codebase-onboarder 0.5.0 → 0.7.0

package/public/js/analysisPanel.js

@@ -23,58 +23,57 @@
 //     both surfaces explain that instead of pretending.
 //   * Findings merge into the same shape the built-in scanner uses, with
 //     `source: 'builtin'|'external'` kept, so the attribution stays visible.
-
 import { escapeHtml } from './html.js';
 import { fetchToolsStatus, runAnalysisTools, streamToolInstall } from './api.js';
 import { state } from './state.js';
 import { engineRows, engineSummary } from './analysisReport.js';
 import { mergeFindingsIntoScan, summarizeSecurity } from '/shared/analyzer/security.js';
-
 // ---- the store -------------------------------------------------------------
-
 // Who wants to know when a run starts, finishes or fails. The inspector panel
 // and the Deep Analysis view both subscribe; neither polls.
 const listeners = new Set();
-
 export function subscribeAnalysis(listener) {
-  listeners.add(listener);
-  return () => listeners.delete(listener);
+    listeners.add(listener);
+    return () => listeners.delete(listener);
 }
-
 function notify() {
-  for (const listener of listeners) listener();
+    for (const listener of listeners)
+        listener();
 }
-
 // Which engines are installed. Asked once per repo and cached on the session —
 // detection spawns `which`, and the answer does not change mid-scan.
 export async function ensureToolsStatus(force = false) {
-  if (state.tools.running) return state.tools.status;
-  if (state.tools.status && !force) return state.tools.status;
-  if (state.tools.loading) return state.tools.status;
-  state.tools.loading = true;
-  notify();
-  try {
-    const status = await fetchToolsStatus();
-    if (status) state.tools.status = status;
-  } finally {
-    state.tools.loading = false;
+    if (state.tools.running)
+        return state.tools.status;
+    if (state.tools.status && !force)
+        return state.tools.status;
+    if (state.tools.loading)
+        return state.tools.status;
+    state.tools.loading = true;
     notify();
-  }
-  return state.tools.status;
+    try {
+        const status = await fetchToolsStatus();
+        if (status)
+            state.tools.status = status;
+    }
+    finally {
+        state.tools.loading = false;
+        notify();
+    }
+    return state.tools.status;
 }
-
 // The per-engine option values the Configure panels hold, shaped for the API:
 // only engines that have a form contribute, and every run gets the full set —
 // the server picks out what its `tools`/`kinds` filter selected.
 function collectToolOptions() {
-  const out = {};
-  const status = state.tools.status || {};
-  for (const id of Object.keys(status)) {
-    if ((status[id].options || []).length) out[id] = state.tools.options[id] || {};
-  }
-  return out;
+    const out = {};
+    const status = state.tools.status || {};
+    for (const id of Object.keys(status)) {
+        if ((status[id].options || []).length)
+            out[id] = state.tools.options[id] || {};
+    }
+    return out;
 }
-
 // Run the engines. `kinds` narrows by purpose (security / dead-code), `tools`
 // to named engines — the view offers all three scopes.
 //
@@ -83,181 +82,182 @@ function collectToolOptions() {
 // (it dedups on path+line+rule), so re-running a subset after a full run adds
 // nothing twice.
 export async function runDeepAnalysis(options = {}) {
-  if (state.tools.running) return null;
-  if (!state.scanId) return null;
-
-  state.tools.running = true;
-  state.tools.error = null;
-  notify();
-
-  try {
-    const report = await runAnalysisTools(state.scanId, { ...options, options: collectToolOptions() });
-    state.tools.report = report;
-    state.tools.findings = report.findings || [];
-    state.tools.merged = mergeFindingsIntoScan(state.scan, state.tools.findings);
-    state.security = summarizeSecurity(state.scan);
-    return report;
-  } catch (err) {
-    state.tools.error = err.message;
-    return null;
-  } finally {
-    state.tools.running = false;
+    if (state.tools.running)
+        return null;
+    if (!state.scanId)
+        return null;
+    state.tools.running = true;
+    state.tools.error = null;
     notify();
-  }
+    try {
+        const report = await runAnalysisTools(state.scanId, { ...options, options: collectToolOptions() });
+        state.tools.report = report;
+        state.tools.findings = report.findings || [];
+        state.tools.merged = mergeFindingsIntoScan(state.scan, state.tools.findings);
+        state.security = summarizeSecurity(state.scan);
+        return report;
+    }
+    catch (err) {
+        state.tools.error = err.message;
+        return null;
+    }
+    finally {
+        state.tools.running = false;
+        notify();
+    }
 }
-
 // Install a missing engine without leaving the GUI. The server streams log
 // lines, which collect on `state.tools.install[id]` so both surfaces can show
 // a live console; on success the status is re-fetched (the install cleared
 // the server's detection cache) and the card flips from "not installed" to
 // "ready" without a restart.
 export async function installEngine(id) {
-  const entry = state.tools.install[id];
-  if (entry && entry.running) return null;
-  state.tools.install[id] = { running: true, log: [], ok: null, error: null };
-  notify();
-
-  try {
-    const done = await streamToolInstall(id, (event) => {
-      const slot = state.tools.install[id];
-      if (event.type === 'log') slot.log.push(event.line);
-      if (slot.log.length > 400) slot.log.splice(0, slot.log.length - 400);
-      notify();
-    });
-    const slot = state.tools.install[id];
-    slot.running = false;
-    slot.ok = !!done.ok;
-    slot.error = done.ok ? null : (done.error || 'The install did not finish.');
-    if (done.ok) await ensureToolsStatus(true);
-    notify();
-    return done;
-  } catch (err) {
-    state.tools.install[id] = { running: false, log: state.tools.install[id].log, ok: false, error: err.message };
+    const entry = state.tools.install[id];
+    if (entry && entry.running)
+        return null;
+    state.tools.install[id] = { running: true, log: [], ok: null, error: null };
     notify();
-    return null;
-  }
+    try {
+        const done = await streamToolInstall(id, (event) => {
+            const slot = state.tools.install[id];
+            if (event.type === 'log')
+                slot.log.push(event.line);
+            if (slot.log.length > 400)
+                slot.log.splice(0, slot.log.length - 400);
+            notify();
+        });
+        const slot = state.tools.install[id];
+        slot.running = false;
+        slot.ok = !!done.ok;
+        slot.error = done.ok ? null : (done.error || 'The install did not finish.');
+        if (done.ok)
+            await ensureToolsStatus(true);
+        notify();
+        return done;
+    }
+    catch (err) {
+        state.tools.install[id] = { running: false, log: state.tools.install[id].log, ok: false, error: err.message };
+        notify();
+        return null;
+    }
 }
-
 // A sentence for whoever pressed the button. Kept out of the store proper —
 // toasting is the caller's business, and the store has no hooks.
 export function runOutcomeMessage(report) {
-  if (!report) return 'Deep analysis did not finish.';
-  if (!report.ranCount) {
-    return report.unavailable && report.unavailable.length
-      ? 'No engine is installed — see the list for what to install.'
-      : 'No engine managed to run.';
-  }
-  const n = (report.findings || []).length;
-  return `${report.ranCount} engine${report.ranCount === 1 ? '' : 's'} ran — ${n} finding${n === 1 ? '' : 's'} merged.`;
+    if (!report)
+        return 'Deep analysis did not finish.';
+    if (!report.ranCount) {
+        return report.unavailable && report.unavailable.length
+            ? 'No engine is installed — see the list for what to install.'
+            : 'No engine managed to run.';
+    }
+    const n = (report.findings || []).length;
+    return `${report.ranCount} engine${report.ranCount === 1 ? '' : 's'} ran — ${n} finding${n === 1 ? '' : 's'} merged.`;
 }
-
 // ---- the inspector panel ---------------------------------------------------
-
 let host = null;
-let hooks = { onToast: () => {}, onOpenFile: () => {} };
-
+let hooks = { onToast: (..._args) => { }, onOpenFile: (..._args) => { } };
 export function initAnalysisPanel(options) {
-  host = options.host;
-  hooks = { ...hooks, ...options };
-
-  host.addEventListener('click', (event) => {
-    const install = event.target.closest('[data-engine-install]');
-    if (install) {
-      installEngine(install.dataset.engineInstall).then((done) => {
-        if (done && done.ok) hooks.onToast(`${install.dataset.engineInstall} installed — it is ready to run.`);
-        else if (done && done.error) hooks.onToast(done.error);
-      });
-      return;
-    }
-    const run = event.target.closest('[data-run-tools]');
-    if (run) {
-      const scope = run.dataset.runTools;
-      runTools(scope ? { tools: [scope] } : {});
-      return;
-    }
-    const kind = event.target.closest('[data-run-kind]');
-    if (kind) runTools({ kinds: [kind.dataset.runKind] });
-  });
-
-  subscribeAnalysis(() => paint());
+    host = options.host;
+    hooks = { ...hooks, ...options };
+    host.addEventListener('click', (event) => {
+        const install = event.target.closest('[data-engine-install]');
+        if (install) {
+            installEngine(install.dataset.engineInstall).then((done) => {
+                if (done && done.ok)
+                    hooks.onToast(`${install.dataset.engineInstall} installed — it is ready to run.`);
+                else if (done && done.error)
+                    hooks.onToast(done.error);
+            });
+            return;
+        }
+        const run = event.target.closest('[data-run-tools]');
+        if (run) {
+            const scope = run.dataset.runTools;
+            runTools(scope ? { tools: [scope] } : {});
+            return;
+        }
+        const kind = event.target.closest('[data-run-kind]');
+        if (kind)
+            runTools({ kinds: [kind.dataset.runKind] });
+    });
+    subscribeAnalysis(() => paint());
 }
-
 async function runTools(options) {
-  const report = await runDeepAnalysis(options);
-  hooks.onToast(runOutcomeMessage(report));
+    const report = await runDeepAnalysis(options);
+    hooks.onToast(runOutcomeMessage(report));
 }
-
 // Renders into the security view's inspector. Also the place the "not a
 // server-side scan" case is explained, since that is a property of the repo.
 export function renderAnalysisPanel() {
-  if (!host) return;
-  if (!state.scanId) {
-    host.innerHTML = `<div class="tools-note">Deep analysis runs on a scanned folder or clone. A folder picked in the browser never leaves this tab, so there is nothing on the server for an external engine to read — the built-in scan is the whole story for this repo.</div>`;
-    return;
-  }
-  if (!state.tools.status && !state.tools.loading) void ensureToolsStatus();
-  paint();
+    if (!host)
+        return;
+    if (!state.scanId) {
+        host.innerHTML = `<div class="tools-note">Deep analysis runs on a scanned folder or clone. A folder picked in the browser never leaves this tab, so there is nothing on the server for an external engine to read — the built-in scan is the whole story for this repo.</div>`;
+        return;
+    }
+    if (!state.tools.status && !state.tools.loading)
+        void ensureToolsStatus();
+    paint();
 }
-
 // The panel is the summary; the Deep Analysis view is where you go to read the
 // whole report. So this stays tight: the engines, one button, and an outcome
 // line — no findings table here.
 function paint() {
-  if (!host) return;
-  const { status, report, running, loading, error } = state.tools;
-  const rows = engineRows(status, report);
-
-  const head = `<div class="tools-head">
+    if (!host)
+        return;
+    const { status, report, running, loading, error } = state.tools;
+    const rows = engineRows(status, report);
+    const head = `<div class="tools-head">
     <h4>Deep analysis <span class="tools-sub">external engines</span></h4>
     <button class="btn btn-ghost tools-run" data-run-tools ${running ? 'disabled' : ''}>
       ${running ? 'Running…' : 'Run deep analysis'}
     </button>
   </div>`;
-
-  let body = '';
-  if (error) body += `<div class="tools-err">${escapeHtml(error)}</div>`;
-
-  if (!rows.length) {
-    body += `<div class="tools-note">${loading ? 'Checking which engines are available…' : 'No engine table yet.'}</div>`;
-  } else {
-    body += '<ul class="tools-list">' + rows.map(engineCard).join('') + '</ul>';
-  }
-
-  const summary = engineSummary(report, rows);
-  if (report || rows.length) {
-    body += `<div class="tools-summary is-${escapeHtml(summary.tone)}">${escapeHtml(summary.text)}</div>`;
-  }
-
-  if (rows.some((r) => r.ran)) {
-    body += '<div class="tools-more">Every finding, with links to the file and line, is in the <b>Deep Analysis</b> tab.</div>';
-  }
-
-  host.innerHTML = head + body;
+    let body = '';
+    if (error)
+        body += `<div class="tools-err">${escapeHtml(error)}</div>`;
+    if (!rows.length) {
+        body += `<div class="tools-note">${loading ? 'Checking which engines are available…' : 'No engine table yet.'}</div>`;
+    }
+    else {
+        body += '<ul class="tools-list">' + rows.map(engineCard).join('') + '</ul>';
+    }
+    const summary = engineSummary(report, rows);
+    if (report || rows.length) {
+        body += `<div class="tools-summary is-${escapeHtml(summary.tone)}">${escapeHtml(summary.text)}</div>`;
+    }
+    if (rows.some((r) => r.ran)) {
+        body += '<div class="tools-more">Every finding, with links to the file and line, is in the <b>Deep Analysis</b> tab.</div>';
+    }
+    host.innerHTML = head + body;
 }
-
 // One engine card. The badge is the whole story at a glance: did it run, what
 // did it find, and if it could not run, why not. A missing engine gets an
 // Install button — the person stays in the GUI, and the log lands in the Deep
 // Analysis view's console.
 function engineCard(engine) {
-  const installing = state.tools.install[engine.id];
-  let badge;
-  if (installing && installing.running) badge = '<span class="tools-badge is-running">installing…</span>';
-  else if (!engine.available) badge = '<span class="tools-badge is-missing">not installed</span>';
-  else if (state.tools.running) badge = '<span class="tools-badge is-running">running…</span>';
-  else if (engine.ran) badge = `<span class="tools-badge is-ran">${engine.findings} · ${engine.ms}ms</span>`;
-  else if (engine.failed) badge = '<span class="tools-badge is-failed">failed</span>';
-  else badge = `<span class="tools-badge is-ready">ready${engine.how ? ' · ' + escapeHtml(engine.how) : ''}</span>`;
-
-  const note = !engine.available && engine.reason
-    ? `<span class="tools-reason">${escapeHtml(engine.reason)}</span>`
-    : (engine.failure ? `<span class="tools-reason">${escapeHtml(engine.failure)}</span>` : '');
-
-  const installBtn = !engine.available && engine.installable
-    ? `<button class="btn btn-ghost btn-sm" data-engine-install="${escapeHtml(engine.id)}" ${installing && installing.running ? 'disabled' : ''}>${installing && installing.running ? 'Installing…' : 'Install'}</button>`
-    : '';
-
-  return `<li class="tools-item${engine.available ? '' : ' is-missing'}">
+    const installing = state.tools.install[engine.id];
+    let badge;
+    if (installing && installing.running)
+        badge = '<span class="tools-badge is-running">installing…</span>';
+    else if (!engine.available)
+        badge = '<span class="tools-badge is-missing">not installed</span>';
+    else if (state.tools.running)
+        badge = '<span class="tools-badge is-running">running…</span>';
+    else if (engine.ran)
+        badge = `<span class="tools-badge is-ran">${engine.findings} · ${engine.ms}ms</span>`;
+    else if (engine.failed)
+        badge = '<span class="tools-badge is-failed">failed</span>';
+    else
+        badge = `<span class="tools-badge is-ready">ready${engine.how ? ' · ' + escapeHtml(engine.how) : ''}</span>`;
+    const note = !engine.available && engine.reason
+        ? `<span class="tools-reason">${escapeHtml(engine.reason)}</span>`
+        : (engine.failure ? `<span class="tools-reason">${escapeHtml(engine.failure)}</span>` : '');
+    const installBtn = !engine.available && engine.installable
+        ? `<button class="btn btn-ghost btn-sm" data-engine-install="${escapeHtml(engine.id)}" ${installing && installing.running ? 'disabled' : ''}>${installing && installing.running ? 'Installing…' : 'Install'}</button>`
+        : '';
+    return `<li class="tools-item${engine.available ? '' : ' is-missing'}">
     <div class="tools-item-main">
       <span class="tools-name">${escapeHtml(engine.label)}</span>
       ${badge}
@@ -267,4 +267,4 @@ function engineCard(engine) {
     ${note}
   </li>`;
 }
-
+//# sourceMappingURL=analysisPanel.js.map

package/public/js/analysisPanel.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"analysisPanel.js","sourceRoot":"","sources":["../../src/public/js/analysisPanel.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,EAAE;AACF,8EAA8E;AAC9E,yEAAyE;AACzE,8EAA8E;AAC9E,0DAA0D;AAC1D,EAAE;AACF,8EAA8E;AAC9E,6CAA6C;AAC7C,2EAA2E;AAC3E,gEAAgE;AAChE,uEAAuE;AACvE,+EAA+E;AAC/E,6CAA6C;AAC7C,EAAE;AACF,gCAAgC;AAChC,EAAE;AACF,gFAAgF;AAChF,gFAAgF;AAChF,qBAAqB;AACrB,6EAA6E;AAC7E,+EAA+E;AAC/E,wDAAwD;AACxD,yEAAyE;AACzE,6EAA6E;AAE7E,OAAO,EAAE,UAAU,EAAE,MAAM,WAAW,CAAC;AACvC,OAAO,EAAE,gBAAgB,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,UAAU,CAAC;AACjF,OAAO,EAAE,KAAK,EAAE,MAAM,YAAY,CAAC;AACnC,OAAO,EAAE,UAAU,EAAE,aAAa,EAAE,MAAM,qBAAqB,CAAC;AAChE,OAAO,EAAE,qBAAqB,EAAE,iBAAiB,EAAE,MAAM,8BAA8B,CAAC;AAExF,+EAA+E;AAE/E,8EAA8E;AAC9E,4DAA4D;AAC5D,MAAM,SAAS,GAAG,IAAI,GAAG,EAAc,CAAC;AAExC,MAAM,UAAU,iBAAiB,CAAC,QAAQ;IACxC,SAAS,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACxB,OAAO,GAAG,EAAE,CAAC,SAAS,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC1C,CAAC;AAED,SAAS,MAAM;IACb,KAAK,MAAM,QAAQ,IAAI,SAAS;QAAE,QAAQ,EAAE,CAAC;AAC/C,CAAC;AAED,+EAA+E;AAC/E,qEAAqE;AACrE,MAAM,CAAC,KAAK,UAAU,iBAAiB,CAAC,KAAK,GAAG,KAAK;IACnD,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;IACnD,IAAI,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;IAC5D,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;IACnD,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAC3B,MAAM,EAAE,CAAC;IACT,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,EAAE,CAAC;QACxC,IAAI,MAAM;YAAE,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;IAC1C,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;QAC5B,MAAM,EAAE,CAAC;IACX,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,CAAC,MAAM,CAAC;AAC5B,CAAC;AAED,8EAA8E;AAC9E,8EAA8E;AAC9E,iEAAiE;AACjE,SAAS,kBAAkB;IACzB,MAAM,GAAG,GAAwB,EAAE,CAAC;IACpC,MAAM,MAAM,GAAG,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,EAAE,CAAC;IACxC,KAAK,MAAM,EAAE,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;QACrC,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,OAAO,IAAI,EAAE,CAAC,CAAC,MAAM;YAAE,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED,8EAA8E;AAC9E,uDAAuD;AACvD,EAAE;AACF,8EAA8E;AAC9E,4EAA4E;AAC5E,8EAA8E;AAC9E,iBAAiB;AACjB,MAAM,CAAC,KAAK,UAAU,eAAe,CAAC,OAAO,GAAwB,EAAE;IACrE,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACrC,IAAI,CAAC,KAAK,CAAC,MAAM;QAAE,OAAO,IAAI,CAAC;IAE/B,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,IAAI,CAAC;IAC3B,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,IAAI,CAAC;IACzB,MAAM,EAAE,CAAC;IAET,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,gBAAgB,CAAC,KAAK,CAAC,MAAM,EAAE,EAAE,GAAG,OAAO,EAAE,OAAO,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;QACnG,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC;QAC5B,KAAK,CAAC,KAAK,CAAC,QAAQ,GAAG,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC;QAC7C,KAAK,CAAC,KAAK,CAAC,MAAM,GAAG,qBAAqB,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;QAC7E,KAAK,CAAC,QAAQ,GAAG,iBAAiB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC/C,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;YAAS,CAAC;QACT,KAAK,CAAC,KAAK,CAAC,OAAO,GAAG,KAAK,CAAC;QAC5B,MAAM,EAAE,CAAC;IACX,CAAC;AACH,CAAC;AAED,2EAA2E;AAC3E,8EAA8E;AAC9E,2EAA2E;AAC3E,2EAA2E;AAC3E,6BAA6B;AAC7B,MAAM,CAAC,KAAK,UAAU,aAAa,CAAC,EAAE;IACpC,MAAM,KAAK,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACtC,IAAI,KAAK,IAAI,KAAK,CAAC,OAAO;QAAE,OAAO,IAAI,CAAC;IACxC,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,EAAE,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;IAC5E,MAAM,EAAE,CAAC;IAET,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,MAAM,iBAAiB,CAAC,EAAE,EAAE,CAAC,KAAK,EAAE,EAAE;YACjD,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;YACrC,IAAI,KAAK,CAAC,IAAI,KAAK,KAAK;gBAAE,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;YACpD,IAAI,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG;gBAAE,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,MAAM,GAAG,GAAG,CAAC,CAAC;YACrE,MAAM,EAAE,CAAC;QACX,CAAC,CAAC,CAAC;QACH,MAAM,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QACrC,IAAI,CAAC,OAAO,GAAG,KAAK,CAAC;QACrB,IAAI,CAAC,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC;QACpB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,IAAI,6BAA6B,CAAC,CAAC;QAC5E,IAAI,IAAI,CAAC,EAAE;YAAE,MAAM,iBAAiB,CAAC,IAAI,CAAC,CAAC;QAC3C,MAAM,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC,GAAG,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,GAAG,CAAC,OAAO,EAAE,CAAC;QAC9G,MAAM,EAAE,CAAC;QACT,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,4EAA4E;AAC5E,iEAAiE;AACjE,MAAM,UAAU,iBAAiB,CAAC,MAAM;IACtC,IAAI,CAAC,MAAM;QAAE,OAAO,+BAA+B,CAAC;IACpD,IAAI,CAAC,MAAM,CAAC,QAAQ,EAAE,CAAC;QACrB,OAAO,MAAM,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,CAAC,MAAM;YACpD,CAAC,CAAC,4DAA4D;YAC9D,CAAC,CAAC,2BAA2B,CAAC;IAClC,CAAC;IACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,QAAQ,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC;IACzC,OAAO,GAAG,MAAM,CAAC,QAAQ,UAAU,MAAM,CAAC,QAAQ,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,UAAU,CAAC;AACxH,CAAC;AAED,+EAA+E;AAE/E,IAAI,IAAI,GAAG,IAAI,CAAC;AAChB,IAAI,KAAK,GAAG,EAAE,OAAO,EAAE,CAAC,GAAG,KAAgB,EAAE,EAAE,GAAE,CAAC,EAAE,UAAU,EAAE,CAAC,GAAG,KAAgB,EAAE,EAAE,GAAE,CAAC,EAAE,CAAC;AAE9F,MAAM,UAAU,iBAAiB,CAAC,OAAO;IACvC,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;IACpB,KAAK,GAAG,EAAE,GAAG,KAAK,EAAE,GAAG,OAAO,EAAE,CAAC;IAEjC,IAAI,CAAC,gBAAgB,CAAC,OAAO,EAAE,CAAC,KAAK,EAAE,EAAE;QACvC,MAAM,OAAO,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,uBAAuB,CAAC,CAAC;QAC9D,IAAI,OAAO,EAAE,CAAC;YACZ,aAAa,CAAC,OAAO,CAAC,OAAO,CAAC,aAAa,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE;gBACzD,IAAI,IAAI,IAAI,IAAI,CAAC,EAAE;oBAAE,KAAK,CAAC,OAAO,CAAC,GAAG,OAAO,CAAC,OAAO,CAAC,aAAa,kCAAkC,CAAC,CAAC;qBAClG,IAAI,IAAI,IAAI,IAAI,CAAC,KAAK;oBAAE,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;YACzD,CAAC,CAAC,CAAC;YACH,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC;QACrD,IAAI,GAAG,EAAE,CAAC;YACR,MAAM,KAAK,GAAG,GAAG,CAAC,OAAO,CAAC,QAAQ,CAAC;YACnC,QAAQ,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;YAC1C,OAAO;QACT,CAAC;QACD,MAAM,IAAI,GAAG,KAAK,CAAC,MAAM,CAAC,OAAO,CAAC,iBAAiB,CAAC,CAAC;QACrD,IAAI,IAAI;YAAE,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,IAAI,CAAC,OAAO,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IACxD,CAAC,CAAC,CAAC;IAEH,iBAAiB,CAAC,GAAG,EAAE,CAAC,KAAK,EAAE,CAAC,CAAC;AACnC,CAAC;AAED,KAAK,UAAU,QAAQ,CAAC,OAAO;IAC7B,MAAM,MAAM,GAAG,MAAM,eAAe,CAAC,OAAO,CAAC,CAAC;IAC9C,KAAK,CAAC,OAAO,CAAC,iBAAiB,CAAC,MAAM,CAAC,CAAC,CAAC;AAC3C,CAAC;AAED,wEAAwE;AACxE,6EAA6E;AAC7E,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,IAAI,CAAC,KAAK,CAAC,MAAM,EAAE,CAAC;QAClB,IAAI,CAAC,SAAS,GAAG,6PAA6P,CAAC;QAC/Q,OAAO;IACT,CAAC;IACD,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,OAAO;QAAE,KAAK,iBAAiB,EAAE,CAAC;IAC1E,KAAK,EAAE,CAAC;AACV,CAAC;AAED,+EAA+E;AAC/E,6EAA6E;AAC7E,iCAAiC;AACjC,SAAS,KAAK;IACZ,IAAI,CAAC,IAAI;QAAE,OAAO;IAClB,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,GAAG,KAAK,CAAC,KAAK,CAAC;IAChE,MAAM,IAAI,GAAG,UAAU,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAExC,MAAM,IAAI,GAAG;;6DAE8C,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE;QAC9E,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,mBAAmB;;SAEzC,CAAC;IAER,IAAI,IAAI,GAAG,EAAE,CAAC;IACd,IAAI,KAAK;QAAE,IAAI,IAAI,0BAA0B,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC;IAEvE,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC;QACjB,IAAI,IAAI,2BAA2B,OAAO,CAAC,CAAC,CAAC,uCAAuC,CAAC,CAAC,CAAC,sBAAsB,QAAQ,CAAC;IACxH,CAAC;SAAM,CAAC;QACN,IAAI,IAAI,yBAAyB,GAAG,IAAI,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,GAAG,OAAO,CAAC;IAC9E,CAAC;IAED,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,EAAE,IAAI,CAAC,CAAC;IAC5C,IAAI,MAAM,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QAC1B,IAAI,IAAI,gCAAgC,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,KAAK,UAAU,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC;IACxG,CAAC;IAED,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC;QAC5B,IAAI,IAAI,mHAAmH,CAAC;IAC9H,CAAC;IAED,IAAI,CAAC,SAAS,GAAG,IAAI,GAAG,IAAI,CAAC;AAC/B,CAAC;AAED,8EAA8E;AAC9E,0EAA0E;AAC1E,8EAA8E;AAC9E,2BAA2B;AAC3B,SAAS,UAAU,CAAC,MAAM;IACxB,MAAM,UAAU,GAAG,KAAK,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC;IACV,IAAI,UAAU,IAAI,UAAU,CAAC,OAAO;QAAE,KAAK,GAAG,yDAAyD,CAAC;SACnG,IAAI,CAAC,MAAM,CAAC,SAAS;QAAE,KAAK,GAAG,2DAA2D,CAAC;SAC3F,IAAI,KAAK,CAAC,KAAK,CAAC,OAAO;QAAE,KAAK,GAAG,sDAAsD,CAAC;SACxF,IAAI,MAAM,CAAC,GAAG;QAAE,KAAK,GAAG,oCAAoC,MAAM,CAAC,QAAQ,MAAM,MAAM,CAAC,EAAE,WAAW,CAAC;SACtG,IAAI,MAAM,CAAC,MAAM;QAAE,KAAK,GAAG,mDAAmD,CAAC;;QAC/E,KAAK,GAAG,2CAA2C,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,GAAG,UAAU,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,SAAS,CAAC;IAElH,MAAM,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,MAAM;QAC7C,CAAC,CAAC,8BAA8B,UAAU,CAAC,MAAM,CAAC,MAAM,CAAC,SAAS;QAClE,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,8BAA8B,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;IAE9F,MAAM,UAAU,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,MAAM,CAAC,WAAW;QACxD,CAAC,CAAC,6DAA6D,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC,KAAK,UAAU,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,UAAU,CAAC,CAAC,CAAC,EAAE,IAAI,UAAU,IAAI,UAAU,CAAC,OAAO,CAAC,CAAC,CAAC,aAAa,CAAC,CAAC,CAAC,SAAS,WAAW;QACtN,CAAC,CAAC,EAAE,CAAC;IAEP,OAAO,wBAAwB,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,aAAa;;iCAErC,UAAU,CAAC,MAAM,CAAC,KAAK,CAAC;QACjD,KAAK;QACL,UAAU;oCACkB,UAAU,CAAC,MAAM,CAAC,OAAO,CAAC;;MAExD,IAAI;QACF,CAAC;AACT,CAAC","sourcesContent":["// The deep-analysis store, and the panel the Security view draws from it.\n//\n// Onboarder's built-in scanner is a fast, zero-dependency first pass. This is\n// the second pass — it runs the real analyzers the machine has (Semgrep,\n// Gitleaks, Knip, Vulture, Depcheck) through the server, and merges what they\n// find into the scan so the security grade includes them.\n//\n// Two consumers now share one store: this file's panel in the Security view's\n// inspector, and the full Deep Analysis view\n// (`deepAnalysisView.js`). Putting the run in one place is what keeps them\n// from disagreeing — a run started from either surface lands in\n// `state.tools`, merges identically, and notifies both to repaint. The\n// alternative (each surface calling the API itself) is how you end up with two\n// buttons that produce two different grades.\n//\n// The contract, in three lines:\n//\n//   * Nothing is required. Both surfaces render with zero engines installed and\n//     say which to install — \"no deep analysis\" and \"no findings\" are never the\n//     same sentence.\n//   * Server-side scans only. A browser-picked folder never touches the disk\n//     from the server's point of view, so there is no root to point a tool at;\n//     both surfaces explain that instead of pretending.\n//   * Findings merge into the same shape the built-in scanner uses, with\n//     `source: 'builtin'|'external'` kept, so the attribution stays visible.\n\nimport { escapeHtml } from './html.js';\nimport { fetchToolsStatus, runAnalysisTools, streamToolInstall } from './api.js';\nimport { state } from './state.js';\nimport { engineRows, engineSummary } from './analysisReport.js';\nimport { mergeFindingsIntoScan, summarizeSecurity } from '/shared/analyzer/security.js';\n\n// ---- the store -------------------------------------------------------------\n\n// Who wants to know when a run starts, finishes or fails. The inspector panel\n// and the Deep Analysis view both subscribe; neither polls.\nconst listeners = new Set<() => void>();\n\nexport function subscribeAnalysis(listener) {\n  listeners.add(listener);\n  return () => listeners.delete(listener);\n}\n\nfunction notify() {\n  for (const listener of listeners) listener();\n}\n\n// Which engines are installed. Asked once per repo and cached on the session —\n// detection spawns `which`, and the answer does not change mid-scan.\nexport async function ensureToolsStatus(force = false) {\n  if (state.tools.running) return state.tools.status;\n  if (state.tools.status && !force) return state.tools.status;\n  if (state.tools.loading) return state.tools.status;\n  state.tools.loading = true;\n  notify();\n  try {\n    const status = await fetchToolsStatus();\n    if (status) state.tools.status = status;\n  } finally {\n    state.tools.loading = false;\n    notify();\n  }\n  return state.tools.status;\n}\n\n// The per-engine option values the Configure panels hold, shaped for the API:\n// only engines that have a form contribute, and every run gets the full set —\n// the server picks out what its `tools`/`kinds` filter selected.\nfunction collectToolOptions() {\n  const out: Record<string, any> = {};\n  const status = state.tools.status || {};\n  for (const id of Object.keys(status)) {\n    if ((status[id].options || []).length) out[id] = state.tools.options[id] || {};\n  }\n  return out;\n}\n\n// Run the engines. `kinds` narrows by purpose (security / dead-code), `tools`\n// to named engines — the view offers all three scopes.\n//\n// The merge happens here rather than in either caller, so the grade can never\n// depend on which button was pressed. `mergeFindingsIntoScan` is idempotent\n// (it dedups on path+line+rule), so re-running a subset after a full run adds\n// nothing twice.\nexport async function runDeepAnalysis(options: Record<string, any> = {}) {\n  if (state.tools.running) return null;\n  if (!state.scanId) return null;\n\n  state.tools.running = true;\n  state.tools.error = null;\n  notify();\n\n  try {\n    const report = await runAnalysisTools(state.scanId, { ...options, options: collectToolOptions() });\n    state.tools.report = report;\n    state.tools.findings = report.findings || [];\n    state.tools.merged = mergeFindingsIntoScan(state.scan, state.tools.findings);\n    state.security = summarizeSecurity(state.scan);\n    return report;\n  } catch (err) {\n    state.tools.error = err.message;\n    return null;\n  } finally {\n    state.tools.running = false;\n    notify();\n  }\n}\n\n// Install a missing engine without leaving the GUI. The server streams log\n// lines, which collect on `state.tools.install[id]` so both surfaces can show\n// a live console; on success the status is re-fetched (the install cleared\n// the server's detection cache) and the card flips from \"not installed\" to\n// \"ready\" without a restart.\nexport async function installEngine(id) {\n  const entry = state.tools.install[id];\n  if (entry && entry.running) return null;\n  state.tools.install[id] = { running: true, log: [], ok: null, error: null };\n  notify();\n\n  try {\n    const done = await streamToolInstall(id, (event) => {\n      const slot = state.tools.install[id];\n      if (event.type === 'log') slot.log.push(event.line);\n      if (slot.log.length > 400) slot.log.splice(0, slot.log.length - 400);\n      notify();\n    });\n    const slot = state.tools.install[id];\n    slot.running = false;\n    slot.ok = !!done.ok;\n    slot.error = done.ok ? null : (done.error || 'The install did not finish.');\n    if (done.ok) await ensureToolsStatus(true);\n    notify();\n    return done;\n  } catch (err) {\n    state.tools.install[id] = { running: false, log: state.tools.install[id].log, ok: false, error: err.message };\n    notify();\n    return null;\n  }\n}\n\n// A sentence for whoever pressed the button. Kept out of the store proper —\n// toasting is the caller's business, and the store has no hooks.\nexport function runOutcomeMessage(report) {\n  if (!report) return 'Deep analysis did not finish.';\n  if (!report.ranCount) {\n    return report.unavailable && report.unavailable.length\n      ? 'No engine is installed — see the list for what to install.'\n      : 'No engine managed to run.';\n  }\n  const n = (report.findings || []).length;\n  return `${report.ranCount} engine${report.ranCount === 1 ? '' : 's'} ran — ${n} finding${n === 1 ? '' : 's'} merged.`;\n}\n\n// ---- the inspector panel ---------------------------------------------------\n\nlet host = null;\nlet hooks = { onToast: (..._args: unknown[]) => {}, onOpenFile: (..._args: unknown[]) => {} };\n\nexport function initAnalysisPanel(options) {\n  host = options.host;\n  hooks = { ...hooks, ...options };\n\n  host.addEventListener('click', (event) => {\n    const install = event.target.closest('[data-engine-install]');\n    if (install) {\n      installEngine(install.dataset.engineInstall).then((done) => {\n        if (done && done.ok) hooks.onToast(`${install.dataset.engineInstall} installed — it is ready to run.`);\n        else if (done && done.error) hooks.onToast(done.error);\n      });\n      return;\n    }\n    const run = event.target.closest('[data-run-tools]');\n    if (run) {\n      const scope = run.dataset.runTools;\n      runTools(scope ? { tools: [scope] } : {});\n      return;\n    }\n    const kind = event.target.closest('[data-run-kind]');\n    if (kind) runTools({ kinds: [kind.dataset.runKind] });\n  });\n\n  subscribeAnalysis(() => paint());\n}\n\nasync function runTools(options) {\n  const report = await runDeepAnalysis(options);\n  hooks.onToast(runOutcomeMessage(report));\n}\n\n// Renders into the security view's inspector. Also the place the \"not a\n// server-side scan\" case is explained, since that is a property of the repo.\nexport function renderAnalysisPanel() {\n  if (!host) return;\n  if (!state.scanId) {\n    host.innerHTML = `<div class=\"tools-note\">Deep analysis runs on a scanned folder or clone. A folder picked in the browser never leaves this tab, so there is nothing on the server for an external engine to read — the built-in scan is the whole story for this repo.</div>`;\n    return;\n  }\n  if (!state.tools.status && !state.tools.loading) void ensureToolsStatus();\n  paint();\n}\n\n// The panel is the summary; the Deep Analysis view is where you go to read the\n// whole report. So this stays tight: the engines, one button, and an outcome\n// line — no findings table here.\nfunction paint() {\n  if (!host) return;\n  const { status, report, running, loading, error } = state.tools;\n  const rows = engineRows(status, report);\n\n  const head = `<div class=\"tools-head\">\n    <h4>Deep analysis <span class=\"tools-sub\">external engines</span></h4>\n    <button class=\"btn btn-ghost tools-run\" data-run-tools ${running ? 'disabled' : ''}>\n      ${running ? 'Running…' : 'Run deep analysis'}\n    </button>\n  </div>`;\n\n  let body = '';\n  if (error) body += `<div class=\"tools-err\">${escapeHtml(error)}</div>`;\n\n  if (!rows.length) {\n    body += `<div class=\"tools-note\">${loading ? 'Checking which engines are available…' : 'No engine table yet.'}</div>`;\n  } else {\n    body += '<ul class=\"tools-list\">' + rows.map(engineCard).join('') + '</ul>';\n  }\n\n  const summary = engineSummary(report, rows);\n  if (report || rows.length) {\n    body += `<div class=\"tools-summary is-${escapeHtml(summary.tone)}\">${escapeHtml(summary.text)}</div>`;\n  }\n\n  if (rows.some((r) => r.ran)) {\n    body += '<div class=\"tools-more\">Every finding, with links to the file and line, is in the <b>Deep Analysis</b> tab.</div>';\n  }\n\n  host.innerHTML = head + body;\n}\n\n// One engine card. The badge is the whole story at a glance: did it run, what\n// did it find, and if it could not run, why not. A missing engine gets an\n// Install button — the person stays in the GUI, and the log lands in the Deep\n// Analysis view's console.\nfunction engineCard(engine) {\n  const installing = state.tools.install[engine.id];\n  let badge;\n  if (installing && installing.running) badge = '<span class=\"tools-badge is-running\">installing…</span>';\n  else if (!engine.available) badge = '<span class=\"tools-badge is-missing\">not installed</span>';\n  else if (state.tools.running) badge = '<span class=\"tools-badge is-running\">running…</span>';\n  else if (engine.ran) badge = `<span class=\"tools-badge is-ran\">${engine.findings} · ${engine.ms}ms</span>`;\n  else if (engine.failed) badge = '<span class=\"tools-badge is-failed\">failed</span>';\n  else badge = `<span class=\"tools-badge is-ready\">ready${engine.how ? ' · ' + escapeHtml(engine.how) : ''}</span>`;\n\n  const note = !engine.available && engine.reason\n    ? `<span class=\"tools-reason\">${escapeHtml(engine.reason)}</span>`\n    : (engine.failure ? `<span class=\"tools-reason\">${escapeHtml(engine.failure)}</span>` : '');\n\n  const installBtn = !engine.available && engine.installable\n    ? `<button class=\"btn btn-ghost btn-sm\" data-engine-install=\"${escapeHtml(engine.id)}\" ${installing && installing.running ? 'disabled' : ''}>${installing && installing.running ? 'Installing…' : 'Install'}</button>`\n    : '';\n\n  return `<li class=\"tools-item${engine.available ? '' : ' is-missing'}\">\n    <div class=\"tools-item-main\">\n      <span class=\"tools-name\">${escapeHtml(engine.label)}</span>\n      ${badge}\n      ${installBtn}\n      <span class=\"tools-purpose\">${escapeHtml(engine.purpose)}</span>\n    </div>\n    ${note}\n  </li>`;\n}\n\n"]}

package/public/js/analysisReport.d.ts

@@ -0,0 +1,38 @@
+export declare const SEV_ORDER: string[];
+export declare function sevRank(severity: any): number;
+export declare const BUILTIN_TOOL = "built-in";
+export declare function findingsFromSecurity(security: any): any[];
+export declare function tabulate(rows: any): {
+    total: any;
+    bySeverity: Record<string, any>;
+    byTool: Record<string, any>;
+    byCategory: Record<string, any>;
+    external: any;
+    builtin: number;
+    critical: any;
+    high: any;
+    medium: any;
+    low: any;
+};
+export declare function filterFindings(rows: any, { severity, tool, q }?: Record<string, any>): any;
+export declare function engineRows(status: any, report: any): {
+    id: string;
+    label: any;
+    kind: any;
+    purpose: any;
+    available: boolean;
+    how: any;
+    reason: any;
+    options: any;
+    defaults: any;
+    installable: boolean;
+    ran: boolean;
+    failed: boolean;
+    findings: any;
+    ms: any;
+    failure: any;
+}[];
+export declare function engineSummary(report: any, rows: any): {
+    tone: string;
+    text: string;
+};