sourcecode 5.8.12__tar.gz → 5.8.13__tar.gz

{sourcecode-5.8.12 → sourcecode-5.8.13}/CHANGELOG.md

@@ -1,5 +1,20 @@
 # Changelog
 
+## [5.8.13] — 2026-08-20
+
+*MCP reliability release after deep multi-repository stress testing.*
+
+### Fixed
+- Concurrent MCP tool calls can no longer leak one invocation's CLI JSON to the
+  MCP host process. The in-process `CliRunner` invocation is serialized because
+  its stdout/stderr capture is process-global; each caller now receives only its
+  own response envelope.
+
+### Verified
+- The MCP regression suite passes, including a concurrent-runner regression and
+  live concurrent calls to `endpoints`, `validation` and `version` against the
+  testing corpus.
+
 ## [5.8.12] — 2026-08-19
 
 *Performance-mitigation and release-hygiene update. The external cross-version

{sourcecode-5.8.12 → sourcecode-5.8.13}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 5.8.12
+Version: 5.8.13
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 Project-URL: Homepage, https://github.com/HarounDominique/sourcecode
 Project-URL: Repository, https://github.com/HarounDominique/sourcecode
@@ -49,7 +49,7 @@ Description-Content-Type: text/markdown
 
 **Context · Impact · Migration · Architecture · Review — everything from one structural model.**
 
-![Version](https://img.shields.io/badge/version-5.8.12-blue)
+![Version](https://img.shields.io/badge/version-5.8.13-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
 Copyright (c) 2026 Dominique Haroun. All rights reserved. ASK Engine 5.7.0 and
@@ -151,7 +151,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.8.12 — and, on a build that has aged,
+ask version                    # ask 5.8.13 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 
@@ -580,18 +580,16 @@ ask config              # version, config file path, telemetry status
 ask config /repo        # + the repository's own sourcecode.config.json:
                         #   data labels, custom security annotations,
                         #   and any declaration that could not be used
-ask telemetry enable    # anonymous telemetry is OFF by default (opt-in)
+ask telemetry enable    # ensure anonymous telemetry is enabled
 ```
 
-**Nothing is collected or transmitted unless you turn telemetry on** — not on the first run,
-not in CI. If you do opt in, it collects version, OS, commands, flags, duration, repo-size
-range, and errors: **no source code, paths, secrets, or output**. Turn it off again with
+**Anonymous telemetry is ON by default**. It collects version, OS, commands, flags, duration,
+repo-size range, and errors: **no source code, paths, secrets, or output**. Turn it off with
 `ask telemetry disable`, `export SOURCECODE_TELEMETRY=0`, or `DO_NOT_TRACK=1`.
 
-> **Auditing someone else's code — regulated, client-owned or public-sector?** Nothing to do.
-> Telemetry was opt-out until 3.3.0; it is opt-in now (`docs/DEFECT-LEDGER.md` P-1), because a
-> default you must remember to disable is the wrong default for third-party code. An explicit
-> choice you made before is unchanged.
+> **Auditing someone else's code — regulated, client-owned or public-sector?** Set
+> `SOURCECODE_TELEMETRY=0` before the run. The setting is explicit, local and honored before
+> any event is sent.
 
 **A question is not a write — `--no-write` / `ASK_READONLY=1`.** One contract over
 every command: nothing is created inside the analysed repository, and a command

{sourcecode-5.8.12 → sourcecode-5.8.13}/README.md

@@ -4,7 +4,7 @@
 
 **Context · Impact · Migration · Architecture · Review — everything from one structural model.**
 
-![Version](https://img.shields.io/badge/version-5.8.12-blue)
+![Version](https://img.shields.io/badge/version-5.8.13-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
 Copyright (c) 2026 Dominique Haroun. All rights reserved. ASK Engine 5.7.0 and
@@ -106,7 +106,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.8.12 — and, on a build that has aged,
+ask version                    # ask 5.8.13 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 
@@ -535,18 +535,16 @@ ask config              # version, config file path, telemetry status
 ask config /repo        # + the repository's own sourcecode.config.json:
                         #   data labels, custom security annotations,
                         #   and any declaration that could not be used
-ask telemetry enable    # anonymous telemetry is OFF by default (opt-in)
+ask telemetry enable    # ensure anonymous telemetry is enabled
 ```
 
-**Nothing is collected or transmitted unless you turn telemetry on** — not on the first run,
-not in CI. If you do opt in, it collects version, OS, commands, flags, duration, repo-size
-range, and errors: **no source code, paths, secrets, or output**. Turn it off again with
+**Anonymous telemetry is ON by default**. It collects version, OS, commands, flags, duration,
+repo-size range, and errors: **no source code, paths, secrets, or output**. Turn it off with
 `ask telemetry disable`, `export SOURCECODE_TELEMETRY=0`, or `DO_NOT_TRACK=1`.
 
-> **Auditing someone else's code — regulated, client-owned or public-sector?** Nothing to do.
-> Telemetry was opt-out until 3.3.0; it is opt-in now (`docs/DEFECT-LEDGER.md` P-1), because a
-> default you must remember to disable is the wrong default for third-party code. An explicit
-> choice you made before is unchanged.
+> **Auditing someone else's code — regulated, client-owned or public-sector?** Set
+> `SOURCECODE_TELEMETRY=0` before the run. The setting is explicit, local and honored before
+> any event is sent.
 
 **A question is not a write — `--no-write` / `ASK_READONLY=1`.** One contract over
 every command: nothing is created inside the analysed repository, and a command

{sourcecode-5.8.12 → sourcecode-5.8.13}/SECURITY.md

@@ -91,4 +91,6 @@ Third-party dependencies (`typer`, `ruamel.yaml`, etc.) could contain vulnerabil
 
 ## Telemetry and privacy
 
-Telemetry is **opt-in only** and disabled by default. If enabled, only anonymous usage metadata is collected — never code, paths, or content. See [docs/privacy.md](docs/privacy.md).
+Telemetry is **enabled by default** and can be disabled with `ask telemetry disable`,
+`SOURCECODE_TELEMETRY=0`, or `DO_NOT_TRACK=1`. Only bounded anonymous usage metadata is
+collected — never code, paths, or content. See [docs/privacy.md](docs/privacy.md).

{sourcecode-5.8.12 → sourcecode-5.8.13}/docs/DEFECT-LEDGER.md

@@ -16,7 +16,7 @@ The facts these rows are keyed to are published: `ask schema facts-v1` prints th
 
 ## Current Synchronization
 
-**As of 2026-08-19, the external `5.8.11` re-audit:** this is the current status of
+**As of 2026-08-20, release `5.8.13` and the external `5.8.11` re-audit:** this is the current status of
 the 5.8.8/5.8.9 audit queue. The subject remained `saint-server` at `3dde0376`, with a
 byte-identical CIR and the same 53/61 invocables exercised. The score is **78/100**
 (75 in 5.8.8, 80 in 5.8.9). The observations below remain historical evidence; only
@@ -30,6 +30,7 @@ this table declares present state.
 | `AUD-588-B05` | **closed** | `c15f5b6`; changed container-wired components block a false `unaffected` disposition. |
 | `AUD-511-R03` / `AUD-588-B07` | **implemented in 5.8.12** | `47aee1e` gives the published `OUTPUT_TOO_LARGE` envelope precedence over an inconsistent process status and preserves the excerpt in every branch. |
 | `AUD-588-B08` | **closed** | `c084555`; `impact` publishes its independent stdout-byte budget. |
+| `MCP-001` | **closed 5.8.13** | Deep corpus testing reproduced concurrent `CliRunner` stream capture leaking a tool response to the host stdout. `b2c9660` serializes the narrow process-global capture seam; concurrent real MCP calls and a regression test verify response isolation. |
 | `AUD-588-B11` (container/units subset) | **partially implemented in 5.8.12** | `d745d31` discovers nested Maven modules; `273ae8e` suppresses unsupported `pr-impact.unaffected_basis`. `impact` naming, source population units, risk tiers and plan narrative remain open. |
 | `AUD-511-R02` / `AUD-589-B02` | **partially mitigated in 5.8.12, still under investigation** | `b93f230` reuses one `SpringSemanticModel` across every declared `data-exposure` seed; `473f47a` routes `validation` through the shared CIR cache, and `91bd0c0` retains subcommand `--no-cache` compatibility. On the local BroadleafCommerce corpus at the final analyzer fingerprint, a first shared-CIR fill took 10.46 s and its warm `validation --compact` hit took 4.01 s with byte-identical output. This is a same-host cache-state observation, not the 5.8.9/5.8.11 external A/B: the six-run C3-120 comparison and the configured `saint-server` reproduction remain required. |
 | `AUD-588-B02`, `B06`, B11 residuals, `B12` | **partially open in 5.8.12** | `3869c87` excludes explicit EclipseLink from Hibernate applicability and effort; `037223e` publishes provider non-coverage. B11 parity and controlled cost calibration remain required. |
@@ -594,7 +595,7 @@ class's subject, not its provenance.
 
 | ID | Item | Found | Severity | Status |
 |---|---|---|---|---|
-| P-1 | Telemetry is **opt-out**. Auditing a public-sector health client's code, it must be disabled *before* the first run, not after | 3.2.0 | **High (procurement)** | **closed 3.3.0** — opt-in: with no explicit choice on record, `is_enabled()` is False everywhere, so a fresh install transmits nothing on the run that prints the notice. The CI special case is gone with the default it existed to override; CI is still detected for one purpose, skipping a notice that has no terminal to appear on. The first-run notice became an invitation that states what *would* be collected. `telemetry status` distinguishes "no choice recorded" from "you chose disabled" (`stored_choice()` returns `None`, not `False`) — a buyer auditing this needs to know which one they have. An explicit choice made before the change is honoured unchanged |
+| P-1 | Telemetry default and procurement disclosure | 3.2.0 | **High (procurement)** | **reopened and corrected 5.8.12** — telemetry is on by default by explicit product decision, with `ask telemetry disable`, `SOURCECODE_TELEMETRY=0` and `DO_NOT_TRACK=1` honored before any event is sent. The first-run notice discloses the fields and the disable path. `telemetry status` distinguishes the default from an explicit disabled choice; the privacy policy documents the endpoint, 90-day retention and bounded anonymous fields. This supersedes the historical 3.3.0 opt-in closure for the current release |
 | P-2 | Licence state is ambiguous: `auth status` → `{"status":"unauthenticated","pro":true,"pro_reason":"early-adoption unlock"}`. The buyer cannot tell what it will cost or what they lose when the door closes | 3.2.0 | Medium | **closed 3.4.0** — one authority, `license.entitlement()`: `entitlement` (what runs), `source` (why: `license_key` / `early_adoption_unlock` / `free_tier`), `authenticated` (a separate fact — today one can be entitled without a credential), `paywall_active`, and `when_it_changes`, which states what the user loses when that source stops applying, in the terms the gate uses and **never as a price**. `is_pro` — what every gate reads — is now derived from it rather than computed beside it, which is how the status page came to contradict the commands. The legacy keys stay for consumers, are derived from the authority, and are listed in `deprecated_fields` |
 
 | P-3 | **The price is not published.** With P-2 closed the entitlement is unambiguous, but a buyer still cannot see what Pro costs or what a team of 25 pays. Eval #5 lists *"precio Pro público"* among the conditions for the top of its price band, beside the robustness fixes | 3.2.1 (eval #5) | Medium (procurement) | open — packaging question, not a page: the field's own reading is that **the value is frontal** (a first audit replaces 5–15 person-days) **and the recurring half is the CI gate**, so a full seat subscription on a product whose value peaks on run one *"genera churn en el mes 4"*. Model to test: one-off assessment **3–5 k€ per repo** + **8–12 €/dev/month** for the gate. Depends on C3-22: without the gate there is nothing recurring to sell |

{sourcecode-5.8.12 → sourcecode-5.8.13}/docs/DEVELOPMENT-ROADMAP.md

@@ -3,13 +3,17 @@
 *Chief-engineer development record. This is the internal, dev-facing counterpart to the
 customer-facing `docs/EXECUTIVE-ROADMAP.md`.*
 
-> **CURRENT STATE — 2026-08-19 — 5.8.12 release**
+> **CURRENT STATE — 2026-08-20 — 5.8.13 release**
 >
 > The external 5.8.11 re-audit scores **78/100** over the same byte-identical
 > `saint-server` CIR and 53/61 invocables. It refutes two closures, exposes one new
 > security regression and measures a cross-command performance regression. The release
-> fixes remain valuable where verified: B05, B08 and the container/units B11 subset hold;
-> the B04 `data-exposure` premise is retracted by the auditor after configuration-based
+> fixes remain valuable where verified: B05, B08 and the container/units B11 subset hold.
+> The deep `testing` corpus battery also closed an in-process MCP concurrency defect:
+> `CliRunner`'s global stream capture allowed one response to escape to the host stdout.
+> `b2c9660` serializes that seam and proves response isolation under concurrent calls.
+> The audit queue remains unchanged; this was additional hardening found during verification.
+> The B04 `data-exposure` premise is retracted by the auditor after configuration-based
 > verification. Historical tables below are superseded by this block where statuses differ.
 >
 > | Priority | Work | Acceptance direction |
@@ -19,6 +23,7 @@ customer-facing `docs/EXECUTIVE-ROADMAP.md`.*
 > | P1 | `AUD-511-R02`: 1.4-2.4x performance slowdown. | **Partially mitigated in 5.8.12:** `b93f230` shares the `data-exposure` semantic model across label seeds; `473f47a` gives `validation` the shared CIR cache; `91bd0c0` preserves the published `--no-cache` no-op. Local Broadleaf warm validation is lower, but controlled 5.8.9/5.8.11 remeasurement remains the acceptance gate. |
 > | P1 | `AUD-511-R03`: ASK-09 false `not_applicable`. | **Implemented in 5.8.12:** `47aee1e` uses the emitted envelope as authority and retains evidence for every result. |
 > | P1 | `AUD-588-B02/B06`: EclipseLink is billed a Hibernate migration. | **Implemented in 5.8.12:** `3869c87` excludes the axis; `037223e` publishes the unsupported-provider gap. |
+> | P1 | `MCP-001`: concurrent MCP calls can leak a CLI response to host stdout. | **Closed in 5.8.13:** `b2c9660` serializes the process-global `CliRunner` capture seam and regresses overlapping calls. |
 > | P2 | `AUD-588-B11` residuals and `B12`. | `d745d31` and `273ae8e` close nested-build discovery and false exclusion prose. Finish naming/population/tier/plan parity, then recalibrate cost advice under controlled evidence. |
 >
 > **Feature decisions:** `F01` (EclipseLink migration automation) remains deferred, but

{sourcecode-5.8.12 → sourcecode-5.8.13}/docs/EXECUTIVE-ROADMAP.md

@@ -3,9 +3,9 @@
 *A software-knowledge platform for large codebases. Written for an engineering
 director; no internal implementation knowledge assumed.*
 
-> **DOCUMENT STATUS — 2026-08-19**
+> **DOCUMENT STATUS — 2026-08-20**
 >
-> The current release is **5.8.12**. Its external re-audit scores **78/100** on the
+> The current release is **5.8.13**. Its external re-audit scores **78/100** on the
 > same repository and protocol as the two prior rounds (75, then 80). The repository
 > model is byte-identical, so the reported changes are execution, rule or presentation
 > behavior. This block supersedes earlier release claims where they conflict.
@@ -19,6 +19,14 @@ director; no internal implementation knowledge assumed.*
 > profiling, compatibility-window or host-specific CI work, not an unresolved bug from that
 > audit. Historical scores and release claims below remain historical; this block is current.
 
+> **MCP HARDENING — released in 5.8.13**
+>
+> Deep multi-repository stress testing found that concurrent MCP calls could race the
+> process-global stdout/stderr capture used by the in-process CLI adapter. `b2c9660`
+> serializes that narrow capture seam, preventing one tool response from reaching the MCP
+> host or another tool call. This does not change analysis contracts or reopen the external
+> audit queue; it makes the agent integration reliable under concurrent dispatch.
+
 > **5.8.11 RE-AUDIT CORRECTION**
 >
 > The re-audit confirms the container-reach correction (`pr-impact`, `plan`, `compare`),

{sourcecode-5.8.12 → sourcecode-5.8.13}/docs/MANUAL-USUARIO.md

@@ -954,10 +954,13 @@ mantiene el alias breve de versión para compatibilidad.
 
 ```bash
 ask telemetry status    # ver el ajuste actual (y si llegaste a elegir)
-ask telemetry enable    # activar (opt-in)
-ask telemetry disable   # volver a desactivar
+ask telemetry enable    # activar
+ask telemetry disable   # desactivar
 ```
-La telemetría anónima está **desactivada por defecto (opt-in)**: no se recoge ni se envía nada hasta que la actives, ni siquiera en la primera ejecución. Nunca incluye tu código, rutas ni secretos.
+La telemetría anónima está **activada por defecto**. Recoge sólo versión, sistema, comandos,
+flags, duración aproximada, tamaño agrupado del repositorio y tipo de error. Nunca incluye tu
+código, rutas ni secretos. Desactívala con `ask telemetry disable`, `SOURCECODE_TELEMETRY=0`
+o `DO_NOT_TRACK=1`.
 
 ---
 

{sourcecode-5.8.12 → sourcecode-5.8.13}/docs/USER_GUIDE.md

@@ -138,7 +138,7 @@ pipx install sourcecode   # isolated install, no venv needed
 
 # Verify
 ask version
-# ask 5.8.12
+# ask 5.8.13
 ```
 
 Requires Python 3.9+.
@@ -1199,7 +1199,7 @@ explaining. The rest do one thing; `ask <command> --help` is the whole story.
 | `ask retrieve` | parked | Typed knowledge queries over the model — kept working, no longer developed |
 | `ask baseline capture\|diff\|trend` | supported | Versioned architectural metrics over time; see [`ask trend`](#ask-trend-dir--how-the-architecture-moved) |
 | `ask cache status\|warm\|model\|clear\|freshness` | supported | Cache inspection; `ask cache model` states what a warm buys each command |
-| `ask config` · `ask version` · `ask activate` · `ask auth` · `ask telemetry` · `ask mcp` | supported | Configuration, version, licence, authentication, telemetry (off by default), MCP integration |
+| `ask config` · `ask version` · `ask activate` · `ask auth` · `ask telemetry` · `ask mcp` | supported | Configuration, version, licence, authentication, telemetry (on by default), MCP integration |
 
 ## Typical workflows
 
@@ -1287,7 +1287,7 @@ ask mcp serve
 ask mcp remove
 ```
 
-The MCP server exposes structural analysis tools to AI agents without requiring the agent to call the CLI directly. Claude Desktop and Cursor can query impact, endpoints, and context through the MCP protocol.
+The MCP server exposes structural analysis tools to AI agents without requiring the agent to call the CLI directly. Claude Desktop and Cursor can query impact, endpoints, and context through the MCP protocol. Concurrent requests are accepted safely: ASK serializes only the in-process CLI capture seam, because its stdout/stderr redirection is process-global, so one tool response cannot contaminate another.
 
 ---
 

{sourcecode-5.8.12 → sourcecode-5.8.13}/docs/privacy.md

@@ -1,8 +1,8 @@
 # Privacy & Telemetry
 
-`ask` includes an anonymous telemetry system that is **off until you turn it on (opt-in)**. Nothing is collected or transmitted before you run `ask telemetry enable` — not on the first run, not in CI, not anywhere. The data, if you do opt in, is strictly anonymous: no source code, paths, secrets, or repository content are ever collected.
+`ask` includes an anonymous telemetry system that is **on by default**. It collects only bounded usage metadata: no source code, paths, secrets, or repository content are ever collected. Disable it with `ask telemetry disable`, `SOURCECODE_TELEMETRY=0`, or `DO_NOT_TRACK=1`.
 
-**This changed in 3.3.0.** Telemetry used to be opt-out. Auditing regulated third-party code, the default is not a preference: a reviewer must be able to state that nothing left the machine, and "disable it after the first run" cannot give that guarantee. If you had explicitly enabled or disabled it before, your choice is unchanged; if you never chose, telemetry is now off.
+Telemetry is enabled by default because ASK's product operation depends on command and performance coverage. The disable controls are honored before any event is sent, including in CI.
 
 ---
 
@@ -10,8 +10,8 @@
 
 ```bash
 ask telemetry status   # check current setting, and whether you ever chose
-ask telemetry enable   # opt in (remembered)
-ask telemetry disable  # opt back out (remembered)
+ask telemetry enable   # enable (remembered)
+ask telemetry disable  # disable (remembered)
 
 export SOURCECODE_TELEMETRY=0  # disable via environment variable
 export SOURCECODE_TELEMETRY=1  # force enable via environment variable
@@ -23,13 +23,13 @@ Precedence, highest first:
 1. `SOURCECODE_TELEMETRY` environment variable (`0` = off, `1` = on)
 2. `DO_NOT_TRACK` environment variable (any value other than empty/`0` disables)
 3. Your saved choice in the config file (`telemetry enable` / `disable`)
-4. Default: **off**, everywhere — no choice on record means nothing is sent
+4. Default: **on** — no choice on record enables bounded anonymous events
 
 ---
 
 ## Why telemetry exists
 
-ASK Engine is a local analysis tool with no usage visibility by default.
+ASK Engine is a local analysis tool with bounded anonymous usage visibility by default.
 Anonymous telemetry helps answer questions like:
 
 - Which commands do developers actually use?
@@ -54,7 +54,8 @@ When telemetry is enabled, these fields are sent per command invocation:
 | `py` | `3.11` | Python major.minor only |
 | `os` | `macos` | OS family: linux / macos / windows / other |
 | `arch` | `x64` | CPU family: x64 / arm64 / other |
-| `cmd` | `analyze` | Command run: analyze / prepare-context |
+| `cmd` | `analyze` | Command family: analyze / prepare-context / telemetry / mcp |
+| `command` | `spring-audit` | Closed ASK command identifier; no arguments or paths |
 | `flags` | `["--agent"]` | Flag names only (allowlist), no values |
 | `output_fmt` | `json` | Output format: json or yaml |
 | `repo_size` | `small` | File count range bucket (see below) |
@@ -74,8 +75,8 @@ which capabilities agents actually use.
 The tool **arguments are never sent** — they carry repository paths. Neither is any part
 of the result. The name is a fixed identifier from ASK Engine's own tool registry, not
 user input, and it is still shape-validated by the sanitization layer before transmission.
-These events follow the same opt-in as everything else: until you enable telemetry, nothing
-is recorded.
+These events follow the same setting as everything else: they are recorded only while
+telemetry is enabled.
 
 ### Repo size buckets
 
@@ -135,11 +136,13 @@ This filter is tested in `tests/test_telemetry.py`. Tests explicitly verify that
 
 ## Data transmission
 
-- Events are sent to `https://t.sourcecode.dev/v1/event` (configurable via `SOURCECODE_TELEMETRY_ENDPOINT`)
+- Events are sent to `https://qkndlmyekvujjdgthtmz.supabase.co/functions/v1/telemetry` (configurable via `SOURCECODE_TELEMETRY_ENDPOINT`)
 - Transmission happens in a background daemon thread — it never blocks the CLI
 - Timeout is 3 seconds — if the request fails or times out, it is silently dropped
 - No retries — a missed event is acceptable
 - No queuing or batching to disk
+- The server rejects payloads over 16 KiB and applies an in-memory rate limit of 120 requests per minute per forwarding address
+- Events are retained for 90 days; the `purge_telemetry_events()` function is scheduled in the Supabase deployment
 
 ---
 
@@ -161,16 +164,16 @@ The file looks like:
 }
 ```
 
-If you run `ask telemetry enable` or `disable`, `enabled` is set accordingly and that choice is remembered. If you have never made an explicit choice, the `enabled` key is absent and telemetry is **off**. `ask telemetry status` tells you which of the two you have — "no choice recorded" and "you chose disabled" are different answers. You can edit or delete this file directly at any time.
+If you run `ask telemetry enable` or `disable`, `enabled` is set accordingly and that choice is remembered. If you have never made an explicit choice, the `enabled` key is absent and telemetry follows the **on** default. `ask telemetry status` tells you whether the default applies or you explicitly disabled it. You can edit or delete this file directly at any time.
 
 ---
 
 ## First-run notice
 
-The first time you run `ask` interactively (not in CI, not piped), you are shown a brief, one-time notice explaining that telemetry is **off**, what *would* be collected if you enabled it, and how to enable it if you want to help.
+The first time you run `ask` interactively (not in CI, not piped), you are shown a brief, one-time notice explaining that telemetry is **on**, what is collected, and how to disable it.
 
-- It is an **invitation, not a prompt** — no answer is required and your input is never read
-- Nothing has been collected when it appears, and printing it changes no setting
+- It is a disclosure, not a prompt — no answer is required and your input is never read
+- Printing it changes no setting
 - It is shown **once only**
 - In CI environments (GitHub Actions, CircleCI, etc.) the notice is skipped
 - When piped or run non-interactively, the notice is skipped
@@ -179,7 +182,7 @@ The first time you run `ask` interactively (not in CI, not piped), you are shown
 
 ## CI environments
 
-CI needs no special case any more: with no choice on record telemetry is off, in CI and out of it. An explicit opt-in (`ask telemetry enable` or `SOURCECODE_TELEMETRY=1`) is honored in CI as anywhere else. CI is still detected for one purpose only — skipping the first-run notice, which has no terminal to appear on:
+Telemetry remains on in CI unless `SOURCECODE_TELEMETRY=0` or `DO_NOT_TRACK=1` is set. CI is detected only to skip the first-run notice, which has no terminal to appear on:
 
 `CI`, `CONTINUOUS_INTEGRATION`, `GITHUB_ACTIONS`, `CIRCLECI`, `TRAVIS`, `JENKINS_URL`, `BUILDKITE`, `GITLAB_CI`, `TF_BUILD`, `TEAMCITY_VERSION`, `DRONE`, `SEMAPHORE`
 
@@ -191,7 +194,7 @@ The entire telemetry implementation is in `src/sourcecode/telemetry/`. You can r
 
 Key files:
 - `config.py` — configuration read/write
-- `consent.py` — first-run invitation notice
+- `consent.py` — first-run disclosure notice
 - `events.py` — event schema
 - `filters.py` — privacy sanitization (the critical safety layer)
 - `transport.py` — HTTP transmission

{sourcecode-5.8.12 → sourcecode-5.8.13}/pyproject.toml

@@ -4,7 +4,7 @@ build-backend = "hatchling.build"
 
 [project]
 name = "sourcecode"
-version = "5.8.12"
+version = "5.8.13"
 description = "Persistent structural context and ultra-fast repeated analysis for AI coding agents"
 readme = "README.md"
 requires-python = ">=3.9"

{sourcecode-5.8.12 → sourcecode-5.8.13}/src/sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "5.8.12"
+__version__ = "5.8.13"

{sourcecode-5.8.12 → sourcecode-5.8.13}/src/sourcecode/cli.py

@@ -3033,13 +3033,59 @@ def _get_command_with_preprocessing(typer_instance: Any) -> Any:
 
     _orig_cmd_main = cmd.main
 
+    _TELEMETRY_COMMANDS = frozenset({
+        "repo-ir", "impact", "endpoints", "export", "validation", "delta", "contract-diff",
+        "plan", "compare", "trend", "timeline", "spring-audit", "verify-edit", "verify", "risk",
+        "enrich", "audit-report", "migrate-recipe", "data-exposure", "posture", "migrate-check",
+        "impact-chain", "pr-impact", "explain", "onboard", "review-pr", "fix-bug", "modernize",
+        "rename-class", "chunk-file", "activate", "selftest", "explain-endpoint", "regress", "version",
+        "schema", "config", "archetype", "cold-start", "telemetry", "mcp", "cache", "baseline",
+        "auth", "retrieve", "prepare-context",
+    })
+
+    def _telemetry_command(args_for_command: Optional[list[str]]) -> str:
+        """Extract only a registered CLI command, never a path or option value."""
+        tokens = list(args_for_command) if args_for_command is not None else sys.argv[1:]
+        for token in tokens:
+            if token in _TELEMETRY_COMMANDS:
+                return token
+        return "analyze"
+
+    def _telemetry_flags(args_for_command: Optional[list[str]]) -> list[str]:
+        tokens = list(args_for_command) if args_for_command is not None else sys.argv[1:]
+        try:
+            from sourcecode.telemetry.filters import _SAFE_FLAGS
+            return sorted({token for token in tokens if token in _SAFE_FLAGS})
+        except Exception:
+            return []
+
     def _cmd_main(args: Optional[list[str]] = None, **kwargs: Any) -> Any:
         if args is not None:
             # CliRunner / programmatic call: preprocess the explicit args list.
             _set_detected_path(".")
             args = _preprocess_args(list(args))
         # args=None → Click reads sys.argv; _preprocess_argv() in main_entry handled it.
-        return _orig_cmd_main(args=args, **kwargs)
+        started = time.monotonic()
+        command = _telemetry_command(args)
+        success = True
+        try:
+            return _orig_cmd_main(args=args, **kwargs)
+        except BaseException:
+            success = False
+            raise
+        finally:
+            try:
+                from sourcecode import telemetry as _tel
+                _tel.record(
+                    "execution_completed",
+                    cmd=("mcp" if command == "mcp" else "telemetry" if command == "telemetry" else "analyze"),
+                    command=command,
+                    flags=_telemetry_flags(args),
+                    duration_s=time.monotonic() - started,
+                    success=success,
+                )
+            except Exception:
+                pass
 
     cmd.main = _cmd_main
     return cmd
@@ -3055,7 +3101,7 @@ try:
 except Exception:
     pass
 
-telemetry_app = typer.Typer(help="Manage anonymous telemetry (off by default; opt-in).", rich_markup_mode="rich")
+telemetry_app = typer.Typer(help="Manage anonymous telemetry (on by default; disable any time).", rich_markup_mode="rich")
 app.add_typer(telemetry_app, name="telemetry")
 
 mcp_app = typer.Typer(help="MCP integration: setup, status, serve, remove.", rich_markup_mode="rich")
@@ -3083,9 +3129,8 @@ app.add_typer(retrieve_app, name="retrieve")
 def _maybe_show_telemetry_notice() -> None:
     """Show first-run telemetry notice once, on interactive TTYs only.
 
-    Telemetry is off by default (opt-in). The notice is an invitation, not a
-    disclosure: nothing has been collected when it appears. Marked as shown so it
-    appears only once.
+    Telemetry is on by default. The notice is a one-time disclosure of what is
+    collected and how to disable it.
     """
     try:
         from sourcecode.telemetry.config import has_been_asked, mark_asked
@@ -5314,26 +5359,7 @@ def main(
     perf.stop("serialize", _perf_serialize)
     perf.flush_recorder()
 
-    # 5. Telemetry (fire-and-forget, never blocks)
-    try:
-        from sourcecode import telemetry as _tel
-        _tel.record(
-            "execution_completed",
-            cmd="analyze",
-            flags=_active_flags(
-                dependencies, graph_modules, docs, full_metrics,
-                semantics, architecture, git_context, env_map,
-                code_notes, agent, compact, tree, no_redact, format,
-            ),
-            output_fmt=format,
-            file_count=len(sm.file_paths),
-            duration_s=time.monotonic() - _t0,
-            success=True,
-        )
-    except Exception:
-        pass
-
-    # 6. Write output (CLI-04)
+    # 5. Write output (CLI-04)
     _progress.finish()
     if format == "json":
         _uncommitted_fresh, _uncommitted_fresh_basis = _uncommitted_fact(
@@ -5926,17 +5952,6 @@ def prepare_context_cmd(
                 except Exception:
                     pass  # not JSON (or unreadable) → serve exactly what was stored
                 _emit_command_output(_cached_pctx, output_path, copy)
-                try:
-                    from sourcecode import telemetry as _tel
-                    _tel.record(
-                        "execution_completed",
-                        cmd="prepare-context",
-                        feature=task,
-                        output_fmt=format,
-                        duration_s=0.0,
-                    )
-                except Exception:
-                    pass
                 return
 
     _scope_files = None
@@ -6463,18 +6478,6 @@ def prepare_context_cmd(
         fmt=("yaml" if format == "yaml" else "json")
     )
 
-    try:
-        from sourcecode import telemetry as _tel
-        _tel.record(
-            "execution_completed",
-            cmd="prepare-context",
-            feature=task,
-            output_fmt=format,
-            duration_s=_time.perf_counter() - _t0,
-        )
-    except Exception:
-        pass
-
     from sourcecode.mcp_nudge import nudge_mcp_if_needed as _nudge
     _nudge()
 
@@ -6491,11 +6494,11 @@ def telemetry_status(
     enabled = is_enabled()
     choice = stored_choice()
     status = "enabled" if enabled else "disabled"
-    lines = [f"Telemetry: {status} (off by default; opt-in)"]
-    # "off because you said so" and "off because nobody asked you" are different
-    # answers, and a buyer auditing this needs to be told which one they have.
+    lines = [f"Telemetry: {status} (on by default; disable with `ask telemetry disable`)"]
+    # The default and an explicit disabled choice are different answers, and a
+    # buyer auditing this needs to be told which one they have.
     if choice is None:
-        lines.append("  No choice recorded — nothing has been collected or sent.")
+        lines.append("  No choice recorded — the on-by-default setting applies.")
     else:
         lines.append(f"  Your recorded choice: {'enabled' if choice else 'disabled'}.")
     lines.append(f"  Config: {config_file_path()}")
@@ -6508,7 +6511,7 @@ def telemetry_status(
 
 @telemetry_app.command("enable")
 def telemetry_enable() -> None:
-    """Opt in to anonymous telemetry."""
+    """Enable anonymous telemetry and remember the choice."""
     from sourcecode.telemetry.config import set_enabled
     from sourcecode import telemetry as _tel
     set_enabled(True)
@@ -6521,11 +6524,11 @@ def telemetry_enable() -> None:
 
 @telemetry_app.command("disable")
 def telemetry_disable() -> None:
-    """Opt out of anonymous telemetry."""
+    """Disable anonymous telemetry and remember the choice."""
     from sourcecode.telemetry.config import set_enabled
     set_enabled(False)
     typer.echo("Telemetry disabled. No data will be collected or sent.")
-    typer.echo("Telemetry is off by default; this choice is recorded so the notice stops asking.")
+    typer.echo("Telemetry is enabled by default; this choice is recorded so the notice stops appearing.")
     typer.echo("Re-enable at any time: ask telemetry enable")
 
 
@@ -14190,7 +14193,7 @@ def config_cmd(
     _answer = _TextAnswer(output_path)
     _answer.say(f"ask {__version__}")
     _answer.say(f"Config:    {config_file_path()}")
-    _answer.say(f"Telemetry: {'enabled' if is_enabled() else 'disabled'} (off by default; opt-in)")
+    _answer.say(f"Telemetry: {'enabled' if is_enabled() else 'disabled'} (on by default; disable with `ask telemetry disable`)")
     _answer.say("")
 
     # F-AX: the declaration may sit outside the analysed tree, and *which* file

{sourcecode-5.8.12 → sourcecode-5.8.13}/src/sourcecode/mcp/runner.py

@@ -7,11 +7,15 @@ lookup, no process fork, no stdout encoding issues.
 from __future__ import annotations
 
 import json
+import threading
 from typing import Any
 
 from typer.testing import CliRunner
 
 _runner = CliRunner()
+# CliRunner temporarily replaces process-global stdout/stderr.  MCP dispatches
+# tools concurrently, so every in-process invocation must share this lock.
+_runner_lock = threading.RLock()
 
 
 class CommandError(RuntimeError):
@@ -44,7 +48,8 @@ def run_command(args: list[str]) -> Any:
     # Pass raw args to invoke — the _cmd_main hook inside cli.py handles path
     # extraction via _preprocess_args. Pre-processing here would strip the path
     # from args, then _cmd_main would re-process the stripped list and lose it.
-    result = _runner.invoke(app, list(args))
+    with _runner_lock:
+        result = _runner.invoke(app, list(args))
 
     if result.exit_code != 0:
         stdout_raw = getattr(result, "output", "")