sourcecode 5.3.0__py3-none-any.whl → 5.3.1__py3-none-any.whl

sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "5.3.0"
+__version__ = "5.3.1"

sourcecode/audit_report.py

@@ -147,6 +147,23 @@ def build_audit_report(
     return normalized
 
 
+def _render_breakdown(value: Any) -> str:
+    """A count-per-class map, written the way a reader of a report reads one.
+
+    The two breakdown lines were interpolated as Python objects, so the signed
+    human bundle published `{'no_rule_matched': 676}` on keycloak — and a literal
+    `None` for a section that was not measured at all, which is the one thing a
+    report of record must never say when it means "not measured".
+    """
+    if value is None:
+        return "not measured"
+    if isinstance(value, dict):
+        if not value:
+            return "none reported"
+        return ", ".join(f"`{k}` {v}" for k, v in sorted(value.items()))
+    return f"`{value}`"
+
+
 def render_markdown(report: dict[str, Any]) -> str:
     """Human report renderer over the JSON contract."""
     summary = report.get("summary") or {}
@@ -160,8 +177,8 @@ def render_markdown(report: dict[str, Any]) -> str:
         f"- Profile set: `{profile}`",
         f"- Total defects: `{read_count(summary, 'total_defects')}`"
         + ("  **(floor — this run was cut short)**" if summary.get("partial") else ""),
-        f"- Risk bands: `{summary.get('risk_bands')}`",
-        f"- Endpoint access: `{summary.get('endpoint_access')}`",
+        f"- Risk bands: {_render_breakdown(summary.get('risk_bands'))}",
+        f"- Endpoint access: {_render_breakdown(summary.get('endpoint_access'))}",
         "",
         "## Top Risks",
         "",

sourcecode/cli.py

@@ -13240,7 +13240,10 @@ def cold_start_cmd(
     """Output Repository Intelligence Snapshot bootstrap context as JSON.
 
     Returns instantly from persisted RIS — zero re-analysis cost.
-    status: cold_start_ready | cold_start_stale | no_ris
+    status: cold_start_ready | cold_start_stale | cold_start_incomplete | no_ris
+    `cold_start_incomplete` means the snapshot is missing sections (or holds no
+    measurement at all — `validation.status: empty_snapshot`, every count
+    `null`): unknown, never zero.
 
     \b
     Note: Full output is large (~100K–200K tokens for medium repos).

sourcecode/consumer_join.py

@@ -71,6 +71,38 @@ _METHOD_ATTR = re.compile(r"RequestMethod\.(GET|POST|PUT|PATCH|DELETE|HEAD|OPTIO
 #: annotation-shaped path on a server controller is a route, not a call.
 _DECLARATIVE_CLIENT = re.compile(r"@(\w*FeignClient|HttpExchange|RegisterRestClient)\b")
 
+#: `put`, `patch` and `delete` are HTTP verbs and they are also three of the most
+#: common method names in Java: `map.put("us-east-1", "us-east-1a")` matches the
+#: call shape exactly. Measured on eureka, joined against open-banking-gateway:
+#: all 20 "unresolved client calls" were `Map.put` literals in
+#: `AbstractAzToRegionMapper`, and a `map.put("/x", v)` would have been published
+#: as a real consumer call to `/x` — the direction this module declares decisive.
+#: So the shape alone does not admit a call site: the FILE must carry evidence
+#: that an HTTP client is in it. These are the published type names of the HTTP
+#: client libraries themselves, matched as a declaration or an import — evidence,
+#: never a rule about the calling code's own naming.
+_HTTP_CLIENT_TYPE = re.compile(
+    r"\b(?:Async|Test|OAuth2)?RestTemplate\b"
+    r"|\bWeb(?:Test)?Client\b"
+    r"|\bRestClient\b"
+    r"|\bOkHttpClient\b"
+    r"|\bHttpClient\b"
+    r"|\bClientHttpRequest\w*\b"
+    r"|\bResteasyClient\b"
+    r"|\bjakarta\.ws\.rs\.client\b|\bjavax\.ws\.rs\.client\b"
+    r"|\bWebResource\b|\bWebTarget\b"
+    r"|\bRequestSpecification\b"  # rest-assured
+)
+
+
+def _file_declares_http_client(text: str) -> bool:
+    """True when this file imports or declares a type that speaks HTTP as a client.
+
+    A file with no such type has no `restTemplate` to call, so a `.put("…")` in it
+    is some other API with the same method name.
+    """
+    return bool(_HTTP_CLIENT_TYPE.search(text) or _DECLARATIVE_CLIENT.search(text))
+
 _JAVA_SKIP_DIRS = frozenset({
     "target", "build", "out", ".git", "node_modules", ".gradle",
 })
@@ -103,7 +135,10 @@ def extract_java_client_calls(base: Path) -> "tuple[list[ClientCall], list[dict]
         except OSError:
             continue
         rel = path.relative_to(base).as_posix()
-        for match in _JAVA_TEMPLATE_CALL.finditer(text):
+        _http_client_file = _file_declares_http_client(text)
+        for match in (
+            _JAVA_TEMPLATE_CALL.finditer(text) if _http_client_file else ()
+        ):
             op = match.group("op").lower()
             verb = next((v for k, v in _VERB_FROM_OP.items() if op.startswith(k)), "")
             if not verb and op == "exchange":

sourcecode/repository_ir.py

@@ -6173,6 +6173,56 @@ def _recover_openapi_spec_routes(
 _SEMANTIC_MODEL_ENDPOINT_SOURCES: frozenset[str] = frozenset({"annotation", "openapi-spec"})
 
 
+def is_test_source_file(rel_path: str) -> bool:
+    """Return True when *rel_path* is a test source and must not enter any surface.
+
+    One authority for the question both Java file-list builders ask —
+    `find_java_files` (which feeds the IR and therefore every CIR consumer:
+    spring-audit, impact, validation, data-exposure) and
+    `extract_java_endpoints` (which feeds the `endpoints` command). They asked it
+    separately until a field run on jobrunr made the divergence visible:
+    `endpoints` published 3 annotation routes from
+    `quarkus-jobrunr-tests/src/main/java/org/jobrunr/quarkus/it/` that
+    `spring-audit` could not see at all, while the payload's own
+    `semantic_model_endpoints_note` claims the two counts are the same figure —
+    3 against `endpoints_analyzed: 0`.
+
+    Two facts, and C1-28 is why they are written as two.
+    `is_test_path` answers "is this file a test source"; since the authority took
+    over it never fires inside a declared main source root, which is correct
+    everywhere except inside a module that is itself test infrastructure — a
+    `test-framework` module has no product for its `src/main` to belong to. There
+    the weaker question is the right one: does this file look like a test by name
+    or by package. Both come from the one authority, so this stays a composition
+    of published facts rather than a third rule.
+
+    A test *fixture* module (`*-test-utils`) is deliberately NOT excluded here:
+    its endpoints are kept as raw evidence and tagged `scope: test_util`
+    downstream, by both surfaces.
+    """
+    rel = rel_path.replace("\\", "/").lstrip("/")
+    if _is_test_path(rel):
+        return True
+    _rel_sl = "/" + rel  # leading slash: the check below is prefix-safe
+    if "/src/main/" in _rel_sl and _matches_test_naming(rel):
+        _prefix = _rel_sl.split("/src/main/")[0]
+        _prefix_parts = [p for p in _prefix.split("/") if p]
+        # A module is a test module if is_test_path says so OR if any module
+        # directory component starts with "test" (e.g. "test-framework",
+        # "test-providers", "testsuite") OR contains "test"/"tests" as a
+        # hyphen/underscore-separated word (e.g. "jobrunr-micronaut-tests").
+        return (
+            _is_test_path(_prefix + "/x.java")
+            or any(p.lower().startswith("test") for p in _prefix_parts)
+            or any(
+                w in {"test", "tests", "spec", "specs"}
+                for p in _prefix_parts
+                for w in p.lower().replace("-", " ").replace("_", " ").split()
+            )
+        )
+    return False
+
+
 # ---------------------------------------------------------------------------
 # Convenience: find Java files in a repo
 # ---------------------------------------------------------------------------
@@ -6190,7 +6240,7 @@ def extract_java_endpoints(root: Path) -> "dict[str, Any]":
     """
     import re as _re
     from typing import Any as _Any
-    from sourcecode.path_filters import is_test_path, is_test_fixture_module_path
+    from sourcecode.path_filters import is_test_fixture_module_path
 
     _EXTENDS_FROM_SIG = _re.compile(r'\bextends\s+(\w+)')
 
@@ -6210,9 +6260,20 @@ def extract_java_endpoints(root: Path) -> "dict[str, Any]":
     _CLIENT_PATH_FRAGMENTS = (
         "/admin-client/", "/rest-client/", "/client-api/", "/api-client/",
     )
+    # Admission is `is_test_source_file`, the same authority `find_java_files`
+    # uses, so this command's route population and the IR's cannot diverge:
+    # `is_test_path` alone let a test MODULE's `src/main` resources through here
+    # while the IR dropped them, and the two published counts then contradicted
+    # each other (jobrunr: 3 annotation routes vs `endpoints_analyzed: 0`).
+    def _rel(p: Path) -> str:
+        try:
+            return str(p.relative_to(root)).replace("\\", "/")
+        except ValueError:
+            return str(p).replace("\\", "/")
+
     java_files = sorted(
         p for p in root.rglob("*.java")
-        if not is_test_path(str(p).replace("\\", "/"))
+        if not is_test_source_file(_rel(p))
         and "target/" not in str(p).replace("\\", "/")
         and not any(f in str(p).replace("\\", "/") for f in _CLIENT_PATH_FRAGMENTS)
     )
@@ -6841,43 +6902,9 @@ def find_java_files(
         except ValueError:
             continue
         parts = rel.split("/")
-        # Skip test dirs — use centralised is_test_path (consistent with
-        # extract_java_endpoints), guarded against false positives where a Java
-        # *package* is named "test" inside a production src/main/ source root.
-        if not include_tests:
-            # Two facts, and C1-28 is why they are now written as two.
-            # `is_test_path` answers "is this file a test source"; since the
-            # authority took over it never fires inside a declared main source
-            # root, which is correct everywhere except inside a module that is
-            # itself test infrastructure — a `test-framework` module has no
-            # product for its `src/main` to belong to. There the weaker question
-            # is the right one: does this file look like a test by name or by
-            # package. Both come from the one authority, so this stays a
-            # composition of published facts rather than a third rule. A test
-            # *fixture* module (`*-test-utils`) is deliberately NOT excluded
-            # here: its endpoints are kept as raw evidence and tagged
-            # `scope: test_util` downstream.
-            _rel_sl = "/" + rel  # leading slash: the checks below are prefix-safe
-            if _is_test_path(rel):
-                continue
-            if "/src/main/" in _rel_sl and _matches_test_naming(rel):
-                _prefix = _rel_sl.split("/src/main/")[0]
-                _prefix_parts = [p for p in _prefix.split("/") if p]
-                # A module is a test module if is_test_path says so OR if any
-                # module directory component starts with "test" (e.g. "test-framework",
-                # "test-providers", "testsuite") OR contains "test"/"tests" as a
-                # hyphen/underscore-separated word (e.g. "jobrunr-micronaut-tests").
-                _prefix_is_test = (
-                    _is_test_path(_prefix + "/x.java")
-                    or any(p.lower().startswith("test") for p in _prefix_parts)
-                    or any(
-                        w in {"test", "tests", "spec", "specs"}
-                        for p in _prefix_parts
-                        for w in p.lower().replace("-", " ").replace("_", " ").split()
-                    )
-                )
-                if _prefix_is_test:
-                    continue
+        # Skip test dirs — one authority, shared with extract_java_endpoints.
+        if not include_tests and is_test_source_file(rel):
+            continue
         # Skip vendor/generated/build dirs
         if any(part in _VENDOR_DIRS for part in parts[:-1]):
             continue

sourcecode/ris.py

@@ -484,6 +484,20 @@ def _has_uncommitted_changes(repo_root: Path) -> bool:
     return bool(worktree_dirty(root, ignore=own))
 
 
+def _compact_probe(section: object) -> bool:
+    """True when an RIS section holds something a reader could act on.
+
+    A stub writes `{"endpoints": [], "controllers_index": []}` — a truthy dict
+    that contains no measurement, so the section's emptiness has to be asked of
+    its values, not of the container.
+    """
+    if isinstance(section, dict):
+        return any(_compact_probe(v) for v in section.values())
+    if isinstance(section, (list, tuple, set)):
+        return bool(section)
+    return section not in (None, "", 0, False)
+
+
 def get_cold_start_context(repo_root: Path) -> dict:
     """Return a lightweight bootstrap object from the persisted RIS.
 
@@ -527,22 +541,54 @@ def get_cold_start_context(repo_root: Path) -> dict:
         _endpoints_found = len(endpoints)
         # Spring is detected when controllers exist in structural map or api surface.
         _spring_detected = bool(_controllers_found) or bool(_controllers_in_api)
-        _validation_status = (
-            "incomplete_snapshot"
-            if _is_java and _spring_detected and _endpoints_found == 0
-            else "valid"
+        # A stub snapshot measured nothing. `update_ris_api_surface` /
+        # `update_ris_spring_audit` write one (`partial: True`, `confidence: 0.0`,
+        # `git_head: ""`) so their own section survives when no full snapshot
+        # exists yet — and on a repository whose Spring surface is genuinely
+        # empty, that stub is all there is. Measured on
+        # alfresco-community-repo (7 000+ Java files, 901 WebScripts): every
+        # section empty, and `validation: {spring_detected: false,
+        # controllers_found: 0, status: "valid"}` — an answer a bootstrapping
+        # agent reads as "this repository has no controllers and no entry
+        # points". Nothing was measured, so nothing is being reported: the
+        # sections are unknown, not zero.
+        _nothing_measured = not (
+            _compact_probe(ris.compact_summary)
+            or _compact_probe(ris.structural_map)
+            or _controllers_found
+            or _endpoints_found
+            or _compact_probe(ris.git_context_snapshot)
         )
+        if _nothing_measured:
+            _validation_status = "empty_snapshot"
+        elif _is_java and _spring_detected and _endpoints_found == 0:
+            _validation_status = "incomplete_snapshot"
+        else:
+            _validation_status = "valid"
         _validation: dict = {
-            "spring_detected": _spring_detected,
-            "controllers_found": _controllers_found,
-            "endpoints_found": _endpoints_found,
+            "spring_detected": None if _nothing_measured else _spring_detected,
+            "controllers_found": None if _nothing_measured else _controllers_found,
+            "endpoints_found": None if _nothing_measured else _endpoints_found,
             "status": _validation_status,
         }
+        if _nothing_measured:
+            _validation["statement"] = (
+                "This snapshot holds no measurement: it was written by a command "
+                "that persisted its own section only. Every field above is unknown "
+                "— not zero, and not evidence that the repository has no controllers, "
+                "endpoints or entry points. Build one with `ask cache warm <path>` "
+                "(or any analysis command) and re-run."
+            )
 
         # When the snapshot is structurally incomplete, downgrade status so agents
         # don't assume cold_start_ready when critical sections are missing.
         _status_base = "cold_start_stale" if stale else "cold_start_ready"
-        if _validation_status == "incomplete_snapshot" and not stale:
+        if _validation_status in ("incomplete_snapshot", "empty_snapshot") and not stale:
+            _status_base = "cold_start_incomplete"
+        if _validation_status == "empty_snapshot":
+            # A stub carries no head, so the staleness comparison it loses is not
+            # the fact worth reporting: `cold_start_stale` would send a reader to
+            # re-run against a newer tree, when what is missing is the snapshot.
             _status_base = "cold_start_incomplete"
 
         _compact = ris.compact_summary or {}

sourcecode/runs.py

@@ -119,9 +119,28 @@ class RunRecord:
             payload["output_size_bytes"] = output_size
         if error:
             payload["error"] = error
+        # Bookkeeping never takes down an answer. `RunRecord.create` already
+        # treats an unwritable directory as "no record"; the terminal write did
+        # not, so a run directory that disappeared *during* the analysis — a
+        # concurrent `ask cache clear`, a tmp reaper, an evicted cache — raised
+        # FileNotFoundError out of the `_expensive_analysis_scope` exit, after the
+        # analysis had completed. Observed: `ask audit-report` on langchain4j died
+        # with a traceback over a missing `runs/<id>.tmp`, having already built
+        # the report. The record is recovery metadata; the answer is the product.
+        blob = json.dumps(payload, indent=2, sort_keys=True)
         tmp = self.path.with_suffix(".tmp")
-        tmp.write_text(json.dumps(payload, indent=2, sort_keys=True), encoding="utf-8")
-        tmp.replace(self.path)
+        for attempt in (0, 1):
+            try:
+                tmp.write_text(blob, encoding="utf-8")
+                tmp.replace(self.path)
+                return
+            except OSError:
+                if attempt:
+                    return
+                try:
+                    self.path.parent.mkdir(parents=True, exist_ok=True)
+                except OSError:
+                    return
 
 
 def classify_run(path: Path) -> dict[str, Any]:

sourcecode/summarizer.py

@@ -389,14 +389,20 @@ class ProjectSummarizer:
             parts.append(f"Domains: {', '.join(domains)}")
 
         # Quantitative structural suffix for Java projects — adds concrete scale signals
-        # that README descriptions omit (class count, transactional boundary count).
+        # that README descriptions omit (file count, transactional boundary count).
         if primary is not None and primary.stack.lower() == "java":
             quant_parts: list[str] = []
             java_files = sum(
                 1 for p in sm.file_paths if p.endswith(".java")
             )
             if java_files >= 50:
-                quant_parts.append(f"{java_files:,} Java classes")
+                # This counts files, and says so. It read "N Java classes" — the
+                # headline sentence of every summary, naming a population the tool
+                # measures separately and differently: BroadleafCommerce is 2 659
+                # Java files and 3 032 declared types (2 174 classes, 742
+                # interfaces), so the label was wrong by a nested type per file
+                # and contradicted `repo-ir.analysis_meta.classes`.
+                quant_parts.append(f"{java_files:,} Java files")
             txn_classes: list[str] = []
             for stack in non_tooling_stacks:
                 txn_classes.extend(getattr(stack, "transactional_classes", []))

{sourcecode-5.3.0.dist-info → sourcecode-5.3.1.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 5.3.0
+Version: 5.3.1
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 License-File: LICENSE
 Keywords: agents,ai,codebase,context,developer-tools,llm
@@ -42,7 +42,7 @@ Description-Content-Type: text/markdown
 
 **Context · Impact · Migration · Architecture · Review — everything from one structural model.**
 
-![Version](https://img.shields.io/badge/version-5.3.0-blue)
+![Version](https://img.shields.io/badge/version-5.3.1-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
 > **ASK Engine** is the product. The CLI command is **`ask`**. The legacy **`sourcecode`**
@@ -126,7 +126,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.3.0 — and, on a build that has aged,
+ask version                    # ask 5.3.1 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 

{sourcecode-5.3.0.dist-info → sourcecode-5.3.1.dist-info}/RECORD

@@ -1,4 +1,4 @@
-sourcecode/__init__.py,sha256=alg7fVhTqdBz-TKk1I7DwM5E5VuB5QN5_wjCc0DKyi4,308
+sourcecode/__init__.py,sha256=tB6pAGawJyFaEkjGMYJE9OdwEZRKYR63O9PhylSYugU,308
 sourcecode/adaptive_scanner.py,sha256=yJBKjNpkY6bpueYJ2YnRezen3sYZDecEt7WaaNWdqug,9466
 sourcecode/archetype.py,sha256=CZvRLpkHot_D8D3JFQVorr-EHDJyh0BbS7RnSTqBigM,40499
 sourcecode/architectural_baseline.py,sha256=4GiMVBLJVHvRKSWQGf2ZVurI1-R0qk5pmaevgvGSgVA,26325
@@ -6,7 +6,7 @@ sourcecode/architectural_delta.py,sha256=JhZVmA0gYUryt4x4ieVuxPbcvoBygHgADZaYJ_o
 sourcecode/architecture_analyzer.py,sha256=GFc4ek-s1IHWM7pl-0L32WahZ93AmDgrAMcOuBKA5Dk,61463
 sourcecode/architecture_summary.py,sha256=BVVRHd952cjRhjHnR6CPrvKgaa-tdM16l-pBi1yDCPs,32395
 sourcecode/ast_extractor.py,sha256=aXJjZ7XjAdxa99hWNm4SyzPqx4gNWiTbUYjNWGNl-Vc,51213
-sourcecode/audit_report.py,sha256=CLvvlQH2oA6Qj4UADUWhNwSsp1OcyzwXXey5DN_IiWI,8660
+sourcecode/audit_report.py,sha256=xLoGd-J8DKL4m1E7Rz8uvEKIg89yr_yUzVEPxQcJxvo,9372
 sourcecode/baseline_autocapture.py,sha256=tmMLexQSeaQRRbqxAd7walvGQqnF0mdpxQmkL40rlhI,15623
 sourcecode/cache.py,sha256=CK_J8NqyaTNZ57KQT-R4puqI8yYlzG5WL7uLFRbzods,41727
 sourcecode/cache_model.py,sha256=B0mvOLwHG7wo1JoCzHoNoI5_0TV-PnhicJM8fWkrVDI,57050
@@ -18,13 +18,13 @@ sourcecode/chain_rules.py,sha256=Bi6UHfgd-GxWswmnHRcPz5jdbAuqka3Zkz_P-MTvqhw,127
 sourcecode/change_plan.py,sha256=aX1mp2XnlDN-8R2BcTiu8HlkDwQ_4fN1ZLckj0VMXHM,9945
 sourcecode/cir_graphs.py,sha256=9G0HHj1kw2325IDyzo2OpX73BNswEckecf4MZUXB4JM,12078
 sourcecode/classifier.py,sha256=JBzPwSSrDG-tUHAbcKB678HRbjLpD-ohzbzzO62mgpo,20114
-sourcecode/cli.py,sha256=RK8z7-Qx-njqjxYsS1xDpifMKqtN6bUcq-tABDBjUF8,633350
+sourcecode/cli.py,sha256=3GV5fX6XvOxFkDuKCMOQSejaSrt3X13Gn5qeUYzps1g,633564
 sourcecode/client_calls.py,sha256=daRTgbXNUOfkzGXJpVb6A737R_Thhka8vw1_YgxCaLg,13548
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
 sourcecode/compare.py,sha256=2GdDy0qkDSgmkkpgvoCHitoLj3mt30EeFgJ8PGEXJng,14712
 sourcecode/confidence_analyzer.py,sha256=5li0NyOdS3Ie-f2ZY1gBmnjtkuRvI50l4OnGaKkXAOU,22358
 sourcecode/constraint_diff.py,sha256=hWIO5vsxvHjsgQx23K3r_JMy1W6wQ2Ca4DqB9R_iMnY,5831
-sourcecode/consumer_join.py,sha256=z2etHAih_i6WBvNdUv7FjRYqA2m8v9ZyE8pVGKYqhEI,15448
+sourcecode/consumer_join.py,sha256=6oNv1dbNxURCppLaixmrGbyL0Y-oSrKqjLc59YSBLEI,17086
 sourcecode/container_wiring.py,sha256=-jAOOgDR0VcZN3ph9kpZVU6iPyN1EK8H5DGAQzxGQKY,14394
 sourcecode/context_cache.py,sha256=xfS0GpWG8MpHwqgw61tp3IR7jZ2IdG1j-v_HoIiSx7o,35608
 sourcecode/context_graph.py,sha256=a6v2lgl2DxDnPAWE59K3yg6L5YFDak0LIUff3pi9p0c,47327
@@ -104,12 +104,12 @@ sourcecode/relevance_scorer.py,sha256=0AgEt4KrV73nioMqBgjhGjtY7L2C7L7cSyKtj3IKcr
 sourcecode/remedies.py,sha256=V2_cD4pLq8bKRkzF-3RGFoiu1xWYZS384WDVp1MrlZw,10225
 sourcecode/rename_refactor.py,sha256=h6dNFlB9aZ_3q6heeHBkgXQeXaT03nvPSsYH6P8qxFg,12965
 sourcecode/repo_classifier.py,sha256=FG1vaWKdWXsWdl-S8hjVMiTqcwgaRXkDyvK4rPcOGtQ,22681
-sourcecode/repository_ir.py,sha256=R2LjUHUxdOQdx4lGCCgKLY-9K7ldc7JAuW7MpEFJ124,368882
-sourcecode/ris.py,sha256=nc0d6boOiREFqXO4eLHHaYcnqZj4pT_AG43-Xz9ejkc,24862
+sourcecode/repository_ir.py,sha256=EHBupXV4S1hyr6El7i3uRwqx_vohiPyc0XMRA0SzheA,369867
+sourcecode/ris.py,sha256=Xbx34dkJI_uXil9xsgw-fA_Apcm4nbnTjQgFm66dP1g,27489
 sourcecode/risk.py,sha256=FGanyLOydOAf_T_VgJfITgs1eJiG5eqFC9ay_37SbH4,78173
 sourcecode/rule_catalog.py,sha256=pTkgkQZ1u7atB3fkQJ9BPWo8lNiamvEuRN7MtRgle0c,5263
 sourcecode/rule_pass.py,sha256=DTNxD-nAecMJhIzI1LCd9FyRumInQSZjitacNh4Zoc8,14671
-sourcecode/runs.py,sha256=zIxEPz9DBVVCrX958bZR6bODyfH56A6srAyc8LFMs8I,5303
+sourcecode/runs.py,sha256=o4oXkB3WFJGScbK_C10OAWzsE18B9Zc55u_IE8_yl4M,6291
 sourcecode/runtime_classifier.py,sha256=uTAD6BDCiBLUZEDRfqk718kM4RTT_vAbfkcOI2_Xx58,18432
 sourcecode/sarif.py,sha256=3hQEegUxIZbojFdY59oB-yKsK-rnafHdTNmYsEP2--A,25984
 sourcecode/scanner.py,sha256=z3CV0rcGunu0Y8mpNgp07wI7nxT0pxw1BkXRRtI0Rpo,9609
@@ -135,7 +135,7 @@ sourcecode/spring_security_audit.py,sha256=mj3juX0FRIGde1PREetAwLNWua7HMjUedVsOH
 sourcecode/spring_semantic.py,sha256=UrmLg_4gmBVmMqvSnUMgSReVEERVGv3X7LYDBEs6k_o,16598
 sourcecode/spring_tx_analyzer.py,sha256=f1L5EjxOP8nrDTogY7xmZ2HWNjQWXy-g7tI8LlnFThI,49545
 sourcecode/sql_taint.py,sha256=f_FBzosDAjVolsMOwk8ixl0mYLTW8a0MviZL-ZhN1qg,14830
-sourcecode/summarizer.py,sha256=0aD4x3vgPngqBCEBKGuES1J2Vk5f7mqCm_ZWErwm3js,27025
+sourcecode/summarizer.py,sha256=1je7-PfJ6A0BvZ9JzWzP7nijk6cb1KLQZajCVGAjDfE,27492
 sourcecode/target_admission.py,sha256=wFZ4pzlxhiF6Q6s2lEAZEzcCfj1Y6xNvujjt8MdO0Qo,7154
 sourcecode/test_gap_ranking.py,sha256=hl-tTyQUXZGJycG1b6npbLeE_DaVHaOsvPwG9qqC5y8,15711
 sourcecode/test_sources.py,sha256=6qXI47rVt_DFEbziFUyU-_KIUIGt8YQ5Uf4-sdiAhKU,9277
@@ -211,8 +211,8 @@ sourcecode/telemetry/consent.py,sha256=pQdl-QeLl6Gcibn0eWHSKZrm-HYSsjpVqOnjrgFp8
 sourcecode/telemetry/events.py,sha256=4_yeO58U-Cwc1Qb27VB0_EjhmroY0k91n3_VGxeALB8,2776
 sourcecode/telemetry/filters.py,sha256=RzxauTz8HliO4BllQnXEXc7zTeqdCZi5MgqGEDuW7OQ,6570
 sourcecode/telemetry/transport.py,sha256=4gGHsq0WeY9VywEZXA3vUxykfiYnw9uuqfjAAec7F8o,1681
-sourcecode-5.3.0.dist-info/METADATA,sha256=NX_EVNWVc6pxbGlFsKzEsHBZy4HPeVp7ZazJfho0WWg,47104
-sourcecode-5.3.0.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-5.3.0.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
-sourcecode-5.3.0.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
-sourcecode-5.3.0.dist-info/RECORD,,
+sourcecode-5.3.1.dist-info/METADATA,sha256=g4hkZFlApBXJ8VVIYkggwFVyUYCiAEb7c067OcNESJk,47104
+sourcecode-5.3.1.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-5.3.1.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
+sourcecode-5.3.1.dist-info/licenses/LICENSE,sha256=7DdHrU9Z_3e7dSvq4ISijZNjnuHo5NIHNiHDouMQ9JU,10491
+sourcecode-5.3.1.dist-info/RECORD,,