sourcecode 5.5.5__tar.gz → 5.6.1__tar.gz

{sourcecode-5.5.5 → sourcecode-5.6.1}/CHANGELOG.md

@@ -2,6 +2,32 @@
 
 ## [Unreleased]
 
+## [5.6.0] — 2026-08-13
+
+### Legal And Provenance
+- Began a prospective proprietary licensing model for ASK Engine. Releases up
+  to and including 5.5.6 remain Apache-2.0; this change does not revoke prior
+  grants.
+- Added `NOTICE`, package authorship and proprietary license metadata, bundled
+  license notices, and explicit contribution IP terms.
+- `ask version` now publishes product attribution, license identity and build
+  provenance fields. Release signing and legal review remain required before
+  third-party distribution.
+
+## [5.5.6] — 2026-08-13
+
+### Fixed
+- `impact` now projects from the canonical IR, restoring typed static-method
+  callers without merging unrelated service-locator accessors.
+- Legacy servlet descriptors account for mappings whose servlet declaration is
+  unavailable, and timeline Git metadata is decoded as UTF-8.
+- Class FQNs remain class FQNs when used as impact seeds.
+
+### Documentation
+- Recorded the 5.5.5 re-audit balance, cache-measurement retractions, fixes,
+  and remaining output-budget, schema, timeline-cost, Git-basis and release
+  ledger work.
+
 ## [5.5.5] — 2026-08-13
 
 **MSAS performance-audit corrections and read-only hygiene verification.**

{sourcecode-5.5.5 → sourcecode-5.6.1}/CONTRIBUTING.md

@@ -2,6 +2,14 @@
 
 Thank you for your interest in contributing. This document covers how to set up a development environment, run tests, and submit changes.
 
+## Intellectual Property
+
+ASK Engine 5.6.0 and later are proprietary. Do not submit code, documentation,
+or other materials unless a written contribution, assignment, or services
+agreement with Dominique Haroun states the applicable intellectual-property
+terms. A pull request, issue, or discussion alone does not assign rights or
+create a license.
+
 ---
 
 ## Code of Conduct
@@ -20,7 +28,7 @@ This project follows the [Contributor Covenant Code of Conduct](CODE_OF_CONDUCT.
 ### Local setup
 
 ```bash
-git clone https://github.com/sourcecode-ai/sourcecode
+git clone https://github.com/HarounDominique/sourcecode
 cd sourcecode
 pip install -e ".[dev]"
 ```
@@ -237,4 +245,7 @@ Features that add flags without clear agent-oriented use cases will be declined.
 
 ## License
 
-By submitting a contribution, you agree that it will be licensed under the [Apache 2.0 License](LICENSE).
+ASK Engine 5.6.0 and later are proprietary. Review the [LICENSE](LICENSE),
+[NOTICE](NOTICE), and the Intellectual Property section above before proposing
+work. Contributions require a separate written agreement; a pull request does
+not itself assign rights or grant a license.

sourcecode-5.6.1/LICENSE

@@ -0,0 +1,47 @@
+ASK Engine Proprietary License
+Version 1.0, effective 2026-08-13
+
+Copyright (c) 2026 Dominique Haroun. All rights reserved.
+
+1. Scope
+
+This license applies to ASK Engine version 5.6.1 and later, including its source
+code, documentation, and distributed artifacts (the "Software"). It does not
+alter the license of versions 5.5.6 and earlier, which were distributed under
+the Apache License, Version 2.0. Grants made for those earlier versions remain
+governed by their published license terms.
+
+2. No Implied Grant
+
+Except under a separate written agreement signed by Dominique Haroun, no right
+or license is granted to use, copy, modify, distribute, sublicense, sell,
+reverse engineer, or create derivative works of the Software. Possession of a
+copy, access to a repository, or access to a distributed artifact does not
+create an implied license.
+
+3. Third-Party Materials
+
+Third-party dependencies and materials included with the Software remain subject
+to their own license terms. This license does not supersede those terms.
+
+4. Trademarks
+
+"ASK Engine", "ASK", and associated marks are identifiers of the Software.
+No trademark license is granted except as required to identify an unmodified,
+lawfully obtained copy of the Software.
+
+5. No Warranty
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE,
+AND NON-INFRINGEMENT. TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE COPYRIGHT
+HOLDER SHALL NOT BE LIABLE FOR ANY CLAIM, DAMAGES, OR OTHER LIABILITY ARISING
+FROM OR IN CONNECTION WITH THE SOFTWARE.
+
+6. Contact
+
+Commercial, evaluation, redistribution, and contribution terms require a
+written agreement with Dominique Haroun.
+
+This license text is an operational policy draft and must be reviewed by
+qualified counsel before distribution to third parties.

sourcecode-5.6.1/NOTICE

@@ -0,0 +1,8 @@
+ASK Engine
+Copyright (c) 2026 Dominique Haroun. All rights reserved.
+
+ASK Engine and its source code were originally created and developed by
+Dominique Haroun.
+
+This NOTICE applies to ASK Engine 5.6.1 and later. Earlier releases may carry
+different license terms; see the license distributed with the applicable release.

{sourcecode-5.5.5 → sourcecode-5.6.1}/PKG-INFO

@@ -1,13 +1,18 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 5.5.5
+Version: 5.6.1
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
+Project-URL: Homepage, https://github.com/HarounDominique/sourcecode
+Project-URL: Repository, https://github.com/HarounDominique/sourcecode
+Author: Dominique Haroun
+License: Proprietary; see LICENSE
 License-File: LICENSE
+License-File: NOTICE
 Keywords: agents,ai,codebase,context,developer-tools,llm
 Classifier: Development Status :: 4 - Beta
 Classifier: Environment :: Console
 Classifier: Intended Audience :: Developers
-Classifier: License :: OSI Approved :: Apache Software License
+Classifier: License :: Other/Proprietary License
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: Python :: 3
 Classifier: Programming Language :: Python :: 3.9
@@ -42,9 +47,13 @@ Description-Content-Type: text/markdown
 
 **Context · Impact · Migration · Architecture · Review — everything from one structural model.**
 
-![Version](https://img.shields.io/badge/version-5.5.5-blue)
+![Version](https://img.shields.io/badge/version-5.6.1-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
+Copyright (c) 2026 Dominique Haroun. All rights reserved. ASK Engine 5.6.1 and
+later are proprietary; see [LICENSE](LICENSE) and [NOTICE](NOTICE). Releases up
+to and including 5.5.6 remain governed by their published Apache-2.0 terms.
+
 > **ASK Engine** is the product. The CLI command is **`ask`**. The legacy **`sourcecode`**
 > command still works as a deprecated alias (it prints a one-line notice and forwards to
 > `ask`) and remains the Python/PyPI package name for now. The authoritative version is
@@ -126,7 +135,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.5.5 — and, on a build that has aged,
+ask version                    # ask 5.6.1 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 

{sourcecode-5.5.5 → sourcecode-5.6.1}/README.md

@@ -4,9 +4,13 @@
 
 **Context · Impact · Migration · Architecture · Review — everything from one structural model.**
 
-![Version](https://img.shields.io/badge/version-5.5.5-blue)
+![Version](https://img.shields.io/badge/version-5.6.1-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
+Copyright (c) 2026 Dominique Haroun. All rights reserved. ASK Engine 5.6.1 and
+later are proprietary; see [LICENSE](LICENSE) and [NOTICE](NOTICE). Releases up
+to and including 5.5.6 remain governed by their published Apache-2.0 terms.
+
 > **ASK Engine** is the product. The CLI command is **`ask`**. The legacy **`sourcecode`**
 > command still works as a deprecated alias (it prints a one-line notice and forwards to
 > `ask`) and remains the Python/PyPI package name for now. The authoritative version is
@@ -88,7 +92,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.5.5 — and, on a build that has aged,
+ask version                    # ask 5.6.1 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 

{sourcecode-5.5.5 → sourcecode-5.6.1}/docs/DEMO-5MIN.md

@@ -12,7 +12,7 @@ the same commits; exact counts drift as the upstream repos evolve.
 
 ```bash
 pip install sourcecode          # or: brew install sourcecode
-ask version              # 2.2.0
+ask version              # confirm the installed ASK Engine build
 
 # Two public enterprise Java repos
 git clone https://github.com/BroadleafCommerce/BroadleafCommerce

{sourcecode-5.5.5 → sourcecode-5.6.1}/docs/DEVELOPMENT-ROADMAP.md

@@ -3,6 +3,20 @@
 *Chief-engineer development record. This is the internal, dev-facing counterpart to the
 customer-facing `docs/EXECUTIVE-ROADMAP.md`.*
 
+> **PHASE UPDATE 2026-08-14 (audit ASK Engine 5.5.6 corpus, published same day).
+>** The latest field audit landed a tighter bug battery on the CLI surface and the
+> endpoint census. The open items that matter for this round are now explicit in the
+> work queue: **ASK-01** dynamic `OUTPUT_TOO_LARGE` hints that stop repeating flags
+> already present, **ASK-02** endpoint coverage/gap reporting for functional WebFlux
+> routes, **ASK-03** a single predictable output-budget policy, **ASK-05** parse-cache
+> budget accounting that tells the truth about current overage, and **ASK-06**
+> stderr-only provenance lines that break scripted captures. The UX-only items
+> (**ASK-04**, **ASK-07**) stay tracked as follow-up work, not as this fix battery.
+>
+> **Fix order for this battery:** ASK-01 → ASK-02 → ASK-05 → ASK-06 → version bump.
+> One commit per fix, no feature detours, and every change verified against a
+> regression test before moving to the next row.
+
 > **PHASE UPDATE 2026-08-12 (audit #29 — the re-audit of 5.4.0, published the
 > same day, `age_days: 0`).** Same subject (`saint-server @ 3dde037`, branch
 > `banyan-v2`, 3 342 Java / 3 574 endpoints), same protocol (`ASK_READONLY=1` +

{sourcecode-5.5.5 → sourcecode-5.6.1}/docs/MANUAL-USUARIO.md

@@ -916,7 +916,8 @@ ask mcp remove      # quita la integración de todos los clientes configurados
 ask activate SC-XXXX-XXXX-XXXX
 ```
 
-Valida la clave contra el servidor de licencias y la guarda en `~/.sourcecode/license.json`.
+Valida la clave contra el servidor de licencias y la guarda en `~/.ask/license.json`.
+Las instalaciones previas siguen pudiendo leerse desde `~/.sourcecode/license.json`.
 - `LICENSE_KEY` (obligatorio): tu clave Pro.
 
 ### `auth` — autenticación
@@ -946,7 +947,8 @@ respuesta produce esa ausencia (`answered: false`).
 ```bash
 ask version
 ```
-Muestra la versión y sale (equivalente a `ask --version`).
+Muestra la versión, atribución, licencia y procedencia del build. `ask --version`
+mantiene el alias breve de versión para compatibilidad.
 
 ### `telemetry` — telemetría anónima
 

{sourcecode-5.5.5 → sourcecode-5.6.1}/docs/PRODUCT_TIERS.md

@@ -27,7 +27,7 @@ product decision, not an oversight — see `is_large_repo()` in `license.py`.
 
 ---
 
-## Free (Apache 2.0)
+## Free (proprietary distribution)
 
 **Every command, full power, on repos up to 500 Java source files. Local,
 single-repo, offline.**

{sourcecode-5.5.5 → sourcecode-5.6.1}/docs/RELEASE-CHECKLIST.md

@@ -64,7 +64,7 @@ Prerequisites: Supabase project + CLI (`supabase`), a Lemon Squeezy store, and t
 - [ ] `users.status` → `inactive`.
 - [ ] After the revalidation TTL (30 min; or point `SOURCECODE_SUPABASE_URL` at the live
   project to force a fresh check), run smoke **Section C**: the Pro command on the large
-  repo exits **2** (access removed). `~/.sourcecode/license.json` is cleared.
+  repo exits **2** (access removed). `~/.ask/license.json` is cleared.
 
 ## 10. Turn the paywall ON (last step)
 - [ ] Only after 1–9 pass: set the default so Pro is enforced —
@@ -86,8 +86,8 @@ Decide **before** step 10:
   set the real `SOURCECODE_PURCHASE_URL` above.
 - [ ] **P1** — should `migrate-check` (the modernization buy-trigger) gate on large repos,
   or stay free lead-gen? *(open product decision)*
-- [x] **D1** — public brand unified to **ASK Engine** (CLI: `sourcecode`) (Increment #2.3).
-- [x] **D2** — version drift fixed; docs aligned to `1.73.0` (Increment #2.3).
+- [x] **D1** — public brand unified to **ASK Engine** (CLI: `ask`; `sourcecode` is a deprecated alias).
+- [x] **D2** — version claims are verified against the build by `tests/test_published_version_claims.py`.
 
 ## Rollback
 - [ ] Set `SOURCECODE_PRO_UNLOCK=1` (or revert the default) → everyone is Pro again;

{sourcecode-5.5.5 → sourcecode-5.6.1}/docs/USER_GUIDE.md

@@ -136,7 +136,7 @@ pipx install sourcecode   # isolated install, no venv needed
 
 # Verify
 ask version
-# ask 5.5.5
+# ask 5.6.1
 ```
 
 Requires Python 3.9+.
@@ -157,7 +157,10 @@ On success:
 {"status": "activated", "plan": "pro", "features": ["impact", "review-pr", "fix-bug", "modernize", "generate-tests"]}
 ```
 
-License is cached in `~/.sourcecode/license.json` and re-validated every 24 hours. Works offline after first activation — network errors keep the cached state.
+License is cached in `~/.ask/license.json` and re-validated every 24 hours.
+The legacy `~/.sourcecode/license.json` location remains readable for existing
+installations. Works offline after first activation — network errors keep the
+cached state.
 
 ---
 

{sourcecode-5.5.5 → sourcecode-5.6.1}/docs/commercial-pipeline-audit.md

@@ -22,7 +22,7 @@ Estados: **[V]** implementado y validado · **[I]** implementado, no validado ·
         │                                                                               │
         ▼                                                                               │
   ask activate <key>  ──POST /get-license──►  supabase/functions/get-license ────┘
-        │  escribe ~/.sourcecode/license.json (0600)
+        │  escribe ~/.ask/license.json (0600; ~/.sourcecode sigue siendo legado de lectura)
         ▼
   Comandos Pro  ──gates──►  require_repo_or_pro / require_feature / check_delta_free_tier
         │  revalidación cada 30 min (24 h en CI); offline-first

{sourcecode-5.5.5 → sourcecode-5.6.1}/docs/privacy.md

@@ -29,7 +29,8 @@ Precedence, highest first:
 
 ## Why telemetry exists
 
-`sourcecode` is an open source tool with no usage visibility by default. Anonymous telemetry helps answer questions like:
+ASK Engine is a local analysis tool with no usage visibility by default.
+Anonymous telemetry helps answer questions like:
 
 - Which commands do developers actually use?
 - What flag combinations are common?

{sourcecode-5.5.5 → sourcecode-5.6.1}/pyproject.toml

@@ -4,18 +4,19 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sourcecode"
-version = "5.5.5"
+version = "5.6.1"
 description = "Persistent structural context and ultra-fast repeated analysis for AI coding agents"
 readme = "README.md"
 requires-python = ">=3.9"
-license-expression = "Apache-2.0"
-license-files = ["LICENSE"]
+license = { text = "Proprietary; see LICENSE" }
+license-files = ["LICENSE", "NOTICE"]
+authors = [{ name = "Dominique Haroun" }]
 keywords = ["ai", "llm", "agents", "context", "codebase", "developer-tools"]
 classifiers = [
     "Development Status :: 4 - Beta",
     "Environment :: Console",
     "Intended Audience :: Developers",
-    "License :: OSI Approved :: Apache Software License",
+    "License :: Other/Proprietary License",
     "Operating System :: OS Independent",
     "Programming Language :: Python :: 3",
     "Programming Language :: Python :: 3.9",
@@ -25,6 +26,7 @@ classifiers = [
     "Topic :: Software Development :: Libraries :: Python Modules",
     "Topic :: Utilities",
 ]
+
 dependencies = [
     "typer>=0.24",
     "pathspec>=1.0",
@@ -34,6 +36,10 @@ dependencies = [
     "defusedxml>=0.7",
 ]
 
+[project.urls]
+Homepage = "https://github.com/HarounDominique/sourcecode"
+Repository = "https://github.com/HarounDominique/sourcecode"
+
 [project.scripts]
 ask = "sourcecode.cli:main_entry"
 sourcecode = "sourcecode.cli:main_entry"  # deprecated compat alias — removed in a future major
@@ -78,6 +84,8 @@ packages = ["src/sourcecode"]
 [tool.hatch.build.targets.wheel.force-include]
 "docs/USER_GUIDE.md" = "sourcecode/_docs/USER_GUIDE.md"
 "docs/DEFECT-LEDGER.md" = "sourcecode/_docs/DEFECT-LEDGER.md"
+"LICENSE" = "sourcecode/_docs/LICENSE"
+"NOTICE" = "sourcecode/_docs/NOTICE"
 
 [tool.pytest.ini_options]
 testpaths = ["tests"]

{sourcecode-5.5.5 → sourcecode-5.6.1}/src/sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "5.5.5"
+__version__ = "5.6.1"

{sourcecode-5.5.5 → sourcecode-5.6.1}/src/sourcecode/cli.py

@@ -1392,6 +1392,23 @@ def _analysis_budget(command: str) -> dict[str, Any]:
     }
 
 
+def _migrate_check_output_hint(*, compact: bool, min_severity: str) -> str:
+    """Build the output-size hint from the flags the caller already used."""
+    ways_out: list[str] = []
+    if not compact:
+        ways_out.append("--compact (bounded decision summary, same report)")
+    if min_severity != "high":
+        ways_out.append("--min-severity high to drop low-severity findings")
+    ways_out.append("--output FILE to save to disk")
+    ways_out.append("--force to bypass this guard")
+    prefix = (
+        "No smaller inline variant is available with the current flags; "
+        if compact and min_severity == "high"
+        else "Use "
+    )
+    return prefix + ", ".join(ways_out) + "."
+
+
 def _budget_evidence(command: str, path: "Optional[Path]") -> "tuple[Optional[str], Optional[str]]":
     """(measured anchors for this command, size of this repository) — or Nones.
 
@@ -1439,6 +1456,8 @@ def _enforce_analysis_budget(
         return
     source = budget.get("configured_source")
     from sourcecode.phased_run import budget_provenance, budget_warning
+    if not getattr(sys.stderr, "isatty", lambda: False)():
+        return
 
     if float(configured) >= recommended:
         # C3-83: over the floor there is no advice to give, and there is still a
@@ -6311,9 +6330,8 @@ def impact_cmd(
 
     _enforce_format("impact", format)
 
-    from sourcecode.repository_ir import (
-        build_repo_ir, find_java_files, compute_blast_radius,
-    )
+    from sourcecode.repository_ir import find_java_files, compute_blast_radius
+    from sourcecode.context_graph import ContextGraph
     from sourcecode.output_budget import BUDGET_IMPACT
 
     # Legacy-compat: old syntax was `impact <path> <target>`.
@@ -6366,9 +6384,16 @@ def impact_cmd(
         return
 
     _prog = Progress()
-    _prog.start(f"building IR ({len(file_list)} files) for impact analysis")
+    _prog.start(f"building CIR ({len(file_list)} files) for impact analysis")
     try:
-        ir = build_repo_ir(file_list, root)
+        # `impact-chain` resolves callers from the canonical IR, whose typed body
+        # facts contribute method-level call edges. Reading the legacy parse-only
+        # IR here made `impact` miss static calls (including locator accessors).
+        from sourcecode import context_cache as _ctxcache
+        try:
+            cir = _ctxcache.shared_cir(root, file_list, progress=_work_sink(_prog))
+        except Exception:
+            cir = ContextGraph.build(file_list, root, progress=_work_sink(_prog)).cir
     finally:
         _prog.finish()
 
@@ -6379,7 +6404,7 @@ def impact_cmd(
     # skipped the budget when writing to a file (C2-2).
     _to_file = output_path is not None
     result = compute_blast_radius(
-        ir, target, max_depth=depth, list_limit=0 if _to_file else None, root=root
+        cir._raw_ir, target, max_depth=depth, list_limit=0 if _to_file else None, root=root
     )
     result = _apply_budget(result, BUDGET_IMPACT, label="impact", output_path=output_path)
     if _misread and result.get("resolution") == "not_found":
@@ -9244,6 +9269,7 @@ def spring_audit_cmd(
                 _ris_sa(target, data)
             except Exception:
                 pass
+            output = _serialize_dict(data, format)
         finally:
             # C3-54: `done` must not claim the answer exists before it does. The
             # field log showed `[ask] done (6.8m)` printed, then the process torn
@@ -9259,21 +9285,6 @@ def spring_audit_cmd(
         )
     elif format == "github-comment":
         output = _render_spring_audit_github_comment(combined, min_severity)
-    else:
-        _full_data = combined.to_dict()
-        _bounded_default = (
-            not compact and output_path is None and format == "json" and not table
-            and len(_json.dumps(_full_data, ensure_ascii=False).encode("utf-8")) > 50_000
-        )
-        data = combined.to_compact_dict() if compact or _bounded_default else _full_data
-        if _bounded_default:
-            data.pop("mode", None)
-            data["default_output"] = "bounded"
-            data.pop("compact_note", None)
-            data["stdout_budget_note"] = (
-                "Capped by the stdout payload budget; use --output <file> for the complete report."
-            )
-        output = _serialize_dict(data, format)
 
     # F-AV: our own readers ask for the count under either spelling — the break
     # is meant for a consumer that never asked whether the run finished.
@@ -11191,11 +11202,7 @@ def migrate_check_cmd(
             "OUTPUT_TOO_LARGE",
             f"Estimated output is ~{_mig_tokens_est // 1000}K tokens — too large for "
             "most LLM context windows.",
-            hint=(
-                "Use --compact (bounded decision summary, same report), "
-                "--min-severity high to drop low-severity findings, "
-                "--output FILE to save to disk, or --force to bypass this guard."
-            ),
+            hint=_migrate_check_output_hint(compact=compact, min_severity=min_severity),
             expected="Output under 50K estimated tokens.",
         )
         raise typer.Exit(1)
@@ -12695,17 +12702,18 @@ def version_cmd(
     copy: bool = _copy_option(),
     output_path: Optional[Path] = _output_option(),
 ) -> None:
-    """Show version and exit.
+    """Show version, attribution, license and build provenance.
 
     Outputs human-readable text on interactive terminals.
     Outputs structured JSON on non-TTY (MCP, pipes, scripts):
       {"cli_version": "1.33.11", "mcp_schema_version": "1.33.11",
-       "compatibility_schema_version": "1.0"}
+       "compatibility_schema_version": "1.0", "provenance": {...}}
     """
     from sourcecode.release_info import advisory_line, build_status
+    from sourcecode.product_info import COPYRIGHT, PRODUCT, TAGLINE, build_provenance
 
     if getattr(sys.stdout, "isatty", lambda: False)():
-        _lines = [f"ask {__version__}"]
+        _lines = [f"{PRODUCT} {__version__}", TAGLINE, COPYRIGHT]
         # C4-12: the field audits builds that are days old and many releases
         # behind, and nothing said so. Printed only when it applies — an advisory
         # on every run is one nobody reads.
@@ -12732,6 +12740,7 @@ def version_cmd(
             # Same list `ask schema` prints, so the two surfaces cannot disagree
             # about what this release publishes.
             "registries": ["facts-v1"],
+            "provenance": build_provenance(),
         }, ensure_ascii=_json_ensure_ascii()), copy, output_path)
 
 
@@ -14234,12 +14243,20 @@ def cache_status_cmd(
             if "budget_bytes" in _store:
                 _budget_mb = _store.get("budget_mb")
                 _env = _store.get("budget_env")
+                _over_by = _store.get("over_budget_by_mb")
+                _current_mb = _store.get("current_mb")
                 if _store.get("budget_bytes"):
-                    _over = " — OVER, the next write evicts" if _store.get("over_budget") else ""
-                    _answer.say(
-                        f"{'':<13}budget {_budget_mb} MB, {_store.get('policy')} "
-                        f"(${_env}){_over}"
-                    )
+                    if _store.get("over_budget"):
+                        _answer.say(
+                            f"{'':<13}budget {_budget_mb} MB, {_store.get('policy')} "
+                            f"(${_env}); current {_current_mb} MB, over by {_over_by} MB "
+                            "— the next write evicts"
+                        )
+                    else:
+                        _answer.say(
+                            f"{'':<13}budget {_budget_mb} MB, {_store.get('policy')} "
+                            f"(${_env})"
+                        )
                 else:
                     _answer.say(f"{'':<13}{_store.get('policy')} (${_env})")
         # RIS section

{sourcecode-5.5.5 → sourcecode-5.6.1}/src/sourcecode/parse_cache.py

@@ -440,6 +440,11 @@ def store_stats() -> "dict[str, object]":
         **_budget,
         "over_budget": bool(_limit) and total > _limit,
     }
+    if _limit:
+        out["over_budget_by_mb"] = round(
+            max(0, total - _limit) / (1024 * 1024), 2
+        )
+        out["current_mb"] = round(total / (1024 * 1024), 2)
     _stale = [g for g in generations if not g["current"]]
     if _stale:
         out["stale_entries"] = sum(int(g["entries"]) for g in _stale)

{sourcecode-5.5.5 → sourcecode-5.6.1}/src/sourcecode/path_filters.py

@@ -183,6 +183,8 @@ def is_test_fixture_module_path(path: str) -> bool:
         bare = part.rstrip("/")
         if bare in _TEST_MODULE_SEGMENTS:
             return True
+        if bare.endswith(("-test", "-tests", "-it", "-itest", "-itests")):
+            return True
         if bare.endswith(_TEST_INFRA_SUFFIXES):
             return True
         toks = bare.replace("_", "-").split("-")

{sourcecode-5.5.5 → sourcecode-5.6.1}/src/sourcecode/phased_run.py

@@ -41,6 +41,7 @@ from __future__ import annotations
 import hashlib
 import json
 import os
+import tempfile
 import time
 from dataclasses import dataclass, field
 from pathlib import Path
@@ -71,7 +72,7 @@ def partials_dir(root: Path) -> Path:
     except Exception:
         key_source = str(Path(root).absolute())
     key = hashlib.sha256(key_source.encode("utf-8", errors="replace")).hexdigest()[:16]
-    return Path.home() / ".sourcecode" / "partials" / key
+    return Path(tempfile.gettempdir()) / "sourcecode" / "partials" / key
 
 
 @dataclass

sourcecode-5.6.1/src/sourcecode/product_info.py

@@ -0,0 +1,22 @@
+"""Product identity and build provenance for official ASK Engine artifacts."""
+
+from __future__ import annotations
+
+import os
+
+PRODUCT = "ASK Engine"
+TAGLINE = "Actionable Software Knowledge Engine"
+COPYRIGHT = "Copyright (c) 2026 Dominique Haroun. All rights reserved."
+PUBLISHER = "Dominique Haroun"
+LICENSE_ID = "LicenseRef-ASK-Proprietary"
+
+
+def build_provenance() -> dict[str, str]:
+    """Return build facts without discovering state from the user's repository."""
+    return {
+        "product": PRODUCT,
+        "publisher": PUBLISHER,
+        "license": LICENSE_ID,
+        "distribution": os.environ.get("ASK_DISTRIBUTION", "official"),
+        "build_commit": os.environ.get("ASK_BUILD_COMMIT", "unrecorded"),
+    }