brakit 0.8.5 → 0.8.6

package/dist/dashboard.html

@@ -2141,8 +2141,8 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
       '<div class="ov-stat"><span class="ov-stat-value">' + state.fetches.length + '</span><span class="ov-stat-label">Fetches</span></div>';
     container.appendChild(summary);
 
-    var all = state.insights || [];
-    var open = all.filter(function(si) { return si.state === 'open' || si.state === 'fixing'; });
+    var all = state.issues || [];
+    var open = all.filter(function(si) { return si.state === 'open' || si.state === 'fixing' || si.state === 'regressed'; });
     var resolved = all.filter(function(si) { return si.state === 'resolved'; });
 
     if (open.length === 0 && resolved.length === 0) {
@@ -2174,31 +2174,35 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
 
       for (var i = 0; i < open.length; i++) {
         (function(si) {
-          var insight = si.insight;
+          var issue = si.issue;
           var card = document.createElement('div');
           card.className = 'ov-card';
 
-          var sevCfg = SEV[insight.severity];
+          var sevCfg = SEV[issue.severity];
           var iconCls = sevCfg.cls;
           var iconChar = sevCfg.icon;
 
           var expandHtml = '';
-          if (insight.detail) expandHtml += insight.detail;
-          if (insight.hint) expandHtml += '<div class="ov-card-hint">' + escHtml(insight.hint) + '</div>';
-          expandHtml += '<span class="ov-card-link" data-nav="' + insight.nav + '">View in ' + (NAV_LABELS[insight.nav] || insight.nav) + ' \u2192</span>';
+          if (issue.detail) expandHtml += issue.detail;
+          if (issue.hint) expandHtml += '<div class="ov-card-hint">' + escHtml(issue.hint) + '</div>';
+          if (issue.nav) expandHtml += '<span class="ov-card-link" data-nav="' + issue.nav + '">View in ' + (NAV_LABELS[issue.nav] || issue.nav) + ' \u2192</span>';
 
           var aiBadge = '';
           if (si.state === 'fixing' && si.aiStatus === 'fixed') {
             aiBadge = '<span class="sec-ai-badge sec-ai-fixing">AI fixed \u2014 awaiting verification</span>';
           } else if (si.aiStatus === 'wont_fix') {
             aiBadge = '<span class="sec-ai-badge sec-ai-wontfix">AI: won\u2019t fix</span>';
+          } else if (si.state === 'regressed') {
+            aiBadge = '<span class="sec-ai-badge sec-ai-fixing" style="background:var(--red)">regressed</span>';
           }
 
+          var occBadge = si.occurrences > 1 ? ' <span class="sec-item-count">' + si.occurrences + 'x</span>' : '';
+
           card.innerHTML =
             '<span class="ov-card-icon ' + iconCls + '">' + iconChar + '</span>' +
             '<div class="ov-card-body">' +
-              '<div class="ov-card-title">' + escHtml(insight.title) + aiBadge + '</div>' +
-              '<div class="ov-card-desc">' + insight.desc + '</div>' +
+              '<div class="ov-card-title">' + escHtml(issue.title) + occBadge + aiBadge + '</div>' +
+              '<div class="ov-card-desc">' + issue.desc + '</div>' +
               '<div class="ov-card-expand">' + expandHtml + '</div>' +
             '</div>' +
             '<span class="ov-card-arrow">\u2192</span>';
@@ -2244,14 +2248,14 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
       resolvedCards.className = 'ov-cards';
 
       for (var ri = 0; ri < resolved.length; ri++) {
-        var rInsight = resolved[ri].insight;
+        var rIssue = resolved[ri].issue;
         var rCard = document.createElement('div');
         rCard.className = 'ov-card ov-card-resolved';
         rCard.innerHTML =
           '<span class="ov-card-icon resolved">\u2713</span>' +
           '<div class="ov-card-body">' +
-            '<div class="ov-card-title" style="text-decoration:line-through;color:var(--text-muted)">' + escHtml(rInsight.title) + '</div>' +
-            '<div class="ov-card-desc">' + rInsight.desc + '</div>' +
+            '<div class="ov-card-title" style="text-decoration:line-through;color:var(--text-muted)">' + escHtml(rIssue.title) + '</div>' +
+            '<div class="ov-card-desc">' + rIssue.desc + '</div>' +
           '</div>';
         resolvedCards.appendChild(rCard);
       }
@@ -2267,30 +2271,12 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
     container.innerHTML = '';
     var SEV = { critical: { icon: '\u2717', cls: 'critical', sort: 0 }, warning: { icon: '\u26A0', cls: 'warning', sort: 1 }, info: { icon: '\u2139', cls: 'info', sort: 2 } };
 
-    var all = (state.findings || []).slice();
-    var insightsList = state.insights || [];
-    for (var ix = 0; ix < insightsList.length; ix++) {
-      var si = insightsList[ix];
-      all.push({
-        findingId: si.key,
-        state: si.state,
-        aiStatus: si.aiStatus,
-        aiNotes: si.aiNotes,
-        finding: {
-          severity: si.insight.severity,
-          rule: 'insight-' + si.insight.type,
-          title: si.insight.title,
-          desc: si.insight.desc,
-          hint: si.insight.hint,
-          endpoint: si.insight.nav || 'global',
-          count: 1
-        }
-      });
-    }
-    var open = all.filter(function(f) { return f.state === 'open' || f.state === 'fixing'; });
+    var all = (state.issues || []).slice();
+    var open = all.filter(function(f) { return f.state === 'open' || f.state === 'fixing' || f.state === 'regressed'; });
     var resolved = all.filter(function(f) { return f.state === 'resolved'; });
+    var stale = all.filter(function(f) { return f.state === 'stale'; });
 
-    if (open.length === 0 && resolved.length === 0) {
+    if (open.length === 0 && resolved.length === 0 && stale.length === 0) {
       var hasData = state.requests.length > 0 || state.logs.length > 0 || state.queries.length > 0;
       if (!hasData) {
         container.innerHTML = '<div class="empty"><span class="empty-title">Waiting for requests...</span><span class="empty-sub">Start using your app to see security findings here</span></div>';
@@ -2302,7 +2288,7 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
 
     var critCount = 0, warnCount = 0, infoCount = 0;
     for (var ci = 0; ci < open.length; ci++) {
-      var sev = open[ci].finding.severity;
+      var sev = open[ci].issue.severity;
       if (sev === 'critical') critCount++;
       else if (sev === 'info') infoCount++;
       else warnCount++;
@@ -2335,7 +2321,7 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
       var groupOrder = [];
       for (var gi = 0; gi < open.length; gi++) {
         var sf = open[gi];
-        var f = sf.finding;
+        var f = sf.issue;
         if (!groups[f.rule]) {
           groups[f.rule] = { rule: f.rule, title: f.title, severity: f.severity, hint: f.hint, items: [] };
           groupOrder.push(f.rule);
@@ -2378,7 +2364,7 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
         list.className = 'sec-items';
         for (var ii = 0; ii < group.items.length; ii++) {
           var sf2 = group.items[ii];
-          var item = sf2.finding;
+          var item = sf2.issue;
           var row = document.createElement('div');
           row.className = 'sec-item';
           var aiBadge = '';
@@ -2386,11 +2372,14 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
             aiBadge = '<span class="sec-ai-badge sec-ai-fixing">AI fixed \u2014 awaiting verification</span>';
           } else if (sf2.aiStatus === 'wont_fix') {
             aiBadge = '<span class="sec-ai-badge sec-ai-wontfix">AI: won\u2019t fix</span>';
+          } else if (sf2.state === 'regressed') {
+            aiBadge = '<span class="sec-ai-badge sec-ai-fixing" style="background:var(--red)">regressed</span>';
           }
           var aiNotes = sf2.aiNotes ? '<div class="sec-ai-notes">' + escHtml(sf2.aiNotes) + '</div>' : '';
+          var occBadge = sf2.occurrences > 1 ? '<span class="sec-item-count">' + sf2.occurrences + 'x</span>' : '';
           row.innerHTML =
             '<div class="sec-item-desc">' + escHtml(item.desc) + '</div>' +
-            (item.count > 1 ? '<span class="sec-item-count">' + item.count + 'x</span>' : '') +
+            occBadge +
             aiBadge + aiNotes;
           list.appendChild(row);
         }
@@ -2411,20 +2400,44 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
       resolvedItems.className = 'sec-items';
       for (var ri = 0; ri < resolved.length; ri++) {
         var rsf = resolved[ri];
-        var rf = rsf.finding;
+        var rf = rsf.issue;
         var rRow = document.createElement('div');
         rRow.className = 'sec-item sec-item-resolved';
         var verifiedBadge = rsf.aiStatus === 'fixed' ? '<span class="sec-ai-badge sec-ai-verified">Verified fix</span>' : '';
         var rNotes = rsf.aiNotes ? '<div class="sec-ai-notes">' + escHtml(rsf.aiNotes) + '</div>' : '';
         rRow.innerHTML =
           '<span class="sec-resolved-item-icon">\u2713</span>' +
-          '<div class="sec-item-desc">' + escHtml(rf.title) + ' \u2014 ' + escHtml(rf.endpoint) + '</div>' +
+          '<div class="sec-item-desc">' + escHtml(rf.title) + ' \u2014 ' + escHtml(rf.endpoint || 'global') + '</div>' +
           verifiedBadge + rNotes;
         resolvedItems.appendChild(rRow);
       }
       resolvedGroup.appendChild(resolvedItems);
       container.appendChild(resolvedGroup);
     }
+
+    if (stale.length > 0) {
+      var staleTitle = document.createElement('div');
+      staleTitle.className = 'sec-resolved-title';
+      staleTitle.innerHTML = '<span style="color:var(--text-muted)">\u23F8</span> Stale <span class="sec-resolved-count">' + stale.length + '</span>';
+      container.appendChild(staleTitle);
+
+      var staleGroup = document.createElement('div');
+      staleGroup.className = 'sec-group sec-group-resolved';
+      var staleItems = document.createElement('div');
+      staleItems.className = 'sec-items';
+      for (var sti = 0; sti < stale.length; sti++) {
+        var ssf = stale[sti];
+        var sf3 = ssf.issue;
+        var sRow = document.createElement('div');
+        sRow.className = 'sec-item sec-item-resolved';
+        sRow.innerHTML =
+          '<span style="color:var(--text-muted)">\u23F8</span>' +
+          '<div class="sec-item-desc" style="color:var(--text-muted)">' + escHtml(sf3.title) + ' \u2014 endpoint inactive</div>';
+        staleItems.appendChild(sRow);
+      }
+      staleGroup.appendChild(staleItems);
+      container.appendChild(staleGroup);
+    }
   }
   
   
@@ -2482,13 +2495,7 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
     try {
       var res3 = await fetch('/__brakit/api/insights');
       var data3 = await res3.json();
-      state.insights = data3.insights || [];
-    } catch(e) { console.warn('[brakit]', e); }
-
-    try {
-      var res4 = await fetch('/__brakit/api/security');
-      var data4 = await res4.json();
-      state.findings = data4.findings || [];
+      state.issues = data3.issues || [];
     } catch(e) { console.warn('[brakit]', e); }
 
     updateStats();
@@ -2527,19 +2534,13 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
     registerTelemetryListener('error_event', 'errors', prependErrorRow);
     registerTelemetryListener('query', 'queries', prependQueryRow);
 
-    events.addEventListener('insights', function(e) {
-      state.insights = JSON.parse(e.data);
+    events.addEventListener('issues', function(e) {
+      state.issues = JSON.parse(e.data);
       if (state.activeView === 'overview') renderOverview();
       if (state.activeView === 'security') renderSecurity();
       updateStats();
     });
 
-    events.addEventListener('security', function(e) {
-      state.findings = JSON.parse(e.data);
-      if (state.activeView === 'security') renderSecurity();
-      updateStats();
-    });
-
     window.addEventListener('beforeunload', function() {
       events.close();
       clearTimeout(reloadTimer);
@@ -2618,9 +2619,9 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
     if (queryCount) queryCount.textContent = state.queries.length;
     var secCount = document.getElementById('sidebar-count-security');
     if (secCount) {
-      var numFindings = (state.findings || []).filter(function(f) { return f.state !== 'resolved'; }).length;
-      secCount.textContent = numFindings;
-      secCount.style.display = numFindings > 0 ? '' : 'none';
+      var numIssues = (state.issues || []).filter(function(f) { return f.state !== 'resolved' && f.state !== 'stale'; }).length;
+      secCount.textContent = numIssues;
+      secCount.style.display = numIssues > 0 ? '' : 'none';
     }
   }
 
@@ -2638,7 +2639,7 @@ span.perf-breakdown-dot.perf-breakdown-app{background:var(--breakdown-app)}
     if (!confirm('This will clear all data including performance metrics history. Continue?')) return;
     await fetch('/__brakit/api/clear', {method: 'POST'});
     state.flows = []; state.requests = []; state.fetches = []; state.errors = []; state.logs = []; state.queries = [];
-    state.insights = []; state.findings = [];
+    state.issues = [];
     graphData = []; selectedEndpoint = '__all__'; timelineCache = {};
     renderFlows(); renderRequests(); renderFetches(); renderErrors(); renderLogs(); renderQueries(); renderGraph(); renderOverview(); renderSecurity(); updateStats();
     showToast('Cleared');

package/dist/mcp/server.js

@@ -51,7 +51,7 @@ var MAX_DISCOVERY_DEPTH = 5;
 var MAX_TIMELINE_EVENTS = 20;
 var MAX_RESOLVED_DISPLAY = 5;
 var ENRICHMENT_SEVERITY_FILTER = ["critical", "warning"];
-var MCP_SERVER_VERSION = "0.8.5";
+var MCP_SERVER_VERSION = "0.8.6";
 
 // src/mcp/client.ts
 var BrakitClient = class {
@@ -67,11 +67,11 @@ var BrakitClient = class {
     if (params?.offset) url.searchParams.set("offset", String(params.offset));
     return this.fetchJson(url);
   }
-  async getSecurityFindings() {
-    return this.fetchJson(`${this.baseUrl}${DASHBOARD_API_SECURITY}`);
-  }
-  async getInsights() {
-    return this.fetchJson(`${this.baseUrl}${DASHBOARD_API_INSIGHTS}`);
+  async getIssues(params) {
+    const url = new URL(`${this.baseUrl}${DASHBOARD_API_INSIGHTS}`);
+    if (params?.state) url.searchParams.set("state", params.state);
+    if (params?.category) url.searchParams.set("category", params.category);
+    return this.fetchJson(url);
   }
   async getQueries(requestId) {
     const url = new URL(`${this.baseUrl}${DASHBOARD_API_QUERIES}`);
@@ -145,7 +145,10 @@ import { readFile, readdir, stat } from "fs/promises";
 import { resolve, dirname } from "path";
 
 // src/constants/limits.ts
-var FINDING_ID_HASH_LENGTH = 16;
+var ISSUE_PRUNE_TTL_MS = 10 * 60 * 1e3;
+
+// src/constants/thresholds.ts
+var STALE_ISSUE_TTL_MS = 30 * 60 * 1e3;
 
 // src/constants/metrics.ts
 var PORT_FILE = ".brakit/port";
@@ -156,7 +159,7 @@ var PORT_MIN = 1;
 var PORT_MAX = 65535;
 
 // src/constants/lifecycle.ts
-var VALID_FINDING_STATES = /* @__PURE__ */ new Set(["open", "fixing", "resolved"]);
+var VALID_ISSUE_STATES = /* @__PURE__ */ new Set(["open", "fixing", "resolved", "stale", "regressed"]);
 var VALID_AI_FIX_STATUSES = /* @__PURE__ */ new Set(["fixed", "wont_fix"]);
 var VALID_SECURITY_SEVERITIES = /* @__PURE__ */ new Set(["critical", "warning"]);
 
@@ -241,13 +244,6 @@ async function waitForBrakit(cwd, timeoutMs = 1e4, pollMs = DISCOVERY_POLL_INTER
   );
 }
 
-// src/store/finding-id.ts
-import { createHash } from "crypto";
-function computeInsightId(type, endpoint, desc) {
-  const key = `${type}:${endpoint}:${desc}`;
-  return createHash("sha256").update(key).digest("hex").slice(0, FINDING_ID_HASH_LENGTH);
-}
-
 // src/utils/endpoint.ts
 function parseEndpointKey(endpoint) {
   const spaceIdx = endpoint.indexOf(" ");
@@ -259,14 +255,16 @@ function parseEndpointKey(endpoint) {
 
 // src/mcp/enrichment.ts
 async function enrichFindings(client) {
-  const [securityData, insightsData] = await Promise.all([
-    client.getSecurityFindings(),
-    client.getInsights()
-  ]);
+  const issuesData = await client.getIssues();
+  const issues = issuesData.issues.filter(
+    (si) => si.state !== "resolved" && si.state !== "stale"
+  );
   const contexts = await Promise.all(
-    securityData.findings.map(async (sf) => {
+    issues.map(async (si) => {
+      const endpoint = si.issue.endpoint;
+      if (!endpoint) return si.issue.detail ?? "";
       try {
-        const { path } = parseEndpointKey(sf.finding.endpoint);
+        const { path } = parseEndpointKey(endpoint);
         const reqData = await client.getRequests({ search: path, limit: 1 });
         if (reqData.requests.length > 0) {
           const req = reqData.requests[0];
@@ -280,38 +278,22 @@ async function enrichFindings(client) {
       } catch {
         return "(context unavailable)";
       }
-      return "";
+      return si.issue.detail ?? "";
     })
   );
-  const enriched = securityData.findings.map((sf, i) => {
-    const f = sf.finding;
-    return {
-      findingId: sf.findingId,
-      severity: f.severity,
-      title: f.title,
-      endpoint: f.endpoint,
-      description: f.desc,
-      hint: f.hint,
-      occurrences: f.count,
-      context: contexts[i],
-      aiStatus: sf.aiStatus,
-      aiNotes: sf.aiNotes
-    };
-  });
-  for (const si of insightsData.insights) {
-    if (si.state === "resolved") continue;
-    const i = si.insight;
-    if (!ENRICHMENT_SEVERITY_FILTER.includes(i.severity)) continue;
-    const endpoint = i.nav ?? "global";
+  const enriched = [];
+  for (let i = 0; i < issues.length; i++) {
+    const si = issues[i];
+    if (!ENRICHMENT_SEVERITY_FILTER.includes(si.issue.severity)) continue;
     enriched.push({
-      findingId: computeInsightId(i.type, endpoint, i.desc),
-      severity: i.severity,
-      title: i.title,
-      endpoint,
-      description: i.desc,
-      hint: i.hint,
-      occurrences: 1,
-      context: i.detail ?? "",
+      findingId: si.issueId,
+      severity: si.issue.severity,
+      title: si.issue.title,
+      endpoint: si.issue.endpoint ?? "global",
+      description: si.issue.desc,
+      hint: si.issue.hint,
+      occurrences: si.occurrences,
+      context: contexts[i],
       aiStatus: si.aiStatus,
       aiNotes: si.aiNotes
     });
@@ -370,8 +352,8 @@ async function buildRequestDetail(client, req) {
 function isNonEmptyString(val) {
   return typeof val === "string" && val.trim().length > 0;
 }
-function isValidFindingState(val) {
-  return typeof val === "string" && VALID_FINDING_STATES.has(val);
+function isValidIssueState(val) {
+  return typeof val === "string" && VALID_ISSUE_STATES.has(val);
 }
 function isValidAiFixStatus(val) {
   return typeof val === "string" && VALID_AI_FIX_STATUSES.has(val);
@@ -391,8 +373,8 @@ var getFindings = {
       },
       state: {
         type: "string",
-        enum: ["open", "fixing", "resolved"],
-        description: "Filter by finding state (from finding lifecycle)"
+        enum: ["open", "fixing", "resolved", "stale", "regressed"],
+        description: "Filter by issue state"
       }
     }
   },
@@ -402,17 +384,17 @@ var getFindings = {
     if (severity && !VALID_SECURITY_SEVERITIES.has(severity)) {
       return { content: [{ type: "text", text: `Invalid severity "${severity}". Use: critical, warning.` }], isError: true };
     }
-    if (state && !isValidFindingState(state)) {
-      return { content: [{ type: "text", text: `Invalid state "${state}". Use: open, fixing, resolved.` }], isError: true };
+    if (state && !isValidIssueState(state)) {
+      return { content: [{ type: "text", text: `Invalid state "${state}". Use: open, fixing, resolved, stale, regressed.` }], isError: true };
     }
     let findings = await enrichFindings(client);
     if (severity) {
       findings = findings.filter((f) => f.severity === severity);
     }
     if (state) {
-      const stateful = await client.getFindings(state);
-      const statefulIds = new Set(stateful.findings.map((f) => f.findingId));
-      findings = findings.filter((f) => statefulIds.has(f.findingId));
+      const issuesData = await client.getIssues({ state });
+      const issueIds = new Set(issuesData.issues.map((i) => i.issueId));
+      findings = findings.filter((f) => issueIds.has(f.findingId));
     }
     if (findings.length === 0) {
       return { content: [{ type: "text", text: "No findings detected. The application looks healthy." }] };
@@ -570,20 +552,21 @@ var verifyFix = {
     }
     if (findingId) {
       const data = await client.getFindings();
-      const finding = data.findings.find((f) => f.findingId === findingId);
+      const finding = data.findings.find((f) => f.issueId === findingId);
       if (!finding) {
         return {
           content: [{
             type: "text",
             text: `Finding ${findingId} not found. It may have already been resolved and cleaned up.`
-          }]
+          }],
+          isError: true
         };
       }
       if (finding.state === "resolved") {
         return {
           content: [{
             type: "text",
-            text: `RESOLVED: "${finding.finding.title}" on ${finding.finding.endpoint} is no longer detected. The fix worked.`
+            text: `RESOLVED: "${finding.issue.title}" on ${finding.issue.endpoint ?? "global"} is no longer detected. The fix worked.`
           }]
         };
       }
@@ -591,12 +574,12 @@ var verifyFix = {
         content: [{
           type: "text",
           text: [
-            `STILL PRESENT: "${finding.finding.title}" on ${finding.finding.endpoint}`,
+            `STILL PRESENT: "${finding.issue.title}" on ${finding.issue.endpoint ?? "global"}`,
             `  State: ${finding.state}`,
             `  Last seen: ${new Date(finding.lastSeenAt).toISOString()}`,
             `  Occurrences: ${finding.occurrences}`,
-            `  Issue: ${finding.finding.desc}`,
-            `  Hint: ${finding.finding.hint}`,
+            `  Issue: ${finding.issue.desc}`,
+            `  Hint: ${finding.issue.hint}`,
             "",
             "Make sure the user has triggered the endpoint again after the fix, so Brakit can re-analyze."
           ].join("\n")
@@ -606,7 +589,7 @@ var verifyFix = {
     if (endpoint) {
       const data = await client.getFindings();
       const endpointFindings = data.findings.filter(
-        (f) => f.finding.endpoint === endpoint || f.finding.endpoint.endsWith(` ${endpoint}`)
+        (f) => f.issue.endpoint === endpoint || f.issue.endpoint && f.issue.endpoint.endsWith(` ${endpoint}`)
       );
       if (endpointFindings.length === 0) {
         return {
@@ -616,7 +599,7 @@ var verifyFix = {
           }]
         };
       }
-      const open = endpointFindings.filter((f) => f.state === "open");
+      const open = endpointFindings.filter((f) => f.state === "open" || f.state === "regressed");
       const resolved = endpointFindings.filter((f) => f.state === "resolved");
       const lines = [
         `Endpoint: ${endpoint}`,
@@ -625,10 +608,10 @@ var verifyFix = {
         ""
       ];
       for (const f of open) {
-        lines.push(`  [${f.finding.severity}] ${f.finding.title}: ${f.finding.desc}`);
+        lines.push(`  [${f.issue.severity}] ${f.issue.title}: ${f.issue.desc}`);
       }
       for (const f of resolved) {
-        lines.push(`  [resolved] ${f.finding.title}`);
+        lines.push(`  [resolved] ${f.issue.title}`);
       }
       return { content: [{ type: "text", text: lines.join("\n") }] };
     }
@@ -636,7 +619,8 @@ var verifyFix = {
       content: [{
         type: "text",
         text: "Please provide either a finding_id or an endpoint to verify."
-      }]
+      }],
+      isError: true
     };
   }
 };
@@ -650,51 +634,52 @@ var getReport = {
     properties: {}
   },
   async handler(client, _args) {
-    const [findingsData, securityData, insightsData, metricsData] = await Promise.all([
-      client.getFindings(),
-      client.getSecurityFindings(),
-      client.getInsights(),
+    const [issuesData, metricsData] = await Promise.all([
+      client.getIssues(),
       client.getLiveMetrics()
     ]);
-    const findings = findingsData.findings;
-    const open = findings.filter((f) => f.state === "open");
-    const resolved = findings.filter((f) => f.state === "resolved");
-    const fixing = findings.filter((f) => f.state === "fixing");
-    const criticalOpen = open.filter((f) => f.finding.severity === "critical");
-    const warningOpen = open.filter((f) => f.finding.severity === "warning");
+    const issues = issuesData.issues;
+    const open = issues.filter((f) => f.state === "open" || f.state === "regressed");
+    const resolved = issues.filter((f) => f.state === "resolved");
+    const fixing = issues.filter((f) => f.state === "fixing");
+    const stale = issues.filter((f) => f.state === "stale");
+    const criticalOpen = open.filter((f) => f.issue.severity === "critical");
+    const warningOpen = open.filter((f) => f.issue.severity === "warning");
+    const securityIssues = issues.filter((f) => f.category === "security");
+    const perfIssues = issues.filter((f) => f.category === "performance");
     const totalRequests = metricsData.endpoints.reduce(
       (s, ep) => s + ep.summary.totalRequests,
       0
     );
-    const openInsightCount = insightsData.insights.filter((si) => si.state === "open").length;
     const lines = [
       "=== Brakit Report ===",
       "",
       `Endpoints observed: ${metricsData.endpoints.length}`,
       `Total requests captured: ${totalRequests}`,
-      `Active security rules: ${securityData.findings.length} finding(s)`,
-      `Performance insights: ${openInsightCount} open, ${insightsData.insights.length - openInsightCount} resolved`,
+      `Security issues: ${securityIssues.length}`,
+      `Performance issues: ${perfIssues.length}`,
       "",
-      "--- Finding Summary ---",
-      `Total: ${findings.length}`,
+      "--- Issue Summary ---",
+      `Total: ${issues.length}`,
       `  Open: ${open.length} (${criticalOpen.length} critical, ${warningOpen.length} warning)`,
       `  In progress: ${fixing.length}`,
-      `  Resolved: ${resolved.length}`
+      `  Resolved: ${resolved.length}`,
+      `  Stale: ${stale.length}`
     ];
     if (criticalOpen.length > 0) {
       lines.push("");
       lines.push("--- Critical Issues (fix first) ---");
       for (const f of criticalOpen) {
-        lines.push(`  [CRITICAL] ${f.finding.title} \u2014 ${f.finding.endpoint}`);
-        lines.push(`    ${f.finding.desc}`);
-        lines.push(`    Fix: ${f.finding.hint}`);
+        lines.push(`  [CRITICAL] ${f.issue.title} \u2014 ${f.issue.endpoint ?? "global"}`);
+        lines.push(`    ${f.issue.desc}`);
+        lines.push(`    Fix: ${f.issue.hint}`);
       }
     }
     if (resolved.length > 0) {
       lines.push("");
       lines.push("--- Recently Resolved ---");
       for (const f of resolved.slice(0, MAX_RESOLVED_DISPLAY)) {
-        lines.push(`  \u2713 ${f.finding.title} \u2014 ${f.finding.endpoint}`);
+        lines.push(`  \u2713 ${f.issue.title} \u2014 ${f.issue.endpoint ?? "global"}`);
       }
       if (resolved.length > MAX_RESOLVED_DISPLAY) {
         lines.push(`  ... and ${resolved.length - MAX_RESOLVED_DISPLAY} more`);