sourcecode 4.3.0__py3-none-any.whl → 4.5.0__py3-none-any.whl

sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "4.3.0"
+__version__ = "4.5.0"

sourcecode/cli.py

@@ -4885,6 +4885,12 @@ def endpoints_cmd(
         False, "--by-controller",
         help="Group endpoints by controller class (structured API surface for C4/Container synthesis).",
     ),
+    servlets: bool = typer.Option(
+        False, "--servlets",
+        help="Also list the HTTP surface mounted as a servlet — `web.xml` mappings "
+             "and ServletRegistrationBean registrations (NC-007). Published as a "
+             "population of its own; never merged into the endpoint count.",
+    ),
     client_usage: bool = typer.Option(
         False, "--client-usage",
         help="Join the routes against the HTTP calls written in the TypeScript/"
@@ -5001,6 +5007,14 @@ def endpoints_cmd(
     # exists to remove, one line into its own implementation (R5-R8).
     data["exposure"] = _endpoint_exposure_summary(_selected)
 
+    # CL-12 admission half. NC-007 declared this population in 4.2.0; this lists it,
+    # under its own name and its own total, because the two things counted are not the
+    # same kind of thing and `endpoints.total` is a published figure.
+    if servlets:
+        from sourcecode.servlet_surface import build_servlet_surface
+
+        data["servlet_surface"] = build_servlet_surface(target)
+
     # M10.5 item 4. On a large surface the cheapest reduction of exposure is
     # deleting API nobody calls, and in a monorepo the caller is checked in next
     # to the callee. Joined over the population the filters chose, for the same

sourcecode/envelope.py

@@ -201,3 +201,38 @@ def attach_meta(payload: "dict[str, Any]", meta: "dict[str, Any]") -> "dict[str,
     else:
         payload[_META_KEY] = dict(meta)
     return payload
+
+
+#: The specification document is *rendered* from the schema, never written beside it.
+#: Audit #8 called the envelope "el activo estratégico más subestimado del producto" and
+#: the asymmetry is the point: a format that makes `basis`, `limitations` and `unit`
+#: mandatory is one an incumbent cannot adopt without confessing. A spec that drifts from
+#: the implementation is worth nothing to the people asked to adopt it, so the document
+#: below is generated from the same JSON Schema `ask schema envelope-v1` prints, and the
+#: battery fails when the published copy no longer matches.
+SPEC_BEGIN = "<!-- BEGIN GENERATED: ask schema envelope-v1 -->"
+SPEC_END = "<!-- END GENERATED -->"
+
+
+def render_spec_markdown(name: str = "envelope-v1") -> str:
+    """The field table of a published schema, as Markdown."""
+    schema = load_schema(name)
+    required = set(schema.get("required", ()))
+    lines = [
+        f"**Schema id:** `{schema.get('$id', name)}`",
+        "",
+        schema.get("description", "").strip(),
+        "",
+        "| Field | Required | Type | Meaning |",
+        "|---|---|---|---|",
+    ]
+    for field, spec in schema.get("properties", {}).items():
+        kind = spec.get("type", "")
+        if isinstance(kind, list):
+            kind = " \\| ".join(kind)
+        meaning = " ".join(str(spec.get("description", "")).split())
+        lines.append(
+            f"| `{field}` | {'yes' if field in required else 'no'} | "
+            f"{kind or '—'} | {meaning} |"
+        )
+    return "\n".join(lines) + "\n"

sourcecode/non_coverage.py

@@ -172,11 +172,12 @@ NON_COVERAGE: tuple[NonCoverage, ...] = (
             "declared before it is widened."
         ),
         instead=(
-            "Read the deployment descriptors for `<servlet-mapping>` entries and "
-            "the Spring configuration for `ServletRegistrationBean` beans. Field "
-            "evaluation #9 found a monitoring console mounted this way, behind a "
-            "credential `ask spring-audit` did report (SEC-007) at a path nothing "
-            "here listed."
+            "`ask endpoints --servlets` lists that surface as a population of its "
+            "own — `<servlet-mapping>` entries and `ServletRegistrationBean` "
+            "registrations, with the declaring file — and never merges it into the "
+            "endpoint count. Field evaluation #9 found a monitoring console mounted "
+            "this way, behind a credential `ask spring-audit` did report (SEC-007) "
+            "at a path nothing here listed."
         ),
     ),
     NonCoverage(

sourcecode/path_filters.py

@@ -23,6 +23,14 @@ _TEST_MODULE_SEGMENTS = frozenset({
     "test-support", "testsupport",
 })
 
+#: `spec/` means a test suite in the RSpec/Jasmine sense — and it means the opposite
+#: under a documentation root, where a *specification* lives. Found in this repository:
+#: `docs/spec/envelope-v1.md`, the published output-format specification, was classified
+#: as a test file and counted in the test population of the tool's own metrics. The
+#: segment keeps its meaning everywhere else; only these parents disarm it.
+_DOC_ROOT_SEGMENTS = frozenset({"docs", "doc", "documentation"})
+_AMBIGUOUS_TEST_SEGMENTS = frozenset({"spec", "specs"})
+
 _VENDOR_SEGMENTS = frozenset({
     "vendor", "vendors",
     "third_party", "thirdparty",
@@ -73,10 +81,15 @@ def is_test_path(path: str) -> bool:
 
     # Segment-based check – any directory component is a test segment
     parts = norm.split("/")
+    seen: set[str] = set()
     for part in parts[:-1]:  # skip filename itself
         bare = part.rstrip("/")
+        if bare in _AMBIGUOUS_TEST_SEGMENTS and seen & _DOC_ROOT_SEGMENTS:
+            seen.add(bare)
+            continue  # a specification under `docs/`, not a spec suite
         if bare in _TEST_SEGMENTS:
             return True
+        seen.add(bare)
 
     # File-name conventions
     name = parts[-1]

sourcecode/remedies.py

@@ -97,6 +97,18 @@ REMEDIES: "dict[str, Remedy]" = {
             ),
             headline="derive contracts, write nothing",
         ),
+        Remedy(
+            key="http_surface_that_is_not_a_handler_mapping",
+            command="endpoints",
+            option="--servlets",
+            answers=(
+                "the endpoint population is Spring handler mappings; to list the HTTP "
+                "surface mounted as a servlet instead — `web.xml` mappings and "
+                "`ServletRegistrationBean` registrations — as its own population, never "
+                "merged into the endpoint count"
+            ),
+            headline="servlet-mounted HTTP surface",
+        ),
     )
 }
 

sourcecode/servlet_surface.py

@@ -0,0 +1,194 @@
+"""servlet_surface.py — HTTP surface that is not a Spring handler mapping.
+
+Field evaluation #9's second finding was a monitoring console mounted at
+`/panel-de-control` through a `<servlet-mapping>` in `web.xml`, behind a credential
+`spring-audit` did report (SEC-007) at a path **nothing in this product listed**. The
+endpoint population is projected from the Spring route model — one entry per handler
+mapping — and a servlet is reachable over HTTP without being in that model.
+
+`NC-007` (4.2.0) declared that gap. This module is its admission half, and the rule
+that shaped it is the reason the declaration came first: **this population is never
+merged into `endpoints.total`**. That count, and every ratio keyed on it, is published
+and read; widening it silently would move numbers a reader has already acted on, and
+the two things counted are not the same kind of thing — a Spring handler has a
+controller, a handler symbol and a security verdict derived from the filter chain; a
+servlet mapping has a URL pattern and a class name, and nothing here resolves what
+guards it.
+
+So the answer is a second, named population beside the first, with its own total.
+"""
+
+from __future__ import annotations
+
+import re
+from dataclasses import dataclass
+from pathlib import Path
+from typing import Optional
+from xml.etree import ElementTree as ET
+
+SCHEMA_VERSION = "servlet-surface-v1"
+
+_SKIP_DIRS = frozenset({".git", "target", "build", "out", "node_modules", "dist"})
+
+#: `new ServletRegistrationBean<>(new Foo(), "/path/*")` and the `addUrlMappings` form.
+_REGISTRATION_BEAN = re.compile(
+    r"""ServletRegistrationBean\s*(?:<[^>]*>)?\s*\(\s*(?P<args>[^;]{0,400}?)\)\s*;""",
+    re.DOTALL,
+)
+_URL_MAPPINGS = re.compile(
+    r"""(?:addUrlMappings|setUrlMappings)\s*\(\s*(?P<args>[^;]{0,300}?)\)""", re.DOTALL
+)
+_STRING_LITERAL = re.compile(r"""["']([^"']{1,200})["']""")
+
+
+@dataclass(frozen=True)
+class ServletMapping:
+    """One servlet reachable over HTTP, and where it was declared."""
+
+    url_pattern: str
+    servlet_name: str
+    servlet_class: str
+    source_file: str
+    source: str          # "web.xml" | "servlet_registration_bean"
+
+    def to_dict(self) -> dict:
+        return {
+            "url_pattern": self.url_pattern,
+            "servlet_name": self.servlet_name,
+            "servlet_class": self.servlet_class,
+            "source_file": self.source_file,
+            "source": self.source,
+        }
+
+
+def _local(tag: str) -> str:
+    return tag.rsplit("}", 1)[-1]
+
+
+def _child_text(elem: "ET.Element", name: str) -> str:
+    for child in elem.iter():
+        if _local(child.tag) == name and (child.text or "").strip():
+            return child.text.strip()
+    return ""
+
+
+def _from_web_xml(xml_path: Path, relative: str) -> "list[ServletMapping]":
+    try:
+        root = ET.parse(str(xml_path)).getroot()
+    except Exception:
+        return []
+    classes: "dict[str, str]" = {}
+    for elem in root.iter():
+        if _local(elem.tag) != "servlet":
+            continue
+        name = _child_text(elem, "servlet-name")
+        klass = _child_text(elem, "servlet-class")
+        if name:
+            classes[name] = klass
+    out: "list[ServletMapping]" = []
+    for elem in root.iter():
+        if _local(elem.tag) != "servlet-mapping":
+            continue
+        name = _child_text(elem, "servlet-name")
+        for child in elem.iter():
+            if _local(child.tag) != "url-pattern" or not (child.text or "").strip():
+                continue
+            out.append(ServletMapping(
+                url_pattern=child.text.strip(),
+                servlet_name=name,
+                servlet_class=classes.get(name, ""),
+                source_file=relative,
+                source="web.xml",
+            ))
+    return out
+
+
+def _from_registration_beans(java_path: Path, relative: str) -> "list[ServletMapping]":
+    try:
+        text = java_path.read_text(encoding="utf-8", errors="replace")
+    except OSError:
+        return []
+    if "ServletRegistrationBean" not in text:
+        return []
+    out: "list[ServletMapping]" = []
+    for match in _REGISTRATION_BEAN.finditer(text):
+        args = match.group("args")
+        literals = _STRING_LITERAL.findall(args)
+        patterns = [lit for lit in literals if lit.startswith("/")]
+        klass = ""
+        new_call = re.search(r"new\s+([A-Z][\w.]*)\s*\(", args)
+        if new_call:
+            klass = new_call.group(1)
+        for pattern in patterns:
+            out.append(ServletMapping(
+                url_pattern=pattern, servlet_name="", servlet_class=klass,
+                source_file=relative, source="servlet_registration_bean",
+            ))
+    for match in _URL_MAPPINGS.finditer(text):
+        for literal in _STRING_LITERAL.findall(match.group("args")):
+            if literal.startswith("/"):
+                out.append(ServletMapping(
+                    url_pattern=literal, servlet_name="", servlet_class="",
+                    source_file=relative, source="servlet_registration_bean",
+                ))
+    return out
+
+
+def build_servlet_surface(root: Path, *, limit: Optional[int] = None) -> dict:
+    """Every servlet-mapped URL pattern under `root`, as a population of its own."""
+    from sourcecode import non_coverage
+
+    root = Path(root)
+    mappings: "list[ServletMapping]" = []
+    for path in sorted(root.rglob("*")):
+        if any(part in _SKIP_DIRS for part in path.parts) or not path.is_file():
+            continue
+        try:
+            relative = str(path.relative_to(root))
+        except ValueError:
+            relative = str(path)
+        if path.name == "web.xml":
+            mappings.extend(_from_web_xml(path, relative))
+        elif path.suffix == ".java":
+            mappings.extend(_from_registration_beans(path, relative))
+
+    # One URL pattern declared twice is two declarations of one reachable path; the
+    # census counts patterns, the rows keep every declaration.
+    patterns = sorted({m.url_pattern for m in mappings})
+    by_source: "dict[str, int]" = {}
+    for mapping in mappings:
+        by_source[mapping.source] = by_source.get(mapping.source, 0) + 1
+
+    rows = [m.to_dict() for m in sorted(
+        mappings, key=lambda m: (m.url_pattern, m.source_file)
+    )]
+    shown = rows if limit is None else rows[:limit]
+
+    return {
+        "schema_version": SCHEMA_VERSION,
+        "total_url_patterns": len(patterns),
+        "declarations": len(mappings),
+        "by_source": dict(sorted(by_source.items())),
+        "url_patterns": patterns,
+        "mappings": shown,
+        "mappings_omitted": len(rows) - len(shown),
+        "population": (
+            "servlet mappings declared in `web.xml` or registered as a "
+            "`ServletRegistrationBean` — HTTP surface that is NOT a Spring handler "
+            "mapping and is therefore in none of the endpoint counts"
+        ),
+        "never_merged": (
+            "This total is deliberately separate from `endpoints.total`. The two count "
+            "different things — a handler mapping has a controller, a handler symbol "
+            "and a security verdict derived from the chain; a servlet mapping has a URL "
+            "pattern and a class — and merging them would move a published count and "
+            "every ratio keyed on it."
+        ),
+        "access": (
+            "Nothing here resolves what guards these patterns. A servlet is matched by "
+            "the same filter chain as everything else, so a filter pattern that covers "
+            "it may or may not authenticate it; `ask spring-audit` reports credentials "
+            "found in the same descriptors (SEC-007)."
+        ),
+        "non_coverage": non_coverage.block("endpoints"),
+    }

sourcecode/test_sources.py

@@ -52,6 +52,14 @@ _TEST_DIR_NAMES: frozenset[str] = frozenset(
     {"test", "tests", "spec", "specs", "__tests__"}
 )
 
+#: `spec/` is a test suite in the RSpec/Jasmine sense — and the opposite under a
+#: documentation root, where a *specification* lives. Found by this project's own suite
+#: when `docs/spec/envelope-v1.md` (the published output-format specification) landed in
+#: the test population of the tool's own metrics. Only these parents disarm the segment;
+#: `spec/` keeps its meaning everywhere else, and `docs/tests/` is still tests.
+_DOC_ROOT_NAMES: frozenset[str] = frozenset({"docs", "doc", "documentation"})
+_AMBIGUOUS_TEST_DIR_NAMES: frozenset[str] = frozenset({"spec", "specs"})
+
 # A directory named `test` under one of these is production code, not a test.
 _MAIN_ROOT_SEGMENTS: tuple[tuple[str, ...], ...] = (
     ("src", "main"),
@@ -99,8 +107,13 @@ def declared_test_root(path: str) -> "str | None":
         # A `test` package inside a main source root is production code.
         return None
     for i, part in enumerate(parts[:-1]):
-        if part in _TEST_DIR_NAMES:
-            return "/".join(parts[:i + 1])
+        if part not in _TEST_DIR_NAMES:
+            continue
+        if part in _AMBIGUOUS_TEST_DIR_NAMES and (
+            set(parts[:i]) & _DOC_ROOT_NAMES
+        ):
+            continue  # a specification under `docs/`, not a spec suite
+        return "/".join(parts[:i + 1])
     return None
 
 

{sourcecode-4.3.0.dist-info → sourcecode-4.5.0.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 4.3.0
+Version: 4.5.0
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 License-File: LICENSE
 Keywords: agents,ai,codebase,context,developer-tools,llm
@@ -387,6 +387,12 @@ And one about who calls a route:
 |---|---|---|
 | **Whether a route is called from outside this repository — another service, a mobile app, a partner, a cron job, or a client whose URL is assembled at run time.** | The join reads the TypeScript/JavaScript checked in beside the server and only the call shapes whose verb and path are written at the call site. That is a floor on who calls a route and can never be a ceiling: the repository cannot observe consumers it does not contain. So a route with no call site here is published as a candidate for deletion, never as dead API. | Access logs or an API gateway answer who really calls a route. The opposite direction is decisive without them: a client call matching no route is a request this repository's own front end makes and its server does not serve. |
 
+The one row above with a remedy in this build: `ask endpoints /path/to/repo --servlets`
+lists the servlet-mounted HTTP surface as a population of its own — `web.xml` mappings and
+`ServletRegistrationBean` registrations, with the file that declares each — and never merges
+it into `endpoints.total`. Measured: openmrs-core 7 patterns, alfresco-community-repo 11,
+including `/api/*` served by a WebScript servlet.
+
 **Positioning.** Until an executor ships, this is the **diagnosis layer**: it measures what
 must change, what each change reaches, and what a gate should block — and it removes none of
 it. Field evaluation scored it 7/10 as a report generator and 5.5/10 as a development tool,
@@ -479,3 +485,4 @@ Matching endpoints report `policy: "custom"` and drop out of the `no_security_si
 | [PRODUCT_IDENTITY.md](docs/PRODUCT_IDENTITY.md) | `ask` (command) vs `sourcecode` (package/alias) |
 | [privacy.md](docs/privacy.md) | Telemetry and data-handling policy |
 | [DEFECT-LEDGER.md](docs/DEFECT-LEDGER.md) | Every defect found in the field, its class, and which release closed it — published on purpose |
+| [spec/envelope-v1.md](docs/spec/envelope-v1.md) | The output format as an **open specification** — provenance, a named unit, a stated basis, declared non-coverage. Implementable by tools that are not this one; the field table is generated from the schema `ask schema envelope-v1` prints |

{sourcecode-4.3.0.dist-info → sourcecode-4.5.0.dist-info}/RECORD

@@ -1,4 +1,4 @@
-sourcecode/__init__.py,sha256=VzE3y83kXkJoA93WrV4CYV_6qTGSQOQGTFSYee-Wiz8,308
+sourcecode/__init__.py,sha256=GuicP24rR0BJLjvNn6DvgAV9JfkUtm-vrQYsnQfw6NM,308
 sourcecode/adaptive_scanner.py,sha256=yJBKjNpkY6bpueYJ2YnRezen3sYZDecEt7WaaNWdqug,9466
 sourcecode/archetype.py,sha256=HBGTTaS-bVHS6pdacPUMKcMxklkDEKnZMgz48Kc3yec,37630
 sourcecode/architectural_baseline.py,sha256=agDSwGEakdkgLLh5xnd3hiD_TC6pRujWt4klnuYF1wo,18689
@@ -17,7 +17,7 @@ sourcecode/chain_rules.py,sha256=Bi6UHfgd-GxWswmnHRcPz5jdbAuqka3Zkz_P-MTvqhw,127
 sourcecode/change_plan.py,sha256=kFjjp16XYbupgkv1CPkfqo39_SiZPMRQ8OOfC-Vy9eg,7929
 sourcecode/cir_graphs.py,sha256=9G0HHj1kw2325IDyzo2OpX73BNswEckecf4MZUXB4JM,12078
 sourcecode/classifier.py,sha256=JBzPwSSrDG-tUHAbcKB678HRbjLpD-ohzbzzO62mgpo,20114
-sourcecode/cli.py,sha256=1iYGmrAvmN3lW1gWL3xVLo-tTj2VR92Sqa_k7rmuejA,482834
+sourcecode/cli.py,sha256=PGcg9XkNh4D52gvoXaAlTLa5G-HWGmVfXyS3w9tG05k,483546
 sourcecode/client_calls.py,sha256=fb5fvmryrBQlly2ETyLcjoQcyzQTPxZ38jYx47V_yqs,13293
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
 sourcecode/compare.py,sha256=xq3zsqAOAw4AWkoD9khb9xDP_O3KvwqO9k-pf8sbi3g,10951
@@ -44,7 +44,7 @@ sourcecode/endpoint_literals.py,sha256=Qf4gTZzvNSFDGDuOvF0YRL9NvaYKKj24klhR5LIOa
 sourcecode/endpoint_metrics.py,sha256=sLSLUIgiIyvNdOynaxVgHd9SjRF_DbN3QxevaquykaU,2840
 sourcecode/entrypoint_classifier.py,sha256=jhTYlyqDJH2AtdEcLVaRU3lYRTJuF8DkxVzl4-W3zWE,5322
 sourcecode/env_analyzer.py,sha256=oLz4gDUE3BHlRRn6Qj4rnbjwyYjIZ0nlqO_SBQwL_H8,21999
-sourcecode/envelope.py,sha256=IIUY6q_VPGsDfmlZri1GORXcYiAKvQepGoI-B0N0orE,7372
+sourcecode/envelope.py,sha256=fpF_8znvPqGXKZb0UPYcCYjm27yO7Pr-WsdXNE-tEoY,8911
 sourcecode/environment_resolution.py,sha256=2cEsF741-Cb6PR9Hiv57BpOTWl4gEnHMQsiRzcNcjJM,18872
 sourcecode/error_schema.py,sha256=uwosfNaSujtYm11_732Hu92z5ITV040fQDaIyefSvR4,1683
 sourcecode/evidence_provider.py,sha256=GSSL44JEaouO5AHks2sB3d1YvC9xIKIld1yBYxZpXxo,4277
@@ -67,13 +67,13 @@ sourcecode/mcp_nudge.py,sha256=lKemOqK_wny2u7Ymcr2Idi5Kx8pXY02jCi-_nJYLGMg,2992
 sourcecode/metrics_analyzer.py,sha256=gLoRWKygF18jLgwsqmGXSWopw-f5iO1VbM7Jjdif6ag,22809
 sourcecode/migrate_check.py,sha256=jMv1GMhMthpHCnoEtkKWHiIC2Not2kdbU4UaA9sWX7I,134643
 sourcecode/migration_blast.py,sha256=OPryWkM6-PbvcG3eJFdcWUnlpXBje41nu2BkrZnE2hg,9359
-sourcecode/non_coverage.py,sha256=W2q9-T6wXwCuKK2nVrcJ1lRVqzIKWDQtIZworGdFI_c,11715
+sourcecode/non_coverage.py,sha256=lQZCdvHz4c_Gr0PIugkybOvSVwiaWvpCesq2p_9HtNk,11823
 sourcecode/openapi_surface.py,sha256=BTt0K-woZbkbWTN77IkqeBm_Okag9owR0848fmot8sk,16207
 sourcecode/openrewrite_recipe.py,sha256=4dyY5twRB6Xew-G9Zy5FafNZwlMU1S7DnRa2FqPkhpQ,12233
 sourcecode/output_budget.py,sha256=__DQrIg7MGsYrd0_S3lyd3AG0a0jWNGr55v5Gg9kK0U,12347
 sourcecode/parse_cache.py,sha256=SnHOhNTvAqHm_PXImPVBuj7NEoOQRn8dfIZHEqOFENs,7565
 sourcecode/path_admission.py,sha256=OGNSoluhVh8YYOBZBnACUrkmH4Tp_yxjGLifkcsxQpo,5838
-sourcecode/path_filters.py,sha256=qPKO7kRmVp2y9zjLNSuAVCbcpZrIInHE4QulLUlzPFI,10412
+sourcecode/path_filters.py,sha256=9yk8fA29sZSPyvI8UjF6fIOY37Hd3hs8txUiNXsQGwg,11182
 sourcecode/perf.py,sha256=GAcEoouPIlPMCQIcHNToxK6K3WdIR-lj9aFg4prOYJI,9743
 sourcecode/pipe_contract.py,sha256=PML0Er5d8uDyec4OrdUXuyqHbGPUYndjeaKUjkFz2u4,8369
 sourcecode/posture.py,sha256=x1LY98XSjZzG4xThZYJYK3e5BTYDmJhyg5eqJ5KquNk,72999
@@ -88,7 +88,7 @@ sourcecode/redactor.py,sha256=SB4hwIvg8h-hvcqKcDWaZvA-aSyn-at-BIRwa0tUv5E,3227
 sourcecode/reference_facts.py,sha256=Ns495c6eTmq2SrqPkcUrJUJru4_wj_yRWm4YDeJwves,13440
 sourcecode/release_info.py,sha256=r8GlRnraTQH_olGkdpbCAzBb0B_Js1cRBPaRe7IUoyU,5378
 sourcecode/relevance_scorer.py,sha256=0AgEt4KrV73nioMqBgjhGjtY7L2C7L7cSyKtj3IKcrw,9408
-sourcecode/remedies.py,sha256=-zvOeVllMqhSVT3BzXmSLDwDNrPEv-VJsEzNtMKJ4WI,5034
+sourcecode/remedies.py,sha256=TIYeWD8gFsG_69CF2Qjxgbcx6mivf9TVTm1GqevASWM,5591
 sourcecode/rename_refactor.py,sha256=h6dNFlB9aZ_3q6heeHBkgXQeXaT03nvPSsYH6P8qxFg,12965
 sourcecode/repo_classifier.py,sha256=FG1vaWKdWXsWdl-S8hjVMiTqcwgaRXkDyvK4rPcOGtQ,22681
 sourcecode/repository_ir.py,sha256=uuJsPmtgSEi4MKVKJEiZl8bpvU1QFU2Oslxn96p5xi8,356849
@@ -107,6 +107,7 @@ sourcecode/semantic_impact_engine.py,sha256=t09IirGC3JjQDy33JZd1_WKzQVKXkoNl3-XE
 sourcecode/semantic_integration_engine.py,sha256=7a0WqAInOv39f0Yr_94TYo_JP_8QpeI9KGaknpzAyQU,18899
 sourcecode/semantic_services.py,sha256=nbUuPv-F01USTt_9CHT8iy_ucCIw3fz4W3Aquea_pd4,10782
 sourcecode/serializer.py,sha256=T1-Ybi6aPczxiz11N_nfuZ_jUMQVBMExeWuYHCUjKPc,139222
+sourcecode/servlet_surface.py,sha256=XokdtUFeqCpFfD1nZHJSnJsDgrQMuVOYzM72eoaAHpM,7708
 sourcecode/spring_event_topology.py,sha256=5_ON_21Le5zbG-1GRc5GLIi5HJfy_QjcXLVPC5WeUGQ,18055
 sourcecode/spring_findings.py,sha256=qgWz4LLL5TFe3eG-mTttlrDTx-6ps3EOuLA-S2HvQCM,16945
 sourcecode/spring_impact.py,sha256=KkThpPmBbBJk_1H8f0cVWOuz6vBN-yX5qcTQ3Sjmjnk,74797
@@ -119,7 +120,7 @@ sourcecode/spring_tx_analyzer.py,sha256=_wqjRktqdPS6PiXXxtTkCD1t6BaE2uhqx6ioYY-U
 sourcecode/summarizer.py,sha256=0aD4x3vgPngqBCEBKGuES1J2Vk5f7mqCm_ZWErwm3js,27025
 sourcecode/target_admission.py,sha256=wFZ4pzlxhiF6Q6s2lEAZEzcCfj1Y6xNvujjt8MdO0Qo,7154
 sourcecode/test_gap_ranking.py,sha256=hl-tTyQUXZGJycG1b6npbLeE_DaVHaOsvPwG9qqC5y8,15711
-sourcecode/test_sources.py,sha256=2O7LXF-M-CQ0DwEF3B7BfWE6IWmHJngSOES5aRz6WR4,6205
+sourcecode/test_sources.py,sha256=cMGVNLbYZZ2yt2PVcySK4scbjKpCLDAKhIViyWN_pRM,6986
 sourcecode/token_estimate.py,sha256=RBXCGnF20jMzAeU0rUuf22Ol6y2wdf9q6nfs2sXIn4k,9262
 sourcecode/tree_utils.py,sha256=8GAkIfQAsvtEudIeW1l4ooH_oRtrWR8cpJQJsEa_Pfw,2093
 sourcecode/type_usage_surface.py,sha256=51IrKRQoIoRnlsiDjHnqpJBn2rc6E59aRhgS0HTzAF0,4428
@@ -188,8 +189,8 @@ sourcecode/telemetry/consent.py,sha256=pQdl-QeLl6Gcibn0eWHSKZrm-HYSsjpVqOnjrgFp8
 sourcecode/telemetry/events.py,sha256=4_yeO58U-Cwc1Qb27VB0_EjhmroY0k91n3_VGxeALB8,2776
 sourcecode/telemetry/filters.py,sha256=RzxauTz8HliO4BllQnXEXc7zTeqdCZi5MgqGEDuW7OQ,6570
 sourcecode/telemetry/transport.py,sha256=4gGHsq0WeY9VywEZXA3vUxykfiYnw9uuqfjAAec7F8o,1681
-sourcecode-4.3.0.dist-info/METADATA,sha256=T75swzEAj9oh9i0jR206k-oOMYRnilGJS2qlTY5gcgY,33052
-sourcecode-4.3.0.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-4.3.0.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
-sourcecode-4.3.0.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
-sourcecode-4.3.0.dist-info/RECORD,,
+sourcecode-4.5.0.dist-info/METADATA,sha256=HAJ1Mhhiaf1DpQLb5vLP57WwPBy5t3x-SutNNG4vAkE,33762
+sourcecode-4.5.0.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-4.5.0.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
+sourcecode-4.5.0.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
+sourcecode-4.5.0.dist-info/RECORD,,