sourcecode 5.8.27__py3-none-any.whl → 5.8.29__py3-none-any.whl

sourcecode/__init__.py

@@ -4,4 +4,4 @@ ASK Engine is the product. ``ask`` is the canonical CLI command; ``sourcecode``
 the legacy compatibility alias and the Python/PyPI package name. See
 docs/PRODUCT_IDENTITY.md (normative)."""
 
-__version__ = "5.8.27"
+__version__ = "5.8.29"

sourcecode/__main__.py

@@ -0,0 +1,7 @@
+"""Module entry point used by detached workers and ``python -m sourcecode``."""
+
+from sourcecode.cli import main_entry
+
+
+if __name__ == "__main__":
+    main_entry()

sourcecode/_build_commit.py

@@ -1,5 +1,5 @@
 """Generated at build time by hatch_build.py. Do not edit (AUD-592-D04)."""
 
-BUILD_COMMIT = '4d2e115c6088c3aa7d7aa2441b7b3c632c75ad26'
+BUILD_COMMIT = '80201ca55c42b510274aa7aa814e363963667c2f'
 CLOSURE_PROVENANCE = {'Window': {'commit': '', 'status': 'uncited'}, '`AUD-588-F05`': {'commit': '470e4a4', 'status': 'present'}, '`AUD-590-B01` / `B-01`, `F-01`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B02` / `B-02`, `F-02`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B03` / `B-03`, `F-03`': {'commit': '', 'status': 'uncited'}, '`AUD-590-B04` / `B-04`, `F-04`': {'commit': '', 'status': 'uncited'}, '`AUD-590-R01` / `R-01`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A01` / `A-1`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A02` / `A-2`, `A-4`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A03` / `A-3`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A05` / `A-5`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A06` / `A-6`, `A-7`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A08` / `A-8`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A09` / `A-9`': {'commit': '', 'status': 'uncited'}, '`AUD-591-A10` / `A-10`': {'commit': '', 'status': 'uncited'}, '`AUD-592-A02` / `A-1` second half, `§12.5`': {'commit': '63f3d61', 'status': 'present'}, '`AUD-592-B01` / `B-8`': {'commit': '8329614', 'status': 'present'}, '`AUD-592-D01` / `D-1`': {'commit': '0f8e03f', 'status': 'present'}, '`AUD-592-D02` / `D-2`': {'commit': '1d3db4d', 'status': 'present'}, '`AUD-592-D03` / `D-3`': {'commit': 'f28fe40', 'status': 'present'}, '`AUD-592-R01` / `A-1`': {'commit': '216025f', 'status': 'present'}, '`AUD-592-R02` / `N-4`, reopens `AUD-513-N04`': {'commit': 'ec3050d', 'status': 'present'}, '`AUD-593-N01` / `N-01`': {'commit': 'dd6a706', 'status': 'present'}, '`AUD-593-N02` / `N-02`': {'commit': 'f539787', 'status': 'present'}, '`AUD-593-N03` / `N-03`': {'commit': '1dd0b1c', 'status': 'present'}, '`AUD-593-N05` / `N-05`': {'commit': 'aa89388', 'status': 'present'}, '`AUD-593-N06` / `N-06`': {'commit': 'aa584a6', 'status': 'present'}, '`AUD-594-N04` / `D-5`, disclosure half of `B-3`': {'commit': 'a0060b7', 'status': 'present'}, '`AUD-594-X01` / `A-1`, residual of `AUD-593-N03`': {'commit': 'dd222b9', 'status': 'present'}, '`AUD-594-X02` / `A-1` second half': {'commit': '1193937', 'status': 'present'}, '`AUD-594-X03` / `X-03`, residual of `AUD-593-N01`': {'commit': 'e89e8f0', 'status': 'present'}, '`AUD-594-X04`': {'commit': '05b8cc9', 'status': 'present'}, '`AUD-595-A02` / `N-5`, advisory half of `AUD-588-B11`': {'commit': '3e15227', 'status': 'present'}, '`AUD-595-A03` / `B-6` exit-code half': {'commit': 'ab7285f', 'status': 'present'}, '`AUD-595-A05`': {'commit': 'e0b3d10', 'status': 'present'}, '`AUD-595-A07`, narrow half of `AUD-592-A02`': {'commit': 'cc15177', 'status': 'present'}, '`AUD-595-B01` / §B': {'commit': 'b77a1ad', 'status': 'present'}, '`AUD-595-Q01`': {'commit': '91a6566', 'status': 'present'}, '`AUD-596-A01` / `ASK-DET-001`': {'commit': 'fa508b4', 'status': 'present'}, '`AUD-596-A02` / `ASK-SELF-001`': {'commit': '4dfadc8', 'status': 'present'}, '`AUD-596-A03` / `ASK-C1-001`': {'commit': 'bffa3a6', 'status': 'present'}, '`AUD-596-A04` / `ASK-UX-003` + `ASK-UX-004`': {'commit': 'f0aac3c', 'status': 'present'}, '`AUD-596-B01` / `B-01`, harder witness for `BUG-6`': {'commit': '567d09d', 'status': 'present'}, '`AUD-596-B02` / `B-02`, class residual of `R2`': {'commit': '', 'status': 'uncited'}, '`AUD-596-B03` / `B-03`': {'commit': 'a8cb814', 'status': 'present'}, '`AUD-596-B06` / `B-06`': {'commit': '8107927', 'status': 'present'}, '`AUD-596-B07` / `B-07`, class residual of `AUD-592-R02`': {'commit': 'e060485', 'status': 'present'}, '`AUD-596-B09` / `B-09`': {'commit': '5b8146c', 'status': 'present'}, '`AUD-596-B10` / `B-10`': {'commit': '5cb994d', 'status': 'present'}, '`AUD-596-B16` / `B-16`': {'commit': '1507f69', 'status': 'present'}, '`AUD-596-D01` / `B-13` + `B-14`': {'commit': '0b1bdf0', 'status': 'present'}, '`AUD-596-D02` / `B-08`, residual of `AUD-594-N04`': {'commit': 'e7f73c3', 'status': 'present'}, '`AUD-596-D03` / `ASK-AGT-001`': {'commit': '8c46967', 'status': 'present'}, '`AUD-596-D04` / `B-18`': {'commit': '040f027', 'status': 'present'}, '`AUD-596-D05` / `B-19`': {'commit': 'fd2bf68', 'status': 'present'}, '`AUD-596-D06` / `B-20`': {'commit': '784cd83', 'status': 'present'}, '`AUD-596-D07` / `B-17`, half refuted': {'commit': 'c3ff822', 'status': 'present'}, '`AUD-596-D08` / `B-22`, class residual of `AUD-591-A06`': {'commit': 'b396c6a', 'status': 'present'}, '`AUD-596-D09` / `B-23`, surviving half of `B26`': {'commit': 'fd3d63f', 'status': 'present'}, '`AUD-596-D10` / `B-29`': {'commit': '', 'status': 'uncited'}, '`AUD-596-D11` / `ASK-UX-005`': {'commit': 'f4b4f77', 'status': 'present'}, '`AUD-596-D12` — six hints that send the reader back to the error': {'commit': '498df44', 'status': 'present'}, '`AUD-596-D13` / `B-28`': {'commit': '1014c72', 'status': 'present'}, '`AUD-596-D14` / `B-15`, narrow half of `B20`': {'commit': '10f2827', 'status': 'present'}, '`AUD-596-R01` / `B-05`': {'commit': '', 'status': 'uncited'}, '`AUD-596-X01` / `ASK-GATE-001`, gating half of `B24`': {'commit': 'e59c655', 'status': 'present'}, '`AUD-596-X02` / `ASK-UX-001` + `ASK-UX-002` + `B-21`': {'commit': 'f6ebf50', 'status': 'present'}, '`AUD-597-A01` / `ASK-UX-001` + `N-01`': {'commit': 'f8cf061', 'status': 'present'}, '`AUD-597-A02` / `ASK-UX-008` + `ASK-DOC-002`': {'commit': '9d47a4c', 'status': 'present'}, '`AUD-597-A03` / `ASK-DET-001`': {'commit': '4c7622a', 'status': 'present'}, '`AUD-597-A04` / `ASK-LEDGER-001`': {'commit': '46fb870', 'status': 'present'}, '`AUD-597-D01` / `B-04`': {'commit': '1094e6a', 'status': 'present'}, '`AUD-597-D02` / `ASK-DOC-001`': {'commit': 'ecb1bb7', 'status': 'present'}, '`AUD-597-D03` / `N-06`': {'commit': '9784333', 'status': 'present'}, '`AUD-597-D04` / `N-05`': {'commit': 'e51c087', 'status': 'present'}, '`AUD-597-D05` / `N-04`, fourth appearance of `C4-27`': {'commit': '9cccc15', 'status': 'present'}, '`AUD-597-D06` / `ASK-CLI-001`': {'commit': '178aa6d', 'status': 'present'}, '`AUD-597-D07` / `N-03`': {'commit': '9245e35', 'status': 'present'}, '`AUD-597-R01` / `ASK-PERF-001`': {'commit': '6910054', 'status': 'present'}, '`AUD-597-R02` / `ASK-ENC-001`': {'commit': 'ce6dac1', 'status': 'present'}, '`AUD-597-R03` / `ASK-UX-002`': {'commit': 'c57e50b', 'status': 'present'}, '`AUD-597-X01` / `ASK-BUILD-001` + `ASK-META-001` / `B-12`': {'commit': '354338b', 'status': 'present'}, '`AUD-598-B01` / `ASK-META-001`': {'commit': 'b2f7c65', 'status': 'present'}, '`AUD-598-B02` / `ASK-UX-002`': {'commit': '56a4bf7', 'status': 'present'}, '`AUD-598-B03` / `B-11`': {'commit': 'c63cb24', 'status': 'present'}, '`AUD-598-B04` / `N-02`': {'commit': '187937f', 'status': 'present'}, '`AUD-598-R01` / `ASK-PERF-002`': {'commit': '', 'status': 'uncited'}, '`AUD-598-X01` / `N-01` + `B-13` + `B-14` + `B-29` + `N-06`': {'commit': '6f2f5a4', 'status': 'present'}, '`AUD-600-B01` / `P-01`': {'commit': '366ffed', 'status': 'present'}, '`AUD-600-B02` / `P-02` + `ASK-PACK-002`': {'commit': '2a814c3', 'status': 'present'}, '`AUD-600-B03` / `ASK-PACK-001`': {'commit': '452f2a0', 'status': 'present'}, '`AUD-600-D01`': {'commit': '1224e1b', 'status': 'present'}, '`AUD-600-D02`': {'commit': 'eab8172', 'status': 'present'}, '`AUD-600-R01` / `R-01`': {'commit': '88add64', 'status': 'present'}, '`AUD-601-B01` / `N-02`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-B02` / `ASK-PACK-004`': {'commit': '', 'status': 'uncited'}, '`AUD-601-D01` / `N-01`, `ASK-UX-001`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-D02` / `B-13`, `B-14`, 5th round': {'commit': '', 'status': 'uncited'}, '`AUD-601-M01` / `B-26`, `B-27` retracted': {'commit': '', 'status': 'uncited'}, '`AUD-601-R01` / `R-02`': {'commit': '', 'status': 'uncited'}, '`B-3`': {'commit': '773268d', 'status': 'present'}, '`B-6`': {'commit': '17c6e06', 'status': 'present'}, '`B-8`': {'commit': '8329614', 'status': 'present'}, '`BUG-3` / `443b345`': {'commit': '', 'status': 'uncited'}, '`BUG-4a` / `AUD-588-B11` residual': {'commit': '24b4185', 'status': 'present'}, '`BUG-4b` / `AUD-588-B11` residual': {'commit': '0376350', 'status': 'present'}, '`E-39`, class residual of `AUD-593-N06`': {'commit': '25fc11f', 'status': 'present'}, '`N-5`': {'commit': 'c68083f', 'status': 'present'}, '`N-7`': {'commit': '082e9de', 'status': 'present'}, '`R-1`': {'commit': '424fb1c', 'status': 'present'}, '`R-2`': {'commit': '5158b92', 'status': 'present'}, '`R-3`': {'commit': '88aec04', 'status': 'present'}, '`R-4`': {'commit': '04fd04f', 'status': 'present'}}
 CLOSURE_COVERAGE = {'closed_rows': 113, 'present': 88, 'absent': 0, 'unresolved': 0, 'uncited': 25, 'unknown': 0}

sourcecode/_docs/DEFECT-LEDGER.md

@@ -16,6 +16,30 @@ The facts these rows are keyed to are published: `ask schema facts-v1` prints th
 
 ## Current Synchronization
 
+**External `5.8.28` audit received, 2026-08-26 - `AUD-604`.**
+[`AUDIT-2026-08-26-EXTERNAL-5.8.28.md`](AUDIT-2026-08-26-EXTERNAL-5.8.28.md) confirms the
+semantic fixes from the previous round and adds three actionable rows: `AUD-604-O01`
+(`posture --diff --compact --limit` is effectively a no-op on nested output),
+`AUD-604-P01` (cold-cost regression signal requiring controlled profiling), and
+`AUD-604-U01` (stale root-help timing headline). Detached execution remains implemented
+in the current source, with native Windows artefact verification still pending. The audit's
+duplicated claim about `python -m sourcecode.cli` is historical and does not describe the
+current `python -m sourcecode` plus `__main__.py` implementation.
+
+**Current `5.8.29` queue:** artefact verification for `AUD-604-R01`. `AUD-604-S01`,
+`AUD-604-D01`, `AUD-604-U02`, `AUD-604-O01` and `AUD-604-U01` are closed in `5.8.28`.
+`AUD-604-P01` is closed as an unconfirmed, non-attributable performance signal after
+controlled profiling; it remains a benchmark follow-up, not a parser fix. WebScripts and
+root-only subcommand `--compact` remain excluded.
+
+**External `5.8.27` audit received, 2026-08-26 — `AUD-603`.** [`AUDIT-2026-08-26-EXTERNAL-5.8.27.md`](AUDIT-2026-08-26-EXTERNAL-5.8.27.md) confirms the SEC-004 and Boot 3 fixes, but reopens detached execution because the direct `python -m sourcecode.cli` worker exits without invoking `main_entry`. It adds a DEAD-001 comment-prose false positive, a `posture --diff --compact` output-ceiling contract defect, and a cold-performance regression signal requiring controlled profiling. The stale timing headline and non-interactive selftest scope warning remain open. WebScripts remains unconfirmed and root-only subcommand `--compact` remains by design.
+
+**Current `5.8.27` queue:** `AUD-603-R01` · `AUD-603-S01` · `AUD-603-O01` · `AUD-603-P01` · `AUD-603-U01` · `AUD-603-U02`. This supersedes the earlier AUD-602 implementation-status note for the reopened rows; its historical commits remain evidence, not closure.
+
+Implementation status on this branch: `R01`, `S01`, `O01`, `U01` and `U02` have isolated
+fix commits and affected local batteries pass. Native Windows verification remains pending
+for detached execution and field scope warnings; `P01` remains profiling-only.
+
 **External `5.8.26` audit received, 2026-08-26 — `AUD-602`.** [`AUDIT-2026-08-26-EXTERNAL-5.8.26.md`](AUDIT-2026-08-26-EXTERNAL-5.8.26.md) adds six actionable items: detached execution on Git Bash/MSYS, `SEC-004` false positives in Spring Security library code, inconsistent non-applicable `boot3_readiness`, manifest-parsing cost requiring profiling, stale root-help timing guidance, and an unguarded multi-repository `selftest` path. The initial root-command hang diagnosis is retracted after a controlled cold/warm retest; it is recorded as slow cold analysis plus insufficient progress communication, not a deadlock. The Micronaut WebScripts message remains unconfirmed, and root-only `--compact` on subcommands is a design choice with a correct `INVALID_USAGE` response, not a defect.
 
 **`AUD-602` attack order:** `AUD-602-R01` · `AUD-602-S01` · `AUD-602-D01` · `AUD-602-M01` · `AUD-602-UX01` · `AUD-602-UX02`. No item is closed from the report alone; Windows shell variants, original witness repositories and controlled profiling are required where stated.

sourcecode/_docs/USER_GUIDE.md

@@ -46,10 +46,14 @@ CLI commands        — impact, endpoints, spring-audit, explain, … each a pro
 The key idea: the extraction is **content-addressed**. Commands reuse the parse cache and,
 where their analysed scope matches, the shared Canonical IR; `ask cache model` names what a
 warm buys for each command rather than implying that every projection costs the same. In
-5.8.27, `validation` enters through that shared CIR and `data-exposure` reuses one semantic
+5.8.29, `validation` enters through that shared CIR and `data-exposure` reuses one semantic
 model across all declared label seeds. (The extraction and consumption contract is fixed in
 the architecture ADRs 0001–0004 under `docs/architecture/`.)
 
+The current external audit intake is tracked in
+[`AUDIT-2026-08-26-EXTERNAL-5.8.27.md`](AUDIT-2026-08-26-EXTERNAL-5.8.27.md); in
+particular, detached execution and bounded output remain under verification.
+
 ---
 
 ## The semantic engine
@@ -178,7 +182,7 @@ pipx install sourcecode   # isolated install, no venv needed
 
 # Verify
 ask version
-# ask 5.8.27
+# ask 5.8.29
 ```
 
 Requires Python 3.9+.

sourcecode/baseline_autocapture.py

@@ -38,6 +38,8 @@ from dataclasses import dataclass
 from pathlib import Path
 from typing import TYPE_CHECKING, Any, Iterable, Optional
 
+from sourcecode.path_display import portable_path
+
 if TYPE_CHECKING:  # pragma: no cover - typing only
     from sourcecode.canonical_ir import CanonicalRepositoryIR
 
@@ -55,7 +57,7 @@ _FALSE = frozenset({"0", "false", "no", "off"})
 
 def _published_path(path: Path) -> str:
     """Serialize a filesystem path with the stable separator used by payloads."""
-    return path.as_posix()
+    return portable_path(path)
 
 # Actions.
 CAPTURED: str = "captured"
@@ -396,7 +398,7 @@ def decide(
     attribution, then idempotency.
     """
     common = {
-        "history_dir": str(history_dir),
+        "history_dir": _published_path(history_dir),
         "commit": commit,
         "history_size": size,
     }

sourcecode/cache_model.py

@@ -829,12 +829,21 @@ def cost_sentence() -> str:
             f"{_thousands(int(_gate_cell['java_files']))}-file repository "
             f"({_gate_cell['cache_state']} cache, {_gate_cell['host_class']})."
         )
+    # AUD-604-U01: the external 5.8.28 review observed ~184 s for the root
+    # cold path at the same scale. It is useful context, but not a replacement
+    # for the spring-audit field anchor because the command and protocol differ.
+    current_observation = (
+        " The latest external review also observed about 184 s for the root "
+        "cold path at this scale on 5.8.28; that figure is provisional until "
+        "the controlled release benchmark is reproduced."
+    )
     return (
-        f"Cost tracks the command class and the build, not the file count: "
+        f"Historical field anchor only: cost tracks the command class and the build, "
+        f"not the file count: "
         f"per-symbol queries are the fast path, inventory commands scale with "
         f"files, and a repository-wide audit measured {seconds:g} s on a "
         f"{_thousands(FIELD_ANCHOR_JAVA_FILES)}-file repository "
-        f"({FIELD_ANCHOR_MEASURED_VERSION}{stale}).{gate} `ask cache model` prints "
+        f"({FIELD_ANCHOR_MEASURED_VERSION}{stale}).{current_observation}{gate} `ask cache model` prints "
         f"the figure and the build behind it for every command; ASK_PROGRESS "
         f"narrates supervised work, while ASK_MAX_ANALYSIS_SECONDS bounds "
         f"{budget_tiers_phrase()}."

sourcecode/cli.py

@@ -49,6 +49,7 @@ from sourcecode.caller_metrics import (
     CYCLE_METRIC_RECONCILIATION,
 )
 from sourcecode.repository_ir import extract_java_endpoints as _extract_java_endpoints
+from sourcecode.path_display import portable_path
 
 
 # ---------------------------------------------------------------------------
@@ -1842,7 +1843,7 @@ def _write_root_partial_stub(output: "Path", target: "Path") -> None:
                     "schema_version": "partial-analysis-v1",
                     "partial": True,
                     "command": "ask",
-                    "scope": {"path": str(target)},
+                    "scope": {"path": portable_path(target)},
                     "started_at": _dt.datetime.now(_dt.timezone.utc).isoformat(),
                     "status": "running",
                     "reason": (
@@ -10110,7 +10111,7 @@ def plan_cmd(
         data["scan_truncated"] = _plan_scan_trunc
     # The tree these components and candidates came from: `--path` defaults to
     # `.`, so a run from the wrong directory answers about another repository.
-    data.setdefault("scope", {"path": str(target_dir)})
+    data.setdefault("scope", {"path": portable_path(target_dir)})
     _prog.finish()
 
     output = _serialize_dict(data, format)
@@ -10231,7 +10232,7 @@ def compare_cmd(
     # The tree these candidates came from. `--path` defaults to `.`, so a run
     # from the wrong directory offered candidates from a different repository
     # with nothing naming the repository they belonged to.
-    data.setdefault("scope", {"path": str(target_dir)})
+    data.setdefault("scope", {"path": portable_path(target_dir)})
     _prog.finish()
 
     _unresolved = [c["target"] for c in data["candidates"] if not c["resolved"]]
@@ -14182,6 +14183,11 @@ def posture_cmd(
         _posture_limit = 1 if data.get("summary", {}).get("unresolved", 0) else 0
     bound_lists(
         data, POSTURE_BOUNDED_LISTS, _posture_limit,
+        # `--compact` is a size contract for agent output. The monotone
+        # optimisation may keep a list whole when its disclosure costs more
+        # than that individual cut, leaving a large diff above the ceiling.
+        # An explicit --limit remains a precise shape request; compact must
+        # actually remove every registered body.
         monotone=(limit is None and compact),
     )
 
@@ -15892,7 +15898,7 @@ def modernize_cmd(
         result = {
             "schema_version": _MODERNIZE_SCHEMA,
             "workflow": "modernize",
-            "path": str(root),
+            "path": portable_path(root),
             "tier": "free",
             "tier_note": (
                 "This repository exceeds the free-tier size limit. "
@@ -15918,7 +15924,7 @@ def modernize_cmd(
         result = {
             "schema_version": _MODERNIZE_SCHEMA,
             "workflow": "modernize",
-            "path": str(root),
+            "path": portable_path(root),
             "summary": _summary,
             "hotspot_candidates": hotspots,
             "high_coupling_nodes": [
@@ -16421,10 +16427,11 @@ def selftest_cmd(
 
         nested = nested_repository_count(target)
         if nested:
-            _notice(
+            typer.echo(
                 f"selftest is scanning {nested} nested Git repository(s) under the "
                 "implicit current-directory path; pass an explicit repository path "
-                "to scope the ledger run"
+                "to scope the ledger run",
+                err=True,
             )
     _enforce_format("selftest", format)
     selected = tuple(part.strip() for part in (rows or "").split(",") if part.strip())
@@ -18282,9 +18289,9 @@ def cache_status_cmd(
     target = Path(path).resolve()
     _git_root = _resolve_repo_root(Path(path))
     stats = _cm.status(target)
-    stats["scope"] = str(target)
+    stats["scope"] = portable_path(target)
     if _git_root != target:
-        stats["git_root"] = str(_git_root)
+        stats["git_root"] = portable_path(_git_root)
     if json_output:
         import json as _j
         _emit_text_output(_j.dumps(stats, indent=2, ensure_ascii=False), copy, output_path)
@@ -18922,7 +18929,7 @@ def cache_model_cmd(
     if json_output:
         import json as _j
         _payload = _cmodel.as_dict(_here)
-        _payload["scope"] = str(Path(path).resolve())
+        _payload["scope"] = portable_path(Path(path).resolve())
         _payload["scope_note"] = (
             "The cache model is global; this path is accepted so cache model, "
             "cache status and cache freshness share one path grammar."

sourcecode/detach.py

@@ -156,12 +156,11 @@ def run_detached(args: "list[str]", *, root: Path) -> dict:
     """Start `args` (already free of the flag) detached; return the envelope."""
     stamp = f"{int(time.time())}-{os.getpid()}"
     log_path = logs_dir(root) / f"{stamp}.log"
-    # Invoke Python directly instead of re-entering an installed console
-    # launcher (ask.exe -> shim -> worker). The shorter process tree is what
-    # makes Windows job-object breakaway reliable under MSYS/Git Bash.
-    argv = [sys.executable, "-m", "sourcecode.cli", *args]
-    if sys.argv[0].endswith(".py"):
-        argv = [sys.executable, sys.argv[0], *args]
+    # Invoke the package's executable module instead of re-entering an
+    # installed console launcher (ask.exe -> shim -> worker). The shorter
+    # process tree is what makes Windows job-object breakaway reliable under
+    # MSYS/Git Bash, and __main__.py guarantees this actually runs the CLI.
+    argv = [sys.executable, "-m", "sourcecode", *args]
     pid, broke_away = _spawn(argv, log_path)
     return {
         "schema_version": SCHEMA_VERSION,

sourcecode/envelope.py

@@ -31,6 +31,8 @@ import subprocess
 from pathlib import Path
 from typing import Any, Optional
 
+from sourcecode.path_display import portable_path
+
 #: Shape of the `_meta` block itself. Bump when a field's meaning changes.
 ENVELOPE_VERSION = "1"
 
@@ -104,9 +106,9 @@ def repository_identity(target: "Path | str") -> "dict[str, Any]":
     try:
         resolved = Path(target).resolve()
     except Exception:
-        return {"path": str(target), "is_git_repository": False,
+        return {"path": portable_path(target), "is_git_repository": False,
                 "tree_state": "unknown", "git_head": None, "tree_id": None}
-    block: dict[str, Any] = {"path": str(resolved), "is_git_repository": False,
+    block: dict[str, Any] = {"path": portable_path(resolved), "is_git_repository": False,
                              "tree_state": "not-a-git-repository",
                              "git_head": None, "tree_id": None}
     try:
@@ -203,7 +205,7 @@ def build_meta(
     if target is not None:
         try:
             resolved = Path(target).resolve()
-            scope: dict[str, Any] = {"path": str(resolved)}
+            scope: dict[str, Any] = {"path": portable_path(resolved)}
             if resolved.is_dir():
                 # AUD-601-D02: one authority for repository identity. This block
                 # read the tree once for `run_id` and then asked git for HEAD a

sourcecode/graph_analyzer.py

@@ -8,6 +8,7 @@ from pathlib import Path, PurePosixPath
 from typing import Any, Literal, Optional
 
 from sourcecode.detectors.parsers import load_json_file, load_toml_file
+from sourcecode.path_display import portable_path
 from sourcecode.schema import EntryPoint, GraphEdge, GraphNode, ModuleGraph, ModuleGraphSummary
 from sourcecode.tree_utils import flatten_file_tree
 
@@ -186,7 +187,7 @@ class GraphAnalyzer:
         workspace: str | None,
     ) -> ModuleGraph:
         source_files = [
-            path
+            portable_path(path)
             for path in flatten_file_tree(file_tree)
             if Path(path).suffix in self._SUPPORTED_EXTENSIONS and (root / path).is_file()
         ]
@@ -213,7 +214,7 @@ class GraphAnalyzer:
         java_import_edges = self._build_jvm_java_import_edges(root, source_files, jvm_types)
 
         # .NET: project-level graph from .csproj/.fsproj/.vbproj manifests
-        all_tree_paths = [p for p in flatten_file_tree(file_tree)]
+        all_tree_paths = [portable_path(p) for p in flatten_file_tree(file_tree)]
         dotnet_project_paths = [
             p for p in all_tree_paths
             if Path(p).suffix.lower() in self._DOTNET_PROJECT_EXTENSIONS

sourcecode/output_bounds.py

@@ -68,6 +68,10 @@ POSTURE_BOUNDED_LISTS: "tuple[str, ...]" = (
     "only_in_right",
     "left_active",
     "right_active",
+    # AUD-604-O01. The real diff projection publishes endpoint rows under
+    # `endpoint_access.endpoints`; registering only the synthetic `changed`
+    # shape left the largest nested list untouched by `--limit`.
+    "endpoints",
     # AUD-602-R02. `posture --diff` caps the per-profile bean and security
     # lists, but the actionable delta is `endpoint_access.changed`: one row per
     # request whose decision moves between the two profile sets. Omitting it

sourcecode/path_admission.py

@@ -24,6 +24,7 @@ from dataclasses import dataclass
 from pathlib import Path
 
 from sourcecode.error_schema import INVALID_INPUT_CODE
+from sourcecode.path_display import portable_path
 
 #: Why a path was refused. ``None`` on an admitted path.
 MISSING = "missing"
@@ -56,7 +57,7 @@ def admit_repo_path(raw: Path | str) -> PathAdmission:
     path, and an error message quoting that rewrite sends the user hunting for
     a directory they never named.
     """
-    raw_text = str(raw)
+    raw_text = portable_path(raw)
     try:
         resolved = Path(raw_text).resolve()
     except OSError:

sourcecode/path_display.py

@@ -0,0 +1,7 @@
+"""Stable filesystem path spelling for machine-readable output."""
+from __future__ import annotations
+
+
+def portable_path(value: object) -> str:
+    """Return a path using forward slashes on every supported host."""
+    return str(value).replace("\\", "/")

sourcecode/repository_ir.py

@@ -26,6 +26,7 @@ from pathlib import Path
 from typing import Any, Callable, Iterable, Iterator, Optional
 
 from sourcecode.cache import repo_id as _cache_repo_id
+from sourcecode.path_display import portable_path
 from sourcecode.caller_metrics import CALLER_METRIC_RECONCILIATION, caller_classes
 from sourcecode.caller_metrics import declared_tags as _caller_declared_tags
 from sourcecode.degradation import cap_effect as _cap_effect
@@ -6623,6 +6624,8 @@ def build_repo_ir(
 
     Returns aggregated deterministic IR dict (schema_version=final-v1).
     """
+    # Relative paths are part of the IR contract, not OS-specific display text.
+    file_paths = [portable_path(path) for path in file_paths]
     if custom_security is None:
         custom_security = _load_custom_security(root)
     _custom_sec_tuple = tuple(custom_security)
@@ -7803,7 +7806,7 @@ def analysed_tree_scope(root: Path) -> "dict[str, Any]":
     except OSError:
         pass
     return {
-        "path": str(resolved),
+        "path": portable_path(resolved),
         "is_repository_root": is_repo,
         "nested_repositories": len(nested),
         "basis": (

sourcecode/security_config_scan.py

@@ -548,6 +548,23 @@ def _control_is_live_below(live_source: str, end: int, pattern: "re.Pattern") ->
     return bool(pattern.search(window[:stop]))
 
 
+def _is_commented_annotation_directive(text: str) -> bool:
+    """Distinguish a commented annotation from prose that mentions one."""
+    for line in text.splitlines():
+        candidate = line.strip()
+        if candidate.startswith("//"):
+            candidate = candidate[2:].lstrip()
+        elif candidate.startswith("/*"):
+            candidate = candidate[2:].lstrip("* ")
+        elif candidate.startswith("*"):
+            candidate = candidate[1:].lstrip()
+        else:
+            continue
+        if candidate.startswith("@"):
+            return True
+    return False
+
+
 def _scan_commented_controls(
     source: str,
     rel: str,
@@ -586,6 +603,12 @@ def _scan_commented_controls(
         for pattern, symbol, detail in rules:
             if not pattern.search(text):
                 continue
+            if (
+                not xml
+                and symbol == "commented_security_annotation"
+                and not _is_commented_annotation_directive(text)
+            ):
+                continue
             if not xml and _control_is_live_below(live_source or "", end, pattern):
                 continue
             line = _line_of(source, start)

sourcecode/tree_utils.py

@@ -3,6 +3,8 @@ from __future__ import annotations
 from pathlib import Path
 from typing import Any
 
+from sourcecode.path_display import portable_path
+
 
 def safe_read_text(path: Path) -> str:
     """Read a text file with encoding fallback to handle Latin-1 / UTF-8 ambiguity.
@@ -26,7 +28,7 @@ def flatten_file_tree(file_tree: dict[str, Any], prefix: str = "") -> list[str]:
     """Aplana el file_tree jerarquico a paths relativos."""
     paths: list[str] = []
     for name, value in file_tree.items():
-        current = f"{prefix}/{name}" if prefix else name
+        current = portable_path(f"{prefix}/{name}" if prefix else name)
         paths.append(current)
         if isinstance(value, dict):
             paths.extend(flatten_file_tree(value, current))
@@ -39,7 +41,7 @@ def find_files_by_name(
     """Return all paths in the tree whose filename matches `filename`."""
     paths: list[str] = []
     for key, value in file_tree.items():
-        current = f"{prefix}/{key}" if prefix else key
+        current = portable_path(f"{prefix}/{key}" if prefix else key)
         if isinstance(value, dict):
             paths.extend(find_files_by_name(value, filename, current))
         elif key == filename:

sourcecode/verify_repo.py

@@ -43,6 +43,7 @@ from pathlib import Path
 from typing import Any, Optional
 
 from sourcecode.remedies import remedy
+from sourcecode.path_display import portable_path
 
 VERIFY_SCHEMA = "verify-v1"
 
@@ -270,7 +271,7 @@ def verify_repo(
             verdict="unverified",
             exit_code=EXIT_PASS if allow_unverified else EXIT_UNVERIFIED,
             fail_on=fail_on,
-            contracts_file=str(contracts_file) if contracts_file else None,
+            contracts_file=portable_path(contracts_file) if contracts_file else None,
             contract_count=0,
             baseline_file=str(resolved_baseline) if resolved_baseline.is_file() else None,
             unverified_reason=UNVERIFIED_NO_CONTRACTS,
@@ -333,7 +334,7 @@ def verify_repo(
         new_violations=tuple(_violation_dict(v) for v in new),
         baselined_violations=tuple(_violation_dict(v) for v in baselined),
         resolved_violations=tuple(resolved),
-        contracts_file=str(contracts_file) if contracts_file else None,
+        contracts_file=portable_path(contracts_file) if contracts_file else None,
         contract_count=contract_count,
         baseline_file=str(resolved_baseline) if resolved_baseline.is_file() else None,
         reasons=tuple(reasons),
@@ -361,12 +362,12 @@ def capture_baseline(
     if dry_run:
         return {
             "baseline_file": None,
-            "would_write": str(target),
+            "would_write": portable_path(target),
             "schema_version": BASELINE_SCHEMA,
             "head_sha": _head_sha(root),
             "violations": [_violation_dict(v) for v in violations],
         }
     return {
-        "baseline_file": str(target),
+        "baseline_file": portable_path(target),
         **write_baseline(target, violations, head_sha=_head_sha(root)),
     }

{sourcecode-5.8.27.dist-info → sourcecode-5.8.29.dist-info}/METADATA

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: sourcecode
-Version: 5.8.27
+Version: 5.8.29
 Summary: Persistent structural context and ultra-fast repeated analysis for AI coding agents
 Project-URL: Homepage, https://github.com/HarounDominique/sourcecode
 Project-URL: Repository, https://github.com/HarounDominique/sourcecode
@@ -59,7 +59,7 @@ Description-Content-Type: text/markdown
 > question. All analysis is local and deterministic; see [Privacy](#configuration--privacy)
 > before inspecting a repository whose telemetry policy you need to control.
 
-![Version](https://img.shields.io/badge/version-5.8.27-blue)
+![Version](https://img.shields.io/badge/version-5.8.29-blue)
 ![Python](https://img.shields.io/badge/python-3.9%2B-green)
 
 Copyright (c) 2026 Dominique Haroun. All rights reserved. ASK Engine 5.7.0 and
@@ -177,13 +177,13 @@ set `ASK_MAX_RSS_MB=<megabytes>`; if the process exceeds it, ASK refuses the
 answer with `MEMORY_TOO_LARGE`, including the observed peak and limit. Leave it
 unset, or set it to `0`, to disable the ceiling explicitly.
 
-**Current performance status.** Release 5.8.27 retains the shared Canonical IR
+**Current performance status.** Release 5.8.29 retains the shared Canonical IR
 path used by `validation` and now passes that same CIR into labelled `data-exposure`
 runs; the no-label path remains parse-free. These are implementation properties,
 not duration promises. A controlled external warm-path audit has opened performance
 and bounded-output regressions for this release; use `ask cache model <repo>` and
 `--progress stderr` for supervised runs, and consult the
-[active audit intake](docs/AUDIT-2026-08-23-EXTERNAL-5.8.26.md) before treating a
+[active audit intake](docs/AUDIT-2026-08-26-EXTERNAL-5.8.27.md) before treating a
 historical timing or bounded flag as a current guarantee.
 
 **What a warm actually covers.** `ask cache warm` runs the compact analysis: it rebuilds the
@@ -210,7 +210,7 @@ brew tap haroundominique/sourcecode && brew install sourcecode
 # pip / pipx
 pipx install sourcecode        # or: pip install sourcecode
 
-ask version                    # ask 5.8.27 — and, on a build that has aged,
+ask version                    # ask 5.8.29 — and, on a build that has aged,
                                # how many releases have probably shipped since
 ```
 

{sourcecode-5.8.27.dist-info → sourcecode-5.8.29.dist-info}/RECORD

@@ -1,5 +1,6 @@
-sourcecode/__init__.py,sha256=wkviigo_btJqJ7i2CPUnvFIqYtHiI4-uT3lKC1wcGKU,309
-sourcecode/_build_commit.py,sha256=Oz6Fu2_OoYeNIXb6GIdl4x_Cj7o8dyFSEyIc33EUHFM,8740
+sourcecode/__init__.py,sha256=BsyoEScwgZp_z4C0WinmN5nS1_OEYjyIMz8mZ9xet7k,309
+sourcecode/__main__.py,sha256=qDFVkobwsdZrX0B3stiRqsUNivVpybKO-egzAwCW4xw,165
+sourcecode/_build_commit.py,sha256=DVrTbRV7HbPiVF2bLsvg-m6ns5u__Yao6-ev4XPnxqk,8740
 sourcecode/adaptive_scanner.py,sha256=yJBKjNpkY6bpueYJ2YnRezen3sYZDecEt7WaaNWdqug,9466
 sourcecode/analysis_budget.py,sha256=ZuNEboPF8A6GK-_V7WNt92ezgriga7_Rbr-vvSN4UEE,4183
 sourcecode/answer_bounds.py,sha256=_51_DCuYEUmI_xwUFxDMiprSavkNakkLiIBbPjevQ3M,9793
@@ -13,13 +14,13 @@ sourcecode/audit_clusters.py,sha256=9uqUh8x2qlsqD0eiXdtu7RQEtFBCiC254xustlCcK40,
 sourcecode/audit_recipe.py,sha256=bpFqKuf84SSZAjtTnfFsLUz_20SXx-B_ggppdXedNwY,12817
 sourcecode/audit_report.py,sha256=tsx9lmxEenu_JZ0bSpX5ufhGH3ThNo2luj6a4N5DrHg,14240
 sourcecode/audit_since.py,sha256=bkl2tUuYcmS0epvKR9SltXMYx7RSoWedJL0zDGe8xGI,9601
-sourcecode/baseline_autocapture.py,sha256=Mr28hE1JRdvZvNqS0ejRilwzdY1nfL-4XZOoCtl5xPE,21067
+sourcecode/baseline_autocapture.py,sha256=B8xmKedSmStiFJOmC2i2o_2_nlgA91ClOQVeZ_zSsKQ,21134
 sourcecode/breaking_changes.py,sha256=iaTEkegVGnR_DEQP45U66GQKMkq-_qNM60nv7XEPm7k,17504
 sourcecode/build_modules.py,sha256=rsT8reXoeOGztX28SNwem3yGdBhAC5VJx9RL2vRp_d0,15935
 sourcecode/build_stamp.py,sha256=YWlnT8CEFzMre5pacRQkc244BfZNG5owySIyP9Dq4pw,7677
 sourcecode/bundled_docs.py,sha256=KymEkB7P8oeg0-PjcD8eRSDhqQbwQxDUbHv1i00LQOc,2663
 sourcecode/cache.py,sha256=z_1T0ClTbC3DaG_Fo-6_HKRUdBXHbwNoVvj8gZmQVGo,45591
-sourcecode/cache_model.py,sha256=_yi2ncrz5G8LpdaALymPgve16VeTDnHKtB8ysLjX1g8,73169
+sourcecode/cache_model.py,sha256=fI5dEvK2-dA246a_-DHyq8zumBPR0rjYvyxx397SNW4,73716
 sourcecode/cache_observation.py,sha256=5E2BeqiYE5wBCbvDglkc5A9fTNhXkT_OhcDuuCqRu4Q,5622
 sourcecode/call_surface.py,sha256=fiqYfHooxN1fX9oQoysq1LS3LoZcobhyUNjAGEZKpwk,4148
 sourcecode/caller_metrics.py,sha256=zGc3sHRRwEJgAGmyfqEiH69mD9w5rOqMUhzby8Vmm_w,12599
@@ -30,7 +31,7 @@ sourcecode/change_plan.py,sha256=drAoDsqFplutCLc6Y0xue7sYkTls0SpYh7aOXvttv3I,129
 sourcecode/ci_output.py,sha256=X4NRokWWMRF9Ex8OQrEO2g04GzJ00GDP5zYIoqI9YCc,4625
 sourcecode/cir_graphs.py,sha256=RytqSv1WF8kdlfXj2fPQz16LY4akS2kyThbdWL8beCQ,14835
 sourcecode/classifier.py,sha256=JBzPwSSrDG-tUHAbcKB678HRbjLpD-ohzbzzO62mgpo,20114
-sourcecode/cli.py,sha256=y1Zv5ZSdIG6Nlt6dsD1-97NbIpFOEZlTappJ2noIOtI,866590
+sourcecode/cli.py,sha256=FMKLhy4DUkBX2usbxtMoOLXGnyxKVVJlSf-SqiukyOs,867099
 sourcecode/client_calls.py,sha256=YOPnfRZzRyqmdHvXSVeiunW8cuiuCuWXacNIQRgKMCw,22640
 sourcecode/code_notes_analyzer.py,sha256=EJemNCNc9Dn-1RZYu-aNbK0ELzmsyC4s6FdHi3XyNEI,9392
 sourcecode/compare.py,sha256=Lnfmm9I3k0H1jP1tV6ZJ-R7znjQPLPLCe5TzV1Jb_PM,15323
@@ -54,7 +55,7 @@ sourcecode/defect_identity.py,sha256=XS2VFDImg9NLaRImybKTeyk-CoDSsXmchldg0dwvM7c
 sourcecode/degradation.py,sha256=BtuGUKFgkzI3Z6fwmUdxEUEaLFAcPQ_bHhU2w9ItDxw,18376
 sourcecode/dependency_analyzer.py,sha256=MRv6eh1TG5E9Y5Db-bNdZHDIJ3gWvvL3bBU1-9_QSZI,64593
 sourcecode/deployment_prefix.py,sha256=kPHPT6ZLg6CnMqCp9QwhbNNjDyS0sXAfKlPtSHUMggs,12180
-sourcecode/detach.py,sha256=OYhqkDvzfR50q2p6bdUCA3CNUBrQED_4BhJvNQ_lrx0,8272
+sourcecode/detach.py,sha256=Otoe7Egcn5Mcl_cRAstXLyDWA5D7dPAhOv39T5fJYpo,8257
 sourcecode/doc_analyzer.py,sha256=05bjTUbDbmnbajD_cgRnACzS8T7xxBKVX4CjkJlhZg8,24411
 sourcecode/dynamic_argument_surface.py,sha256=u6zJoY-zChYVw1-SrgiyAq-rUwqMZ5ZqBwLfbPJ_8ng,2960
 sourcecode/empty_reach.py,sha256=evKK2DyHbjqe_Wimq4-HfgD40Fdk-j6WiZwQaVXQ5t4,15671
@@ -63,7 +64,7 @@ sourcecode/endpoint_literals.py,sha256=Qf4gTZzvNSFDGDuOvF0YRL9NvaYKKj24klhR5LIOa
 sourcecode/endpoint_metrics.py,sha256=sLSLUIgiIyvNdOynaxVgHd9SjRF_DbN3QxevaquykaU,2840
 sourcecode/entrypoint_classifier.py,sha256=jhTYlyqDJH2AtdEcLVaRU3lYRTJuF8DkxVzl4-W3zWE,5322
 sourcecode/env_analyzer.py,sha256=tU2CcW-Lkl__60DMd4ibYnXnxfmPbV5Z9GrToSWLdSA,22029
-sourcecode/envelope.py,sha256=ugXD_xyMkoxUbUQ7M1vRHv8bs_HoRaKisZMWuzccUR8,17316
+sourcecode/envelope.py,sha256=gAvGZrH2Q1ovfDdqjuvx5gIc31zUNAJLVCHu6pMxAnI,17397
 sourcecode/environment_resolution.py,sha256=e86HT3RNbIIUIRChvz1Pu9Um81UvYu22BkpHNnwbUQI,30650
 sourcecode/error_schema.py,sha256=uAWEknt3Z-6pNoNaiaSVeiDHdBe-bmt08BDlkS1YaAs,2951
 sourcecode/evidence_provider.py,sha256=GSSL44JEaouO5AHks2sB3d1YvC9xIKIld1yBYxZpXxo,4277
@@ -81,7 +82,7 @@ sourcecode/gate_anchors.py,sha256=26v8wUtzOk1K1Un5uXdUxAu20mqSPX3jo82zuM05ByE,20
 sourcecode/git_analyzer.py,sha256=irvEwddbd5_tbA_eYUZebf4mH7_nFhpjwaWAV1f7jUY,15755
 sourcecode/git_checkout.py,sha256=gCnkMwHpU6yLyc10FoGzE8W9-tI8KyYxKTgpbWPjayo,6009
 sourcecode/github_diff.py,sha256=EVjSR853IoEuKUn10lDjpqw2a6r0-jM_xsxwEOS-Wzs,1399
-sourcecode/graph_analyzer.py,sha256=lp0eB1PWC20BYF-GpPhAyegRpKrUKgOmXZIcZSIX_Ks,65777
+sourcecode/graph_analyzer.py,sha256=Gw2MzLp0P990TGx6D6Ie-WIPnjWVE6X6dNBQnoM9xPU,65857
 sourcecode/graph_evidence.py,sha256=rENNsYRZeNstX_ExNCLlbHJAruFQwxo5d00x6wO3xwI,15030
 sourcecode/hibernate_strat.py,sha256=kLAa5GMwYFZgOI7edl-nDcJTr4SFVYAoxtMy-fj2BsA,77954
 sourcecode/identity_fallback.py,sha256=uRC_j_80uaI4Ue4tf-OhKX4h472dmufYcjEFGSxY2jk,9190
@@ -97,7 +98,7 @@ sourcecode/migration_blast.py,sha256=OPryWkM6-PbvcG3eJFdcWUnlpXBje41nu2BkrZnE2hg
 sourcecode/non_coverage.py,sha256=x-P6nRWc3cfUgHLUjjFWkxiyENASlksUhVHJYwd-a_8,30024
 sourcecode/openapi_surface.py,sha256=BTt0K-woZbkbWTN77IkqeBm_Okag9owR0848fmot8sk,16207
 sourcecode/openrewrite_recipe.py,sha256=0pS-61falE6rSfkos2MPnmoDamvoeTT-8Kmj7smj_DI,12987
-sourcecode/output_bounds.py,sha256=nW6Es8El0DeiBBeRBDImfgKVk-D7cutl1Lbz5WDZGyE,13819
+sourcecode/output_bounds.py,sha256=909Wu4qlLqHGa4fgQAsDhSBBi0lL8MQnrXv0gxZM2u8,14051
 sourcecode/output_budget.py,sha256=AHwxnfToUk9a3MJdcq0WDUiFbyNla9VWxdE0pC7UWfY,15617
 sourcecode/output_ceiling.py,sha256=rMLDHbXeC6C_uP8iQSVbbCGiJ_n0gMr2YI9zt5nltFA,33201
 sourcecode/output_encoding.py,sha256=OxiZQtr7uWBDUtblNQviNHsTH1Xo9AZEpsegPlQWKFk,2139
@@ -107,7 +108,8 @@ sourcecode/packs.py,sha256=FoPBrJcfoZ5SyXNNNRhPTIhv3DFQkxbVFixtFEZZmxk,45763
 sourcecode/parallel.py,sha256=QocwdZoUabdxzd_jEz7f6B2XMsYWFaCFaIl0tIEQs3g,10546
 sourcecode/parse_cache.py,sha256=BaPzh-KygmY4OpJQm2YGh6PWztYsj58vHWTu2eSF4s8,38769
 sourcecode/partial_contract.py,sha256=FZUBACkClvRAmPeYVjxNWeQmP6Y22KW4fPeeTfmT80A,5951
-sourcecode/path_admission.py,sha256=OGNSoluhVh8YYOBZBnACUrkmH4Tp_yxjGLifkcsxQpo,5838
+sourcecode/path_admission.py,sha256=5IBfmHvOrSwrVLlXXwj9KAEg-ciVaHYHjcpAS8mriPg,5898
+sourcecode/path_display.py,sha256=ikro7EBSzoZAx7lkmKuDYM3Ykh5NefkjM2Mmp_iOp-w,257
 sourcecode/path_filters.py,sha256=YWhiy6mARZ8QPDMA6O274jbjHSk6pKE_LMvj8ge_Nbs,15658
 sourcecode/perf.py,sha256=hB0LE0fhH_TwePXmIdtxhTyol6GBTwVBkAcxJa7MYpg,67254
 sourcecode/phased_run.py,sha256=MOLH5f3ZMyfpSQ-tLGRy1qzL4ETE_46qaS3G0O2QsPM,23471
@@ -132,7 +134,7 @@ sourcecode/remediation_diff.py,sha256=fGYqPmQF7bO54L8ivztX5PgmW4fVu54gNcG6OEQ192
 sourcecode/remedies.py,sha256=V2_cD4pLq8bKRkzF-3RGFoiu1xWYZS384WDVp1MrlZw,10225
 sourcecode/rename_refactor.py,sha256=oASZIf7TxcOBy3RQ0FuOe-4HlNW_JOu9RW9JqCxGNBE,17225
 sourcecode/repo_classifier.py,sha256=FG1vaWKdWXsWdl-S8hjVMiTqcwgaRXkDyvK4rPcOGtQ,22681
-sourcecode/repository_ir.py,sha256=aCpK39rqskkuKuilZ0GvmMyg9ZN9BBiIEwkbWWeuC8Y,522872
+sourcecode/repository_ir.py,sha256=xW3ahhhejolAaQL-EMEjOPYmrxhEx5S_3BNGxTEX56U,523074
 sourcecode/resource_budget.py,sha256=Bo-XMvVK9XyHY_S06fVirZrhXgwmnr3XI38-Li55NWY,7767
 sourcecode/ris.py,sha256=zlns4esv1tK8VDIYzOzRmw5yM6VLx7oxaPNB_kN3it4,28617
 sourcecode/risk.py,sha256=uwKSK5BLNVXaSnRDEmepmFGXODppGmzwS0c-yCEwKrc,100319
@@ -149,7 +151,7 @@ sourcecode/schema_producers.py,sha256=4XzW4wZXnFHOaJT7XenirXGCo0pPZhkdhb7zcDtqFn
 sourcecode/schema_registry.py,sha256=VP7yD_e2frajNVVQz31BRCtrREDHGROMCg8J3vI7dgQ,26482
 sourcecode/security_chain.py,sha256=1YZVeFLwy65kntMBhMNvz1cUpOoKCmvEqYICgxs66Gw,6823
 sourcecode/security_config.py,sha256=LUppRDYQK0oKM4qdEOLObaeU3frFTS-paEZo7dMgtY8,5467
-sourcecode/security_config_scan.py,sha256=UN_egozwpFRXHhuIdJi0fJGBvYrI82h2vHTWeCIrJbY,35125
+sourcecode/security_config_scan.py,sha256=LU8gfNUBB6wjKR8jkK-qRKtUrbkHZ301_Xsk6hSp4XU,35916
 sourcecode/security_posture.py,sha256=ZWgWMsVdvkDHOkTtAy6T3Q9Kp8ufWsdqPsFQZVBNAFM,56885
 sourcecode/selection_contract.py,sha256=O3q_zHBgUsp1SDukqmH9nOUO6HxLFH_7fAqVL7JMV_A,1974
 sourcecode/selftest.py,sha256=WjD2xMa55k2svoBMpBLpHCPMip3rtSNUbskSqsuB3iY,40056
@@ -178,12 +180,12 @@ sourcecode/text_input.py,sha256=3pL8DxR_DMI3ece-B70DnppvrEaLh4R17Pp8dK9G_hc,3596
 sourcecode/timeline.py,sha256=3S2Kgh0wDaq3H4bgPskWDKX-tDE74RZZ_1RRNu7Id3Y,22284
 sourcecode/timeline_cache.py,sha256=99RQ-MW3wqxjtuHcVB_k83USsxWP6DqzeupfSzKR_CE,8277
 sourcecode/token_estimate.py,sha256=_2cworfPkfP2ZxVcwX_Ltu0vFdMvK-FMuTY3qJAqI5M,9415
-sourcecode/tree_utils.py,sha256=8GAkIfQAsvtEudIeW1l4ooH_oRtrWR8cpJQJsEa_Pfw,2093
+sourcecode/tree_utils.py,sha256=oAwkGyrixO2VMX4ZMIDzg9V2oBxt3KIxFN3ahVMxKJo,2174
 sourcecode/type_usage_surface.py,sha256=51IrKRQoIoRnlsiDjHnqpJBn2rc6E59aRhgS0HTzAF0,4428
 sourcecode/validation_inference.py,sha256=-oWJqE6PqkqcZbCFDJeWCQHgI9Dbuv5ggJWD3LE_2IU,20817
 sourcecode/validation_surface.py,sha256=LeoOeZfTZmz5l4f2EDXNlOlzoTlL3EMVrYY8HEKGEg0,36716
 sourcecode/verify_edit.py,sha256=Ha0JNsC6CYHjtbetVZurLetqBNjriykYJ8ITDUMuNVY,63479
-sourcecode/verify_repo.py,sha256=WAaZMjhIgJ7nbcbJkhNBiaoKUl5kEK_ZNhUqMrlKQKs,16252
+sourcecode/verify_repo.py,sha256=svwc66w55bkeRfO_W7wOI9b27bM7SBVqr7NGX7jrQxg,16342
 sourcecode/verify_rules.py,sha256=R3l6nLT6WQzUNBzxtmnxyGZcKj9qMDW38Y0c0gNdCGk,19973
 sourcecode/version_check.py,sha256=CHp6ZxTIfo8kyHPCBgJA1uFC0xQCoXMuuOfrW8QTL8o,4942
 sourcecode/waivers.py,sha256=VlGsvpGt9K5ih3q7P5-co1ob2IROyZDSlVLMZyLbLJU,14874
@@ -255,13 +257,13 @@ sourcecode/telemetry/consent.py,sha256=-Wb8BFGXEexOs8M0Eja7F-T6ZtLNPeRoZnHcHvlP7
 sourcecode/telemetry/events.py,sha256=l3Z2SQUO4_C2D2ItXOOdVNimAmHedUHnUxqYFTxnsAE,2900
 sourcecode/telemetry/filters.py,sha256=-lqT2oorECuqEIdeHb--7AZ6BCaUx0bya720a-Z5x6w,7335
 sourcecode/telemetry/transport.py,sha256=4gGHsq0WeY9VywEZXA3vUxykfiYnw9uuqfjAAec7F8o,1681
-sourcecode/_docs/DEFECT-LEDGER.md,sha256=JtS74h0jx1KyBhvfTJDlRv_hACP0tPLszZxzlyzMG4Y,1105266
+sourcecode/_docs/DEFECT-LEDGER.md,sha256=VuA98XjdYAgFuRA-JVL5Wj-wgtrHIbsaxzUA5-_G11U,1107575
 sourcecode/_docs/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
 sourcecode/_docs/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
-sourcecode/_docs/USER_GUIDE.md,sha256=pDjd2jI4oohtltF6Lnq3EPMydMsDKojX62R64Kf3QLc,93004
-sourcecode-5.8.27.dist-info/METADATA,sha256=vYGPXQHD0zr9yoC8muww76year9d--gHpzEnERRGuLE,55418
-sourcecode-5.8.27.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
-sourcecode-5.8.27.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
-sourcecode-5.8.27.dist-info/licenses/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
-sourcecode-5.8.27.dist-info/licenses/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
-sourcecode-5.8.27.dist-info/RECORD,,
+sourcecode/_docs/USER_GUIDE.md,sha256=2ytr23ckEE5DLam53rEckfPX3xIYGuX9VhLk4tCZrSM,93211
+sourcecode-5.8.29.dist-info/METADATA,sha256=H0NXHkNSGNEE6hCYJqCICsI33DOe-cW_Xvk9yvwD_uc,55418
+sourcecode-5.8.29.dist-info/WHEEL,sha256=QccIxa26bgl1E6uMy58deGWi-0aeIkkangHcxk2kWfw,87
+sourcecode-5.8.29.dist-info/entry_points.txt,sha256=-JEAdChrK5We51kZcb7OaDcyil-dHBjBPL-NhuO-QY8,89
+sourcecode-5.8.29.dist-info/licenses/LICENSE,sha256=23-fk61oSWGVmkWyka-FIM0rhAPM2hcYHnsaridL8Uo,1859
+sourcecode-5.8.29.dist-info/licenses/NOTICE,sha256=Br-AA8Y3iJo1WXa5uP8QBpzqI5nDu3iGLbFyvDt3BOs,321
+sourcecode-5.8.29.dist-info/RECORD,,