sourcecode 5.8.12__py3-none-any.whl → 5.8.13__py3-none-any.whl

sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "5.8.12"
+__version__ = "5.8.13"

sourcecode/_docs/DEFECT-LEDGER.md

@@ -16,7 +16,7 @@ The facts these rows are keyed to are published: `ask schema facts-v1` prints th
 
 ## Current Synchronization
 
-**As of 2026-08-19, the external `5.8.11` re-audit:** this is the current status of
+**As of 2026-08-20, release `5.8.13` and the external `5.8.11` re-audit:** this is the current status of
 the 5.8.8/5.8.9 audit queue. The subject remained `saint-server` at `3dde0376`, with a
 byte-identical CIR and the same 53/61 invocables exercised. The score is **78/100**
 (75 in 5.8.8, 80 in 5.8.9). The observations below remain historical evidence; only
@@ -30,6 +30,7 @@ this table declares present state.
 | `AUD-588-B05` | **closed** | `c15f5b6`; changed container-wired components block a false `unaffected` disposition. |
 | `AUD-511-R03` / `AUD-588-B07` | **implemented in 5.8.12** | `47aee1e` gives the published `OUTPUT_TOO_LARGE` envelope precedence over an inconsistent process status and preserves the excerpt in every branch. |
 | `AUD-588-B08` | **closed** | `c084555`; `impact` publishes its independent stdout-byte budget. |
+| `MCP-001` | **closed 5.8.13** | Deep corpus testing reproduced concurrent `CliRunner` stream capture leaking a tool response to the host stdout. `b2c9660` serializes the narrow process-global capture seam; concurrent real MCP calls and a regression test verify response isolation. |
 | `AUD-588-B11` (container/units subset) | **partially implemented in 5.8.12** | `d745d31` discovers nested Maven modules; `273ae8e` suppresses unsupported `pr-impact.unaffected_basis`. `impact` naming, source population units, risk tiers and plan narrative remain open. |
 | `AUD-511-R02` / `AUD-589-B02` | **partially mitigated in 5.8.12, still under investigation** | `b93f230` reuses one `SpringSemanticModel` across every declared `data-exposure` seed; `473f47a` routes `validation` through the shared CIR cache, and `91bd0c0` retains subcommand `--no-cache` compatibility. On the local BroadleafCommerce corpus at the final analyzer fingerprint, a first shared-CIR fill took 10.46 s and its warm `validation --compact` hit took 4.01 s with byte-identical output. This is a same-host cache-state observation, not the 5.8.9/5.8.11 external A/B: the six-run C3-120 comparison and the configured `saint-server` reproduction remain required. |
 | `AUD-588-B02`, `B06`, B11 residuals, `B12` | **partially open in 5.8.12** | `3869c87` excludes explicit EclipseLink from Hibernate applicability and effort; `037223e` publishes provider non-coverage. B11 parity and controlled cost calibration remain required. |
@@ -594,7 +595,7 @@ class's subject, not its provenance.
 
 | ID | Item | Found | Severity | Status |
 |---|---|---|---|---|
-| P-1 | Telemetry is **opt-out**. Auditing a public-sector health client's code, it must be disabled *before* the first run, not after | 3.2.0 | **High (procurement)** | **closed 3.3.0** — opt-in: with no explicit choice on record, `is_enabled()` is False everywhere, so a fresh install transmits nothing on the run that prints the notice. The CI special case is gone with the default it existed to override; CI is still detected for one purpose, skipping a notice that has no terminal to appear on. The first-run notice became an invitation that states what *would* be collected. `telemetry status` distinguishes "no choice recorded" from "you chose disabled" (`stored_choice()` returns `None`, not `False`) — a buyer auditing this needs to know which one they have. An explicit choice made before the change is honoured unchanged |
+| P-1 | Telemetry default and procurement disclosure | 3.2.0 | **High (procurement)** | **reopened and corrected 5.8.12** — telemetry is on by default by explicit product decision, with `ask telemetry disable`, `SOURCECODE_TELEMETRY=0` and `DO_NOT_TRACK=1` honored before any event is sent. The first-run notice discloses the fields and the disable path. `telemetry status` distinguishes the default from an explicit disabled choice; the privacy policy documents the endpoint, 90-day retention and bounded anonymous fields. This supersedes the historical 3.3.0 opt-in closure for the current release |
 | P-2 | Licence state is ambiguous: `auth status` → `{"status":"unauthenticated","pro":true,"pro_reason":"early-adoption unlock"}`. The buyer cannot tell what it will cost or what they lose when the door closes | 3.2.0 | Medium | **closed 3.4.0** — one authority, `license.entitlement()`: `entitlement` (what runs), `source` (why: `license_key` / `early_adoption_unlock` / `free_tier`), `authenticated` (a separate fact — today one can be entitled without a credential), `paywall_active`, and `when_it_changes`, which states what the user loses when that source stops applying, in the terms the gate uses and **never as a price**. `is_pro` — what every gate reads — is now derived from it rather than computed beside it, which is how the status page came to contradict the commands. The legacy keys stay for consumers, are derived from the authority, and are listed in `deprecated_fields` |
 
 | P-3 | **The price is not published.** With P-2 closed the entitlement is unambiguous, but a buyer still cannot see what Pro costs or what a team of 25 pays. Eval #5 lists *"precio Pro público"* among the conditions for the top of its price band, beside the robustness fixes | 3.2.1 (eval #5) | Medium (procurement) | open — packaging question, not a page: the field's own reading is that **the value is frontal** (a first audit replaces 5–15 person-days) **and the recurring half is the CI gate**, so a full seat subscription on a product whose value peaks on run one *"genera churn en el mes 4"*. Model to test: one-off assessment **3–5 k€ per repo** + **8–12 €/dev/month** for the gate. Depends on C3-22: without the gate there is nothing recurring to sell |

sourcecode/_docs/USER_GUIDE.md

@@ -138,7 +138,7 @@ pipx install sourcecode   # isolated install, no venv needed
 
 # Verify
 ask version
-# ask 5.8.12
+# ask 5.8.13
 ```
 
 Requires Python 3.9+.
@@ -1199,7 +1199,7 @@ explaining. The rest do one thing; `ask <command> --help` is the whole story.
 | `ask retrieve` | parked | Typed knowledge queries over the model — kept working, no longer developed |
 | `ask baseline capture\|diff\|trend` | supported | Versioned architectural metrics over time; see [`ask trend`](#ask-trend-dir--how-the-architecture-moved) |
 | `ask cache status\|warm\|model\|clear\|freshness` | supported | Cache inspection; `ask cache model` states what a warm buys each command |
-| `ask config` · `ask version` · `ask activate` · `ask auth` · `ask telemetry` · `ask mcp` | supported | Configuration, version, licence, authentication, telemetry (off by default), MCP integration |
+| `ask config` · `ask version` · `ask activate` · `ask auth` · `ask telemetry` · `ask mcp` | supported | Configuration, version, licence, authentication, telemetry (on by default), MCP integration |
 
 ## Typical workflows
 
@@ -1287,7 +1287,7 @@ ask mcp serve
 ask mcp remove
 ```
 
-The MCP server exposes structural analysis tools to AI agents without requiring the agent to call the CLI directly. Claude Desktop and Cursor can query impact, endpoints, and context through the MCP protocol.
+The MCP server exposes structural analysis tools to AI agents without requiring the agent to call the CLI directly. Claude Desktop and Cursor can query impact, endpoints, and context through the MCP protocol. Concurrent requests are accepted safely: ASK serializes only the in-process CLI capture seam, because its stdout/stderr redirection is process-global, so one tool response cannot contaminate another.
 
 ---
 

sourcecode/cli.py

@@ -3033,13 +3033,59 @@ def _get_command_with_preprocessing(typer_instance: Any) -> Any:
 
     _orig_cmd_main = cmd.main
 
+    _TELEMETRY_COMMANDS = frozenset({
+        "repo-ir", "impact", "endpoints", "export", "validation", "delta", "contract-diff",
+        "plan", "compare", "trend", "timeline", "spring-audit", "verify-edit", "verify", "risk",
+        "enrich", "audit-report", "migrate-recipe", "data-exposure", "posture", "migrate-check",
+        "impact-chain", "pr-impact", "explain", "onboard", "review-pr", "fix-bug", "modernize",
+        "rename-class", "chunk-file", "activate", "selftest", "explain-endpoint", "regress", "version",
+        "schema", "config", "archetype", "cold-start", "telemetry", "mcp", "cache", "baseline",
+        "auth", "retrieve", "prepare-context",
+    })
+
+    def _telemetry_command(args_for_command: Optional[list[str]]) -> str:
+        """Extract only a registered CLI command, never a path or option value."""
+        tokens = list(args_for_command) if args_for_command is not None else sys.argv[1:]
+        for token in tokens:
+            if token in _TELEMETRY_COMMANDS:
+                return token
+        return "analyze"
+
+    def _telemetry_flags(args_for_command: Optional[list[str]]) -> list[str]:
+        tokens = list(args_for_command) if args_for_command is not None else sys.argv[1:]
+        try:
+            from sourcecode.telemetry.filters import _SAFE_FLAGS
+            return sorted({token for token in tokens if token in _SAFE_FLAGS})
+        except Exception:
+            return []
+
     def _cmd_main(args: Optional[list[str]] = None, **kwargs: Any) -> Any:
         if args is not None:
             # CliRunner / programmatic call: preprocess the explicit args list.
             _set_detected_path(".")
             args = _preprocess_args(list(args))
         # args=None → Click reads sys.argv; _preprocess_argv() in main_entry handled it.
-        return _orig_cmd_main(args=args, **kwargs)
+        started = time.monotonic()
+        command = _telemetry_command(args)
+        success = True
+        try:
+            return _orig_cmd_main(args=args, **kwargs)
+        except BaseException:
+            success = False
+            raise
+        finally:
+            try:
+                from sourcecode import telemetry as _tel
+                _tel.record(
+                    "execution_completed",
+                    cmd=("mcp" if command == "mcp" else "telemetry" if command == "telemetry" else "analyze"),
+                    command=command,
+                    flags=_telemetry_flags(args),
+                    duration_s=time.monotonic() - started,
+                    success=success,
+                )
+            except Exception:
+                pass
 
     cmd.main = _cmd_main
     return cmd
@@ -3055,7 +3101,7 @@ try:
 except Exception:
     pass
 
-telemetry_app = typer.Typer(help="Manage anonymous telemetry (off by default; opt-in).", rich_markup_mode="rich")
+telemetry_app = typer.Typer(help="Manage anonymous telemetry (on by default; disable any time).", rich_markup_mode="rich")
 app.add_typer(telemetry_app, name="telemetry")
 
 mcp_app = typer.Typer(help="MCP integration: setup, status, serve, remove.", rich_markup_mode="rich")
@@ -3083,9 +3129,8 @@ app.add_typer(retrieve_app, name="retrieve")
 def _maybe_show_telemetry_notice() -> None:
     """Show first-run telemetry notice once, on interactive TTYs only.
 
-    Telemetry is off by default (opt-in). The notice is an invitation, not a
-    disclosure: nothing has been collected when it appears. Marked as shown so it
-    appears only once.
+    Telemetry is on by default. The notice is a one-time disclosure of what is
+    collected and how to disable it.
     """
     try:
         from sourcecode.telemetry.config import has_been_asked, mark_asked
@@ -5314,26 +5359,7 @@ def main(
     perf.stop("serialize", _perf_serialize)
     perf.flush_recorder()
 
-    # 5. Telemetry (fire-and-forget, never blocks)
-    try:
-        from sourcecode import telemetry as _tel
-        _tel.record(
-            "execution_completed",
-            cmd="analyze",
-            flags=_active_flags(
-                dependencies, graph_modules, docs, full_metrics,
-                semantics, architecture, git_context, env_map,
-                code_notes, agent, compact, tree, no_redact, format,
-            ),
-            output_fmt=format,
-            file_count=len(sm.file_paths),
-            duration_s=time.monotonic() - _t0,
-            success=True,
-        )
-    except Exception:
-        pass
-
-    # 6. Write output (CLI-04)
+    # 5. Write output (CLI-04)
     _progress.finish()
     if format == "json":
         _uncommitted_fresh, _uncommitted_fresh_basis = _uncommitted_fact(
@@ -5926,17 +5952,6 @@ def prepare_context_cmd(
                 except Exception:
                     pass  # not JSON (or unreadable) → serve exactly what was stored
                 _emit_command_output(_cached_pctx, output_path, copy)
-                try:
-                    from sourcecode import telemetry as _tel
-                    _tel.record(
-                        "execution_completed",
-                        cmd="prepare-context",
-                        feature=task,
-                        output_fmt=format,
-                        duration_s=0.0,
-                    )
-                except Exception:
-                    pass
                 return
 
     _scope_files = None
@@ -6463,18 +6478,6 @@ def prepare_context_cmd(
         fmt=("yaml" if format == "yaml" else "json")
     )
 
-    try:
-        from sourcecode import telemetry as _tel
-        _tel.record(
-            "execution_completed",
-            cmd="prepare-context",
-            feature=task,
-            output_fmt=format,
-            duration_s=_time.perf_counter() - _t0,
-        )
-    except Exception:
-        pass
-
     from sourcecode.mcp_nudge import nudge_mcp_if_needed as _nudge
     _nudge()
 
@@ -6491,11 +6494,11 @@ def telemetry_status(
     enabled = is_enabled()
     choice = stored_choice()
     status = "enabled" if enabled else "disabled"
-    lines = [f"Telemetry: {status} (off by default; opt-in)"]
-    # "off because you said so" and "off because nobody asked you" are different
-    # answers, and a buyer auditing this needs to be told which one they have.
+    lines = [f"Telemetry: {status} (on by default; disable with `ask telemetry disable`)"]
+    # The default and an explicit disabled choice are different answers, and a
+    # buyer auditing this needs to be told which one they have.
     if choice is None:
-        lines.append("  No choice recorded — nothing has been collected or sent.")
+        lines.append("  No choice recorded — the on-by-default setting applies.")
     else:
         lines.append(f"  Your recorded choice: {'enabled' if choice else 'disabled'}.")
     lines.append(f"  Config: {config_file_path()}")
@@ -6508,7 +6511,7 @@ def telemetry_status(
 
 @telemetry_app.command("enable")
 def telemetry_enable() -> None:
-    """Opt in to anonymous telemetry."""
+    """Enable anonymous telemetry and remember the choice."""
     from sourcecode.telemetry.config import set_enabled
     from sourcecode import telemetry as _tel
     set_enabled(True)
@@ -6521,11 +6524,11 @@ def telemetry_enable() -> None:
 
 @telemetry_app.command("disable")
 def telemetry_disable() -> None:
-    """Opt out of anonymous telemetry."""
+    """Disable anonymous telemetry and remember the choice."""
     from sourcecode.telemetry.config import set_enabled
     set_enabled(False)
     typer.echo("Telemetry disabled. No data will be collected or sent.")
-    typer.echo("Telemetry is off by default; this choice is recorded so the notice stops asking.")
+    typer.echo("Telemetry is enabled by default; this choice is recorded so the notice stops appearing.")
     typer.echo("Re-enable at any time: ask telemetry enable")
 
 
@@ -14190,7 +14193,7 @@ def config_cmd(
     _answer = _TextAnswer(output_path)
     _answer.say(f"ask {__version__}")
     _answer.say(f"Config:    {config_file_path()}")
-    _answer.say(f"Telemetry: {'enabled' if is_enabled() else 'disabled'} (off by default; opt-in)")
+    _answer.say(f"Telemetry: {'enabled' if is_enabled() else 'disabled'} (on by default; disable with `ask telemetry disable`)")
     _answer.say("")
 
     # F-AX: the declaration may sit outside the analysed tree, and *which* file

sourcecode/mcp/runner.py

@@ -7,11 +7,15 @@ lookup, no process fork, no stdout encoding issues.
 from __future__ import annotations
 
 import json
+import threading
 from typing import Any
 
 from typer.testing import CliRunner
 
 _runner = CliRunner()
+# CliRunner temporarily replaces process-global stdout/stderr.  MCP dispatches
+# tools concurrently, so every in-process invocation must share this lock.
+_runner_lock = threading.RLock()
 
 
 class CommandError(RuntimeError):
@@ -44,7 +48,8 @@ def run_command(args: list[str]) -> Any:
     # Pass raw args to invoke — the _cmd_main hook inside cli.py handles path
     # extraction via _preprocess_args. Pre-processing here would strip the path
     # from args, then _cmd_main would re-process the stripped list and lose it.
-    result = _runner.invoke(app, list(args))
+    with _runner_lock:
+        result = _runner.invoke(app, list(args))
 
     if result.exit_code != 0:
         stdout_raw = getattr(result, "output", "")

sourcecode/mcp/server.py

@@ -51,9 +51,8 @@ def _record_tool_invocation(name: Any, success: bool, started: float) -> None:
 
     Aggregate only: which of our own tools ran, whether it succeeded, and a
     duration bucket. Never the arguments — those carry repository paths — and
-    never any result content. Honours the same opt-in as every other event
-    (off until `ask telemetry enable` or SOURCECODE_TELEMETRY=1); when
-    telemetry is off, `record` returns before building anything.
+    never any result content. Honours the same default-on setting as every other
+    event; `ask telemetry disable` or the documented environment controls stop it.
     """
     try:
         import time as _time
@@ -1480,7 +1479,7 @@ def telemetry(action: str) -> dict:
     """Manage telemetry settings.
 
     Maps to: ask telemetry <action>
-    action: one of "status" (show current state), "enable" (opt in), "disable" (opt out).
+    action: one of "status" (show current state), "enable", or "disable".
     Valid values: "status" | "enable" | "disable"
     """
     # FIX-P2-10: enumerate valid actions in docstring so agents don't guess.

sourcecode/release_info.py

@@ -27,7 +27,7 @@ from typing import Any, Optional
 #: The date `__version__` was released, from that version's CHANGELOG entry.
 #: `tests/test_release_info.py` fails the build if the two disagree, so this is
 #: a copy of a fact rather than a second authority for it.
-RELEASE_DATE = "2026-08-19"
+RELEASE_DATE = "2026-08-20"
 
 #: Releases per day, measured over the 30 releases before this one (the same
 #: computation the test re-runs against the CHANGELOG). Stable across window

sourcecode/telemetry/__init__.py

@@ -1,13 +1,12 @@
-"""sourcecode telemetry — anonymous usage metrics, off until you turn them on (opt-in).
+"""sourcecode telemetry — anonymous usage metrics, on by default.
 
 Public API:
     is_enabled()          → bool
     record(event, **kw)   → None  (fire-and-forget)
     session_id()          → str   (ephemeral 8-char hex, new each process)
 
-Telemetry is opt-in and stays anonymous: nothing is collected until `ask telemetry
-enable` (or SOURCECODE_TELEMETRY=1). It was opt-out until 3.3.0 — see config.py for
-why the default moved.
+Telemetry is enabled by default and stays anonymous. Disable it with `ask telemetry
+disable`, SOURCECODE_TELEMETRY=0, or DO_NOT_TRACK=1.
 
 Nothing sensitive (code, paths, secrets, output) is ever collected.
 See docs/privacy.md for full details.
@@ -72,6 +71,7 @@ def record(
     event: str,
     *,
     cmd: str = "analyze",
+    command: Optional[str] = None,
     flags: Optional[list[str]] = None,
     output_fmt: str = "json",
     file_count: Optional[int] = None,
@@ -98,6 +98,7 @@ def record(
             os=_platform_os(),
             arch=_platform_arch(),
             cmd=cmd,
+            command=command,
             flags=flags or [],
             output_fmt=output_fmt,
             repo_size=(

sourcecode/telemetry/config.py

@@ -1,13 +1,12 @@
 """Persistent telemetry configuration.
 
-Telemetry is **off until the user turns it on** (opt-in). It stays anonymous and
-never collects source code, paths, secrets or repository content.
+Telemetry is **on by default** and stays anonymous. Users can disable it with
+``ask telemetry disable``, ``SOURCECODE_TELEMETRY=0`` or ``DO_NOT_TRACK=1``;
+it never collects source code, paths, secrets or repository content.
 
-It was opt-out until 3.3.0. Field evaluation #3 was the first audit of regulated
-third-party code — public-sector health data — and there the default is not a
-preference but a procurement blocker: the reviewer had to disable telemetry
-*before the first run*, which the product gave them no way to do. Nothing is
-collected before an explicit choice, so there is nothing to disable in time.
+The default is explicit and reversible: users can disable telemetry before a run
+with `SOURCECODE_TELEMETRY=0` or `DO_NOT_TRACK=1`, or persist that choice with
+`ask telemetry disable`.
 
 Config file: ~/.config/sourcecode/config.json
 Enable: `ask telemetry enable` or SOURCECODE_TELEMETRY=1
@@ -43,26 +42,22 @@ def _save(data: dict[str, Any]) -> None:
 def stored_choice() -> "bool | None":
     """The explicit choice on record, or None when the user has made none.
 
-    `None` is a state, not a synonym for `False`: "off because nobody has been
-    asked yet" and "off because you turned it off" are different answers, and
-    `telemetry status` prints them differently.
+    `None` is a state, not a synonym for `False`: "on because the default applies"
+    and "off because you turned it off" are different answers, and `telemetry
+    status` prints them differently.
     """
     stored = _load().get("telemetry", {}).get("enabled")
     return None if stored is None else bool(stored)
 
 
 def is_enabled() -> bool:
-    """True only when telemetry has been explicitly turned on.
+    """Return whether telemetry is enabled. It defaults to enabled.
 
-    Telemetry is **opt-in**: no choice on record means off, everywhere, CI or
-    not. Precedence, highest first:
+    Precedence, highest first:
       1. SOURCECODE_TELEMETRY env var (0 = off, 1 = on)
       2. DO_NOT_TRACK env var (any value other than ""/"0" turns it off)
       3. config file 'enabled' flag, if the user has made an explicit choice
-      4. default: False
-
-    There is no CI special case any more, because there is nothing left for it
-    to protect against — the default it used to override is now off.
+      4. default: True
     """
     env = os.environ.get(_ENV_VAR, "").strip()
     if env == "0":
@@ -75,7 +70,7 @@ def is_enabled() -> bool:
     stored = stored_choice()
     if stored is not None:
         return stored
-    return False
+    return True
 
 
 def has_been_asked() -> bool:
@@ -100,7 +95,7 @@ def mark_asked() -> None:
 def get_install_id() -> str:
     """Stable anonymous install id — a random UUID v4.
 
-    Created lazily on first opted-in event. NOT derived from hardware, email,
+    Created lazily on first enabled event. NOT derived from hardware, email,
     hostname or any identifier — it only says "the same install across runs",
     which is what enables unique-user, conversion and retention metrics.
     Returns "" if it cannot be persisted (telemetry then degrades to events

sourcecode/telemetry/consent.py

@@ -1,13 +1,10 @@
 """First-run telemetry notice.
 
-Telemetry is **opt-in**: nothing has been collected when this notice appears, and
-nothing will be until the user runs `ask telemetry enable`. The notice is shown
-exactly once, only on interactive TTYs, and it is an invitation — it states what
-*would* be collected if they said yes, and it never changes the setting.
+Telemetry is **on by default**. The notice is shown exactly once, only on
+interactive TTYs, and states what is collected and how to disable it.
 
-The invitation is deliberately printed even though the answer is already "no":
-a user who never learns the option exists cannot choose to help, and a silent
-collector is the thing this release removed.
+The disclosure is deliberately printed once so users know what is collected and
+how to disable it before a later run.
 
 Notice is written to stderr so it doesn't pollute stdout output.
 """
@@ -19,18 +16,17 @@ import sys
 
 _NOTICE = """\
 \033[2m━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━
-  ask — anonymous telemetry is OFF
+  ask — anonymous telemetry is ON by default
 
-  Nothing has been collected, and nothing will be unless you
-  turn it on. If you would like to help:
+  Anonymous usage metadata is collected to improve ASK. To disable it:
 
-    ask telemetry enable
+    ask telemetry disable
 
-  If you do, this is collected: tool version, Python version,
+  This is collected: tool version, Python version,
   OS, commands used, flags used, MCP tool names invoked,
   approximate repo size, execution duration, errors.
 
-  Never collected, on or off: source code, file paths, file
+  Never collected: source code, file paths, file
   names, secrets, tokens, environment variables, or any
   repository content.
 ━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━\033[0m
@@ -51,10 +47,10 @@ def _is_interactive() -> bool:
 
 
 def show_first_run_notice() -> None:
-    """Print the one-time telemetry invitation on interactive terminals.
+    """Print the one-time telemetry disclosure on interactive terminals.
 
     Never raises. Does nothing on non-interactive / CI environments.
-    Telemetry stays off regardless — this only tells the user the option exists.
+    Printing this notice does not change the telemetry setting.
     """
     if not _is_interactive():
         return

sourcecode/telemetry/events.py

@@ -52,7 +52,8 @@ class TelemetryEvent:
         py          — Python major.minor (e.g. "3.11")
         os          — OS family: linux | macos | windows | other
         arch        — CPU architecture: x64 | arm64 | other
-        cmd         — command: analyze | prepare-context | telemetry
+        cmd         — command family: analyze | prepare-context | telemetry | mcp | unknown
+        command     — closed product command identifier, or None
         flags       — flag names only (no values)
         output_fmt  — json | yaml
         repo_size   — tiny | small | medium | large | huge
@@ -74,6 +75,7 @@ class TelemetryEvent:
     os: str = ""
     arch: str = ""
     cmd: str = ""
+    command: Optional[str] = None
     flags: list[str] = field(default_factory=list)
     output_fmt: str = "json"
     repo_size: str = "unknown"

sourcecode/telemetry/filters.py

@@ -57,6 +57,15 @@ _SAFE_FLAGS: frozenset[str] = frozenset({
 _SAFE_OS: frozenset[str] = frozenset({"linux", "macos", "windows", "other"})
 _SAFE_ARCH: frozenset[str] = frozenset({"x64", "arm64", "other"})
 _SAFE_CMD: frozenset[str] = frozenset({"analyze", "prepare-context", "telemetry", "mcp", "unknown"})
+_SAFE_COMMANDS: frozenset[str] = frozenset({
+    "analyze", "prepare-context", "telemetry", "mcp", "cache", "baseline", "auth", "retrieve",
+    "repo-ir", "impact", "endpoints", "export", "validation", "delta", "contract-diff", "plan",
+    "compare", "trend", "timeline", "spring-audit", "verify-edit", "verify", "risk", "enrich",
+    "audit-report", "migrate-recipe", "data-exposure", "posture", "migrate-check", "impact-chain",
+    "pr-impact", "explain", "onboard", "review-pr", "fix-bug", "modernize", "rename-class",
+    "chunk-file", "activate", "selftest", "explain-endpoint", "regress", "version", "schema",
+    "config", "archetype", "cold-start",
+})
 _SAFE_EVENTS: frozenset[str] = frozenset({
     "command_executed",
     "execution_completed",
@@ -153,6 +162,7 @@ def sanitize(event: TelemetryEvent) -> dict[str, Any]:
         "os": _safe_str(event.os, _SAFE_OS, "other"),
         "arch": _safe_str(event.arch, _SAFE_ARCH, "other"),
         "cmd": _safe_str(event.cmd, _SAFE_CMD, "unknown"),
+        "command": _safe_str(event.command or "", _SAFE_COMMANDS, "unknown") if event.command else None,
         "flags": _safe_flags(event.flags),
         "output_fmt": _safe_str(event.output_fmt, _SAFE_FMTS, "json"),
         "repo_size": _safe_str(event.repo_size, _SAFE_SIZES, "unknown"),

{sourcecode-5.8.12.dist-info → sourcecode-5.8.13.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 5.8.12
+Version: 5.8.13
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 Project-URL: Homepage, https://github.com/HarounDominique/sourcecode
 Project-URL: Repository, https://github.com/HarounDominique/sourcecode
@@ -49,7 +49,7 @@ Description-Content-Type: text/markdown
 
 **Context · Impact · Migration · Architecture · Review — everything from one structural model.**
 
-![Version](https://img.shields.io/badge/version-5.8.12-blue)
+![Version](https://img.shields.io/badge/version-5.8.13-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
 Copyright (c) 2026 Dominique Haroun. All rights reserved. ASK Engine 5.7.0 and
@@ -151,7 +151,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.8.12 — and, on a build that has aged,
+ask version                    # ask 5.8.13 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 
@@ -580,18 +580,16 @@ ask config              # version, config file path, telemetry status
 ask config /repo        # + the repository's own sourcecode.config.json:
                         #   data labels, custom security annotations,
                         #   and any declaration that could not be used
-ask telemetry enable    # anonymous telemetry is OFF by default (opt-in)
+ask telemetry enable    # ensure anonymous telemetry is enabled
 ```
 
-**Nothing is collected or transmitted unless you turn telemetry on** — not on the first run,
-not in CI. If you do opt in, it collects version, OS, commands, flags, duration, repo-size
-range, and errors: **no source code, paths, secrets, or output**. Turn it off again with
+**Anonymous telemetry is ON by default**. It collects version, OS, commands, flags, duration,
+repo-size range, and errors: **no source code, paths, secrets, or output**. Turn it off with
 `ask telemetry disable`, `export SOURCECODE_TELEMETRY=0`, or `DO_NOT_TRACK=1`.
 
-> **Auditing someone else's code — regulated, client-owned or public-sector?** Nothing to do.
-> Telemetry was opt-out until 3.3.0; it is opt-in now (`docs/DEFECT-LEDGER.md` P-1), because a
-> default you must remember to disable is the wrong default for third-party code. An explicit
-> choice you made before is unchanged.
+> **Auditing someone else's code — regulated, client-owned or public-sector?** Set
+> `SOURCECODE_TELEMETRY=0` before the run. The setting is explicit, local and honored before
+> any event is sent.
 
 **A question is not a write — `--no-write` / `ASK_READONLY=1`.** One contract over
 every command: nothing is created inside the analysed repository, and a command

{sourcecode-5.8.12.dist-info → sourcecode-5.8.13.dist-info}/RECORD

@@ -1,4 +1,4 @@
-sourcecode/__init__.py,sha256=Q8fdci0rXXKy6QVw6aRGJjGkWAMdn3wJ1bKYNOpngK4,309
+sourcecode/__init__.py,sha256=WDXhi5kHWMfE8cOqlfy1cyhggsaPJwg3cmS3GE08CxA,309
 sourcecode/adaptive_scanner.py,sha256=yJBKjNpkY6bpueYJ2YnRezen3sYZDecEt7WaaNWdqug,9466
 sourcecode/answer_bounds.py,sha256=_51_DCuYEUmI_xwUFxDMiprSavkNakkLiIBbPjevQ3M,9793
 sourcecode/archetype.py,sha256=uubguXP5ltQt25ACNVm9kX4KRTe7JCqkFfg4H9zckCo,40971
@@ -25,7 +25,7 @@ sourcecode/chain_rules.py,sha256=Bi6UHfgd-GxWswmnHRcPz5jdbAuqka3Zkz_P-MTvqhw,127
 sourcecode/change_plan.py,sha256=wJ896V27a3qb-2vcZhrcOSOqFAwCmEyzbhdbdxM2LlQ,12504
 sourcecode/cir_graphs.py,sha256=RytqSv1WF8kdlfXj2fPQz16LY4akS2kyThbdWL8beCQ,14835
 sourcecode/classifier.py,sha256=JBzPwSSrDG-tUHAbcKB678HRbjLpD-ohzbzzO62mgpo,20114
-sourcecode/cli.py,sha256=BPjurFlS8pfrQ7fiYUMZM6JGma79pdn6-q9-A-JMlHo,726997
+sourcecode/cli.py,sha256=cAYOBP_CgY4Z7FjciLs2Awtkjg8cGsfjD-ULAqIRqXg,727830
 sourcecode/client_calls.py,sha256=YOPnfRZzRyqmdHvXSVeiunW8cuiuCuWXacNIQRgKMCw,22640
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
 sourcecode/compare.py,sha256=Lj8epBqrHLWBhiccE2X0ZbaP2H3hNb7qecoN9Jvsj7c,14794
@@ -117,7 +117,7 @@ sourcecode/reconciliation.py,sha256=pmqc0JNcAagKGWDcjH2rLDlKlAbfJCVUj86vV--YEXQ,
 sourcecode/redactor.py,sha256=SB4hwIvg8h-hvcqKcDWaZvA-aSyn-at-BIRwa0tUv5E,3227
 sourcecode/reference_facts.py,sha256=mx7H-Ax5y8sKAQHrnJCXlgjkUzqZtQTByv9Zy2lxKQQ,15500
 sourcecode/regress.py,sha256=aXN6n7t39OOSOUvUs4HTH7UGVwl-tzhjXjHfDXNtp04,11162
-sourcecode/release_info.py,sha256=EtmaGDnLZlbqvjMB0i4UAjGLbKage5rPvQetuCHR20w,6064
+sourcecode/release_info.py,sha256=l9HiTnxDaaMobb1XUTXACXjPxIzZyRScSkgwcnQ8OjU,6064
 sourcecode/relevance_scorer.py,sha256=0AgEt4KrV73nioMqBgjhGjtY7L2C7L7cSyKtj3IKcrw,9408
 sourcecode/remediation_diff.py,sha256=fGYqPmQF7bO54L8ivztX5PgmW4fVu54gNcG6OEQ192U,9730
 sourcecode/remedies.py,sha256=V2_cD4pLq8bKRkzF-3RGFoiu1xWYZS384WDVp1MrlZw,10225
@@ -203,8 +203,8 @@ sourcecode/mcp/__init__.py,sha256=XU4HfRGbdid8wdUA0x_4f7uKZD1z3mv_XUY_WU_T9Mw,17
 sourcecode/mcp/dependency_import.py,sha256=wfvw1rmDE3n2mHDj-yHnCuy9HZ7TtPqsHG2BU-Scl1k,4146
 sourcecode/mcp/orchestrator.py,sha256=imbOxkzsQh91as8a3OdSU7VG2L3A1faUldiKwA2jMSQ,36825
 sourcecode/mcp/registry.py,sha256=kydzpUGGKckWM_F_GeGkWG1Z_qU3R8mZSbBWYKtDewU,69326
-sourcecode/mcp/runner.py,sha256=RGimCwhLyHxjCvH7q72y12HWEnATXZLC-NBWhkzlu0I,2852
-sourcecode/mcp/server.py,sha256=4YjfGUVRWrlOMe1pMkKBdUhjc9XMgDdnMcb7HrCQmCQ,67573
+sourcecode/mcp/runner.py,sha256=dRvI0xS2wa8DH0diYjJiAoaGeVdtf389PekWwwh8wRI,3083
+sourcecode/mcp/server.py,sha256=1CRISYBwPuAdSaNFVeupjYr2nfK6hmBv8J1nfdCLQJ8,67510
 sourcecode/mcp/onboarding/__init__.py,sha256=sj2PWqEBmMc4zBNkomg89WtL0M6S7A9yb7_wAuSWNP4,66
 sourcecode/mcp/onboarding/applier.py,sha256=Sx9vHTaXr_M1Bs4uMjO7qa_a2_p4J9oz93oJsKQ7ds4,3298
 sourcecode/mcp/onboarding/backup.py,sha256=ihqGOR8QTX8HASRSEDyfFyXr5bkXrygPHamv4p9KTmk,1452
@@ -234,19 +234,19 @@ sourcecode/schemas/envelope-v1.schema.json,sha256=Zu5D2cspa_biP5-JMWY0H6oYGyAyA4
 sourcecode/schemas/pr-impact-v1.schema.json,sha256=fC4DLqY--N5iJpm5wCxbUeILianYbhNDNYV3n4D5gFg,3756
 sourcecode/schemas/verify-edit-v1.schema.json,sha256=0jp-yoFIdmfq-4IrzrOPCAsEN7JcKg6cjq7-87_Ez0U,3537
 sourcecode/schemas/verify-v1.schema.json,sha256=rY1h_ub3hMAKCHO6WmnyKDtI4b37xLAEC6uuoEhKR64,3441
-sourcecode/telemetry/__init__.py,sha256=ZxV5AJAK5_pk0RnW0B1ntpGPRapOX_XKFJdT_6RuYhE,3502
-sourcecode/telemetry/config.py,sha256=HD5ccO_k91WxDsnMo1lmxaF906bK3nrLv8qzUR3HbTo,4212
-sourcecode/telemetry/consent.py,sha256=pQdl-QeLl6Gcibn0eWHSKZrm-HYSsjpVqOnjrgFp8co,2472
-sourcecode/telemetry/events.py,sha256=4_yeO58U-Cwc1Qb27VB0_EjhmroY0k91n3_VGxeALB8,2776
-sourcecode/telemetry/filters.py,sha256=RzxauTz8HliO4BllQnXEXc7zTeqdCZi5MgqGEDuW7OQ,6570
+sourcecode/telemetry/__init__.py,sha256=5jg6mIrhnt59FgxQsQcihxkHCWM07UFQFcuGwMPa9v8,3489
+sourcecode/telemetry/config.py,sha256=QPuTK-oc-Bg_EQftyFxLHPSnLRiZ5NegWYfX4BcD8iI,3842
+sourcecode/telemetry/consent.py,sha256=-Wb8BFGXEexOs8M0Eja7F-T6ZtLNPeRoZnHcHvlP7-Q,2153
+sourcecode/telemetry/events.py,sha256=l3Z2SQUO4_C2D2ItXOOdVNimAmHedUHnUxqYFTxnsAE,2900
+sourcecode/telemetry/filters.py,sha256=-lqT2oorECuqEIdeHb--7AZ6BCaUx0bya720a-Z5x6w,7335
 sourcecode/telemetry/transport.py,sha256=4gGHsq0WeY9VywEZXA3vUxykfiYnw9uuqfjAAec7F8o,1681
-sourcecode/_docs/DEFECT-LEDGER.md,sha256=eD0lIU59OtcDZow3n6TDuXeO3TWEzG3YeGi7qox65i8,742831
+sourcecode/_docs/DEFECT-LEDGER.md,sha256=KAUiNrCH5Az8129zeECJtgsv1C3CKngpoJuBzoM5uEA,742903
 sourcecode/_docs/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
 sourcecode/_docs/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
-sourcecode/_docs/USER_GUIDE.md,sha256=u6BDmr3Kv9l10u5X7xpkP8fYf-aA-BreovysiPFaYTA,87104
-sourcecode-5.8.12.dist-info/METADATA,sha256=QHhr0IK_Y1Nj9KJrieY-vs-xH60_Qr-dhDE-wHi4pt0,51594
-sourcecode-5.8.12.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-5.8.12.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
-sourcecode-5.8.12.dist-info/licenses/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
-sourcecode-5.8.12.dist-info/licenses/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
-sourcecode-5.8.12.dist-info/RECORD,,
+sourcecode/_docs/USER_GUIDE.md,sha256=yylOietj_jwPaOc_WQCkanFhoUV57HJBMDJBtA_g1jA,87303
+sourcecode-5.8.13.dist-info/METADATA,sha256=TXvApuuSukNSBO_SAM-rgK7dS-yjXQcFpu4Ssj5FP50,51372
+sourcecode-5.8.13.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-5.8.13.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
+sourcecode-5.8.13.dist-info/licenses/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
+sourcecode-5.8.13.dist-info/licenses/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
+sourcecode-5.8.13.dist-info/RECORD,,