sourcecode 4.10.0__py3-none-any.whl → 4.10.2__py3-none-any.whl

sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "4.10.0"
+__version__ = "4.10.2"

sourcecode/migrate_check.py

@@ -3008,6 +3008,7 @@ def run_migrate_check(
             "target_jdk": target_jdk,
             "keep_boot": keep_boot,
         },
+        include_generated_at=False,
     )
     return report
 

sourcecode/provenance.py

@@ -162,6 +162,7 @@ def build_evidence_manifest(
     command: str,
     root: Path,
     inputs: Optional[dict[str, Any]] = None,
+    include_generated_at: bool = True,
 ) -> dict[str, Any]:
     """Build a machine-readable provenance index for an existing payload."""
     root = Path(root).resolve()
@@ -173,17 +174,19 @@ def build_evidence_manifest(
         for claim in claims
         if (claim.get("source") or {}).get("path")
     })
+    run: dict[str, Any] = {
+        "command": command,
+        "tool": "ask",
+        "tool_version": __version__,
+        "repository": str(root),
+        "git_head": _git_head(root),
+        "inputs": inputs or {},
+    }
+    if include_generated_at:
+        run["generated_at"] = datetime.now(timezone.utc).isoformat()
     return {
         "schema_version": PROVENANCE_SCHEMA,
-        "run": {
-            "command": command,
-            "tool": "ask",
-            "tool_version": __version__,
-            "repository": str(root),
-            "git_head": _git_head(root),
-            "generated_at": datetime.now(timezone.utc).isoformat(),
-            "inputs": inputs or {},
-        },
+        "run": run,
         "claims": claims,
         "sources": [{"path": path} for path in sources],
         "claims_cap": (

sourcecode/repository_ir.py

@@ -6975,6 +6975,27 @@ def compute_blast_radius(
         )
     except Exception:
         _impl_graph = None
+    if _impl_graph is not None:
+        _class_fqns = {
+            n.get("fqn") or ""
+            for n in graph_nodes
+            if (n.get("symbol_kind") or n.get("type"))
+            in {"class", "interface", "enum", "record", "annotation"}
+        }
+
+        def _seed_class(_sym: str) -> str:
+            return _sym if _sym in _class_fqns else _enclosing_class(_sym)
+
+        _seed_set = set(matched_fqns)
+        _expanded = set(matched_fqns)
+        _symbols_by_class: dict[str, list[str]] = {}
+        for _sym in reverse_graph:
+            _symbols_by_class.setdefault(_seed_class(_sym), []).append(_sym)
+        for _seed in sorted(_seed_set):
+            for _subtype in getattr(_impl_graph, "all_subtypes_of")(_seed_class(_seed)):
+                for _sym in _symbols_by_class.get(_subtype, ()):
+                    _expanded.add(_sym)
+        matched_fqns = _expanded
     for seed in matched_fqns:
         _seed_callers = _all_callers_from_rg(seed, reverse_graph, _rg_index, _impl_graph)
         if len(_seed_callers) > _HUB_CALLER_THRESHOLD and max_depth > 1:

sourcecode/runs.py

@@ -2,6 +2,7 @@
 from __future__ import annotations
 
 import json
+import hashlib
 import os
 import time
 import uuid
@@ -18,7 +19,17 @@ def _now() -> float:
 
 
 def _runs_dir(root: Path) -> Path:
-    return Path(root).resolve() / ".ask" / "runs"
+    override = os.environ.get("ASK_RUNS_DIR", "").strip()
+    if override:
+        return Path(override).expanduser().resolve()
+    if os.environ.get("ASK_RUNS_IN_REPO", "").lower() in ("1", "true", "yes", "on"):
+        return Path(root).resolve() / ".ask" / "runs"
+    try:
+        key_source = str(Path(root).resolve())
+    except Exception:
+        key_source = str(Path(root).absolute())
+    repo_key = hashlib.sha256(key_source.encode("utf-8", errors="replace")).hexdigest()[:16]
+    return Path.home() / ".sourcecode" / "runs" / repo_key
 
 
 @dataclass

sourcecode/security_config_scan.py

@@ -212,6 +212,15 @@ _COMMENTED_CONFIG_CONTROLS: tuple[tuple[re.Pattern, str, str], ...] = (
     ),
 )
 
+_COMMENTED_JAVA_HINTS = (
+    "@PreAuthorize", "@PostAuthorize", "@Secured", "@RolesAllowed", "@DenyAll",
+    "@PermitAll", "FiltroSeguridad", "Security", "Authz", "Authorize",
+    "Authorized", "setSecure", "csrfTokenRepository", "csrf(",
+)
+_COMMENTED_XML_HINTS = (
+    "<transport-guarantee", "CONFIDENTIAL", "<security-constraint", "<intercept-url",
+)
+
 
 @dataclass(frozen=True)
 class SecurityConfigObservation:
@@ -456,6 +465,9 @@ def _scan_commented_controls(
     from sourcecode.source_text import commented_spans
 
     rules = _COMMENTED_XML_CONTROLS if xml else _COMMENTED_JAVA_CONTROLS
+    hints = _COMMENTED_XML_HINTS if xml else _COMMENTED_JAVA_HINTS
+    if not any(hint in source for hint in hints):
+        return []
     out: "list[SecurityConfigObservation]" = []
     seen: set[tuple[str, int]] = set()
     for start, end in commented_spans(source, xml=xml):

{sourcecode-4.10.0.dist-info → sourcecode-4.10.2.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 4.10.0
+Version: 4.10.2
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 License-File: LICENSE
 Keywords: agents,ai,codebase,context,developer-tools,llm
@@ -42,7 +42,7 @@ Description-Content-Type: text/markdown
 
 **Context · Impact · Migration · Architecture · Review — everything from one structural model.**
 
-![Version](https://img.shields.io/badge/version-4.10.0-blue)
+![Version](https://img.shields.io/badge/version-4.10.2-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
 > **ASK Engine** is the product. The CLI command is **`ask`**. The legacy **`sourcecode`**
@@ -73,7 +73,14 @@ These numbers are cache-layer benchmarks, not a promise for every command. Per-s
 
 With the right command class, ASK Engine becomes **constant infrastructure** inside agent loops — call the fast/context surfaces before edits and reserve deep compositions for the points where their evidence is worth the runtime.
 
-**Large-repo controls.** Set `ASK_PROGRESS=1` to get line heartbeats in non-TTY supervised runs. Set `ASK_MAX_ANALYSIS_SECONDS=<seconds>` to fail before starting a repo-wide/deep command whose configured budget is below its safe floor. Use `ask audit-report --from-risk risk.json` to package an existing risk run instead of recomputing it.
+**Large-repo controls.** Set `ASK_PROGRESS=1` to get line heartbeats in non-TTY
+supervised runs. Long repo-wide/deep runs also write durable records under
+`~/.sourcecode/runs/<repo-hash>/` by default, not inside the audited repository;
+set `ASK_RUNS_IN_REPO=1` only when repo-local `.ask/runs` records are intentional.
+Set `ASK_MAX_ANALYSIS_SECONDS=<seconds>` to fail before starting a repo-wide/deep
+command whose configured budget is below its safe floor. Use
+`ask audit-report --from-risk risk.json` to package an existing risk run instead
+of recomputing it.
 
 **What a warm actually covers.** `ask cache warm` runs the compact analysis: it rebuilds the
 shared structural layers (L1/L2 + the Repository Intelligence Snapshot + the shared Canonical
@@ -99,7 +106,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 4.10.0 — and, on a build that has aged,
+ask version                    # ask 4.10.2 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 

{sourcecode-4.10.0.dist-info → sourcecode-4.10.2.dist-info}/RECORD

@@ -1,4 +1,4 @@
-sourcecode/__init__.py,sha256=MFedfFJXLCVqucQyx5Jqlt-xSDcJri6POgd64ozxHY4,309
+sourcecode/__init__.py,sha256=xskHY5rRjTUnc0g0owXUqwzO6Eu4fz6BniL2gUx5fz0,309
 sourcecode/adaptive_scanner.py,sha256=yJBKjNpkY6bpueYJ2YnRezen3sYZDecEt7WaaNWdqug,9466
 sourcecode/archetype.py,sha256=CZvRLpkHot_D8D3JFQVorr-EHDJyh0BbS7RnSTqBigM,40499
 sourcecode/architectural_baseline.py,sha256=agDSwGEakdkgLLh5xnd3hiD_TC6pRujWt4klnuYF1wo,18689
@@ -66,7 +66,7 @@ sourcecode/jdk_exports.py,sha256=fCrlwNAXUT9gge_joq6kMnY3zJxYB2pxqy-0w3o3MJI,874
 sourcecode/license.py,sha256=vvgE1vBUWh8ozWI7USYuteh6noxntnjuzDQIPF-l4rA,27795
 sourcecode/mcp_nudge.py,sha256=lKemOqK_wny2u7Ymcr2Idi5Kx8pXY02jCi-_nJYLGMg,2992
 sourcecode/metrics_analyzer.py,sha256=gLoRWKygF18jLgwsqmGXSWopw-f5iO1VbM7Jjdif6ag,22809
-sourcecode/migrate_check.py,sha256=1X3iMVhy4PRAryrrYoX1-8sUOpDyZWQkLRdGZRO2_Qk,148992
+sourcecode/migrate_check.py,sha256=8KKgsiiWu21XwCXgFV1bB8AVsB-pl6KNBTmMW6NYGB8,149028
 sourcecode/migration_blast.py,sha256=OPryWkM6-PbvcG3eJFdcWUnlpXBje41nu2BkrZnE2hg,9359
 sourcecode/non_coverage.py,sha256=N4pLd0zKOEdkObzMz3TSMTCDRmV0dwqZtXWFFPR9gSo,12001
 sourcecode/openapi_surface.py,sha256=BTt0K-woZbkbWTN77IkqeBm_Okag9owR0848fmot8sk,16207
@@ -82,7 +82,7 @@ sourcecode/pr_comment_renderer.py,sha256=239PmJdf95av_ZW236C7_tvq_ahECeuF9AZxrhe
 sourcecode/pr_impact.py,sha256=eaFgcPMDsjaF8VZvcitFWCPCabMTi-khtGdxpK0wXTQ,22461
 sourcecode/prepare_context.py,sha256=B8TiBQbazxUOz6D37Dt9zqbOtD5b2S_fR3MB15P9DrI,237206
 sourcecode/progress.py,sha256=hbOPMSNMfoHYS-BL1HAH0VAQFR4u3TzWq0oJdeAPdjM,3921
-sourcecode/provenance.py,sha256=nAkzUQ6OzvHanhA4PCTRuBgyhrlaJXdN71YjQdcguDE,6590
+sourcecode/provenance.py,sha256=1_EGgBtJA3f8dOA_XKuENr0mQLnIJw87lXWdlkgFgqY,6661
 sourcecode/ranking_engine.py,sha256=ZAucq_YX2KkWUuAZf4P0lhtQ_38vEFnUhuGtSZd1S0E,12970
 sourcecode/readiness_timeline.py,sha256=qqc14vL9nj9E4qw4bVZpGhfMLaVaYr9s6Pak_VUIwt0,8008
 sourcecode/reconciliation.py,sha256=GU-1PTcVr8zcbtC7BASfpHcZndP9AdboXPNQiBc0fzo,34251
@@ -93,17 +93,17 @@ sourcecode/relevance_scorer.py,sha256=0AgEt4KrV73nioMqBgjhGjtY7L2C7L7cSyKtj3IKcr
 sourcecode/remedies.py,sha256=8lgvKkW1WuBG-QfTnA0uBhEKnwWGSvgSMWCfTjzYhEY,6516
 sourcecode/rename_refactor.py,sha256=h6dNFlB9aZ_3q6heeHBkgXQeXaT03nvPSsYH6P8qxFg,12965
 sourcecode/repo_classifier.py,sha256=FG1vaWKdWXsWdl-S8hjVMiTqcwgaRXkDyvK4rPcOGtQ,22681
-sourcecode/repository_ir.py,sha256=yrQd8yB9NO0M2SLkI0bQ5ty1RjTldQOhVbr3IoNkXJk,357437
+sourcecode/repository_ir.py,sha256=UdA13zDUvhgZvdUt8BIbfHOXi40OkdvqtpMJG7hYkms,358320
 sourcecode/ris.py,sha256=SjjDNMcc9Zr9us9G8ikBVkoPXKK3BpM-dBodSGMh_g4,24783
 sourcecode/risk.py,sha256=UgTVdMc8XBArO6D9e2Xx9I-kKqx-PW4W0hSe1Jy9qjU,54491
 sourcecode/rule_catalog.py,sha256=xmphuULUCtg_GWTbriwY25D-N2IaeMXXvB5CNU1xSuA,4925
-sourcecode/runs.py,sha256=Oq3vm0_KJGyYUe6Oi8H0DsTNXuWvHQ8tKZjET5i-f0E,4251
+sourcecode/runs.py,sha256=K1G7WjSLACZFNklRupFiHjmF5SJYtoo1OWjA0h8-q7Y,4761
 sourcecode/runtime_classifier.py,sha256=uTAD6BDCiBLUZEDRfqk718kM4RTT_vAbfkcOI2_Xx58,18432
 sourcecode/sarif.py,sha256=3hQEegUxIZbojFdY59oB-yKsK-rnafHdTNmYsEP2--A,25984
 sourcecode/scanner.py,sha256=z3CV0rcGunu0Y8mpNgp07wI7nxT0pxw1BkXRRtI0Rpo,9609
 sourcecode/schema.py,sha256=aHNXDf8LGyUC8ZDE_VS9kiskC2-Oswhi_WnpdGy6HDw,24897
 sourcecode/security_config.py,sha256=KblMEoRiEjrIE68YsPaUAFebxFp8UM7MS7lAk5CGD8U,3531
-sourcecode/security_config_scan.py,sha256=HEzUOfJpHDnLslhtxnUcDPd3Ci_KCi-4JPTcD8mxjts,26079
+sourcecode/security_config_scan.py,sha256=aG2gqhPrjDpYwqML3Sqg-6_FtJWKmlyy9ceMBd4FHSo,26570
 sourcecode/security_posture.py,sha256=CjJ2Qm87HhKXepnaWx1ncJLW-SxI18udCmUDIkCyAsY,50270
 sourcecode/semantic_analyzer.py,sha256=bpgdC6m0_ftVtRf3rSdwhbhWjnZnGxRXaZVcfe4BbcQ,95414
 sourcecode/semantic_impact_engine.py,sha256=t09IirGC3JjQDy33JZd1_WKzQVKXkoNl3-XEUr5kjis,20563
@@ -193,8 +193,8 @@ sourcecode/telemetry/consent.py,sha256=pQdl-QeLl6Gcibn0eWHSKZrm-HYSsjpVqOnjrgFp8
 sourcecode/telemetry/events.py,sha256=4_yeO58U-Cwc1Qb27VB0_EjhmroY0k91n3_VGxeALB8,2776
 sourcecode/telemetry/filters.py,sha256=RzxauTz8HliO4BllQnXEXc7zTeqdCZi5MgqGEDuW7OQ,6570
 sourcecode/telemetry/transport.py,sha256=4gGHsq0WeY9VywEZXA3vUxykfiYnw9uuqfjAAec7F8o,1681
-sourcecode-4.10.0.dist-info/METADATA,sha256=tYoP9ow-Bpxs6ymxGGKiZW8aQEF5ZMuF25GsiiiKuXQ,36435
-sourcecode-4.10.0.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-4.10.0.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
-sourcecode-4.10.0.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
-sourcecode-4.10.0.dist-info/RECORD,,
+sourcecode-4.10.2.dist-info/METADATA,sha256=LpRICJiZXofZyp2RYC7EnsTKURHjIHQLvktzU_ABEzM,36657
+sourcecode-4.10.2.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-4.10.2.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
+sourcecode-4.10.2.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
+sourcecode-4.10.2.dist-info/RECORD,,