interactive() -> bool:
 
 
 def show_first_run_notice() -> None:
-    """Print the one-time telemetry notice on interactive terminals.
+    """Print the one-time telemetry invitation on interactive terminals.
 
     Never raises. Does nothing on non-interactive / CI environments.
-    Telemetry stays enabled regardless — this only informs the user.
+    Telemetry stays off regardless — this only tells the user the option exists.
     """
     if not _is_interactive():
         return

{sourcecode-3.2.1.dist-info → sourcecode-3.3.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 3.2.1
+Version: 3.3.0
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 License-File: LICENSE
 Keywords: agents,ai,codebase,context,developer-tools,llm
@@ -74,13 +74,17 @@ Cache keyed on content hashes — invalidated only when source changes. On repea
 At 0.3s per call, ASK Engine becomes **constant infrastructure** inside agent loops — call it before every edit, every PR review, every test run, without batching or caching manually.
 
 **What a warm actually covers.** `ask cache warm` runs the compact analysis: it rebuilds the
-shared structural layers (L1/L2 + the Repository Intelligence Snapshot) and the **compact
-view**. Pass `--agent` to warm the agent view as well. Deeper projections are separate view
-keys and are *not* covered by either — `--full`, `--env-map` and a raised `--depth` recompute
-on first use, as do most `prepare-context` tasks. Measured on a 3,342-file Spring monolith:
-`cache warm` 103s → `--compact --git-context` 1s (hit), but `--agent --full --env-map
---depth 20` still 171s (miss). Budget the deep run explicitly in CI, or warm exactly the view
-your pipeline consumes. Full model: [USER_GUIDE.md#caching](docs/USER_GUIDE.md#caching).
+shared structural layers (L1/L2 + the Repository Intelligence Snapshot + the shared Canonical
+IR) and the **compact view**. Pass `--agent` to warm the agent view as well. Deeper projections
+are separate keys and are *not* covered by either — `--full`, `--env-map` and a raised `--depth`
+recompute on first use, as do most `prepare-context` tasks. Measured on a 3,342-file Spring
+monolith: `cache warm` 103s → `--compact --git-context` 1s (hit), but `--agent --full --env-map
+--depth 20` still 171s (miss).
+
+**One rule for invalidation, and a table that names every command.** Every layer keys on the
+exact tree state: any change to the analysed files invalidates it, committed or not. Which of
+*your* commands a warm helps — the answer, only the shared work, or nothing — is published per
+command: `ask cache model`, or [docs/CACHE.md](docs/CACHE.md).
 
 ---
 
@@ -200,38 +204,58 @@ The everyday loop: diff-based PR review, symptom-driven bug triage, and delta co
 → [reference](docs/USER_GUIDE.md#typical-workflows)
 
 ### 7 · Utilities
-`ask rename-class` (word-boundary Java rename) · `ask chunk-file` (split large files for agents) · `ask cache` (status / warm / clear / freshness)
+`ask rename-class` (word-boundary Java rename) · `ask chunk-file` (split large files for agents) · `ask cache` (status / warm / model / clear / freshness)
 → [reference](docs/USER_GUIDE.md)
 
 ---
 
+## Command tiers
+
+A tier says **what an output is worth relying on** — it is a stability promise, not a value
+ranking, and not the [pricing tier](docs/PRODUCT_TIERS.md) (Free/Pro gates repository size,
+never capability). `posture` is the most differentiated command in the product *and* it is
+experimental: both are true, and they are two different facts.
+
+| Tier | Promise | Commands |
+|---|---|---|
+| **core** | contract stable within a major — safe to gate CI on | `endpoints` · `spring-audit` · `migrate-check` · `impact` · `impact-chain` · `pr-impact` · `verify` |
+| **supported** | maintained; fields are added, never removed without a major | every command not named in another row |
+| **experimental** | shape may change in a minor — do not gate CI on it | `posture` · `archetype` · `retrieve` |
+| **parked** | kept working, no longer developed | none today |
+
+The same table is printed by `ask --help`, and both are generated from one authority
+(`cli.COMMAND_TIERS`) — the battery fails if a command is in no tier, or if this file drifts
+from it.
+
+---
+
 ## Every command, in one table
 
 *`ask --help` shows a short header; this is the full surface. If you only read one row, read
 `posture`.*
 
-| Command | Answers | Note |
-|---|---|---|
-| `posture` | which beans a profile set wires, and how effective endpoint access differs between two sets | **experimental**, most differentiated |
-| `endpoints` | every REST endpoint, effective path, security policy, confidence | Spring MVC + JAX-RS (~65 % recall on JAX-RS sub-resource locators) |
-| `spring-audit` | transactional anomalies + security surface + validation gaps | `--ci`, `-f github-comment` |
-| `migrate-check` | Boot 2→3 readiness: located blockers, per-dimension score, effort | `--blast-radius` orders the re-test plan |
-| `impact` / `impact-chain` | blast radius of a change, to the endpoints it reaches | target the **interface**, not the `Impl` |
-| `pr-impact` | the same, scoped to a PR diff | gating command: `--fail-on`, exit codes |
-| `verify` | does the repo satisfy its declared contracts, **relative to a baseline** | `.ask/contracts.yml`; exit 0/1/2 |
-| `verify-edit` | did the working-tree edits change runtime behaviour | semantic diff gate for the edit loop |
-| `--compact` / `--agent` | bounded structural context for an agent | `--compact` is the token-cheap one |
-| `onboard` / `explain` / `cold-start` | orientation in an unfamiliar repo; per-class summary; bootstrap snapshot | |
-| `export` / `repo-ir` / `schema` | tool-agnostic views (C4, module graph, integrations); symbol-level IR; published JSON Schemas | |
-| `modernize` | coupling hubs, cycles, dead zones, refactor candidates | |
-| `review-pr` / `fix-bug` / `prepare-context` | diff review, symptom triage, task-shaped context | |
-| `plan` / `compare` / `delta` / `contract-diff` | what to review for a change; candidates by measured cost; outcome of a change; public-contract break | no verdicts, measured cost only |
-| `validation` | request-body validation coverage and gaps | |
-| `baseline capture\|diff\|trend` | versioned architectural metrics over time | trend reporting, not gating |
-| `retrieve` | typed knowledge queries over the model | **experimental** |
-| `archetype` | evidence-based architectural archetype | **experimental** |
-| `rename-class` / `chunk-file` | word-boundary Java rename; split a large file for an agent | |
-| `cache status\|warm\|clear` · `auth` · `telemetry` · `mcp` · `config` · `version` | housekeeping | |
+| Command | Tier | Answers | Note |
+|---|---|---|---|
+| `posture` | experimental | which beans a profile set wires, and how effective endpoint access differs between two sets | the most differentiated capability here |
+| `endpoints` | core | every REST endpoint, effective path, security policy, confidence | Spring MVC + JAX-RS (~65 % recall on JAX-RS sub-resource locators) |
+| `spring-audit` | core | transactional anomalies + security surface + validation gaps | `--ci`, `-f github-comment` |
+| `migrate-check` | core | Boot 2→3 readiness: located blockers, per-dimension score, effort | `--blast-radius` orders the re-test plan |
+| `impact` / `impact-chain` | core | blast radius of a change, to the endpoints it reaches | target the **interface**, not the `Impl` |
+| `pr-impact` | core | the same, scoped to a PR diff | gating command: `--fail-on`, exit codes |
+| `verify` | core | does the repo satisfy its declared contracts, **relative to a baseline** | `.ask/contracts.yml`; exit 0/1/2 |
+| `verify-edit` | supported | did the working-tree edits change runtime behaviour | semantic diff gate for the edit loop |
+| `--compact` / `--agent` | — | bounded structural context for an agent | flags of the root command, not commands: not tiered |
+| `onboard` / `explain` / `cold-start` | supported | orientation in an unfamiliar repo; per-class summary; bootstrap snapshot | |
+| `export` / `repo-ir` / `schema` | supported | tool-agnostic views (C4, module graph, integrations); symbol-level IR; published JSON Schemas | |
+| `modernize` | supported | coupling hubs, cycles, dead zones, refactor candidates | |
+| `review-pr` / `fix-bug` / `prepare-context` | supported | diff review, symptom triage, task-shaped context | |
+| `plan` / `compare` / `delta` / `contract-diff` | supported | what to review for a change; candidates by measured cost; outcome of a change; public-contract break | no verdicts, measured cost only |
+| `validation` | supported | request-body validation coverage and gaps | |
+| `baseline capture\|diff\|trend` | supported | versioned architectural metrics over time | trend reporting, not gating |
+| `retrieve` | experimental | typed knowledge queries over the model | |
+| `archetype` | experimental | evidence-based architectural archetype | |
+| `rename-class` / `chunk-file` | supported | word-boundary Java rename; split a large file for an agent | |
+| `cache status\|warm\|model\|clear` · `auth` · `telemetry` · `mcp` · `config` · `version` | supported | housekeeping | `activate` too |
 
 ---
 
@@ -287,18 +311,18 @@ Full breakdown: [docs/PRODUCT_TIERS.md](docs/PRODUCT_TIERS.md).
 
 ```bash
 ask config              # version, config file path, telemetry status
-ask telemetry disable   # anonymous telemetry is on by default (opt-out)
+ask telemetry enable    # anonymous telemetry is OFF by default (opt-in)
 ```
 
-Telemetry collects version, OS, commands, flags, duration, repo-size range, and errors —
-**no source code, paths, secrets, or output**. Disable any time with
-`export SOURCECODE_TELEMETRY=0` (or `DO_NOT_TRACK=1`). It defaults to **off in CI**.
+**Nothing is collected or transmitted unless you turn telemetry on** — not on the first run,
+not in CI. If you do opt in, it collects version, OS, commands, flags, duration, repo-size
+range, and errors: **no source code, paths, secrets, or output**. Turn it off again with
+`ask telemetry disable`, `export SOURCECODE_TELEMETRY=0`, or `DO_NOT_TRACK=1`.
 
-> **Auditing someone else's code — regulated, client-owned or public-sector?** Turn it off
-> *before* the first run, not after: `SOURCECODE_TELEMETRY=0 ask …`, or `ask telemetry disable`
-> once (remembered). The default is opt-out today; **moving it to opt-in is on the roadmap**
-> (`docs/DEFECT-LEDGER.md` P-1) precisely because a default you must remember to disable is the
-> wrong default for third-party code.
+> **Auditing someone else's code — regulated, client-owned or public-sector?** Nothing to do.
+> Telemetry was opt-out until 3.3.0; it is opt-in now (`docs/DEFECT-LEDGER.md` P-1), because a
+> default you must remember to disable is the wrong default for third-party code. An explicit
+> choice you made before is unchanged.
 
 **Custom security annotations.** Teach `endpoints`, `spring-audit`, and `explain` about
 project-specific authorization annotations via an optional `sourcecode.config.json` at the

{sourcecode-3.2.1.dist-info → sourcecode-3.3.0.dist-info}/RECORD

@@ -1,4 +1,4 @@
-sourcecode/__init__.py,sha256=6x6sVPhgem27mPs9kjwcPvWQE6fXXRuvsi6L96JWOFM,308
+sourcecode/__init__.py,sha256=9RKwt2uA8CQnRB8LqY0DRISYNXIrngyDDSP38-y1QgU,308
 sourcecode/adaptive_scanner.py,sha256=yJBKjNpkY6bpueYJ2YnRezen3sYZDecEt7WaaNWdqug,9466
 sourcecode/archetype.py,sha256=qWMCyL2UzSGXJhCIZj38JjS7wI15EE3eILsWiaoCZXQ,35779
 sourcecode/architectural_baseline.py,sha256=7QzJri4pbL3nzAn9gNutZW6mZR8HHD6H2C2H1EEwYPE,17904
@@ -6,7 +6,8 @@ sourcecode/architectural_delta.py,sha256=E6MkyjWl-1ZgR4KSKnI785gUAfc8nq-lK-jd_ru
 sourcecode/architecture_analyzer.py,sha256=GFc4ek-s1IHWM7pl-0L32WahZ93AmDgrAMcOuBKA5Dk,61463
 sourcecode/architecture_summary.py,sha256=BVVRHd952cjRhjHnR6CPrvKgaa-tdM16l-pBi1yDCPs,32395
 sourcecode/ast_extractor.py,sha256=ZwHN3Y0iRp2gpv3t5Nm5uvX7Xw1KtULCJPZqKpZQRAE,51255
-sourcecode/cache.py,sha256=hv5GTk-RktbediFMgNUMcd4R7NuEg5BOaAzj5ZEoD18,33739
+sourcecode/cache.py,sha256=2zh87pMJ8WJ-ZNNlzogFv6v5lsxqyOUS7XRGoH9xRDc,38095
+sourcecode/cache_model.py,sha256=A29lG7s0WpL1z0A3wZ6oGxwllJbbG0SBpgaSQ_kCmP0,14695
 sourcecode/call_surface.py,sha256=fiqYfHooxN1fX9oQoysq1LS3LoZcobhyUNjAGEZKpwk,4148
 sourcecode/caller_metrics.py,sha256=7xJDoar5RHOgDTvaZhML1V5JERJDFc4DA-y_WPKfJCw,3842
 sourcecode/canonical_ir.py,sha256=LdP_Ri3rl0M5p-MY0ypVvQwhq1WuUF1FmaHid7zyzEg,29807
@@ -14,12 +15,12 @@ sourcecode/chain_rules.py,sha256=Bi6UHfgd-GxWswmnHRcPz5jdbAuqka3Zkz_P-MTvqhw,127
 sourcecode/change_plan.py,sha256=MNgNyu4zrLGvBBaXPwyCh-T2ZGaUQX3Hm4W87uuhZ3w,7750
 sourcecode/cir_graphs.py,sha256=9G0HHj1kw2325IDyzo2OpX73BNswEckecf4MZUXB4JM,12078
 sourcecode/classifier.py,sha256=JBzPwSSrDG-tUHAbcKB678HRbjLpD-ohzbzzO62mgpo,20114
-sourcecode/cli.py,sha256=zkgwPCE88xAX5lZaBtNvN-pGYDvU_FzUkOGCuehioIY,403029
+sourcecode/cli.py,sha256=U3Qcs1XcFo6nOeZpG3khVmz-4XHcb-7K1DZN2R4hupM,411709
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
 sourcecode/compare.py,sha256=jdePg0dNCxFpysiTGMsROL5XABLjy_zVUgVeySvdb0o,7514
 sourcecode/confidence_analyzer.py,sha256=_nvtwO6RM3k0JMuH5m7DsBxOD0PdxGFS4Bb1fTQ536E,21946
 sourcecode/constraint_diff.py,sha256=hWIO5vsxvHjsgQx23K3r_JMy1W6wQ2Ca4DqB9R_iMnY,5831
-sourcecode/context_cache.py,sha256=WwN07VUylo8sRyWIgK7qp1D6uK4ZrR4EkPnyENFKwyU,27101
+sourcecode/context_cache.py,sha256=VCH-u6wPrTv6fz5uGqqwsLaVEUKVyZZSOhkb0BmZ6cA,26297
 sourcecode/context_graph.py,sha256=i2kOX3XiaCqcR20ojbUnqoX-hJbMyLNYc7rl-n15bwE,46426
 sourcecode/context_scorer.py,sha256=QpChSpsmaAYz91rXA4Ue5xzQmNz_ZboZN09YOHScq1U,14679
 sourcecode/context_summarizer.py,sha256=cI2TZMvEhl0BEma12VtPaX6z03ZVBAetVzuK5GaCOvg,6852
@@ -50,7 +51,7 @@ sourcecode/graph_evidence.py,sha256=rENNsYRZeNstX_ExNCLlbHJAruFQwxo5d00x6wO3xwI,
 sourcecode/hibernate_strat.py,sha256=5GmHiB865HxKdvaxeFV07ojglUgxyOP41AY2xiHfV30,61700
 sourcecode/integration_coordinates.py,sha256=7vGFxN4tCn_KTisYFJuixa8XkyHBoasEFB3fqM62OBI,7407
 sourcecode/jdk_exports.py,sha256=fCrlwNAXUT9gge_joq6kMnY3zJxYB2pxqy-0w3o3MJI,874
-sourcecode/license.py,sha256=keFuwNxdAtvK2Ds91Wl79GMYxuxWYnN5Wbw1qBpaoUI,24896
+sourcecode/license.py,sha256=vvgE1vBUWh8ozWI7USYuteh6noxntnjuzDQIPF-l4rA,27795
 sourcecode/mcp_nudge.py,sha256=lKemOqK_wny2u7Ymcr2Idi5Kx8pXY02jCi-_nJYLGMg,2992
 sourcecode/metrics_analyzer.py,sha256=gLoRWKygF18jLgwsqmGXSWopw-f5iO1VbM7Jjdif6ag,22809
 sourcecode/migrate_check.py,sha256=TJvaShbglENOr8ikvCodnlXQy54TtT05N2ZVe02b3lc,110421
@@ -63,7 +64,7 @@ sourcecode/perf.py,sha256=GAcEoouPIlPMCQIcHNToxK6K3WdIR-lj9aFg4prOYJI,9743
 sourcecode/posture.py,sha256=9xM0iZWAPfA5qBP06xxjbwAQq3WzXEYLHftdjwXjsL0,36483
 sourcecode/pr_comment_renderer.py,sha256=KmcjMruhR44gjzMDJwjBSkWP9QEvh8xWBLyxzxoRbj0,14542
 sourcecode/pr_impact.py,sha256=eaFgcPMDsjaF8VZvcitFWCPCabMTi-khtGdxpK0wXTQ,22461
-sourcecode/prepare_context.py,sha256=cof5MFCPpbg4YWEghQWbMk3h6Egr7Ntiy2A4dAfkrgc,231349
+sourcecode/prepare_context.py,sha256=DXU5ZtM5MY5AxC0897DlRgSifw3ux-obDA1SL0aKkrs,231503
 sourcecode/progress.py,sha256=qn30sWaHOkjTgXsSBmiPkz7Rsbwc5oSlIe6JNEMYp_k,3149
 sourcecode/ranking_engine.py,sha256=ZAucq_YX2KkWUuAZf4P0lhtQ_38vEFnUhuGtSZd1S0E,12970
 sourcecode/readiness_timeline.py,sha256=T5NKLuRHS83lPslE2kMs_RSVENd8jZJ11N1c9gpkpH8,7244
@@ -74,7 +75,7 @@ sourcecode/relevance_scorer.py,sha256=0AgEt4KrV73nioMqBgjhGjtY7L2C7L7cSyKtj3IKcr
 sourcecode/rename_refactor.py,sha256=h6dNFlB9aZ_3q6heeHBkgXQeXaT03nvPSsYH6P8qxFg,12965
 sourcecode/repo_classifier.py,sha256=FG1vaWKdWXsWdl-S8hjVMiTqcwgaRXkDyvK4rPcOGtQ,22681
 sourcecode/repository_ir.py,sha256=2S14aUMY5vpZePObd3F87kz71KUsVXQllurXjufa6A0,344648
-sourcecode/ris.py,sha256=Hw8TakTQ6hku-Abf2k8954NwkrH_sP73_8wVH8x5khc,22079
+sourcecode/ris.py,sha256=A5fzx0s1qeDkVhf_rs2Kn78imXs4Xir9gLgMRdMT8nQ,23273
 sourcecode/runtime_classifier.py,sha256=uTAD6BDCiBLUZEDRfqk718kM4RTT_vAbfkcOI2_Xx58,18432
 sourcecode/scanner.py,sha256=z3CV0rcGunu0Y8mpNgp07wI7nxT0pxw1BkXRRtI0Rpo,9609
 sourcecode/schema.py,sha256=aHNXDf8LGyUC8ZDE_VS9kiskC2-Oswhi_WnpdGy6HDw,24897
@@ -133,7 +134,7 @@ sourcecode/mcp/__init__.py,sha256=XU4HfRGbdid8wdUA0x_4f7uKZD1z3mv_XUY_WU_T9Mw,17
 sourcecode/mcp/orchestrator.py,sha256=diVoQgn24QmgPL3Ev8Sp6hsvh02OqY3MktHXOzrlodo,36525
 sourcecode/mcp/registry.py,sha256=ZaezKqEbRtPto8aBHpP9XsnSkQ-u4fMtDxhwkgl-iuc,68418
 sourcecode/mcp/runner.py,sha256=RGimCwhLyHxjCvH7q72y12HWEnATXZLC-NBWhkzlu0I,2852
-sourcecode/mcp/server.py,sha256=aYCiQj7NiiDpr3rvZAwPeMvNPJf02X4MFxgB-pMkFGg,65514
+sourcecode/mcp/server.py,sha256=EX6TJCGBK0zPOhtArXAVuVhi2o_whbA8jw0CyC7SkVw,65508
 sourcecode/mcp/onboarding/__init__.py,sha256=sj2PWqEBmMc4zBNkomg89WtL0M6S7A9yb7_wAuSWNP4,66
 sourcecode/mcp/onboarding/applier.py,sha256=Sx9vHTaXr_M1Bs4uMjO7qa_a2_p4J9oz93oJsKQ7ds4,3298
 sourcecode/mcp/onboarding/backup.py,sha256=ihqGOR8QTX8HASRSEDyfFyXr5bkXrygPHamv4p9KTmk,1452
@@ -158,14 +159,14 @@ sourcecode/retrieval/steps_intf.py,sha256=BIopGUhxwutV51r8-1bTCC_VTYENJiHbREF13p
 sourcecode/retrieval/steps_struct.py,sha256=jO9L49hziTlS_xhuhCGUavgyAL3ZAnJSOZB-UA4GaRM,13893
 sourcecode/retrieval/steps_txsec.py,sha256=LKRzALzRw_0aQ3_tpbd34mt8u7o690g5tCnp871j7P4,17804
 sourcecode/schemas/envelope-v1.schema.json,sha256=lABkyKqXND039JUY2R6KK47OCDco5mq5PLgkcCXFhOQ,3477
-sourcecode/telemetry/__init__.py,sha256=a-cy2Gypx9fzJfBHK-e3hstYi6FLNlUj-k62yWyugMY,3461
-sourcecode/telemetry/config.py,sha256=u_zctgmA1pVT3Ai5jm-pdLY_5kJTRg4Xq2bvIbGBQE4,3727
-sourcecode/telemetry/consent.py,sha256=GuhCiA_x2n3LwGBkZnvyIwtFcf5Zwa8O0DdLqkATIr0,2220
+sourcecode/telemetry/__init__.py,sha256=ZxV5AJAK5_pk0RnW0B1ntpGPRapOX_XKFJdT_6RuYhE,3502
+sourcecode/telemetry/config.py,sha256=HD5ccO_k91WxDsnMo1lmxaF906bK3nrLv8qzUR3HbTo,4212
+sourcecode/telemetry/consent.py,sha256=pQdl-QeLl6Gcibn0eWHSKZrm-HYSsjpVqOnjrgFp8co,2472
 sourcecode/telemetry/events.py,sha256=4_yeO58U-Cwc1Qb27VB0_EjhmroY0k91n3_VGxeALB8,2776
 sourcecode/telemetry/filters.py,sha256=RzxauTz8HliO4BllQnXEXc7zTeqdCZi5MgqGEDuW7OQ,6570
 sourcecode/telemetry/transport.py,sha256=4gGHsq0WeY9VywEZXA3vUxykfiYnw9uuqfjAAec7F8o,1681
-sourcecode-3.2.1.dist-info/METADATA,sha256=fbRYK-M6OyhP2q9iWNDm-g0gHclD80KBOE5LWKfYboE,17855
-sourcecode-3.2.1.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-3.2.1.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
-sourcecode-3.2.1.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
-sourcecode-3.2.1.dist-info/RECORD,,
+sourcecode-3.3.0.dist-info/METADATA,sha256=-QNzeVGjrT6BamRBDHef_8YUe7F6CtJzScZvbswMex0,19406
+sourcecode-3.3.0.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-3.3.0.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
+sourcecode-3.3.0.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
+sourcecode-3.3.0.dist-info/RECORD,,