@getcodesentinel/codesentinel 1.20.0 → 1.21.0

package/dist/html-report-app/assets/index-Vsiw9fTu.css

@@ -0,0 +1 @@
+*,:before,:after{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }::backdrop{--tw-border-spacing-x: 0;--tw-border-spacing-y: 0;--tw-translate-x: 0;--tw-translate-y: 0;--tw-rotate: 0;--tw-skew-x: 0;--tw-skew-y: 0;--tw-scale-x: 1;--tw-scale-y: 1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictness: proximity;--tw-gradient-from-position: ;--tw-gradient-via-position: ;--tw-gradient-to-position: ;--tw-ordinal: ;--tw-slashed-zero: ;--tw-numeric-figure: ;--tw-numeric-spacing: ;--tw-numeric-fraction: ;--tw-ring-inset: ;--tw-ring-offset-width: 0px;--tw-ring-offset-color: #fff;--tw-ring-color: rgb(59 130 246 / .5);--tw-ring-offset-shadow: 0 0 #0000;--tw-ring-shadow: 0 0 #0000;--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;--tw-blur: ;--tw-brightness: ;--tw-contrast: ;--tw-grayscale: ;--tw-hue-rotate: ;--tw-invert: ;--tw-saturate: ;--tw-sepia: ;--tw-drop-shadow: ;--tw-backdrop-blur: ;--tw-backdrop-brightness: ;--tw-backdrop-contrast: ;--tw-backdrop-grayscale: ;--tw-backdrop-hue-rotate: ;--tw-backdrop-invert: ;--tw-backdrop-opacity: ;--tw-backdrop-saturate: ;--tw-backdrop-sepia: ;--tw-contain-size: ;--tw-contain-layout: ;--tw-contain-paint: ;--tw-contain-style: }*,:before,:after{box-sizing:border-box;border-width:0;border-style:solid;border-color:#e5e7eb}:before,:after{--tw-content: ""}html,:host{line-height:1.5;-webkit-text-size-adjust:100%;-moz-tab-size:4;-o-tab-size:4;tab-size:4;font-family:Satoshi,Avenir Next,Segoe UI,Helvetica Neue,sans-serif;font-feature-settings:normal;font-variation-settings:normal;-webkit-tap-highlight-color:transparent}body{margin:0;line-height:inherit}hr{height:0;color:inherit;border-top-width:1px}abbr:where([title]){-webkit-text-decoration:underline dotted;text-decoration:underline dotted}h1,h2,h3,h4,h5,h6{font-size:inherit;font-weight:inherit}a{color:inherit;text-decoration:inherit}b,strong{font-weight:bolder}code,kbd,samp,pre{font-family:SFMono-Regular,Menlo,Monaco,Consolas,monospace;font-feature-settings:normal;font-variation-settings:normal;font-size:1em}small{font-size:80%}sub,sup{font-size:75%;line-height:0;position:relative;vertical-align:baseline}sub{bottom:-.25em}sup{top:-.5em}table{text-indent:0;border-color:inherit;border-collapse:collapse}button,input,optgroup,select,textarea{font-family:inherit;font-feature-settings:inherit;font-variation-settings:inherit;font-size:100%;font-weight:inherit;line-height:inherit;letter-spacing:inherit;color:inherit;margin:0;padding:0}button,select{text-transform:none}button,input:where([type=button]),input:where([type=reset]),input:where([type=submit]){-webkit-appearance:button;background-color:transparent;background-image:none}:-moz-focusring{outline:auto}:-moz-ui-invalid{box-shadow:none}progress{vertical-align:baseline}::-webkit-inner-spin-button,::-webkit-outer-spin-button{height:auto}[type=search]{-webkit-appearance:textfield;outline-offset:-2px}::-webkit-search-decoration{-webkit-appearance:none}::-webkit-file-upload-button{-webkit-appearance:button;font:inherit}summary{display:list-item}blockquote,dl,dd,h1,h2,h3,h4,h5,h6,hr,figure,p,pre{margin:0}fieldset{margin:0;padding:0}legend{padding:0}ol,ul,menu{list-style:none;margin:0;padding:0}dialog{padding:0}textarea{resize:vertical}input::-moz-placeholder,textarea::-moz-placeholder{opacity:1;color:#9ca3af}input::placeholder,textarea::placeholder{opacity:1;color:#9ca3af}button,[role=button]{cursor:pointer}:disabled{cursor:default}img,svg,video,canvas,audio,iframe,embed,object{display:block;vertical-align:middle}img,video{max-width:100%;height:auto}[hidden]:where(:not([hidden=until-found])){display:none}:root{--background: 210 33% 98%;--foreground: 222 47% 11%;--card: 0 0% 100%;--card-foreground: 222 47% 11%;--popover: 0 0% 100%;--popover-foreground: 222 47% 11%;--primary: 221 83% 53%;--primary-foreground: 210 40% 98%;--secondary: 210 40% 96%;--secondary-foreground: 222 47% 11%;--muted: 210 40% 96%;--muted-foreground: 215 16% 47%;--accent: 201 94% 94%;--accent-foreground: 222 47% 11%;--destructive: 0 84% 60%;--destructive-foreground: 210 40% 98%;--border: 214 32% 91%;--input: 214 32% 91%;--ring: 221 83% 53%;--radius: 1rem}*{border-color:hsl(var(--border))}body{min-height:100vh;background-color:hsl(var(--background));font-family:Satoshi,Avenir Next,Segoe UI,Helvetica Neue,sans-serif;color:hsl(var(--foreground));-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale;background-image:radial-gradient(circle at top left,rgba(59,130,246,.16),transparent 24rem),radial-gradient(circle at top right,rgba(20,184,166,.1),transparent 20rem),linear-gradient(180deg,#ffffffe6,#f8fafc)}#root{min-height:100vh}.absolute{position:absolute}.relative{position:relative}.mx-auto{margin-left:auto;margin-right:auto}.mb-2{margin-bottom:.5rem}.mt-1{margin-top:.25rem}.mt-2{margin-top:.5rem}.mt-3{margin-top:.75rem}.mt-6{margin-top:1.5rem}.block{display:block}.flex{display:flex}.inline-flex{display:inline-flex}.table{display:table}.grid{display:grid}.h-12{height:3rem}.h-2{height:.5rem}.h-2\.5{height:.625rem}.h-3\.5{height:.875rem}.h-4{height:1rem}.h-5{height:1.25rem}.h-auto{height:auto}.h-full{height:100%}.h-px{height:1px}.min-h-40{min-height:10rem}.min-h-screen{min-height:100vh}.w-2\.5{width:.625rem}.w-20{width:5rem}.w-24{width:6rem}.w-3\.5{width:.875rem}.w-36{width:9rem}.w-4{width:1rem}.w-5{width:1.25rem}.w-full{width:100%}.w-px{width:1px}.min-w-0{min-width:0px}.min-w-\[220px\]{min-width:220px}.min-w-\[260px\]{min-width:260px}.min-w-\[320px\]{min-width:320px}.min-w-\[880px\]{min-width:880px}.min-w-\[920px\]{min-width:920px}.max-w-2xl{max-width:42rem}.max-w-3xl{max-width:48rem}.max-w-7xl{max-width:80rem}.max-w-md{max-width:28rem}.flex-1{flex:1 1 0%}.shrink-0{flex-shrink:0}.caption-bottom{caption-side:bottom}.cursor-pointer{cursor:pointer}.touch-none{touch-action:none}.select-none{-webkit-user-select:none;-moz-user-select:none;user-select:none}.grid-cols-\[minmax\(0\,1fr\)_auto\]{grid-template-columns:minmax(0,1fr) auto}.flex-col{flex-direction:column}.flex-wrap{flex-wrap:wrap}.items-start{align-items:flex-start}.items-center{align-items:center}.justify-center{justify-content:center}.justify-between{justify-content:space-between}.gap-1{gap:.25rem}.gap-2{gap:.5rem}.gap-3{gap:.75rem}.gap-4{gap:1rem}.gap-6{gap:1.5rem}.gap-8{gap:2rem}.space-y-1>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.25rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.25rem * var(--tw-space-y-reverse))}.space-y-2>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.5rem * var(--tw-space-y-reverse))}.space-y-3>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(.75rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(.75rem * var(--tw-space-y-reverse))}.space-y-4>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1rem * var(--tw-space-y-reverse))}.space-y-5>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1.25rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.25rem * var(--tw-space-y-reverse))}.space-y-6>:not([hidden])~:not([hidden]){--tw-space-y-reverse: 0;margin-top:calc(1.5rem * calc(1 - var(--tw-space-y-reverse)));margin-bottom:calc(1.5rem * var(--tw-space-y-reverse))}.overflow-hidden{overflow:hidden}.overflow-x-auto{overflow-x:auto}.break-words{overflow-wrap:break-word}.rounded-2xl{border-radius:1rem}.rounded-\[28px\]{border-radius:28px}.rounded-\[inherit\]{border-radius:inherit}.rounded-full{border-radius:9999px}.rounded-xl{border-radius:.75rem}.border{border-width:1px}.border-b{border-bottom-width:1px}.border-l{border-left-width:1px}.border-t{border-top-width:1px}.border-dashed{border-style:dashed}.border-amber-500\/20{border-color:#f59e0b33}.border-border{border-color:hsl(var(--border))}.border-border\/50{border-color:hsl(var(--border) / .5)}.border-border\/60{border-color:hsl(var(--border) / .6)}.border-border\/80{border-color:hsl(var(--border) / .8)}.border-emerald-500\/20{border-color:#10b98133}.border-rose-500\/20{border-color:#f43f5e33}.border-l-transparent{border-left-color:transparent}.border-t-transparent{border-top-color:transparent}.bg-amber-500\/10{background-color:#f59e0b1a}.bg-background\/70{background-color:hsl(var(--background) / .7)}.bg-background\/80{background-color:hsl(var(--background) / .8)}.bg-border{background-color:hsl(var(--border))}.bg-border\/70{background-color:hsl(var(--border) / .7)}.bg-card\/60{background-color:hsl(var(--card) / .6)}.bg-card\/70{background-color:hsl(var(--card) / .7)}.bg-card\/80{background-color:hsl(var(--card) / .8)}.bg-card\/90{background-color:hsl(var(--card) / .9)}.bg-emerald-500\/10{background-color:#10b9811a}.bg-rose-500\/10{background-color:#f43f5e1a}.bg-secondary{background-color:hsl(var(--secondary))}.bg-slate-800{--tw-bg-opacity: 1;background-color:rgb(30 41 59 / var(--tw-bg-opacity, 1))}.bg-slate-950{--tw-bg-opacity: 1;background-color:rgb(2 6 23 / var(--tw-bg-opacity, 1))}.bg-transparent{background-color:transparent}.bg-white\/70{background-color:#ffffffb3}.bg-gradient-to-r{background-image:linear-gradient(to right,var(--tw-gradient-stops))}.from-sky-500{--tw-gradient-from: #0ea5e9 var(--tw-gradient-from-position);--tw-gradient-to: rgb(14 165 233 / 0) var(--tw-gradient-to-position);--tw-gradient-stops: var(--tw-gradient-from), var(--tw-gradient-to)}.via-cyan-500{--tw-gradient-to: rgb(6 182 212 / 0) var(--tw-gradient-to-position);--tw-gradient-stops: var(--tw-gradient-from), #06b6d4 var(--tw-gradient-via-position), var(--tw-gradient-to)}.to-emerald-500{--tw-gradient-to: #10b981 var(--tw-gradient-to-position)}.p-0\.5{padding:.125rem}.p-2{padding:.5rem}.p-3{padding:.75rem}.p-4{padding:1rem}.p-6{padding:1.5rem}.px-2\.5{padding-left:.625rem;padding-right:.625rem}.px-4{padding-left:1rem;padding-right:1rem}.px-5{padding-left:1.25rem;padding-right:1.25rem}.px-6{padding-left:1.5rem;padding-right:1.5rem}.py-1{padding-top:.25rem;padding-bottom:.25rem}.py-16{padding-top:4rem;padding-bottom:4rem}.py-2{padding-top:.5rem;padding-bottom:.5rem}.py-2\.5{padding-top:.625rem;padding-bottom:.625rem}.py-3{padding-top:.75rem;padding-bottom:.75rem}.py-4{padding-top:1rem;padding-bottom:1rem}.py-6{padding-top:1.5rem;padding-bottom:1.5rem}.pb-4{padding-bottom:1rem}.pb-6{padding-bottom:1.5rem}.pt-0{padding-top:0}.pt-1{padding-top:.25rem}.text-left{text-align:left}.text-center{text-align:center}.text-right{text-align:right}.align-middle{vertical-align:middle}.font-mono{font-family:SFMono-Regular,Menlo,Monaco,Consolas,monospace}.text-2xl{font-size:1.5rem;line-height:2rem}.text-3xl{font-size:1.875rem;line-height:2.25rem}.text-\[11px\]{font-size:11px}.text-lg{font-size:1.125rem;line-height:1.75rem}.text-sm{font-size:.875rem;line-height:1.25rem}.text-xs{font-size:.75rem;line-height:1rem}.font-medium{font-weight:500}.font-semibold{font-weight:600}.uppercase{text-transform:uppercase}.capitalize{text-transform:capitalize}.normal-case{text-transform:none}.tracking-\[0\.16em\]{letter-spacing:.16em}.tracking-\[0\.18em\]{letter-spacing:.18em}.tracking-\[0\.28em\]{letter-spacing:.28em}.tracking-normal{letter-spacing:0em}.tracking-tight{letter-spacing:-.025em}.text-amber-700{--tw-text-opacity: 1;color:rgb(180 83 9 / var(--tw-text-opacity, 1))}.text-card-foreground{color:hsl(var(--card-foreground))}.text-emerald-700{--tw-text-opacity: 1;color:rgb(4 120 87 / var(--tw-text-opacity, 1))}.text-foreground{color:hsl(var(--foreground))}.text-muted-foreground{color:hsl(var(--muted-foreground))}.text-rose-700{--tw-text-opacity: 1;color:rgb(190 18 60 / var(--tw-text-opacity, 1))}.text-secondary-foreground{color:hsl(var(--secondary-foreground))}.text-slate-300{--tw-text-opacity: 1;color:rgb(203 213 225 / var(--tw-text-opacity, 1))}.text-slate-50{--tw-text-opacity: 1;color:rgb(248 250 252 / var(--tw-text-opacity, 1))}.text-white{--tw-text-opacity: 1;color:rgb(255 255 255 / var(--tw-text-opacity, 1))}.shadow-none{--tw-shadow: 0 0 #0000;--tw-shadow-colored: 0 0 #0000;box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}.shadow-panel{--tw-shadow: 0 20px 50px -32px rgba(15, 23, 42, .35);--tw-shadow-colored: 0 20px 50px -32px var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}.outline-none{outline:2px solid transparent;outline-offset:2px}.outline{outline-style:solid}.backdrop-blur{--tw-backdrop-blur: blur(8px);-webkit-backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia);backdrop-filter:var(--tw-backdrop-blur) var(--tw-backdrop-brightness) var(--tw-backdrop-contrast) var(--tw-backdrop-grayscale) var(--tw-backdrop-hue-rotate) var(--tw-backdrop-invert) var(--tw-backdrop-opacity) var(--tw-backdrop-saturate) var(--tw-backdrop-sepia)}.transition{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke,opacity,box-shadow,transform,filter,backdrop-filter;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-colors{transition-property:color,background-color,border-color,text-decoration-color,fill,stroke;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.transition-transform{transition-property:transform;transition-timing-function:cubic-bezier(.4,0,.2,1);transition-duration:.15s}.duration-200{transition-duration:.2s}.hover\:bg-muted\/40:hover{background-color:hsl(var(--muted) / .4)}.hover\:text-foreground:hover{color:hsl(var(--foreground))}.data-\[state\=active\]\:bg-background[data-state=active]{background-color:hsl(var(--background))}.data-\[state\=open\]\:bg-muted\/50[data-state=open]{background-color:hsl(var(--muted) / .5)}.data-\[state\=active\]\:text-foreground[data-state=active]{color:hsl(var(--foreground))}.data-\[state\=active\]\:shadow-sm[data-state=active]{--tw-shadow: 0 1px 2px 0 rgb(0 0 0 / .05);--tw-shadow-colored: 0 1px 2px 0 var(--tw-shadow-color);box-shadow:var(--tw-ring-offset-shadow, 0 0 #0000),var(--tw-ring-shadow, 0 0 #0000),var(--tw-shadow)}@media(min-width:640px){.sm\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.sm\:p-8{padding:2rem}.sm\:px-6{padding-left:1.5rem;padding-right:1.5rem}.sm\:text-5xl{font-size:3rem;line-height:1}}@media(min-width:768px){.md\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.md\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}}@media(min-width:1024px){.lg\:grid-cols-2{grid-template-columns:repeat(2,minmax(0,1fr))}.lg\:grid-cols-3{grid-template-columns:repeat(3,minmax(0,1fr))}.lg\:grid-cols-\[1\.05fr_0\.95fr\]{grid-template-columns:1.05fr .95fr}.lg\:grid-cols-\[1\.1fr_0\.9fr\]{grid-template-columns:1.1fr .9fr}.lg\:grid-cols-\[1\.3fr_0\.7fr\]{grid-template-columns:1.3fr .7fr}.lg\:px-8{padding-left:2rem;padding-right:2rem}}@media(min-width:1280px){.xl\:grid-cols-4{grid-template-columns:repeat(4,minmax(0,1fr))}}.\[\&\[data-state\=open\]\>svg\]\:rotate-180[data-state=open]>svg{--tw-rotate: 180deg;transform:translate(var(--tw-translate-x),var(--tw-translate-y)) rotate(var(--tw-rotate)) skew(var(--tw-skew-x)) skewY(var(--tw-skew-y)) scaleX(var(--tw-scale-x)) scaleY(var(--tw-scale-y))}.\[\&_tr\:last-child\]\:border-0 tr:last-child{border-width:0px}.\[\&_tr\]\:border-b tr{border-bottom-width:1px}.\[\&_tr\]\:border-border\/60 tr{border-color:hsl(var(--border) / .6)}

package/dist/html-report-app/index.html

@@ -0,0 +1,13 @@
+<!doctype html>
+<html lang="en">
+  <head>
+    <meta charset="UTF-8" />
+    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <title>CodeSentinel Report</title>
+    <script type="module" crossorigin src="./assets/index-BarpZIgq.js"></script>
+    <link rel="stylesheet" crossorigin href="./assets/index-Vsiw9fTu.css">
+  </head>
+  <body>
+    <div id="root"></div>
+  </body>
+</html>

package/dist/index.js

@@ -1753,6 +1753,7 @@ var analyzeDependencyCandidateFromRegistry = async (input) => {
 };
 
 // ../reporter/dist/index.js
+import { basename, posix } from "path";
 var SNAPSHOT_SCHEMA_VERSION = "codesentinel.snapshot.v1";
 var REPORT_SCHEMA_VERSION = "codesentinel.report.v1";
 var RISK_MODEL_VERSION = "deterministic-v1";
@@ -1914,6 +1915,11 @@ var compareSnapshots = (current, baseline) => {
     }
   };
 };
+var toPosixDirname = (value) => {
+  const normalized = value.replaceAll("\\", "/");
+  const directory = posix.dirname(normalized);
+  return directory === "." ? "root" : directory;
+};
 var findTraceTarget = (snapshot, targetType, targetId) => snapshot.trace?.targets.find(
   (target) => target.targetType === targetType && target.targetId === targetId
 );
@@ -1959,14 +1965,27 @@ var suggestedActions = (target) => {
   }
   return [...new Set(actions)].slice(0, 3);
 };
-var hotspotItems = (snapshot) => snapshot.analysis.risk.hotspots.slice(0, 10).map((hotspot) => {
+var hotspotReason = (factors) => {
+  if (factors.length === 0) {
+    return "Limited trace data available for this hotspot.";
+  }
+  return factors.slice(0, 2).map((factor) => `${factor.label} (${factor.contribution})`).join(" + ");
+};
+var hotspotItems = (snapshot) => snapshot.analysis.risk.hotspots.slice(0, 10).map((hotspot, index) => {
   const fileScore = snapshot.analysis.risk.fileScores.find((item) => item.file === hotspot.file);
+  const evolutionMetrics = snapshot.analysis.evolution.available ? snapshot.analysis.evolution.files.find((item) => item.filePath === hotspot.file) : void 0;
   const traceTarget = findTraceTarget(snapshot, "file", hotspot.file);
   const factors = toRenderedFactors(traceTarget);
   return {
+    rank: index + 1,
     target: hotspot.file,
+    module: toPosixDirname(hotspot.file),
     score: hotspot.score,
     normalizedScore: fileScore?.normalizedScore ?? round43(hotspot.score / 100),
+    commitCount: evolutionMetrics?.commitCount ?? null,
+    churnTotal: evolutionMetrics?.churnTotal ?? null,
+    riskContributions: hotspot.factors,
+    reason: hotspotReason(factors),
     topFactors: factors,
     suggestedActions: suggestedActions(traceTarget),
     biggestLevers: (traceTarget?.reductionLevers ?? []).slice(0, 3).map((lever) => `${factorLabel(lever.factorId)} (${lever.estimatedImpact})`)
@@ -1987,6 +2006,51 @@ var repositoryConfidence = (snapshot) => {
   );
   return round43(weighted / weight);
 };
+var normalizeDependencyScope = (scope) => {
+  switch (scope) {
+    case "prod":
+    case "dev":
+      return scope;
+    default:
+      return "unknown";
+  }
+};
+var topStructuralFiles = (snapshot, selector) => [...snapshot.analysis.structural.files].sort((a, b) => selector(b) - selector(a) || a.relativePath.localeCompare(b.relativePath)).slice(0, 5).map((file) => ({
+  file: file.relativePath,
+  module: toPosixDirname(file.relativePath),
+  value: selector(file)
+}));
+var cycleDetails = (snapshot) => snapshot.analysis.structural.cycles.map((cycle, index) => {
+  const nodes = [...cycle.nodes].sort((a, b) => a.localeCompare(b));
+  return {
+    id: `cycle-${index + 1}`,
+    size: nodes.length,
+    nodes,
+    path: nodes.join(" -> ")
+  };
+});
+var riskyDependencies = (snapshot) => {
+  if (!snapshot.analysis.external.available) {
+    return [];
+  }
+  const dependencyByName = new Map(
+    snapshot.analysis.external.dependencies.map((dependency) => [dependency.name, dependency])
+  );
+  return snapshot.analysis.risk.dependencyScores.map((score) => {
+    const dependency = dependencyByName.get(score.dependency);
+    const riskSignals = [.../* @__PURE__ */ new Set([...score.ownRiskSignals, ...score.inheritedRiskSignals])];
+    return {
+      name: score.dependency,
+      score: score.score,
+      normalizedScore: score.normalizedScore,
+      dependencyScope: normalizeDependencyScope(dependency?.dependencyScope),
+      direct: dependency?.direct ?? false,
+      resolvedVersion: dependency?.resolvedVersion ?? null,
+      riskSignals,
+      reason: riskSignals.length === 0 ? "Derived from aggregate dependency risk signals." : riskSignals.join(", ")
+    };
+  }).filter((dependency) => dependency.score > 0).sort((a, b) => b.score - a.score || a.name.localeCompare(b.name)).slice(0, 20);
+};
 var repositoryDimensionScores = (snapshot) => {
   const target = findTraceTarget(snapshot, "repository", snapshot.analysis.structural.targetPath);
   if (target === void 0) {
@@ -2019,6 +2083,7 @@ var createReport = (snapshot, diff) => {
     schemaVersion: REPORT_SCHEMA_VERSION,
     generatedAt: (/* @__PURE__ */ new Date()).toISOString(),
     repository: {
+      name: basename(snapshot.analysis.structural.targetPath) || snapshot.analysis.structural.targetPath,
       targetPath: snapshot.analysis.structural.targetPath,
       riskScore: snapshot.analysis.risk.riskScore,
       normalizedScore: snapshot.analysis.risk.normalizedScore,
@@ -2034,6 +2099,12 @@ var createReport = (snapshot, diff) => {
       cycles: snapshot.analysis.structural.cycles.map(
         (cycle) => [...cycle.nodes].sort((a, b) => a.localeCompare(b)).join(" -> ")
       ),
+      cycleDetails: cycleDetails(snapshot),
+      fanInOutExtremes: {
+        highestFanIn: topStructuralFiles(snapshot, (file) => file.fanIn),
+        highestFanOut: topStructuralFiles(snapshot, (file) => file.fanOut),
+        deepestFiles: topStructuralFiles(snapshot, (file) => file.depth)
+      },
       fragileClusters: snapshot.analysis.risk.fragileClusters.map((cluster) => ({
         id: cluster.id,
         kind: cluster.kind,
@@ -2057,7 +2128,8 @@ var createReport = (snapshot, diff) => {
       ),
       abandonedDependencies: [...external.abandonedDependencies].sort(
         (a, b) => a.localeCompare(b)
-      )
+      ),
+      riskyDependencies: riskyDependencies(snapshot)
     },
     appendix: {
       snapshotSchemaVersion: snapshot.schemaVersion,
@@ -2298,7 +2370,7 @@ var formatReport = (report, format) => {
 
 // ../governance/dist/index.js
 import { mkdirSync, rmSync } from "fs";
-import { basename, join as join5, resolve } from "path";
+import { basename as basename2, join as join5, resolve } from "path";
 import { execFile } from "child_process";
 import { promisify } from "util";
 var EXIT_CODES = {
@@ -2911,9 +2983,9 @@ var resolveAutoBaselineRef = async (input) => {
 
 // src/index.ts
 import { readFileSync as readFileSync2 } from "fs";
-import { readFile as readFile6, writeFile as writeFile6 } from "fs/promises";
-import { dirname as dirname2, resolve as resolve5 } from "path";
-import { fileURLToPath } from "url";
+import { readFile as readFile7, writeFile as writeFile7 } from "fs/promises";
+import { dirname as dirname3, resolve as resolve6 } from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
 
 // src/application/format-analyze-output.ts
 var toHealthTier2 = (score) => {
@@ -3558,7 +3630,7 @@ var promptInstall = async (packageName, latestVersion, currentVersion) => {
     );
     return "skip";
   }
-  return await new Promise((resolve6) => {
+  return await new Promise((resolve7) => {
     emitKeypressEvents(stdin);
     let selectedIndex = 0;
     const previousRawMode = stdin.isRaw;
@@ -3583,7 +3655,7 @@ var promptInstall = async (packageName, latestVersion, currentVersion) => {
       } else {
         stderr.write("\n");
       }
-      resolve6(choice);
+      resolve7(choice);
     };
     const onKeypress = (_str, key) => {
       if (key.ctrl === true && key.name === "c") {
@@ -3777,7 +3849,7 @@ var promptSelection = async (currentVersion, actions) => {
   if (!stdin2.isTTY || !stderr2.isTTY || typeof stdin2.setRawMode !== "function") {
     return "exit";
   }
-  return await new Promise((resolve6) => {
+  return await new Promise((resolve7) => {
     emitKeypressEvents2(stdin2);
     let selectedIndex = 0;
     const previousRawMode = stdin2.isRaw;
@@ -3792,7 +3864,7 @@ var promptSelection = async (currentVersion, actions) => {
       stdin2.setRawMode(previousRawMode);
       clearTerminal();
       showCursor2();
-      resolve6(selection);
+      resolve7(selection);
     };
     const onKeypress = (_str, key) => {
       if (key.ctrl === true && key.name === "c") {
@@ -3885,7 +3957,7 @@ var waitForReturnToMenu = async () => {
   }
   stderr2.write(`
 ${PROMPT_PADDING}Press enter to return to the menu...`);
-  await new Promise((resolve6) => {
+  await new Promise((resolve7) => {
     emitKeypressEvents2(stdin2);
     const previousRawMode = stdin2.isRaw;
     const cleanup = () => {
@@ -3894,7 +3966,7 @@ ${PROMPT_PADDING}Press enter to return to the menu...`);
       stdin2.setRawMode(previousRawMode);
       showCursor2();
       stderr2.write("\n");
-      resolve6();
+      resolve7();
     };
     const onKeypress = (_str, key) => {
       if (key.ctrl === true && key.name === "c") {
@@ -3912,7 +3984,7 @@ ${PROMPT_PADDING}Press enter to return to the menu...`);
   });
 };
 var runCliCommand = async (scriptPath2, args) => {
-  return await new Promise((resolve6, reject) => {
+  return await new Promise((resolve7, reject) => {
     const child = spawn2(process.execPath, [...process.execArgv, scriptPath2, ...args], {
       stdio: ["inherit", "pipe", "pipe"],
       env: {
@@ -3926,7 +3998,7 @@ var runCliCommand = async (scriptPath2, args) => {
       reject(error);
     });
     child.on("close", (code) => {
-      resolve6(code ?? 1);
+      resolve7(code ?? 1);
     });
   });
 };
@@ -7640,7 +7712,114 @@ ${ciMarkdown}`;
 };
 
 // src/application/run-report-command.ts
-import { readFile as readFile5, writeFile as writeFile5 } from "fs/promises";
+import { join as join8 } from "path";
+import { readFile as readFile6, writeFile as writeFile6 } from "fs/promises";
+
+// src/application/html-report.ts
+import { mkdir as mkdir3, readFile as readFile5, rm, stat as stat2, writeFile as writeFile5 } from "fs/promises";
+import { dirname as dirname2, join as join7, resolve as resolve5 } from "path";
+import { fileURLToPath } from "url";
+var HTML_REPORT_DIR = ".codesentinel/report";
+var getBundledHtmlAppPath = () => resolve5(dirname2(fileURLToPath(import.meta.url)), "html-report-app");
+var serializeReportBootstrap = (report) => `window.__CODESENTINEL_REPORT__ = ${JSON.stringify(report).replaceAll("</", "<\\/")};
+`;
+var escapeInlineScript = (script) => script.replaceAll("</script", "<\\/script").replaceAll("<script", "\\x3Cscript").replaceAll("<!--", "\\x3C!--").replaceAll("\u2028", "\\u2028").replaceAll("\u2029", "\\u2029");
+var ensureDirectory = async (directoryPath) => {
+  await mkdir3(directoryPath, { recursive: true });
+};
+var readReferencedAssets = async (appPath, indexHtml) => {
+  const stylesheetPaths = [
+    ...indexHtml.matchAll(/<link[^>]+rel=["']stylesheet["'][^>]+href=["']([^"']+)["'][^>]*>/g)
+  ].map((match) => match[1]).filter((value) => value !== void 0);
+  const styles = await Promise.all(
+    stylesheetPaths.map(async (href) => readFile5(resolve5(appPath, href), "utf8"))
+  );
+  const scriptPaths = [...indexHtml.matchAll(/<script[^>]+src=["']([^"']+)["'][^>]*><\/script>/g)].map((match) => match[1]).filter((value) => value !== void 0);
+  const scripts = await Promise.all(
+    scriptPaths.map(async (src) => readFile5(resolve5(appPath, src), "utf8"))
+  );
+  return { styles, scripts };
+};
+var inlineBuiltHtml = async (appPath, report) => {
+  const indexHtml = await readFile5(resolve5(appPath, "index.html"), "utf8");
+  const { styles, scripts } = await readReferencedAssets(appPath, indexHtml);
+  const htmlWithoutExternalAssets = indexHtml.replace(/\s*<link[^>]+rel=["']stylesheet["'][^>]*>\s*/g, "").replace(/\s*<script[^>]+src=["'][^"']+["'][^>]*><\/script>\s*/g, "");
+  const inlineStyles = styles.map((style) => `<style>
+${style}
+</style>`).join("\n");
+  const bootstrapScript = `<script>
+${serializeReportBootstrap(report)}</script>`;
+  const inlineScripts = scripts.map((script) => `<script>
+${escapeInlineScript(script)}
+</script>`).join("\n");
+  return htmlWithoutExternalAssets.replace("</head>", () => `${inlineStyles === "" ? "" : `${inlineStyles}
+`}</head>`).replace(
+    "</body>",
+    () => `${bootstrapScript}
+${inlineScripts === "" ? "" : `${inlineScripts}
+`}</body>`
+  );
+};
+var assertHtmlAppAssets = async (assetPath) => {
+  const assetStats = await stat2(assetPath).catch(() => void 0);
+  if (assetStats === void 0 || !assetStats.isDirectory()) {
+    throw new Error(
+      `html_report_assets_missing: expected built app at ${assetPath}. Run the workspace build first.`
+    );
+  }
+};
+var resolveHtmlReportOutputPath = (repositoryPath, outputPath) => {
+  const invocationCwd = process.env["INIT_CWD"] ?? process.cwd();
+  return resolve5(invocationCwd, outputPath ?? join7(repositoryPath, HTML_REPORT_DIR));
+};
+var writeHtmlReportBundle = async (report, options) => {
+  const bundledAppPath = options.bundledAppPath ?? getBundledHtmlAppPath();
+  await assertHtmlAppAssets(bundledAppPath);
+  const outputPath = resolveHtmlReportOutputPath(options.repositoryPath, options.outputPath);
+  await rm(outputPath, { recursive: true, force: true });
+  await ensureDirectory(outputPath);
+  await writeFile5(
+    resolve5(outputPath, "index.html"),
+    await inlineBuiltHtml(bundledAppPath, report),
+    "utf8"
+  );
+  return outputPath;
+};
+
+// src/application/open-path.ts
+import { spawn as spawn3 } from "child_process";
+import { platform } from "os";
+var openCommandForPlatform = (targetPath) => {
+  switch (platform()) {
+    case "darwin":
+      return { command: "open", args: [targetPath] };
+    case "win32":
+      return { command: "cmd", args: ["/c", "start", "", targetPath] };
+    case "linux":
+      return { command: "xdg-open", args: [targetPath] };
+    default:
+      return void 0;
+  }
+};
+var openPath = async (targetPath) => {
+  const command = openCommandForPlatform(targetPath);
+  if (command === void 0) {
+    return false;
+  }
+  return new Promise((resolve7) => {
+    const child = spawn3(command.command, command.args, {
+      detached: true,
+      stdio: "ignore"
+    });
+    child.once("error", () => resolve7(false));
+    child.once("spawn", () => {
+      child.unref();
+      resolve7(true);
+    });
+  });
+};
+
+// src/application/run-report-command.ts
 var runReportCommand = async (inputPath, authorIdentityMode, options, logger = createSilentLogger()) => {
   logger.info("building analysis snapshot");
   const current = await buildAnalysisSnapshot(
@@ -7654,7 +7833,7 @@ var runReportCommand = async (inputPath, authorIdentityMode, options, logger = c
     logger
   );
   if (options.snapshotPath !== void 0) {
-    await writeFile5(options.snapshotPath, JSON.stringify(current, null, 2), "utf8");
+    await writeFile6(options.snapshotPath, JSON.stringify(current, null, 2), "utf8");
     logger.info(`snapshot written: ${options.snapshotPath}`);
   }
   let report;
@@ -7662,17 +7841,39 @@ var runReportCommand = async (inputPath, authorIdentityMode, options, logger = c
     report = createReport(current);
   } else {
     logger.info(`loading baseline snapshot: ${options.comparePath}`);
-    const baselineRaw = await readFile5(options.comparePath, "utf8");
+    const baselineRaw = await readFile6(options.comparePath, "utf8");
     const baseline = parseSnapshot(baselineRaw);
     const diff = compareSnapshots(current, baseline);
     report = createReport(current, diff);
   }
+  if (options.format === "html") {
+    const bundlePath = await writeHtmlReportBundle(report, {
+      repositoryPath: current.analysis.structural.targetPath,
+      ...options.outputPath === void 0 ? {} : { outputPath: options.outputPath }
+    });
+    if (options.open === true) {
+      const opened = await openPath(join8(bundlePath, "index.html"));
+      if (!opened) {
+        logger.warn("unable to open html report automatically on this platform");
+      }
+    }
+    logger.info(`html report written: ${bundlePath}`);
+    return {
+      report,
+      rendered: bundlePath,
+      outputPath: bundlePath
+    };
+  }
   const rendered = formatReport(report, options.format);
   if (options.outputPath !== void 0) {
-    await writeFile5(options.outputPath, rendered, "utf8");
+    await writeFile6(options.outputPath, rendered, "utf8");
     logger.info(`report written: ${options.outputPath}`);
   }
-  return { report, rendered };
+  return {
+    report,
+    rendered,
+    ...options.outputPath === void 0 ? {} : { outputPath: options.outputPath }
+  };
 };
 
 // src/application/run-explain-command.ts
@@ -7742,7 +7943,7 @@ var runExplainCommand = async (inputPath, authorIdentityMode, options, logger =
 
 // src/index.ts
 var program = new Command();
-var packageJsonPath = resolve5(dirname2(fileURLToPath(import.meta.url)), "../package.json");
+var packageJsonPath = resolve6(dirname3(fileURLToPath2(import.meta.url)), "../package.json");
 var { version } = JSON.parse(readFileSync2(packageJsonPath, "utf8"));
 var parseRecentWindowDays = (value) => {
   const parsed = Number.parseInt(value, 10);
@@ -7988,8 +8189,8 @@ program.command("report").argument("[path]", "path to the project to analyze").a
     "log verbosity: silent, error, warn, info, debug (logs are written to stderr)"
   ).choices(["silent", "error", "warn", "info", "debug"]).default(parseLogLevel(process.env["CODESENTINEL_LOG_LEVEL"]))
 ).addOption(
-  new Option("--format <mode>", "output format: text, json, md").choices(["text", "json", "md"]).default("md")
-).option("--output <path>", "write rendered report to a file path").option("--compare <baseline>", "compare against a baseline snapshot JSON file").option("--snapshot <path>", "write current snapshot JSON artifact").option("--no-trace", "disable trace embedding in generated snapshot").addOption(
+  new Option("--format <mode>", "output format: text, json, md, html").choices(["text", "json", "md", "html"]).default("md")
+).option("--output <path>", "write rendered report to a file path").option("--open", "open the generated HTML report in the default browser").option("--compare <baseline>", "compare against a baseline snapshot JSON file").option("--snapshot <path>", "write current snapshot JSON artifact").option("--no-trace", "disable trace embedding in generated snapshot").addOption(
   new Option(
     "--recent-window-days <days>",
     "git recency window in days used for evolution volatility metrics"
@@ -8005,14 +8206,20 @@ program.command("report").argument("[path]", "path to the project to analyze").a
         ...options.output === void 0 ? {} : { outputPath: options.output },
         ...options.compare === void 0 ? {} : { comparePath: options.compare },
         ...options.snapshot === void 0 ? {} : { snapshotPath: options.snapshot },
+        ...options.open === void 0 ? {} : { open: options.open },
         includeTrace: options.trace,
         scoringProfile: options.scoringProfile,
         recentWindowDays: options.recentWindowDays
       },
       logger
     );
-    if (options.output === void 0) {
+    if (options.output === void 0 && options.format !== "html") {
       process.stdout.write(`${result.rendered}
+`);
+      return;
+    }
+    if (options.format === "html") {
+      process.stdout.write(`${result.outputPath ?? result.rendered}
 `);
     }
   }
@@ -8031,7 +8238,9 @@ program.command("run").argument("[path]", "path to the project to analyze").addO
   new Option("--format <mode>", "combined output format: text, md, json").choices(["text", "md", "json"]).default("md")
 ).addOption(
   new Option("--detail <level>", "run detail level: compact (default), standard, full").choices(["compact", "standard", "full"]).default("compact")
-).option("--file <path>", "explain a specific file target").option("--module <name>", "explain a specific module target").option("--top <count>", "number of top hotspots to explain when no target is selected", "5").option("--compare <baseline>", "compare against a baseline snapshot JSON file").option("--snapshot <path>", "write current snapshot JSON artifact").option("--no-trace", "disable trace embedding in generated snapshot").addOption(
+).option("--file <path>", "explain a specific file target").option("--module <name>", "explain a specific module target").option("--top <count>", "number of top hotspots to explain when no target is selected", "5").option("--compare <baseline>", "compare against a baseline snapshot JSON file").option("--snapshot <path>", "write current snapshot JSON artifact").addOption(
+  new Option("--report <format>", "write an additional report bundle during the run").choices(["html"]).default(void 0)
+).option("--report-output <path>", "output path for the generated report bundle").option("--open", "open the generated HTML report in the default browser").option("--no-trace", "disable trace embedding in generated snapshot").addOption(
   new Option(
     "--recent-window-days <days>",
     "git recency window in days used for evolution volatility metrics"
@@ -8058,13 +8267,28 @@ program.command("run").argument("[path]", "path to the project to analyze").addO
       ...options.trace === true ? { trace: explain.trace } : {}
     });
     if (options.snapshot !== void 0) {
-      await writeFile6(options.snapshot, JSON.stringify(snapshot, null, 2), "utf8");
+      await writeFile7(options.snapshot, JSON.stringify(snapshot, null, 2), "utf8");
       logger.info(`snapshot written: ${options.snapshot}`);
     }
     const report = options.compare === void 0 ? createReport(snapshot) : createReport(
       snapshot,
-      compareSnapshots(snapshot, parseSnapshot(await readFile6(options.compare, "utf8")))
+      compareSnapshots(snapshot, parseSnapshot(await readFile7(options.compare, "utf8")))
     );
+    if (options.report === "html") {
+      const htmlOutputPath = await writeHtmlReportBundle(report, {
+        repositoryPath: explain.summary.structural.targetPath,
+        ...options.reportOutput === void 0 ? {} : { outputPath: options.reportOutput }
+      });
+      if (options.open === true) {
+        const opened = await openPath(`${htmlOutputPath}/index.html`);
+        if (!opened) {
+          logger.warn("unable to open html report automatically on this platform");
+        }
+      }
+      logger.info(`html report written: ${htmlOutputPath}`);
+    } else if (options.open === true) {
+      logger.warn("--open has no effect unless --report html is set");
+    }
     if (options.format === "json") {
       const analyzeSummaryOutput = formatAnalyzeOutput(explain.summary, "summary");
       if (options.detail === "compact") {