@ipation/specbridge 2.2.0 → 2.4.0

package/dist/index.js

@@ -28,7 +28,7 @@ var ConstraintExceptionSchema = z.object({
 });
 var ConstraintCheckSchema = z.object({
   verifier: z.string().min(1),
-  params: z.record(z.unknown()).optional()
+  params: z.record(z.string(), z.unknown()).optional()
 });
 var ConstraintSchema = z.object({
   id: z.string().min(1).regex(/^[a-z0-9-]+$/, "Constraint ID must be lowercase alphanumeric with hyphens"),
@@ -70,7 +70,7 @@ function validateDecision(data) {
   return { success: false, errors: result.error };
 }
 function formatValidationErrors(errors) {
-  return errors.errors.map((err) => {
+  return errors.issues.map((err) => {
     const path4 = err.path.join(".");
     return `${path4}: ${err.message}`;
   });
@@ -367,7 +367,7 @@ async function loadConfig(basePath = process.cwd()) {
   const parsed = parseYaml(content);
   const result = validateConfig(parsed);
   if (!result.success) {
-    const errors = result.errors.errors.map((e) => `${e.path.join(".")}: ${e.message}`);
+    const errors = result.errors.issues.map((e) => `${e.path.join(".")}: ${e.message}`);
     throw new ConfigError(`Invalid configuration in ${configPath}`, { errors });
   }
   return result.data;
@@ -1582,7 +1582,6 @@ async function runInference(config, options) {
 
 // src/verification/engine.ts
 import { Project as Project2 } from "ts-morph";
-import chalk from "chalk";
 
 // src/verification/verifiers/base.ts
 function defineVerifierPlugin(plugin) {
@@ -2055,7 +2054,10 @@ function buildDependencyGraph(project) {
       const moduleSpec = importDecl.getModuleSpecifierValue();
       const resolved = resolveToSourceFilePath(project, from, moduleSpec);
       if (resolved) {
-        graph.get(from).add(normalizeFsPath(resolved));
+        const dependencies = graph.get(from);
+        if (dependencies) {
+          dependencies.add(normalizeFsPath(resolved));
+        }
       }
     }
   }
@@ -2079,9 +2081,17 @@ function tarjanScc(graph) {
     for (const w of edges) {
       if (!indices.has(w)) {
         strongConnect(w);
-        lowlink.set(v, Math.min(lowlink.get(v), lowlink.get(w)));
+        const currentLowlink = lowlink.get(v);
+        const childLowlink = lowlink.get(w);
+        if (currentLowlink !== void 0 && childLowlink !== void 0) {
+          lowlink.set(v, Math.min(currentLowlink, childLowlink));
+        }
       } else if (onStack.has(w)) {
-        lowlink.set(v, Math.min(lowlink.get(v), indices.get(w)));
+        const currentLowlink = lowlink.get(v);
+        const childIndex = indices.get(w);
+        if (currentLowlink !== void 0 && childIndex !== void 0) {
+          lowlink.set(v, Math.min(currentLowlink, childIndex));
+        }
       }
     }
     if (lowlink.get(v) === indices.get(v)) {
@@ -2103,18 +2113,21 @@ function tarjanScc(graph) {
 }
 function parseMaxImportDepth(rule) {
   const m = rule.match(/maximum\s{1,5}import\s{1,5}depth\s{0,5}[:=]?\s{0,5}(\d+)/i);
-  return m ? Number.parseInt(m[1], 10) : null;
+  const depthText = m?.[1];
+  return depthText ? Number.parseInt(depthText, 10) : null;
 }
 function parseBannedDependency(rule) {
   const m = rule.match(/no\s{1,5}dependencies?\s{1,5}on\s{1,5}(?:package\s{1,5})?(.+?)(?:\.|$)/i);
-  if (!m) return null;
-  const value = m[1].trim();
+  const value = m?.[1]?.trim();
+  if (!value) return null;
   return value.length > 0 ? value : null;
 }
 function parseLayerRule(rule) {
   const m = rule.match(/(\w+)\s{1,5}layer\s{1,5}cannot\s{1,5}depend\s{1,5}on\s{1,5}(\w+)\s{1,5}layer/i);
-  if (!m) return null;
-  return { fromLayer: m[1].toLowerCase(), toLayer: m[2].toLowerCase() };
+  const fromLayer = m?.[1]?.toLowerCase();
+  const toLayer = m?.[2]?.toLowerCase();
+  if (!fromLayer || !toLayer) return null;
+  return { fromLayer, toLayer };
 }
 function fileInLayer(filePath, layer) {
   const fp = normalizeFsPath(filePath).toLowerCase();
@@ -2136,7 +2149,8 @@ var DependencyVerifier = class {
       const sccs = tarjanScc(graph);
       const current = projectFilePath;
       for (const scc of sccs) {
-        const hasSelfLoop = scc.length === 1 && (graph.get(scc[0])?.has(scc[0]) ?? false);
+        const first = scc[0];
+        const hasSelfLoop = first !== void 0 && scc.length === 1 && (graph.get(first)?.has(first) ?? false);
         const isCycle = scc.length > 1 || hasSelfLoop;
         if (!isCycle) continue;
         if (!scc.includes(current)) continue;
@@ -2218,10 +2232,12 @@ var DependencyVerifier = class {
 };
 
 // src/verification/verifiers/complexity.ts
+import { Node as Node4 } from "ts-morph";
 import { SyntaxKind as SyntaxKind2 } from "ts-morph";
 function parseLimit(rule, pattern) {
   const m = rule.match(pattern);
-  return m ? Number.parseInt(m[1], 10) : null;
+  const value = m?.[1];
+  return value ? Number.parseInt(value, 10) : null;
 }
 function getFileLineCount(text) {
   if (text.length === 0) return 0;
@@ -2257,14 +2273,15 @@ function calculateCyclomaticComplexity(fn) {
   return 1 + getDecisionPoints(fn);
 }
 function getFunctionDisplayName(fn) {
-  if ("getName" in fn && typeof fn.getName === "function") {
+  if (Node4.isFunctionDeclaration(fn) || Node4.isMethodDeclaration(fn) || Node4.isFunctionExpression(fn)) {
     const name = fn.getName();
-    if (typeof name === "string" && name.length > 0) return name;
+    if (typeof name === "string" && name.length > 0) {
+      return name;
+    }
   }
   const parent = fn.getParent();
-  if (parent?.getKind() === SyntaxKind2.VariableDeclaration) {
-    const vd = parent;
-    if (typeof vd.getName === "function") return vd.getName();
+  if (parent && Node4.isVariableDeclaration(parent)) {
+    return parent.getName();
   }
   return "<anonymous>";
 }
@@ -2334,9 +2351,8 @@ var ComplexityVerifier = class {
           }));
         }
       }
-      if (maxParams !== null && "getParameters" in fn) {
-        const params = fn.getParameters();
-        const paramCount = Array.isArray(params) ? params.length : 0;
+      if (maxParams !== null) {
+        const paramCount = fn.getParameters().length;
         if (paramCount > maxParams) {
           violations.push(createViolation({
             decisionId,
@@ -2410,8 +2426,7 @@ var SecurityVerifier = class {
         }));
       }
       for (const pa of sourceFile.getDescendantsOfKind(SyntaxKind3.PropertyAssignment)) {
-        const nameNode = pa.getNameNode?.();
-        const propName = nameNode?.getText?.() ?? "";
+        const propName = pa.getNameNode().getText();
         if (!SECRET_NAME_RE.test(propName)) continue;
         const init = pa.getInitializer();
         if (!init || !isStringLiteralLike(init)) continue;
@@ -2447,9 +2462,9 @@ var SecurityVerifier = class {
     if (checkXss) {
       for (const bin of sourceFile.getDescendantsOfKind(SyntaxKind3.BinaryExpression)) {
         const left = bin.getLeft();
-        if (left.getKind() !== SyntaxKind3.PropertyAccessExpression) continue;
-        const pa = left;
-        if (pa.getName?.() === "innerHTML") {
+        const propertyAccess = left.asKind(SyntaxKind3.PropertyAccessExpression);
+        if (!propertyAccess) continue;
+        if (propertyAccess.getName() === "innerHTML") {
           violations.push(createViolation({
             decisionId,
             constraintId: constraint.id,
@@ -2478,8 +2493,9 @@ var SecurityVerifier = class {
     if (checkSql) {
       for (const call of sourceFile.getDescendantsOfKind(SyntaxKind3.CallExpression)) {
         const expr = call.getExpression();
-        if (expr.getKind() !== SyntaxKind3.PropertyAccessExpression) continue;
-        const name = expr.getName?.();
+        const propertyAccess = expr.asKind(SyntaxKind3.PropertyAccessExpression);
+        if (!propertyAccess) continue;
+        const name = propertyAccess.getName();
         if (name !== "query" && name !== "execute") continue;
         const arg = call.getArguments()[0];
         if (!arg) continue;
@@ -2544,12 +2560,14 @@ var ApiVerifier = class {
     if (!enforceKebab) return violations;
     for (const call of sourceFile.getDescendantsOfKind(SyntaxKind4.CallExpression)) {
       const expr = call.getExpression();
-      if (expr.getKind() !== SyntaxKind4.PropertyAccessExpression) continue;
-      const method = expr.getName?.();
+      const propertyAccess = expr.asKind(SyntaxKind4.PropertyAccessExpression);
+      if (!propertyAccess) continue;
+      const method = propertyAccess.getName();
       if (!method || !HTTP_METHODS.has(String(method))) continue;
       const firstArg = call.getArguments()[0];
-      if (!firstArg || firstArg.getKind() !== SyntaxKind4.StringLiteral) continue;
-      const pathValue = firstArg.getLiteralValue?.() ?? firstArg.getText().slice(1, -1);
+      const stringLiteral = firstArg?.asKind(SyntaxKind4.StringLiteral);
+      if (!stringLiteral) continue;
+      const pathValue = stringLiteral.getLiteralValue();
       if (typeof pathValue !== "string") continue;
       if (!isKebabPath(pathValue)) {
         violations.push(createViolation({
@@ -2573,10 +2591,36 @@ import { existsSync } from "fs";
 import { join as join3 } from "path";
 import { pathToFileURL } from "url";
 import fg2 from "fast-glob";
+
+// src/utils/logger.ts
+import pino from "pino";
+var defaultOptions = {
+  level: process.env.SPECBRIDGE_LOG_LEVEL || "info",
+  timestamp: pino.stdTimeFunctions.isoTime,
+  base: {
+    service: "specbridge"
+  }
+};
+var destination = pino.destination({
+  fd: 2,
+  // stderr
+  sync: false
+});
+var rootLogger = pino(defaultOptions, destination);
+function getLogger(bindings) {
+  if (!bindings) {
+    return rootLogger;
+  }
+  return rootLogger.child(bindings);
+}
+var logger = getLogger();
+
+// src/verification/plugins/loader.ts
 var PluginLoader = class {
   plugins = /* @__PURE__ */ new Map();
   loaded = false;
   loadErrors = [];
+  logger = getLogger({ module: "verification.plugins.loader" });
   /**
    * Load all plugins from the specified base path
    *
@@ -2599,15 +2643,15 @@ var PluginLoader = class {
       } catch (error) {
         const message = error instanceof Error ? error.message : String(error);
         this.loadErrors.push({ file, error: message });
-        console.warn(`Failed to load plugin from ${file}: ${message}`);
+        this.logger.warn({ file, error: message }, "Failed to load plugin");
       }
     }
     this.loaded = true;
     if (this.plugins.size > 0) {
-      console.error(`Loaded ${this.plugins.size} custom verifier(s)`);
+      this.logger.info({ count: this.plugins.size }, "Loaded custom verifier plugins");
     }
     if (this.loadErrors.length > 0) {
-      console.warn(`Failed to load ${this.loadErrors.length} plugin(s)`);
+      this.logger.warn({ count: this.loadErrors.length }, "Plugin load failures");
     }
   }
   /**
@@ -2783,8 +2827,9 @@ var builtinVerifiers = {
 };
 var verifierInstances = /* @__PURE__ */ new Map();
 function getVerifier(id) {
-  if (verifierInstances.has(id)) {
-    return verifierInstances.get(id);
+  const pooled = verifierInstances.get(id);
+  if (pooled) {
+    return pooled;
   }
   const pluginLoader2 = getPluginLoader();
   const customVerifier = pluginLoader2.getVerifier(id);
@@ -2989,6 +3034,7 @@ var VerificationEngine = class {
   astCache;
   resultsCache;
   pluginsLoaded = false;
+  logger = getLogger({ module: "verification.engine" });
   constructor(registry) {
     this.registry = registry || createRegistry();
     this.project = new Project2({
@@ -3162,13 +3208,12 @@ var VerificationEngine = class {
         );
         if (!verifier) {
           const requestedVerifier = constraint.check?.verifier || constraint.verifier || "auto-detected";
-          console.warn(
-            chalk.yellow(
-              `Warning: No verifier found for ${decision.metadata.id}/${constraint.id}
-  Requested: ${requestedVerifier}
-  Available: ${getVerifierIds().join(", ")}`
-            )
-          );
+          this.logger.warn({
+            decisionId: decision.metadata.id,
+            constraintId: constraint.id,
+            requestedVerifier,
+            availableVerifiers: getVerifierIds()
+          }, "No verifier found for constraint");
           warnings.push({
             type: "missing_verifier",
             message: `No verifier found for constraint (requested: ${requestedVerifier})`,
@@ -3274,17 +3319,14 @@ var VerificationEngine = class {
         } catch (error) {
           const errorMessage = error instanceof Error ? error.message : String(error);
           const errorStack = error instanceof Error ? error.stack : void 0;
-          console.error(
-            chalk.red(
-              `Error: Verifier '${verifier.id}' failed
-  File: ${filePath}
-  Decision: ${decision.metadata.id}/${constraint.id}
-  Error: ${errorMessage}`
-            )
-          );
-          if (errorStack) {
-            console.error(chalk.dim(errorStack));
-          }
+          this.logger.error({
+            verifierId: verifier.id,
+            filePath,
+            decisionId: decision.metadata.id,
+            constraintId: constraint.id,
+            error: errorMessage,
+            stack: errorStack
+          }, "Verifier execution failed");
           errors.push({
             type: "verifier_exception",
             message: `Verifier '${verifier.id}' failed: ${errorMessage}`,
@@ -3420,6 +3462,10 @@ var AutofixEngine = class {
       const edits = [];
       for (const violation of fileViolations) {
         const fix = violation.autofix;
+        if (!fix) {
+          skippedViolations++;
+          continue;
+        }
         if (options.interactive) {
           const ok = await confirmFix(`Apply fix: ${fix.description} (${filePath}:${violation.line ?? 1})?`);
           if (!ok) {
@@ -3446,7 +3492,8 @@ var AutofixEngine = class {
 };
 
 // src/propagation/graph.ts
-async function buildDependencyGraph2(decisions, files) {
+async function buildDependencyGraph2(decisions, files, options = {}) {
+  const { cwd } = options;
   const nodes = /* @__PURE__ */ new Map();
   const decisionToFiles = /* @__PURE__ */ new Map();
   const fileToDecisions = /* @__PURE__ */ new Map();
@@ -3461,7 +3508,7 @@ async function buildDependencyGraph2(decisions, files) {
       const constraintId = `constraint:${decision.metadata.id}/${constraint.id}`;
       const matchingFiles = [];
       for (const file of files) {
-        if (matchesPattern(file, constraint.scope)) {
+        if (matchesPattern(file, constraint.scope, { cwd })) {
           matchingFiles.push(`file:${file}`);
           const fileDecisions = fileToDecisions.get(file) || /* @__PURE__ */ new Set();
           fileDecisions.add(decision.metadata.id);
@@ -3537,7 +3584,7 @@ var PropagationEngine = class {
       absolute: true
     });
     const decisions = this.registry.getActive();
-    this.graph = await buildDependencyGraph2(decisions, files);
+    this.graph = await buildDependencyGraph2(decisions, files, { cwd });
   }
   /**
    * Analyze impact of changing a decision
@@ -3547,7 +3594,24 @@ var PropagationEngine = class {
     if (!this.graph) {
       await this.initialize(config, options);
     }
-    const affectedFilePaths = getAffectedFiles(this.graph, decisionId);
+    const graph = this.graph;
+    if (!graph) {
+      return {
+        decision: decisionId,
+        change,
+        affectedFiles: [],
+        estimatedEffort: "low",
+        migrationSteps: [
+          {
+            order: 1,
+            description: "Run verification to confirm all violations resolved",
+            files: [],
+            automated: true
+          }
+        ]
+      };
+    }
+    const affectedFilePaths = getAffectedFiles(graph, decisionId);
     const verificationEngine = createVerificationEngine(this.registry);
     const result = await verificationEngine.verify(config, {
       files: affectedFilePaths,
@@ -3855,7 +3919,10 @@ var Reporter = class {
         result.violations.forEach((v) => {
           const key = v.severity;
           if (!grouped.has(key)) grouped.set(key, []);
-          grouped.get(key).push(v);
+          const bucket = grouped.get(key);
+          if (bucket) {
+            bucket.push(v);
+          }
         });
         for (const [severity, violations] of grouped.entries()) {
           lines.push(`Severity: ${severity}`);
@@ -3870,7 +3937,10 @@ var Reporter = class {
         result.violations.forEach((v) => {
           const key = v.location?.file || v.file || "unknown";
           if (!grouped.has(key)) grouped.set(key, []);
-          grouped.get(key).push(v);
+          const bucket = grouped.get(key);
+          if (bucket) {
+            bucket.push(v);
+          }
         });
         for (const [file, violations] of grouped.entries()) {
           lines.push(`File: ${file}`);
@@ -3919,54 +3989,54 @@ var Reporter = class {
 };
 
 // src/reporting/formats/console.ts
-import chalk2 from "chalk";
+import chalk from "chalk";
 import { table } from "table";
 function formatConsoleReport(report) {
   const lines = [];
   lines.push("");
-  lines.push(chalk2.bold.blue("SpecBridge Compliance Report"));
-  lines.push(chalk2.dim(`Generated: ${new Date(report.timestamp).toLocaleString()}`));
-  lines.push(chalk2.dim(`Project: ${report.project}`));
+  lines.push(chalk.bold.blue("SpecBridge Compliance Report"));
+  lines.push(chalk.dim(`Generated: ${new Date(report.timestamp).toLocaleString()}`));
+  lines.push(chalk.dim(`Project: ${report.project}`));
   lines.push("");
   const complianceColor = getComplianceColor(report.summary.compliance);
-  lines.push(chalk2.bold("Overall Compliance"));
+  lines.push(chalk.bold("Overall Compliance"));
   lines.push(`  ${complianceColor(formatComplianceBar(report.summary.compliance))} ${complianceColor(`${report.summary.compliance}%`)}`);
   lines.push("");
-  lines.push(chalk2.bold("Summary"));
+  lines.push(chalk.bold("Summary"));
   lines.push(`  Decisions: ${report.summary.activeDecisions} active / ${report.summary.totalDecisions} total`);
   lines.push(`  Constraints: ${report.summary.totalConstraints}`);
   lines.push("");
-  lines.push(chalk2.bold("Violations"));
+  lines.push(chalk.bold("Violations"));
   const { violations } = report.summary;
   const violationParts = [];
   if (violations.critical > 0) {
-    violationParts.push(chalk2.red(`${violations.critical} critical`));
+    violationParts.push(chalk.red(`${violations.critical} critical`));
   }
   if (violations.high > 0) {
-    violationParts.push(chalk2.yellow(`${violations.high} high`));
+    violationParts.push(chalk.yellow(`${violations.high} high`));
   }
   if (violations.medium > 0) {
-    violationParts.push(chalk2.cyan(`${violations.medium} medium`));
+    violationParts.push(chalk.cyan(`${violations.medium} medium`));
   }
   if (violations.low > 0) {
-    violationParts.push(chalk2.dim(`${violations.low} low`));
+    violationParts.push(chalk.dim(`${violations.low} low`));
   }
   if (violationParts.length > 0) {
     lines.push(`  ${violationParts.join(" | ")}`);
   } else {
-    lines.push(chalk2.green("  No violations"));
+    lines.push(chalk.green("  No violations"));
   }
   lines.push("");
   if (report.byDecision.length > 0) {
-    lines.push(chalk2.bold("By Decision"));
+    lines.push(chalk.bold("By Decision"));
     lines.push("");
     const tableData = [
       [
-        chalk2.bold("Decision"),
-        chalk2.bold("Status"),
-        chalk2.bold("Constraints"),
-        chalk2.bold("Violations"),
-        chalk2.bold("Compliance")
+        chalk.bold("Decision"),
+        chalk.bold("Status"),
+        chalk.bold("Constraints"),
+        chalk.bold("Violations"),
+        chalk.bold("Compliance")
       ]
     ];
     for (const dec of report.byDecision) {
@@ -3976,7 +4046,7 @@ function formatConsoleReport(report) {
         truncate(dec.title, 40),
         statusColor(dec.status),
         String(dec.constraints),
-        dec.violations > 0 ? chalk2.red(String(dec.violations)) : chalk2.green("0"),
+        dec.violations > 0 ? chalk.red(String(dec.violations)) : chalk.green("0"),
         compColor(`${dec.compliance}%`)
       ]);
     }
@@ -4010,23 +4080,23 @@ function formatComplianceBar(compliance) {
   return "\u2588".repeat(filled) + "\u2591".repeat(empty);
 }
 function getComplianceColor(compliance) {
-  if (compliance >= 90) return chalk2.green;
-  if (compliance >= 70) return chalk2.yellow;
-  if (compliance >= 50) return chalk2.hex("#FFA500");
-  return chalk2.red;
+  if (compliance >= 90) return chalk.green;
+  if (compliance >= 70) return chalk.yellow;
+  if (compliance >= 50) return chalk.hex("#FFA500");
+  return chalk.red;
 }
 function getStatusColor(status) {
   switch (status) {
     case "active":
-      return chalk2.green;
+      return chalk.green;
     case "draft":
-      return chalk2.yellow;
+      return chalk.yellow;
     case "deprecated":
-      return chalk2.gray;
+      return chalk.gray;
     case "superseded":
-      return chalk2.blue;
+      return chalk.blue;
     default:
-      return chalk2.white;
+      return chalk.white;
   }
 }
 function truncate(str, length) {
@@ -4100,6 +4170,7 @@ function formatProgressBar(percentage) {
 import { join as join4 } from "path";
 var ReportStorage = class {
   storageDir;
+  logger = getLogger({ module: "reporting.storage" });
   constructor(basePath) {
     this.storageDir = join4(getSpecBridgeDir(basePath), "reports", "history");
   }
@@ -4158,7 +4229,7 @@ var ReportStorage = class {
         const timestamp = file.replace("report-", "").replace(".json", "");
         return { timestamp, report };
       } catch (error) {
-        console.warn(`Warning: Failed to load report ${file}:`, error);
+        this.logger.warn({ file, error }, "Failed to load report file");
         return null;
       }
     });
@@ -4202,7 +4273,7 @@ var ReportStorage = class {
         const fs = await import("fs/promises");
         await fs.unlink(filepath);
       } catch (error) {
-        console.warn(`Warning: Failed to delete old report ${file}:`, error);
+        this.logger.warn({ file, error }, "Failed to delete old report file");
       }
     }
     return filesToDelete.length;
@@ -4326,7 +4397,10 @@ async function analyzeTrend(reports) {
       if (!decisionMap.has(decision.decisionId)) {
         decisionMap.set(decision.decisionId, []);
       }
-      decisionMap.get(decision.decisionId).push(decision);
+      const decisionHistory = decisionMap.get(decision.decisionId);
+      if (decisionHistory) {
+        decisionHistory.push(decision);
+      }
     }
   }
   const decisions = Array.from(decisionMap.entries()).map(([decisionId, data]) => {
@@ -5036,6 +5110,7 @@ var DashboardServer = class {
   CACHE_TTL = 6e4;
   // 1 minute
   refreshInterval = null;
+  logger = getLogger({ module: "dashboard.server" });
   constructor(options) {
     this.cwd = options.cwd;
     this.config = options.config;
@@ -5052,7 +5127,11 @@ var DashboardServer = class {
     await this.registry.load();
     await this.refreshCache();
     this.refreshInterval = setInterval(
-      () => this.refreshCache().catch(console.error),
+      () => {
+        void this.refreshCache().catch((error) => {
+          this.logger.error({ error }, "Background cache refresh failed");
+        });
+      },
       this.CACHE_TTL
     );
   }
@@ -5075,7 +5154,7 @@ var DashboardServer = class {
       this.cacheTimestamp = Date.now();
       await this.reportStorage.save(report);
     } catch (error) {
-      console.error("Cache refresh failed:", error);
+      this.logger.error({ error }, "Cache refresh failed");
       if (!this.cachedReport) {
         try {
           const stored = await this.reportStorage.loadLatest();
@@ -5083,7 +5162,7 @@ var DashboardServer = class {
             this.cachedReport = stored.report;
           }
         } catch (fallbackError) {
-          console.error("Failed to load fallback report:", fallbackError);
+          this.logger.error({ error: fallbackError }, "Failed to load fallback report");
         }
       }
     }
@@ -5156,7 +5235,8 @@ var DashboardServer = class {
     });
     this.app.get("/api/report/:date", async (req, res) => {
       try {
-        const date = req.params.date;
+        const dateParam = req.params.date;
+        const date = Array.isArray(dateParam) ? dateParam[0] : dateParam;
         if (!date) {
           res.status(400).json({ error: "Date parameter required" });
           return;
@@ -5192,7 +5272,8 @@ var DashboardServer = class {
     });
     this.app.get("/api/decisions/:id", async (req, res) => {
       try {
-        const id = req.params.id;
+        const idParam = req.params.id;
+        const id = Array.isArray(idParam) ? idParam[0] : idParam;
         if (!id) {
           res.status(400).json({ error: "Decision ID required" });
           return;
@@ -5204,6 +5285,10 @@ var DashboardServer = class {
         }
         res.json(decision);
       } catch (error) {
+        if (error instanceof DecisionNotFoundError) {
+          res.status(404).json({ error: "Decision not found" });
+          return;
+        }
         res.status(500).json({
           error: "Failed to load decision",
           message: error instanceof Error ? error.message : "Unknown error"
@@ -5235,7 +5320,8 @@ var DashboardServer = class {
     });
     this.app.get("/api/analytics/decision/:id", async (req, res) => {
       try {
-        const id = req.params.id;
+        const idParam = req.params.id;
+        const id = Array.isArray(idParam) ? idParam[0] : idParam;
         if (!id) {
           res.status(400).json({ error: "Decision ID required" });
           return;
@@ -5324,7 +5410,7 @@ var DashboardServer = class {
       // Cache static assets
       etag: true
     }));
-    this.app.get("*", (_req, res) => {
+    this.app.get("/{*path}", (_req, res) => {
       res.sendFile(join5(publicDir, "index.html"));
     });
   }
@@ -5339,7 +5425,7 @@ import { TextDocument } from "vscode-languageserver-textdocument";
 import { fileURLToPath as fileURLToPath2 } from "url";
 import path3 from "path";
 import { Project as Project3 } from "ts-morph";
-import chalk3 from "chalk";
+import chalk2 from "chalk";
 function severityToDiagnostic(severity) {
   switch (severity) {
     case "critical":
@@ -5421,7 +5507,11 @@ var SpecBridgeLspServer = class {
       const doc = this.documents.get(params.textDocument.uri);
       if (!doc) return [];
       return violations.filter((v) => v.autofix && v.autofix.edits.length > 0).map((v) => {
-        const edits = v.autofix.edits.map((edit) => ({
+        const autofix = v.autofix;
+        if (!autofix) {
+          return null;
+        }
+        const edits = autofix.edits.map((edit) => ({
           range: {
             start: doc.positionAt(edit.start),
             end: doc.positionAt(edit.end)
@@ -5429,7 +5519,7 @@ var SpecBridgeLspServer = class {
           newText: edit.text
         }));
         return {
-          title: v.autofix.description,
+          title: autofix.description,
           kind: CodeActionKind.QuickFix,
           edit: {
             changes: {
@@ -5437,7 +5527,7 @@ var SpecBridgeLspServer = class {
             }
           }
         };
-      });
+      }).filter((action) => action !== null);
     });
     this.documents.listen(this.connection);
     this.connection.listen();
@@ -5446,7 +5536,7 @@ var SpecBridgeLspServer = class {
     if (!await pathExists(getSpecBridgeDir(this.cwd))) {
       const err = new NotInitializedError();
       this.initError = err.message;
-      if (this.options.verbose) this.connection.console.error(chalk3.red(this.initError));
+      if (this.options.verbose) this.connection.console.error(chalk2.red(this.initError));
       return;
     }
     try {
@@ -5455,7 +5545,7 @@ var SpecBridgeLspServer = class {
         await getPluginLoader().loadPlugins(this.cwd);
       } catch (error) {
         const msg = error instanceof Error ? error.message : String(error);
-        if (this.options.verbose) this.connection.console.error(chalk3.red(`Plugin load failed: ${msg}`));
+        if (this.options.verbose) this.connection.console.error(chalk2.red(`Plugin load failed: ${msg}`));
       }
       this.registry = createRegistry({ basePath: this.cwd });
       await this.registry.load();
@@ -5468,11 +5558,11 @@ var SpecBridgeLspServer = class {
         }
       }
       if (this.options.verbose) {
-        this.connection.console.log(chalk3.dim(`Loaded ${this.decisions.length} active decision(s)`));
+        this.connection.console.log(chalk2.dim(`Loaded ${this.decisions.length} active decision(s)`));
       }
     } catch (error) {
       this.initError = error instanceof Error ? error.message : String(error);
-      if (this.options.verbose) this.connection.console.error(chalk3.red(this.initError));
+      if (this.options.verbose) this.connection.console.error(chalk2.red(this.initError));
     }
   }
   async verifyTextDocument(doc) {
@@ -5540,6 +5630,9 @@ async function startLspServer(options) {
 // src/integrations/github.ts
 function toMdTable(rows) {
   const header = rows[0];
+  if (!header) {
+    return "";
+  }
   const body = rows.slice(1);
   const sep = header.map(() => "---");
   const lines = [
@@ -5683,6 +5776,7 @@ export {
   getConfigPath,
   getDecisionsDir,
   getInferredDir,
+  getLogger,
   getReportsDir,
   getSpecBridgeDir,
   getTransitiveDependencies,
@@ -5695,6 +5789,7 @@ export {
   loadConfig,
   loadDecisionFile,
   loadDecisionsFromDir,
+  logger,
   matchesAnyPattern,
   matchesPattern,
   mergeWithDefaults,