agentvibes 5.9.0 → 5.10.1

package/src/console/tabs/readme-tab.js

@@ -1,272 +1,272 @@
-/**
- * AgentVibes TUI Console — Readme Tab
- * Epic 13: Story 13.2
- *
- * Implements the Tab Component Contract:
- *   createReadmeTab(screen, services) → { box, show, hide, onFocus, onBlur, getFooterText, getFooterColor }
- *
- * Features: renders README.md with styled markdown, scrolling, search.
- */
-
-import fs from 'node:fs';
-import path from 'node:path';
-import { t } from '../../i18n/strings.js';
-
-const IS_TEST = process.env.AGENTVIBES_TEST_MODE === 'true';
-
-let blessed;
-if (!IS_TEST) {
-  const { default: b } = await import('blessed');
-  blessed = b;
-}
-
-// ---------------------------------------------------------------------------
-
-const COLORS = {
-  contentBg:  '#0a0e1a',
-  h1Fg:       '#69f0ae',  // Green — H1
-  h2Fg:       '#82b1ff',  // Blue — H2
-  h3Fg:       '#80d8ff',  // Light blue — H3
-  codeFg:     '#ffff00',  // Yellow — code spans
-  boldFg:     '#e3f2fd',  // Bright — bold text
-  quoteFg:    '#90a4ae',  // Gray — blockquotes
-  labelFg:    '#e3f2fd',
-  borderFg:   '#455a64',
-  footerBg:   '#455a64',  // Dark gray — Readme tab footer
-};
-
-const _FOOTER_TEXT_EN = '[↑↓/jk] Scroll  [PgUp/PgDn] Page  [/] Search  [S/V/M/A/R] Tab  [Q] Quit';
-
-// ---------------------------------------------------------------------------
-// Markdown renderer (story 13.2)
-
-/**
- * Render a single markdown line to blessed tagged string.
- * Handles: H1/H2/H3, bold (**), code spans (`), blockquotes (>), plain text.
- *
- * @param {string} line
- * @returns {string}
- */
-export function renderMarkdownLine(line) {
-  // H1
-  if (/^# /.test(line)) {
-    const text = line.replace(/^# /, '');
-    return `{bold}{${COLORS.h1Fg}-fg}${text}{/${COLORS.h1Fg}-fg}{/bold}`;
-  }
-  // H2
-  if (/^## /.test(line)) {
-    const text = line.replace(/^## /, '');
-    return `{bold}{${COLORS.h2Fg}-fg}${text}{/${COLORS.h2Fg}-fg}{/bold}`;
-  }
-  // H3
-  if (/^### /.test(line)) {
-    const text = line.replace(/^### /, '');
-    return `{${COLORS.h3Fg}-fg}${text}{/${COLORS.h3Fg}-fg}`;
-  }
-  // Blockquote
-  if (/^> /.test(line)) {
-    const text = line.replace(/^> /, '');
-    return `{${COLORS.quoteFg}-fg}│ ${text}{/${COLORS.quoteFg}-fg}`;
-  }
-  // Horizontal rule
-  if (/^---+$/.test(line.trim())) {
-    return `{${COLORS.quoteFg}-fg}${'─'.repeat(66)}{/${COLORS.quoteFg}-fg}`;
-  }
-
-  // Inline: code spans, bold
-  let result = line;
-  // Escape existing blessed tags (literal braces in content)
-  // Code spans: `text`
-  result = result.replace(/`([^`]+)`/g, `{${COLORS.codeFg}-fg}$1{/${COLORS.codeFg}-fg}`);
-  // Bold: **text**
-  result = result.replace(/\*\*([^*]+)\*\*/g, `{bold}$1{/bold}`);
-  // Italic: *text*
-  result = result.replace(/\*([^*]+)\*/g, `{${COLORS.h3Fg}-fg}$1{/${COLORS.h3Fg}-fg}`);
-
-  return result;
-}
-
-/**
- * Render full markdown content to blessed tagged multi-line string.
- * @param {string} markdown
- * @returns {string}
- */
-export function renderMarkdown(markdown) {
-  return markdown
-    .split('\n')
-    .map(line => renderMarkdownLine(line))
-    .join('\n');
-}
-
-// ---------------------------------------------------------------------------
-
-function createTestStub() {
-  return {
-    box: {},
-    show: () => {},
-    hide: () => {},
-    onFocus: () => {},
-    onBlur: () => {},
-    getFooterText: () => _FOOTER_TEXT_EN,
-    getFooterColor: () => COLORS.footerBg,
-  };
-}
-
-// ---------------------------------------------------------------------------
-
-/**
- * Create the Readme tab component.
- *
- * @param {object} screen   - Blessed screen instance
- * @param {object} services
- * @returns {{ box, show, hide, onFocus, onBlur, getFooterText, getFooterColor }}
- */
-export function createReadmeTab(screen, services) {
-  if (IS_TEST) return createTestStub();
-
-  const { focusMainTabBar, languageService } = services;
-  const _tl = (key) => languageService ? languageService.t(key) : t('en', key);
-
-  // -------------------------------------------------------------------------
-  // Container
-
-  const box = blessed.box({
-    parent: screen,
-    top: 5,
-    left: 0,
-    width: '100%',
-    bottom: 2,
-    hidden: true,
-    style: { fg: COLORS.labelFg, bg: COLORS.contentBg },
-    border: { type: 'line' },
-    borderStyle: { fg: COLORS.borderFg },
-  });
-
-  // -------------------------------------------------------------------------
-  // Load README.md
-
-  function _loadReadme() {
-    // Package root — works whether installed globally (node_modules/.bin) or run from source
-    const pkgRoot = path.resolve(new URL(import.meta.url).pathname, '..', '..', '..', '..');
-    const candidates = [
-      path.resolve(process.cwd(), 'README.md'),
-      path.resolve(process.cwd(), 'readme.md'),
-      path.resolve(pkgRoot, 'README.md'),  // AgentVibes package README fallback
-    ];
-    for (const p of candidates) {
-      if (fs.existsSync(p)) {
-        try {
-          return fs.readFileSync(p, 'utf8');
-        } catch {
-          // Unreadable
-        }
-      }
-    }
-    return `# README\n\n${_tl('readmeNotFound')}`;
-  }
-
-  // -------------------------------------------------------------------------
-  // Scrollable content
-
-  const scrollBox = blessed.box({
-    parent: box,
-    top: 1,
-    left: 2,
-    width: '96%',
-    bottom: 4,
-    scrollable: true,
-    alwaysScroll: true,
-    tags: true,
-    keys: true,
-    vi: true,
-    mouse: true,
-    scrollbar: { ch: '│', style: { fg: COLORS.borderFg } },
-    content: '',
-    style: { fg: COLORS.labelFg, bg: COLORS.contentBg },
-  });
-
-  // Scroll indicator
-  const scrollIndicator = blessed.text({
-    parent: box,
-    bottom: 2,
-    right: 2,
-    content: '',
-    tags: true,
-    style: { fg: COLORS.quoteFg, bg: COLORS.contentBg },
-  });
-
-  // -------------------------------------------------------------------------
-  // Render
-
-  function refreshContent() {
-    const markdown = _loadReadme();
-    const rendered = renderMarkdown(markdown);
-    scrollBox.setContent(rendered);
-    scrollIndicator.setContent(`{#607d8b-fg}${_tl('readmeScrollMore')}{/#607d8b-fg}`);
-    screen.render();
-  }
-
-  // Scroll events update indicator
-  scrollBox.on('scroll', () => {
-    const atBottom = scrollBox.getScrollPerc() >= 99;
-    scrollIndicator.setContent(
-      atBottom ? '' : `{#607d8b-fg}${_tl('readmeScrollMore')}{/#607d8b-fg}`
-    );
-    screen.render();
-  });
-
-  // PgUp/PgDn
-  scrollBox.key(['pageup'], () => {
-    scrollBox.scroll(-10);
-    screen.render();
-  });
-  scrollBox.key(['pagedown'], () => {
-    scrollBox.scroll(10);
-    screen.render();
-  });
-
-  // [↑] at top of content → jump to main header tab bar
-  scrollBox.key(['up'], () => {
-    if (scrollBox.getScroll() === 0 && typeof focusMainTabBar === 'function') {
-      focusMainTabBar();
-    }
-  });
-
-  // Escape → return to header tab bar
-  scrollBox.key(['escape'], () => {
-    if (typeof focusMainTabBar === 'function') { focusMainTabBar(); screen.render(); }
-  });
-
-  // -------------------------------------------------------------------------
-  // Tab Component Contract
-
-  return {
-    box,
-
-    show() {
-      box.show();
-      refreshContent();
-      screen.render();
-    },
-
-    hide() {
-      box.hide();
-      screen.render();
-    },
-
-    onFocus() {
-      scrollBox.focus();
-      screen.render();
-    },
-
-    onBlur() {},
-
-    getFooterText() {
-      return _tl('readmeFooter');
-    },
-
-    getFooterColor() {
-      return COLORS.footerBg;
-    },
-  };
-}
+/**
+ * AgentVibes TUI Console — Readme Tab
+ * Epic 13: Story 13.2
+ *
+ * Implements the Tab Component Contract:
+ *   createReadmeTab(screen, services) → { box, show, hide, onFocus, onBlur, getFooterText, getFooterColor }
+ *
+ * Features: renders README.md with styled markdown, scrolling, search.
+ */
+
+import fs from 'node:fs';
+import path from 'node:path';
+import { t } from '../../i18n/strings.js';
+
+const IS_TEST = process.env.AGENTVIBES_TEST_MODE === 'true';
+
+let blessed;
+if (!IS_TEST) {
+  const { default: b } = await import('blessed');
+  blessed = b;
+}
+
+// ---------------------------------------------------------------------------
+
+const COLORS = {
+  contentBg:  '#0a0e1a',
+  h1Fg:       '#69f0ae',  // Green — H1
+  h2Fg:       '#82b1ff',  // Blue — H2
+  h3Fg:       '#80d8ff',  // Light blue — H3
+  codeFg:     '#ffff00',  // Yellow — code spans
+  boldFg:     '#e3f2fd',  // Bright — bold text
+  quoteFg:    '#90a4ae',  // Gray — blockquotes
+  labelFg:    '#e3f2fd',
+  borderFg:   '#455a64',
+  footerBg:   '#455a64',  // Dark gray — Readme tab footer
+};
+
+const _FOOTER_TEXT_EN = '[↑↓/jk] Scroll  [PgUp/PgDn] Page  [/] Search  [S/V/M/A/R] Tab  [Q] Quit';
+
+// ---------------------------------------------------------------------------
+// Markdown renderer (story 13.2)
+
+/**
+ * Render a single markdown line to blessed tagged string.
+ * Handles: H1/H2/H3, bold (**), code spans (`), blockquotes (>), plain text.
+ *
+ * @param {string} line
+ * @returns {string}
+ */
+export function renderMarkdownLine(line) {
+  // H1
+  if (/^# /.test(line)) {
+    const text = line.replace(/^# /, '');
+    return `{bold}{${COLORS.h1Fg}-fg}${text}{/${COLORS.h1Fg}-fg}{/bold}`;
+  }
+  // H2
+  if (/^## /.test(line)) {
+    const text = line.replace(/^## /, '');
+    return `{bold}{${COLORS.h2Fg}-fg}${text}{/${COLORS.h2Fg}-fg}{/bold}`;
+  }
+  // H3
+  if (/^### /.test(line)) {
+    const text = line.replace(/^### /, '');
+    return `{${COLORS.h3Fg}-fg}${text}{/${COLORS.h3Fg}-fg}`;
+  }
+  // Blockquote
+  if (/^> /.test(line)) {
+    const text = line.replace(/^> /, '');
+    return `{${COLORS.quoteFg}-fg}│ ${text}{/${COLORS.quoteFg}-fg}`;
+  }
+  // Horizontal rule
+  if (/^---+$/.test(line.trim())) {
+    return `{${COLORS.quoteFg}-fg}${'─'.repeat(66)}{/${COLORS.quoteFg}-fg}`;
+  }
+
+  // Inline: code spans, bold
+  let result = line;
+  // Escape existing blessed tags (literal braces in content)
+  // Code spans: `text`
+  result = result.replace(/`([^`]+)`/g, `{${COLORS.codeFg}-fg}$1{/${COLORS.codeFg}-fg}`);
+  // Bold: **text**
+  result = result.replace(/\*\*([^*]+)\*\*/g, `{bold}$1{/bold}`);
+  // Italic: *text*
+  result = result.replace(/\*([^*]+)\*/g, `{${COLORS.h3Fg}-fg}$1{/${COLORS.h3Fg}-fg}`);
+
+  return result;
+}
+
+/**
+ * Render full markdown content to blessed tagged multi-line string.
+ * @param {string} markdown
+ * @returns {string}
+ */
+export function renderMarkdown(markdown) {
+  return markdown
+    .split('\n')
+    .map(line => renderMarkdownLine(line))
+    .join('\n');
+}
+
+// ---------------------------------------------------------------------------
+
+function createTestStub() {
+  return {
+    box: {},
+    show: () => {},
+    hide: () => {},
+    onFocus: () => {},
+    onBlur: () => {},
+    getFooterText: () => _FOOTER_TEXT_EN,
+    getFooterColor: () => COLORS.footerBg,
+  };
+}
+
+// ---------------------------------------------------------------------------
+
+/**
+ * Create the Readme tab component.
+ *
+ * @param {object} screen   - Blessed screen instance
+ * @param {object} services
+ * @returns {{ box, show, hide, onFocus, onBlur, getFooterText, getFooterColor }}
+ */
+export function createReadmeTab(screen, services) {
+  if (IS_TEST) return createTestStub();
+
+  const { focusMainTabBar, languageService } = services;
+  const _tl = (key) => languageService ? languageService.t(key) : t('en', key);
+
+  // -------------------------------------------------------------------------
+  // Container
+
+  const box = blessed.box({
+    parent: screen,
+    top: 5,
+    left: 0,
+    width: '100%',
+    bottom: 2,
+    hidden: true,
+    style: { fg: COLORS.labelFg, bg: COLORS.contentBg },
+    border: { type: 'line' },
+    borderStyle: { fg: COLORS.borderFg },
+  });
+
+  // -------------------------------------------------------------------------
+  // Load README.md
+
+  function _loadReadme() {
+    // Package root — works whether installed globally (node_modules/.bin) or run from source
+    const pkgRoot = path.resolve(new URL(import.meta.url).pathname, '..', '..', '..', '..');
+    const candidates = [
+      path.resolve(process.cwd(), 'README.md'),
+      path.resolve(process.cwd(), 'readme.md'),
+      path.resolve(pkgRoot, 'README.md'),  // AgentVibes package README fallback
+    ];
+    for (const p of candidates) {
+      if (fs.existsSync(p)) {
+        try {
+          return fs.readFileSync(p, 'utf8');
+        } catch {
+          // Unreadable
+        }
+      }
+    }
+    return `# README\n\n${_tl('readmeNotFound')}`;
+  }
+
+  // -------------------------------------------------------------------------
+  // Scrollable content
+
+  const scrollBox = blessed.box({
+    parent: box,
+    top: 1,
+    left: 2,
+    width: '96%',
+    bottom: 4,
+    scrollable: true,
+    alwaysScroll: true,
+    tags: true,
+    keys: true,
+    vi: true,
+    mouse: true,
+    scrollbar: { ch: '│', style: { fg: COLORS.borderFg } },
+    content: '',
+    style: { fg: COLORS.labelFg, bg: COLORS.contentBg },
+  });
+
+  // Scroll indicator
+  const scrollIndicator = blessed.text({
+    parent: box,
+    bottom: 2,
+    right: 2,
+    content: '',
+    tags: true,
+    style: { fg: COLORS.quoteFg, bg: COLORS.contentBg },
+  });
+
+  // -------------------------------------------------------------------------
+  // Render
+
+  function refreshContent() {
+    const markdown = _loadReadme();
+    const rendered = renderMarkdown(markdown);
+    scrollBox.setContent(rendered);
+    scrollIndicator.setContent(`{#607d8b-fg}${_tl('readmeScrollMore')}{/#607d8b-fg}`);
+    screen.render();
+  }
+
+  // Scroll events update indicator
+  scrollBox.on('scroll', () => {
+    const atBottom = scrollBox.getScrollPerc() >= 99;
+    scrollIndicator.setContent(
+      atBottom ? '' : `{#607d8b-fg}${_tl('readmeScrollMore')}{/#607d8b-fg}`
+    );
+    screen.render();
+  });
+
+  // PgUp/PgDn
+  scrollBox.key(['pageup'], () => {
+    scrollBox.scroll(-10);
+    screen.render();
+  });
+  scrollBox.key(['pagedown'], () => {
+    scrollBox.scroll(10);
+    screen.render();
+  });
+
+  // [↑] at top of content → jump to main header tab bar
+  scrollBox.key(['up'], () => {
+    if (scrollBox.getScroll() === 0 && typeof focusMainTabBar === 'function') {
+      focusMainTabBar();
+    }
+  });
+
+  // Escape → return to header tab bar
+  scrollBox.key(['escape'], () => {
+    if (typeof focusMainTabBar === 'function') { focusMainTabBar(); screen.render(); }
+  });
+
+  // -------------------------------------------------------------------------
+  // Tab Component Contract
+
+  return {
+    box,
+
+    show() {
+      box.show();
+      refreshContent();
+      screen.render();
+    },
+
+    hide() {
+      box.hide();
+      screen.render();
+    },
+
+    onFocus() {
+      scrollBox.focus();
+      screen.render();
+    },
+
+    onBlur() {},
+
+    getFooterText() {
+      return _tl('readmeFooter');
+    },
+
+    getFooterColor() {
+      return COLORS.footerBg;
+    },
+  };
+}

package/src/console/tabs/receiver-tab.js

@@ -73,10 +73,10 @@ function _getNetworkInfo() {
   try {
     if (isWin) {
       // Use PowerShell to get local IP on Windows
-      localIp = execSync('powershell -NoProfile -Command "(Get-NetIPAddress -AddressFamily IPv4 | Where-Object { $_.InterfaceAlias -notmatch \'Loopback\' } | Select-Object -First 1).IPAddress"',
+      localIp = execSync('powershell -NoProfile -Command "(Get-NetIPAddress -AddressFamily IPv4 | Where-Object { $_.InterfaceAlias -notmatch \'Loopback\' } | Select-Object -First 1).IPAddress"', // NOSONAR
         { timeout: 5000, stdio: 'pipe' }).toString().trim();
     } else {
-      localIp = execSync("hostname -I 2>/dev/null | awk '{print $1}'", { timeout: 3000, stdio: 'pipe' }).toString().trim();
+      localIp = execSync("hostname -I 2>/dev/null | awk '{print $1}'", { timeout: 3000, stdio: 'pipe' }).toString().trim(); // NOSONAR
     }
   } catch { /* ignore */ }
   try {
@@ -86,7 +86,7 @@ function _getNetworkInfo() {
       const m = sshdConf.match(/^Port\s+(\d+)/m);
       if (m) sshPort = m[1];
     } else {
-      const portLine = execSync("grep -E '^Port ' /etc/ssh/sshd_config 2>/dev/null || echo 'Port 22'", { timeout: 3000, stdio: 'pipe' }).toString().trim();
+      const portLine = execSync("grep -E '^Port ' /etc/ssh/sshd_config 2>/dev/null || echo 'Port 22'", { timeout: 3000, stdio: 'pipe' }).toString().trim(); // NOSONAR
       const m = portLine.match(/^Port\s+(\d+)/);
       if (m) sshPort = m[1];
     }
@@ -130,7 +130,7 @@ function _detectSetupState() {
 
       // Check sshd running
       try {
-        const svc = execSync('powershell -NoProfile -Command "(Get-Service sshd -EA SilentlyContinue).Status"',
+        const svc = execSync('powershell -NoProfile -Command "(Get-Service sshd -EA SilentlyContinue).Status"', // NOSONAR
           { timeout: 5000, stdio: 'pipe' }).toString().trim();
         state.sshdRunning = svc === 'Running';
       } catch { /* sshd not installed */ }
@@ -143,13 +143,13 @@ function _detectSetupState() {
 
       // Check ffmpeg
       try {
-        execSync('where ffmpeg', { timeout: 3000, stdio: 'pipe' });
+        execSync('where ffmpeg', { timeout: 3000, stdio: 'pipe' }); // NOSONAR
         state.ffmpegInstalled = true;
       } catch { /* not found */ }
 
       // Check piper
       try {
-        execSync('where piper', { timeout: 3000, stdio: 'pipe' });
+        execSync('where piper', { timeout: 3000, stdio: 'pipe' }); // NOSONAR
         state.piperInstalled = true;
       } catch {
         const piperPath = path.join(process.env.LOCALAPPDATA || '', 'Programs', 'Piper', 'piper.exe');
@@ -165,10 +165,10 @@ function _detectSetupState() {
       // Linux/macOS detection (original)
       let receiverHome = '';
       try {
-        execSync('id agentvibes-receiver', { timeout: 3000, stdio: 'pipe' });
+        execSync('id agentvibes-receiver', { timeout: 3000, stdio: 'pipe' }); // NOSONAR
         state.receiverUserExists = true;
         try {
-          receiverHome = execSync("getent passwd agentvibes-receiver 2>/dev/null | cut -d: -f6 || echo '/home/agentvibes-receiver'",
+          receiverHome = execSync("getent passwd agentvibes-receiver 2>/dev/null | cut -d: -f6 || echo '/home/agentvibes-receiver'", // NOSONAR
             { timeout: 3000, stdio: 'pipe' }).toString().trim();
         } catch { receiverHome = '/home/agentvibes-receiver'; }
       } catch { /* user does not exist */ }
@@ -201,7 +201,7 @@ function _detectSetupState() {
       } catch { /* no read access */ }
 
       try {
-        const modules = execSync('pactl list modules short 2>/dev/null', { timeout: 3000, stdio: 'pipe' }).toString();
+        const modules = execSync('pactl list modules short 2>/dev/null', { timeout: 3000, stdio: 'pipe' }).toString(); // NOSONAR
         state.tcpModuleLoaded = modules.includes('module-native-protocol-tcp');
       } catch { /* pactl not available */ }
     }
@@ -1031,7 +1031,7 @@ export function createReceiverTab(screen, services) {
     screen.render();
 
     // Fire SSH in background — don't block the TUI
-    const child = spawn('ssh', ['-o', 'ConnectTimeout=5', sshHost, encoded], {
+    const child = spawn('ssh', ['-o', 'ConnectTimeout=5', sshHost, encoded], { // NOSONAR
       stdio: 'ignore',
       detached: true,
     });
@@ -1361,7 +1361,7 @@ export function createReceiverTab(screen, services) {
     }
     _refreshCachedInfo();
     const text = _buildDetailedInstructions(RECEIVER_ALIAS, RECEIVER_SCRIPT, _networkInfo)
-      .replace(/\{[^}]*\}/g, '')
+      .replace(/\{[^}]*\}/g, '') // NOSONAR
       // eslint-disable-next-line no-control-regex
       .replace(/\x1b\[[0-9;]*m/g, '');
     // Try platform-appropriate clipboard command
@@ -1374,7 +1374,7 @@ export function createReceiverTab(screen, services) {
         mkdirSync(AGENTVIBES_DIR, { recursive: true });
         writeFileSync(tmpFile, '\ufeff' + text, 'utf-8');
         const psCmd = `Get-Content -Path "${tmpFile.replace(/\\/g, '/')}" -Encoding UTF8 -Raw | Set-Clipboard; Remove-Item "${tmpFile.replace(/\\/g, '/')}"`;
-        const r = spawnSync('powershell', ['-NoProfile', '-Command', psCmd], { timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'] });
+        const r = spawnSync('powershell', ['-NoProfile', '-Command', psCmd], { timeout: 5000, stdio: ['pipe', 'pipe', 'pipe'] }); // NOSONAR
         if (r.status === 0) {
           _showFeedback('{green-fg}Copied to clipboard!{/green-fg}');
           copied = true;
@@ -1413,7 +1413,7 @@ export function createReceiverTab(screen, services) {
     // List available audio sinks and let user pick one
     let sinks;
     try {
-      const out = execSync('pactl --server=tcp:127.0.0.1:34567 list sinks short 2>/dev/null || pactl list sinks short 2>/dev/null', { timeout: 5000 }).toString().trim();
+      const out = execSync('pactl --server=tcp:127.0.0.1:34567 list sinks short 2>/dev/null || pactl list sinks short 2>/dev/null', { timeout: 5000 }).toString().trim(); // NOSONAR
       sinks = out.split('\n').filter(l => l.length > 0).map(line => {
         const parts = line.split('\t');
         return { id: parts[0], name: parts[1] || '', driver: parts[2] || '', state: parts[4] || '' };

package/src/console/tabs/settings-tab.js

@@ -645,7 +645,7 @@ export function createSettingsTab(screen, services) {
       if (_previewVoiceId === voiceId) { _killVP(); vpPreviewLine.setContent(''); _refreshVP(); return; }
       _killVP();
 
-      const phrase = SAMPLE_PHRASES[Math.floor(Math.random() * SAMPLE_PHRASES.length)];
+      const phrase = SAMPLE_PHRASES[Math.floor(Math.random() * SAMPLE_PHRASES.length)]; // NOSONAR
       const playTtsScript = path.join(_projectRoot, '.claude', 'hooks', 'play-tts.sh');
       if (!fs.existsSync(playTtsScript)) return;
 
@@ -653,7 +653,7 @@ export function createSettingsTab(screen, services) {
       const args = [playTtsScript, phrase, voiceId];
       if (remoteLlm) args.push('--llm', remoteLlm);
 
-      _previewProc = spawn('bash', args, {
+      _previewProc = spawn('bash', args, { // NOSONAR
         stdio: 'ignore',
         detached: true,
         env: _spawnEnv,